@jungjaehoon/mama-os 0.53.0 → 0.57.0

package/dist/cli/commands/start.js

@@ -1,2230 +0,0 @@
-"use strict";
-/**
- * mama start command — thin orchestrator.
- *
- * This file contains two functions:
- *   - startCommand()   — CLI entry point (config load, foreground/daemon decision)
- *   - runAgentLoop()   — linear orchestrator that calls all init functions in order
- *
- * All heavy lifting is delegated to modules in ../runtime/.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OPERATOR_REPORT_TOOL_POLICY = exports.TURN_KIND_BLOCKED_TOOLS = exports.SCHEDULED_TURN_BLOCKED_TOOLS = exports.TURN_KIND_REQUIRED_TOOLS = exports.ADMINISTRATION_TOOLS = exports.ONE_AGENT_TURN_POLICY = void 0;
-exports.workOrderActivityDetails = workOrderActivityDetails;
-exports.createCorePrincipalRegistry = createCorePrincipalRegistry;
-exports.createCorePrincipalResolver = createCorePrincipalResolver;
-exports.createRuntimeMemberScopeResolver = createRuntimeMemberScopeResolver;
-exports.createRuntimeMessageRouter = createRuntimeMessageRouter;
-exports.requireRuntimeBackend = requireRuntimeBackend;
-exports.serializeCodeActExecutionResult = serializeCodeActExecutionResult;
-exports.deriveCodeActToolPolicy = deriveCodeActToolPolicy;
-exports.resolveCodeActAgentPolicy = resolveCodeActAgentPolicy;
-exports.resolveCodeActRawConnectors = resolveCodeActRawConnectors;
-exports.causeEventIdsFromPayload = causeEventIdsFromPayload;
-exports.workOrderEnvelopeScope = workOrderEnvelopeScope;
-exports.temporalTaskBinding = temporalTaskBinding;
-exports.buildOperatorReportAgentPolicy = buildOperatorReportAgentPolicy;
-exports.isOutboundToolName = isOutboundToolName;
-exports.buildTurnAgentPolicy = buildTurnAgentPolicy;
-exports.bindCodeActParentModelRun = bindCodeActParentModelRun;
-exports.finalizeCodeActParentModelRun = finalizeCodeActParentModelRun;
-exports.failCodeActParentModelRun = failCodeActParentModelRun;
-exports.resolveOwnerEventTerminalReceipt = resolveOwnerEventTerminalReceipt;
-exports.startCommand = startCommand;
-exports.buildStartOnboardingOutput = buildStartOnboardingOutput;
-exports.runAgentLoop = runAgentLoop;
-const config_manager_js_1 = require("../config/config-manager.js");
-const pid_manager_js_1 = require("../utils/pid-manager.js");
-const stop_js_1 = require("./stop.js");
-const index_js_1 = require("../../auth/index.js");
-const gateway_tool_executor_js_1 = require("../../agent/gateway-tool-executor.js");
-const context_compile_service_js_1 = require("../../agent/context-compile-service.js");
-const read_js_1 = require("../../evidence/read.js");
-const tool_registry_js_1 = require("../../agent/tool-registry.js");
-const gateway_tool_catalog_js_1 = require("../../agent/gateway-tool-catalog.js");
-const tool_policy_js_1 = require("../../agent/code-act/tool-policy.js");
-const run_context_registry_js_1 = require("../../agent/code-act/run-context-registry.js");
-const index_js_2 = require("../../gateways/index.js");
-const member_effective_scope_js_1 = require("../../gateways/member-effective-scope.js");
-const telegram_report_context_store_js_1 = require("../../gateways/telegram-report-context-store.js");
-const report_delivery_coordinator_js_1 = require("../../operator/report-delivery-coordinator.js");
-const graph_api_js_1 = require("../../api/graph-api.js");
-const sqlite_js_1 = __importDefault(require("../../sqlite.js"));
-const node_fs_1 = require("node:fs");
-const node_path_1 = require("node:path");
-const minimatch_1 = require("minimatch");
-const untrusted_content_js_1 = require("../../utils/untrusted-content.js");
-const ui_command_handler_js_1 = require("../../api/ui-command-handler.js");
-const agent_store_js_1 = require("../../db/agent-store.js");
-const store_js_1 = require("../../validation/store.js");
-const session_service_js_1 = require("../../validation/session-service.js");
-const utilities_js_1 = require("../runtime/utilities.js");
-const agent_contract_js_1 = require("../../onboarding/agent-contract.js");
-const assess_live_js_1 = require("../../onboarding/assess-live.js");
-const daemon_js_1 = require("../runtime/daemon.js");
-const metrics_init_js_1 = require("../runtime/metrics-init.js");
-const mama_core_init_js_1 = require("../runtime/mama-core-init.js");
-const agent_loop_init_js_1 = require("../runtime/agent-loop-init.js");
-const gateway_init_js_1 = require("../runtime/gateway-init.js");
-const gateway_wiring_js_1 = require("../runtime/gateway-wiring.js");
-const scheduler_init_js_1 = require("../runtime/scheduler-init.js");
-const connector_init_js_1 = require("../runtime/connector-init.js");
-const api_server_init_js_1 = require("../runtime/api-server-init.js");
-const api_routes_init_js_1 = require("../runtime/api-routes-init.js");
-const server_start_js_1 = require("../runtime/server-start.js");
-const shutdown_js_1 = require("../runtime/shutdown.js");
-const envelope_bootstrap_js_1 = require("../runtime/envelope-bootstrap.js");
-const config_loader_js_1 = require("../../connectors/config-loader.js");
-const connector_bootstrap_js_1 = require("../runtime/connector-bootstrap.js");
-const message_router_config_js_1 = require("../runtime/message-router-config.js");
-const reactive_config_js_1 = require("../../envelope/reactive-config.js");
-const scope_context_js_1 = require("../../memory/scope-context.js");
-const types_js_1 = require("../config/types.js");
-const role_manager_js_1 = require("../../agent/role-manager.js");
-const node_crypto_1 = require("node:crypto");
-const debugLogger = __importStar(require("@jungjaehoon/mama-core/debug-logger"));
-const mama_core_1 = require("@jungjaehoon/mama-core");
-const mamaCore = __importStar(require("@jungjaehoon/mama-core"));
-const owner_runtime_js_1 = require("../../operator/owner-runtime.js");
-const subagent_stimulus_js_1 = require("../../operator/subagent-stimulus.js");
-const console_brief_js_1 = require("../../operator/console-brief.js");
-const task_ledger_js_1 = require("../../operator/task-ledger.js");
-const board_refresh_gate_js_1 = require("../../operator/board-refresh-gate.js");
-const owner_event_inbox_js_1 = require("../../operator/owner-event-inbox.js");
-const operational_issues_js_1 = require("../../observability/operational-issues.js");
-const repair_request_js_1 = require("../../operator/repair-request.js");
-const agent_loop_init_js_2 = require("../runtime/agent-loop-init.js");
-const workorder_publishers_js_1 = require("../../operator/workorder-publishers.js");
-const owner_action_effects_js_1 = require("../../operator/owner-action-effects.js");
-const owner_event_effects_js_1 = require("../../operator/owner-event-effects.js");
-const owner_event_loop_js_1 = require("../../operator/owner-event-loop.js");
-const board_pipeline_render_js_1 = require("../../operator/board-pipeline-render.js");
-const procedure_store_js_1 = require("../../operator/procedure-store.js");
-const procedure_activation_js_1 = require("../../operator/procedure-activation.js");
-const owner_event_prompt_js_1 = require("../../operator/owner-event-prompt.js");
-const thread_brief_memory_js_1 = require("../../operator/thread-brief-memory.js");
-/**
- * One in-process memory of the console brief already delivered on the owner:runtime
- * thread. Both owner-event batches and scheduled work orders submit to that one thread,
- * so a single memory keeps the standing brief there once instead of once per turn.
- * A daemon restart clears it, which is correct: a resumed thread is fresh for this.
- */
-const ownerBriefMemory = new thread_brief_memory_js_1.ThreadBriefMemory();
-/**
- * The owner-event loop builds a batch's prompt twice (once to size the run, once in
- * prepareContent, which is the text actually sent). The brief decision must be the same
- * both times, so it is decided once per batch. The loop is serial: one entry suffices.
- */
-let lastOwnerEventBriefDecision = null;
-const subagent_run_reconcile_js_1 = require("../../agent/subagent-run-reconcile.js");
-const owner_event_policy_js_1 = require("../../operator/owner-event-policy.js");
-Object.defineProperty(exports, "ADMINISTRATION_TOOLS", { enumerable: true, get: function () { return owner_event_policy_js_1.ADMINISTRATION_TOOLS; } });
-const leg_cadence_js_1 = require("../../operator/leg-cadence.js");
-const temporal_worker_js_1 = require("../../operator/temporal-worker.js");
-const temporal_runtime_js_1 = require("../../operator/temporal-runtime.js");
-const temporal_init_js_1 = require("../runtime/temporal-init.js");
-const code_act_executor_js_1 = require("../runtime/code-act-executor.js");
-const workorder_consumer_js_1 = require("../../operator/workorder-consumer.js");
-const owner_backfill_js_1 = require("../runtime/owner-backfill.js");
-const { DebugLogger } = debugLogger;
-const codeActLogger = new DebugLogger('CodeAct');
-const temporalLogger = new DebugLogger('TemporalReconcile');
-const principalRegistryLogger = new DebugLogger('PrincipalRegistry');
-function workOrderActivityDetails(event) {
-    return event.briefHash ? { brief_hash: event.briefHash } : undefined;
-}
-function createCorePrincipalRegistry(adapter) {
-    const { createPrincipalRepository } = mamaCore;
-    return createPrincipalRepository(adapter);
-}
-function createCorePrincipalResolver(adapter) {
-    const repository = createCorePrincipalRegistry(adapter);
-    return repository.resolveByExternal.bind(repository);
-}
-function createRuntimeMemberScopeResolver(repository, configuredGrant = read_js_1.liveBoundaryChannels) {
-    return ({ principal, current }) => {
-        if (!principal.principalId) {
-            throw new Error('Active member principal is missing its durable principal id');
-        }
-        return (0, member_effective_scope_js_1.resolveMemberEffectiveScope)({
-            principal,
-            current,
-            configuredGrant: configuredGrant(),
-            principalGrants: repository.listActiveGrants(principal.principalId),
-        });
-    };
-}
-function createRuntimeMessageRouter(input) {
-    return new index_js_2.MessageRouter(input.sessionStore, input.agentLoopClient, input.mamaApiClient, input.config, input.envelopeConfig, input.envelopeAuthority, {
-        ...input.dependencies,
-        memberScopeResolver: createRuntimeMemberScopeResolver(input.memberGrantReader, input.configuredGrant),
-    });
-}
-function requireRuntimeBackend(value) {
-    if (value === 'claude' || value === 'codex' || value === 'cline') {
-        return value;
-    }
-    throw new Error(`Unsupported agent backend: ${String(value)}`);
-}
-function serializeCodeActExecutionResult(result, toolCalls, hostToolExecutions = []) {
-    const hostToolsInvoked = [
-        ...new Set(hostToolExecutions.filter((execution) => execution.success).map((execution) => execution.name)),
-    ];
-    return {
-        success: result.success,
-        value: result.value,
-        logs: result.logs,
-        error: result.error?.message,
-        ...(result.error?.code
-            ? { terminalCode: result.error.code, retryable: false, abort: true }
-            : {}),
-        metrics: result.metrics,
-        toolCalls,
-        hostToolExecutions,
-        hostToolsInvoked,
-        ...(toolCalls.some((call) => (0, untrusted_content_js_1.isUntrustedExternalEvidenceTool)(call.name))
-            ? { untrustedExternalEvidence: true }
-            : {}),
-    };
-}
-const TRUTHY_ENV_VALUES = new Set(['1', 'true', 'yes', 'on']);
-const CODE_ACT_MUTATION_TOOLS = new Set([
-    'procedure_update',
-    'procedure_retire',
-    'procedure_observe',
-    'console_brief_update',
-    'mama_save',
-    'context_compile',
-    'mama_update',
-    'report_publish',
-    'wiki_publish',
-    'task_create',
-    'task_update',
-    'task_reclassify',
-    'task_temporal_reconcile',
-    'contract_no_update',
-]);
-function isTruthyEnvValue(value) {
-    return value !== undefined && TRUTHY_ENV_VALUES.has(value.trim().toLowerCase());
-}
-function uniqueToolList(values) {
-    return [...new Set(values.map((value) => value.trim()).filter(Boolean))];
-}
-function isWildcardToolList(values) {
-    return Boolean(values?.includes('*'));
-}
-function isGlobToolPattern(value) {
-    return /[*?[{]/.test(value);
-}
-function toolPatternAllows(pattern, toolName) {
-    return (0, minimatch_1.minimatch)(toolName, pattern);
-}
-function intersectAllowedToolPolicies(configuredAllowed, requestedAllowed) {
-    const configured = configuredAllowed !== undefined ? uniqueToolList(configuredAllowed) : undefined;
-    const requested = requestedAllowed !== undefined ? uniqueToolList(requestedAllowed) : undefined;
-    // Treat explicit empty arrays as deny-all so a caller cannot widen a fully
-    // restricted policy by sending a wildcard. Only an undefined (truly absent)
-    // policy falls back to the other side.
