@automagik/genie 4.260410.2 → 4.260410.3

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
   "plugins": [
     {
       "name": "genie",
-      "version": "4.260410.2",
+      "version": "4.260410.3",
       "source": "./plugins/genie",
       "description": "Human-AI partnership for Claude Code. Share a terminal, orchestrate workers, evolve together. Brainstorm ideas, wish them into plans, make with parallel agents, ship as one team. A coding genie that grows with your project."
     }

package/.genie/brainstorm.md

@@ -1,12 +1,62 @@
 # Brainstorm Jar
-## Raw
-## Simmering
-## Ready
-## Poured
-- **genie-simulations** — Agent eval via real multi-turn Omni conversations, 9-dimension scoring, 100 scenarios per agent → [WISH.md](.genie/wishes/genie-simulations/WISH.md)
-- **genie-metaverse** — Per-workspace instances: unique ID, multi-agent detection, git-controlled publish with sim score gate → [WISH.md](.genie/wishes/genie-metaverse/WISH.md)
-- **task-leader-architecture** — Task leader built-in role, --wish flag, autonomous lifecycle → [WISH.md](.genie/wishes/task-leader-architecture/WISH.md)
-- **skill-refresh** — Refresh all 13 skills + orchestration rules rewrite → [WISH.md](.genie/wishes/skill-refresh/WISH.md)
-- **deps-bump-readme-rewrite** — Deps bump + README rewrite (cognitive load positioning) → [WISH.md](.genie/wishes/deps-bump-readme-rewrite/WISH.md)
-- **report-skill-plugin-rename** — /report skill + plugin rename + debug->trace → [WISH.md](.genie/wishes/report-skill-plugin-rename/WISH.md)
-- **genie-default-command** — tui rename + session-per-folder + onboarding hotfix → [WISH.md](.genie/wishes/genie-default-command/WISH.md)
+
+## Sprint Backlog (next sprint — /review + /brainstorm queue)
+
+### Tier 1: Autonomous dispatch (dream-eligible)
+- [scaffold-auto-memory](wishes/scaffold-auto-memory/WISH.md) — READY. Auto-configure `autoMemoryEnabled`/`autoMemoryDirectory` in `.claude/settings.local.json` + seed `MEMORY.md` when `genie init agent <name>` scaffolds. Closes automagik-dev/genie#1106. Twin-genie reviewed: scope 2/5, risk 2/5, clarity 4/5.
+- [brain-help-passthrough](wishes/brain-help-passthrough/WISH.md) — READY. Add `addHelpText` footer to `genie brain --help` so users see the forwarded subcommands (status, health, init, search, etc.). Passthrough already works at runtime; help text just doesn't advertise it. Closes automagik-dev/genie#1118. Twin-genie reviewed: scope 1/5, risk 1/5, clarity 5/5.
+
+### Tier 2: Agent creation (brainstorm → wish)
+- **brain-cag-v2** — NEW. Seamless brain→rlmx integration. Brain is the interface, rlmx is the engine. No direct `rlmx` CLI needed.
+- **brain-optimizer-agent** — `/review` existing pipeline → create `.genie/agents/brain-optimizer/` sub-agent that uses traces+grades.
+- **rlmx-dogfood-agent** — `/review` rlmx → create `.genie/agents/rlmx-dogfood/` sub-agent that uses rlmx on itself.
+
+### Tier 3: Investigation first
+- **dir-scope-architecture** (automagik-dev/genie#1107) — BLOCKED on architecture decision. Twin-genie trace revealed the PG `agents` table has NO scope column; `dir add --global` and `dir add` hit the same row. Fix requires either (a) adding a scope column with migration, or (b) removing the `--global` flag and false success messaging. Human decision needed before any code change. NOT autonomous-friendly.
+- **rlmx-ship-polish** — Merge rlmx-integration + rlmx-readme. `/review` then `/brainstorm`. Live API tests, version fix, README.
+- **genie-studio** — `/review` genie repo app code → compare with genie-app-v1 wish → consolidate/rename.
+- [sdk-executor-full](wishes/sdk-executor-full/WISH.md) — APPROVED. `/review` current 132 executor matches → `/brainstorm` gaps.
+- [agent-stability-hardening](wishes/_archive/agent-stability-hardening/WISH.md) — SHIPPED (PR #1112). Verify on dev.
+- [brain-benchmark-loop](wishes/brain-benchmark-loop/WISH.md) — IN_PROGRESS. `/review` progress → decide next step.
+
+## Deferred
+- [omni-turn-based-dx](wishes/omni-turn-based-dx/WISH.md) — DRAFT. Foundational architecture, not sprint-sized.
