@jungjaehoon/mama-os 0.9.0 → 0.9.1

package/dist/setup/setup-prompt.js

@@ -93,6 +93,31 @@ update_config("agent.model", "gpt-5.3-codex")   // for codex-mcp
 - If using \`codex-mcp\`, user must have Codex credentials in \`~/.mama/.codex/\`
 - Do NOT use \`backend: codex\` (legacy, broken) - always use \`codex-mcp\`
 
+### Security & Permission Settings
+
+Ask users about agent permission settings:
+
+**Agent Autonomy (dangerouslySkipPermissions)**
+
+This controls whether agents can execute tools (file writes, bash commands, git operations) without asking for permission.
+
+**Options:**
+- **true** (default): Agents run autonomously without approval prompts. Required for headless/daemon operation.
+- **false**: Agents ask for permission before executing each tool.
+
+⚠️ **Warning**: Setting this to \`true\` gives agents full system access. Only enable in trusted environments.
+
+To configure:
+\`\`\`
+update_config("multi_agent.dangerouslySkipPermissions", true)
+\`\`\`
+
+**IMPORTANT**: This setting also requires \`MAMA_TRUSTED_ENV=true\` environment variable.
+- For systemd service: Add \`Environment=MAMA_TRUSTED_ENV=true\` to the service file
+- For manual start: Run with \`MAMA_TRUSTED_ENV=true mama start\`
+
+If they want autonomous agents, save the config and remind them about the environment variable.
+
 ### Completion
 
 After setup is done:

package/dist/setup/setup-prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-prompt.js","sourceRoot":"","sources":["../../src/setup/setup-prompt.ts"],"names":[],"mappings":";;;AAAa,QAAA,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwJlC,CAAC"}
+{"version":3,"file":"setup-prompt.js","sourceRoot":"","sources":["../../src/setup/setup-prompt.ts"],"names":[],"mappings":";;;AAAa,QAAA,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiLlC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jungjaehoon/mama-os",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "MAMA OS - Your AI Operating System. Control + Visibility for AI-Powered Automation",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/public/viewer/js/modules/chat.js

@@ -80,10 +80,7 @@ export class ChatModule {
         }
     }
     async autoCheckpoint() {
-        // DISABLED: Auto-checkpoint was saving raw conversation history to MAMA memory.
-        // Checkpoints should only be saved manually via /checkpoint command with proper summaries.
-        // The viewer chat uses localStorage for session persistence instead.
-        logger.info('Auto-checkpoint disabled (use /checkpoint for manual saves)');
+        // Auto-checkpoint disabled - use /checkpoint command for manual saves
         return;
     }
     // =============================================