-    if (configured === undefined) {
-        return requested;
-    }
-    if (requested === undefined) {
-        return configured;
-    }
-    if (isWildcardToolList(configured)) {
-        return requested;
-    }
-    if (isWildcardToolList(requested)) {
-        return configured;
-    }
-    const narrowed = [];
-    for (const requestedPattern of requested) {
-        for (const configuredPattern of configured) {
-            if (requestedPattern === configuredPattern) {
-                narrowed.push(requestedPattern);
-            }
-            else if (!isGlobToolPattern(requestedPattern) &&
-                toolPatternAllows(configuredPattern, requestedPattern)) {
-                narrowed.push(requestedPattern);
-            }
-            else if (!isGlobToolPattern(configuredPattern) &&
-                toolPatternAllows(requestedPattern, configuredPattern)) {
-                narrowed.push(configuredPattern);
-            }
-        }
-    }
-    return uniqueToolList(narrowed);
-}
-function mergeBlockedToolPolicies(configuredBlocked, requestedBlocked) {
-    const merged = uniqueToolList([...(configuredBlocked ?? []), ...(requestedBlocked ?? [])]);
-    return merged.length > 0 ? merged : undefined;
-}
-function deriveCodeActToolPolicy(requestContext, agentConfig) {
-    const configuredAllowed = agentConfig?.gateway_tool_permissions?.allowed ?? agentConfig?.tool_permissions?.allowed;
-    const configuredBlocked = agentConfig?.gateway_tool_permissions?.blocked ?? agentConfig?.tool_permissions?.blocked;
-    const allowedTools = intersectAllowedToolPolicies(configuredAllowed, requestContext?.allowedTools);
-    const blockedTools = mergeBlockedToolPolicies(configuredBlocked, requestContext?.blockedTools);
-    return { allowedTools, blockedTools };
-}
-function resolveCodeActAgentPolicy(requestContext, agents, defaultAgentId) {
-    const agentId = requestContext?.agentId || defaultAgentId;
-    const agentConfig = agents?.[agentId];
-    if (!agentConfig) {
-        return { agentId, error: `Unknown Code-Act agent: ${agentId}` };
-    }
-    if (agentConfig.useCodeAct !== true) {
-        return { agentId, error: `Agent is not configured for Code-Act: ${agentId}` };
-    }
-    const policy = deriveCodeActToolPolicy(requestContext, agentConfig);
-    if (!policy.allowedTools || policy.allowedTools.length === 0) {
-        // Fail closed: an agent that resolves to no allowed tools must be rejected
-        // rather than silently widened to wildcard access.
-        return {
-            agentId,
-            agentConfig,
-            policy,
-            error: `Agent has no allowed Code-Act tools: ${agentId}`,
-        };
-    }
-    return {
-        agentId,
-        agentConfig,
-        policy,
-    };
-}
-function resolveCodeActRawConnectors(enabledConnectorNames) {
-    return [...new Set((enabledConnectorNames ?? []).map((name) => name.trim()).filter(Boolean))];
-}
-/**
- * READS ARE NOT GATED (2026-07-30, owner rules "observability over
- * restriction" + "answers read direct, gates guard writes only"). The
- * per-principal trello filter this replaced (#199) collided with the 07-28
- * code-act transport switch: owner chat's tool calls moved onto the
- * api-code-act envelope and its board questions died 100%
- * connector_out_of_scope, while the board drifted 3 weeks undetected
- * (7 delivered items shown overdue - operator lesson 07-30). Kagemusha's
- * model - reads free, actions receipted, sends confirmed - is the standard.
- * Every daemon envelope still grants allowed_destinations: [] (the real,
- * irreversible-side-effect gate) and every read lands in tool traces.
- */
-function uniqueMemoryScopes(scopes) {
-    const seen = new Set();
-    const unique = [];
-    for (const scope of scopes) {
-        const id = scope.id.trim();
-        if (!id) {
-            continue;
-        }
-        const key = `${scope.kind}:${id}`;
-        if (seen.has(key)) {
-            continue;
-        }
-        seen.add(key);
-        unique.push({ kind: scope.kind, id });
-    }
-    return unique;
-}
-/**
- * The connector and channel a temporal task is bound to, as plain values.
- *
- * The workorder payload carries only HASHED source identifiers (they are compared, never
- * read), so the binding has to come from the owner task row. Split on the FIRST colon:
- * `source_channel` is `<connector>:<channelId>` and channel ids contain colons of their own.
- *
- * Returns null when the task names no channel - which is not a failure, it is a task whose
- * reconcile may rest on no raw evidence at all.
- */
-/**
- * The scope a workorder envelope carries.
- *
- * Extracted so the binding can be asserted directly. Composed inline, the only way to test
- * it was to re-compose it in the test - which tests the copy, and a copy of a scope
- * construction is how this subsystem's authority drifts from what it claims.
- */
-/**
- * What the scheduled full report is INSTRUCTED to gather with.
- *
- * Exported so a test can hold it against the lane's tool grant. Every defect this session
- * found was a wiring defect - a tool granted and never instructed, a lane wired zero times,
- * a binder that never bound - and all of them live in this file and its neighbour, the two
- * directories the suite covers at a third. An instruction list that cannot be read by a
- * test is one nobody can check against the grant it depends on.
- */
-/**
- * The batch a work order carries, as the run's cause.
- *
- * Exported because it was an inline closure and therefore untestable, while being the ONE
- * hop that carries this branch's whole claim: the system knew the batch before the run
- * began, so the agent never has to restate it. Review pointed out that `causeEventIds`
- * appeared in exactly two test files and both called the ledger directly - a rename or a
- * payload-shape drift here would have returned attribution to 32% with the suite green.
- *
- * Only per-channel reconcile work orders carry `eventIds`; `board:full`, wiki and
- * memory-curation do not, and get an empty batch rather than an invented one.
- */
-function causeEventIdsFromPayload(payload) {
-    if (payload === null || typeof payload !== 'object')
-        return [];
-    const batch = payload.eventIds;
-    if (!Array.isArray(batch))
-        return [];
-    return batch.filter((id) => typeof id === 'string' && id.trim().length > 0);
-}
-function workOrderEnvelopeScope(input) {
-    // The trusted owner grant decides readable connectors. Work kind and temporal binding
-    // remain selection and receipt metadata; neither attenuates ordinary read authority.
-    const surface = exports.ONE_AGENT_TURN_POLICY.roleName;
-    const candidateConnectors = input.laneConnectors;
-    return {
-        project_refs: [{ kind: 'project', id: input.projectId }],
-        // A temporal run reads its task's connector or nothing. Every other lane keeps the
-        // connectors it was configured with.
-        raw_connectors: [
-            ...input.privateConnectorPolicy.projectRawConnectors(surface, candidateConnectors),
-        ],
-        memory_scopes: [
-            ...(0, scope_context_js_1.deriveMemoryScopes)({
-                source: 'operator',
-                channelId: `worker:${input.workKind}`,
-                projectId: input.projectId,
-            }),
-            // Identity scopes ONLY. Wider memory READ visibility (the grant mirror)
-            // is granted at the enforcement layer, never issued into the envelope:
-            // envelope channel scopes double as the raw-narrowing input AND as
-            // mama_save's write binding, so issuing the mirror here re-opened
-            // per-channel raw isolation and bound every saved memory to every
-            // granted channel (PR #217 review, blocking #2/#3).
-        ],
-        allowed_destinations: [],
-    };
-}
-function temporalTaskBinding(ledger, taskId) {
-    const task = ledger.getById(taskId);
-    const sourceChannel = task?.status === 'review'
-        ? (task.reviewAnchorSourceChannel ?? task.sourceChannel)
-        : task?.sourceChannel;
-    if (typeof sourceChannel !== 'string')
-        return null;
-    const separator = sourceChannel.indexOf(':');
-    if (separator <= 0 || separator === sourceChannel.length - 1)
-        return null;
-    return {
-        connector: sourceChannel.slice(0, separator),
-        channel: sourceChannel.slice(separator + 1),
-    };
-}
-function buildCodeActRole(policy) {
-    // Caller (resolveCodeActAgentPolicy) rejects empty/undefined allowedTools, so
-    // here we honor the resolved policy verbatim instead of widening to wildcard.
-    return {
-        allowedTools: policy.allowedTools ?? [],
-        blockedTools: policy.blockedTools,
-        allowedPaths: [],
-        systemControl: false,
-        sensitiveAccess: false,
-    };
-}
-/**
- * One MAMA: every scheduled turn runs as the SAME principal the owner console and the
- * event turn use. `roleName` is not a label - resolvePrivatePrincipalSurface switches on
- * it and falls through to 'multi-agent-generic' for anything it does not know, which
- * splits the advertised catalog from the execution envelope.
- */
-exports.ONE_AGENT_TURN_POLICY = { roleName: 'owner_console' };
-/**
- * Per-turn-kind artifact tools, projected by the HOST. These exist only for scheduled
- * turns and are deliberately absent from the chat grant: a chat turn never publishes a
- * board slot or a wiki page and never files a temporal receipt. They are the tools the
- * turn-kind section instructs the turn to use, so grant and instruction cannot drift.
- */
-exports.TURN_KIND_REQUIRED_TOOLS = {
-    board: [
-        'agent_notices',
-        'contract_no_update',
-        'report_publish',
-        'task_external_correlation',
-        'task_external_bind',
-        'task_lifecycle_reconcile',
-        // The board RECORRECTS rows it can no longer create: a connector item with no
-        // ledger row stays evidence, and an existing row gets a named disposition.
-        'task_reclassify',
-    ],
-    wiki: ['agent_notices', 'contract_no_update', 'wiki_read', 'wiki_publish'],
-    'memory-curation': ['agent_notices', 'contract_no_update'],
-    temporal: ['agent_notices', 'contract_no_update', 'task_temporal_reconcile'],
-    'self-check': ['agent_notices', 'contract_no_update', 'repair_request', 'issue_close'],
-};
-/**
- * Blocked on EVERY unattended turn: administration plus the workspace shell and file
- * writer. ONE list with the owner-event turn and native subagents
- * (UNATTENDED_BLOCKED_TOOLS, owner-event-policy.ts) - this used to equal
- * ADMINISTRATION_TOOLS alone, so a scheduled turn still held Bash/Write while both
- * CLAUDE.md and the role comment said it did not.
- */
-exports.SCHEDULED_TURN_BLOCKED_TOOLS = owner_event_policy_js_1.UNATTENDED_BLOCKED_TOOLS;
-/**
- * Per-turn-kind blocked lists, projected by the HOST. One principal and one brief do
- * not mean one grant for every trigger: an unattended board or wiki turn has no owner
- * in the loop, so it never holds a send, an upload, or a mutation outside its own
- * artifact. Each entry names the artifact it protects.
- */
-exports.TURN_KIND_BLOCKED_TOOLS = {
-    board: new Set(),
-    wiki: new Set(),
-    'memory-curation': new Set(),
-    'self-check': new Set(),
-    temporal: new Set(),
-};
-/** Progressive evidence primitives for a scheduled owner-runtime report turn. */
-exports.OPERATOR_REPORT_TOOL_POLICY = {
-    roleName: 'owner_console',
-    allowedTools: [
-        'code_act',
-        'task_list',
-        'changes_read',
-        'board_read',
-        'report_publish',
-        'audit_findings_read',
-        'schedule_upcoming',
-        'context_compile',
-        'mama_recall',
-        'mama_provenance',
-        'trello_search',
-        'trello_card',
-        'trello_kanban',
-    ],
-};
-function requirePrivateConnectorPolicy(privateConnectorPolicy) {
-    if (!privateConnectorPolicy) {
-        throw new Error('privateConnectorPolicy is required');
-    }
-    return privateConnectorPolicy;
-}
-function buildProjectedLaneRole(surface, allowedTools, privateConnectorPolicy) {
-    return privateConnectorPolicy.projectRole(surface, {
-        allowedTools: [...allowedTools],
-        blockedTools: [],
-        allowedPaths: [],
-        systemControl: false,
-        sensitiveAccess: false,
-    });
-}
-function buildProjectedLanePrompt(innerTools, surface, privateConnectorPolicy) {
-    return (0, gateway_tool_catalog_js_1.buildGatewayToolCatalog)({
-        surface,
-        allowedTools: innerTools,
-        privateConnectorPolicy,
-    }).prompt;
-}
-/**
- * Build the execution role for one progressive report stimulus. The durable
- * session catalog comes from the full owner role; this role narrows effects.
- */
-function buildOperatorReportAgentPolicy(model, backend, privateConnectorPolicy, ownerRole = types_js_1.DEFAULT_ROLES.definitions.owner_console) {
-    const requiredPrivatePolicy = requirePrivateConnectorPolicy(privateConnectorPolicy);
-    const blockedSet = new Set([
-        ...owner_event_policy_js_1.ADMINISTRATION_TOOLS,
-        ...exports.SCHEDULED_TURN_BLOCKED_TOOLS,
-        ...(ownerRole.blockedTools ?? []),
-    ]);
-    const projectedRole = requiredPrivatePolicy.projectRole('owner_console', {
-        ...ownerRole,
-        model,
-        allowedTools: uniqueToolList([
-            ...ownerRole.allowedTools,
-            ...exports.OPERATOR_REPORT_TOOL_POLICY.allowedTools,
-        ]).filter((tool) => !blockedSet.has(tool)),
-        blockedTools: [...blockedSet],
-        allowedPaths: [...(ownerRole.allowedPaths ?? [])],
-    });
-    const blockedTools = [...new Set([...(projectedRole.blockedTools ?? []), ...blockedSet])];
-    const innerTools = uniqueToolList(projectedRole.allowedTools).filter((tool) => tool !== 'code_act' && !blockedSet.has(tool));
-    const allowedTools = uniqueToolList(['code_act', ...innerTools]);
-    const agentContext = {
-        source: 'operator',
-        platform: 'cli',
-        roleName: exports.ONE_AGENT_TURN_POLICY.roleName,
-        role: { ...projectedRole, allowedTools, blockedTools, model },
-        session: {
-            sessionId: owner_runtime_js_1.OWNER_RUNTIME_SESSION_KEY,
-            channelId: 'report',
-            startedAt: new Date(),
-        },
-        capabilities: allowedTools,
-        limitations: blockedTools.map((tool) => `Cannot use ${tool}`),
-        tier: 1,
-        backend,
-    };
-    return {
-        agentContext,
-        gatewayToolsPrompt: buildProjectedLanePrompt(innerTools, 'owner_console', requiredPrivatePolicy),
-        briefProjectionPolicy: requiredPrivatePolicy,
-    };
-}
-/** Outbound effect by name: sends to a channel or uploads to a shared store. */
-function isOutboundToolName(tool) {
-    return /(^|_)(send|upload)(_|$)/.test(tool);
-}
-function buildTurnAgentPolicy(kind, model, backend, privateConnectorPolicy, rawConnectorScope, ownerRole = types_js_1.DEFAULT_ROLES.definitions.owner_console) {
-    const requiredPrivatePolicy = requirePrivateConnectorPolicy(privateConnectorPolicy);
-    if (!rawConnectorScope) {
-        throw new Error('rawConnectorScope is required');
-    }
-    const kindBlocked = exports.TURN_KIND_BLOCKED_TOOLS[kind];
-    if (!kindBlocked) {
-        throw new Error(`Missing turn-kind blocked list for '${kind}'`);
-    }
-    // Same downgrade the event turn applies: a run with no private binding advertises
-    // no private connector tools and gets the disabled brief projection.