+- [unified-executor-layer](wishes/unified-executor-layer/WISH.md) — DRAFT. Depends on omni-turn-based-dx.
+- [workflow-action-engine](wishes/workflow-action-engine/WISH.md) — DRAFT. Depends on genie-app-v1.
+- [sac-agent](wishes/sac-agent/WISH.md) — DRAFT. Niche use case (Itaú Cartões).
+- [crew-simplification](brainstorms/crew-simplification/DESIGN.md) — DRAFT. Housekeeping post-v1.
+- [genie-skill-graph](wishes/genie-skill-graph/WISH.md) — DRAFT. Requires architecture work.
+- tmux+sdk mode coexistence — flagged for future brainstorm.
+
+## Non-engineering (parked)
+- [The Agentic Shift — Mini-Documentary](brainstorms/agentic-shift-documentary/DESIGN.md) — CRYSTALLIZED. 40-shot Veo3 script. Schedule when ready.
+- Viralizador — Recurring DevRel content loop, not a shippable feature.
+
+## Poured (shipped)
+
+All shipped wishes live in [`wishes/_archive/`](wishes/_archive/). Listed here for reference.
+
+- [Agent Stability Hardening](wishes/_archive/agent-stability-hardening/WISH.md) — SHIPPED (PR #1112, 2026-04-09). Permission spread + remoteApproval + tmux mouse + inbox retry.
+- [Session Capture v2](wishes/_archive/session-capture-v2/WISH.md) — SHIPPED (PR #825, 2026-04-09). Filewatch + lazy backfill + tool event extraction.
+- [pgserve Daemon Ownership](wishes/_archive/pgserve-daemon-ownership/WISH.md) — SHIPPED (PR #827, 2026-04-09). Daemon owns PG, self-heal, doctor --fix.
+- [os-services Orphan Leak](wishes/_archive/os-services-orphan-leak/WISH.md) — SHIPPED (PR #272 + #274, 2026-04-09). Layer 1+2 signal fix + orphan reaper + migration matchAll.
+- [env-defaults-local-mode](wishes/_archive/env-defaults-local-mode/WISH.md) — SHIPPED (incremental, 2026-04-09). All 6 criteria met across multiple PRs.
+- [Onboarding Overhaul](brainstorms/onboarding-overhaul/DRAFT.md) — ALL 3 SUB-WISHES SHIPPED:
+  - **1.** [genie-model-resolution](wishes/_archive/genie-model-resolution/WISH.md) — SHIPPED (QA 2026-04-08)
+  - **2.** [genie-onboarding-flow](wishes/_archive/genie-onboarding-flow/WISH.md) — SHIPPED (all 7 groups on dev)
+  - **3.** [genie-layout-migration](wishes/_archive/genie-layout-migration/WISH.md) — SHIPPED (in binary)
+- [Brain Obsidian](wishes/_archive/brain-obsidian/WISH.md) — ALL 6 SUB-WISHES SHIPPED in @khal-os/brain v1.22.0:
+  - brain-foundation, brain-embeddings, brain-intelligence, brain-observability, brain-identity-impl, brain-init-skill
+- [rlmx](wishes/_archive/rlmx-v04-gemini3/WISH.md) — v0.2 + v0.3 + v0.4 ALL SHIPPED (npm v0.260331.5)
+- [Omni Lifecycle Hardening](wishes/_archive/omni-lifecycle-hardening/WISH.md) — SHIPPED (PR #359)
+- [Omni Version Unify](brainstorms/omni-version-unify/DESIGN.md) — SHIPPED (PR #356)
+- [Omni Skill Upgrade](wishes/_archive/omni-skill-upgrade/WISH.md) — SHIPPED (3-tier skills live)
+- [remove-openclaw](wishes/_archive/remove-openclaw/WISH.md) — SHIPPED (absent from binary)
+- **v4 Stability Sprint** — COMPLETE (2026-04-02). All 6 wishes merged: [v4-database-layer](wishes/_archive/v4-database-layer/WISH.md), [v4-hook-cli-safety](wishes/_archive/v4-hook-cli-safety/WISH.md), [v4-message-routing](wishes/_archive/v4-message-routing/WISH.md), [v4-session-executor](wishes/_archive/v4-session-executor/WISH.md), [v4-spawn-resilience](wishes/_archive/v4-spawn-resilience/WISH.md), [v4-team-lifecycle](wishes/_archive/v4-team-lifecycle/WISH.md).
+- [Session Observability](brainstorms/session-observability/DESIGN.md) — CRYSTALLIZED → folds into session-capture-v2
+- [X Tool](brainstorms/x-tool/DESIGN.md) — CRYSTALLIZED (WRS 100/100). Parked.
