@cohortapp/agent-sdk 2.9.1 → 2.11.0

package/scripts/disclosure_boundaries.py

@@ -9,8 +9,8 @@ Generates dynamic disclosure boundary guidance for a given recipient by:
      recent sensitive context, and excluded domains active
 
 Usage (CLI):
-  python3 scripts/disclosure_boundaries.py --recipient casey-morgan
-  python3 scripts/disclosure_boundaries.py --recipient alex-chen --hours 24
+  python3 scripts/disclosure_boundaries.py --recipient <profile-slug>
+  python3 scripts/disclosure_boundaries.py --recipient <profile-slug> --hours 24
 
 Exit codes:
   0 = always (profile not found prints to stderr and exits 0)
@@ -35,6 +35,57 @@ USER_PROFILES_DIR = REPO_ROOT / "memory" / "profiles" / "users"
 PROVENANCE_INDEX = REPO_ROOT / "memory" / "provenance" / "index.jsonl"
 
 
+# ─── Employer identity (config/company.json — the SOT) ───────────────────────
+# The clearance summary states a recipient's relationship to the agent's
+# EMPLOYER. That employer used to be a hardcoded name in the sentence, so every
+# deployment's clearance summaries named a company that does not exist. It now
+# comes from config/company.json, and when nothing is configured the sentence
+# says "the company" rather than inventing one.
+def _load_company() -> dict:
+    """Read config/company.json. Never raises."""
+    try:
+        with open(REPO_ROOT / "config" / "company.json") as f:
+            data = json.load(f)
+        return data if isinstance(data, dict) else {}
+    except Exception:
+        return {}
+
+
+def _configured(value) -> str:
+    """Trimmed config string, or '' when absent/UNCONFIGURED (both mean unset)."""
+    if not isinstance(value, str):
+        return ''
+    v = value.strip()
+    if not v or v.upper() == 'UNCONFIGURED':
+        return ''
+    return v
+
+
+COMPANY_NAME = _configured(_load_company().get('name'))
+
+
+def legacy_relationship_value(profile: dict) -> str:
+    """Read a profile's flat "relationship to the employer" field.
+
+    Canonical key: `relationship_to_company`. Profiles written before this was
+    de-hardcoded used `relationship_to_<employer-name>`, so ANY
+    `relationship_to_*` key is accepted rather than pinning one company name
+    into the reader.
+    """
+    if not isinstance(profile, dict):
+        return ''
+    primary = profile.get('relationship_to_company')
+    if isinstance(primary, str) and primary.strip():
+        return primary
+    for key in sorted(profile.keys()):
+        if not isinstance(key, str) or not key.startswith('relationship_to_'):
+            continue
+        value = profile.get(key)
+        if isinstance(value, str) and value.strip():
+            return value
+    return ''
+
+
 # ─── YAML Parser ─────────────────────────────────────────────────────────────
 # Custom minimal YAML parser — no PyYAML dependency (consistent with repo pattern).
 # Handles: top-level scalars, nested mappings, inline lists [a, b, c],
@@ -427,7 +478,7 @@ def _build_clearance_summary(profile: dict, boundaries: dict) -> str:
     name = profile.get('name') or profile.get('preferred_name') or 'Unknown'
     role = profile.get('role') or ''
     org = profile.get('organisation') or ''
-    relationship = profile.get('relationship_to_northwind') or ''
+    relationship = legacy_relationship_value(profile)
     domains_of_interest = boundaries.get('domains_of_interest') or []
     excluded_domains = boundaries.get('excluded_domains') or []
     conflicts = boundaries.get('conflicts') or []
@@ -446,7 +497,7 @@ def _build_clearance_summary(profile: dict, boundaries: dict) -> str:
     if org:
         parts.append(f"Organisation: {org}.")
     if relationship:
-        parts.append(f"Relationship to Northwind: {relationship}.")
+        parts.append(f"Relationship to {COMPANY_NAME or 'the company'}: {relationship}.")
 
     if domains_of_interest:
         parts.append(f"Permitted domains: {', '.join(str(d) for d in domains_of_interest)}.")
@@ -536,7 +587,7 @@ def main():
     parser.add_argument(
         '--recipient',
         required=True,
-        help="Recipient slug (e.g. casey-morgan)",
+        help="Recipient profile slug (memory/profiles/users/<slug>.yaml)",
     )
     parser.add_argument(
         '--hours',

