mio-agent-runtime 0.2.0 → 0.2.2

package/README.md

@@ -22,6 +22,14 @@ mio --json status           Machine-readable status
 mio --json agents           Machine-readable agents
 ```
 
+## Host notes
+
+- WorkBuddy uses `~/.workbuddy/mcp.json` and requires each custom MCP server to
+  be approved in `~/.workbuddy/mcp-approvals.json`. `mio install workbuddy`
+  writes both files and injects Mio usage rules into `~/.workbuddy/MEMORY.md`
+  so WorkBuddy calls Mio memory/observer/policy automatically. If WorkBuddy is
+  already running, restart it once so it reloads the approval and memory files.
+
 ## MIO_HOME
 
 默认 `~/.mio-intelligence`，可通过环境变量 `MIO_HOME` 覆盖。
@@ -38,4 +46,4 @@ packages/mio-cli
 ├── server/
 │   └── mio-intelligence-mcp/index.js
 └── package.json
-```
+```

package/adapters/codex.js

@@ -14,7 +14,7 @@ function isInstalled() {
   return fs.readFileSync(target, 'utf8').includes('[mcp_servers.mio-intelligence]')
 }
 
-function install({ node, serverScript, home, workspace }) {
+function install({ node, serverScript, home, workspace, project }) {
   const target = configPath()
   const backup = `${target}.bak-mio-${Date.now()}`
   if (isInstalled()) {
@@ -31,6 +31,7 @@ function install({ node, serverScript, home, workspace }) {
 
   const context = JSON.stringify({
     agentId: 'codex',
+    project: project || path.basename(workspace || process.cwd()),
     workspace: workspace || process.cwd(),
     sessionId: 'codex-session',
   })

package/adapters/opencode.js

@@ -23,7 +23,7 @@ function isInstalled() {
   return Boolean(config && config.mcp && config.mcp['mio-intelligence'])
 }
 
-function install({ node, serverScript, home, workspace }) {
+function install({ node, serverScript, home, workspace, project }) {
   const target = configPath()
   if (isInstalled()) {
     return {
@@ -42,6 +42,7 @@ function install({ node, serverScript, home, workspace }) {
   const existingMcp = config.mcp && typeof config.mcp === 'object' ? config.mcp : {}
   const context = JSON.stringify({
     agentId: 'opencode',
+    project: project || path.basename(workspace || process.cwd()),
     workspace: workspace || process.cwd(),
     sessionId: 'opencode-session',
   })

package/adapters/workbuddy.js

@@ -3,13 +3,30 @@
 const fs = require('fs')
 const path = require('path')
 const os = require('os')
+const crypto = require('crypto')
+
+function configDir() {
+  return (
+    process.env.WORKBUDDY_CONFIG_DIR ||
+    process.env.CODEBUDDY_CONFIG_DIR ||
+    path.join(os.homedir(), '.workbuddy')
+  )
+}
 
 function configPath() {
-  return path.join(os.homedir(), '.workbuddy', 'mcp.json')
+  return path.join(configDir(), 'mcp.json')
 }
 
 function legacyConfigPath() {
-  return path.join(os.homedir(), '.workbuddy', '.mcp.json')
+  return path.join(configDir(), '.mcp.json')
+}
+
+function approvalsPath() {
+  return path.join(configDir(), 'mcp-approvals.json')
+}
+
+function memoryPath() {
+  return path.join(configDir(), 'MEMORY.md')
 }
 
 function readJson(file) {
@@ -21,26 +38,82 @@ function readJson(file) {
   }
 }
 
+
+const MEMORY_BEGIN = '<!-- MIO_INTELLIGENCE_BEGIN -->'
+const MEMORY_END = '<!-- MIO_INTELLIGENCE_END -->'
+const MEMORY_BLOCK = `${MEMORY_BEGIN}
+## Mio Intelligence Layer
+
+Mio MCP tools are available. Treat these as mandatory runtime rules for every workspace.
+
+- Before designing or implementing a solution, or when unsure about prior decisions, call \`mcp__mio-intelligence__mio.memory.query\` first. Omit \`project\` unless a specific project is required; Mio derives it from the current Git repository.
+- After a decision affecting architecture, deployment, dependencies, or long-term behavior, call \`mcp__mio-intelligence__mio.memory.record\` with \`kind\`: \`decision\`, \`context\`, \`problem\`, or \`note\`.
+- When a tool call fails, retries, or returns an error, call \`mcp__mio-intelligence__mio.observer.ingest\` with a stable \`trace_id\`, relevant \`event_type\`, \`payload\`, and \`outcome\`.
+- Before a high-risk operation such as deletion, migration, credential change, or production change, call \`mcp__mio-intelligence__mio.policy.check\` and follow its suggestion when available.
+- If Mio MCP is unavailable, do not block the task. Continue normally and note the missed memory or observation.
+- Do not store secrets, credentials, or raw sensitive content in Mio memory.