+
+## Killed
+- [genie-app](wishes/_archive/genie-app/WISH.md) — superseded by genie-app-v1 / genie-studio
+- [session-ingester-perf](wishes/_archive/session-ingester-perf/WISH.md) — superseded by session-capture-v2
+- [brain-obsidian](wishes/_archive/brain-obsidian/WISH.md) (parent spec) — all children shipped, reference only

package/.genie/wishes/_archive/agent-stability-hardening/WISH.md

@@ -0,0 +1,346 @@
+# Wish: Agent Stability Hardening + Remote Approval
+
+| Field | Value |
+|-------|-------|
+| **Status** | SHIPPED |
+| **Slug** | `agent-stability-hardening` |
+| **Date** | 2026-04-08 |
+| **Design** | [DESIGN.md](../../brainstorms/agent-stability-hardening/DESIGN.md) |
+| **GitHub Issues** | #1094, #1093, #1064 |
+| **Repo** | automagik-dev/genie |
+
+## Summary
+
+Fix three agent runtime reliability bugs (permission deadlock, clipboard breakage, silent message loss) and introduce a new `remoteApproval` permission mode that routes tool-use approval requests to humans via Omni (WhatsApp) and the Genie desktop app. This transforms the broken permission system from a source of deadlocks into a powerful human-in-the-loop control plane.
+
+## Scope
+
+### IN
+- Fix `permissionMode` spread override that causes agent deadlock (#1094)
+- Change scaffold default from `permissionMode: default` to `bypassPermissions`
+- Defense-in-depth: strip `permissionMode` from `translateSdkConfig`, call `ensureTeammateBypassPermissions` at SDK spawn
+- New `permissionMode: remoteApproval` with PG-backed approval queue
+- Omni approval frontend: WhatsApp message + reaction/text reply approval
+- App approval frontend: toast notification + interactive chat message with Approve/Deny/Preview
+- Configurable approve/deny tokens in `workspace.json`
+- Fix `osc52-copy.sh` to use `$SSH_TTY` as primary clipboard target (#1093)
+- Add `GENIE_TMUX_MOUSE=off` env var opt-out
+- Inbox delivery retry (3x) with escalation to team-lead (#1064)
+- Fix `isTeamActive` to check per-agent pane liveness
+
+### OUT
+- WhatsApp interactive buttons (requires Business API — text reply + reactions are universal)
+- Per-agent approval config (workspace-level is sufficient)
+- Approval audit dashboard UI (PG table is queryable, UI deferred)
+- Full inbox-watcher redesign (incremental fix only)
+- OSC52 terminal compatibility matrix testing (fix the script, document Shift workaround)
+
+## Decisions
+
+| # | Decision | Rationale |
+|---|----------|-----------|
+| D1 | Strip `permissionMode` from `translateSdkConfig()` | SDK executor must always bypass — frontmatter `permissionMode` only meaningful for tmux CLI path |
+| D2 | Scaffold default `bypassPermissions` | Current `default` causes deadlock for every new agent |
+| D3 | PG LISTEN/NOTIFY for approval resolution | Proven pattern (mailbox delivery), works cross-process |
+| D4 | Accept both text reply and reaction emoji | Channel-agnostic — works on WhatsApp, Telegram, Slack |
+| D5 | Configurable approve/deny tokens in `workspace.json` | Multilingual support ("sim"/"nao"), custom emoji |
+| D6 | Timeout 300s default, `defaultAction: deny` | Safe default — no unauthorized tool use |
+| D7 | Mode name: `remoteApproval` | Transport-agnostic — works via Omni, app, future channels |
+| D8 | Toast + in-chat for app UI | Toast alerts from any tab, chat message is persistent and actionable |
+| D9 | Medium preview for Omni, full via app Preview button | WhatsApp can't handle 500-line diffs |
+| D10 | `$SSH_TTY` as primary OSC52 target | More reliable than `who -m` in nested tmux |
+| D11 | `GENIE_TMUX_MOUSE=off` env opt-out, default on | Preserves behavior, escape hatch for SSH users |
+| D12 | 3 delivery retries then escalate to team-lead | Matches existing `spawnFailures` pattern |
+
+## Success Criteria
+
+- [ ] Agent with `permissionMode: bypassPermissions` (new scaffold default) executes tools without approval prompt
+- [ ] Agent with `permissionMode: remoteApproval` blocks on tool use, writes approval to PG
+- [ ] Approval request appears in genie-app chat as interactive message with Approve/Deny/Preview
+- [ ] Approval request delivered via Omni to configured WhatsApp chat
