Repository navigation

feat(framework): gated operator body changes with journaled recovery (stacked on #250; merge after it) - #255

Closed

nissa-seru wants to merge 75 commits into

anima-research:mainfrom

nissa-seru:feat/operator-change-admission

Closed

feat(framework): gated operator body changes with journaled recovery (stacked on #250; merge after it)#255
nissa-seru wants to merge 75 commits into
anima-research:mainfrom
nissa-seru:feat/operator-change-admission

Commits on Oct 7, 2026
- feat(chronicle): RecordJournal — typed records that don't follow branch switches
  
  Basil-1007
  and
  claude
  committed
  f7e14f6
- fix(surgery): return once marks are scheduled, not after Discord accepts them
  
  Ada-1017
  and
  claude
  committed
  16a6392
- fix(chronicle): a RecordJournal write that fails after reaching the store must be reconciled
  
  Basil-1007
  and
  claude
  committed
  2153e3d
- fix(surgery): report unresolved marker bookkeeping as unresolved
  
  Ada-1017
  and
  claude
  committed
  82a267a
- docs(surgery): describe delivery as started without awaiting, not run after return
  
  Ada-1017
  and
  claude
  committed
  0254342
- docs(surgery): say what every receipt outcome guarantees, not 'durably active'
  
  Ada-1017
  and
  claude
  committed
  287eef2
- docs(changelog): state the incident's drain duration as projected, not observed
  
  Ada-1017
  and
  claude
  committed
  80c74c8
- fix(awareness): new gates wait for running drains, not only pending marks
  Fern-1209
  committed
  acd95b6
- docs(surgery): `none` also covers a disabled awareness outbox
  Fern-1209
  committed
  8b22d1f
- test(surgery): require both surgeries' reactions before traffic, by event order
  Fern-1209
  committed
  8b530ee
- feat(mcpl): type MCPL request failures by what reached the server
  
  Petra-1012
  and
  claude
  committed
  7144970
- Merge commit '7144970' into feat/surgery-marks-opt-in
  Ada-1017
  committed
  ca83ee9
- feat(awareness): make Discord awareness marks an explicit, one-shot choice that never gates MCPL
  Ada-1017
  committed
  2cb501a
- docs(awareness): document opt-in, one-shot marks, operator controls and the journal
  Ada-1017
  committed
  6bb0c61
- fix(awareness): bound outside error text before it is journaled, logged or returned
  Ada-1017
  committed
  6e9e51b
- Merge commit '2153e3d' (RecordJournal, shared base) into feat/surgery-marks-opt-in
  Ada-1017
  committed
  f603f3f
- refactor(awareness): keep the journal in the store (RecordJournal); fix June's review findings
  Ada-1017
  committed
  799a16b
- fix(awareness): a newer opposite intent retires in-flight and unknown requests' retries; drains stop with their route
  Ada-1017
  committed
  c0d2d90
- fix(awareness): authorization order decides opposite requests; imported active is not body proof; startup and offline body barriers; reserved turn undo
  Ada-1017
  committed
  d44826b
- docs(awareness): authorization order, reserved turn undo, imported active is not body proof
  Ada-1017
  committed
  c19d5e6
- fix(awareness): legacy outcomes come from the old writer's lastError, not its reconciliation state; cancel discloses released removals
  Ada-1017
  committed
  85481af
- fix(awareness): a repeated cancel writes nothing and still reports truthful history
  Ada-1017
  committed
  9baaeb1
- docs(awareness): legacy evidence names the outcome its error field establishes and labels the old status as reconciliation state
  Ada-1017
  committed
  511bd52
- fix(awareness): refuse a known target-branch collision before preparing intent; offline branch creation settles like any body failure
  Ada-1017
  committed
  7623cf2
- fix(recover): name the CLI's actual --branch flag in the collision error
  Ada-1017
  committed
  dc2928c
- fix(awareness): a hide or turn undo records its batch after the change is synced, and reports what the journal holds
  Ansel-1606
  committed
  5b34745
- fix(mcpl): a reconnect holds control traffic as well as data until the new grant is established
  Ansel-1606
  committed
  9d17ad6
- fix(recover): the CLI records its awareness controls and recoveries in the operator log
  Ansel-1606
  committed
  25891f0
- fix(awareness): a turn undo records its marks choice and receipt in the operator log
  Ansel-1606
  committed
  75d7eba
- fix(awareness): stop checkpointing the awareness journal; replay every entry
  Ansel-1606
  committed
  538b136
- fix(mcpl): no other plane opener releases a reconnect's traffic before its policy exchange settles
  Ansel-1606
  committed
  a5439e2
- fix(recover): refuse --dry-run with an awareness control instead of carrying the control out
  Ansel-1606
  committed
  485a3c7
- feat(framework): runAtSafeBoundary, a store reservation held across a host callback
  