-    const scopedSurface = exports.ONE_AGENT_TURN_POLICY.roleName;
-    const blockedSet = new Set([
-        ...owner_event_policy_js_1.ADMINISTRATION_TOOLS,
-        ...exports.SCHEDULED_TURN_BLOCKED_TOOLS,
-        ...kindBlocked,
-        ...(ownerRole.blockedTools ?? []),
-    ]);
-    const projectedRole = buildProjectedLaneRole(scopedSurface, uniqueToolList([...ownerRole.allowedTools, ...exports.TURN_KIND_REQUIRED_TOOLS[kind]]).filter((tool) => !blockedSet.has(tool)), requiredPrivatePolicy);
-    const blockedTools = [...new Set([...(projectedRole.blockedTools ?? []), ...blockedSet])];
-    // code_act is the transport, re-added at the front below; it is never an inner tool.
-    const innerTools = uniqueToolList(projectedRole.allowedTools).filter((tool) => !blockedSet.has(tool) && tool !== 'code_act');
-    const allowedTools = uniqueToolList(['code_act', ...innerTools]);
-    const agentContext = {
-        source: 'operator',
-        platform: 'cli',
-        roleName: exports.ONE_AGENT_TURN_POLICY.roleName,
-        role: { ...projectedRole, allowedTools, blockedTools, model },
-        session: {
-            sessionId: owner_runtime_js_1.OWNER_RUNTIME_SESSION_KEY,
-            channelId: `worker:${kind}`,
-            startedAt: new Date(),
-        },
-        capabilities: allowedTools,
-        limitations: blockedTools.map((tool) => `Cannot use ${tool}`),
-        tier: 1,
-        backend,
-    };
-    return {
-        agentContext,
-        gatewayToolsPrompt: buildProjectedLanePrompt(innerTools, scopedSurface, requiredPrivatePolicy),
-        briefProjectionPolicy: requiredPrivatePolicy,
-    };
-}
-function bindCodeActParentModelRun(adapter, executionContext, options) {
-    if (!executionContext?.envelope) {
-        return { executionContext, modelRunId: null };
-    }
-    const run = (0, mama_core_1.beginModelRunInAdapter)(adapter, {
-        agent_id: executionContext.agentId,
-        instance_id: executionContext.envelope.instance_id,
-        envelope_hash: executionContext.envelope.envelope_hash,
-        input_snapshot_ref: options.inputSnapshotRef,
-        input_refs: options.inputRefs,
-    });
-    return {
-        executionContext: {
-            ...executionContext,
-            modelRunId: run.model_run_id,
-        },
-        modelRunId: run.model_run_id,
-    };
-}
-function codeActErrorSummary(error) {
-    if (error instanceof Error) {
-        return error.message;
-    }
-    return String(error);
-}
-function resultErrorSummary(result) {
-    if (typeof result.error === 'string') {
-        return result.error;
-    }
-    return result.error?.message ?? 'Code-Act execution failed';
-}
-function finalizeCodeActParentModelRun(adapter, modelRunId, result) {
-    if (!modelRunId) {
-        return;
-    }
-    if (result.success === false) {
-        (0, mama_core_1.failModelRunInAdapter)(adapter, modelRunId, resultErrorSummary(result));
-        return;
-    }
-    (0, mama_core_1.commitModelRunInAdapter)(adapter, modelRunId, 'code-act completed');
-}
-function failCodeActParentModelRun(adapter, modelRunId, error) {
-    if (!modelRunId) {
-        return;
-    }
-    (0, mama_core_1.failModelRunInAdapter)(adapter, modelRunId, codeActErrorSummary(error));
-}
-function resolveOwnerEventTerminalReceipt(batch, deps) {
-    // Crash-recovery mirror of classifyOwnerEventOutcome. A ledger write that
-    // named this batch's events as its cause (evidence_effects) or a confirmed
-    // deliverable (drive_upload) is a durable outcome even if the run died after
-    // it - without this, a task created before a transport error is created again
-    // on retry. A confirmed telegram_send alone is not a receipt, and the effect
-    // ledger's (batch, action_key) idempotency makes that retry safe from a second
-    // send. A persisted Board acceptance is no longer a receipt.
-    const ledgerEffects = deps.taskLedger.effectsCausedBy(batch.eventIds, batch.createdAt);
-    const confirmedEffects = deps.ownerEventEffectLedger
-        .confirmedKinds(batch.id)
-        .filter((kind) => kind !== 'telegram_send');
-    const genericEffects = deps.ownerActionEffectLedger?.confirmedKindsForOccurrence(`owner-event:${batch.id}`) ?? [];
-    const durable = [...new Set([...ledgerEffects, ...confirmedEffects, ...genericEffects])];
-    if (durable.length > 0) {
-        return { status: 'acted', tools: durable, ownerDecisionRequested: false };
-    }
-    if (deps.taskLedger.maxNoUpdateId(`owner-event:${batch.id}`) > 0) {
-        return { status: 'no_update', tools: [] };
-    }
-    return null;
-}
-/**
- * Execute start command
- */
-async function startCommand(options = {}) {
-    console.log('\n🚀 Starting MAMA Standalone\n');
-    // Check if already running
-    const runningInfo = await (0, pid_manager_js_1.isDaemonRunning)();
-    if (runningInfo) {
-        console.log(`⚠️  MAMA is already running. (PID: ${runningInfo.pid})`);
-        console.log('   To stop it: mama stop\n');
-        process.exit(1);
-    }
-    // Clean up ALL stale mama daemon processes (not just port holders).
-    // Zombie daemons may stay alive via Slack Socket Mode without holding any port.
-    await (0, stop_js_1.killAllMamaWatchdogs)();
-    await (0, stop_js_1.killAllMamaDaemons)();
-    await (0, stop_js_1.killProcessesOnPorts)([3847, 3849]);
-    // Check config exists
-    if (!(0, config_manager_js_1.configExists)()) {
-        console.log('⚠️  Config file not found.');
-        console.log('   Initialize first: mama init\n');
-        process.exit(1);
-    }
-    // Load config
-    let config;
-    try {
-        config = await (0, config_manager_js_1.initConfig)();
-    }
-    catch (error) {
-        console.error(`Failed to load config: ${error instanceof Error ? error.message : String(error)}\n`);
-        process.exit(1);
-    }
-    const backend = requireRuntimeBackend(config.agent.backend);
-    process.env.MAMA_BACKEND = backend;
-    if (backend === 'codex') {
-        console.log('✓ Codex app-server backend (authentication handled by Codex login)');
-    }
-    else if (backend === 'cline') {
-        console.log('✓ Cline CLI backend (authentication handled by Cline)');
-    }
-    else {
-        console.log('✓ Claude CLI mode (OAuth token not needed)');
-    }
-    if (options.foreground) {
-        // Run in foreground
-        console.log('Starting agent loop (foreground)... ✓\n');
-        console.log('MAMA is running in foreground.');
-        console.log('Press Ctrl+C to stop.\n');
-        await (0, pid_manager_js_1.writePid)(process.pid);
-        await printStartOnboardingStatus();
-        await runAgentLoop(config);
-    }
-    else {
-        // Run as daemon
-        process.stdout.write('Starting agent loop... ');
-        try {
-            const daemonPid = await (0, daemon_js_1.startDaemon)();
-            console.log('✓');
-            console.log(`\nMAMA is running in the background.`);
-            console.log(`PID: ${daemonPid}\n`);
-            console.log('Check status: mama status');
-            console.log('Stop: mama stop\n');
-            await printStartOnboardingStatus();
-        }
-        catch (error) {
-            console.log('❌');
-            console.error(`\nFailed to start daemon: ${error instanceof Error ? error.message : String(error)}\n`);
-            process.exit(1);
-        }
-    }
-}
-function buildStartOnboardingOutput(state) {
-    return state.complete ? null : (0, agent_contract_js_1.renderContractStatus)(state);
-}
-async function printStartOnboardingStatus() {
-    try {
-        const output = buildStartOnboardingOutput((0, agent_contract_js_1.assessOnboarding)(await (0, assess_live_js_1.collectAssessDeps)()));
-        if (output) {
-            process.stdout.write(`${output}\n\n`);
-        }
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        process.stdout.write(`Onboarding: unavailable\n  ${message}\n\n`);
-    }
-}
-/**
- * Run agent loop (for foreground and daemon mode).
- *
- * This is the linear orchestrator — each phase calls one or more
- * init functions and threads their results into the next phase.
- *
- * Phase  1: Foundation (config, db, oauth, metrics)
- * Phase  2: Session + Tool + Agent Loop
- * Phase  3: MAMA Core API
- * Phase  4: MessageRouter
- * Phase  5: Graph Handler + Embedding
- * Phase  6: Cron Scheduler
- * Phase  7: Gateways
- * Phase  8: Gateway Wiring
- * Phase  9: Heartbeat + Connectors
- * Phase 10: API Server + Routes
- * Phase 11: Server Start + Shutdown
- */
-async function runAgentLoop(config, options = {}) {
-    // ── Phase 1: Foundation ───────────────────────────────────────────────────
-    // Fails the boot on the retired MAMA_STAGE2_WORKORDERS legacy pin
-    // (workorders are the only run path since v0.28.0).
-    const temporalStartup = (0, temporal_runtime_js_1.preflightTemporalStartup)(process.env);
-    const runtimeBackend = requireRuntimeBackend(config.agent.backend);
-    const { connectorConfigLoadResult, privateConnectorPolicy } = (0, connector_bootstrap_js_1.resolveRuntimeConnectorBootstrap)((0, config_loader_js_1.loadConnectorConfig)());
-    // ONE owner role for every model turn: chat, event, and scheduled.
-    const ownerRole = (0, owner_runtime_js_1.projectOwnerRuntimeRole)(config.roles?.definitions.owner_console ?? types_js_1.DEFAULT_ROLES.definitions.owner_console);
-    const temporalPolicy = temporalStartup.temporalFlag === 'on'
-        ? buildTurnAgentPolicy('temporal', config.agent.model, runtimeBackend, privateConnectorPolicy, [], ownerRole)
-        : null;
-    const temporalEffectiveTools = temporalPolicy
-        ? (0, tool_policy_js_1.projectCodeActToolPolicy)({
-            tier: (0, tool_policy_js_1.requireCodeActTier)(temporalPolicy.agentContext.tier),
-            role: temporalPolicy.agentContext.role,
-        }).names
-        : [];
-    const temporalAvailableTools = tool_registry_js_1.ToolRegistry.getValidToolNames();
-    if (temporalStartup.temporalFlag === 'on' &&
-        (!temporalEffectiveTools.includes('task_temporal_reconcile') ||
-            !temporalAvailableTools.includes('task_temporal_reconcile'))) {
-        throw new Error('temporal reconciliation tool policy or transport registry is incompatible');
-    }
-    const startupBackend = runtimeBackend;
-    const usesCodexBackend = startupBackend === 'codex' || (0, utilities_js_1.hasCodexBackendConfigured)(config);
-    if (usesCodexBackend) {
-        const codexCommand = (0, utilities_js_1.resolveCodexCommandForStartup)();
-        process.env.MAMA_CODEX_COMMAND = codexCommand;
-        console.log(`✓ Codex CLI backend (command: ${codexCommand})`);
-    }
-    const usesClineBackend = startupBackend === 'cline' || (0, utilities_js_1.hasClineBackendConfigured)(config);
-    if (usesClineBackend) {
-        const clineCommand = (0, utilities_js_1.resolveClineCommandForStartup)(config.agent.cline_command);
-        process.env.MAMA_CLINE_COMMAND = clineCommand;
-        console.log(`✓ Cline CLI backend (command: ${clineCommand})`);
-    }
-    if (startupBackend === 'claude') {
-        console.log('✓ Claude CLI mode (ToS compliance)');
-    }
-    // Provision default persona templates and multi-agent config on first start
-    try {
-        await (0, config_manager_js_1.provisionDefaults)();
-    }
-    catch (error) {
-        console.warn(`[Provision] Warning: ${error instanceof Error ? error.message : String(error)}`);
-    }
-    const oauthManager = new index_js_1.OAuthManager();
-    // Initialize database for session storage
-    const dbPath = (0, config_manager_js_1.expandPath)(config.database.path).replace('mama-memory.db', 'mama-sessions.db');
-    const db = new sqlite_js_1.default(dbPath);
-    // Initialize metrics store, health score service, and health check service
-    const { metricsStore, metricsCleanup, healthService, healthCheckService, metricsInterval } = await (0, metrics_init_js_1.initMetrics)(config, db, utilities_js_1.EMBEDDING_PORT);
-    // ── Phase 2: Session + Tool + Agent Loop ──────────────────────────────────
-    const sessionStore = new index_js_2.SessionStore(db);
-    // TG-05/TG-06: durable report delivery ledger. Conversation continuity is
-    // owned by the standing owner runtime, so this store never injects reports.
-    const reportContextStore = new telegram_report_context_store_js_1.TelegramReportContextStore(db);
-    // Establish one canonical private workspace for gateway files, OCR, Drive,
-    // Telegram media, and the persona runtime. An explicit environment override
-    // remains authoritative; otherwise honor config.workspace.path.