+- [ ] Human approves via WhatsApp reaction (configurable, default 👍) — agent resumes within 2s
+- [ ] Human approves via WhatsApp text reply (configurable, default "y") — agent resumes within 2s
+- [ ] Human approves via app Approve button — agent resumes within 1s
+- [ ] Timeout (300s default) with no response — auto-deny
+- [ ] Custom approve/deny tokens work from `workspace.json`
+- [ ] `osc52-copy.sh` uses `$SSH_TTY` as primary clipboard target
+- [ ] `GENIE_TMUX_MOUSE=off` disables mouse capture, native Cmd+C works
+- [ ] `deliverToPane()` failure triggers retry (3x) then escalation to team-lead
+- [ ] `translateSdkConfig()` never copies `permissionMode` into SDK options
+- [ ] `ensureTeammateBypassPermissions()` called at SDK executor spawn path
+- [ ] Existing tests pass (`tsc --noEmit` + `biome check`)
+
+## Execution Strategy
+
+### Wave 1 (parallel — independent bug fixes)
+| Group | Agent | Description |
+|-------|-------|-------------|
+| 1 | engineer | Permission fix: spread order, strip translateSdkConfig, scaffold default, ensureTeammate |
+| 5 | engineer | OSC52 clipboard: `$SSH_TTY` in osc52-copy.sh, `GENIE_TMUX_MOUSE` env opt-out |
+| 6 | engineer | Inbox retry: delivery_status column, retry loop, escalation, isAgentAlive |
+
+### Wave 2 (after Group 1 — approval core depends on permission system)
+| Group | Agent | Description |
+|-------|-------|-------------|
+| 2 | engineer | Remote approval core: PG table, migration, hook factory, workspace config, CLI command |
+| review-w1 | reviewer | Review Groups 1, 5, 6 |
+
+### Wave 3 (after Group 2 — frontends depend on approval core)
+| Group | Agent | Description |
+|-------|-------|-------------|
+| 3 | engineer | Omni approval frontend: message handler, reaction/text matching, rate limiting |
+| 4 | engineer | App approval frontend: toast, chat message component, sidecar NATS subjects |
+| review-w2 | reviewer | Review Group 2 |
+
+### Wave 4 (final)
+| Group | Agent | Description |
+|-------|-------|-------------|
+| review-w3 | reviewer | Review Groups 3, 4 |
+| qa | qa | End-to-end QA: all success criteria |
+
+## Execution Groups
+
+### Group 1: Permission Fix
+**Goal:** Eliminate the `permissionMode` spread override that causes agent deadlock.
+
+**Deliverables:**
+1. `src/lib/providers/claude-sdk.ts` — Delete line that copies `permissionMode` from `translateSdkConfig()` (line 42). Reorder options spread so `permissionMode: 'bypassPermissions'` and `allowDangerouslySkipPermissions: true` come AFTER `...translatedSdk` and `...extraOptions`.
+2. `src/lib/providers/claude-sdk.ts` — Call `ensureTeammateBypassPermissions()` at top of `runQuery()`.
+3. `src/templates/index.ts` — Change `permissionMode: default` to `permissionMode: bypassPermissions` (line ~93).
+4. `src/templates/genie-agents.md` — Change `permissionMode: default` to `permissionMode: bypassPermissions` (line ~9).
+5. `src/lib/defaults.ts` — Change `permissionMode: 'default'` to `permissionMode: 'bypassPermissions'` (line ~27).
+6. Update existing tests that assert `permissionMode: default` or the old spread order.
+
+**Acceptance Criteria:**
+- [ ] `translateSdkConfig()` output never contains `permissionMode` key
+- [ ] Options object has `permissionMode: 'bypassPermissions'` after all spreads
+- [ ] New scaffolded agent has `permissionMode: bypassPermissions` in frontmatter
+- [ ] `ensureTeammateBypassPermissions()` called before SDK query
+
+**Validation:**
+```bash
+cd repos/genie && npx tsc --noEmit && npx biome check src/
+grep -r "permissionMode: 'default'" src/templates/ src/lib/defaults.ts && echo "FAIL: default still present" && exit 1 || echo "PASS"
+```
+
+**depends-on:** none
+
+---
+
+### Group 2: Remote Approval Core
+**Goal:** Build the PG-backed approval queue and SDK hook that blocks until a human decides.
+
+**Deliverables:**
+1. `src/db/migrations/030_approvals.sql` — Create `approvals` table with columns: `id`, `executor_id`, `agent_name`, `tool_name`, `tool_input_preview`, `decision` (pending/allow/deny), `decided_by`, `decided_at`, `timeout_at`, `created_at`. Add trigger `notify_approval_resolved` that fires `pg_notify('genie_approval_resolved', id)` on decision change from pending.
