feat(operators): amendment workflow and automated drive watchdog daemon

bin/agent_md.py

@@ -239,6 +239,92 @@ def diff_md(account: str, filename: str) -> dict:
     }
 
 
+def amend_md(filename: str, content: str, author: str = "operator", reason: str = "") -> dict:
+    """Amend a centralized shared operator template in shared/operators/ with safety validation and git commit."""
+    import subprocess
+    
+    local_path = SHARED_OPERATORS / filename
+    if not local_path.exists():
+        raise FileNotFoundError(f"Shared operator file {filename} does not exist in {SHARED_OPERATORS}")
+        
+    # Drive safety validation
+    if filename == "HEARTBEAT.md":
+        # Ensure checklist is not gutted
+        non_comment_lines = [l for l in content.splitlines() if l.strip() and not l.strip().startswith("#")]
+        checklist_items = [l for l in non_comment_lines if l.strip().startswith("- [")]
+        if not checklist_items:
+            raise ValueError("Safety rejection: amendment removes all active checklist items from HEARTBEAT.md")
+            
+    elif filename == "PROACTIVE_PREFERENCES.md":
+        if len(content.strip()) < 400:
+            raise ValueError("Safety rejection: amendment would reduce PROACTIVE_PREFERENCES.md to unconfigured state")
+
+    elif filename == "SOUL.md":
+        if "Be a guest in someone's life" in content and "AUTONOMOUS OPERATIONAL DRIVE" not in content:
+            raise ValueError("Safety rejection: amendment reverts SOUL.md to passive stock template")
+
+    old_content = local_path.read_text(encoding="utf-8")
+    local_path.write_text(content, encoding="utf-8")
+    
+    # Git auto-commit if in git repo
+    git_committed = False
+    git_hash = None
+    try:
+        commit_msg = f"amend(operators): update {filename} via {author}"
+        if reason:
+            commit_msg += f" - {reason}"
+        subprocess.run(["git", "add", str(local_path)], cwd=str(NETVM_ROOT), check=True, capture_output=True)
+        cr = subprocess.run(["git", "commit", "-m", commit_msg], cwd=str(NETVM_ROOT), capture_output=True, text=True)
+        if cr.returncode == 0:
+            git_committed = True
+            hr = subprocess.run(["git", "rev-parse", "--short", "HEAD"], cwd=str(NETVM_ROOT), capture_output=True, text=True)
+            git_hash = hr.stdout.strip()
+    except Exception:
+        pass
+
+    return {
+        "ok": True,
+        "action": "amend",
+        "filename": filename,
+        "author": author,
+        "reason": reason,
+        "bytes_written": len(content.encode("utf-8")),
+        "git_committed": git_committed,
+        "commit": git_hash,
+    }
+
+
+def append_md(filename: str, text: str, author: str = "operator", section: str = None) -> dict:
+    """Safely append an amendment or lesson to a centralized shared template."""
+    local_path = SHARED_OPERATORS / filename
+    if not local_path.exists():
+        raise FileNotFoundError(f"Shared operator file {filename} does not exist in {SHARED_OPERATORS}")
+        
+    current = local_path.read_text(encoding="utf-8")
+    header = f"\n\n<!-- Amendment by {author} on {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())} -->\n"
+    if section:
+        header += f"### {section}\n"
+    new_content = current.rstrip() + header + text.strip() + "\n"
+    
+    return amend_md(filename, new_content, author=author, reason=f"append {section or 'note'}")
+
+
+def pull_md(account: str, filename: str) -> dict:
+    """Pull the canonical centralized template from shared/operators/ into an agent's container."""
+    local_path = SHARED_OPERATORS / filename
+    if not local_path.exists():
+        raise FileNotFoundError(f"Shared operator file {filename} does not exist in {SHARED_OPERATORS}")
+    content = local_path.read_text(encoding="utf-8")
+    res = write_md(account, filename, content, overwrite=True)
+    return {
+        "ok": True,
+        "account": account,
+        "filename": filename,
+        "bytes_written": res.get("bytes_written"),
+        "message": f"Successfully pulled canonical {filename} into {account} container",
+    }
+
+
 def inject_drive(account: str, force: bool = False) -> dict:
     """Inject high-drive operational instructions into the agent's container."""
     updates = []
@@ -344,6 +430,23 @@ def main():
     p_diff.add_argument("account", help="Agent account")
     p_diff.add_argument("filename", help="Filename (e.g. SOUL.md)")
     
+    p_amend = sub.add_parser("amend", help="Amend a shared operator file with validation and git commit")
+    p_amend.add_argument("filename", help="Filename (e.g. AGENTS.md, TOOLS.md)")
+    p_amend.add_argument("--content", help="New content")
+    p_amend.add_argument("--file", help="File with new content")
+    p_amend.add_argument("--author", default="operator", help="Author of amendment")
+    p_amend.add_argument("--reason", default="", help="Reason for amendment")
+
+    p_append = sub.add_parser("append", help="Safely append a note or lesson to a shared operator file")
+    p_append.add_argument("filename", help="Filename (e.g. AGENTS.md)")
+    p_append.add_argument("text", help="Text to append")
+    p_append.add_argument("--author", default="operator", help="Author of amendment")
+    p_append.add_argument("--section", default=None, help="Optional section header")
+
+    p_pull = sub.add_parser("pull", help="Pull canonical shared file into an agent's container")
+    p_pull.add_argument("account", help="Agent account")
+    p_pull.add_argument("filename", help="Filename (e.g. SOUL.md)")
+
     p_drive = sub.add_parser("inject-drive", help="Inject high-drive operator files into agent")
     p_drive.add_argument("account", help="Agent account")
     p_drive.add_argument("--force", action="store_true", help="Force overwrite")
@@ -406,6 +509,36 @@ def main():
             print(f"{args.account}:{args.filename} matches local shared/operators/{args.filename} exactly.")
         else:
             print(res["diff"])
+
+    elif args.cmd == "amend":
+        content = args.content
+        if args.file:
+            content = Path(args.file).read_text(encoding="utf-8")
+        if content is None:
+            print("Error: provide --content or --file", file=sys.stderr)
+            sys.exit(2)
+        try:
+            res = amend_md(args.filename, content, author=args.author, reason=args.reason)
+            print(json.dumps(res, indent=2))
+        except Exception as e:
+            print(json.dumps({"ok": False, "error": str(e)}), indent=2)
+            sys.exit(1)
+
+    elif args.cmd == "append":
+        try:
+            res = append_md(args.filename, args.text, author=args.author, section=args.section)
+            print(json.dumps(res, indent=2))
+        except Exception as e:
+            print(json.dumps({"ok": False, "error": str(e)}), indent=2)
+            sys.exit(1)
+
+    elif args.cmd == "pull":
+        try:
+            res = pull_md(args.account, args.filename)
+            print(json.dumps(res, indent=2))
+        except Exception as e:
+            print(json.dumps({"ok": False, "error": str(e)}), indent=2)
+            sys.exit(1)
             
     elif args.cmd == "inject-drive":
         res = inject_drive(args.account, force=args.force)