  Agnes-1009
  and
  claude
  committed
  4221eb8
- feat(framework): a tool call carries who initiated it through every redispatch
  
  Agnes-1009
  and
  claude
  committed
  84664d6
- feat(modules): targeted, receipted, optionally durable ModuleContext.addMessage
  
  Agnes-1009
  and
  claude
  committed
  1d918f0
- feat(modules): Module.getSubconsciousTools offers tools on the subconscious surface
  
  Agnes-1009
  and
  claude
  committed
  9d25528
- fix(framework): read the lease and subconscious fields safely in prototype-built harnesses
  
  Agnes-1009
  and
  claude
  committed
  b83641d
- fix(framework): close four gaps in the lease, delivery and origin contracts (review)
  
  Agnes-1009
  and
  claude
  committed
  b032920
- fix(framework): atomic creation admission under any store hold; bounded landed-write ids (review)
  
  Agnes-1009
  and
  claude
  committed
  e7a1690
- fix(framework): a store reservation also waits for admitted ephemeral creations (review)
  
  Agnes-1009
  and
  claude
  committed
  a959680
- fix(framework): cleanup() withdraws an unrun ephemeral candidate for good (review)
  
  Agnes-1009
  and
  claude
  committed
  204dd88
- feat(framework): operator-change gate and scoped admission for self-change tools (R2, part 1)
  
  Agnes-1009
  and
  claude
  committed
  955a1b9
- fix+feat(framework): self-change gate review fixes; admitted undo-turns as one cut (R2)
  
  Agnes-1009
  and
  claude
  committed
  b3410fd
- fix(framework): turn-owned apply boundary, retryable undo bookkeeping, unawaited undo delivery, durable immediate receipts (review)
  
  Agnes-1009
  and
  claude
  committed
  491b0f3
- feat(framework): one leased application route; planned, journaled unstick; durable undo completion and honest store-only receipts (R2)
  
  Agnes-1009
  and
  claude
  committed
  e824379
- fix+feat(framework): store-bound resolved changes, five unstick review fixes, source-bound re-runs, and frozen-ref marks for staged undo (R2)
  
  Agnes-1009
  and
  claude
  committed
  6c25f83
- fix(framework): every queue exit settles its unstick re-run; batch semantics come from surviving requests (review)
  
  Agnes-1009
  and
  claude
  committed
  679ee66
- feat(awareness): staged publication choices, activated by their change after the body; activations record what they queued
  
  Ada-1017
  authored and
  Agnes-1009
  committed
  1ae93fc
- feat(framework): operator/changes owns gated body recovery; gated hide and undo by messages; staged-choice marks; held-lease and preview-bound surgeries (R2)
  
  Agnes-1009
  and
  claude
  committed
  76d0e9e
- fix(framework): a failed cut is never a commitment; unreadable operator journals stop startup; body-asserting records follow the store's commit (review)
  
  Agnes-1009
  and
  claude
  committed
  987a175
- fix+feat(framework): only records or what the process saw decide a cut; unresolved attempts held and settled by attested verdicts, live or offline; whole-group hides; per-attempt destinations (review)
  
  Agnes-1009
  and
  claude
  committed
  3c333d8
- fix(framework): an operator journal that parses but can't be read as its ledger is refused like unreadable bytes (review)
  
  Agnes-1009
  and
  claude
  committed
  231e3cd
- fix(recover): an offline operator-change resolution is logged like the CLI's other acts, under the CLI's requester convention (integration with #250)
  
  Agnes-1009
  and
  claude
  committed
  d19a9d3
- fix(framework,recover): validate operator/changes by what each kind's recovery consumes; --dry-run never resolves an operator change (review)
  
