@agfpd/iapeer-memory 0.2.6 → 0.2.8

package/src/commands/init.ts

@@ -14,8 +14,8 @@
  *
  * Step order: deps → vault → config → binary → templates → role peers +
  * doctrines + roles manifest → fleet map → watcher registration → direct
- * session surfaces sweep (ADR-009 v1.2) → legacy v1.1 plugin off (while the
- * old declaration is still readable) → slot declaration (v1.2 provision
+ * session surfaces sweep (ADR-009 v1.2) → legacy v1.1 manual hint (the
+ * plugin channel is removed, ADR-017) → slot declaration (v1.2 provision
  * command) → native-memory sweep (core verb, soft-skip on old cores) →
  * host-wide guide fragment. Ecosystem steps are skippable (--skip-ecosystem)
  * for sandboxed runs; the binary compile is skippable (--skip-binary) for
@@ -36,7 +36,7 @@ import { IAPEER_BIN, type Egress } from "../egress.js";
 import { memoryPaths } from "../paths.js";
 import { provisionVault, writeDefaultConfig } from "../provision.js";
 import { writeRolesManifest, type RoleEntry } from "../roles.js";
-import { applyMemoryPlugin, readSlot, writeSlot, SLOT_PROVIDER } from "../slot.js";
+import { readSlot, writeSlot, SLOT_PROVIDER } from "../slot.js";
 import { readFleetMap, writeFleetMap } from "../fleet.js";
 import { withProvisionLock } from "../surfaces/lock.js";
 import { sweepProvision } from "../surfaces/sweep.js";
@@ -51,11 +51,13 @@ import {
 } from "../templates/index.js";
 import { packageVersion } from "../version.js";
 import {
+  DREAM_TARGET,
   dreamTimerMessage,
   patchWakePolicyEphemeral,
   registerTimer,
   registerWatcher,
   sweepTimerMessage,
+  writeDreamGateScript,
   writeLauncherScript,
   writeStaleCheckScript,
 } from "../watcher.js";
@@ -402,8 +404,15 @@ export async function cmdInit(argv: string[], egress: Egress): Promise<number> {
       message: sweepTimerMessage({ checkScriptPath: paths.checkScriptPath }),
       iapeerBin: flags.iapeerBin,
     });
+    writeDreamGateScript({
+      dreamGateScriptPath: paths.dreamGateScriptPath,
+      binaryPath: paths.binaryPath,
+    });
     const dream = registerTimer(egress, {
-      message: dreamTimerMessage(),
+      message: dreamTimerMessage({
+        cron: process.env.IAPEER_MEMORY_DREAM_CRON,
+        dreamGateScriptPath: paths.dreamGateScriptPath,
+      }),
       iapeerBin: flags.iapeerBin,
     });
     const timersSandboxed = sweep.suppressed && dream.suppressed;
@@ -412,7 +421,7 @@ export async function cmdInit(argv: string[], egress: Egress): Promise<number> {
       timersSandboxed
         ? "skipped (test sandbox — sends suppressed)"
         : sweep.ok && dream.ok
-          ? `sweep (@every 1h, check ${paths.checkScriptPath}) + dream-tick (weekly) → target index`
+          ? `sweep (@every 1h, check ${paths.checkScriptPath}) + dream-tick (weekly, gated, → ${DREAM_TARGET})`
           : `sweep: ${sweep.ok ? "sent" : sweep.detail}; dream: ${dream.ok ? "sent" : dream.detail}`,
       Boolean(timersSandboxed) || (sweep.ok && dream.ok),
     );
@@ -470,27 +479,25 @@ export async function cmdInit(argv: string[], egress: Egress): Promise<number> {
       }
     }
 
