elanous 0.2.27 → 0.2.29

package/src/loops/agent-reply.ts

@@ -0,0 +1,256 @@
+import { homedir } from 'node:os';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { existsSync, mkdirSync, realpathSync, statSync } from 'node:fs';
+import { buildCliAgentTools } from '../cli/agent-cli.js';
+import { debug, redactSecrets, redactSecretText } from '../debug/log.js';
+import type { LLMProvider, LLMToolSpec } from '../llm.js';
+import type { Message, MsgStore } from '../msg/msg-store.js';
+import { canonicalSeatId } from '../msg/msg-store.js';
+import { ensureCliSession, runTurn } from '../session/chat.js';
+import { getUserConfig, type RoleLlmSpec } from '../user-config.js';
+import { Database } from 'bun:sqlite';
+
+export type AgentReplyAddress = 'COORDINATOR' | 'GUARDIAN';
+export interface AgentReplyRequest { id: number; from: string; body: string; kind?: string }
+export interface AgentReplyInput {
+  address: AgentReplyAddress;
+  request: AgentReplyRequest;
+  role: RoleLlmSpec;
+  pack: string;
+  store: MsgStore;
+  /** The selected instance root for read-only observations, when available. */
+  observationRoot?: string;
+  /** Test seam: a fake provider still traverses the real runTurn tool loop. */
+  provider?: LLMProvider;
+  /** A turn seam; the production path uses the CLI agent's runTurn engine. */
+  runAgent?: (input: AgentReplyInput) => Promise<string | undefined>;
+}
+export interface AgentReplyResult { replyId: number | null; posted: boolean }
+
+/** MK owns the pack generator. Resolve it only when the configured body starts. */
+export function loadAgentRolePack(role: 'coordinator' | 'guardian'): string {
+  const modulePath = resolve(import.meta.dir, '../../scripts/coord-role-pack.ts');
+  const module = require(modulePath) as { buildCoordRolePack?: (role: 'coordinator' | 'guardian') => string };
+  const pack = module.buildCoordRolePack?.(role);
+  if (!pack?.trim()) throw new Error(`${role} role pack unavailable`);
+  return pack;
+}
+
+function inside(root: string, path: string): boolean {
+  const rel = relative(root, path);
+  return rel === '' || (rel !== '..' && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));
+}
+
+function existingPath(path: string): string {
+  try { return realpathSync(path); }
+  catch { return join(realpathSync(dirname(path)), path.slice(dirname(path).length + 1)); }
+}
+
+function repoRoot(start: string): string | null {
+  let current = realpathSync(start);
+  while (true) {
+    if (existsSync(join(current, '.git'))) return current;
+    const parent = dirname(current);
+    if (parent === current) return null;
+    current = parent;
+  }
+}
+
+function safeReadPath(path: unknown, cwd: string, roots: readonly string[], notesRoot: string): boolean {
+  if (typeof path !== 'string') return false;
+  // Credential stems also block their file forms: secrets.json, credentials.json, tokens.txt.
+  const forbidden = /(?:^|\/)(?:\.[^/]+|auth[^/]*|(?:credentials?|secrets?|tokens?|passwords?)(?:\.[^/]+)?)(?:\/|$)|\.(?:pem|key)$/i;
+  const target = resolve(cwd, path);
+  try {
+    const canonical = existingPath(target);
+    const seatState = join(homedir(), 'elanous-hq', 'seat-state');
+    if (inside(seatState, canonical) && !inside(notesRoot, canonical)) return false;
+    return roots.some(root => inside(root, canonical)) && !forbidden.test(target) && !forbidden.test(canonical);
+  }
+  catch { return false; }
+}
+
+function safeNotePath(path: unknown, cwd: string, notesRoot: string): boolean {
+  if (typeof path !== 'string') return false;
+  try { return inside(notesRoot, existingPath(resolve(cwd, path))); }
+  catch { return false; }
+}
+
+const FILE_READ_TOOLS = new Set(['Read', 'Grep', 'ListDir']);
+const FILE_WRITE_TOOLS = new Set(['Edit', 'Write']);
+
+const THREAD_LIMIT = 50;
+const THREAD_DEPTH = 20;
+
+function observedMessage(message: Message) {
+  return { id: message.id, from: message.from, to: message.to, kind: message.kind ?? 'unknown',
+    body: redactSecretText(message.body), replyTo: message.replyTo ?? null };
+}
+
+/** A thread is scoped to messages this address sent, received, or saw as a broadcast. */
+function observeThread(address: AgentReplyAddress, store: MsgStore, messageId: unknown) {
+  if (typeof messageId !== 'number' || !Number.isSafeInteger(messageId) || messageId < 1) throw new Error('invalid message id');
+  const visible = (m: Message) => m.from === address || m.to === address || m.to === 'ALL';
+  const requested = store.getMessage(messageId);
+  if (!requested || !visible(requested)) throw new Error('message outside this address');
+  // The requested message and its ancestor path always come first, so the limit cannot drop them.
+  const path: Message[] = [requested];
