feat: harden AI Inbox conventions #40

Merged
pdurlej merged 1 commit from codex/ai-inbox-conventions-hardening into codex/projection-manual-kan-drift 2026-05-10 13:46:46 +02:00
Collaborator

Canary status: missing — fire 3+3 review before merge

Summary

Hardens the AI Inbox convention layer without changing production deploys or seed data. AI Inbox board/column names now live in shared constants, MCP uses the same canonical column list, agent-created AI/import cards get a visible marker comment, and tests cover metadata validation plus idempotent AI Inbox setup.

Closes #16.

Scope

  • Adds shared AI Inbox constants: board name, canonical columns, default column.
  • Uses shared constants in Integration API and MCP convenience tools.
  • Adds AI-origin marker comments for agent-created cards with non-human/manual metadata.
  • Extends create-card results with aiMarkerCommentPublicId when a marker is created.
  • Adds integration tests for marker comments, metadata enum rejection, create replay, and ensureDefaultAiInbox idempotency.

Non-goals

  • No Fastmail/Signal/Obsidian import pipelines.
  • No autonomous task grooming.
  • No production seed/deploy changes.
  • No schema migration.

Spec sources read

  • docs/agent-mcp-contract.md
  • Issue #16 acceptance criteria
  • Existing AI Inbox ensureDefaultAiInbox and MCP convenience tools
  • Existing metadata and card activity patterns

Tests / smoke

  • pnpm install
  • pnpm --filter @kan/shared build
  • pnpm --filter @kan/db build
  • pnpm --filter @kan/shared typecheck
  • pnpm --filter @kan/db typecheck
  • pnpm --filter @kan/api typecheck
  • pnpm --filter @kan/api build
  • pnpm --filter @kan/mcp typecheck
  • pnpm --filter @kan/api test -- integration-tests/agent.integration.test.ts agent.test.ts
  • pnpm --filter @kan/api exec eslint src/routers/agent.ts
  • pnpm exec prettier --check packages/shared/src/constants/ai-inbox.ts packages/shared/src/constants/index.ts packages/mcp/package.json packages/mcp/src/index.ts packages/api/src/routers/agent.ts packages/api/integration-tests/agent.integration.test.ts docs/agent-mcp-contract.md
  • git diff --check

Note: pnpm --filter @kan/mcp exec eslint src/index.ts is blocked by the package's current ESLint config discovery (eslint.config not found), so MCP validation used typecheck instead.

Rollback

Remove the marker-comment creation and switch MCP/API back to local AI Inbox constants. No migration rollback is needed.

Owner gates

None for this PR. Production changes to existing AI Inbox seed behavior remain owner-gated.

Canary status: missing — fire 3+3 review before merge ## Summary Hardens the AI Inbox convention layer without changing production deploys or seed data. AI Inbox board/column names now live in shared constants, MCP uses the same canonical column list, agent-created AI/import cards get a visible marker comment, and tests cover metadata validation plus idempotent AI Inbox setup. Closes #16. ## Scope - Adds shared AI Inbox constants: board name, canonical columns, default column. - Uses shared constants in Integration API and MCP convenience tools. - Adds AI-origin marker comments for agent-created cards with non-human/manual metadata. - Extends create-card results with `aiMarkerCommentPublicId` when a marker is created. - Adds integration tests for marker comments, metadata enum rejection, create replay, and `ensureDefaultAiInbox` idempotency. ## Non-goals - No Fastmail/Signal/Obsidian import pipelines. - No autonomous task grooming. - No production seed/deploy changes. - No schema migration. ## Spec sources read - `docs/agent-mcp-contract.md` - Issue #16 acceptance criteria - Existing AI Inbox `ensureDefaultAiInbox` and MCP convenience tools - Existing metadata and card activity patterns ## Tests / smoke - `pnpm install` - `pnpm --filter @kan/shared build` - `pnpm --filter @kan/db build` - `pnpm --filter @kan/shared typecheck` - `pnpm --filter @kan/db typecheck` - `pnpm --filter @kan/api typecheck` - `pnpm --filter @kan/api build` - `pnpm --filter @kan/mcp typecheck` - `pnpm --filter @kan/api test -- integration-tests/agent.integration.test.ts agent.test.ts` - `pnpm --filter @kan/api exec eslint src/routers/agent.ts` - `pnpm exec prettier --check packages/shared/src/constants/ai-inbox.ts packages/shared/src/constants/index.ts packages/mcp/package.json packages/mcp/src/index.ts packages/api/src/routers/agent.ts packages/api/integration-tests/agent.integration.test.ts docs/agent-mcp-contract.md` - `git diff --check` Note: `pnpm --filter @kan/mcp exec eslint src/index.ts` is blocked by the package's current ESLint config discovery (`eslint.config` not found), so MCP validation used typecheck instead. ## Rollback Remove the marker-comment creation and switch MCP/API back to local AI Inbox constants. No migration rollback is needed. ## Owner gates None for this PR. Production changes to existing AI Inbox seed behavior remain owner-gated.
Author
Collaborator

3+3 Review Result

Status: NOT READY / OWNER CHECKPOINT

Review lanes completed: tech-ollama-1, tech-ollama-2, tech-codex, product-ollama-1, product-ollama-2, product-claude-opus.