  Agnes-1009
  and
  claude
  committed
  5d1c5d8
- docs(framework): recovery comments state the rules the code enforces (Greptile #255 P2-7)
  
  Petra-1779
  and
  claude
  committed
  532146b
- fix(agent): a settings preview names the default pace a paced descent installs (Greptile #255 P2-5)
  
  Petra-1779
  and
  claude
  committed
  f167efd
Commits on Oct 8, 2026
- fix(framework,presentation): a staged tool-presentation edit records what it leaves, so a reset can't expose unapproved wording (Greptile #255 P1-3)
  
  Petra-1779
  and
  claude
  committed
  8e89124
- fix(framework): resume() refuses while the active body is an unresolved cut's destination, force or not (Greptile #255 P1-1)
  
  Petra-1779
  and
  claude
  committed
  e64e6e6
- fix(framework): the unstick journal reader refuses what its readers can't interpret, in checkpoints, entries and the reduced ledger (Greptile #255 P2-6)
  
  Petra-1779
  and
  claude
  committed
  f4716ab
- fix(framework): an abandoned destination left active is held until its source is restored; resume() refuses it, and restoreOperatorChangeSource restores it live (Greptile #255 P1-1, review)
  
  Petra-1779
  and
  claude
  committed
  5de55ca
- fix(framework): an unstick re-run whose turn ends before its stream starts is settled and released, unless a retry, requeue or hold carries it on (Greptile #255 P1-2)
  
  Petra-1779
  and
  claude
  committed
  f03d223
- fix(framework): a restoration counts only once the source's context initialized; the restart advice follows what persisted (Greptile #255 P1-1, review)
  
  Petra-1779
  and
  claude
  committed
  5b9b058
- fix(framework): stop() closes admission before its first await and lets the store's current users finish before tearing anything down (Greptile #255 P1-4)
  
  Petra-1779
  and
  claude
  committed
  2206c97
- fix(framework): a caller-named origin is normalized, so a falsy one is the host's, never the agent's own (#255 review P6)
  
  Alfred-1883
  and
  claude
  committed
  1f6b78c
- fix(framework): a delegation inherits the agent's own origin only for that same agent (#255 review P1)
  
  Alfred-1883
  and
  claude
  committed
  b46db52
- fix(framework): only the framework's own dispatch gives a tool-call event's call its origin; any other acts for the host (#255 review P2)
  
  Alfred-1883
  and
  claude
  committed
  5e9e010
- fix(framework): trace listeners are notified as the host's, never as the call that emitted the trace (#255 review P3)
  
  Alfred-1883
  and
  claude
  committed
  58139d5
- fix(code-execution): only the running exec's own work is served, as whoever started it; a task an earlier script left running is refused (#255 review P4, P4b)
  
  Alfred-1883
  and
  claude
  committed
  e5cf57a
- fix(api): while an operator-change gate is configured, the API server refuses the body changes it can't stage, whole and saying why (#255 review P5)
  
  Alfred-1883
  and
  claude
  committed
  f8a818c
- feat(operator-changes): undo-turns says what its cut removed, beside what followed the cut when it was staged (#255 review P7)
  
  Alfred-1883
  and
  claude
  committed
  97ae95a
Commits on Oct 9, 2026
- docs(changelog): fragments for #255's own changes, including the script-author note slimepriestess asked for
  
  Agnes-1009
  and
  claude
  committed
  551c363
Commits on Oct 11, 2026
- docs(operator-changes): say what an unnamed call is, what the gate covers, and what each note claims
  Agnes-1009
  committed
  3934785
- fix(operator-changes): crash bookkeeping, liveness, admission and readers
  Agnes-1009
  committed
  01152c7
- test(operator-changes): tests that say what they claim; and an unstick re-run that membrane's error event ended without its error
  Agnes-1009
  committed
  e1cd85b
- fix(operator-changes): a fork parked behind a hold wakes when the hold clears, whatever leases wait
  
  Agnes-1009
  and
  claude
  committed
  e37235d

Commits

Commits on Oct 7, 2026

Commits on Oct 8, 2026

Commits on Oct 9, 2026

Commits on Oct 11, 2026