+  for (let depth = 0; path.at(-1)!.replyTo !== undefined && depth < THREAD_DEPTH; depth++) {
+    const parent = store.getMessage(path.at(-1)!.replyTo!);
+    if (!parent || !visible(parent)) break;
+    path.push(parent);
+  }
+  const root = path.at(-1)!;
+  const seen = new Set(path.map(m => m.id));
+  const thread = [...path];
+  // Replies are bounded by the same depth below the root as ancestors above it.
+  let level: Message[] = [root];
+  for (let depth = 0; depth < THREAD_DEPTH && level.length > 0 && thread.length < THREAD_LIMIT; depth++) {
+    const next: Message[] = [];
+    for (const parent of level) {
+      for (const reply of store.listReplies(parent.id, THREAD_LIMIT)) {
+        if (!visible(reply)) continue;
+        if (seen.has(reply.id)) { next.push(reply); continue; }
+        if (thread.length >= THREAD_LIMIT) break;
+        seen.add(reply.id);
+        thread.push(reply);
+        next.push(reply);
+      }
+    }
+    level = next;
+  }
+  return redactSecrets(thread.sort((a, b) => a.id - b.id).map(observedMessage));
+}
+
+async function observeL0(address: AgentReplyAddress, args: Record<string, unknown>, store?: MsgStore, root?: string): Promise<unknown> {
+  const surface = args.surface;
+  if (surface === 'messages') {
+    if (!store) throw new Error('selected message store unavailable');
+    const recipient = args.recipient === undefined ? address : canonicalSeatId(String(args.recipient));
+    if (recipient === 'ALL') throw new Error('ALL is not a recipient');
+    // `after` re-reads already acknowledged mail; the default stays the unread cursor.
+    const after = args.after === undefined ? store.getCursor(recipient) : args.after;
+    if (typeof after !== 'number' || !Number.isSafeInteger(after) || after < 0) throw new Error('invalid after cursor');
+    return redactSecrets(store.listByRecipient(recipient, after, 20).map(observedMessage));
+  }
+  if (surface === 'thread') {
+    if (!store) throw new Error('selected message store unavailable');
+    return observeThread(address, store, args.messageId);
+  }
+  if (surface === 'checklist') {
+    if (!root) throw new Error('selected checklist root unavailable');
+    const version = args.version;
+    if (typeof version !== 'string' || !/^\d+\.\d+\.\d+$/.test(version)) throw new Error('invalid checklist version');
+    const path = join(root, 'release', 'features.sqlite');
+    if (!existsSync(path)) return { version, unavailable: 'checklist ledger missing' };
+    const db = new Database(path, { readonly: true, strict: true });
+    try {
+      return redactSecrets(db.query('SELECT feature_id AS id, status, evidence FROM assignments WHERE version = ? LIMIT 100')
+        .all(version));
+    } finally { db.close(); }
+  }
+  throw new Error('unknown observation surface');
+}
+
+/** The advertised tools and the dispatcher both enforce L0; prompts are not the boundary. */
+export function buildL0AgentTools(address: AgentReplyAddress, cwd: string = process.cwd(),
+  observation?: { store: MsgStore; root?: string }) {
+  const cfg = getUserConfig();
+  const base = buildCliAgentTools(cfg, undefined, cwd);
+  const notesRoot = join(homedir(), 'elanous-hq', 'seat-state', address);
+  const readRoots = [repoRoot(cwd), realpathSync(resolve(import.meta.dir, '../..')), existsSync(notesRoot) ? realpathSync(notesRoot) : null]
+    .filter((root): root is string => root !== null);
+  const specs: LLMToolSpec[] = base.specs.filter(s => FILE_READ_TOOLS.has(s.name) || FILE_WRITE_TOOLS.has(s.name));
+  specs.push({ name: 'Observe', description: 'Read-only selected-instance messages, one message thread, or release checklist. messages: unread by default, `after` re-reads acknowledged mail. thread: `messageId` returns its thread scoped to this address. No shell or writes.',
+    parameters: { type: 'object', properties: {
+      surface: { type: 'string', enum: ['messages', 'thread', 'checklist'] },
+      recipient: { type: 'string' }, version: { type: 'string' },
+      after: { type: 'integer', minimum: 0 }, messageId: { type: 'integer', minimum: 1 },
+    }, required: ['surface'], additionalProperties: false } });
+  const deny = (name: string, reason: string) => {
+    debug.log('coord.agent', 'l0-denied', { address, tool: name, reason });
+    return { error: `L0 denied: ${reason}` };
+  };
+  const dispatch = async (name: string, args: Record<string, unknown>) => {
+    if (name === 'Observe') {
+      try { return await observeL0(address, args, observation?.store, observation?.root); }
+      catch { return deny(name, 'invalid or unavailable read-only observation'); }
+    }
+    if (FILE_READ_TOOLS.has(name)) {
+      if (name === 'Read' && args.path !== undefined) return deny(name, 'unexpected path field');
