Tetardtek
878886cd51
- README reécrit : tiers free/pro/full + modèle clé API + multi-instance - Sync agents/ (57 agents, kernel-isolation validated) - Sync scripts/ BSI-v3 (file-lock, preflight, human-gate, brain-status) - KERNEL.md v0.7.0 — zones + délégation + rendering + isolation - brain-compose.yml v0.7.0 — rendering mode + kerneluser - workflows/ — template + brain-engine exemple - locks/.gitkeep + claims/.gitkeep - helloWorld : RAG boot tier full only (bsi-rag retiré du template)
309 lines
9.4 KiB
YAML
309 lines
9.4 KiB
YAML
# brain-compose.yml — Kernel spec
|
|
# Versionné dans le kernel. Schema + feature flags + registre agents.
|
|
# Géré par l'agent brain-compose — ne pas éditer manuellement.
|
|
|
|
version: "0.7.0"
|
|
|
|
# ---
|
|
# Ownership — kerneluser
|
|
# true : propriétaire de ce brain — écriture zone:kernel autorisée (human-confirmed)
|
|
# false : utilisateur invité (SaaS futur) — zone:kernel bloquée
|
|
# Défaut : true sur tout brain forké (l'owner est toujours kerneluser)
|
|
# ---
|
|
kerneluser: true
|
|
|
|
# ---
|
|
# Modes — comportement de session (permissions BSI + agents autorisés)
|
|
# Priorité : déclaration explicite > detectmode > brain-compose.local.yml > prod (safe default)
|
|
# ---
|
|
|
|
modes:
|
|
|
|
prod:
|
|
description: "Session normale — Invariants protégés, écriture confirmée"
|
|
permissions:
|
|
invariant: confirm
|
|
contexte: confirm
|
|
reference: write
|
|
personnel: write
|
|
brain_write: false
|
|
forge: false
|
|
agents: "*"
|
|
|
|
dev:
|
|
description: "Forge — pleine puissance, écriture libre sur le brain"
|
|
permissions:
|
|
invariant: confirm # même en dev, les Invariants demandent confirmation
|
|
contexte: write
|
|
reference: write
|
|
personnel: write
|
|
brain_write: true
|
|
forge: true
|
|
agents: "*"
|
|
|
|
toolkit-only:
|
|
description: "Croissance autonome — toolkit source unique, docs officielles si inconnu"
|
|
permissions:
|
|
invariant: false
|
|
contexte: false
|
|
reference: read
|
|
personnel: false
|
|
brain_write: toolkit-scribe-only
|
|
forge: false
|
|
docs_fetch: ask # always | ask | never
|
|
agents: [toolkit-scribe, debug, code-review]
|
|
behavior: |
|
|
Pattern connu dans toolkit → agit seul
|
|
Pattern inconnu → docs officielles (selon docs_fetch) → toolkit-scribe écrit
|
|
Jamais d'invention
|
|
|
|
brainstorm:
|
|
description: "Réflexion scopée — pas d'écriture système"
|
|
permissions:
|
|
invariant: false
|
|
contexte: scope-only
|
|
reference: read
|
|
personnel: false
|
|
brain_write: false
|
|
forge: false
|
|
agents: [brainstorm, coach]
|
|
|
|
coach:
|
|
description: "Mentorat — progression en écriture, brain en lecture"
|
|
permissions:
|
|
invariant: false
|
|
contexte: false
|
|
reference: read
|
|
personnel: write
|
|
brain_write: progression-only
|
|
forge: false
|
|
agents: [coach, coach-scribe, scribe]
|
|
|
|
deploy:
|
|
description: "Déploiement — agents infra uniquement"
|
|
permissions:
|
|
invariant: false
|
|
contexte: false
|
|
reference: read
|
|
personnel: false
|
|
brain_write: false
|
|
forge: false
|
|
agents: [vps, ci-cd, pm2, secrets-guardian]
|
|
|
|
debug:
|
|
description: "Debug — lecture + agents debug"
|
|
permissions:
|
|
invariant: false
|
|
contexte: scope-only
|
|
reference: read
|
|
personnel: false
|
|
brain_write: false
|
|
forge: false
|
|
agents: [debug, code-review]
|
|
|
|
projet-audit:
|
|
description: "Audit lecture seule — todo-scribe uniquement en écriture"
