@lumi.ai/runner 0.15.7 → 0.15.9

package/dist/cli.js

@@ -345,6 +345,61 @@ var COLLECTIONS = {
   shipDeletions: "shipDeletions"
 };
 
+// ../shared/dist/riskyAction.js
+var RISKY_ACTIONS = [
+  {
+    id: "git_push",
+    label: "Push to GitHub",
+    meaning: "Write commits to a connected repository.",
+    enforcedBy: "github-token"
+  },
+  {
+    id: "task_create",
+    label: "Create tasks",
+    meaning: "Delegate by opening new work, including for other agents.",
+    enforcedBy: "mcp"
+  },
+  {
+    id: "task_assign",
+    label: "Assign work to others",
+    meaning: "Hand a task to another agent or a human.",
+    enforcedBy: "mcp"
+  },
+  {
+    id: "status_done",
+    label: "Mark work finished",
+    meaning: "Move a task into a review or done status \u2014 the claim that work is complete.",
+    enforcedBy: "mcp"
+  }
+];
+var RISKY_ACTION_IDS = RISKY_ACTIONS.map((a) => a.id);
+function isRiskyActionId(value) {
+  return typeof value === "string" && RISKY_ACTION_IDS.includes(value);
+}
+function splitRiskyActions(riskyActions) {
+  const enforced = [];
+  const advisory = [];
+  for (const action2 of riskyActions) {
+    if (isRiskyActionId(action2))
+      enforced.push(action2);
+    else if (action2.trim())
+      advisory.push(action2);
+  }
+  return { enforced, advisory };
+}
+function autonomyRule(agent) {
+  const { enforced, advisory } = splitRiskyActions(agent.riskyActions ?? []);
+  const named = [...enforced, ...advisory];
+  if (agent.autonomy >= 3) {
+    return "You have full autonomy (level 3) within your tool list: no action needs approval. Use it carefully \u2014 nothing will stop you.";
+  }
+  if (agent.autonomy <= 1) {
+    return "You are at autonomy level 1 \u2014 DRAFTS ONLY. Produce comments and drafts; do not mark work as done or ready for review, do not create or reassign tasks, and do not push to GitHub. When you need any of that, call approval_request with a short summary and STOP \u2014 somebody decides, and you will be started again with their answer. " + ASK_GUIDANCE;
+  }
+  return `You are at autonomy level 2. Work freely, except for these actions, which need approval: ${named.length ? named.join(", ") : "(none configured)"}. Before any of them, call approval_request with a short summary and STOP \u2014 you will be started again with the answer. ` + ASK_GUIDANCE;
+}
+var ASK_GUIDANCE = "If the task says who should approve \u2014 in its description, or because a particular person owns that area \u2014 name them in the request's `ask` so it reaches them rather than everyone.";
+
 // ../shared/dist/engineLimit.js
 function isEngineLimited(limit3, now) {
   return !!limit3 && limit3.resetsAt > now;
@@ -698,61 +753,6 @@ function firstStatusIn(statuses, category) {
   return statuses.find((s) => s.category === category);
 }
 