+2. `src/lib/providers/claude-sdk-remote-approval.ts` — New file. Export `createRemoteApprovalGate(config)` that returns a PreToolUse hook. Hook inserts approval row, subscribes to LISTEN channel, safety-net polls every 5s, returns allow/deny on resolution or timeout.
+3. `src/lib/providers/claude-sdk.ts` — When `sdkConfig.permissionMode === 'remoteApproval'`, wire `createRemoteApprovalGate` as PreToolUse hook instead of the standard permission gate. Keep `permissionMode: 'bypassPermissions'` in SDK options (the hook handles blocking).
+4. `src/lib/workspace.ts` — Add `permissions` section to workspace schema: `approveTokens`, `denyTokens`, `timeout`, `defaultAction`, `omniChat`, `omniInstance`.
+5. `src/term-commands/approval.ts` — New CLI command `genie approval request --tool <name> --input <preview> --agent <name> --wait` for tmux-path agents. Writes to same PG approvals table, blocks until resolved. Also `genie approval resolve <id> --decision allow|deny --by <actor>`.
+6. Register approval CLI commands in `src/genie.ts`.
+
+**Acceptance Criteria:**
+- [ ] `approvals` table created by migration
+- [ ] `genie approval request --tool Write --input "test" --agent test-agent --wait` blocks and returns on resolve
+- [ ] `genie approval resolve <id> --decision allow --by human` resolves pending approval within 2s
+- [ ] Timeout auto-resolves with configured `defaultAction`
+- [ ] Hook returns `{ permissionDecision: 'allow' }` or `'deny'` correctly
+
+**Validation:**
+```bash
+cd repos/genie && npx tsc --noEmit && npx biome check src/
+```
+
+**depends-on:** Group 1
+
+---
+
+### Group 3: Omni Approval Frontend
+**Goal:** Route approval requests to WhatsApp and accept human decisions via text reply or reaction.
+
+**Deliverables:**
+1. `src/lib/providers/claude-sdk-remote-approval.ts` — Add Omni send on approval creation: format message with tool name + target + ~200 char preview. Read `omniChat` and `omniInstance` from workspace config. Use `omni send` CLI.
+2. Omni incoming message handler — Match incoming text replies against `approveTokens`/`denyTokens` from workspace config. Match reaction emoji on the approval message. On match, call `genie approval resolve <id> --decision allow|deny --by <sender>`.
+3. Rate limiting — If >3 pending approvals within 10s, batch into single summary message with count.
+
+**Acceptance Criteria:**
+- [ ] Approval request sends formatted WhatsApp message via Omni
+- [ ] Reply "y" on WhatsApp resolves approval as allow
+- [ ] Reply "n" resolves as deny
+- [ ] Reaction 👍 resolves as allow
+- [ ] Reaction 👎 resolves as deny
+- [ ] Custom tokens from workspace.json work
+- [ ] >3 rapid approvals are batched
+
+**Validation:**
+```bash
+cd repos/genie && npx tsc --noEmit && npx biome check src/
+```
+
+**depends-on:** Group 2
+
+---
+
+### Group 4: App Approval Frontend
+**Goal:** Show approval requests in the Genie desktop app as toasts and interactive chat messages.
+
+**Deliverables:**
+1. `packages/genie-app/src-backend/index.ts` — Add NATS subjects: `genie.approval.request` (subscribe to PG LISTEN, publish to frontend), `genie.approval.resolve` (req/reply — update PG), `genie.approval.list` (req/reply — list pending).
+2. `packages/genie-app/views/shared/ApprovalToast.tsx` — New component. Non-blocking toast notification when approval arrives. Shows agent name + tool name + "View in Chat" link. Auto-dismisses after 10s.
+3. `packages/genie-app/views/` (chat view) — New `ApprovalMessage.tsx` component. Renders in chat as interactive card: tool info, Approve/Deny buttons, Preview expand. Buttons send NATS `genie.approval.resolve` request.
+4. Wire toast into `App.tsx` — subscribe to `events.approval_request` NATS event, render `ApprovalToast`.
+
+**Acceptance Criteria:**
+- [ ] Toast appears when approval request fires
+- [ ] Chat message renders with Approve/Deny/Preview buttons
+- [ ] Approve button resolves approval, agent resumes within 1s
+- [ ] Deny button resolves approval, agent gets deny
+- [ ] Preview button shows full tool input
+- [ ] Agent state shows `permission` in AgentsView during pending approval
+
+**Validation:**
+```bash
+cd repos/genie && npx tsc --noEmit && npx biome check src/ packages/
+```
+
+**depends-on:** Group 2
+
+---
+
+### Group 5: OSC52 Clipboard Fix
+**Goal:** Fix clipboard copy over SSH and add mouse capture opt-out.
