typeclaw 0.8.0 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (92) hide show
  1. package/README.md +6 -6
  2. package/package.json +5 -3
  3. package/scripts/require-parallel.ts +41 -0
  4. package/src/agent/index.ts +55 -6
  5. package/src/agent/live-sessions.ts +34 -0
  6. package/src/agent/plugin-tools.ts +2 -0
  7. package/src/agent/session-meta.ts +21 -2
  8. package/src/agent/subagent-completion-reminder.ts +89 -0
  9. package/src/agent/subagents.ts +3 -2
  10. package/src/agent/system-prompt.ts +10 -8
  11. package/src/bundled-plugins/explorer/explorer.ts +2 -2
  12. package/src/bundled-plugins/guard/index.ts +14 -1
  13. package/src/bundled-plugins/guard/policies/managed-config.ts +43 -13
  14. package/src/bundled-plugins/guard/policies/memory-retrieval-cache-write.ts +37 -0
  15. package/src/bundled-plugins/guard/policies/memory-topics-delete.ts +67 -0
  16. package/src/bundled-plugins/guard/policies/memory-topics-write.ts +33 -0
  17. package/src/bundled-plugins/guard/policies/non-workspace-write.ts +8 -2
  18. package/src/bundled-plugins/guard/policy.ts +7 -0
  19. package/src/bundled-plugins/memory/README.md +76 -62
  20. package/src/bundled-plugins/memory/append-tool.ts +3 -2
  21. package/src/bundled-plugins/memory/citation-superset.ts +49 -11
  22. package/src/bundled-plugins/memory/citations.ts +19 -8
  23. package/src/bundled-plugins/memory/delete-tool.ts +57 -0
  24. package/src/bundled-plugins/memory/dreaming-state.ts +1 -1
  25. package/src/bundled-plugins/memory/dreaming.ts +364 -146
  26. package/src/bundled-plugins/memory/frontmatter.ts +165 -0
  27. package/src/bundled-plugins/memory/index.ts +236 -16
  28. package/src/bundled-plugins/memory/injection-plan.ts +15 -0
  29. package/src/bundled-plugins/memory/load-memory.ts +102 -103
  30. package/src/bundled-plugins/memory/load-shards.ts +156 -0
  31. package/src/bundled-plugins/memory/memory-logger.ts +16 -15
  32. package/src/bundled-plugins/memory/memory-retrieval.ts +105 -0
  33. package/src/bundled-plugins/memory/migration.ts +282 -1
  34. package/src/bundled-plugins/memory/paths.ts +42 -0
  35. package/src/bundled-plugins/memory/search-tool.ts +232 -0
  36. package/src/bundled-plugins/memory/secret-detector.ts +2 -2
  37. package/src/bundled-plugins/memory/shard-snapshot.ts +51 -0
  38. package/src/bundled-plugins/memory/slug.ts +59 -0
  39. package/src/bundled-plugins/memory/stream-io.ts +110 -1
  40. package/src/bundled-plugins/memory/strength.ts +3 -3
  41. package/src/bundled-plugins/memory/topics.ts +70 -16
  42. package/src/bundled-plugins/security/index.ts +24 -0
  43. package/src/bundled-plugins/security/permissions.ts +4 -0
  44. package/src/bundled-plugins/security/policies/cron-promotion.ts +349 -0
  45. package/src/bundled-plugins/security/policies/git-exfil.ts +2 -0
  46. package/src/bundled-plugins/security/policies/prompt-injection.ts +3 -0
  47. package/src/bundled-plugins/security/policies/role-promotion.ts +419 -0
  48. package/src/bundled-plugins/security/policies/system-prompt-leak.ts +1 -0
  49. package/src/channels/adapters/kakaotalk-attachment.ts +7 -17
  50. package/src/channels/adapters/kakaotalk.ts +64 -37
  51. package/src/channels/adapters/slack-bot-classify.ts +2 -27
  52. package/src/channels/index.ts +5 -0
  53. package/src/channels/router.ts +201 -17
  54. package/src/channels/subagent-completion-bridge.ts +84 -0
  55. package/src/cli/builtins.ts +1 -0
  56. package/src/cli/index.ts +1 -0
  57. package/src/cli/init.ts +122 -14
