tycono 0.1.59 → 0.1.61

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tycono",
-  "version": "0.1.59",
+  "version": "0.1.61",
   "description": "Build an AI company. Watch them work.",
   "type": "module",
   "bin": {

package/src/api/src/create-server.ts

@@ -29,6 +29,7 @@ import { costRouter } from './routes/cost.js';
 import { syncRouter } from './routes/sync.js';
 import { gitRouter } from './routes/git.js';
 import { skillsRouter } from './routes/skills.js';
+import { questsRouter } from './routes/quests.js';
 import { importKnowledge } from './services/knowledge-importer.js';
 import { AnthropicProvider, type LLMProvider } from './engine/llm-adapter.js';
 import { readConfig } from './services/company-config.js';
@@ -195,6 +196,7 @@ export function createExpressApp(): express.Application {
   app.use('/api/sync', syncRouter);
   app.use('/api/git', gitRouter);
   app.use('/api/skills', skillsRouter);
+  app.use('/api/quests', questsRouter);
 
   app.get('/api/health', (_req, res) => {
     res.json({ status: 'ok', companyRoot: COMPANY_ROOT });

package/src/api/src/engine/context-assembler.ts

@@ -112,6 +112,17 @@ export function assembleContext(
   // Dispatch 도구 안내 (하위 Role이 있는 경우)
   if (subordinates.length > 0) {
     sections.push(buildDispatchSection(orgTree, roleId, subordinates, options?.teamStatus));
+  } else if (node.level === 'c-level') {
+    // C-level with no subordinates — clarify authority boundaries
+    sections.push(`# Team Structure
+
+⚠️ **You have no direct reports.** You are an individual contributor at the C-level.
+
+- You CANNOT dispatch tasks to other roles (no subordinates)
+- You CAN consult other roles for information (see Consult section below)
+- You MUST do the work yourself — research, analyze, write, decide
+- If implementation requires another role (e.g., engineering work), recommend it to CEO
+- Make decisions within your authority autonomously — do NOT ask CEO for decisions you can make yourself`);
   }
 
   // Consult 도구 안내 (상담 가능한 Role이 있는 경우)

package/src/api/src/routes/quests.ts

@@ -0,0 +1,41 @@
+import { Router, Request, Response, NextFunction } from 'express';
+import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { COMPANY_ROOT } from '../services/file-reader.js';
+
+export const questsRouter = Router();
+
+const QUEST_FILE = () => join(COMPANY_ROOT, '.tycono', 'quest-progress.json');
+
+function readProgress(): Record<string, unknown> {
+  try {
+    return JSON.parse(readFileSync(QUEST_FILE(), 'utf-8'));
+  } catch {
+    return { completedQuests: [], activeChapter: 1, sideQuestsCompleted: [] };
+  }
+}
+
+function writeProgress(data: Record<string, unknown>) {
+  mkdirSync(join(COMPANY_ROOT, '.tycono'), { recursive: true });
+  writeFileSync(QUEST_FILE(), JSON.stringify(data, null, 2));
+}
+
+// GET /api/quests/progress
+questsRouter.get('/progress', (_req: Request, res: Response, next: NextFunction) => {
+  try {
+    res.json(readProgress());
+  } catch (err) { next(err); }
+});
+
+// PUT /api/quests/progress
+questsRouter.put('/progress', (req: Request, res: Response, next: NextFunction) => {
+  try {
+    const body = req.body;
+    if (!body || typeof body !== 'object') {
+      res.status(400).json({ error: 'Invalid body' });
+      return;
+    }
+    writeProgress(body);
+    res.json({ ok: true, ...body });
+  } catch (err) { next(err); }
+});

package/src/api/src/routes/speech.ts

@@ -214,19 +214,49 @@ function buildCompanyContext(): string {
     }
   } catch { /* no org */ }
 
-  // 3. Active projects
+  // 3. Active projects + current phase from tasks.md
   try {
     const projectsContent = readFile('projects/projects.md');
     const rows = parseMarkdownTable(projectsContent);
     const activeProjects = rows
       .filter(r => (r.status ?? r.상태 ?? '').toLowerCase() !== 'archived')
-      .map(r => `- ${r.name ?? r.project ?? r.프로젝트 ?? ''} (${r.status ?? r.상태 ?? ''})`)
+      .map(r => {
+        const name = r.name ?? r.project ?? r.프로젝트 ?? '';
+        const status = r.status ?? r.상태 ?? '';
+        const folder = r.folder ?? r.path ?? r.경로 ?? '';
+        // Try to read tasks.md for current phase info
+        let phaseInfo = '';
+        if (folder) {
+          try {
+            const tasksPath = `${folder.replace(/^\//, '')}/tasks.md`;
+            const tasksContent = readFile(tasksPath);
+            // Extract current phase (look for "Current" or latest non-done phase)
+            const phaseMatch = tasksContent.match(/##\s+(Phase\s+\S+[^\n]*)/gi);
+            if (phaseMatch) phaseInfo = ` — ${phaseMatch[0].replace(/^##\s+/, '').slice(0, 60)}`;
+          } catch { /* no tasks.md */ }
+        }
+        return `- ${name} (${status}${phaseInfo})`;
+      })
       .slice(0, 5);
     if (activeProjects.length > 0) {
       parts.push(`Active Projects:\n${activeProjects.join('\n')}`);
     }
   } catch { /* no projects */ }
 