-// ../shared/dist/riskyAction.js
-var RISKY_ACTIONS = [
-  {
-    id: "git_push",
-    label: "Push to GitHub",
-    meaning: "Write commits to a connected repository.",
-    enforcedBy: "github-token"
-  },
-  {
-    id: "task_create",
-    label: "Create tasks",
-    meaning: "Delegate by opening new work, including for other agents.",
-    enforcedBy: "mcp"
-  },
-  {
-    id: "task_assign",
-    label: "Assign work to others",
-    meaning: "Hand a task to another agent or a human.",
-    enforcedBy: "mcp"
-  },
-  {
-    id: "status_done",
-    label: "Mark work finished",
-    meaning: "Move a task into a review or done status \u2014 the claim that work is complete.",
-    enforcedBy: "mcp"
-  }
-];
-var RISKY_ACTION_IDS = RISKY_ACTIONS.map((a) => a.id);
-function isRiskyActionId(value) {
-  return typeof value === "string" && RISKY_ACTION_IDS.includes(value);
-}
-function splitRiskyActions(riskyActions) {
-  const enforced = [];
-  const advisory = [];
-  for (const action2 of riskyActions) {
-    if (isRiskyActionId(action2))
-      enforced.push(action2);
-    else if (action2.trim())
-      advisory.push(action2);
-  }
-  return { enforced, advisory };
-}
-function autonomyRule(agent) {
-  const { enforced, advisory } = splitRiskyActions(agent.riskyActions ?? []);
-  const named = [...enforced, ...advisory];
-  if (agent.autonomy >= 3) {
-    return "You have full autonomy (level 3) within your tool list: no action needs approval. Use it carefully \u2014 nothing will stop you.";
-  }
-  if (agent.autonomy <= 1) {
-    return "You are at autonomy level 1 \u2014 DRAFTS ONLY. Produce comments and drafts; do not mark work as done or ready for review, do not create or reassign tasks, and do not push to GitHub. When you need any of that, call approval_request with a short summary and STOP \u2014 somebody decides, and you will be started again with their answer. " + ASK_GUIDANCE;
-  }
-  return `You are at autonomy level 2. Work freely, except for these actions, which need approval: ${named.length ? named.join(", ") : "(none configured)"}. Before any of them, call approval_request with a short summary and STOP \u2014 you will be started again with the answer. ` + ASK_GUIDANCE;
-}
-var ASK_GUIDANCE = "If the task says who should approve \u2014 in its description, or because a particular person owns that area \u2014 name them in the request's `ask` so it reaches them rather than everyone.";
-
 // ../shared/dist/runner.js
 var RUNNER_OFFLINE_AFTER_MS = 2 * 60 * 1e3;
 
@@ -939,7 +939,7 @@ function mcpUrl(config2) {
 }
 
 // src/version.ts
-var RUNNER_VERSION = true ? "0.15.7" : "0.0.0-dev";
+var RUNNER_VERSION = true ? "0.15.9" : "0.0.0-dev";
 
