@botcord/daemon 0.2.4 → 0.2.6

package/src/system-context.ts

@@ -6,10 +6,11 @@
  * `RuntimeRunOptions.systemContext`. This module composes the daemon's
  * system-context string from:
  *
- *   1. `[BotCord Scene: Owner Chat]` (owner-trust turns only)
- *   2. `[BotCord Working Memory]`
- *   3. `[BotCord Room Context]` (group rooms, via optional async fetcher)
- *   4. `[BotCord Cross-Room Awareness]` (optional activity tracker)
+ *   1. `[BotCord Identity]` (read fresh from workspace/identity.md each turn)
+ *   2. `[BotCord Scene: Owner Chat]` (owner-trust turns only)
+ *   3. `[BotCord Working Memory]`
+ *   4. `[BotCord Room Context]` (group rooms, via optional async fetcher)
+ *   5. `[BotCord Cross-Room Awareness]` (optional activity tracker)
  *
  * Behavior:
  *   - Working memory is loaded fresh per turn, so a `memory set` from another
@@ -26,6 +27,7 @@ import type { GatewayInboundMessage, SystemContextBuilder } from "./gateway/inde
 import type { ActivityTracker } from "./activity-tracker.js";
 import { buildCrossRoomDigest } from "./cross-room.js";
 import { buildWorkingMemoryPrompt, readWorkingMemory } from "./working-memory.js";
+import { readIdentity } from "./agent-workspace.js";
 import { classifyActivitySender } from "./sender-classify.js";
 import { log } from "./log.js";
 
@@ -86,6 +88,31 @@ function safeReadWorkingMemory(agentId: string) {
   }
 }
 
+/**
+ * Read identity.md and wrap it as a system-context block. Placed before
+ * every other block so the agent answers "who are you" from this file
+ * rather than from the underlying CLI's default persona ("I am Claude
+ * Code"). Re-read every turn so dashboard reconcile (`applyAgentIdentity`)
+ * and self-edits take effect immediately, mirroring working-memory
+ * semantics.
+ */
+function buildIdentityPrompt(agentId: string): string | null {
+  let raw: string | null = null;
+  try {
+    raw = readIdentity(agentId);
+  } catch (err) {
+    log.warn("identity read failed", { agentId, err: String(err) });
+    return null;
+  }
+  if (!raw) return null;
+  return [
+    "[BotCord Identity]",
+    "Your persistent identity card. The fields below are the source of truth — when asked who you are, what you do, or what you will / will not do, answer from this block, not from the underlying CLI's default persona.",
+    "",
+    raw.trim(),
+  ].join("\n");
+}
+
 /**
  * Build a {@link SystemContextBuilder} for the gateway dispatcher.
  *
@@ -97,10 +124,13 @@ export function createDaemonSystemContextBuilder(
   deps: SystemContextDeps,
 ): (message: GatewayInboundMessage) => Promise<string | undefined> | string | undefined {
   const gatherSyncBlocks = (message: GatewayInboundMessage): {
+    identity: string | null;
     ownerScene: string | null;
     memory: string | null;
     digest: string | null;
   } => {
+    const identity = buildIdentityPrompt(deps.agentId);
+
     const ownerScene =
       classifyActivitySender(message).kind === "owner"
         ? buildOwnerChatSceneContext()
@@ -118,7 +148,7 @@ export function createDaemonSystemContextBuilder(
         }) || null
       : null;
 
-    return { ownerScene, memory, digest };
+    return { identity, ownerScene, memory, digest };
   };
 
   const assemble = (parts: Array<string | null | undefined>): string | undefined => {
@@ -144,11 +174,12 @@ export function createDaemonSystemContextBuilder(
 