-    // 8c. v1.1 → v1.2 migration: sweep the legacy session plugin off the
-    // fleet while the old declaration is STILL readable — and ONLY after
-    // the direct surfaces landed cleanly.
+    // 8c. v1.1 → v1.2 migration: the plugin channel is REMOVED (ADR-017) —
+    // the package no longer shells the core verb; a v1.1 host gets the
+    // manual recipe and the slot migrates ONLY after the direct surfaces
+    // landed cleanly (never strand a host with neither channel).
     let migrationBlocked = false;
     if (!flags.skipEcosystem && existingSlot?.plugin) {
       if (!surfacesOk) {
         migrationBlocked = true;
         step(
           "plugin-off",
-          "POSTPONED: direct surfaces did not land cleanly — legacy plugin and v1.1 slot kept (re-run init after fixing)",
+          "POSTPONED: direct surfaces did not land cleanly — v1.1 slot kept (re-run init after fixing)",
           false,
         );
       } else {
-        const off = applyMemoryPlugin(egress, { mode: "off", iapeerBin: flags.iapeerBin });
         step(
           "plugin-off",
-          off.suppressed
-            ? "skipped (test sandbox — core calls suppressed)"
-            : off.ok
-              ? "legacy v1.1 session plugin swept off the fleet (memory-plugin off --all)"
-              : `legacy plugin off failed (${off.detail.slice(0, 120)}) — manual: iapeer memory-plugin off --all (or per peer: claude plugin uninstall iapeer-memory@agfpd --scope project)`,
+          "legacy v1.1 session plugin is NOT auto-removed (channel removed, ADR-017) — manual, per claude peer: " +
+            "`claude plugin uninstall iapeer-memory@agfpd --scope project` from its cwd; codex (host-global): " +
+            "`codex plugin remove iapeer-memory@agfpd`. Until then it stamps in parallel (idempotent).",
         );
       }
     }

package/src/commands/uninstall.ts

@@ -21,7 +21,7 @@ import type { Egress } from "../egress.js";
 import { memoryPaths } from "../paths.js";
 import { removeBinary } from "../binary.js";
 import { readFleetMap } from "../fleet.js";
-import { applyMemoryPlugin, readSlot, removeSlot, SLOT_PROVIDER } from "../slot.js";
+import { readSlot, removeSlot, SLOT_PROVIDER } from "../slot.js";
 import { withProvisionLock } from "../surfaces/lock.js";
 import { sweepUnprovision } from "../surfaces/sweep.js";
 import { guardedUnlinkSync } from "@agfpd/iapeer-memory-core";
@@ -130,19 +130,14 @@ export function cmdUninstall(argv: string[], egress: Egress): number {
       }
     }
 
-    // Legacy v1.1 path: the slot still carries a plugin block — sweep the
-    // session plugin off via the core verb WHILE the declaration is alive
-    // (it derives the identity from it; agreed order, auto-removal).
+    // Legacy v1.1 path: the slot still carries a plugin block. The plugin
+    // channel is REMOVED (ADR-017) — no core verb is shelled; the manual
+    // recipe works without the slot.
     if (declared.plugin) {
-      const off = applyMemoryPlugin(egress, { mode: "off", iapeerBin });
       console.log(
-        `plugin    : ${
-          off.suppressed
-            ? "skipped (test sandbox — core calls suppressed)"
-            : off.ok
-              ? "legacy session plugin removed across the fleet (memory-plugin off --all; codex side is host-global)"
-              : `off not applied (${off.detail.slice(0, 160)}) — manual fallback (works without the slot): per claude peer \`claude plugin uninstall iapeer-memory@agfpd --scope project\` from its cwd; codex (host-global): \`codex plugin remove iapeer-memory@agfpd\``
-        }`,
+        "plugin    : legacy v1.1 session plugin is NOT auto-removed (channel removed, ADR-017) — manual: " +
+          "per claude peer `claude plugin uninstall iapeer-memory@agfpd --scope project` from its cwd; " +
+          "codex (host-global): `codex plugin remove iapeer-memory@agfpd`",
       );
     }
   }