+      if (name !== 'Read' && args.file_path !== undefined) return deny(name, 'unexpected file_path field');
+      const path = name === 'Read' ? args.file_path : args.path;
+      if (!safeReadPath(path, cwd, readRoots, notesRoot)) return deny(name, 'outside approved read roots or credential path');
+      // A directory-wide Grep can traverse hidden credentials below an otherwise safe root.
+      if (name === 'Grep') {
+        try { if (!statSync(resolve(cwd, String(args.path))).isFile()) return deny(name, 'grep needs one explicit file'); }
+        catch { return deny(name, 'grep needs one explicit file'); }
+      }
+      return redactSecrets(await base.dispatch(name, args));
+    }
+    if (FILE_WRITE_TOOLS.has(name)) {
+      if (!safeNotePath(args.file_path, cwd, notesRoot)) return deny(name, 'outside role notes');
+      return redactSecrets(await base.dispatch(name, args));
+    }
+    return deny(name, 'tool is outside L0 allowlist');
+  };
+  return { specs, dispatch };
+}
+
+async function runRestrictedAgent(input: AgentReplyInput): Promise<string | undefined> {
+  const cfg = getUserConfig();
+  const model = input.role.model?.trim();
+  const provider = input.role.provider;
+  if (!model || !provider) throw new Error(`${input.address} role LLM needs resolved provider and model`);
+  if (!input.pack.trim()) throw new Error(`${input.address} role pack is empty`);
+  mkdirSync(join(homedir(), 'elanous-hq', 'seat-state', input.address), { recursive: true, mode: 0o700 });
+  const configured = { ...cfg, llm: { ...cfg.llm, provider, model,
+    goalLoop: { ...cfg.llm.goalLoop, enabled: false } } };
+  const session = ensureCliSession(configured, undefined, { title: `${input.address} inbox #${input.request.id}` });
+  const tools = buildL0AgentTools(input.address, process.cwd(), { store: input.store, root: input.observationRoot });
+  const result = await runTurn({
+    userConfig: configured, sessionId: session.id,
+    userText: `Message #${input.request.id} from ${input.request.from} (kind: ${input.request.kind ?? 'unknown'}):\n${redactSecretText(input.request.body)}\n\nReply with one concise proposal and evidence.`,
+    systemPrompt: `${input.pack}\n\nL0: only read tools and writing your own role notes are available. The wrapper posts one reply with replyTo automatically. Do not include credentials or attempt a traffic/checklist/landing action.`,
+    tools: tools.specs, dispatchTool: tools.dispatch,
+    llmOpts: { model, ...(input.role.effort ? { reasoningEffort: input.role.effort } : {}) },
+    ...(input.provider ? { provider: input.provider } : {}),
+    skipMemoryInjection: true,
+  });
+  return result.text.trim() || undefined;
+}
+
+function existingReply(store: MsgStore, address: AgentReplyAddress, request: AgentReplyRequest): number | null {
+  const linked = store.db.query(`SELECT id FROM msg_messages WHERE sender = ? AND recipient = ? AND reply_to = ? AND kind = 'reply' ORDER BY id LIMIT 1`)
+    .get(address, request.from, request.id) as { id: number } | null;
+  return linked?.id ?? null;
+}
+
+/** Generate at most once per accepted request; the durable reply link wins every retry. */
+export async function replyWithAgent(input: AgentReplyInput): Promise<AgentReplyResult> {
+  const { store, address, request } = input;
+  const durable = store.getMessage(request.id);
+  if (!durable || durable.to !== address || durable.from !== request.from || durable.body !== request.body) {
+    throw new Error('agent reply request does not match the durable message');
+  }
+  const prior = existingReply(store, address, request);
+  if (prior !== null) return { replyId: prior, posted: false };
+  const generated = await (input.runAgent ?? runRestrictedAgent)(input);
+  if (!generated?.trim()) return { replyId: null, posted: false };
+  let safe: string;
+  try { safe = redactSecretText(generated.trim()); }
+  catch (error) {
+    debug.log('coord.agent', 'redaction-failed', { address, requestId: request.id });
+    throw new Error('agent reply redaction failed', { cause: error });
+  }
+  if (!safe.trim()) throw new Error('agent reply redaction failed');
+  return store.db.transaction(() => {
+    const linked = existingReply(store, address, request);
+    if (linked !== null) return { replyId: linked, posted: false };
+    const message = store.post({ from: address, to: request.from, body: safe, kind: 'reply', replyTo: request.id });
+    debug.log('coord.agent', 'decision', { address, requestId: request.id, replyId: message.id,
+      model: input.role.model ?? null, provider: input.role.provider ?? null,
+      decision: redactSecretText(safe.slice(0, 300)) });
+    return { replyId: message.id, posted: true };
+  }).immediate();
+}