  58. package/src/cli/inspect.ts +151 -0
  59. package/src/cron/consumer.ts +1 -1
  60. package/src/init/dockerfile.ts +268 -4
  61. package/src/init/hatching.ts +5 -6
  62. package/src/init/kakaotalk-auth.ts +6 -47
  63. package/src/init/validate-api-key.ts +121 -0
  64. package/src/inspect/index.ts +213 -0
  65. package/src/inspect/label.ts +50 -0
  66. package/src/inspect/live.ts +221 -0
  67. package/src/inspect/render.ts +163 -0
  68. package/src/inspect/replay.ts +265 -0
  69. package/src/inspect/session-list.ts +160 -0
  70. package/src/inspect/types.ts +110 -0
  71. package/src/plugin/hooks.ts +23 -1
  72. package/src/plugin/index.ts +2 -0
  73. package/src/plugin/manager.ts +1 -1
  74. package/src/plugin/registry.ts +1 -1
  75. package/src/plugin/types.ts +10 -0
  76. package/src/run/channel-session-factory.ts +7 -1
  77. package/src/run/index.ts +87 -21
  78. package/src/secrets/kakao-renewal.ts +3 -47
  79. package/src/server/index.ts +241 -60
  80. package/src/shared/index.ts +3 -0
  81. package/src/shared/protocol.ts +49 -0
  82. package/src/skills/typeclaw-channel-kakaotalk/SKILL.md +9 -9
  83. package/src/skills/typeclaw-claude-code/SKILL.md +57 -39
  84. package/src/skills/typeclaw-claude-code/references/stop-hook.md +2 -0
  85. package/src/skills/typeclaw-claude-code/references/tmux-driving.md +102 -16
  86. package/src/skills/typeclaw-config/SKILL.md +1 -1
  87. package/src/skills/typeclaw-cron/SKILL.md +1 -1
  88. package/src/skills/typeclaw-memory/SKILL.md +16 -163
  89. package/src/skills/typeclaw-permissions/SKILL.md +2 -2
  90. package/src/skills/typeclaw-plugins/SKILL.md +25 -14
  91. package/src/test-helpers/wait-for.ts +7 -1
  92. package/typeclaw.schema.json +7 -0
@@ -6,6 +6,7 @@ import { SessionManager } from '@mariozechner/pi-coding-agent'
6
6
  import { createSession, type AgentSession } from '@/agent'
7
7
  import { subscribeProviderErrors } from '@/agent/provider-error'
8
8
  import type { ChannelParticipant, SessionOrigin } from '@/agent/session-origin'
9
+ import { renderSubagentCompletionReminder } from '@/agent/subagent-completion-reminder'
9
10
  import { createCommandRegistry } from '@/commands'
10
11
  import { CORE_PERMISSIONS, type PermissionService } from '@/permissions'
11
12
  import type { HookBus } from '@/plugin'
@@ -254,6 +255,14 @@ type LiveSession = {
254
255
  currentTurnAuthorId: string | null
255
256
  currentTurnAuthorIds: Set<string>
256
257
  lastTurnAuthorIds: Set<string>
258
+ // Mirror of currentTurnAuthorId at end-of-turn (the LAST speaker of the
259
+ // prior batch), preserved across the drain finally-block which resets
260
+ // currentTurnAuthorId to null. Read by the reminder-only branch in
261
+ // drain() so a system-reminder wakeup carries the same author the prior
262
+ // turn's tool.before saw — matching "last speaker" semantics (not "first
263
+ // inserted into Set"), so a multi-author prior turn like alice→bob
264
+ // restores `bob`, the same identity normal turns would have used.
265
+ lastTurnAuthorId: string | null
257
266
  consecutiveAborts: number
258
267
  // Per-(chat:thread) count of bot messages sent without intervening user
259
268
  // input being rendered into the model's context. Reset at the top of each
@@ -261,6 +270,15 @@ type LiveSession = {
261
270
  // about to be shown to the model). channel_send reads this BEFORE calling
262
271
  // router.send so the hint reflects the position of the about-to-happen send
263
272
  // (n-th in a row), nudging the model to yield without forcing it to.