|
|
permissions:
|
|
invariant: false
|
|
contexte: false
|
|
reference: read
|
|
personnel: false
|
|
brain_write: todo-scribe-only
|
|
forge: false
|
|
agents: [coach, agent-review]
|
|
|
|
review-front:
|
|
description: "Review frontend"
|
|
permissions:
|
|
invariant: false
|
|
contexte: false
|
|
reference: read
|
|
personnel: false
|
|
brain_write: false
|
|
forge: false
|
|
agents: [code-review, frontend-stack, testing]
|
|
|
|
review-back:
|
|
description: "Review backend/sécu"
|
|
permissions:
|
|
invariant: false
|
|
contexte: false
|
|
reference: read
|
|
personnel: false
|
|
brain_write: false
|
|
forge: false
|
|
agents: [code-review, security, testing]
|
|
|
|
conserve:
|
|
description: "Économie context — proposé auto si seuil métabolisme dépassé"
|
|
permissions:
|
|
invariant: confirm
|
|
contexte: confirm
|
|
reference: read
|
|
personnel: false
|
|
brain_write: false
|
|
forge: false
|
|
agents: [debug, code-review, todo-scribe, metabolism-scribe]
|
|
behavior: |
|
|
Cible context < 40%. Pas de chargement de sources non essentielles.
|
|
metabolism-scribe en fin de session obligatoire.
|
|
|
|
HANDOFF:
|
|
description: "Reprise propre depuis une session précédente"
|
|
permissions:
|
|
invariant: false
|
|
contexte: scope-only
|
|
reference: read
|
|
personnel: false
|
|
brain_write: false
|
|
forge: false
|
|
agents: "*"
|
|
|
|
rendering:
|
|
description: "Instance autonome sur projet — scope strict, zéro drift kernel"
|
|
permissions:
|
|
invariant: false
|
|
contexte: false
|
|
reference: read
|
|
personnel: false
|
|
brain_write: false # pas d'écriture brain/ — uniquement le repo projet
|
|
forge: false
|
|
scope_lock: true # BLOQUÉ hors du scope déclaré dans le claim
|
|
zone_lock: project # zone:kernel → BLOCKED_ON immédiat, pas de négociation
|
|
circuit_breaker:
|
|
max_consecutive_fails: 3 # 3 échecs → arrêt + signal BLOCKED_ON vers pilote
|
|
on_trigger: "signal → BLOCKED_ON pilote"
|
|
agents: [code-review, security, testing, debug, vps, ci-cd, pm2, migration]
|
|
behavior: |
|
|
Instance travaille sur zone:project uniquement.
|
|
Toute tentative d'accès zone:kernel → BLOCKED_ON immédiat, signal pilote.
|
|
Fichier hors scope déclaré → vérifier mutex (BSI-v3-7) avant d'écrire.
|
|
3 on_fail consécutifs → circuit breaker → arrêt complet + signal pilote.
|
|
Jamais de décision architecturale — signal pilote si ambiguïté.
|
|
|
|
cockpit:
|
|
description: "Mode assisté — coach proactif, routing automatique, pipeline kanban"
|
|
permissions:
|
|
invariant: confirm
|
|
contexte: write
|
|
reference: write
|
|
personnel: write
|
|
brain_write: true
|
|
forge: false
|
|
agents: [coach, kanban-scribe, interprete, brainstorm, orchestrator]
|
|
behavior: |
|
|
Coach proactif : route avant qu'on cherche, anticipe, propose
|
|
kanban-scribe : actif automatiquement au wrap
|
|
interprete : écoute en continu — pas besoin d'invocation explicite
|
|
Human nodes : décision de valeur uniquement, jamais de mécanique
|
|
|
|
# ---
|
|
# detectmode — helloWorld détecte le mode selon les signaux de session
|
|
# ---
|
|
|
|
detectmode:
|
|
signals:
|
|
- match: [vps, ci-cd, pm2]
|
|
mode: deploy
|
|
- match: [code-review, frontend-stack]
|
|
mode: review-front
|
|
- match: [code-review, security]
|
|
mode: review-back
|
|
- match: [debug]
|
|
mode: debug
|
|
- match: [brainstorm]
|
|
mode: brainstorm
|
|
- match: [coach, progression]