package/src/loops/budget.ts

@@ -7,16 +7,21 @@ const RESOURCE_SEATS: readonly OrchestratorSeat[] = ['OP', 'TC', 'MK', 'UX'];
 type WorkCell = Pick<ChecklistItem, 'owner' | 'status'>;
 
 /** Allocate whole base slots by remaining work; this calculation does not decide launches. */
-export function calculateSeatBaseShares({ totalSlots, currentRound, nextRound, seatCaps }: {
+export function calculateSeatBaseShares({ totalSlots, currentRound, nextRound, seatCaps, minShare = 0 }: {
   totalSlots: number;
   currentRound: readonly WorkCell[];
   nextRound: readonly WorkCell[];
   seatCaps: Readonly<Record<OrchestratorSeat, number>>;
+  /** CAP-DYN seat minimum: seats holding yellow work receive min(minShare, cap) before the weighted split. Default 0 keeps the weighted-only split. */
+  minShare?: number;
 }): Record<OrchestratorSeat, number> {
   if (!Number.isSafeInteger(totalSlots) || totalSlots < 0 ||
     RESOURCE_SEATS.some(seat => !Number.isSafeInteger(seatCaps[seat]) || seatCaps[seat] < 0)) {
     throw new RangeError('totalSlots and seatCaps must be nonnegative safe integers');
   }
+  if (!Number.isSafeInteger(minShare) || minShare < 0) {
+    throw new RangeError('minShare must be a nonnegative safe integer');
+  }
   const shares: Record<OrchestratorSeat, number> = { OP: 0, TC: 0, MK: 0, UX: 0 };
   const weights: Record<OrchestratorSeat, number> = { OP: 0, TC: 0, MK: 0, UX: 0 };
   for (const [cells, weight] of [[currentRound, 2], [nextRound, 1]] as const) {
@@ -28,23 +33,48 @@ export function calculateSeatBaseShares({ totalSlots, currentRound, nextRound, s
   }
 