package/src/commands/update.ts

@@ -16,10 +16,10 @@
  *   5. surfaces   — direct per-peer session surfaces sweep over the map
  *                   (ADR-009 v1.2: the «всё на местах у подключённых пиров»
  *                   duty — both runtimes, idempotent, repairs drift);
- *   6. plugin-off — v1.1→v1.2 migration: when the on-disk slot still
- *                   carries a plugin block, sweep the legacy plugin off the
- *                   fleet (while the old declaration is STILL readable by
- *                   the core verb) — only after surfaces landed cleanly;
+ *   6. plugin-off — v1.1→v1.2 migration: a slot still carrying a plugin
+ *                   block gets the MANUAL removal recipe (the plugin
+ *                   channel is removed, ADR-017) — the slot migrates only
+ *                   after surfaces landed cleanly;
  *   7. slot       — re-declare in the v1.2 form (provision command blocks,
  *                   new version — contract obligation);
  *   8. launcher + triggers + guide — regenerate;
@@ -44,17 +44,19 @@ import type { Egress } from "../egress.js";
 import { readFleetMap, writeFleetMap } from "../fleet.js";
 import { memoryPaths } from "../paths.js";
 import { readRolesManifest } from "../roles.js";
-import { applyMemoryPlugin, readSlot, writeSlot, SLOT_PROVIDER } from "../slot.js";
+import { readSlot, writeSlot, SLOT_PROVIDER } from "../slot.js";
 import { withProvisionLock } from "../surfaces/lock.js";
 import { sweepProvision } from "../surfaces/sweep.js";
 import { mcpPort } from "./provision-peer.js";
 import { guideText, materialiseTemplates } from "../templates/index.js";
 import { packageVersion } from "../version.js";
 import {
+  DREAM_TARGET,
   dreamTimerMessage,
   registerTimer,
   registerWatcher,
   sweepTimerMessage,
+  writeDreamGateScript,
   writeLauncherScript,
   writeStaleCheckScript,
 } from "../watcher.js";
@@ -187,28 +189,25 @@ export function cmdUpdate(argv: string[], egress: Egress): number {
     }
   }
 
-  // 6. v1.1 → v1.2 migration (one-shot per host): the on-disk slot still
-  // carries a plugin block — sweep the legacy plugin off the fleet WHILE the
-  // old declaration is still readable (the core verb derives the identity
-  // from it), and ONLY after the direct surfaces landed cleanly.
+  // 6. v1.1 → v1.2 migration (one-shot per host): the plugin channel is
+  // REMOVED (ADR-017) — no core verb is shelled; a v1.1 host gets the
+  // manual recipe and the slot migrates ONLY after the direct surfaces
+  // landed cleanly (never strand a host with neither channel).
   let migrationBlocked = false;
   if (!slotForeign && existingSlot?.plugin) {
     if (!surfacesOk) {
       migrationBlocked = true;
       step(
         "plugin-off",
-        "POSTPONED: direct surfaces did not land cleanly — legacy plugin and v1.1 slot kept (fix and re-run update)",
+        "POSTPONED: direct surfaces did not land cleanly — v1.1 slot kept (fix and re-run update)",
         false,
       );
     } else {
-      const off = applyMemoryPlugin(egress, { mode: "off" });
       step(
         "plugin-off",
-        off.suppressed
-          ? "skipped (test sandbox — core calls suppressed)"
-          : off.ok
-            ? "legacy v1.1 session plugin swept off the fleet (memory-plugin off --all)"
-            : `legacy plugin off failed (${off.detail.slice(0, 120)}) — manual: iapeer memory-plugin off --all`,
+        "legacy v1.1 session plugin is NOT auto-removed (channel removed, ADR-017) — manual, per claude peer: " +
+          "`claude plugin uninstall iapeer-memory@agfpd --scope project` from its cwd; codex (host-global): " +
+          "`codex plugin remove iapeer-memory@agfpd`. Until then it stamps in parallel (idempotent).",
       );
     }
   }
@@ -248,18 +247,27 @@ export function cmdUpdate(argv: string[], egress: Egress): number {
     } catch {
       // unprovisioned env — registrations below still re-target
     }
+    writeDreamGateScript({
+      dreamGateScriptPath: paths.dreamGateScriptPath,
+      binaryPath: paths.binaryPath,
+    });
     const w = registerWatcher(egress, { launcherPath: paths.launcherPath });
     const s = registerTimer(egress, {
       message: sweepTimerMessage({ checkScriptPath: paths.checkScriptPath }),
     });
-    const d = registerTimer(egress, { message: dreamTimerMessage() });
+    const d = registerTimer(egress, {
+      message: dreamTimerMessage({
+        cron: process.env.IAPEER_MEMORY_DREAM_CRON,
+        dreamGateScriptPath: paths.dreamGateScriptPath,
+      }),
+    });
     const sandboxed = w.suppressed && s.suppressed && d.suppressed;
     step(
       "triggers",
       sandboxed
         ? "skipped (test sandbox — sends suppressed)"
         : w.ok && s.ok && d.ok
-          ? `re-sent: event→scriber, sweep+dream→index (same id = replace); confirm: verify`
+          ? `re-sent: event→scriber, sweep→index, dream→${DREAM_TARGET} (gated; same id = replace); confirm: verify`
           : `event: ${w.ok ? "sent" : w.detail}; sweep: ${s.ok ? "sent" : s.detail}; dream: ${d.ok ? "sent" : d.detail}`,
       Boolean(sandboxed) || (w.ok && s.ok && d.ok),
     );