|
|
mode: coach
|
|
- bsi_claim: HANDOFF
|
|
mode: HANDOFF
|
|
default: prod
|
|
|
|
# ---
|
|
# Feature sets — contrôlent les agents invocables par instance
|
|
# Les agents "bloqués" existent dans le kernel, brain-compose contrôle l'accès.
|
|
# ---
|
|
|
|
feature_sets:
|
|
|
|
free:
|
|
description: "Agents fondamentaux — exploration et maintenance brain"
|
|
agents:
|
|
- coach
|
|
- scribe
|
|
- todo-scribe
|
|
- debug
|
|
- mentor
|
|
- helloWorld
|
|
- aside
|
|
- brainstorm
|
|
- interprete
|
|
- orchestrator
|
|
- orchestrator-scribe
|
|
- recruiter
|
|
- agent-review
|
|
|
|
pro:
|
|
description: "Agents métier — développement complet"
|
|
extends: free
|
|
agents:
|
|
- code-review
|
|
- security
|
|
- testing
|
|
- refacto
|
|
- vps
|
|
- ci-cd
|
|
- monitoring
|
|
- pm2
|
|
- frontend-stack
|
|
- optimizer-backend
|
|
- optimizer-db
|
|
- optimizer-frontend
|
|
- toolkit-scribe
|
|
- coach-scribe
|
|
- git-analyst
|
|
- capital-scribe
|
|
- i18n
|
|
- doc
|
|
- migration
|
|
- mail
|
|
- brain-compose
|
|
- config-scribe
|
|
|
|
full:
|
|
description: "Accès complet — usage personnel sans restriction"
|
|
extends: pro
|
|
agents: "*"
|
|
|
|
# ---
|
|
# Changelog — semver
|
|
# v0.x.x : kernel en évolution rapide, breaking changes possibles
|
|
# v1.0.0 : interface contractuelle stable
|
|
# ---
|
|
|
|
changelog:
|
|
- version: "0.1.0"
|
|
date: "2026-03-13"
|
|
notes: "Initial — 30+ agents, config-scribe, brain-compose Phase 1, symlinks, feature flags"
|
|
- version: "0.2.0"
|
|
date: "2026-03-14"
|
|
notes: "BSI (BRAIN-INDEX.md), brain_name, brain-template, aside, brainstorm, brain-compose up"
|
|
- version: "0.3.0"
|
|
date: "2026-03-14"
|
|
notes: "orchestrator-scribe (free), brain-compose+config-scribe (pro), CHECKPOINT signal, session-as-identity, orchestration-patterns"
|
|
- version: "0.4.0"
|
|
date: "2026-03-14"
|
|
notes: "Système de modes — 11 modes, permissions BSI par mode, detectmode, toolkit-only autonome avec docs_fetch"
|
|
- version: "0.5.0"
|
|
date: "2026-03-14"
|
|
notes: "Multi-sessions BSI v1.2 — CHECKPOINT/HANDOFF signals + handoff files ; brain-watch-vps daemon (stale TTL check, Telegram notifications) ; brain-bot Telegram webhook (/status /sessions /focus /help) ; workspace spec v1.0 (ram.md log.md feedback.md) ; supervisor patterns v1 (7 protocoles) ; statusline session-role ; secrets-guardian recovery protocol ; BLOCKED_ON false-positive fix"
|
|
- version: "0.5.1"
|
|
date: "2026-03-14"
|
|
notes: "Métabolisme v1 — mode conserve, metabolism-scribe, metabolism-spec, progression/metabolism/, helloWorld briefing métabolisme"
|
|
- version: "0.6.0"
|
|
date: "2026-03-15"
|
|
notes: "Constitution v1.1.0 — Section 9 North Star + invariants autonomie + auto-amélioration (ADR-011) ; wiki/concepts.md fondamentaux brain V2 ; brain-engine vision north star"
|
|
- version: "0.7.0"
|
|
date: "2026-03-16"
|
|
notes: "BSI-v3 fondations — tiered-close, zone-aware claims (ADR-014), result contract, exit triggers ; kerneluser: true ancré kernel ; KERNEL.md délégation human-only phase actuelle"
|