   let available = Math.min(totalSlots, RESOURCE_SEATS.reduce((sum, seat) => sum + seatCaps[seat], 0));
-  let eligible = RESOURCE_SEATS.filter(seat => weights[seat] > 0 && seatCaps[seat] > 0);
+  if (minShare > 0) {
+    // Seat minimum: only seats with at least one yellow cell qualify, capped by their own cap.
+    const floors = RESOURCE_SEATS
+      .filter(seat => weights[seat] > 0)
+      .map(seat => ({ seat, floor: Math.min(minShare, seatCaps[seat]) }))
+      .filter(entry => entry.floor > 0);
+    const floorTotal = floors.reduce((sum, entry) => sum + entry.floor, 0);
+    if (floorTotal > available) {
+      // The minimums alone exceed the pool: largest-weight seats keep theirs, the rest get zero.
+      floors.sort((a, b) => weights[b.seat] - weights[a.seat]);
+      for (const { seat, floor } of floors) {
+        const grant = Math.min(floor, available);
+        shares[seat] = grant;
+        available -= grant;
+        if (available === 0) break;
+      }
+      return shares;
+    }
+    for (const { seat, floor } of floors) {
+      shares[seat] = floor;
+      available -= floor;
+    }
+  }
+  const room = (seat: OrchestratorSeat): number => seatCaps[seat] - shares[seat];
+  let eligible = RESOURCE_SEATS.filter(seat => weights[seat] > 0 && room(seat) > 0);
   while (available > 0 && eligible.length > 0) {
     const totalWeight = eligible.reduce((sum, seat) => sum + weights[seat], 0);
     const ideal = (seat: OrchestratorSeat) => available * weights[seat] / totalWeight;
-    const capped = eligible.filter(seat => ideal(seat) >= seatCaps[seat]);
+    const capped = eligible.filter(seat => ideal(seat) >= room(seat));
     if (capped.length > 0) {
       for (const seat of capped) {
-        shares[seat] = seatCaps[seat];
-        available -= seatCaps[seat];
+        const fill = room(seat);
+        shares[seat] += fill;
+        available -= fill;
       }
       eligible = eligible.filter(seat => !capped.includes(seat));
       continue;
     }
     const remainders = eligible.map(seat => ({ seat, exact: ideal(seat) }));
     for (const { seat, exact } of remainders) {
-      shares[seat] = Math.floor(exact);
-      available -= shares[seat];
+      shares[seat] += Math.floor(exact);
+      available -= Math.floor(exact);
     }
     remainders.sort((a, b) => (b.exact - Math.floor(b.exact)) - (a.exact - Math.floor(a.exact)));
     for (const { seat } of remainders) {

package/src/loops/loop-cli.ts

@@ -19,12 +19,13 @@ function handle(action: () => Promise<void> | void): Promise<void> {
 }
 
 function allLoopTable(entries: AllLoopEntry[]): void {
-  console.log('id\t층\t주인 자리\t모드\t기대 주기\t호스트\t울타리 역할\t관측 카테고리\t마지막 실행');
+  console.log('id\t층\t주인 자리\t모드\t기대 주기\t호스트\t울타리 역할\t관측 카테고리\t마지막 실행\t메시지 주소\t답글 몸\t깨움\t깨움 출처\t안 읽은 글');
   for (const entry of entries) {
     const interval = entry.expectEveryMinutes === undefined ? '모름'
       : entry.cronIrregular ? `불규칙 · 최대 ${entry.expectEveryMinutes}분` : `${entry.expectEveryMinutes}분`;
     console.log([entry.id, entry.kind, entry.owner ?? '모름', entry.mode ?? '모름', interval,
-      entry.host ?? '모름', entry.fenceRole ?? '모름', entry.observationCategory ?? '모름', entry.lastRunAt ?? '모름'].join('\t'));
+      entry.host ?? '모름', entry.fenceRole ?? '모름', entry.observationCategory ?? '모름', entry.lastRunAt ?? '모름',
+      entry.msgAddress ?? '—', entry.replyBody ?? 'none', entry.wake ?? 'none', entry.wakeSource === 'unresolved' ? '모름' : entry.wakeSource ?? '—', entry.unreadCount ?? '모름'].join('\t'));
   }
 }
 

