feat: add controlled leviathan projection apply #50

Merged

pdurlej merged 1 commit from codex/swarmheart-leviathan-write-projection into codex/swarmheart-leviathan-readonly-preview

2026-05-10 13:49:16 +02:00

codex commented

2026-05-10 02:18:27 +02:00

Collaborator

Canary status: missing — fire 3+3 review before merge

Summary

Adds controlled Leviathan projection apply API and MCP tool.
Apply defaults to dry-run and requires confirmApply=apply_leviathan_projection for real writes.
Real writes are limited to create_card and move_card through existing audited Integration API paths.
Move applies use drift guard and skip unsafe/manual drift.

Scope

Agent API: applyLeviathanProjection.
MCP: apply_leviathan_projection, guarded by KAN_MCP_ACTIONS_ENABLED for real writes.
Integration tests for dry-run, create, audited move, and drift skip.

Non-goals

No board/list restructuring.
No archive/delete.
No production apply.
No autonomous repair of manual drift.

Spec sources read

docs/leviathan-projection-contract.md
docs/agent-mcp-contract.md Leviathan preview/apply rules
Existing create_card/move_card audit/idempotency paths

Tests / smoke

pnpm --filter @kan/api typecheck
pnpm --filter @kan/api build
pnpm --filter @kan/api test -- integration-tests/agent.integration.test.ts agent.test.ts
pnpm --filter @kan/mcp typecheck
pnpm --filter @kan/mcp build
pnpm exec prettier --check packages/api/src/routers/agent.ts packages/api/integration-tests/agent.integration.test.ts packages/mcp/src/client.ts packages/mcp/src/index.ts docs/agent-mcp-contract.md docs/leviathan-projection-contract.md
git diff --check

Rollback

git revert this commit removes apply route/tool and keeps the read-only preview from the previous PR.

Owner gates

No production apply, token issuance, deploy, or migration in this PR.
Any real production projection apply remains owner-gated operationally.

Canary status: missing — fire 3+3 review before merge ## Summary - Adds controlled Leviathan projection apply API and MCP tool. - Apply defaults to dry-run and requires confirmApply=apply_leviathan_projection for real writes. - Real writes are limited to create_card and move_card through existing audited Integration API paths. - Move applies use drift guard and skip unsafe/manual drift. ## Scope - Agent API: applyLeviathanProjection. - MCP: apply_leviathan_projection, guarded by KAN_MCP_ACTIONS_ENABLED for real writes. - Integration tests for dry-run, create, audited move, and drift skip. ## Non-goals - No board/list restructuring. - No archive/delete. - No production apply. - No autonomous repair of manual drift. ## Spec sources read - docs/leviathan-projection-contract.md - docs/agent-mcp-contract.md Leviathan preview/apply rules - Existing create_card/move_card audit/idempotency paths ## Tests / smoke - pnpm --filter @kan/api typecheck - pnpm --filter @kan/api build - pnpm --filter @kan/api test -- integration-tests/agent.integration.test.ts agent.test.ts - pnpm --filter @kan/mcp typecheck - pnpm --filter @kan/mcp build - pnpm exec prettier --check packages/api/src/routers/agent.ts packages/api/integration-tests/agent.integration.test.ts packages/mcp/src/client.ts packages/mcp/src/index.ts docs/agent-mcp-contract.md docs/leviathan-projection-contract.md - git diff --check ## Rollback - git revert this commit removes apply route/tool and keeps the read-only preview from the previous PR. ## Owner gates - No production apply, token issuance, deploy, or migration in this PR. - Any real production projection apply remains owner-gated operationally.

codex added 1 commit

2026-05-10 02:18:27 +02:00

feat(swarmheart): add controlled leviathan projection apply 59cd1e030a

codex commented

2026-05-10 08:48:16 +02:00

Author

Collaborator

3+3 Review Result

Status: NOT READY

Review lanes completed: tech-ollama-1, tech-ollama-2, tech-codex, product-ollama-1, product-ollama-2, product-claude-opus.

Deterministic checks on current stack tip:

PASS: @kan/db typecheck/build
PASS: @kan/shared typecheck/build
PASS: @kan/mcp typecheck/build
PASS: @kan/api typecheck/build and focused agent tests: 28/28
FAIL: targeted web ESLint currently reports apps/web/src/views/card/components/ActivityList.tsx:374 unused isAdmin
FAIL, known broader baseline: @kan/web typecheck still has existing bootstrap/workspace typing errors

Canary gate: current automated canary is not green for the draft stack; treat this as a review/checkpoint result, not merge approval.

Review notes:

Hard blocker: real apply reuses generic cards:create/cards:move scopes and lacks dedicated projection write authority/feature gate in the API path. Additional blockers: weak drift classifier dependency, partial batch failure recovery, maxTasks check happens after preview construction, and secret/gate warnings do not block writes.

## 3+3 Review Result Status: **NOT READY** Review lanes completed: tech-ollama-1, tech-ollama-2, tech-codex, product-ollama-1, product-ollama-2, product-claude-opus. Deterministic checks on current stack tip: - PASS: `@kan/db` typecheck/build - PASS: `@kan/shared` typecheck/build - PASS: `@kan/mcp` typecheck/build - PASS: `@kan/api` typecheck/build and focused agent tests: 28/28 - FAIL: targeted web ESLint currently reports `apps/web/src/views/card/components/ActivityList.tsx:374` unused `isAdmin` - FAIL, known broader baseline: `@kan/web typecheck` still has existing bootstrap/workspace typing errors Canary gate: current automated canary is **not green** for the draft stack; treat this as a review/checkpoint result, not merge approval. Review notes: - Hard blocker: real apply reuses generic cards:create/cards:move scopes and lacks dedicated projection write authority/feature gate in the API path. Additional blockers: weak drift classifier dependency, partial batch failure recovery, maxTasks check happens after preview construction, and secret/gate warnings do not block writes.