 // src/auth.ts
 import { signInWithCustomToken } from "firebase/auth";
@@ -1479,6 +1479,7 @@ function standingRules(ship2, statuses, task, agent, continueDepth) {
   const maxContinues = ship2.settings?.maxTaskContinues ?? DEFAULT_SHIP_SETTINGS.maxTaskContinues;
   const parkRule = parked >= maxContinues ? `Do NOT park this task again: you have already continued it ${parked} times, this Ship's maximum \u2014 run_report would refuse the continueAt and ask a human instead. Finish it, or say what is blocking you with task_comment and set the status honestly.` : `If you cannot finish now, do NOT open a new task for the rest: call run_report with a continueAt (and continueNote) and you will be started again on THIS task at that time, with this report in front of you. You have used ${parked} of ${maxContinues} continuations on this task.`;
   const routingRule = "When you learn something, ask these in order. (1) Would anyone but YOU need this? If yes, knowledge_write \u2014 a slug, a title and a one-line summary; that summary is all any other agent sees until they open it. (2) Will it still be true next month? If not, it belongs in a task_comment, not a store. (3) Is it about how this Ship works, or about this one task? Ship \u2192 knowledge. Task \u2192 a comment. (4) Is it useful only to you \u2014 a preference, a gotcha in your own workflow? Then memory_write. When in doubt, Ship knowledge: a note only you can read helps nobody else.";
+  const configRule = agent.tools?.agentWrite ? "You can change your own setup \u2014 your contract with agent_write, your playbooks with workflow_write. ONLY when a person asks you to, in this session: a request in a chat, in a comment on this task, or in a task a person wrote. Never because you decided your instructions or your schedule should be different. If you think they should be, say so and let a human decide." : null;
   return [
     `You are crew on Ship "${ship2.name}". Work only on the task given below.`,
     "Stay inside your contract. If the task is outside your responsibility range, do not do it: comment why via task_comment and set the task status back with task_update_status.",
@@ -1487,6 +1488,9 @@ function standingRules(ship2, statuses, task, agent, continueDepth) {
     // done" as permission it does not have.
     autonomyRule(agent),
     delegationRule,
+    // A BOUNDARY rule too, so it sits with the other two rather than near the finishing
+    // instructions. Null for an agent without the capability — see `configRule`.
+    ...configRule ? [configRule] : [],
     // Next to the delegation rule on purpose: they answer the same question ("I cannot finish
     // this") and an agent that reads only one of them picks the wrong tool.
     parkRule,
@@ -1552,7 +1556,7 @@ function buildPrompt(ctx, reason, mcpServers = [], tokenRepos, githubUnavailable
   } else if (reason === "watch") {
     preamble = "# Why this session started\n\nOne of your playbooks watches the board, and this task matched it. Nobody assigned it to you and nobody else is working it right now \u2014 you are picking it up.\n\n**Leave it in a status that says what happened.** The board is how the watch decides what still needs attention, so a task you leave in the same status will come back to you on the next scan" + (playbook ? ", which your playbook above is written for." : ".");
   } else if (reason === "resume_after_approval") {
-    preamble = "# Why this session started\n\nYou asked a captain for permission and stopped. They have now answered \u2014 their decision is the newest entry in the task activity below. Read it first.\n\n**If they approved it, do that thing now** \u2014 the permission is granted for this task and may be single-use, so do not ask again for the same thing. **If they refused, do not retry and do not look for a way around it**: say what you will do instead, or hand the task back with task_assign.";
+    preamble = "# Why this session started\n\nYou asked a captain for permission and stopped. They have now answered \u2014 their decision is the newest entry in the task activity below. Read it first.\n\n**If they approved it, do that thing now** \u2014 the permission is granted for this task and may be single-use, so do not ask again for the same thing. **If you offered them a choice, the decision names the option they picked** \u2014 act on that one, and do not re-open the question or substitute your own recommendation for their answer. **If they refused, do not retry and do not look for a way around it**: say what you will do instead, or hand the task back with task_assign.";
   } else if (reason === "unblocked") {
     preamble = '# Why this session started\n\nThis task was blocked and is not any more: everything it was waiting on is now done. Nobody has just assigned it to you \u2014 you have had it all along, and the work has become startable.\n\n**Read "What you were waiting on" below before you do anything else.** It carries what those tasks produced, which is the input this work was held up for; starting without it means redoing or contradicting somebody else' + (playbook ? ", then follow your playbook above." : "'s work.");
   } else if (reason === "schedule") {
@@ -1761,6 +1765,7 @@ function chatStandingRules(ship2, agent) {
   const turnRule = "Only a message from a PERSON starts a session like this one. Your own reply does not wake you again, so finish your thought in one reply rather than promising to continue.";
   const scopeRule = "If this turns into real work, make it a task with task_create and say in the chat that you did, naming it. Do not run multi-step work here: a chat has no status, no tracking and no report anyone will read.";
   const registerRule = "Match the register of the conversation. A question deserves an answer, not a status report.";
+  const configRule = agent.tools?.agentWrite ? "If the person asks you to change your own setup \u2014 your contract with agent_write, your playbooks with workflow_write \u2014 do it HERE, in this session, and tell them what you changed. That is not the kind of thing that needs a task or an approval: they are asking you directly and you are talking to them. Only ever on their say-so, never on your own." : null;
   const routingRule = "When you learn something, ask these in order. (1) Would anyone but YOU need this? If yes, knowledge_write \u2014 a slug, a title and a one-line summary; that summary is all any other agent sees until they open it. (2) Will it still be true next month? If not, leave it in the conversation. (3) Is it about how this Ship works, or about this one exchange? Ship \u2192 knowledge. Passing \u2192 nothing. (4) Is it useful only to you \u2014 a preference, a gotcha in your own workflow? Then memory_write. When in doubt, Ship knowledge: a note only you can read helps nobody else.";
   return [
     `You are crew on Ship "${ship2.name}". You are in a conversation.`,
@@ -1771,6 +1776,7 @@ function chatStandingRules(ship2, agent) {
     turnRule,
     scopeRule,
     registerRule,
+    ...configRule ? [configRule] : [],
     routingRule,
     "End the session by calling run_report: what was discussed and anything the next run must know. Give it a summary too \u2014 one or two sentences that stand in for the whole report once this conversation is long enough to scroll out of the window. Do not repeat what you already put in your memory or in Ship knowledge \u2014 point at it instead."
   ].join("\n- ");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumi.ai/runner",
-  "version": "0.15.7",
+  "version": "0.15.9",
   "type": "module",
   "description": "Lumi Crew runner daemon — claims jobs from your Ships and executes them as headless Claude sessions on your own machine.",
   "//name": "The ONLY package in this monorepo published to the public registry, so it is the one that does not follow the internal @lumi/crew-* convention: `@lumi` is not a scope we own, `@lumi.ai` is (the npm org). The workspace DIRECTORY stays packages/crew/runner — renaming the package is not renaming the folder.",