package/src/commands/verify.ts

@@ -35,6 +35,7 @@ import { checkFleetSurfaces, sweepProvision } from "../surfaces/sweep.js";
 import { mcpPort } from "./provision-peer.js";
 import { packageVersion } from "../version.js";
 import {
+  DREAM_TARGET,
   dreamTimerMessage,
   DEFAULT_EVENT_TARGET,
   DREAM_TRIGGER_ID,
@@ -43,6 +44,7 @@ import {
   registerWatcher,
   sweepTimerMessage,
   SWEEP_TRIGGER_ID,
+  writeDreamGateScript,
   writeLauncherScript,
   writeStaleCheckScript,
   WATCHER_TRIGGER_ID,
@@ -385,9 +387,24 @@ export function runVerify(egress: Egress, opts: VerifyOptions = {}): CheckResult
           id: DREAM_TRIGGER_ID,
           role: "time",
           expect: (t) =>
-            t.target !== "index" ? `target is ${t.target ?? "?"}, expected index` : null,
-          repairSend: () =>
-            registerTimer(egress, { message: dreamTimerMessage(), iapeerBin: opts.iapeerBin }),
+            t.target !== DREAM_TARGET
+              ? `target is ${t.target ?? "?"}, expected ${DREAM_TARGET}`
+              : (t as { check?: string }).check !== paths.dreamGateScriptPath
+                ? `check is ${(t as { check?: string }).check ?? "?"}, expected ${paths.dreamGateScriptPath}`
+                : null,
+          repairSend: () => {
+            writeDreamGateScript({
+              dreamGateScriptPath: paths.dreamGateScriptPath,
+              binaryPath: paths.binaryPath,
+            });
+            return registerTimer(egress, {
+              message: dreamTimerMessage({
+                cron: process.env.IAPEER_MEMORY_DREAM_CRON,
+                dreamGateScriptPath: paths.dreamGateScriptPath,
+              }),
+              iapeerBin: opts.iapeerBin,
+            });
+          },
         },
       ];
       for (const c of checks) {

package/src/fleet.ts

@@ -80,7 +80,7 @@ export function readFleetMap(fleetMapPath: string): FleetPeer[] | null {
 }
 