-    const workspaceRoot = (0, config_manager_js_1.expandPath)(process.env.MAMA_WORKSPACE || config.workspace?.path || '~/.mama/workspace');
-    process.env.MAMA_WORKSPACE = workspaceRoot;
-    // Initialize channel history with SQLite persistence (Sprint 3 F5)
-    (0, index_js_2.initChannelHistory)(db);
-    const envelopeBootstrap = (0, envelope_bootstrap_js_1.buildRuntimeEnvelopeBootstrap)(db, config, process.env, connectorConfigLoadResult);
-    const mamaDbPath = (0, config_manager_js_1.expandPath)(config.database.path);
-    const toolExecutor = new gateway_tool_executor_js_1.GatewayToolExecutor({
-        mamaDbPath: mamaDbPath,
-        sessionStore: sessionStore,
-        rolesConfig: config.roles, // Pass roles from config.yaml
-        envelopeIssuanceMode: envelopeBootstrap.metadata.issuance,
-        metricsStore,
-        privateConnectorPolicy,
-    });
-    process.env.MAMA_BACKEND = runtimeBackend;
-    const agentLoopBackend = runtimeBackend;
-    // Initialize main agent loop + client (reasoning state is closure-scoped inside)
-    const { agentLoop, agentLoopClient } = (0, agent_loop_init_js_1.initMainAgentLoop)(config, oauthManager, db, metricsStore, agentLoopBackend, toolExecutor, {
-        ...options,
-        envelopeIssuanceMode: envelopeBootstrap.metadata.issuance,
-    });
-    // ── Phase 3: MAMA Core API ────────────────────────────────────────────────
-    const { mamaApi, mamaApiClient, connectorExtractionFn, stopExtraction } = await (0, mama_core_init_js_1.initMamaCore)(config);
-    // Wire the boot MAMA API onto the shared executor so it never lazily builds a
-    // SECOND API/adapter stack against the same DB (initializeMAMAApi). This also
-    // lets the memory agent fold into the shared executor (Task 7) instead of
-    // carrying its own private instance just for this API.
-    toolExecutor.setMamaApi(mamaApi);
-    // getAdapter is still used directly in this file for DB queries after initDB has run
-    // eslint-disable-next-line @typescript-eslint/no-require-imports
-    const { getAdapter } = require('@jungjaehoon/mama-core/db-manager');
-    const coreAdapter = getAdapter();
-    // A native child's model run is closed by the child's own terminal status, which a hard
-    // process death never delivers. Nothing at boot can confirm what such a child did, so
-    // its run is failed by name rather than left reading as work still in flight.
-    const orphanedSubagentRuns = (0, subagent_run_reconcile_js_1.failOrphanedSubagentModelRuns)(coreAdapter);
-    if (orphanedSubagentRuns > 0) {
-        console.warn(`[subagent] failed ${orphanedSubagentRuns} model run(s) left running by a previous process`);
-    }
-    const principalRegistry = createCorePrincipalRegistry(coreAdapter);
-    toolExecutor.setPrincipalRepository(principalRegistry);
-    (0, owner_backfill_js_1.backfillTelegramOwner)({
-        telegram: config.telegram,
-        registry: principalRegistry,
-        now: Date.now(),
-        logger: principalRegistryLogger,
-    });
-    const principalResolver = principalRegistry.resolveByExternal.bind(principalRegistry);
-    const contextCompileService = (0, context_compile_service_js_1.createContextCompileService)({
-        memoryAdapter: coreAdapter,
-        // Raw visibility comes from the owner's connector config, not from the derived scope
-        // columns. Without this the compile reads nothing: measured on the live index, the
-        // scope-based predicate returns 0 of 30,671 events for the input shape sent here.
-        channelGrant: read_js_1.liveBoundaryChannels,
-    });
-    toolExecutor.setContextCompileService(contextCompileService);
-    agentLoop.setContextCompileService(contextCompileService);
-    // ── Phase 4: Memory Agent + MessageRouter ─────────────────────────────────
-    const messageRouter = createRuntimeMessageRouter({
-        sessionStore,
-        agentLoopClient,
-        mamaApiClient,
-        config: (0, message_router_config_js_1.resolveMessageRouterConfig)(config, runtimeBackend),
-        envelopeConfig: envelopeBootstrap.envelopeConfig,
-        envelopeAuthority: envelopeBootstrap.envelopeAuthority,
-        memberGrantReader: principalRegistry,
-        dependencies: {
-            privateConnectorPolicy,
-            // Report delivery is receipted by the delivery ledger. Conversation
-            // recovery belongs only to the owner-runtime journal.
-        },
-    });
-    messageRouter.setSessionsDb(db);
-    // validationService wired after creation (Phase 5 below)
-    // One MAMA: memory judgment stays in the owner turn through mama_save and
-    // deterministic owner-policy observation. Do not boot a second model identity
-    // that re-reads every conversation after the owner agent has answered.
-    // ── Phase 5: Graph Handler + Embedding ────────────────────────────────────
-    // Create singleton UI command queue for Agent↔Viewer communication
-    const uiCommandQueue = new ui_command_handler_js_1.UICommandQueue();
-    // Prepare graph handler options (will be populated after gateways init)
-    const graphHandlerOptions = {
-        healthService: healthService ?? undefined,
-        healthCheckService,
-        sessionsDb: db,
-        uiCommandQueue,
-    };
-    const codeActRawConnectors = resolveCodeActRawConnectors(connectorConfigLoadResult.enabledNames);
-    // Wire uiCommandQueue into messageRouter for page context awareness
-    messageRouter.setUICommandQueue(uiCommandQueue);
-    // Wire sessionsDb into gateway tool executor
-    toolExecutor.setSessionsDb(db);
-    agentLoop.setSessionsDb(db);
-    // Wire up Code-Act executor for POST /api/code-act endpoint
-    // Always register: Dashboard/Wiki agents use code-act via MCP → HTTP proxy
-    const executeLegacyCodeAct = async (code, codeActContext) => {
-        const { CodeActSandbox, HostBridge } = await import('../../agent/code-act/index.js');
-        const sandbox = new CodeActSandbox();
-        const legacyRequestContext = codeActContext
-            ? { ...codeActContext, agentId: undefined }
-            : undefined;
-        const resolvedCodeActPolicy = resolveCodeActAgentPolicy(legacyRequestContext, config.multi_agent?.agents, config.multi_agent?.default_agent || 'conductor');
-        if (resolvedCodeActPolicy.error) {
-            return { success: false, error: resolvedCodeActPolicy.error };
-        }
-        const codeActAgentId = resolvedCodeActPolicy.agentId;
-        const codeActPolicy = resolvedCodeActPolicy.policy ?? {};
-        const codeActRole = privateConnectorPolicy.projectRole('legacy-unbound', buildCodeActRole(codeActPolicy));
-        const codeActReadOnly = isTruthyEnvValue(process.env.MAMA_CODE_ACT_READ_ONLY);
-        const codeActTier = codeActReadOnly ? 3 : 2;
-        const instanceId = (0, node_crypto_1.randomUUID)();
-        let executionContext = null;
-        if (envelopeBootstrap.envelopeAuthority && envelopeBootstrap.metadata.issuance !== 'off') {
-            const projectId = (0, reactive_config_js_1.resolveReactiveProjectRoot)(config, process.env);
-            const projectRef = { kind: 'project', id: projectId };
-            const memoryScopes = uniqueMemoryScopes((0, scope_context_js_1.deriveMemoryScopes)({
-                source: 'watch',
-                channelId: 'api:code-act',
-                userId: 'api',
-                projectId,
-            }));
-            const wallSeconds = Math.min(Math.max(Math.floor((config.timeouts?.agent_ms ?? 300_000) / 1000), 1), 300);
-            const envelope = envelopeBootstrap.envelopeAuthority.buildAndPersist({
-                agent_id: codeActAgentId,
-                instance_id: instanceId,
-                source: 'watch',
-                channel_id: 'api:code-act',
-                trigger_context: { user_text: '<api-code-act invocation>' },
-                scope: {
-                    project_refs: [projectRef],
-                    raw_connectors: [
-                        ...privateConnectorPolicy.projectRawConnectors('legacy-unbound', codeActRawConnectors),
-                    ],
-                    memory_scopes: memoryScopes,
-                    allowed_destinations: [],
-                },
-                tier: codeActTier,
-                budget: { wall_seconds: wallSeconds },
-                expires_at: new Date(Date.now() + wallSeconds * 1000 + 30_000).toISOString(),
-            });
-            const roleName = `code_act_${codeActAgentId}`;
-            const role = codeActRole;
-            const agentContext = {
-                source: 'watch',
-                platform: 'cli',
-                roleName,
-                role,
-                session: {
-                    sessionId: `api:code-act:${instanceId}`,
-                    channelId: 'api:code-act',
-                    startedAt: new Date(),
-                },
-                capabilities: ['code_act'],
-                limitations: codeActReadOnly ? ['Code-Act read-only mode: memory writes disabled'] : [],
-                tier: codeActTier,
-                backend: runtimeBackend,
-            };
-            executionContext = {
-                agentContext,
-                agentId: codeActAgentId,
-                source: 'watch',
-                channelId: 'api:code-act',
-                envelope,
-                executionSurface: 'code_act',
-            };
-        }
-        const parentRun = bindCodeActParentModelRun(getAdapter(), executionContext, {
-            inputSnapshotRef: `code-act:${instanceId}`,
-            inputRefs: {
-                tool: 'code_act',
-                source: 'api',
-                channel_id: 'api:code-act',
-                read_only: codeActReadOnly,
-            },
-        });
-        executionContext = parentRun.executionContext;
-        const bridge = new HostBridge(toolExecutor, new role_manager_js_1.RoleManager({ rolesConfig: config.roles ?? types_js_1.DEFAULT_ROLES }), executionContext);
-        const toolCalls = [];
-        const hostToolExecutions = [];
-        bridge.onToolUse = (toolName, input, result) => {
-            if (result !== undefined) {
-                toolCalls.push({ name: toolName, input });
-                const resultRecord = result;
-                hostToolExecutions.push({
-                    name: toolName,
-                    success: resultRecord.success === true,
-                    ...(typeof resultRecord.code === 'string' ? { code: resultRecord.code } : {}),
-                });
-                if (CODE_ACT_MUTATION_TOOLS.has(toolName)) {
-                    codeActLogger.warn('[CodeAct] mutation tool call', {
-                        toolName,
-                        success: Boolean(result.success),
-                        readOnly: codeActReadOnly,
-                        envelopeHash: executionContext?.envelope?.envelope_hash ?? null,
-                    });
-                }
-            }
-        };
-        const previousRoutingContext = toolExecutor.getCurrentAgentRoutingContext();
-        try {
-            // Set default agent context for /api/code-act calls (Conductor, tiered sandbox).
-            // Per-request executionContext carries envelope data; this routing context is legacy fallback.
-            toolExecutor.setCurrentAgentContext(codeActAgentId, 'api', 'code-act');
-            // Tier+role injection is unchanged; the bridge derives tool_search/tool_describe from
-            // exactly the functions it registers here, so this route gains discovery without any
-            // change to which gateway functions it authorizes.
-            bridge.injectInto(sandbox, codeActTier, codeActRole);
-            const result = await sandbox.execute(code, { signal: executionContext?.signal });
-            finalizeCodeActParentModelRun(getAdapter(), parentRun.modelRunId, result);
-            return serializeCodeActExecutionResult(result, toolCalls, hostToolExecutions);
-        }
-        catch (error) {
-            failCodeActParentModelRun(getAdapter(), parentRun.modelRunId, error);
-            throw error;
-        }
-        finally {
-            toolExecutor.restoreCurrentAgentRoutingContext(previousRoutingContext);
-        }
-    };
-    graphHandlerOptions.executeCodeAct = (0, code_act_executor_js_1.createCodeActExecutor)({
-        registry: run_context_registry_js_1.runContextRegistry,
-        gatewayToolExecutor: toolExecutor,
-        executeLegacy: executeLegacyCodeAct,
-    });
-    // Pre-warm Code-Act WASM module for fast first execution
-    (async () => {
-        try {
-            const { CodeActSandbox } = await import('../../agent/code-act/index.js');
-            await CodeActSandbox.warmup();
-        }
-        catch (err) {
-            console.warn('[CodeAct] WASM warmup failed (non-fatal):', err);
-        }
-    })();
-    const graphHandler = (0, graph_api_js_1.createGraphHandler)(graphHandlerOptions);
-    // Seed initial agent versions from config (version 1 for new agents)
-    // initAgentTables is idempotent (CREATE IF NOT EXISTS) — safe to call before apiServer
-    (0, agent_store_js_1.initAgentTables)(db);
-    (0, store_js_1.initValidationTables)(db);
-    // Wire validation session service into tool executor + message router
-    const validationService = new session_service_js_1.ValidationSessionService(db);
-    toolExecutor.setValidationService(validationService);
-    messageRouter.setValidationService(validationService);
-    agentLoop.setValidationService(validationService);
-    // Ensure current primary system agents exist in config. Legacy self-paced
-    // dashboard/wiki agents are opt-in and must not be backfilled here.
-    if (!config.multi_agent) {
-        config.multi_agent = (0, config_manager_js_1.getDefaultMultiAgentConfig)();
-    }
-    if (!config.multi_agent.agents) {
-        config.multi_agent.agents = {};
-    }
-    const osAgents = {
-        'os-agent': {
-            name: 'OS Agent',
-            display_name: '🖥️ OS Agent',
-            trigger_prefix: '!os',
-            persona_file: '~/.mama/personas/os-agent.md',
-            tier: 1,
-            backend: runtimeBackend,
-            model: config.agent.model,
-            can_delegate: true,
-            enabled: true,
-        },
-        memory: {
-            name: 'Memory Agent',
-            display_name: '🧠 Memory',
-            trigger_prefix: '!memory',
-            persona_file: '~/.mama/personas/memory.md',
-            tier: 3,
-            backend: runtimeBackend,
-            model: config.agent.model,
-            can_delegate: false,
-            enabled: true,
-        },
-    };
-    let osAgentsAdded = false;
-    for (const [id, cfg] of Object.entries(osAgents)) {
-        if (!config.multi_agent.agents[id]) {
-            config.multi_agent.agents[id] = cfg;
-            osAgentsAdded = true;
-        }
-    }
-    // Persist to config.yaml so /api/agents sees them too
-    if (osAgentsAdded) {
-        try {
-            const { saveConfig } = await import('../config/config-manager.js');
-            await saveConfig(config);
-            console.log('✓ OS agents added to config.yaml');
-        }
-        catch {
-            /* non-fatal — runtime config still has them */
-        }
-    }
-    // Agent version rows belong to the legacy multi-agent persona layer. With
-    // multi_agent disabled (the owner-runtime default) nothing is seeded, so boot
-    // neither reads nor requires any ~/.mama/personas file.