package/public/viewer/js/modules/dashboard.js

@@ -72,48 +72,68 @@ export class DashboardModule {
     }
     /**
      * Load dashboard status from API
+     * Uses Promise.allSettled for parallel loading to improve performance
      */
     async loadStatus() {
         try {
-            this.data = await API.get('/api/dashboard/status');
-            // Load multi-agent status (Sprint 3 F2)
-            try {
-                this.multiAgentData = await API.get('/api/multi-agent/status');
+            // Load all data in parallel for better performance
+            const [dashboardResult, multiAgentResult, delegationsResult, cronResult, tokenResult, mcpResult,] = await Promise.allSettled([
+                API.get('/api/dashboard/status'),
+                API.get('/api/multi-agent/status'),
+                API.get('/api/multi-agent/delegations?limit=10'),
+                API.getCronJobs(),
+                Promise.all([API.getTokenSummary(), API.getTokensByAgent()]),
+                API.get('/api/mcp-servers'),
+            ]);
+            // Process dashboard status (required)
+            if (dashboardResult.status === 'fulfilled') {
+                this.data = dashboardResult.value;
             }
-            catch (e) {
-                logger.warn('[Dashboard] Multi-agent status unavailable:', e);
+            else {
+                throw dashboardResult.reason;
+            }
+            // Process multi-agent status
+            if (multiAgentResult.status === 'fulfilled') {
+                this.multiAgentData = multiAgentResult.value;
+            }
+            else {
+                logger.warn('[Dashboard] Multi-agent status unavailable:', multiAgentResult.reason);
                 this.multiAgentData = { enabled: false, agents: [] };
             }
-            // Load delegations (F4 endpoint)
-            try {
-                this.delegationsData = await API.get('/api/multi-agent/delegations?limit=10');
+            // Process delegations
+            if (delegationsResult.status === 'fulfilled') {
+                this.delegationsData = delegationsResult.value;
             }
-            catch (e) {
-                logger.warn('[Dashboard] Delegations unavailable:', e);
+            else {
+                logger.warn('[Dashboard] Delegations unavailable:', delegationsResult.reason);
                 this.delegationsData = { delegations: [], count: 0 };
             }
-            // Load cron jobs
-            try {
-                this.cronData = await API.getCronJobs();
+            // Process cron jobs
+            if (cronResult.status === 'fulfilled') {
+                this.cronData = cronResult.value;
             }
-            catch (e) {
-                logger.warn('[Dashboard] Cron data unavailable:', e);
+            else {
+                logger.warn('[Dashboard] Cron data unavailable:', cronResult.reason);
                 this.cronData = null;
             }
-            // Load token summary
-            try {
-                const [summary, byAgent] = await Promise.all([
-                    API.getTokenSummary(),
-                    API.getTokensByAgent(),
-                ]);
+            // Process token data
+            if (tokenResult.status === 'fulfilled') {
+                const [summary, byAgent] = tokenResult.value;
                 this.tokenData = { summary, byAgent };
             }
-            catch (e) {
-                logger.warn('[Dashboard] Token data unavailable:', e);
+            else {
+                logger.warn('[Dashboard] Token data unavailable:', tokenResult.reason);
                 this.tokenData = null;
             }
-            // Load MCP servers
-            await this.loadMCPServers();
+            // Process MCP servers
+            if (mcpResult.status === 'fulfilled' && mcpResult.value && 'servers' in mcpResult.value) {
+                this.mcpServers = mcpResult.value.servers || [];
+                this.renderMCPServers();
+            }
+            else {
+                logger.warn('[Dashboard] MCP servers unavailable');
+                this.mcpServers = [];
+            }
             this.render();
             this.setStatus(`Last updated: ${new Date().toLocaleTimeString()}`);
         }
@@ -122,21 +142,6 @@ export class DashboardModule {
             this.setStatus(`Error: ${getErrorMessage(error)}`, 'error');
         }
     }
-    /**
-     * Load MCP servers from API
-     */
-    async loadMCPServers() {
-        try {
-            const data = await API.get('/api/mcp-servers');
-            if (data && 'servers' in data) {
-                this.mcpServers = data.servers || [];
-                this.renderMCPServers();
-            }
-        }
-        catch (error) {
-            logger.error('Failed to load MCP servers:', error);
-        }
-    }
     /**
      * Render all dashboard sections
      */

package/public/viewer/src/modules/chat.ts

@@ -66,12 +66,6 @@ type CheckpointRecord = {
   summary: string;
 };
 
-// Reserved for future use - attachment message handling
-type _ChatMessageWithAttachment = {
-  id?: string;
-  [key: string]: unknown;
-};
-
 /**
  * Chat Module Class
  */
@@ -153,10 +147,7 @@ export class ChatModule {
   }
 
   async autoCheckpoint(): Promise<void> {
-    // DISABLED: Auto-checkpoint was saving raw conversation history to MAMA memory.
-    // Checkpoints should only be saved manually via /checkpoint command with proper summaries.
-    // The viewer chat uses localStorage for session persistence instead.
-    logger.info('Auto-checkpoint disabled (use /checkpoint for manual saves)');
+    // Auto-checkpoint disabled - use /checkpoint command for manual saves
     return;
   }
 

package/public/viewer/src/modules/dashboard.ts

@@ -177,51 +177,75 @@ export class DashboardModule {
 
   /**
    * Load dashboard status from API
+   * Uses Promise.allSettled for parallel loading to improve performance
    */
   async loadStatus(): Promise<void> {
     try {
-      this.data = await API.get<DashboardData>('/api/dashboard/status');
+      // Load all data in parallel for better performance
+      const [
+        dashboardResult,
+        multiAgentResult,
+        delegationsResult,
+        cronResult,
+        tokenResult,
+        mcpResult,
+      ] = await Promise.allSettled([
+        API.get<DashboardData>('/api/dashboard/status'),
+        API.get<MultiAgentDashboardStatus>('/api/multi-agent/status'),
+        API.get<DashboardDelegationsData>('/api/multi-agent/delegations?limit=10'),
+        API.getCronJobs(),
+        Promise.all([API.getTokenSummary(), API.getTokensByAgent()]),
+        API.get<McpServersResponse>('/api/mcp-servers'),
+      ]);
+
+      // Process dashboard status (required)
+      if (dashboardResult.status === 'fulfilled') {
+        this.data = dashboardResult.value;
+      } else {
+        throw dashboardResult.reason;
+      }
 
-      // Load multi-agent status (Sprint 3 F2)
-      try {
-        this.multiAgentData = await API.get<MultiAgentDashboardStatus>('/api/multi-agent/status');
-      } catch (e) {
-        logger.warn('[Dashboard] Multi-agent status unavailable:', e);
+      // Process multi-agent status
+      if (multiAgentResult.status === 'fulfilled') {
+        this.multiAgentData = multiAgentResult.value;
+      } else {
+        logger.warn('[Dashboard] Multi-agent status unavailable:', multiAgentResult.reason);
         this.multiAgentData = { enabled: false, agents: [] };
       }
 