 /** Live-registry query — the ONE place `iapeer list --json` is parsed.
- *  Shared by writeFleetMap (the persisted map) and dream-paths (the
+ *  Shared by writeFleetMap (the persisted map) and dream-collect (the
  *  tick-time resolution; freshness fact: birth does NOT touch fleet.json
  *  and the SessionStart kick is heartbeat-gated, so the LIVE registry is
  *  the only source that sees a newborn before the next update). */

package/src/paths.ts

@@ -56,6 +56,9 @@ export type MemoryPaths = {
   launcherPath: string;
   /** Sweep check-script — gates the fail-open inbox sweep (ADR-015). */
   checkScriptPath: string;
+  /** Dream-tick gate check-script — the notifier `check` for the weekly timer
+   *  (shells the registry-free `dream-collect --gate`; a dead week wakes no one). */
+  dreamGateScriptPath: string;
   /** Fleet map (personality → cwd) — written by init/update/verify --repair
    *  from `iapeer list --json`, consumed by memoryd's fragment renderer
    *  (docs/05; дыра 10.06: без карты пиры не получали paths-блок и индекс). */
@@ -99,6 +102,7 @@ export function memoryPaths(
     hooksDir: path.join(path.dirname(configFile), "hooks"),
     launcherPath: path.join(path.dirname(configFile), "memoryd-launcher.sh"),
     checkScriptPath: path.join(path.dirname(configFile), "inbox-stale-check.sh"),
+    dreamGateScriptPath: path.join(path.dirname(configFile), "dream-tick-gate.sh"),
     fleetMapPath: path.join(stateDir, "fleet.json"),
   };
 }

package/src/provision.ts

@@ -176,6 +176,20 @@ export function defaultConfigContent(opts: ConfigContentOptions): string {
     "# Curator personalities exempt from needs_review stamping (ADR-006).",
     "# IAPEER_MEMORY_CURATOR_SET=index,scriber,dreamweaver",
     "",
+    "# Weekly dream-tick (deterministic pre-filter → DreamWeaver). Schedule is",
+    "# 5-field cron; the window is days BY TIME (not since-last-tick).",
+    "# IAPEER_MEMORY_DREAM_CRON=0 4 * * 1",
+    "# IAPEER_MEMORY_DREAM_WINDOW_DAYS=7",
+    "# description longer than this many chars → a reformulation candidate.",
+    "# IAPEER_MEMORY_DREAM_DESC_MAXLEN=250",
+    "# >threshold new notes in a folder → its own subagent; smaller folders are",
+    "# grouped up to the cap (sum of per-folder weights).",
+    "# IAPEER_MEMORY_DREAM_BATCH_THRESHOLD=20",
+    "# IAPEER_MEMORY_DREAM_GROUP_CAP=20",
+    "# Per-folder cap on transcripts handed to phase D (most recent N by mtime;",
+    "# bounds an ephemeral worker's hundreds of sessions). 0 = uncapped.",
+    "# IAPEER_MEMORY_DREAM_TRANSCRIPT_CAP=20",
+    "",
   ].join("\n");
 }
 

package/src/slot.ts

@@ -31,7 +31,6 @@
 
 import fs from "node:fs";
 import path from "node:path";
-import { IAPEER_BIN, type Egress } from "./egress.js";
 import {
   guardedWriteFileSync,
   guardedUnlinkSync,
@@ -173,54 +172,7 @@ export function removeSlot(slotPath: string): SlotRemoveResult {
   return "removed";
 }
 