273
+ // Queue of `<system-reminder>...</system-reminder>` strings to prepend
274
+ // into the next turn's user-message body. Populated by
275
+ // `injectSubagentCompletionReminder` (and any future system-injected
276
+ // wakeups) so a backgrounded subagent's completion can wake a channel
277
+ // session that has no pending user inbounds. Drained at the top of
278
+ // every `drain()` iteration alongside the regular promptQueue batch;
279
+ // the drain loop's run condition checks BOTH queues so a system
280
+ // reminder alone is enough to trigger a turn.
281
+ pendingSystemReminders: string[]
264
282
  consecutiveSends: Map<string, number>
265
283
  // Per-(chat:thread) text of the last reserved bot send. Set
266
284
  // SYNCHRONOUSLY inside router.send before the outbound callback awaits,
@@ -387,6 +405,21 @@ export type ChannelRouter = {
387
405
  // slack-bot-classify.ts. Read live so a reload of `alias` propagates
388
406
  // to adapters without a restart.
389
407
  getSelfAliases: () => readonly string[]
408
+ // Inject a `<system-reminder>` block addressed to a live channel session
409
+ // identified by `parentSessionId`. The reminder is rendered into the
410
+ // next turn's user-message body and triggers a drain even if the
411
+ // promptQueue is empty. Returns `delivered` when a matching live
412
+ // session was found and the reminder was queued, `no-live-session`
413
+ // otherwise. Used by the subagent-completion bridge in
414
+ // src/run/index.ts; safe for tests to call directly via a fake router.
415
+ injectSubagentCompletionReminder: (args: {
416
+ parentSessionId: string
417
+ subagent: string
418
+ taskId: string
419
+ ok: boolean
420
+ durationMs: number
421
+ error?: string
422
+ }) => { kind: 'delivered'; keyId: string } | { kind: 'no-live-session' }
390
423
  stop: () => Promise<void>
391
424
  liveCount: () => number
392
425
  __testing?: {
@@ -396,6 +429,34 @@ export type ChannelRouter = {
396
429
  isTypingActive: (key: ChannelKey) => boolean
397
430
  stopTyping: (key: ChannelKey) => Promise<void>
398
431
  runIdleGc: () => Promise<void>
432
+ // Returns the seeded author state on the live session matching
433
+ // `key`, or undefined when no live session exists. Tests use this
434
+ // to pin the symmetric-seeding invariant between `lastTurnAuthorId`
435
+ // (string) and `lastTurnAuthorIds` (Set) at session creation —
436
+ // observable directly here rather than via a downstream sticky-
437
+ // credit grant test that would need to coordinate with multiple
438
+ // subsystems.
439
+ getLiveAuthorState: (key: ChannelKey) =>
440
+ | {
441
+ currentTurnAuthorId: string | null
442
+ currentTurnAuthorIds: readonly string[]
443
+ lastTurnAuthorId: string | null
444
+ lastTurnAuthorIds: readonly string[]
445
+ }
446
+ | undefined
447
+ // Returns a shallow copy of `live.originRef.current` for the live
448
+ // session matching `key`, or undefined when no live session exists.
449
+ // Exists so tests can assert on the per-turn origin that tool.before
450
+ // consumers would see — the origin is normally only observable
451
+ // indirectly via in-flight tool calls, which the fake session doesn't
452
+ // execute. The shallow copy detaches the top-level fields from
453
+ // `originRef` so a later turn replacing `originRef.current` doesn't
454
+ // change a captured assertion. Nested fields (`participants`,
455
+ // `membership`) are still shared by reference; in practice
456
+ // `updateParticipants` returns a fresh array rather than mutating in
457
+ // place, so observed snapshots are stable for the assertions tests
458
+ // make today. NOT a public router method.