-    if (config.multi_agent.enabled) {
-        const agents = config.multi_agent.agents;
-        for (const [id, cfg] of Object.entries(agents)) {
-            if (!(0, agent_store_js_1.getLatestVersion)(db, id)) {
-                let personaText = null;
-                try {
-                    const pPath = (0, config_manager_js_1.expandPath)(cfg.persona_file);
-                    if ((0, node_fs_1.existsSync)(pPath))
-                        personaText = (0, node_fs_1.readFileSync)(pPath, 'utf-8');
-                }
-                catch {
-                    /* ignore */
-                }
-                (0, agent_store_js_1.createAgentVersion)(db, {
-                    agent_id: id,
-                    snapshot: { model: cfg.model, tier: cfg.tier, backend: cfg.backend },
-                    persona_text: personaText,
-                    change_note: 'Initial version (migrated from config.yaml)',
-                });
-            }
-        }
-        console.log(`✓ Agent versions seeded (${Object.keys(agents).length} agents)`);
-    }
-    await (0, utilities_js_1.startEmbeddingServerIfAvailable)(messageRouter, sessionStore, graphHandler);
-    // ── Phase 6: Cron Scheduler ───────────────────────────────────────────────
-    const backgroundOwnerContext = (0, owner_event_policy_js_1.buildOwnerEventAgentContext)({
-        backend: runtimeBackend,
-        model: config.agent.model,
-        ownerRole,
-        privateConnectorPolicy,
-    });
-    const issueOwnerRuntimeEnvelope = async (channelId, wallSeconds) => {
-        if (!envelopeBootstrap.envelopeAuthority || envelopeBootstrap.metadata.issuance === 'off') {
-            return undefined;
-        }
-        const projectId = (0, reactive_config_js_1.resolveReactiveProjectRoot)(config, process.env);
-        return envelopeBootstrap.envelopeAuthority.buildAndPersist({
-            agent_id: 'mama-owner',
-            instance_id: (0, node_crypto_1.randomUUID)(),
-            source: 'cron',
-            channel_id: channelId,
-            trigger_context: { user_text: `<owner runtime ${channelId} stimulus>` },
-            scope: {
-                project_refs: [{ kind: 'project', id: projectId }],
-                raw_connectors: [
-                    ...privateConnectorPolicy.projectRawConnectors('owner_console', codeActRawConnectors),
-                ],
-                memory_scopes: uniqueMemoryScopes((0, scope_context_js_1.deriveMemoryScopes)({ source: 'operator', channelId, projectId })),
-                allowed_destinations: [],
-            },
-            tier: 1,
-            budget: { wall_seconds: wallSeconds },
-            expires_at: new Date(Date.now() + wallSeconds * 1000 + 30_000).toISOString(),
-        });
-    };
-    // A native child the owner delegated to keeps working after the parent turn ended, so it
-    // gets its OWN grant with its own wall. The parent's 300-600s envelope, which the child
-    // cannot renew, would refuse every call it made past the parent's clock.
-    //
-    // It keeps the PARENT's channel, not a literal 'subagent': the grant's memory scopes are
-    // derived from the channel (deriveMemoryScopes below), so a hardcoded channel gave the
-    // child a channel scope nobody reads and dropped the parent's channel binding.
-    const issueOwnerSubagentEnvelope = (channelId) => issueOwnerRuntimeEnvelope(channelId, 1800);
-    /** Owner runtime paths must never run unauthorised: no envelope is a loud failure. */
-    const requireOwnerRuntimeEnvelope = async (channelId, wallSeconds) => {
-        const envelope = await issueOwnerRuntimeEnvelope(channelId, wallSeconds);
-        if (!envelope) {
-            throw new Error(`Owner runtime stimulus ${channelId} requires envelope authority`);
-        }
-        return envelope;
-    };
-    const runOwnerStimulus = async (content, channelId) => {
-        return await agentLoop.run(content, {
-            sessionKey: owner_runtime_js_1.OWNER_RUNTIME_SESSION_KEY,
-            source: 'operator',
-            channelId,
-            sourceMessageRef: `owner-stimulus:${channelId}:${(0, node_crypto_1.randomUUID)()}`,
-            agentContext: backgroundOwnerContext,
-            sessionPolicyRole: ownerRole,
-            prepareEnvelope: () => requireOwnerRuntimeEnvelope(channelId, 600),
-            prepareSubagentEnvelope: () => issueOwnerSubagentEnvelope(channelId),
-            requestTimeoutMs: 600_000,
-        });
-    };
-    // A native subagent the owner delegated to finishes AFTER the owner's turn ended.
-    // Its completion re-enters the one owner subject as a host stimulus, on the same
-    // path heartbeat and cron use, so the owner conversation never waits on long work.
-    const detachSubagentWake = (0, subagent_stimulus_js_1.attachSubagentWake)(agentLoop.getModelRunner(), async (event) => {
-        return await agentLoop.run((0, subagent_stimulus_js_1.buildSubagentStimulus)(event), {
-            sessionKey: owner_runtime_js_1.OWNER_RUNTIME_SESSION_KEY,
-            source: 'operator',
-            channelId: 'subagent',
-            agentContext: backgroundOwnerContext,
-            sessionPolicyRole: ownerRole,
-            // Same fail-loud rule as every sibling owner path: issuance off must stop the turn,
-            // never let it run unauthorised.
-            prepareEnvelope: () => requireOwnerRuntimeEnvelope('subagent', 300),
-            prepareSubagentEnvelope: () => issueOwnerSubagentEnvelope('subagent'),
-            sourceMessageRef: (0, subagent_stimulus_js_1.subagentStimulusSourceRef)(event),
-            ownerJournalPrompt: (0, subagent_stimulus_js_1.buildSubagentStimulusBlock)(event),
-            lanePriority: 10,
-        });
-    });
-    const cronOwnerRunner = {
-        backendType: runtimeBackend,
-        // A facade over agentLoop.run: whether a native subagent can be spawned is decided by
-        // the real runner underneath, not by this shim.
-        supportsNativeSubagents: agentLoop.supportsNativeSubagents,
-        prompt: async (content) => {
-            const result = await runOwnerStimulus(content, 'cron');
-            return {
-                response: result.response,
-                usage: result.totalUsage,
-                session_id: owner_runtime_js_1.OWNER_RUNTIME_SESSION_KEY,
-            };
-        },
-        setSessionId: () => { },
-        setSystemPrompt: () => { },
-        isHealthy: () => true,
-        getMetrics: () => ({
-            requestCount: 0,
-            failureCount: 0,
-            avgLatencyMs: 0,
-            lastRequestAt: null,
-        }),
-        stop: () => { },
-    };
-    const { scheduler, cronWorker, cronEmitter } = (0, scheduler_init_js_1.initCronScheduler)(config, () => cronOwnerRunner);
-    // ── Phase 7: Gateways ────────────────────────────────────────────────────
-    const gatewayInit = await (0, gateway_init_js_1.initGateways)(config, messageRouter, toolExecutor, agentLoop, runtimeBackend, db, principalResolver);
-    const { discordGateway, slackGateway, telegramGateway, gateways } = gatewayInit;
-    // The wake subscription is a live listener on the runner; shutdown detaches it.
-    gateways.push({ stop: async () => detachSubagentWake() });
-    // ── Phase 8: Gateway Wiring ──────────────────────────────────────────────
-    const { pluginLoader } = await (0, gateway_wiring_js_1.wireGateways)({
-        config,
-        messageRouter,
-        healthCheckService,
-        graphHandlerOptions,
-        db,
-        discordGateway,
-        slackGateway,
-        telegramGateway,
-        gateways,
-        agentLoop,
-        cronEmitter,
-    });
-    // ── Phase 9: Heartbeat + Connectors ──────────────────────────────────────
-    const { heartbeatScheduler, tokenKeepAlive, healthWarningInterval } = (0, scheduler_init_js_1.initHeartbeat)(config, agentLoop, discordGateway, scheduler, healthCheckService, async () => {
-        return {
-            agentContext: backgroundOwnerContext,
-            sessionPolicyRole: ownerRole,
-            prepareEnvelope: () => issueOwnerRuntimeEnvelope('heartbeat', 300),
-            prepareSubagentEnvelope: () => issueOwnerSubagentEnvelope('heartbeat'),
-        };
-    });
-    // M2.4 freshness: the connector sink nudges the trigger loop when a poll indexes new rows. The
-    // loop is constructed AFTER initConnectors (below), so hand initConnectors a stable forwarder now
-    // and point it at the loop once it exists. Null until then -> nudge no-ops (no loop = nothing to
-    // wake), which remains safe while the trigger loop is still booting or explicitly disabled.
-    const triggerLoopNudge = { current: null };
-    const triggerLoopFullReport = { current: null };
-    // Operator DB + native task ledger (M8): wired UNCONDITIONALLY -- the task
-    // tools are standard gateway tools and must work even when the trigger loop
-    // is off (review finding on #142). Single handle, closed once at shutdown.
-    const operatorDbPath = (0, config_manager_js_1.expandPath)('~/.mama/operator/triggers.db');
-    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(operatorDbPath), { recursive: true });
-    const operatorDb = new sqlite_js_1.default(operatorDbPath);
-    const procedureStore = new procedure_store_js_1.ProcedureStore(operatorDb);
-    toolExecutor.setProcedureStore(procedureStore);
-    messageRouter.setProcedureStore(procedureStore);
-    const readCanonicalOwnerBrief = () => (0, console_brief_js_1.modernizeLegacyBriefMechanism)(procedureStore.read('owner-console-brief', {
-        ownerScope: 'owner:runtime',
-        projectId: (0, reactive_config_js_1.resolveReactiveProjectRoot)(config, process.env),
-    })?.body ?? (0, console_brief_js_1.loadConsoleBrief)());
-    let taskLedger;
-    const refreshTaskBoard = { current: null };
-    try {
-        taskLedger = new task_ledger_js_1.TaskLedger(operatorDb, {
-            onOwnerTaskChangeCommitted: () => refreshTaskBoard.current?.(),
-        });
-        toolExecutor.setTaskLedger(taskLedger);
-    }
-    catch (err) {
-        // Fail loud, but do not leak the handle on a failed boot.
-        operatorDb.close();
-        throw err;
-    }
-    // Durable MAMA owner-event journal. It uses new tables rather than replaying
-    // the legacy default-off Conductor shadow backlog on cutover.
-    const ownerEventInbox = new owner_event_inbox_js_1.OwnerEventInbox(operatorDb);
-    // The host-owned gate is always present. MAMA_BOARD_RECONCILE controls only
-    // delta reconcile scheduling; exact owner-event Board acceptance, boot
-    // recovery, manual refresh, and full verification share this runtime in all
-    // configurations.
-    // Host-owned Board repair gate. Generations are wall time: with the owner-event
-    // intent ledger gone there is no persisted pending generation to seed above.
-    const boardRefreshGate = new board_refresh_gate_js_1.BoardRefreshGate({ initialGeneration: Date.now() });
-    const ownerEventEffectLedger = new owner_event_effects_js_1.OwnerEventEffectLedger(operatorDb);
-    toolExecutor.setOwnerEventEffectLedger(ownerEventEffectLedger);
-    const ownerActionEffectLedger = new owner_action_effects_js_1.OwnerActionEffectLedger(operatorDb);
-    toolExecutor.setOwnerActionEffectLedger(ownerActionEffectLedger);
-    let stopOwnerEventRuntime = null;
-    // S2: leg cadence watchdog - its OWN timer, deliberately outside the
-    // trigger loop (a watchdog inside the thing it watches dies with it).
-    // Legs declare+beat at their own tick sites via the singleton; pages ride
-    // the owner-alert targets registered in gateway wiring. Alarm, never
-    // enforcement; quiet hours honored inside check().
-    const legCadence = (0, leg_cadence_js_1.initLegCadence)(operatorDb);
-    legCadence.declare('workorder-consumer', workorder_consumer_js_1.DEFAULT_TICK_MS);
-    // Declared HERE, not in HeartbeatScheduler.start(): the heartbeat starts
-    // 47 lines before this singleton exists, so a declare there hit null and
-    // the leg was silently unwatched (review, blocking). The scheduler owns
-    // the number; boot owns the ordering.
-    const heartbeatCadenceMs = heartbeatScheduler.declaredCadence();
-    if (heartbeatCadenceMs !== null) {
-        legCadence.declare('heartbeat', heartbeatCadenceMs);
-    }
-    // Failures become evidence (One MAMA Phase 3): one sink over the mama-core database.
-    const issueDb = { prepare: (sql) => mamaCore.getAdapter().prepare(sql) };
-    (0, operational_issues_js_1.ensureOperationalIssuesTable)(issueDb);
-    const recordIssue = (input) => {
-        try {
-            (0, operational_issues_js_1.recordOperationalIssue)(issueDb, input);
-        }
-        catch (error) {
-            console.error(`[operational-issue] record failed: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    };
-    toolExecutor.setOperationalIssueSink(recordIssue);
-    // Ledger stagnation probe: deltas keep arriving while no owner task is created for 24h.
-    // Cross-database on purpose (tasks in triggers.db, deltas in mama-memory.db); at most one
-    // record per 12h so occurrences count days, not ticks.
-    let lastStagnationRecordAt = 0;
-    const probeLedgerStagnation = () => {
-        const now = Date.now();
-        if (now - lastStagnationRecordAt < 12 * 60 * 60 * 1000) {
-            return;
-        }
-        try {
-            const dayAgo = now - 24 * 60 * 60 * 1000;
-            const created = taskLedger.countOwnerTasksCreatedSince(dayAgo);
-            const deltas = mamaCore
-                .getAdapter()
-                // indexed_at is ISO text (migration 030); an integer would compare below every row.