Deterministic checks on current stack tip:

  • PASS: @kan/db typecheck/build
  • PASS: @kan/shared typecheck/build
  • PASS: @kan/mcp typecheck/build
  • PASS: @kan/api typecheck/build and focused agent tests: 28/28
  • FAIL: targeted web ESLint currently reports apps/web/src/views/card/components/ActivityList.tsx:374 unused isAdmin
  • FAIL, known broader baseline: @kan/web typecheck still has existing bootstrap/workspace typing errors

Canary gate: current automated canary is not green for the draft stack; treat this as a review/checkpoint result, not merge approval.

Review notes:

  • Product/privacy blocker: visible AI marker comments on every AI/import card can create noise and expose sourceRef/idempotency context. Prefer audit/metadata or system-style hidden/collapsed activity; redact Signal-like refs if shown.
## 3+3 Review Result Status: **NOT READY / OWNER CHECKPOINT** Review lanes completed: tech-ollama-1, tech-ollama-2, tech-codex, product-ollama-1, product-ollama-2, product-claude-opus. Deterministic checks on current stack tip: - PASS: `@kan/db` typecheck/build - PASS: `@kan/shared` typecheck/build - PASS: `@kan/mcp` typecheck/build - PASS: `@kan/api` typecheck/build and focused agent tests: 28/28 - FAIL: targeted web ESLint currently reports `apps/web/src/views/card/components/ActivityList.tsx:374` unused `isAdmin` - FAIL, known broader baseline: `@kan/web typecheck` still has existing bootstrap/workspace typing errors Canary gate: current automated canary is **not green** for the draft stack; treat this as a review/checkpoint result, not merge approval. Review notes: - Product/privacy blocker: visible AI marker comments on every AI/import card can create noise and expose sourceRef/idempotency context. Prefer audit/metadata or system-style hidden/collapsed activity; redact Signal-like refs if shown.
pdurlej merged commit 280d9c6f01 into codex/projection-manual-kan-drift 2026-05-10 13:46:46 +02:00
Sign in to join this conversation.
No reviewers
No labels
3plus3-followup
agent/claude-code
agent/codex
agent/hermes
agent/iskra
agent/ollama
agent/patchwarden
analytics
api
cockpit
dependency/blocked
dependency/blocks-others
dependency/cross-repo
dependency/needs-confirmation
docs
domain:agents
domain:ci
domain:docs
domain:forgejo
domain:infra
domain:memory
domain:runtime
domain:signal
domain:ux
flow/architecture
flow/blocked
flow/deployed
flow/done
flow/implementation
flow/intake
flow/maintained
flow/observed
flow/ready
flow/refining
flow/retired
flow/review
gemini-flash
judge/codex-candidate
judge/hermes-candidate
judge/low-confidence
judge/needs-refinement
judge/operator-needed
judge/p0
judge/p1
judge/p2
judge/p3
judge/park
judge/patchwarden-candidate
judge/stale-priority
kind/adr
kind/bug
kind/chore
kind/feature
kind/infra
kind/ops
kind/refactor
kind/research
leviathan
mcp
merge/auto
merge/manual
merge/manual-dependency-conflict
merge/manual-failing-tests
merge/manual-merge-conflict
merge/manual-missing-review
merge/manual-operator-preference
merge/manual-red-zone
merge/manual-security-sensitive
merge/manual-unclear-scope
merge/manual-unknown
mode:operator-only
mode:patchwarden-iskra-approved
mode:safe-auto
observed/erroring
observed/needs-followup
observed/pending
observed/retire-candidate
observed/unused
observed/used
ops
priority:p0
priority:p1
priority:p2
priority:p3
review:claude-reviewed
review:codex-reviewed
review:dziadek-reviewed
review:needs-human
safety
safety:external-write
safety:no-prod-mutation
safety:prod-impact
safety:secret-touch
scout
security
size/large
size/medium
size/small
size/tiny
size/unknown
small-task
source/adr
source/agent-generated
source/manual
source/operator-chat
source/voice-note
status:blocked
status:codex-ready
status:merged:pending-evidence
status:needs-evidence
status:operator-needed
status:parked
tests
tier:0-platform-substrate
tier:1-iskra-value-layer
tier:2-tools-products-modules
type:bug
type:chore
type:docs
type:feat
type:policy
type:research
ui
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pdurlej/kan-ductor!40
No description provided.