-export type MemoryPluginApplyResult = {
-  ok: boolean;
-  detail: string;
-  /** True when the test-sandbox fuse blocked the call — callers report a
-   *  SKIP, not a failure (same contract as watcher.ts iapSend). */
-  suppressed?: boolean;
-};
-
-/**
- * Fleet-wide install/remove of the slot-declared session plugin via the core
- * verb `iapeer memory-plugin <on|off> --all` (iapeer ≥0.2.25; marketplace
- * ensure + stale-cache retry live INSIDE the verb). The verb derives the
- * plugin identity from the slot declaration — so `on` runs AFTER writeSlot
- * and `off` runs BEFORE removeSlot (agreed order, auto-removal: a dead
- * provider's plugin must not keep injecting).
- *
- * The hard fuse of incident 10.06 (`on --all` mutates the HOST fleet — no
- * sandbox env contains it) lives in the egress constructor now
- * (deny-by-default §4): a refusing handle blocks the spawn here.
- */
-export function applyMemoryPlugin(
-  egress: Egress,
-  opts: {
-    mode: "on" | "off";
-    iapeerBin?: string;
-  },
-): MemoryPluginApplyResult {
-  const bin = opts.iapeerBin ?? IAPEER_BIN;
-  const proc = egress.spawnSync([bin, "memory-plugin", opts.mode, "--all"], {
-    explicitBin: opts.iapeerBin !== undefined,
-  });
-  if (proc.refused) {
-    return {
-      ok: false,
-      suppressed: true,
-      detail: "memory-plugin call suppressed (test sandbox)",
-    };
-  }
-  if (proc.spawnError) {
-    return { ok: false, detail: `${bin} unavailable: ${proc.spawnError}` };
-  }
-  if (proc.exitCode !== 0) {
-    return {
-      ok: false,
-      detail:
-        (proc.stderr.trim() || proc.stdout.trim() || "").slice(0, 200) ||
-        `iapeer memory-plugin exited ${proc.exitCode}`,
-    };
-  }
-  return { ok: true, detail: proc.stdout.trim() };
-}
+// applyMemoryPlugin (the core verb `iapeer memory-plugin <on|off> --all`)
+// was REMOVED with the plugin channel (ADR-017): v1.1 hosts get a manual
+// recipe in init/update/uninstall instead of an auto-sweep. The `plugin`
+// field on the slot type stays — it is the v1.1 READ marker.

package/src/sync-versions.ts

@@ -1,13 +1,13 @@
 /**
  * Manifest version sync (docs/10 §Версионная синхронизация): propagate the
  * facade `package/package.json` version into every other manifest of the
- * monorepo — `core/package.json` + `adapters/{claude,codex}` plugin
- * manifests. Wired into the npm `version` lifecycle, runnable standalone:
+ * monorepo — `core/package.json` (the adapter plugin manifests left with
+ * the plugin channel, ADR-017). Wired into the npm `version` lifecycle,
+ * runnable standalone:
  *
  *     bun src/sync-versions.ts
  *
- * Missing manifests are reported and skipped (the adapters land in P2/P5 —
- * the script must not fail before they exist). The reference
+ * Missing manifests are reported and skipped. The reference
  * sync-plugin-version pattern, generalised to N manifests.
  */
 
@@ -18,11 +18,7 @@ import { guardedWriteFileSync } from "@agfpd/iapeer-memory-core";
 export type SyncOutcome = { file: string; action: "updated" | "identical" | "missing" };
 
 /** Relative (to the monorepo root) manifests that must carry one version. */
-export const SYNC_TARGETS = [
-  "core/package.json",
-  "adapters/claude/.claude-plugin/plugin.json",
-  "adapters/codex/.codex-plugin/plugin.json",
-] as const;
+export const SYNC_TARGETS = ["core/package.json"] as const;
 
 export function syncVersions(opts: {
   rootDir: string;

package/src/templates/roles-en.ts

@@ -51,17 +51,12 @@ different world.
   scriber thread stalled: place the stale drafts UNVETTED by the usual
   rules; \`needs_review: true\` already travels with each file. The
   Scriber re-vets them with the next PERMANENT_BATCH once alive.
-- **DREAM_TICK** (notifier timer, weekly) — run \`iapeer-memory
-  dream-paths\` (read-only; the LIVE registry at tick time) and fan out
-  DreamWeaver over the folders of its output (including your own),
-  strictly one folder per task, sequentially. DreamWeaver takes tasks ONLY
-  from you (the one exception: a folder's owner may task it on their own
-  folder). Task: \`{agent, path, mode, transcripts_window_days,
-  transcripts}\` — copy \`transcripts\` from the verb's output AS IS
-  (globs + the codex cwdFilter; path forms are the code's zone, not
-  yours). A verb error = report to the owner, never guess the fleet. On
-  the consolidation report: archive what it deprecated, act on its
-  \`attention\` blocks yourself.
+- **DreamWeaver consolidation report** (weekly) — DreamWeaver now
+  orchestrates the tick (a deterministic pre-filter finds the work, it
+  fans out subagents); you are OFF the entry and only FINALISE. On its
+  report: archive each note it deprecated (move to the archive subfolder),
+  build the links section for each new merged note via vault_search, and
+  act on its \`attention\` items yourself.
 - **Direct IAP** from agents or the human — structure questions; never
   run searches for others (they have their own vault tools).
 