-                .prepare(`SELECT count(*) AS n FROM connector_event_index WHERE indexed_at >= ?`)
-                .get(new Date(dayAgo).toISOString())?.n;
-            if (created === 0 && typeof deltas === 'number' && deltas > 0) {
-                lastStagnationRecordAt = now;
-                recordIssue({
-                    surface: 'ledger',
-                    signature: 'no_task_created_24h',
-                    severity: 'error',
-                    error: `${deltas} connector deltas indexed in 24h, zero owner tasks created`,
-                    nowMs: now,
-                });
-            }
-        }
-        catch (error) {
-            console.error(`[operational-issue] stagnation probe failed: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    };
-    // One self-check turn per local day (idempotent on the date key), enqueued from the
-    // watchdog interval so it needs no timer of its own.
-    const enqueueDailySelfCheck = () => {
-        try {
-            const localDate = new Date().toLocaleDateString('sv-SE'); // YYYY-MM-DD in local time
-            // A terminal work order frees its idempotency slot (the unique index excludes terminal
-            // rows), so "one per day" must be checked here: without this, 0.43.0 re-enqueued a
-            // self-check every minute after each completion (8 runs in 26 minutes, live).
-            const prior = taskLedger.findWorkOrderByOccurrence('self-check', (0, workorder_publishers_js_1.selfCheckKey)(localDate));
-            if (prior && prior.status !== 'failed' && prior.status !== 'cancelled') {
-                return; // failed/cancelled rows are dead and stay retryable (task-ledger.ts)
-            }
-            taskLedger.enqueueWorkOrder({
-                workKind: 'self-check',
-                idempotencyKey: (0, workorder_publishers_js_1.selfCheckKey)(localDate),
-                input: { scheduledFor: localDate },
-            });
-        }
-        catch (error) {
-            console.error(`[self-check] enqueue failed: ${error instanceof Error ? error.message : String(error)}`);
-        }
-    };
-    agent_loop_init_js_2.budgetStopSink.current = (info) => {
-        try {
-            taskLedger.recordBudgetStop(info);
-        }
-        catch (error) {
-            console.error(`[budget] receipt failed: ${error instanceof Error ? error.message : String(error)}`);
-        }
-        recordIssue({
-            surface: 'budget',
-            signature: `run_budget_stop:${info.agentId ?? 'unknown'}`,
-            severity: 'warn',
-            error: `run ${info.modelRunId ?? '(no run id)'} stopped at ${info.budgetTokens} of ${info.runTokenBudget} tokens after ${info.turns} turns`,
-            sourceRef: info.channelKey,
-            ownerAgent: info.agentId,
-        });
-    };
-    toolExecutor.setRepairControls({
-        issueExists: (issueId) => (0, operational_issues_js_1.getOperationalIssue)(issueDb, issueId) !== null,
-        setIssueStatus: (issueId, status) => (0, operational_issues_js_1.setOperationalIssueStatus)(issueDb, issueId, status),
-        notifyOwner: async (line) => {
-            const notify = (0, leg_cadence_js_1.getLegPageNotifier)();
-            if (!notify) {
-                throw new Error('owner notice channel is not configured');
-            }
-            await notify(line);
-        },
-        repairRoot: () => (0, repair_request_js_1.resolveRepairRoot)(),
-    });
-    const legWatchdog = setInterval(() => {
-        probeLedgerStagnation();
-        enqueueDailySelfCheck();
-        try {
-            const { pages, recoveries } = legCadence.check();
-            for (const page of pages) {
-                const minutes = Math.round(page.silentForMs / 60_000);
-                const message = `[leg-watchdog] '${page.name}' has been silent ${minutes}min (declared ${Math.round(page.declaredCadenceMs / 60_000)}min cadence)`;
-                console.error(message);
-                void (0, leg_cadence_js_1.getLegPageNotifier)()?.(message).catch(() => { });
-            }
-            for (const name of recoveries) {
-                const message = `[leg-watchdog] '${name}' recovered`;
-                console.log(message);
-                void (0, leg_cadence_js_1.getLegPageNotifier)()?.(message).catch(() => { });
-            }
-        }
-        catch (err) {
-            console.error('[leg-watchdog] check failed:', err);
-        }
-    }, 60_000);
-    // ── Stage-2 workorder consumer (plan S2-T3): the only system run path.
-    // Constructed before production runtime assembly registers per-kind
-    // completion hooks, and started only after route registration and recovery
-    // complete.
-    const { temporalFlag } = temporalStartup;
-    // Validate the worker-run timeout override at boot (no-fallback): a malformed
-    // MAMA_WORKER_TIMEOUT_SECONDS must crash the daemon loudly, not silently
-    // revert worker runs to the 300s bound. Mirrors readStage2Flag above.
-    const { resolveWorkerRequestTimeoutMs, attachWorkOrderAttemptContext } = await import('../../operator/worker-run.js');
-    resolveWorkerRequestTimeoutMs();
-    let workOrderConsumer = null;
-    const boardRepairNudge = { current: null };
-    let temporalRuntime = null;
-    gateways.push({
-        stop: async () => {
-            clearInterval(legWatchdog);
-            // All users of the shared operator DB stop inside this one gateway.
-            // Shutdown invokes gateways in parallel, so a separate owner-event
-            // gateway would race its final ACK against this close.
-            await (0, owner_event_loop_js_1.closeOwnerEventBeforeDatabase)(async () => {
-                await stopOwnerEventRuntime?.();
-                stopOwnerEventRuntime = null;
-            }, () => (0, temporal_runtime_js_1.closeTemporalRuntimeBeforeDatabase)(temporalRuntime, workOrderConsumer, () => {
-                try {
-                    operatorDb.close();
-                }
-                catch {
-                    /* already closed */
-                }
-            })).catch(() => { });
-        },
-    });
-    {
-        const { WorkOrderConsumer } = await import('../../operator/workorder-consumer.js');
-        // Seed the ONE operating brief (user edits win) BEFORE the consumer exists -
-        // a normal install must never hit the brief-missing fail path.
-        (0, console_brief_js_1.ensureConsoleBrief)();
-        const { logActivity: logWorkOrderActivity } = await import('../../db/agent-store.js');
-        // Ops alarm sink (plan D4/E1/G8): constructed OUTSIDE any trigger-loop
-        // block - the consumer runs with the loop off, so its terminal alarms
-        // must too. Chat id: MAMA_OPS_ALERT_CHAT, falling back to the loop's
-        // report chat var.
-        const opsAlertChat = process.env.MAMA_OPS_ALERT_CHAT || process.env.MAMA_TRIGGER_LOOP_REPORT_CHAT || '';
-        const opsAlarm = {
-            configured: Boolean(opsAlertChat && telegramGateway),
-            send: async (line) => {
-                if (telegramGateway && opsAlertChat)
-                    await telegramGateway.sendMessage(opsAlertChat, line);
-            },
-        };
-        if (!opsAlarm.configured) {
-            console.log('[stage2] ops alarm sink unconfigured - terminal workorder alarms are LOG-ONLY ' +
-                '(set MAMA_OPS_ALERT_CHAT or MAMA_TRIGGER_LOOP_REPORT_CHAT)');
-        }
-        // AgentLoopClient.runWithContent is optional in its type; a missing method
-        // is a boot-order fault and must throw, not no-op (WorkerRunner adapter).
-        const workerRunner = {
-            // The scheduled contract's delegated shape and the `delegated` attempt state both
-            // follow the ACTIVE runner, not the configured backend name.
-            supportsNativeSubagents: agentLoopClient.supportsNativeSubagents === true,
-            runWithContent: async (content, options) => {
-                if (!agentLoopClient.runWithContent) {
-                    throw new Error('[stage2] agentLoopClient.runWithContent unavailable');
-                }
-                const workorderAttemptId = options.workorderAttemptId;
-                const isWikiAttempt = options.wikiTaskRange !== undefined;
-                try {
-                    return await agentLoopClient.runWithContent(content, options);
-                }
-                finally {
-                    if (isWikiAttempt && typeof workorderAttemptId === 'number') {
-                        toolExecutor.releaseWikiAttemptCoverage(workorderAttemptId);
-                    }
-                }
-            },
-        };
-        workOrderConsumer = new WorkOrderConsumer({
-            hasUnsettledEffects: (wo) => ownerActionEffectLedger.hasUnsettledEffects(`workorder:${wo.idempotencyKey}`),
-            hasUnsafeReplayEffects: (wo) => ownerActionEffectLedger.hasUnsafeReplayEffects(`workorder:${wo.idempotencyKey}`),
-            ledger: taskLedger,
-            runner: workerRunner,
-            loadOwnerBrief: readCanonicalOwnerBrief,
-            // One memory for the one owner:runtime thread: whichever lane sends the brief
-            // first satisfies the other, so a correction reaches the thread exactly once.
-            admitOwnerBrief: (brief) => ownerBriefMemory.admit(owner_runtime_js_1.OWNER_RUNTIME_SESSION_KEY, brief),
-            retractOwnerBrief: () => ownerBriefMemory.forget(owner_runtime_js_1.OWNER_RUNTIME_SESSION_KEY),
-            // Host-rendered pipeline: the ledger's own deadline_priority page, published through
-            // the SAME report publisher report_publish uses (bound after the API routes exist).
-            selfCheckInput: () => ({
-                openIssues: (0, operational_issues_js_1.listOpenOperationalIssues)(issueDb, 20, 'warn').map((issue) => ({
-                    issueId: issue.issueId,
-                    surface: issue.surface,
-                    severity: issue.severity,
-                    signature: issue.signature,
-                    occurrences: issue.occurrences,
-                    firstSeenAt: new Date(issue.firstSeenAt).toISOString(),
-                    lastSeenAt: new Date(issue.lastSeenAt).toISOString(),
-                    lastError: issue.lastError,
-                })),
-                noUpdateScope: `self-check:${new Date().toLocaleDateString('sv-SE')}`,
-            }),
-            publishPipelineSlot: () => {
-                const refresh = refreshTaskBoard.current;
-                if (!refresh) {
-                    throw new Error('task board projection is not bound yet');
-                }
-                refresh();
-            },
-            noticeOwner: (summary) => messageRouter.enqueueOperatorNotice(summary),
-            opsAlarm,
-            runOptionsFor: async (wo) => {
-                // Resolve the run's raw binding before constructing either backend's
-                // role/catalog. The catalog and execution envelope must use the same
-                // projection so an unbound or non-private run never advertises private
-                // connector tools it cannot execute.
-                const workOrderBatch = causeEventIdsFromPayload(wo.payload);
-                let temporalContext;
-                let temporalBinding = null;
-                if (wo.workKind === 'temporal') {
-                    temporalContext = (0, temporal_worker_js_1.buildTemporalWorkerContext)(taskLedger, wo);
-                    temporalBinding = temporalTaskBinding(taskLedger, temporalContext.taskId);
-                }
-                const projectId = (0, reactive_config_js_1.resolveReactiveProjectRoot)(config, process.env);
-                const reconcileChannelKey = wo.workKind === 'board' &&
-                    wo.payload.mode === 'reconcile' &&
-                    typeof wo.payload.channelKey === 'string'
-                    ? wo.payload.channelKey
-                    : null;
-                const workOrderScope = workOrderEnvelopeScope({
-                    workKind: wo.workKind,
-                    projectId,
-                    laneConnectors: codeActRawConnectors,
-                    temporalBinding,
-                    reconcileChannelKey,
-                    privateConnectorPolicy,
-                });
-                const workOrderPolicy = buildTurnAgentPolicy(wo.workKind, config.agent.model, runtimeBackend, privateConnectorPolicy, workOrderScope.raw_connectors, ownerRole);
-                const runOptions = attachWorkOrderAttemptContext({
-                    gatewayToolsPrompt: workOrderPolicy.gatewayToolsPrompt,
-                    agentContext: workOrderPolicy.agentContext,
-                    sessionPolicyRole: ownerRole,
-                    workOrderBriefProjectionPolicy: workOrderPolicy.briefProjectionPolicy,
-                }, wo.id);
-                // Temporal identity and the required review anchor remain host-bound. Additional
-                // corroboration is selected by the owner and checked against current exact grants.
-                // A reconcile carries the channel's delta batch. Handing it to the run makes every
-                // durable change the run produces rest on it WITHOUT the agent restating anything -
-                // the system knew the batch before the run began. This is the whole difference
-                // between a bounded run and an unbounded one.
-                if (workOrderBatch.length > 0) {
-                    runOptions.causeEventIds = workOrderBatch;
-                }
-                if (temporalContext) {
-                    runOptions.temporalWorkContext = temporalContext;
-                }
-                if (wo.workKind === 'wiki') {
-                    const wikiRange = typeof wo.payload.range === 'object' && wo.payload.range !== null
-                        ? wo.payload.range
-                        : null;
-                    runOptions.wikiTaskRange = {
-                        ownerDate: typeof wo.payload.ownerDate === 'string' ? wo.payload.ownerDate : null,
-                        rangeStartMs: typeof wikiRange?.start_ms === 'number' ? wikiRange.start_ms : null,
-                        rangeEndMs: typeof wikiRange?.end_ms === 'number' ? wikiRange.end_ms : null,
-                        connectors: Array.isArray(wo.payload.connectors) &&
-                            wo.payload.connectors.every((connector) => typeof connector === 'string')
-                            ? [...wo.payload.connectors]
-                            : null,
-                        updatedSince: typeof wo.payload.taskUpdatedSince === 'string' ? wo.payload.taskUpdatedSince : null,
-                        updatedBefore: typeof wo.payload.taskUpdatedBefore === 'string'
-                            ? wo.payload.taskUpdatedBefore
-                            : null,
-                        noUpdateScope: typeof wo.payload.noUpdateScope === 'string' ? wo.payload.noUpdateScope : null,
-                    };
-                }
-                // Per-run scoped envelope (live-gate finding, 2026-07-18): gateway
-                // 'model_tool' executions are envelope-gated, and workerRun is a new
-                // caller class with no issuer - without this, every worker tool call
-                // (incl. report_publish) dies 'envelope_missing'. Mirrors the report
-                // lane's issuance (createPersonaReportAsk wiring below); issuance
-                // failure rejects -> failWorkOrder (no envelope-less fallback run).