+
+**Deliverables:**
+1. `scripts/tmux/osc52-copy.sh` — Add `$SSH_TTY` as primary target before `who -m` fallback:
+   ```bash
+   if [ -n "$SSH_TTY" ]; then
+     printf '%s' "$seq" > "$SSH_TTY" 2>/dev/null || true
+   fi
+   ```
+2. `scripts/tmux/genie.tmux.conf` — Wrap mouse setting: `if-shell '[ "$GENIE_TMUX_MOUSE" != "off" ]' 'set -g mouse on'`
+3. `scripts/tmux/tui-tmux.conf` — Same conditional mouse wrapping.
+4. `src/term-commands/serve.ts` — Conditional `set-option mouse on` only when `GENIE_TMUX_MOUSE !== 'off'`.
+5. Update `src/__tests__/tmux-config.test.ts` if tests assert unconditional `mouse on`.
+
+**Acceptance Criteria:**
+- [ ] `osc52-copy.sh` tries `$SSH_TTY` before `who -m`
+- [ ] `GENIE_TMUX_MOUSE=off genie serve` starts without mouse capture
+- [ ] Default (no env var) preserves current mouse-on behavior
+- [ ] Existing tmux config tests pass
+
+**Validation:**
+```bash
+cd repos/genie && grep -q 'SSH_TTY' scripts/tmux/osc52-copy.sh && echo "PASS: SSH_TTY present" || exit 1
+grep -q 'GENIE_TMUX_MOUSE' scripts/tmux/genie.tmux.conf && echo "PASS: mouse opt-out present" || exit 1
+npx tsc --noEmit && npx biome check src/
+```
+
+**depends-on:** none
+
+---
+
+### Group 6: Inbox Delivery Retry + Escalation
+**Goal:** Stop messages from silently vanishing when target agent is unreachable.
+
+**Deliverables:**
+1. `src/db/migrations/031_mailbox_delivery_status.sql` — Add columns to `mailbox` table: `delivery_status TEXT DEFAULT 'pending'` (pending/delivered/failed/escalated), `delivery_attempts INT DEFAULT 0`. Backfill: set existing rows with `delivered_at IS NOT NULL` to `delivery_status = 'delivered'`.
+2. `src/lib/mailbox.ts` — Add `markFailed(messageId)` (increment attempts, set status=failed), `getRetryable(maxAttempts)` (return failed messages with attempts < max), `markEscalated(messageId)`.
+3. `src/lib/protocol-router.ts` — In `deliverToPane()`, on failure call `mailbox.markFailed()` instead of silent return.
+4. `src/lib/scheduler-daemon.ts` — New retry loop every 60s: `getRetryable(3)` → attempt `deliverToPane()` → on 3rd failure call `mailbox.markEscalated()` + send escalation to team-lead via mailbox.
+5. `src/lib/team-auto-spawn.ts` — Add `isAgentAlive(agentName): Promise<boolean>` that checks if the specific agent's pane exists (not just the team window). Export for use by inbox-watcher.
+6. `src/lib/inbox-watcher.ts` — Use `isAgentAlive` for per-recipient check alongside existing `isTeamActive`.