@@ -114,8 +109,8 @@ it under the usual three conditions.
 Never write note content (authors own it); never answer other agents'
 search requests; never dispatch the Scriber (events reach it directly —
 it reports to you); never detect events yourself (memoryd detects, the
-notifier delivers); never let DreamWeaver take tasks from anyone but you
-(save the owner-on-own-folder exception).
+notifier delivers); never orchestrate the dream-tick (DreamWeaver owns it
+end to end now — you only finalise on its report).
 `;
 
 export const SCRIBER_DOCTRINE_EN = `---
@@ -233,47 +228,78 @@ locale: en
 ---
 # DreamWeaver — sleep-cycle memory consolidation
 
-You are DreamWeaver: an ephemeral worker peer, the weekly hygiene
-instrument for agent memory. Vault root on this host: \`{{VAULT_PATH}}\`
-(never guess it). Tasks arrive as IAP messages: weekly fan-out
-from the Index (one task per subfolder, including the Index's own), or
-on-demand from a folder's OWNER for their own folder only. One task = one
-clean window = ONE outbound message (the final consolidation report to the
-task sender). Discipline: touch ONLY the folder named in the task.
-
-Task: \`{agent, path, mode, transcripts_window_days, transcripts}\`.
-
-## The four phases
-
-- **A — Dedup.** Read the folder's notes; group the ones about one topic
-  (LLM judgement). For each group of 2+: write ONE merging note (meaningful
-  filename in the vault language, \`subtype\` + \`description\` + body with
-  inline \`[[old note A]]\`, \`[[old note B]]\` mentions) and flip each old
-  note's \`status\` to the outdated token.
-- **B — Compress descriptions.** \`description\` longer than ~250 chars →
-  tighten to 1–2 sentences (~150 chars). Never touch the body in this
-  phase.
-- **C — Local fact verification.** Find file paths and env-variable
-  mentions in bodies; read the targets; on a clear mismatch (file gone,
-  function renamed) write an updated note and flip the old one to the
-  outdated token. LOCAL checks only.
-- **D — Transcript scan.** Read the session transcripts for the window
-  (\`transcripts_window_days\`) per the task's \`transcripts\`: each entry
-  is a glob; for \`runtime: codex\` the store is HOST-WIDE — take ONLY the
-  sessions whose \`session_meta.cwd\` equals the entry's \`cwdFilter\`
-  (foreign cwds are foreign memory). No entries / empty glob → skip the
-  phase. Find user phrases that formulate a rule with 2+ explicit
-  confirmations in different sessions; check against existing feedback
-  notes; write new notes with quotes for what's missing.
-
-## Hard limits
-
-- No hard deletes — only the outdated status token; archiving and links
-  are the Index's pass (it acts on your report), not yours.
-- Never touch canon folders; no vault MCP tools; no web fact-checking
-  (that's the distill skill's domain, not yours).
-- Your edits are stamped \`last_edited_by: dreamweaver\`; the \`author\`
-  constant is parsed from the subfolder path, so writing into a foreign
-  subfolder ON TASK keeps the owner's attribution intact — that is by
-  design.
+You are DreamWeaver: an ephemeral worker peer that ORCHESTRATES the weekly
+agent-memory hygiene tick. Vault root on this host: \`{{VAULT_PATH}}\`
+(never guess it — a stale copy elsewhere on disk is a different world). A
+deterministic pre-filter has already found the work; you turn its output
+into subagent tasks, then report once. The notifier delivers DREAM_TICK to
+you, weekly, only on a week that has work (a gate skips dead weeks) —
+nobody else tasks you.
+
+## Running the tick
+
+1. Run \`iapeer-memory dream-collect\` (Bash, read-only). It returns JSON:
+   \`{vault, windowDays, tasks[], skipped[]}\`. Each task is