package/src/loops/msg-address.ts

@@ -0,0 +1,57 @@
+/** Current single-root aliases. Address issuance and `loop:` aliases belong to a later slice. */
+// `wake` = how a post reaches a body that is not already listening. The coordinator ticks on cron
+// (08·12·18) until its SSE reply body is switched on; the guardian has no reply body to wake.
+export const LOOP_MESSAGE_ROUTES = {
+  orchestrator: { msgAddress: 'COORDINATOR', replyBody: 'rules', wake: 'cron' },
+  guardian: { msgAddress: 'GUARDIAN', replyBody: 'none', wake: 'none' },
+} as const;
+
+/**
+ * Seat addresses share the table. A seat has no fixed `wake`: `wakeFrom: 'host'` says the path is
+ * resolved on this host from the seat folder or a pty named after the seat (`resolveWake` in msg-wake.ts).
+ */
+export const SEAT_MESSAGE_ROUTES = {
+  OP: { msgAddress: 'OP', replyBody: 'agent', wakeFrom: 'host' },
+  TC: { msgAddress: 'TC', replyBody: 'agent', wakeFrom: 'host' },
+  MK: { msgAddress: 'MK', replyBody: 'agent', wakeFrom: 'host' },
+  UX: { msgAddress: 'UX', replyBody: 'agent', wakeFrom: 'host' },
+  OPC: { msgAddress: 'OPC', replyBody: 'agent', wakeFrom: 'host' },
+  OPT: { msgAddress: 'OPT', replyBody: 'agent', wakeFrom: 'host' },
+} as const;
+
+export type LoopReplyBody = 'none' | 'rules' | 'agent';
+export type MessageWake = 'sse' | 'pty-inject' | 'herdr' | 'cron' | 'none';
+
+export function loopMessageRoute(id: string): { msgAddress: string | null; replyBody: LoopReplyBody; wake: MessageWake } {
+  return Object.hasOwn(LOOP_MESSAGE_ROUTES, id)
+    ? LOOP_MESSAGE_ROUTES[id as keyof typeof LOOP_MESSAGE_ROUTES]
+    : { msgAddress: null, replyBody: 'none', wake: 'none' };
+}
+
+/** The declared table row for one canonical address — a loop body or a seat — or null when unlisted. */
+export function messageRouteFor(address: string): { msgAddress: string; replyBody: LoopReplyBody; wake?: MessageWake; wakeFrom?: 'host' } | null {
+  const name = address.trim().toUpperCase();
+  const loop = Object.values(LOOP_MESSAGE_ROUTES).find(route => route.msgAddress === name);
+  if (loop) return loop;
+  return Object.hasOwn(SEAT_MESSAGE_ROUTES, name) ? SEAT_MESSAGE_ROUTES[name as keyof typeof SEAT_MESSAGE_ROUTES] : null;
+}
+
+/** A notice is advisory; durable posting to these valid names still succeeds. */
+export function noReplyBodyNotice(address: string): string | null {
+  const name = address.trim().toUpperCase();
+  return name === LOOP_MESSAGE_ROUTES.guardian.msgAddress || name === 'ORCHESTRATOR' || name === 'STEWARD'
+    ? '이 주소는 읽는 몸이 없다 — 지금은 OP'
+    : null;
+}
+
+/** `loop:` is not yet a message address, so the normal address validator still rejects it. */
+export function unsupportedLoopAddressNotice(address: string): string | null {
+  if (!/^loop:/i.test(address.trim())) return null;
+  const id = address.trim().slice(5).toLowerCase();
+  const route = loopMessageRoute(id);
+  return route.msgAddress && route.replyBody !== 'none'
+    ? `${address.trim()} 는 아직 주소가 아니다 — 지금 읽는 주소는 ${route.msgAddress} (eln loop list --json 의 msgAddress)`
+    : route.msgAddress
+      ? `${address.trim()} 는 아직 주소가 아니다 — ${route.msgAddress}은 읽는 몸이 없다 — 지금은 OP (eln loop list --json 의 replyBody)`
+    : `${address.trim()} 는 아직 주소가 아니다 — 읽는 몸이 없다. 지금은 OP (eln loop list --json 의 msgAddress)`;
+}