459
+ getLiveOriginSnapshot: (key: ChannelKey) => SessionOrigin | undefined
399
460
  }
400
461
  }
401
462
 
@@ -800,6 +861,7 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
800
861
  resolvedNames,
801
862
  originRef,
802
863
  promptQueue: [],
864
+ pendingSystemReminders: [],
803
865
  contextBuffer: [],
804
866
  draining: false,
805
867
  debounceTimer: null,
@@ -811,7 +873,18 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
811
873
  firstUnprocessedAt: 0,
812
874
  currentTurnAuthorId: null,
813
875
  currentTurnAuthorIds: new Set(),
814
- lastTurnAuthorIds: new Set(),
876
+ // `lastTurnAuthorId` (string, used for `lastInboundAuthorId` in
877
+ // origin) and `lastTurnAuthorIds` (Set, used by
878
+ // `grantStickyForReplyTargets` as the fallback when
879
+ // `currentTurnAuthorIds` is empty) are seeded TOGETHER from
880
+ // `triggeringAuthorId`. Seeding only the string would leave the
881
+ // Set empty for the cold-start reminder-only path, which is
882
+ // observable when the agent replies during that turn — `send()`
883
+ // would compute an empty `targetIds` and silently drop the
884
+ // sticky-credit grant for the seeded author. The two fields must
885
+ // stay in sync, so they are written in the same statement.
886
+ lastTurnAuthorIds: triggeringAuthorId !== undefined ? new Set([triggeringAuthorId]) : new Set(),
887
+ lastTurnAuthorId: triggeringAuthorId ?? null,
815
888
  consecutiveAborts: 0,
816
889
  consecutiveSends: new Map(),
817
890
  lastSentText: new Map(),
@@ -1026,12 +1099,13 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
1026
1099
  }
1027
1100
  }
1028
1101
 
1029
- const fireSessionTurnStart = async (live: LiveSession): Promise<void> => {
1102
+ const fireSessionTurnStart = async (live: LiveSession, userPrompt: string): Promise<void> => {
1030
1103
  if (!live.hooks) return
1031
1104
  try {
1032
1105
  await live.hooks.runSessionTurnStart({
1033
1106
  sessionId: live.sessionId,
1034
1107
  agentDir: options.agentDir,
1108
+ userPrompt,
1035
1109
  origin: buildLiveOrigin(live),
1036
1110
  })
1037
1111
  } catch (err) {
@@ -1082,6 +1156,7 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
1082
1156
  live.debounceTimer = null
1083
1157
  live.firstUnprocessedAt = 0
1084
1158
  live.promptQueue.length = 0
1159
+ live.pendingSystemReminders.length = 0
1085
1160
  await stopTypingHeartbeat(live)
1086
1161
  try {
1087
1162
  await live.session.abort()
@@ -1095,7 +1170,7 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
1095
1170
  if (live.draining || live.destroyed) return
1096
1171
  live.draining = true
1097
1172
  try {
1098
- while (live.promptQueue.length > 0 && !live.destroyed) {
1173
+ while ((live.promptQueue.length > 0 || live.pendingSystemReminders.length > 0) && !live.destroyed) {
1099
1174
  live.typingTimedOut = false
1100
1175
  // Heartbeat must run during generation as well as during debounce.