+   \`{kind, folders[]}\`; each folder carries \`{agent, path,
+   newNotes:[{path, flags}], transcripts:[{runtime, files}]}\`. A
+   \`folder\` task is one busy folder for one subagent; a \`grouped\` task
+   is several small folders for one subagent. The pre-filter already
+   dropped inactive folders, so you spawn ONLY where there is real work.
+2. A verb error line = report it to the human owner and stop; never guess
+   the fleet. Empty \`tasks\` = a clean week — finish with \`iapeer
+   self-done\` (the non-waking finish), no report.
+3. Fan out one subagent per task, using your runtime's own subagent
+   mechanism (whatever it is called there). Run tasks concurrently when
+   your runtime allows, otherwise in sequence.
+4. Collect the subagents' results into ONE consolidation report to the
+   Index: the notes they deprecated (for archival), the new merged notes
+   (for linking), and any attention items. The Index finalises — archival
+   and the links section are its pass, not yours.
+
+Your window is one clean cycle = ONE outbound message (the report to the
+Index, or \`self-done\` on an empty week).
+
+## The subagent's task
+
+Each subagent sees ONLY the task you write — make it self-sufficient. Copy,
+verbatim from the verb's output, the folder path(s), the \`newNotes\` with
+their flags, the \`transcripts\` files, and the vault root. State the
+objective, the four judgement phases, the boundaries, and the report shape
+below. The subagent JUDGES the supplied material; it never re-discovers
+(the script already did the finding, so a subagent that re-scans the folder
+wastes the whole point).
+
+- **A — Dedup.** Group the supplied \`newNotes\` that cover one topic. Read
+  sibling notes in the folder for CONTEXT — including ones outside the
+  window — so a fresh note merges with an older twin; edit ONLY in-window
+  notes (the rest are already settled). For each group of 2+: write one
+  merging note (meaningful filename in the vault language, \`subtype\` +
+  \`description\` + body with inline \`[[old note]]\` mentions) and flip
+  each merged note's \`status\` to the outdated token.
+- **B — Compress descriptions.** For a note flagged \`long-desc\`: tighten
+  \`description\` to 1–2 sentences (~150 chars), leaving the body untouched.
+- **C — Verify flagged references.** For a note flagged \`broken-ref\`: the
+  script already located the suspect path/env mention — read the target,
+  and on a clear mismatch (file gone, var unset, function renamed) write an
+  updated note and flip the old one to outdated. Local checks only.
+- **D — Extract rules from transcripts.** Read the supplied
+  \`transcripts.files\` (concrete paths — no globbing). Find user phrases
+  that state a rule with 2+ explicit confirmations across sessions; check
+  against existing feedback notes; write what is missing, with quotes. No
+  files → skip the phase.
+
+Boundaries for every subagent: touch only the folder(s) named in the task,
+and only in-window notes; stay out of canon folders; no hard deletes (only
+the outdated status token, because archiving and links are the Index's
+pass); no vault MCP tools and no web fact-checking (that is the distill
+skill's domain). Edits are stamped \`last_edited_by: dreamweaver\` and the
+\`author\` constant is parsed from the subfolder path, so writing into an
+owner's folder ON TASK keeps their attribution intact — by design.
+
+## What you never do
+
+You never discover work yourself (the pre-filter does) and never write a
+note's substance (its author owns that). You act through subagents and
+report to the Index; you do not archive or set links — that is the Index's
+finalising pass.
 `;