-                if (envelopeBootstrap.envelopeAuthority && envelopeBootstrap.metadata.issuance !== 'off') {
-                    const wallSeconds = Math.min(Math.max(Number(process.env.MAMA_REPORT_WALL_SECONDS) || 900, 60), 1800);
-                    const workOrderEnvelopeAuthority = envelopeBootstrap.envelopeAuthority;
-                    runOptions.prepareEnvelope = () => workOrderEnvelopeAuthority.buildAndPersist({
-                        agent_id: 'mama-owner',
-                        instance_id: (0, node_crypto_1.randomUUID)(),
-                        // 'watch' = daemon-internal issuing source (closed EnvelopeSource
-                        // union; enforcement authorizes on scope, never on source).
-                        source: 'watch',
-                        channel_id: `worker:${wo.workKind}`,
-                        trigger_context: { user_text: `<stage2 workorder ${wo.workKind}#${wo.id}>` },
-                        // Identity scopes only - the read mirror is enforcement-layer.
-                        scope: workOrderScope,
-                        tier: 2,
-                        budget: { wall_seconds: wallSeconds },
-                        expires_at: new Date(Date.now() + wallSeconds * 1000 + 30_000).toISOString(),
-                    });
-                    // A native child the turn delegates long maintenance work to keeps working after
-                    // the parent attempt returned, so it needs its OWN grant on the SAME scope with a
-                    // wall it can actually finish inside. The parent's 900s envelope, which the child
-                    // cannot renew, would refuse every call it made past the parent's clock - the same
-                    // reason issueOwnerSubagentEnvelope exists for owner turns.
-                    const subagentWallSeconds = 1800;
-                    runOptions.prepareSubagentEnvelope = () => workOrderEnvelopeAuthority.buildAndPersist({
-                        agent_id: 'mama-owner',
-                        instance_id: (0, node_crypto_1.randomUUID)(),
-                        source: 'watch',
-                        channel_id: `worker:${wo.workKind}`,
-                        trigger_context: {
-                            user_text: `<stage2 workorder subagent ${wo.workKind}#${wo.id}>`,
-                        },
-                        scope: workOrderScope,
-                        tier: 2,
-                        budget: { wall_seconds: subagentWallSeconds },
-                        expires_at: new Date(Date.now() + subagentWallSeconds * 1000 + 30_000).toISOString(),
-                    });
-                }
-                return Object.keys(runOptions).length > 0 ? runOptions : undefined;
-            },
-            onEvent: (event) => {
-                // Telemetry replacement for executeValidatedRun's task_start/complete
-                // rows (plan E4): the ledger row is the durable record; agent_activity
-                // keeps the operational trace queryable.
-                try {
-                    logWorkOrderActivity(db, {
-                        agent_id: 'mama-owner',
-                        agent_version: 0,
-                        type: `workorder_${event.type}`,
-                        input_summary: `#${event.workOrderId}`,
-                        output_summary: event.reason ?? '',
-                        // Token telemetry continuity: the legacy persona path recorded
-                        // tokens_used via executeValidatedRun; the Stage-2 cutover
-                        // (2026-07-21) silently zeroed it, blinding all cost measurement.
-                        tokens_used: event.tokensUsed,
-                        details: workOrderActivityDetails(event),
-                        execution_status: 'completed',
-                        trigger_reason: 'workorder-consumer',
-                    });
-                }
-                catch {
-                    /* telemetry only */
-                }
-            },
-        });
-        // (Consumer stop is folded into the operator-DB gateway above - ordering.)
-    }
-    const temporalTimeZone = Intl.DateTimeFormat().resolvedOptions().timeZone;
-    const temporalAssembly = (0, temporal_init_js_1.assembleDaemonTemporalRuntime)({
-        flag: temporalFlag,
-        backend: runtimeBackend,
-        envelopeIssuanceMode: envelopeBootstrap.metadata.issuance,
-        effectiveTools: temporalEffectiveTools,
-        availableTools: temporalAvailableTools,
-        transportReady: Boolean(agentLoopClient.runWithContent),
-        timeZone: temporalTimeZone,
-        ledger: taskLedger,
-        consumer: workOrderConsumer,
-        log: (line) => temporalLogger.info(line),
-    });
-    temporalRuntime = temporalAssembly.runtime;
-    const { rawStoreForApi, enabledConnectorNames, connectorSchedulerStop } = await (0, connector_init_js_1.initConnectors)(connectorExtractionFn, {
-        connectorConfigLoadResult,
-        nudge: () => triggerLoopNudge.current?.(),
-    });
-    // Inject rawStore into tool executor for agent_test connector data access
-    if (rawStoreForApi) {
-        toolExecutor.setRawStore(rawStoreForApi);
-        agentLoop.setRawStore(rawStoreForApi);
-    }
-    // Add connector scheduler to graceful shutdown if active
-    if (connectorSchedulerStop) {
-        gateways.push({ stop: () => Promise.resolve(connectorSchedulerStop()) });
-    }
-    // ── Trigger loop (M1, default-on): agent-evolved triggers on the live stream ──
-    // MAMA_TRIGGER_LOOP=0 is the explicit opt-out. Placed after initConnectors (which feeds
-    // connector_event_index) and after mama-core initDB. Read-only: recall/surface/log.
-    const { isOperatorTriggerLoopEnabled, resolveOperatorReportChatId } = await import('../../operator/runtime-config.js');
-    if (isOperatorTriggerLoopEnabled(process.env)) {
-        // Component isolation (PR #119 review): a trigger-loop bootstrap failure (bad import,
-        // DB permission, registry constructor) must not abort the whole daemon before Phase
-        // 10/11 - the gateways/viewer/agent serve independently of this optional leg. The
-        // failure is still surfaced LOUDLY below (console.error), never swallowed silently.
-        try {
-            const { OperatorTriggerLoop } = await import('../../operator/operator-trigger-loop.js');
-            const { ConnectorDeltaRepo } = await import('../../operator/connector-delta-repo.js');
-            const { TriggerRegistry } = await import('../../operator/trigger-registry.js');
-            const { createMamaMemoryPort } = await import('../../operator/mama-memory-port.js');
-            const { reviewTriggerCLI } = await import('../../operator/trigger-review.js');
-            const { ReportScheduler, FileReportScheduleStore, parseReportHours } = await import('../../operator/report-scheduler.js');
-            // Set when a report is composed, read when that same report is delivered. Safe
-            // because ALL operator work serializes on the operator lane (SOURCE_GLOBAL_LANES),
-            // so compose and deliver cannot interleave with another report - stated here
-            // because the safety comes from the lane, not from this file.
-            let lastReportProvenance = {
-                status: 'unavailable',
-                reason: 'no_run_handle',
-            };
-            const { createPersonaReportAsk } = await import('../../operator/report-run.js');
-            const { FilePendingReportStore } = await import('../../operator/pending-report-store.js');
-            const triggerRegistry = new TriggerRegistry(operatorDb);
-            // Owner-report leg (M1.5): destination chat comes from env (~/.mama/start.sh),
-            // never source. No chat configured or no telegram gateway -> loop stays read-only.
-            const reportChatId = resolveOperatorReportChatId(process.env, config.telegram?.allowed_chats);
-            // TG-05/TG-06: one durable production boundary for every report mode.
-            // The delivery ledger reserves exact output and the coordinator owns
-            // every Telegram send; no report text is copied into another model.
-            let reportDelivery;
-            const reportTarget = reportChatId && telegramGateway
-                ? { source: 'telegram', channelId: reportChatId }
-                : undefined;
-            if (reportChatId && telegramGateway && reportTarget) {
-                const reportControl = telegramGateway.createReportDeliveryControl();
-                const coordinator = new report_delivery_coordinator_js_1.ReportDeliveryCoordinator({
-                    store: reportContextStore,
-                    control: reportControl,
-                    ownerTarget: reportTarget,
-                    executorId: `daemon:${process.pid}`,
-                });
-                // Startup reconciliation: every nonterminal SQLite row keeps its
-                // Telegram-ledger pin; every terminal row releases it (Decision 2).
-                const pinState = reportContextStore.listPinReconciliation();
-                await reportControl.reconcilePins(pinState.nonterminal, pinState.terminal);
-                reportDelivery = {
-                    deliverPrepared: async (report) => {
-                        const outcome = await coordinator.deliverPrepared(report);
-                        if (outcome.status === 'delivered' && report.mode === 'full') {
-                            // The full-report leg liveness beat moves from the removed V2
-                            // carry callback to the delivered outcome.
-                            (0, leg_cadence_js_1.getLegCadence)()?.beat('full-report');
-                        }
-                        return outcome;
-                    },
-                };
-            }
-            // Scheduled full-report leg (M2): local hours from env (~/.mama/start.sh), never source.
-            // Empty/absent -> [] -> leg off. Requires the same telegram sink as the digest leg.
-            const fullReportHours = parseReportHours(process.env.MAMA_TRIGGER_LOOP_FULL_REPORT_HOURS || '');
-            // Constructed whenever the report SINK exists, even with no scheduled
-            // hours (empty hours -> shouldFire never fires): on-demand reports
-            // API-triggered reports need the persistent anchor state regardless of
-            // whether scheduled hours are configured.
-            const reportScheduler = reportDelivery
-                ? new ReportScheduler(fullReportHours, new FileReportScheduleStore((0, config_manager_js_1.expandPath)('~/.mama/operator/report-schedule-state.json')))
-                : undefined;
-            const ownerEventEnvelopeAuthority = envelopeBootstrap.envelopeAuthority;
-            const ownerEventExecution = (0, owner_event_policy_js_1.resolveOwnerEventExecution)({
-                issuance: envelopeBootstrap.metadata.issuance,
-                hasAuthority: ownerEventEnvelopeAuthority !== undefined,
-            });
-            const ownerMaintenanceAsk = async (prompt) => {
-                const result = await agentLoop.run(prompt, {
-                    sessionKey: owner_runtime_js_1.OWNER_RUNTIME_SESSION_KEY,
-                    source: 'operator',
-                    channelId: 'trigger-maintenance',
-                    agentContext: backgroundOwnerContext,
-                    sessionPolicyRole: ownerRole,
-                    prepareEnvelope: async () => {
-                        const envelope = await issueOwnerRuntimeEnvelope('trigger-maintenance', 600);
-                        if (!envelope)
-                            throw new Error('Owner maintenance requires envelope authority');
-                        return envelope;
-                    },
-                    prepareSubagentEnvelope: () => issueOwnerSubagentEnvelope('trigger-maintenance'),
-                    requestTimeoutMs: 600_000,
-                });
-                return result.response;
-            };
-            const triggerLoop = new OperatorTriggerLoop({
-                backend: runtimeBackend,
-                delta: new ConnectorDeltaRepo(getAdapter(), (0, config_manager_js_1.expandPath)('~/.mama/operator/trigger-loop-cursors.json')),
-                memory: createMamaMemoryPort(),
-                registry: triggerRegistry,
-                ...(ownerEventExecution.enabled ? { ownerEventInbox } : {}),
-                askAgent: ownerMaintenanceAsk,
-                // TG-03/TG-04/TG-05: a report is another stimulus for the standing
-                // owner subject. It keeps the same backend thread and progressive tool
-                // catalog while the current envelope narrows effects for this delivery.
-                reportAsk: createPersonaReportAsk({
-                    run: async (prompt, sourceMessageRef, reportOptions) => {
-                        const reportAgentPolicy = buildOperatorReportAgentPolicy(config.agent.model, runtimeBackend, privateConnectorPolicy, ownerRole);
-                        const result = await agentLoop.runWithContent([{ type: 'text', text: prompt }], {
-                            sessionKey: owner_runtime_js_1.OWNER_RUNTIME_SESSION_KEY,
-                            source: 'operator',
-                            channelId: 'report',
-                            lanePriority: reportOptions.lanePriority,
-                            // The current report role narrows effect authority; the stable
-                            // sessionPolicyRole keeps the owner thread compatible.
-                            agentContext: reportAgentPolicy.agentContext,
-                            sessionPolicyRole: ownerRole,
-                            gatewayToolsPrompt: reportAgentPolicy.gatewayToolsPrompt,
-                            prepareEnvelope: async () => {
-                                const envelope = await issueOwnerRuntimeEnvelope('report', 600);
-                                if (!envelope)
-                                    throw new Error('Owner report requires envelope authority');
-                                return envelope;
-                            },
-                            prepareSubagentEnvelope: () => issueOwnerSubagentEnvelope('report'),
-                            requestTimeoutMs: 600_000,
-                            ownerJournalPrompt: `Report stimulus: ${sourceMessageRef}`,
-                            sourceMessageRef,
-                        });
-                        return {
-                            response: result.response,
-                            history: result.history,
-                            turns: result.turns,
-                            // Dropped here until now: the loop already resolves a run handle, and
-                            // discarding it meant a delivered report could not be traced to the run
-                            // that wrote it.
-                            modelRunId: result.modelRunId,
-                            ...(result.modelRunProvenance === undefined
-                                ? {}
-                                : { modelRunProvenance: result.modelRunProvenance }),
-                            ...(result.ownerJournalProvenance === undefined
-                                ? {}
-                                : { ownerJournalProvenance: result.ownerJournalProvenance }),
-                        };
-                    },
-                    log: (line) => console.log(line),
-                    onRunProvenance: (provenance) => {
-                        lastReportProvenance = provenance;
-                    },
-                    onRecoveryFailure: () => {
-                        recordIssue({
-                            surface: 'delivery',
-                            signature: 'journal_commit_failed',
-                            severity: 'error',
-                            error: 'Report completed but owner runtime recovery journal did not persist',
-                        });
-                    },
-                }),
-                review: (trigger, context) => reviewTriggerCLI(trigger, context, ownerMaintenanceAsk),
-                reportDelivery,
-                reportTarget,
-                reportScheduler,
-                // TG-06: composition supplies provenance immediately to the prepared
-                // delivery; this callback receives that durable artifact only after send success.