+
+**Acceptance Criteria:**
+- [ ] Failed delivery increments `delivery_attempts` and sets `delivery_status = 'failed'`
+- [ ] Retry loop picks up failed messages and re-attempts delivery
+- [ ] After 3 failures, message is escalated to team-lead
+- [ ] `isAgentAlive` correctly detects dead agent panes
+- [ ] Existing mailbox tests pass
+
+**Validation:**
+```bash
+cd repos/genie && npx tsc --noEmit && npx biome check src/
+```
+
+**depends-on:** none
+
+---
+
+## QA Criteria
+
+_What must be verified on dev after merge._
+
+- [ ] Spawn agent with default frontmatter → tools execute without approval prompt (no deadlock)
+- [ ] Spawn agent with `permissionMode: remoteApproval` → tool use triggers approval request in PG
+- [ ] Approve via app chat → agent resumes, tool executes
+- [ ] Approve via WhatsApp reply "y" → agent resumes within 2s
+- [ ] Deny via WhatsApp reaction 👎 → agent gets deny, continues gracefully
+- [ ] Timeout with no response → auto-deny after configured timeout
+- [ ] SSH session: drag-select text, Cmd+C copies to clipboard (via OSC52)
+- [ ] `GENIE_TMUX_MOUSE=off` → Cmd+C works natively without OSC52
+- [ ] Send message to dead agent → message retried 3x → escalated to team-lead
+- [ ] No regressions: `tsc --noEmit`, `biome check`, existing test suite green
+
+## Assumptions / Risks
+
+| Risk | Severity | Mitigation |
+|------|----------|------------|
+| PG LISTEN missed → hook blocks forever | High | 300s timeout + safety-net polling every 5s |
+| Multiple approvals flood WhatsApp | Medium | Rate limit: batch if >3 pending within 10s |
+| Approval latency slows agent execution | Medium | Only `remoteApproval` mode — `bypassPermissions` remains default |
+| PG approvals table grows unbounded | Low | TTL cleanup: resolved approvals >7d auto-purged by scheduler |
+| `$SSH_TTY` not set in all SSH configs | Low | Fallback chain: `$SSH_TTY` → `who -m` → stdout passthrough |
+| Inbox retry storms on dead agents | Low | Max 3 retries then escalate once and stop |
+| Omni not configured | Low | App UI works independently. If neither configured, timeout auto-denies. |
+
+## Review Results
+
+_Populated by `/review` after execution completes._
+
+---
+
+## Files to Create/Modify
+
+```
+# Group 1 — Permission Fix
+src/lib/providers/claude-sdk.ts                    (modify — spread order, strip permissionMode, ensureTeammate)
+src/templates/index.ts                             (modify — scaffold default)
+src/templates/genie-agents.md                      (modify — scaffold default)
+src/lib/defaults.ts                                (modify — builtin default)
+src/lib/providers/__tests__/claude-sdk.test.ts     (modify — update assertions)
+src/__tests__/defaults.test.ts                     (modify — update assertions)
+src/__tests__/mini-wizard.test.ts                  (modify — update assertions)
+
+# Group 2 — Remote Approval Core
+src/db/migrations/030_approvals.sql                (create)
+src/lib/providers/claude-sdk-remote-approval.ts    (create)
+src/lib/providers/claude-sdk.ts                    (modify — wire remoteApproval hook)
+src/lib/workspace.ts                               (modify — permissions schema)
+src/term-commands/approval.ts                      (create)
+src/genie.ts                                       (modify — register approval commands)
+
+# Group 3 — Omni Approval Frontend
+src/lib/providers/claude-sdk-remote-approval.ts    (modify — add Omni send)
+src/lib/omni-approval-handler.ts                   (create — incoming message matching)
+
+# Group 4 — App Approval Frontend
+packages/genie-app/src-backend/index.ts            (modify — approval NATS subjects)
+packages/genie-app/views/shared/ApprovalToast.tsx  (create)
+packages/genie-app/views/shared/ApprovalMessage.tsx (create)
+packages/genie-app/src/App.tsx                     (modify — wire toast subscription)
+packages/genie-app/lib/subjects.ts                 (modify — add approval subjects)
+
+# Group 5 — OSC52 Clipboard Fix
+scripts/tmux/osc52-copy.sh                         (modify — SSH_TTY primary)
+scripts/tmux/genie.tmux.conf                       (modify — conditional mouse)
+scripts/tmux/tui-tmux.conf                         (modify — conditional mouse)
+src/term-commands/serve.ts                          (modify — conditional mouse)
+src/__tests__/tmux-config.test.ts                  (modify — update assertions)
+
+# Group 6 — Inbox Delivery Retry
+src/db/migrations/031_mailbox_delivery_status.sql  (create)
+src/lib/mailbox.ts                                 (modify — markFailed, getRetryable, markEscalated)
+src/lib/protocol-router.ts                         (modify — call markFailed on delivery failure)
+src/lib/scheduler-daemon.ts                        (modify — retry loop)
+src/lib/team-auto-spawn.ts                         (modify — isAgentAlive)
+src/lib/inbox-watcher.ts                           (modify — per-agent check)
+```

package/.genie/wishes/_archive/brain-embeddings/WISH.md

@@ -0,0 +1,72 @@
+# Wish: brain-embeddings — Gemini Embedding 2, Vector Search, Multimodal
+
+| Field | Value |
+|-------|-------|
+| **Status** | SHIPPED (verified 2026-04-08) |
+| **Slug** | `brain-embeddings` |
+| **Date** | 2026-03-27 |
+| **Parent** | [brain-obsidian](../brain-obsidian/WISH.md) |
+| **depends-on** | `brain-foundation` |
+| **blocks** | `brain-intelligence` (semantic linking needs vectors) |
+
+## Summary
+
+Add Gemini Embedding 2 Preview as the embedding engine. All 8 task types. Multimodal: text, images (PNG/JPEG), video (MP4/MOV ≤120s), audio (MP3/WAV ≤80s), PDF (≤6 pages). pgvector + pg_trgm extensions. RRF fusion (BM25 + vector + trigram). Media processing pipeline (ffmpeg format conversion, frame extraction, audio extraction from video). Matryoshka dimensions (768/1536/3072). Batch API (50% cheaper). Intent detection (regex vs NL vs symbol vs question vs claim).