1101
1176
  // Because new inbounds during a turn just push into promptQueue
@@ -1104,13 +1179,32 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
1104
1179
  startTypingHeartbeat(live)
1105
1180
  const batch = live.promptQueue.splice(0, live.promptQueue.length)
1106
1181
  const observed = live.contextBuffer.splice(0, live.contextBuffer.length)
1107
- const text = composeTurnPrompt(observed, batch, { loopGuardActive: live.loopGuardActive })
1182
+ const reminders = live.pendingSystemReminders.splice(0, live.pendingSystemReminders.length)
1183
+ const text = composeTurnPrompt(observed, batch, {
1184
+ loopGuardActive: live.loopGuardActive,
1185
+ systemReminders: reminders,
1186
+ })
1108
1187
 
1109
- live.currentTurnAuthorId = batch.length > 0 ? batch[batch.length - 1]!.authorId : null
1110
- live.currentTurnAuthorIds = new Set(batch.map((m) => m.authorId))
1111
1188
  if (batch.length > 0) {
1189
+ live.currentTurnAuthorId = batch[batch.length - 1]!.authorId
1190
+ live.currentTurnAuthorIds = new Set(batch.map((m) => m.authorId))
1112
1191
  live.consecutiveSends.clear()
1113
1192
  live.lastSentText.clear()
1193
+ } else if (live.lastTurnAuthorId !== null) {
1194
+ // Reminder-only turn (batch.length === 0, reminders.length > 0):
1195
+ // restore the author identity from the prior turn so author-
1196
+ // scoped role resolution still works on this turn. The drain
1197
+ // finally-block clears `currentTurnAuthorId` between turns, so a
1198
+ // reminder arriving while the session is idle would otherwise
1199
+ // strip `lastInboundAuthorId` from the tool.before origin and
1200
+ // demote roles like `slack:T0/C0 author:U_OWNER` to whichever
1201
+ // non-author rule matches — silently breaking the channel_reply
1202
+ // that the reminder is asking the agent to send. `lastTurnAuthorId`
1203
+ // tracks the LAST speaker of the prior batch (matching normal-
1204
+ // turn `batch[batch.length - 1]!.authorId` semantics) so a multi-
1205
+ // author prior turn like alice→bob restores `bob`, not alice.
1206
+ live.currentTurnAuthorId = live.lastTurnAuthorId
1207
+ live.currentTurnAuthorIds = new Set(live.lastTurnAuthorIds)
1114
1208
  }
1115
1209
 
1116
1210
  // Update the live origin holder so this turn's tool.before events
@@ -1127,7 +1221,7 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
1127
1221
  logger.info(`[channels] ${live.keyId} prompting batch=${batch.length} text_len=${text.length}`)
1128
1222
  const promptStart = now()
1129
1223
  const successfulSendsBeforePrompt = live.successfulChannelSends
1130
- await fireSessionTurnStart(live)
1224
+ await fireSessionTurnStart(live, text)
1131
1225
  try {
1132
1226
  await live.session.prompt(text)
1133
1227
  await validateChannelTurn(live, successfulSendsBeforePrompt)
@@ -1142,6 +1236,9 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
1142
1236
  }
1143
1237
  await fireSessionIdle(live)
1144
1238
  live.lastTurnAuthorIds = new Set(live.currentTurnAuthorIds)
1239
+ if (live.currentTurnAuthorId !== null) {
1240
+ live.lastTurnAuthorId = live.currentTurnAuthorId
1241
+ }
1145
1242
  }
1146
1243
  } finally {
1147
1244
  live.draining = false
@@ -1743,6 +1840,14 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
1743
1840
  if (live.destroyed) continue
1744
1841
  if (live.draining) continue
1745
1842
  if (live.promptQueue.length > 0) continue
1843
+ // pendingSystemReminders is checked alongside promptQueue because both
1844
+ // represent pending work that drain() will process. Today's only
1845
+ // populator (injectSubagentCompletionReminder) also fires drain()
1846
+ // synchronously, which sets draining=true and shadows this guard via
1847
+ // the line above — but the guard exists to keep the invariant honest
1848
+ // for any future caller that queues a reminder without immediately
1849
+ // waking the drain loop.
1850
+ if (live.pendingSystemReminders.length > 0) continue
1746
1851
  if (t - live.lastInboundAt <= SESSION_IDLE_MS) continue
1747
1852
  victims.push(live)
1748
1853
  }
@@ -1812,6 +1917,45 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
1812
1917
  return { kind: 'unknown-command', name: lowered }
1813
1918
  }
1814
1919
 
1920
+ const injectSubagentCompletionReminder = (args: {
1921
+ parentSessionId: string
1922
+ subagent: string
1923
+ taskId: string
1924
+ ok: boolean
1925
+ durationMs: number
1926
+ error?: string
1927
+ }): { kind: 'delivered'; keyId: string } | { kind: 'no-live-session' } => {
1928
+ for (const live of liveSessions.values()) {
1929
+ if (live.destroyed) continue
1930
+ if (live.sessionId !== args.parentSessionId) continue
1931
+ const text = renderSubagentCompletionReminder({
1932
+ subagent: args.subagent,
1933
+ taskId: args.taskId,
1934
+ ok: args.ok,
1935
+ durationMs: args.durationMs,
1936
+ ...(args.error !== undefined ? { error: args.error } : {}),
1937
+ channel: true,
1938
+ })
1939
+ live.pendingSystemReminders.push(text)
1940
+ logger.info(`[channels] ${live.keyId}: subagent-completion reminder queued task=${args.taskId} ok=${args.ok}`)
1941
+ // Wake the drain loop. If a turn is already in flight, the wakeup is
1942
+ // a no-op because drain() will pick up the reminder on its next
1943
+ // iteration (it now gates on promptQueue OR pendingSystemReminders).
