3 Commits

Author	SHA1	Message	Date
dtoro	4e294b3630	0.22.0 — full MCP agent surface: 19 new tools, async run, session reliability ... Stage 1 — Foundation: - Target validation: iptables + systemctl/docker target-type gates - Async run for long-running commands (sleep/wait/poll loops) - audit_log.session_id plumbing (SQL, sqlcgen, 18 call sites) Stage 2 — External agent observe (11 tools): - get_dashboard_summary, get_ontology, list_checks, list_executions - get_knowledge_revisions, get_knowledge_duplicates, get_knowledge_orphans - list_knowledge_tags, list_entity_sessions, find_entities_by - 3 resource templates: oikos://entity/{slug}, knowledge/{id}, execution/{id} Stage 3 — Nomos reliability: - complete_task(success) refused without verification (upgraded from warn) - sessionHasPlan excludes replaced steps (forces propose_plan after reopen) - Bash syntax validation in run() (rejects literal \n, flag-space typos) - Scope gate in SOUL.md (ask before pivoting to unrelated subsystem) Stage 4 — External agent act (9 mutation tools): - ack_signal, resolve_signal, mute_signal, cancel_execution - update_check, delete_knowledge, restore_knowledge - merge_knowledge, rename_knowledge_tag	2026-08-04 23:51:55 +02:00
dtoro	ccbf6a8aac	fix(nomos): sessions blocked on an execution approval now show "Needs input" and never idle-close ... A config_mutation/destructive run() queued for approval never touched agent_sessions.status — only ask_operator did that, setting awaiting_input. So a task blocked on an execution approval was indistinguishable from one still genuinely working: the frontend's "Needs input" bucket only checks status===awaiting_input (never lit up for these), and the idle-sweep safety net only excludes awaiting_input from its stale-task query, so after ~30 minutes idle it would nudge the agent and then auto-close the task with outcome=partial while the approval was still sitting there undecided. classifyAndGate now flips the session into awaiting_input the moment an execution is queued (internal/mcp/server.go), and DecideApproval flips it back to executing once the approval is approved, denied, or revoked (internal/httpapi/approvals.go) — mirroring askOperator / answerQuestion's existing pattern for session_questions. Both emit task.status so the board updates live. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-21 12:28:52 +02:00
dtoro	fb39a48bef	refactor: split phase3.go + extract MCP tool registry (R4) ... internal/httpapi/phase3.go (2627 lines, 12+ resource domains) split into 15 per-resource files: - actuator.go: SSH execution machinery (initSSH, sshExec, resolveRunTarget, executeApprovedAction, jsonErr, gatewayPreflightPassed, resolveTemplate) - checks.go, classifications.go, executions.go, approvals.go, patterns.go, skills.go, approval_rules.go, autonomy.go, risk_classes.go, relationships.go, entity_types.go, metrics.go, agent_activity.go, helpers.go — one file per resource domain, each with its own imports. internal/mcp/server.go: newServer (708 lines, 33 inline tool registrations) refactored to a registry pattern: - internal/mcp/tools.go (new): toolReg struct + allTools() returning all 33 tool definitions. Handler logic moved verbatim — no changes to tool names, descriptions, schemas, or behavior. - server.go: newServer is now 9 lines (iterate registry, AddTool each). -699 lines. No function logic, names, or signatures changed. go vet, build, and all tests pass (httpapi, mcp, db, policy).	2026-07-17 22:41:40 +02:00