-      // Load delegations (F4 endpoint)
-      try {
-        this.delegationsData = await API.get<DashboardDelegationsData>(
-          '/api/multi-agent/delegations?limit=10'
-        );
-      } catch (e) {
-        logger.warn('[Dashboard] Delegations unavailable:', e);
+      // Process delegations
+      if (delegationsResult.status === 'fulfilled') {
+        this.delegationsData = delegationsResult.value;
+      } else {
+        logger.warn('[Dashboard] Delegations unavailable:', delegationsResult.reason);
         this.delegationsData = { delegations: [], count: 0 };
       }
 
-      // Load cron jobs
-      try {
-        this.cronData = await API.getCronJobs();
-      } catch (e) {
-        logger.warn('[Dashboard] Cron data unavailable:', e);
+      // Process cron jobs
+      if (cronResult.status === 'fulfilled') {
+        this.cronData = cronResult.value;
+      } else {
+        logger.warn('[Dashboard] Cron data unavailable:', cronResult.reason);
         this.cronData = null;
       }
 
-      // Load token summary
-      try {
-        const [summary, byAgent] = await Promise.all([
-          API.getTokenSummary(),
-          API.getTokensByAgent(),
-        ]);
+      // Process token data
+      if (tokenResult.status === 'fulfilled') {
+        const [summary, byAgent] = tokenResult.value;
         this.tokenData = { summary, byAgent };
-      } catch (e) {
-        logger.warn('[Dashboard] Token data unavailable:', e);
+      } else {
+        logger.warn('[Dashboard] Token data unavailable:', tokenResult.reason);
         this.tokenData = null;
       }
 
-      // Load MCP servers
-      await this.loadMCPServers();
+      // Process MCP servers
+      if (mcpResult.status === 'fulfilled' && mcpResult.value && 'servers' in mcpResult.value) {
+        this.mcpServers = mcpResult.value.servers || [];
+        this.renderMCPServers();
+      } else {
+        logger.warn('[Dashboard] MCP servers unavailable');
+        this.mcpServers = [];
+      }
 
       this.render();
       this.setStatus(`Last updated: ${new Date().toLocaleTimeString()}`);
@@ -231,21 +255,6 @@ export class DashboardModule {
     }
   }
 
-  /**
-   * Load MCP servers from API
-   */
-  async loadMCPServers(): Promise<void> {
-    try {
-      const data = await API.get<McpServersResponse>('/api/mcp-servers');
-      if (data && 'servers' in data) {
-        this.mcpServers = data.servers || [];
-        this.renderMCPServers();
-      }
-    } catch (error) {
-      logger.error('Failed to load MCP servers:', error);
-    }
-  }
-
   /**
    * Render all dashboard sections
    */

package/public/viewer/viewer.html

@@ -25,10 +25,12 @@
       rel="stylesheet"
     />
 
-    <script src="https://unpkg.com/vis-network@9/dist/vis-network.min.js"></script>
-    <script src="https://unpkg.com/lucide@latest"></script>
-    <script src="https://cdn.jsdelivr.net/npm/marked@11/marked.min.js"></script>
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/dompurify/3.2.5/purify.min.js"></script>
+    <!-- External libraries with defer for non-blocking load -->
+    <script defer src="https://unpkg.com/vis-network@9/dist/vis-network.min.js"></script>
+    <script defer src="https://unpkg.com/lucide@latest"></script>
+    <script defer src="https://cdn.jsdelivr.net/npm/marked@11/marked.min.js"></script>
+    <script defer src="https://cdnjs.cloudflare.com/ajax/libs/dompurify/3.2.5/purify.min.js"></script>
+    <!-- Tailwind must load synchronously before config -->
     <script src="https://cdn.tailwindcss.com"></script>
     <script>
       tailwind.config = {

package/templates/personas/sisyphus.md

@@ -94,6 +94,14 @@ CONTEXT:
 - Prior analysis: {sub-agent result summary or file path}
 ```
 
+**Discord note (delegation trigger):**
+
+- `DELEGATE::...` text is only parsed if the Discord gateway processes the message.
+- If the guild/channel is configured with `requireMention: true`, normal messages without an @mention are ignored.
+- Delegation commands are treated as explicit triggers: if any line starts with `DELEGATE::` / `DELEGATE_BG::`, it will still be processed (even without an @mention).
+- Including the bot mention (example: `<@BOT_ID> DELEGATE::developer::...`) is still OK and makes intent obvious.
+- For low-friction delegation, prefer a dedicated swarm channel with `requireMention: false`.
+
 #### Asynchronous Delegation (background — do not wait for result)
 
 Use when assigning **independent tasks** to another agent while continuing your own work: