Files
dev-puppeteer/my-deepagent/src/my_deepagent/governance.py
chungyeong 96c8849e2c fix(my-deepagent): v0.3 plan-conformance — 18-item gap fix across PR #2-#9
1차 v0.3 구현 후 plan-v0.3 와 대조해 발견된 18건 누락/명세 위반을 보강.
자기 리뷰 3 라운드 (누락·미완 / 오류·엣지케이스 / 과최적화) 모두 PASS.

PR #5 plan-mode (3건):
- BLOCKED_TOOLS_IN_PLAN_MODE 에 write_todos 추가
- /plan 시 system message inject (_PLAN_MODE_SYSTEM_PROMPT)
- /approve 시 마지막 assistant 메시지를 "approved plan" system 으로 inject
- InteractiveSession._pending_system_messages 인프라 신설

PR #2 compaction (1건):
- CompactionResult.summary_text 추가, 다음 thread 첫 ainvoke 에 inject

PR #3 auto-memory (6건):
- global memory dir + bootstrap
- frontmatter name/description/type 정식 도입 + MemoryEntry/MemoryType
- _infer_memory_type (keyword heuristic, no LLM)
- _scrub_secrets (OpenRouter/Anthropic/OpenAI/AWS/Bearer redaction)
- /memory show <name> 서브명령
- /remember [--global] / /forget [--global] 스코프 토글

PR #4 skills (3건):
- project_skills_dir + 두 스코프 (global / project) merge with last-wins
- /skill <name> 본문 inject (queue_system_message) — 이전엔 REPL 출력만
- /skills show <name> 별도 서브명령

PR #6 sub-agent (4건):
- budget.py `session:<uuid>` scope + CostMiddleware 자동 전달
- resolve_root_session_id walk-up (cycle guard) + sub-agent root 에 charge
- run_subagent_to_completion 실제 ainvoke + 결과 push to parent
- /agents 서브명령 구조 (list / spawn / show) + spawn 시 parent system msg

PR #7 governance (1건):
- bootstrap_user_dirs — instructions + global/memory + skills + projects 한
  호출로 idempotent 부트스트랩

PR #8 Web GUI (1건):
- index.html → 세션 목록, runs.html (신설) → workflow archive
- conversation.html ?session=<id> deep-link

PR #9 workflow integration (2건):
- /workflow 백그라운드 WorkflowEngine.run + 진행 메시지 stream 누적
- /binding show <workflow-name[@version]> 인자 지원

테스트 (+17, 685 → 702 passed):
- test_plan_mode: write_todos 차단 + blocklist sanity
- test_memory: scrub + type 추론 + override
- test_skills: project override + find_skill + resolve_skill_sources(pk)
- test_subagents: resolve_root_session_id chain + missing fallback
- test_budget: session: scope accumulation
- test_instructions: governance bootstrap + idempotency
- test_api_static: runs.html 신설 + index.html 재구성

게이트:
- ruff check / format --check / mypy: PASS (141 source files)
- pytest -q --ignore=tests/integration/test_e2e_workflow.py
  --ignore=tests/integration/test_openrouter_smoke.py: 702 passed

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-18 00:03:08 +09:00

80 lines
2.9 KiB
Python

"""Governance consent + first-run filesystem bootstrap.
v0.3 PR #7 extends this module to provision the user-wide skeleton on first
run: ``<data_dir>/MYDEEPAGENT.md``, ``<data_dir>/global/memory/MEMORY.md``,
``<data_dir>/skills/``, ``<data_dir>/projects/``. All steps are idempotent
so repeated calls do nothing destructive.
The bootstrap is invoked at REPL/API startup so users always see the dirs
even before they touch a `/remember` or `/skill` slash.
"""
from __future__ import annotations
import json
import logging
import os
from datetime import UTC, datetime
from pathlib import Path
from .config import Config
from .errors import MyDeepAgentError
from .instructions import ensure_global_instructions_initialized
from .memory import ensure_memory_initialized, global_memory_dir
from .skills import ensure_skills_initialized, user_skills_dir
_LOG = logging.getLogger(__name__)
def consent_path(data_dir: Path) -> Path:
return data_dir / "governance-accepted.json"
def has_consent(data_dir: Path) -> bool:
return consent_path(data_dir).is_file()
def record_consent(data_dir: Path) -> None:
data_dir.mkdir(parents=True, exist_ok=True)
target = consent_path(data_dir)
payload = {"accepted_at": datetime.now(UTC).isoformat(timespec="seconds")}
tmp = target.with_suffix(target.suffix + ".tmp")
fd = os.open(tmp, os.O_WRONLY | os.O_CREAT | os.O_TRUNC, 0o600)
try:
os.write(fd, json.dumps(payload, indent=2).encode("utf-8"))
os.fsync(fd)
finally:
os.close(fd)
os.replace(tmp, target)
def require_consent(data_dir: Path) -> None:
if not has_consent(data_dir):
raise MyDeepAgentError.human_required(
"governance_not_accepted",
message="governance consent not recorded",
recovery_hint="run `mydeepagent init` and accept the data-governance prompt",
)
def bootstrap_user_dirs(config: Config) -> None:
"""Provision the full user-wide skeleton. Idempotent.
Creates (if missing):
- ``<data_dir>/MYDEEPAGENT.md`` (global instructions w/ template)
- ``<data_dir>/global/memory/MEMORY.md`` (empty index for cross-project memory)
- ``<data_dir>/skills/`` (user-wide skills root)
- ``<data_dir>/projects/`` (parent of per-project subtrees)
Per-project subdirs (``projects/<project_key>/memory|skills``) are still
created lazily by :class:`InteractiveSession` since they depend on the
repo path; the parent ``projects/`` is materialised here so users see the
expected layout even before opening their first session.
"""
data_dir = Path(config.data_dir)
data_dir.mkdir(parents=True, exist_ok=True)
ensure_global_instructions_initialized(config)
ensure_memory_initialized(global_memory_dir(config))
ensure_skills_initialized(user_skills_dir(config))
(data_dir / "projects").mkdir(parents=True, exist_ok=True)