+  // 3b. Tech stack reality check (prevent hallucination about wrong tech)
+  try {
+    const config = readConfig(COMPANY_ROOT);
+    if (config.codeRoot) {
+      const pkgPath = path.join(config.codeRoot, 'package.json');
+      if (fs.existsSync(pkgPath)) {
+        const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
+        const name = pkg.name ?? '';
+        const version = pkg.version ?? '';
+        parts.push(`Tech Stack: ${name}@${version} — TypeScript + React + Node.js (Express). NO Python in codebase. NO ongoing language migration.`);
+      }
+    }
+  } catch { /* no package.json */ }
+
   // 4. Knowledge highlights (hub TL;DRs, max 3)
   try {
     const knowledgeHub = readFile('knowledge/knowledge.md');
@@ -353,6 +383,26 @@ function buildRoleContext(roleId: string): string {
     }
   } catch { /* no decisions */ }
 
+  // 5. If sparse context, add architecture/tech-debt highlights as fallback
+  if (parts.length < 2) {
+    try {
+      const techDebtPath = path.join(COMPANY_ROOT, 'architecture', 'tech-debt.md');
+      if (fs.existsSync(techDebtPath)) {
+        const tdContent = fs.readFileSync(techDebtPath, 'utf-8');
+        // Extract active (non-fixed) items
+        const rows = parseMarkdownTable(tdContent);
+        const active = rows
+          .filter(r => !(r.status ?? '').toLowerCase().includes('fixed') && !(r.status ?? '').toLowerCase().includes('done'))
+          .slice(0, 3)
+          .map(r => `- ${r.id ?? ''}: ${r.title ?? r.issue ?? ''} (${r.status ?? ''})`)
+          .filter(s => s.length > 10);
+        if (active.length > 0) {
+          parts.push(`[Active Tech Debt]\n${active.join('\n')}`);
+        }
+      }
+    } catch { /* no tech-debt */ }
+  }
+
   return parts.length > 0
     ? `\n\nYOUR KNOWLEDGE (real AKB context — reference this in conversation):\n${parts.join('\n\n')}`
     : '';
@@ -578,10 +628,11 @@ ${relContext}
 ${roleStyle}
 
 GROUNDING (CRITICAL):
-You have been given real company knowledge above under "YOUR KNOWLEDGE". This is from your journal, recent CEO waves, standups, and decisions.
+You have been given real company knowledge above under "COMPANY CONTEXT" and "YOUR KNOWLEDGE". This is from AKB files, journal, CEO waves, standups, and decisions.
 You MUST reference this real context in your conversations — mention specific projects, decisions, tasks, or events by name.
 Do NOT generate generic workplace chatter. Every message should show you're aware of what's actually happening in the company.
 If your knowledge section mentions a specific decision or wave, reference it naturally (e.g. "after the test minimization decision..." or "CEO's wave about side panel...").
+NEVER invent or assume technologies, tools, migrations, or projects NOT mentioned in the context above. If the Tech Stack says "TypeScript + React + Node.js", do NOT talk about Python, tc.py, or any language migration. Only discuss what is explicitly in your provided context.
 
 CONVERSATION RULES:
 1. Stay deeply in character — your expertise, vocabulary, and concerns should be DISTINCT from other roles.

package/src/api/src/services/job-manager.ts

@@ -1,6 +1,7 @@
 import { COMPANY_ROOT } from './file-reader.js';
 import { ActivityStream, type ActivityEvent } from './activity-stream.js';
 import { buildOrgTree } from '../engine/org-tree.js';
+import { validateDispatch, validateConsult } from '../engine/authority-validator.js';
 import { createRunner } from '../engine/runners/index.js';
 import type { ExecutionRunner } from '../engine/runners/types.js';
 import { setActivity, updateActivity, completeActivity } from './activity-tracker.js';
@@ -117,11 +118,30 @@ class JobManager {
     return () => { this.jobCreatedListeners.delete(listener); };
   }
 
-  /** Start a new execution job. Returns the Job immediately (fire-and-forget). */
+  /** Start a new execution job. Returns the Job immediately (fire-and-forget).
+   *  Throws if sourceRole lacks authority to dispatch/consult the target role. */
   startJob(params: StartJobParams): Job {
     const jobId = `job-${Date.now()}-${this.nextId++}`;
     const orgTree = buildOrgTree(COMPANY_ROOT);
 
+    // Authority gate: validate dispatch/consult authority at job creation
+    if (params.sourceRole && params.sourceRole !== 'ceo') {
+      if (params.type === 'consult') {
+        const auth = validateConsult(orgTree, params.sourceRole, params.roleId);
+        if (!auth.allowed) {
+          console.warn(`[JobManager] Authority denied: ${params.sourceRole} → ${params.roleId} (consult): ${auth.reason}`);
+          throw new Error(`Authority denied: ${auth.reason}`);
+        }
+      } else if (params.type === 'assign' && params.parentJobId) {
+        // Only validate dispatch authority for child jobs (not CEO waves)
+        const auth = validateDispatch(orgTree, params.sourceRole, params.roleId);
+        if (!auth.allowed) {
+          console.warn(`[JobManager] Authority denied: ${params.sourceRole} → ${params.roleId} (dispatch): ${auth.reason}`);
+          throw new Error(`Authority denied: ${auth.reason}`);
+        }
+      }
+    }
+
     const stream = new ActivityStream(jobId, params.roleId, params.parentJobId);
 
     const job: Job = {