1944
+ // If the session is idle, fire drain() immediately rather than going
1945
+ // through the debounce path — the reminder is not a user inbound,
1946
+ // so the "coalesce nearby inbounds" rationale for debouncing does
1947
+ // not apply. Mirrors the TUI path's `idle ? 'interrupt' : 'queue'`
1948
+ // semantics: the channel router doesn't have a `delivery: interrupt`
1949
+ // mechanism (no in-flight abort during a turn), but firing drain()
1950
+ // immediately is the equivalent for an idle session.
1951
+ if (!live.draining) {
1952
+ void drain(live)
1953
+ }
1954
+ return { kind: 'delivered', keyId: live.keyId }
1955
+ }
1956
+ return { kind: 'no-live-session' }
1957
+ }
1958
+
1815
1959
  return {
1816
1960
  route,
1817
1961
  send,
@@ -1833,6 +1977,7 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
1833
1977
  fetchAttachment,
1834
1978
  executeCommand,
1835
1979
  getSelfAliases: computeSelfAliases,
1980
+ injectSubagentCompletionReminder,
1836
1981
  stop,
1837
1982
  liveCount: () => liveSessions.size,
1838
1983
  __testing: {
@@ -1876,6 +2021,22 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
1876
2021
  await stopTypingHeartbeat(live)
1877
2022
  },
1878
2023
  runIdleGc,
2024
+ getLiveOriginSnapshot: (key: ChannelKey) => {
2025
+ const live = liveSessions.get(channelKeyId(key))
2026
+ const origin = live?.originRef.current
2027
+ if (origin === undefined) return undefined
2028
+ return { ...origin }
2029
+ },
2030
+ getLiveAuthorState: (key: ChannelKey) => {
2031
+ const live = liveSessions.get(channelKeyId(key))
2032
+ if (live === undefined) return undefined
2033
+ return {
2034
+ currentTurnAuthorId: live.currentTurnAuthorId,
2035
+ currentTurnAuthorIds: Array.from(live.currentTurnAuthorIds),
2036
+ lastTurnAuthorId: live.lastTurnAuthorId,
2037
+ lastTurnAuthorIds: Array.from(live.lastTurnAuthorIds),
2038
+ }
2039
+ },
1879
2040
  },
1880
2041
  }
1881
2042
  }
@@ -1883,27 +2044,50 @@ export function createChannelRouter(options: CreateChannelRouterOptions): Channe
1883
2044
  function composeTurnPrompt(
1884
2045
  observed: readonly ObservedInbound[],
1885
2046
  batch: readonly QueuedInbound[],
1886
- state: { loopGuardActive: boolean } = { loopGuardActive: false },
2047
+ state: { loopGuardActive: boolean; systemReminders?: readonly string[] } = { loopGuardActive: false },
1887
2048
  ): string {
1888
2049
  const parts: string[] = []
2050
+ // System reminders (subagent-completion wakeups today) lead the turn body
2051
+ // because they are typically what triggered the drain — when the prompt
2052
+ // queue is empty and the only thing in this iteration is a reminder, the
2053
+ // model needs to see the reminder before any optional context. The
2054
+ // reminder block is self-fenced by its <system-reminder> tags, so no
2055
+ // extra framing is needed and the model already learns this shape from
2056
+ // the TUI path; channel sessions see the same tags.