-                fullReportProvenance: () => lastReportProvenance,
-                pendingReportStore: new FilePendingReportStore((0, config_manager_js_1.expandPath)('~/.mama/operator/pending-owner-reports.json'), (line) => console.error(line)),
-                config: {
-                    tickMs: Number(process.env.MAMA_TRIGGER_LOOP_TICK_MS || 60_000),
-                    drainLimit: Number(process.env.MAMA_TRIGGER_LOOP_DRAIN_LIMIT || 200),
-                    authorEveryNTicks: Number(process.env.MAMA_TRIGGER_LOOP_AUTHOR_EVERY || 30),
-                    reviewEveryNTicks: Number(process.env.MAMA_TRIGGER_LOOP_REVIEW_EVERY || 240),
-                    authorWindowSize: 50,
-                    reportEveryNTicks: Number(process.env.MAMA_TRIGGER_LOOP_REPORT_EVERY || 15),
-                    nudgeDebounceMs: Number(process.env.MAMA_TRIGGER_LOOP_NUDGE_DEBOUNCE_MS || 15_000),
-                },
-                log: (line) => console.log(line),
-            });
-            if (reportDelivery) {
-                console.log('[trigger-loop] owner-report leg enabled (telegram, coordinator)');
-            }
-            if (reportScheduler) {
-                console.log(`✓ Trigger loop scheduled full-report leg enabled (local hours: ${fullReportHours.join(', ')})`);
-            }
-            // Watched only when actually started, at its REAL tick (review: an
-            // unconditional 60s declare pages forever when the loop is opted out
-            // or the env raises the tick). Cadence covers a long full-report tick
-            // (the re-entrancy guard skips beats while one runs).
-            // A non-numeric env value yields NaN, and silentFor > NaN*2 is always
-            // false - the watchdog would silently disable itself, which is the one
-            // thing a watchdog must not do. Unparseable falls back to the default.
-            const trigTickRaw = Number(process.env.MAMA_TRIGGER_LOOP_TICK_MS || 60_000);
-            (0, leg_cadence_js_1.getLegCadence)()?.declare('trigger-loop', Math.max(Number.isFinite(trigTickRaw) ? trigTickRaw : 60_000, 15 * 60_000));
-            if (reportScheduler && fullReportHours.length > 0) {
-                // Hours alone are not a leg: without the report sink the scheduler
-                // is undefined, the leg could never beat, and the only outcome is a
-                // false page 52 hours in.
-                // Declared at BOOT, not on first success - a report leg that never
-                // fires is exactly what this watches. 26h covers the daily schedule.
-                (0, leg_cadence_js_1.getLegCadence)()?.declare('full-report', 26 * 60 * 60 * 1000);
-            }
-            const stopTriggerLoop = triggerLoop.start();
-            stopOwnerEventRuntime = async () => {
-                await stopTriggerLoop();
-            };
-            // M2.4: point the connector sink's forwarder at this loop now that it exists.
-            triggerLoopNudge.current = () => triggerLoop.nudge();
-            triggerLoopFullReport.current = () => triggerLoop.startFullReport();
-            if (ownerEventExecution.enabled && ownerEventEnvelopeAuthority) {
-                // MAMA itself owns connector events. This is the same AgentLoop and
-                // owner operating policy as the owner console, on a durable per-channel
-                // background session. There is no separate Conductor persona.
-                const ownerEventContext = (0, owner_event_policy_js_1.buildOwnerEventAgentContext)({
-                    backend: runtimeBackend,
-                    model: config.agent.model,
-                    ownerRole,
-                    privateConnectorPolicy,
-                });
-                // ONE expression for what an event turn may read: the envelope and the
-                // packet are both built from it, so they can never disagree.
-                const ownerEventReadScope = (batch) => {
-                    const projectId = (0, reactive_config_js_1.resolveReactiveProjectRoot)(config, process.env);
-                    return {
-                        projectRefs: [{ kind: 'project', id: projectId }],
-                        rawConnectors: [
-                            ...privateConnectorPolicy.projectRawConnectors('owner_console', codeActRawConnectors),
-                        ],
-                        memoryScopes: uniqueMemoryScopes((0, scope_context_js_1.deriveMemoryScopes)({
-                            source: 'owner-event',
-                            channelId: batch.channelKey,
-                            projectId,
-                        })),
-                    };
-                };
-                const ownerEventIssueEnvelope = async (batch) => {
-                    const readScope = ownerEventReadScope(batch);
-                    const wallSeconds = 300;
-                    return ownerEventEnvelopeAuthority.buildAndPersist({
-                        agent_id: 'mama-owner',
-                        instance_id: (0, node_crypto_1.randomUUID)(),
-                        source: 'watch',
-                        channel_id: batch.channelKey,
-                        trigger_context: { user_text: '<MAMA owner event turn>' },
-                        scope: {
-                            project_refs: readScope.projectRefs,
-                            raw_connectors: readScope.rawConnectors,
-                            memory_scopes: readScope.memoryScopes,
-                            allowed_destinations: reportChatId
-                                ? [{ kind: 'telegram', id: reportChatId }]
-                                : [],
-                        },
-                        tier: 1,
-                        budget: { wall_seconds: wallSeconds },
-                        expires_at: new Date(Date.now() + wallSeconds * 1000 + 30_000).toISOString(),
-                    });
-                };
-                const ownerEventLoop = new owner_event_loop_js_1.OwnerEventLoop({
-                    inbox: ownerEventInbox,
-                    runner: agentLoop,
-                    agentContext: ownerEventContext,
-                    ownerRuntimeRole: ownerRole,
-                    resolveActivation: (activation, batch) => (0, procedure_activation_js_1.resolveProcedureActivation)(procedureStore, {
-                        ownerScope: 'owner:runtime',
-                        projectId: ownerEventReadScope(batch).projectRefs[0].id,
-                        channelId: ownerEventReadScope(batch).memoryScopes.find((s) => s.kind === 'channel')
-                            ?.id,
-                    }, activation),
-                    assertActiveActivations: (batch) => (0, procedure_activation_js_1.assertActiveProcedureActivations)(procedureStore, {
-                        ownerScope: 'owner:runtime',
-                        projectId: ownerEventReadScope(batch).projectRefs[0].id,
-                        channelId: ownerEventReadScope(batch).memoryScopes.find((s) => s.kind === 'channel')
-                            ?.id,
-                    }, batch),
-                    buildPrompt: async (batch) => {
-                        const projectedBrief = (0, console_brief_js_1.projectConsoleBriefForPrompt)(readCanonicalOwnerBrief(), privateConnectorPolicy);
-                        const batchId = String(batch.id);
-                        const carryBrief = lastOwnerEventBriefDecision?.batchId === batchId
-                            ? lastOwnerEventBriefDecision.carry
-                            : ownerBriefMemory.admit(owner_runtime_js_1.OWNER_RUNTIME_SESSION_KEY, projectedBrief);
-                        lastOwnerEventBriefDecision = { batchId, carry: carryBrief };
-                        return (0, owner_event_prompt_js_1.buildOwnerEventPrompt)({
-                            batch,
-                            // Standing policy goes on the thread once; an owner correction to the brief
-                            // changes its hash and is carried on the next turn.
-                            ownerBrief: carryBrief ? projectedBrief : null,
-                            ownerTelegramChatId: reportChatId,
-                        });
-                    },
-                    promptBriefState: (batch) => lastOwnerEventBriefDecision?.batchId === String(batch.id) &&
-                        lastOwnerEventBriefDecision.carry
-                        ? 'sent'
-                        : 'omitted',
-                    // No model turn ran, so the brief this batch admitted was never delivered on the
-                    // owner thread: forget it so the retry carries it again.
-                    retractBrief: (batch) => {
-                        if (lastOwnerEventBriefDecision?.batchId !== String(batch.id))
-                            return;
-                        if (lastOwnerEventBriefDecision.carry) {
-                            ownerBriefMemory.forget(owner_runtime_js_1.OWNER_RUNTIME_SESSION_KEY);
-                        }
-                        lastOwnerEventBriefDecision = null;
-                    },
-                    issueEnvelope: ownerEventIssueEnvelope,
-                    getNoUpdateMaxId: (scope) => taskLedger.maxNoUpdateId(scope),
-                    hasUnsafeReplayEffects: (batch) => ownerActionEffectLedger.hasUnsafeReplayEffects(`owner-event:${batch.id}`),
-                    hasUnsettledEffects: (batch) => ownerActionEffectLedger.hasUnsettledEffects(`owner-event:${batch.id}`),
-                    getTerminalReceipt: (batch) => resolveOwnerEventTerminalReceipt(batch, {
-                        ownerEventEffectLedger,
-                        ownerActionEffectLedger,
-                        taskLedger,
-                    }),
-                    recordTriggerOutcome: (triggerId, outcome, receiptId) => triggerRegistry.recordOutcome(triggerId, outcome, receiptId),
-                    onDead: async (message) => {
-                        console.error(message);
-                        await (0, leg_cadence_js_1.getLegPageNotifier)()?.(message);
-                    },
-                    recordIssue: ({ channelKey, reason }) => recordIssue({
-                        surface: 'inbox',
-                        signature: 'dead_batch',
-                        severity: 'error',
-                        error: reason,
-                        sourceRef: channelKey,
-                    }),
-                    log: (line) => console.log(line),
-                });
-                let ownerEventTickPromise = null;
-                const runOwnerEventTick = () => {
-                    if (ownerEventTickPromise)
-                        return;
-                    ownerEventTickPromise = ownerEventLoop
-                        .tick()
-                        .catch((err) => console.error(`[owner-event] tick failed: ${err instanceof Error ? err.message : String(err)}`))
-                        .finally(() => {
-                        ownerEventTickPromise = null;
-                    });
-                };
-                const ownerEventTimer = setInterval(runOwnerEventTick, 5_000);
-                ownerEventTimer.unref?.();
-                runOwnerEventTick();
-                console.log('✓ MAMA owner-event agent enabled');
-                stopOwnerEventRuntime = async () => {
-                    triggerLoopNudge.current = null;
-                    triggerLoopFullReport.current = null;
-                    clearInterval(ownerEventTimer);
-                    // Let an in-flight effect reach its durable ACK before the shared
-                    // operator DB closes.
-                    if (ownerEventTickPromise)
-                        await ownerEventTickPromise;
-                    await stopTriggerLoop();
-                };
-            }
-            else {
-                const reason = ownerEventExecution.enabled
-                    ? 'owner-event envelope authority unavailable'
-                    : ownerEventExecution.reason;
-                console.error(`[owner-event] disabled: ${reason}`);
-            }
-            temporalLogger.info('Trigger loop enabled (MAMA owner-event intake + report mode)');
-        }
-        catch (error) {
-            await stopOwnerEventRuntime?.().catch(() => { });
-            stopOwnerEventRuntime = null;
-            console.error('[trigger-loop] FAILED to start - daemon continues WITHOUT the trigger loop. Fix and restart:', error);
-        }
-    }
-    // ── Phase 10: API Server + Routes ────────────────────────────────────────
-    const { apiServer, eventBus } = await (0, api_server_init_js_1.initApiServer)({
-        config,
-        scheduler,
-        db,
-        healthService,
-        healthCheckService,
-        rawStore: rawStoreForApi,
-        enabledConnectors: enabledConnectorNames,
-        getAdapter,
-        envelopeMetadata: envelopeBootstrap.metadata,
-        envelopeAuthority: envelopeBootstrap.envelopeAuthority,
-        contextCompileService,
-        connectorConfigLoadResult,
-        privateConnectorPolicy,
-        runOwnerStimulus,
-    });
-    const apiRoutesHandle = await (0, api_routes_init_js_1.registerApiRoutes)({
-        config,
-        apiServer,
-        eventBus,
-        oauthManager,
-        mamaApi,
-        messageRouter,
-        reportContextStore,
-        toolExecutor,
-        discordGateway,
-        slackGateway,
-        graphHandler,
-        getAdapter,
-        privateConnectorPolicy,
-        rawConnectorScope: [
-            ...privateConnectorPolicy.projectRawConnectors(exports.ONE_AGENT_TURN_POLICY.roleName, codeActRawConnectors),
-        ],
-        sessionsDb: db,
-        workOrderConsumer: workOrderConsumer ?? undefined,
-        boardRefreshGate,
-        requestFullReport: () => triggerLoopFullReport.current?.() ?? { accepted: false, reason: 'unavailable' },
-    });
-    boardRepairNudge.current = apiRoutesHandle.requestBoardRepair;
-    {
-        const { broadcastReportUpdate } = await import('../../api/report-handler.js');
-        apiServer.reportStore.setTaskProjectionProvider(() => operatorDb.transaction(() => {
-            const page = taskLedger.listPage({ includeTerminal: false, order: 'deadline_priority' });
-            return {
-                basisRevision: taskLedger.readGeneration(),
-                html: (0, board_pipeline_render_js_1.renderPipelineSlot)(page.tasks, Date.now(), page.total),
-            };
-        })(), (slots) => broadcastReportUpdate(apiServer.reportSseClients, { slots }));
-        refreshTaskBoard.current = () => {
-            apiServer.reportStore.refreshTaskProjection();
-        };
-    }
-    gateways.push({ stop: async () => apiRoutesHandle.stop() });
-    // ── Stage-2 boot pass (plan S2-T3): runtime assembly registered hooks;
-    // recovery/cleanup run after routes are ready, then the consumer starts.
-    const temporalBoot = temporalAssembly.bootAfterRoutes();
-    if (temporalBoot.paused > 0) {
-        temporalLogger.info(`paused ${temporalBoot.paused} open workorder(s)`);
-    }
-    if (temporalBoot.enabled && (temporalBoot.resumed > 0 || temporalBoot.enqueued > 0)) {
-        temporalLogger.info(`resumed ${temporalBoot.resumed}, enqueued ${temporalBoot.enqueued}`);
-    }
-    // ── Phase 11: Server Start + Shutdown ────────────────────────────────────
-    await (0, server_start_js_1.startServer)({ apiServer, gateways });
-    (0, shutdown_js_1.installShutdownHandlers)({
-        metricsInterval,
-        healthWarningInterval,
-        scheduler,
-        cronWorker,
-        heartbeatScheduler,
-        tokenKeepAlive,
-        gateways,
-        pluginLoader,
-        agentLoop,
-        stopExtraction,
-        sessionStore,
-        db,
-        metricsStore,
-        metricsCleanup,
-    });
-}
-//# sourceMappingURL=start.js.map