metheus-governance-mcp-cli 0.2.66 → 0.2.68

package/README.md

@@ -226,7 +226,9 @@ Behavior:
 
 - `bot setup` asks for `Telegram / Slack / KakaoTalk` first, then prompts with numbered actions.
 - `bot add` without flags starts a guided question flow: provider -> server bot -> local bot key -> token -> verify -> role/AI binding -> default bot choice.
+- When you choose a server Telegram bot profile such as `RyoAI_bot [monitor]`, the CLI automatically uses that server role as the local `role_profile` and fills blank AI defaults from your local `bot-runner.json` `role_profiles` mapping.
 - `bot edit` without flags starts a guided numbered flow: provider -> bot entry -> guided edit -> step-by-step field choices.
+- In guided `bot edit`, changing the bound server Telegram bot profile can also auto-fill blank local AI fields from the selected server role.
 - `bot set-default` without flags starts a guided numbered flow: provider -> bot entry -> confirm default change.
 - `bot verify` without flags starts a guided numbered flow: provider -> bot entry -> output format.
 - `bot remove` without flags starts a guided numbered flow: provider -> bot entry -> confirm removal.
@@ -379,6 +381,12 @@ Role profile fields:
 - `permission_mode`: `read_only`, `workspace_write`, `danger_full_access`
 - `reasoning_effort`: `low`, `medium`, `high`
 
+Recommended role mapping:
+- `monitor`: `read_only` + `low`
+- `review`: `read_only` + `medium`
+- `worker`: `danger_full_access` + `medium`
+- `approval`: `danger_full_access` + `high`
+
 Role profile note:
 - Claude maps `reasoning_effort` to `--effort`.
 - Codex maps `reasoning_effort` to `-c model_reasoning_effort="..."`.

package/cli.mjs

@@ -809,13 +809,13 @@ function defaultBotRunnerRoleProfiles() {
     worker: {
       client: "codex",
       model: "",
-      permission_mode: "workspace_write",
+      permission_mode: "danger_full_access",
       reasoning_effort: "medium",
     },
     approval: {
       client: "gemini",
       model: "",
-      permission_mode: "read_only",
+      permission_mode: "danger_full_access",
       reasoning_effort: "high",
     },
   };

package/lib/bot-commands.mjs

@@ -513,6 +513,7 @@ async function editTelegramBotGuided(ui, parsed, selected, current, flags, deps)
     if (!current.roleProfile && serverBot.role) {
       current.roleProfile = serverBot.role;
     }
+    applyRoleProfileDefaults(current, resolveRoleProfileDefaults(current.roleProfile || serverBot.role, deps));
   } else if (bindingAction === "clear") {
     current.serverBotID = "";
   }
@@ -560,6 +561,7 @@ async function editTelegramBotGuided(ui, parsed, selected, current, flags, deps)
     current.roleProfile = requireDependency(deps, "normalizeRunnerRoleProfileName")(
       await promptTelegramRoleProfile(ui, deps, current.roleProfile),
     );
+    applyRoleProfileDefaults(current, resolveRoleProfileDefaults(current.roleProfile, deps));
   } else if (roleAction === "clear") {
     current.roleProfile = "";
   }
@@ -941,6 +943,49 @@ async function promptReasoningEffort(ui, defaultValue = "") {
   return String(selected?.value || "").trim();
 }
 