2057
+ if (state.systemReminders && state.systemReminders.length > 0) {
2058
+ for (const reminder of state.systemReminders) {
2059
+ parts.push(reminder)
2060
+ }
2061
+ parts.push('')
2062
+ }
1889
2063
  // Loop-guard notice lives in the user-turn text (recomposed every drain)
1890
2064
  // rather than in the system prompt so it does not invalidate the
1891
2065
  // prompt-prefix cache. The cached prefix covers system + tools + earlier
1892
2066
  // turns; the current user-turn suffix is non-cacheable by design, so
1893
2067
  // adding a section here is cache-neutral.
1894
2068
  //
1895
- // SYSTEM MESSAGE convention: any runtime-injected block in the user turn
1896
- // that is NOT from a chat participant must use the
1897
- // `**[SYSTEM MESSAGE — not from a human]**` framing fenced by horizontal
1898
- // rules (`---`). This is structurally distinct from the H2 sections used
1899
- // for actual conversation content (`## Recent context`,
2069
+ // SYSTEM MESSAGE convention: any runtime-injected block in the user
2070
+ // turn that is NOT from a chat participant MUST use the
2071
+ // `**[SYSTEM MESSAGE — not from a human]**` framing fenced by
2072
+ // horizontal rules (`---`) the loop-guard block below is the
2073
+ // canonical example. This is structurally distinct from the H2
2074
+ // sections used for actual conversation content (`## Recent context`,
1900
2075
  // `## Current message`). Without the fencing, models — especially
1901
2076
  // persona-rich ones like Kimi — read the heading as a human-authored
1902
2077
  // instruction and reply to it ("알겠습니다, 대화 여기까지 할게요"). The
1903
- // bracketed marker plus the explicit "Do not acknowledge or reply to this
1904
- // notice" line is the trust boundary that prevents this. New runtime
1905
- // notices (rate-limit, schema-mismatch, abort signals, etc.) MUST follow
1906
- // this same convention so models learn the pattern.
2078
+ // bracketed marker plus the explicit "Do not acknowledge or reply to
2079
+ // this notice" line is the trust boundary that prevents this. New
2080
+ // runtime notices (rate-limit, schema-mismatch, abort signals, etc.)
2081
+ // MUST follow this convention.
2082
+ //
2083
+ // ONE narrow exception exists: subagent-completion reminders use
2084
+ // `<system-reminder>...</system-reminder>` tags (prepended above) for
2085
+ // parity with the TUI path's identical tagging (see
2086
+ // `renderSubagentCompletionReminder` in
2087
+ // `src/agent/subagent-completion-reminder.ts`) so the model sees the
2088
+ // same shape across origins. The exception is scoped to that single
2089
+ // case: do NOT extend it to new notice types. Anything that is not
2090
+ // a true subagent-style completion ping uses framing 1.
1907
2091
  if (state.loopGuardActive) {
1908
2092
  parts.push(
1909
2093
  '---',
@@ -0,0 +1,84 @@
1
+ import { parseSubagentCompletedPayload } from '@/agent/subagent-completion-reminder'
2
+ import type { Stream } from '@/stream'
3
+
4
+ import type { ChannelRouter } from './router'
5
+
6
+ export type SubagentCompletionBridgeLogger = {
7
+ info: (msg: string) => void
8
+ warn: (msg: string) => void
9
+ }
10
+
11
+ export type SubagentCompletionBridgeOptions = {
12
+ stream: Stream
13
+ router: Pick<ChannelRouter, 'injectSubagentCompletionReminder'>
14
+ logger?: SubagentCompletionBridgeLogger
15
+ }
16
+
17
+ export type SubagentCompletionBridge = {
18
+ stop: () => void
19
+ }
20
+
21
+ const consoleLogger: SubagentCompletionBridgeLogger = {
22
+ info: (msg) => console.log(msg),
23
+ warn: (msg) => console.warn(msg),
24
+ }
25
+
26
+ // Bridges `subagent.completed` broadcasts on the in-process Stream into a
27
+ // channel router call so the channel session that spawned the subagent
28
+ // gets woken up with a `<system-reminder>` when the subagent finishes.