+${MEMORY_END}`
+
+function ensureMemoryRules() {
+  const target = memoryPath()
+  let content = fs.existsSync(target) ? fs.readFileSync(target, 'utf8') : ''
+  const start = content.indexOf(MEMORY_BEGIN)
+  if (start !== -1) {
+    const end = content.indexOf(MEMORY_END, start)
+    content = end === -1 ? content.slice(0, start) : content.slice(0, start) + content.slice(end + MEMORY_END.length)
+    content = content.trimEnd()
+  }
+  const before = content
+  if (content) content += '\n\n'
+  content += MEMORY_BLOCK + '\n'
+  if (content === before) return false
+  fs.mkdirSync(path.dirname(target), { recursive: true })
+  fs.writeFileSync(target, content, 'utf8')
+  return true
+}
+
 function isInstalled() {
   const config = readJson(configPath())
-  return Boolean(config && config.mcpServers && config.mcpServers['mio-intelligence'])
+  const entry = config && config.mcpServers && config.mcpServers['mio-intelligence']
+  if (!entry) return false
+
+  const approvals = readJson(approvalsPath()) || {}
+  const memory = fs.existsSync(memoryPath()) ? fs.readFileSync(memoryPath(), 'utf8') : ''
+  return Boolean(
+    approvals[approvalKey('mio-intelligence', entry)] &&
+    memory.includes(MEMORY_BEGIN) &&
+    memory.includes(MEMORY_END)
+  )
 }
 
-function install({ node, serverScript, home, workspace }) {
-  const target = configPath()
-  if (isInstalled()) {
-    return {
-      changed: false,
-      configPath: target,
-      message: 'WorkBuddy Mio MCP already installed.',
+function approvalKey(name, entry) {
+  let input
+  if (entry.command) {
+    input = `${entry.command || ''}|${(entry.args || []).map(String).sort().join(',')}|${Object.keys(entry.env || {}).sort().join(',')}`
+  } else if (entry.url) {
+    try {
+      input = new URL(entry.url).origin
+    } catch (_) {
+      input = entry.url
     }
+  } else {
+    input = JSON.stringify(entry)
   }
 
-  const backup = `${target}.bak-mio-${Date.now()}`
-  if (fs.existsSync(target)) {
-    fs.copyFileSync(target, backup)
-  }
+  const hash = crypto.createHash('sha256').update(input).digest('hex')
+  return `${hash}::${name}`
+}
+
+function writeApproval(name, entry) {
+  const target = approvalsPath()
+  const approvals = readJson(target) || {}
+  approvals[approvalKey(name, entry)] = Date.now()
+  fs.mkdirSync(path.dirname(target), { recursive: true })
+  fs.writeFileSync(target, `${JSON.stringify(approvals, null, 2)}\n`, 'utf8')
+}
 
+function install({ node, serverScript, home, workspace, project }) {
+  const target = configPath()
   const canonical = readJson(target) || {}
   const legacy = readJson(legacyConfigPath()) || {}
   const canonicalServers =
@@ -59,6 +132,7 @@ function install({ node, serverScript, home, workspace }) {
 
   const context = JSON.stringify({
     agentId: 'workbuddy',
+    project: project || path.basename(workspace || process.cwd()),
     workspace: workspace || process.cwd(),
     sessionId: 'workbuddy-session',
   })
@@ -66,7 +140,6 @@ function install({ node, serverScript, home, workspace }) {
   config.mcpServers = {
     ...config.mcpServers,
     'mio-intelligence': {
-      type: 'stdio',
       command: node,
       args: [serverScript],
       env: {
@@ -76,15 +149,26 @@ function install({ node, serverScript, home, workspace }) {
     },
   }
 
+  writeApproval('mio-intelligence', config.mcpServers['mio-intelligence'])
+  const memoryChanged = ensureMemoryRules()
+
+  const backup = `${target}.bak-mio-${Date.now()}`
+  if (fs.existsSync(target)) {
+    fs.copyFileSync(target, backup)
+  }
+
   fs.mkdirSync(path.dirname(target), { recursive: true })
   fs.writeFileSync(target, `${JSON.stringify(config, null, 2)}\n`, 'utf8')
 
   return {
     changed: true,
     configPath: target,
+    approvalsPath: approvalsPath(),
+    memoryPath: memoryPath(),
+    memoryChanged,
     backup,
-    message: 'WorkBuddy Mio MCP installed. Restart WorkBuddy to load it.',
+    message: 'WorkBuddy Mio MCP installed, approved, and auto-memory rules injected. WorkBuddy should auto-load it; restart if it was already running.',
   }
 }
 
-module.exports = { configPath, isInstalled, install }
+module.exports = { configDir, configPath, approvalsPath, memoryPath, approvalKey, isInstalled, install }

package/bin/mio.js

@@ -4,6 +4,7 @@
 const fs = require('fs')
 const path = require('path')
 const os = require('os')
+const { execFileSync } = require('child_process')
 
 const SERVER_SCRIPT = path.resolve(__dirname, '..', 'server', 'mio-intelligence-mcp', 'index.js')
 const MIO_HOME = process.env.MIO_HOME || path.join(os.homedir(), '.mio-intelligence')
@@ -15,6 +16,23 @@ const adapters = {
   workbuddy: require('../adapters/workbuddy.js'),
 }
 
+function projectFromWorkspace(workspace) {
+  try {
+    const commonDir = execFileSync(
+      'git',
+      ['-C', workspace, 'rev-parse', '--path-format=absolute', '--git-common-dir'],
+      { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }
+    ).trim()
+    if (commonDir) {
+      const name = path.basename(path.dirname(commonDir))
+      if (name) return name
+    }
+  } catch (_) {
+    // fall through to workspace basename
+  }
+  return path.basename(workspace)
+}
+
 function ensureHome() {
   fs.mkdirSync(MIO_HOME, { recursive: true })
   fs.mkdirSync(path.join(MIO_HOME, 'logs'), { recursive: true })
@@ -117,6 +135,7 @@ function installCommand(host, useJson) {
       serverScript: SERVER_SCRIPT,
       home: MIO_HOME,
       workspace: process.cwd(),
+      project: projectFromWorkspace(process.cwd()),
     })
   } catch (error) {
     console.error(`Failed to install ${host}: ${error.message || error}`)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mio-agent-runtime",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Mio Agent Runtime installer and MCP intelligence layer",
   "license": "MIT",
   "type": "commonjs",