+function resolveRoleProfileDefaults(roleProfileName, deps) {
+  const profileName = String(roleProfileName || "").trim();
+  if (!profileName) {
+    return {
+      client: "",
+      model: "",
+      permissionMode: "",
+      reasoningEffort: "",
+    };
+  }
+  const config = requireDependency(deps, "loadBotRunnerConfig")({ persistIfNeeded: true });
+  const profile = safeObject(safeObject(config.roleProfiles || {})[profileName]);
+  return {
+    client: requireDependency(deps, "normalizeLocalAIClientName")(profile.client || "", ""),
+    model: String(profile.model || "").trim(),
+    permissionMode: requireDependency(deps, "normalizeLocalAIPermissionMode")(
+      profile.permission_mode || profile.permissionMode || "",
+      "",
+    ),
+    reasoningEffort: requireDependency(deps, "normalizeLocalAIReasoningEffort")(
+      profile.reasoning_effort || profile.reasoningEffort || "",
+      "",
+    ),
+  };
+}
+
+function applyRoleProfileDefaults(entry, defaults, { overwrite = false } = {}) {
+  const current = safeObject(entry);
+  const resolved = safeObject(defaults);
+  if (overwrite || !String(current.client || "").trim()) {
+    current.client = String(resolved.client || "").trim();
+  }
+  if (overwrite || !String(current.model || "").trim()) {
+    current.model = String(resolved.model || "").trim();
+  }
+  if (overwrite || !String(current.permissionMode || "").trim()) {
+    current.permissionMode = String(resolved.permissionMode || "").trim();
+  }
+  if (overwrite || !String(current.reasoningEffort || "").trim()) {
+    current.reasoningEffort = String(resolved.reasoningEffort || "").trim();
+  }
+}
+
 function buildTemporaryTelegramEnvConfig({ token, apiBaseURL }) {
   return {
     ok: true,
@@ -1033,23 +1078,26 @@ async function addTelegramBot(ui, flags, deps) {
       ? String(flags["role-profile"] || defaultRoleProfile).trim()
       : await promptTelegramRoleProfile(ui, deps, defaultRoleProfile),
   );
+  const roleProfileDefaults = resolveRoleProfileDefaults(roleProfile, deps);
   const client = requireDependency(deps, "normalizeLocalAIClientName")(
     nonInteractive
-      ? getAIClientFlag(flags)
-      : await promptAIClient(ui, deps, getAIClientFlag(flags)),
+      ? firstNonEmptyString([getAIClientFlag(flags), roleProfileDefaults.client])
+      : await promptAIClient(ui, deps, firstNonEmptyString([getAIClientFlag(flags), roleProfileDefaults.client])),
     "",
   );
-  const model = nonInteractive ? getAIModelFlag(flags) : await promptLine(ui, "AI model", getAIModelFlag(flags));
+  const model = nonInteractive
+    ? firstNonEmptyString([getAIModelFlag(flags), roleProfileDefaults.model])
+    : await promptLine(ui, "AI model", firstNonEmptyString([getAIModelFlag(flags), roleProfileDefaults.model]));
   const permissionMode = requireDependency(deps, "normalizeLocalAIPermissionMode")(
     nonInteractive
-      ? getAIPermissionModeFlag(flags)
-      : await promptPermissionMode(ui, getAIPermissionModeFlag(flags)),
+      ? firstNonEmptyString([getAIPermissionModeFlag(flags), roleProfileDefaults.permissionMode])
+      : await promptPermissionMode(ui, firstNonEmptyString([getAIPermissionModeFlag(flags), roleProfileDefaults.permissionMode])),
     "",
   );
   const reasoningEffort = requireDependency(deps, "normalizeLocalAIReasoningEffort")(
     nonInteractive
-      ? getAIReasoningEffortFlag(flags)
-      : await promptReasoningEffort(ui, getAIReasoningEffortFlag(flags)),
+      ? firstNonEmptyString([getAIReasoningEffortFlag(flags), roleProfileDefaults.reasoningEffort])
+      : await promptReasoningEffort(ui, firstNonEmptyString([getAIReasoningEffortFlag(flags), roleProfileDefaults.reasoningEffort])),
     "",
   );
 

package/lib/selftest-bot-commands.mjs

@@ -276,11 +276,11 @@ export async function runSelftestBotCommands(push, deps) {
           "selftest-main-token",
           "y", // verify now
           "", // keep verified username
-          "3", // role profile: monitor
-          "2", // ai client: codex
-          "gpt-5-codex",
-          "2", // permission: read_only
-          "2", // reasoning: low
+          "", // keep role profile default from selected server role
+          "", // keep AI client default from role profile
+          "", // keep AI model default from role profile
+          "", // keep permission default from role profile
+          "", // keep reasoning default from role profile
           "y", // set as default
         ]),
       },
@@ -290,10 +290,12 @@ export async function runSelftestBotCommands(push, deps) {
       "bot_add_guided_creates_named_telegram_entry",
       String(addState.TELEGRAM_BOT_MAIN_TEST_SERVER_BOT_ID || "") === mock.bots[0].id
         && String(addState.TELEGRAM_BOT_MAIN_TEST_USERNAME || "").trim().toLowerCase() === "monitorselftestbot"
+        && String(addState.TELEGRAM_BOT_MAIN_TEST_ROLE_PROFILE || "") === "monitor"
         && String(addState.TELEGRAM_BOT_MAIN_TEST_AI_CLIENT || "") === "codex"
-        && String(addState.TELEGRAM_BOT_MAIN_TEST_AI_MODEL || "") === "gpt-5-codex"
+        && String(addState.TELEGRAM_BOT_MAIN_TEST_AI_PERMISSION_MODE || "") === "read_only"
+        && String(addState.TELEGRAM_BOT_MAIN_TEST_AI_REASONING_EFFORT || "") === "low"
         && String(addState.TELEGRAM_DEFAULT_BOT_KEY || "") === "main_test",
-      `default=${String(addState.TELEGRAM_DEFAULT_BOT_KEY || "")} client=${String(addState.TELEGRAM_BOT_MAIN_TEST_AI_CLIENT || "")} model=${String(addState.TELEGRAM_BOT_MAIN_TEST_AI_MODEL || "")}`,
+      `default=${String(addState.TELEGRAM_DEFAULT_BOT_KEY || "")} role=${String(addState.TELEGRAM_BOT_MAIN_TEST_ROLE_PROFILE || "")} client=${String(addState.TELEGRAM_BOT_MAIN_TEST_AI_CLIENT || "")}`,
     );
 
     const showResult = await runCLI({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "metheus-governance-mcp-cli",
-  "version": "0.2.66",
+  "version": "0.2.68",
   "description": "Metheus Governance MCP CLI (setup + stdio proxy)",
   "type": "module",
   "files": [

package/postinstall.mjs

@@ -80,6 +80,24 @@ function botRunnerTemplate() {
           permission_mode: "read_only",
           reasoning_effort: "low",
         },
+        review: {
+          client: "claude",
+          model: "",
+          permission_mode: "read_only",
+          reasoning_effort: "medium",
+        },
+        worker: {
+          client: "codex",
+          model: "",
+          permission_mode: "danger_full_access",
+          reasoning_effort: "medium",
+        },
+        approval: {
+          client: "gemini",
+          model: "",
+          permission_mode: "danger_full_access",
+          reasoning_effort: "high",
+        },
       },
       bot_bindings: {
         "<binding_key>": {