+
+**After this ships:** `genie brain search` finds meaning, not just keywords. Images, videos, and PDFs are searchable. Cross-modal search works (text query → image result).
+
+## Scope
+
+### IN
+- Migration `002-brain-embeddings.sql`: pgvector + pg_trgm extensions, add embedding/media columns to brain_chunks and brain_documents
+- `src/lib/brain/embedding.ts` — Gemini Embedding 2 client: all 8 task types, Matryoshka, Batch API, normalization for <3072 dims
+- `src/lib/brain/media.ts` — format conversion (ffmpeg), frame extraction, audio extraction from video, derivative files (.desc.md, .transcript.md, .frames/)
+- `src/lib/brain/intent.ts` — query intent detection: regex vs NL vs symbol vs question vs claim → route to optimal backend
+- Extend `update.ts` — multimodal processing: images, video, audio, PDF. Auto-describe via Gemini Vision. Transcription (Groq → Gemini fallback). Double indexing.
+- Extend `search.ts` — vector search (pgvector cosine), trigram (pg_trgm), RRF fusion (4 backends), cross-modal search (--image, --audio, --video), --modality filter, --task code, --intent
+- Extend `brain_chunks` — embedding vector(3072), embed_model, embed_task, embed_dims, modality, media_path columns
+- Extend `brain_documents` — description column (Gemini Vision auto-descriptions)
+- `genie brain search` gains: --semantic, --hybrid, --task, --intent, --image, --audio, --video, --modality, --refs, --outline
+- Absorbed from qmd: RRF fusion (~80 lines), search pipeline orchestration (~200 lines)
+- Absorbed from grepika: intent detection patterns (~60 lines)
+
+### OUT
+- rlmx / analyze (brain-intelligence)
+- Wikilinks / link command (brain-intelligence)
+- Traces / strategy (brain-observability)
+- Full identity (brain-identity-impl)
+
+## Success Criteria
+
+- [ ] pgvector and pg_trgm extensions loaded in pgserve
+- [ ] `genie brain update` embeds text chunks via Gemini Embedding 2 (3072 dims stored in pgvector)
+- [ ] `genie brain update` processes images (PNG/JPEG), generates .desc.md, embeds image + description
+- [ ] `genie brain update` processes video (MP4/MOV ≤120s): embeds raw video, extracts audio separately, transcribes, embeds transcript
+- [ ] `genie brain update` processes audio (MP3/WAV ≤80s): embeds raw audio, transcribes, embeds transcript
+- [ ] `genie brain update` processes PDF (≤6 pages): embeds raw PDF, extracts text, embeds text chunks
+- [ ] Unsupported formats auto-converted (OGG→MP3, WebP→PNG, etc.)
+- [ ] `genie brain search "query" --semantic` returns vector cosine results
+- [ ] `genie brain search "query" --hybrid` combines BM25 + vector + trigram via RRF
+- [ ] `genie brain search screenshot.png` returns cross-modal results (text docs matching image)
+- [ ] `genie brain search --task code "how does dispatch work"` uses CODE_RETRIEVAL_QUERY
+- [ ] Intent auto-detection: questions → Q&A, claims → FACT_VERIFICATION, docids → similar
+- [ ] `genie brain update --estimate` shows cost before processing
+- [ ] `genie brain update --budget 0.50` caps spending
+- [ ] `genie brain update --batch` uses Batch API (50% cheaper)
+- [ ] Matryoshka: --dims flag on init, L2 normalization for <3072
+- [ ] `bun run check` passes
+
+## Files to Create/Modify
+
+```
+CREATE  repos/genie-brain/src/db/migrations/002-brain-embeddings.sql
+CREATE  repos/genie-brain/src/lib/brain/embedding.ts
+CREATE  repos/genie-brain/src/lib/brain/media.ts
+CREATE  repos/genie-brain/src/lib/brain/intent.ts
+MODIFY  repos/genie-brain/src/lib/brain/update.ts          (multimodal processing)
+MODIFY  repos/genie-brain/src/lib/brain/search.ts          (vector + trigram + RRF + cross-modal)
+MODIFY  repos/genie-brain/package.json                     (add google-genai SDK)
+
+CREATE  repos/genie-brain/src/lib/brain/embedding.test.ts
+CREATE  repos/genie-brain/src/lib/brain/media.test.ts
+```