29
+ //
30
+ // Two-bridges-for-two-surfaces design (matches the TUI side at
31
+ // src/server/index.ts `routeSubagentCompletionReminder`):
32
+ //
33
+ // - TUI sessions: the WS server subscribes to broadcasts on the same
34
+ // stream and re-publishes the reminder as `target: { kind: 'session' }`
35
+ // so the per-session drain loop in the server picks it up. Lookup is
36
+ // by sessionId (which is `state.sessionFileId`).
37
+ //
38
+ // - Channel sessions: this bridge subscribes and calls
39
+ // `router.injectSubagentCompletionReminder` because the channel router
40
+ // owns its own per-key drain loop and doesn't use the stream's
41
+ // session-keyed target.
42
+ //
43
+ // `parentSessionId` matching is the same on both sides: when a channel
44
+ // session spawns a subagent via `spawn_subagent`, the tool captures
45
+ // `sessionManager.getSessionId()` and publishes it as the broadcast's
46
+ // `parentSessionId`. That id is exactly what the router stores on each
47
+ // `LiveSession`, so the lookup is O(N) over live sessions with N small
48
+ // (one per active conversation).
49
+ //
50
+ // On `no-live-session`, we silently drop. Three observable paths reach
51
+ // this branch in production:
52
+ //
53
+ // - The parent session was GC'd by the idle-eviction tick
54
+ // (SESSION_IDLE_MS) while the subagent was running.
55
+ // - The parent session rolled over (SESSION_FRESHNESS_TTL_MS) when a
56
+ // new inbound arrived during a long-running subagent — the channel
57
+ // conversation continues on the new sessionId, but the broadcast
58
+ // still carries the old one.
59
+ // - The parent was a TUI session (the TUI bridge in
60
+ // src/server/index.ts handles it).
61
+ //
62
+ // The right fix for the first two paths is for the broadcast to carry
63
+ // the channel-key coordinate `{ adapter, workspace, chat, thread }` so
64
+ // the bridge can fall back to "any live session for the same channel
65
+ // key" when the exact sessionId no longer matches. That requires
66
+ // extending the broadcast payload (consumed by TUI and channel paths)
67
+ // and gating spawn_subagent to capture the origin coordinates — both
68
+ // non-trivial. Deferred until we see this drop pattern in production
69
+ // logs; the info log line below makes the case diagnosable from logs
70
+ // alone.
71
+ export function createSubagentCompletionBridge(options: SubagentCompletionBridgeOptions): SubagentCompletionBridge {
72
+ const logger = options.logger ?? consoleLogger
73
+ const unsubscribe = options.stream.subscribe({ target: { kind: 'broadcast' } }, (msg) => {
74
+ const parsed = parseSubagentCompletedPayload(msg.payload)
75
+ if (parsed === null) return
76
+ const result = options.router.injectSubagentCompletionReminder(parsed)
77
+ if (result.kind === 'no-live-session') {
78
+ logger.info(
79
+ `[channels] subagent-completion reminder dropped: no live session for parentSessionId=${parsed.parentSessionId} task=${parsed.taskId}`,
80
+ )
81
+ }
82
+ })
83
+ return { stop: unsubscribe }
84
+ }
@@ -12,6 +12,7 @@ export const BUILTIN_COMMAND_NAMES = [
12
12
  'status',
13
13
  'reload',
14
14
  'logs',
15
+ 'inspect',
15
16
  'shell',
16
17
  'compose',
17
18
  'channel',
package/src/cli/index.ts CHANGED
@@ -22,6 +22,7 @@ const main = defineCommand({
22
22
  status: () => import('./status').then((m) => m.statusCommand),
23
23
  reload: () => import('./reload').then((m) => m.reload),
24
24
  logs: () => import('./logs').then((m) => m.logsCommand),
25
+ inspect: () => import('./inspect').then((m) => m.inspectCommand),
25
26
  shell: () => import('./shell').then((m) => m.shellCommand),
26
27
  compose: () => import('./compose').then((m) => m.composeCommand),
27
28
  channel: () => import('./channel').then((m) => m.channelCommand),