   if (!deps.roomContextBuilder) {
     const syncBuilder = (message: GatewayInboundMessage): string | undefined => {
-      const { ownerScene, memory, digest } = gatherSyncBlocks(message);
+      const { identity, ownerScene, memory, digest } = gatherSyncBlocks(message);
       // Loop-risk sits at the end so its "reply NO_REPLY unless…" guidance
       // is the last thing the model sees before the user turn body.
+      // Identity sits at the very front so it frames every other block.
       const loopRisk = runLoopRisk(message);
-      return assemble([ownerScene, memory, digest, loopRisk]);
+      return assemble([identity, ownerScene, memory, digest, loopRisk]);
     };
     // Compile-time witness that the narrower sync signature still satisfies
     // `SystemContextBuilder` (which allows async). Prevents the two contracts
@@ -162,11 +193,12 @@ export function createDaemonSystemContextBuilder(
   const asyncBuilder = async (
     message: GatewayInboundMessage,
   ): Promise<string | undefined> => {
-    const { ownerScene, memory, digest } = gatherSyncBlocks(message);
+    const { identity, ownerScene, memory, digest } = gatherSyncBlocks(message);
     // Room context landing order: after owner-scene / memory, before digest —
     // "what room am I in" belongs with the session's own identity, while the
     // cross-room digest deliberately describes OTHER rooms and should stay
     // last so it doesn't get confused with the current room.
+    // Identity stays at the very front; see syncBuilder for rationale.
     let roomBlock: string | null = null;
     try {
       roomBlock = await roomBuilder(message);
@@ -178,7 +210,7 @@ export function createDaemonSystemContextBuilder(
       });
     }
     const loopRisk = runLoopRisk(message);
-    return assemble([ownerScene, memory, roomBlock, digest, loopRisk]);
+    return assemble([identity, ownerScene, memory, roomBlock, digest, loopRisk]);
   };
   const _typecheck: SystemContextBuilder = asyncBuilder;
   void _typecheck;

package/src/turn-text.ts

@@ -34,6 +34,18 @@ const DIRECT_HINT =
   '[If the conversation has naturally concluded or no response is needed, ' +
   'reply with exactly "NO_REPLY" and nothing else.]';
 
+/**
+ * Reminder appended to every wrapped (non-owner-chat) inbound message. The
+ * dispatcher discards `result.text` for any room that is not `rm_oc_*`, so
+ * the agent must call the `botcord_send` tool (or the `botcord send` CLI
+ * via Bash) to actually deliver a reply. Plain assistant text in those
+ * rooms is logged and dropped.
+ */
+const NON_OWNER_REPLY_HINT =
+  "[This room is NOT owner-chat. Plain text output WILL NOT be sent. " +
+  "To reply, call the `botcord_send` tool, or run " +
+  '`botcord send --room <room_id> --text "..."` via Bash.]';
+
 /**
  * Read the BotCord envelope type from a raw inbound message. Returns
  * `undefined` when the message didn't come from the BotCord channel or the
@@ -169,6 +181,8 @@ export function composeBotCordUserTurn(msg: GatewayInboundMessage): string {
     `</${tag}>`,
     "",
     hint,
+    "",
+    NON_OWNER_REPLY_HINT,
   ];
   if (contactRequestHint) {
     lines.push("", contactRequestHint);
@@ -223,7 +237,14 @@ function composeBatchedTurn(
   }
 
   const hint = isGroup ? GROUP_HINT : DIRECT_HINT;
-  const lines: string[] = [header.join(" | "), blocks.join("\n"), "", hint];
+  const lines: string[] = [
+    header.join(" | "),
+    blocks.join("\n"),
+    "",
+    hint,
+    "",
+    NON_OWNER_REPLY_HINT,
+  ];
 
   if (contactRequestSenders.length > 0) {
     // Dedup + list — multiple distinct senders show as "A, B".

package/src/url-utils.ts

@@ -0,0 +1,17 @@
+/**
+ * Append a `next` query param to a URL. Used by the device-code flow to
+ * encode a post-auth redirect target into the Hub-issued verification URL,
+ * so the dashboard knows where to send the user after they click Authorize.
+ *
+ * Falls back to returning the original URL string if parsing fails — the
+ * device-code flow keeps working, just without the redirect convenience.
+ */
+export function appendNextParam(url: string, next: string): string {
+  try {
+    const u = new URL(url);
+    u.searchParams.set("next", next);
+    return u.toString();
+  } catch {
+    return url;
+  }
+}

package/src/user-auth.ts

@@ -5,8 +5,6 @@
  * `~/.botcord/credentials/*.json`), the user-auth record is singular —
  * the daemon only logs in as *one* user at a time. Stored at
  * `~/.botcord/daemon/user-auth.json` with `0600` permissions.
- *
- * See `docs/daemon-control-plane-plan.md` §6–§7.
  */
 import {
   chmodSync,

package/src/working-memory.ts

@@ -2,7 +2,7 @@
  * Working memory — persistent, account-scoped notes injected into every turn.
  *
  * Stored at `~/.botcord/agents/{agentId}/state/working-memory.json` (the
- * per-agent state dir owned by the daemon; see docs/daemon-agent-workspace-plan.md §8).
+ * per-agent state dir owned by the daemon).
  *
  * Ported from plugin/src/memory.ts (dropping workspace + OpenClaw runtime
  * branches) and plugin/src/memory-protocol.ts (prompt builder).