package/scripts/huddle/huddle-prompt.test.mjs

@@ -0,0 +1,176 @@
+/**
+ * huddle-prompt.test.mjs — the huddle system prompt is SPOKEN ALOUD. It must
+ * never say anything the config does not know.
+ *
+ * WHAT BROKE
+ *   `buildHuddleSystemPrompt()` carried a five-bullet block headed
+ *   a shout-case `ABOUT <ONE-COMPANY>:` header whose body described a
+ *   completely different, equally
+ *   fictional company (a head office, a jurisdiction count, a product, a
+ *   licensing phase). Two non-current identities in one block is the tell that
+ *   no code path ever grounded it. The server `autoJoin`s incoming huddle
+ *   invitations, participants can include people outside the org, and every turn
+ *   is persisted to logs/huddle/*.jsonl — so this was a fabricated employer said
+ *   out loud to outsiders and then written to disk. The identity line above it
+ *   also interpolated `${a.company}` unconditionally, so an unconfigured seat
+ *   introduced itself as "… of .".
+ *
+ * WHAT THESE TESTS PIN
+ *   1. GROUNDED — every bullet in the company block traces to a field of
+ *      config/company.json (name, legalName, description, industry, stage,
+ *      jurisdictions, products, strategicPriorities), one for one.
+ *   2. EMPTY — an unpopulated (or scaffold-UNCONFIGURED) config produces NO
+ *      company block AT ALL and no dangling "at <blank>" clause. Saying nothing
+ *      about the employer is the correct outcome.
+ *
+ * HOW IT RUNS
+ *   huddle-server.mjs imports `dotenv` and `@anthropic-ai/sdk`, neither of which
+ *   is a dependency of this package (only better-sqlite3 + js-yaml are), so the
+ *   module cannot be imported in-process here. The renderers are pure and
+ *   dependency-free, so we lift their REAL source out of the shipped file and
+ *   evaluate that — the text under test is exactly the text that ships, and
+ *   deleting/renaming a renderer fails this file rather than silently skipping.
+ *
+ * Run: node --test scripts/huddle/huddle-prompt.test.mjs
+ */
+
+"use strict";
+
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { readFileSync } from "node:fs";
+
+const SRC = readFileSync(new URL("./huddle-server.mjs", import.meta.url), "utf8");
+
+/**
+ * Slice one top-level `function NAME(...) { ... }` out of a source file by
+ * brace matching. Throws when the function is absent — a rename or deletion is
+ * a test failure, not a skip.
+ */
+function extractFunction(src, name) {
+  const re = new RegExp(`(?:export\\s+)?function\\s+${name}\\s*\\(`);
+  const m = re.exec(src);
+  assert.ok(m, `huddle-server.mjs no longer defines ${name}() — update this test deliberately`);
+  const open = src.indexOf("{", m.index + m[0].length - 1);
+  let depth = 0;
+  for (let i = open; i < src.length; i++) {
+    const c = src[i];
+    if (c === "{") depth++;
+    else if (c === "}") {
+      depth--;
+      if (depth === 0) return src.slice(m.index, i + 1).replace(/^export\s+/, "");
+    }
+  }
+  throw new Error(`unbalanced braces extracting ${name}`);
+}
+
+const names = ["configuredStr", "configuredList", "renderHuddleCompanyBlock", "renderHuddleIdentityLine"];
+const body = names.map((n) => extractFunction(SRC, n)).join("\n\n");
+// eslint-disable-next-line no-new-func
+const mod = new Function(`${body}\nreturn { ${names.join(", ")} };`)();
+const { renderHuddleCompanyBlock, renderHuddleIdentityLine } = mod;
+
+// ── 1. GROUNDED ─────────────────────────────────────────────────────────────
+
+const REAL_COMPANY = {
+  name: "Meridian Freight",
+  legalName: "Meridian Freight Holdings Ltd",
+  description: "A regional logistics operator moving temperature-controlled freight.",
+  industry: "Logistics",
+  stage: "Series B",
+  jurisdictions: ["Ireland", "United Kingdom"],
+  products: ["Meridian Cold Chain", "Meridian Track"],
+  strategicPriorities: ["Open the Cork depot", "Cut empty-mile rate below 12%"],
+};
+
+test("grounded: every bullet traces to a config/company.json field", () => {
+  const block = renderHuddleCompanyBlock(REAL_COMPANY);
+  assert.match(block, /^ABOUT MERIDIAN FREIGHT:/);
+  assert.match(block, /A regional logistics operator moving temperature-controlled freight\./);
+  assert.match(block, /Industry: Logistics/);
+  assert.match(block, /Legal entity: Meridian Freight Holdings Ltd/);
+  assert.match(block, /Jurisdictions: Ireland, United Kingdom/);
+  assert.match(block, /Products: Meridian Cold Chain, Meridian Track/);
+  assert.match(block, /Stage: Series B/);
+  assert.match(block, /Current priorities: Open the Cork depot; Cut empty-mile rate below 12%/);
+});
+
+test("grounded: a partially-filled config renders only the fields it has", () => {
+  const block = renderHuddleCompanyBlock({ name: "Meridian Freight", industry: "Logistics" });
+  assert.match(block, /^ABOUT MERIDIAN FREIGHT:/);
+  assert.match(block, /Meridian Freight operates in Logistics/);
+  assert.doesNotMatch(block, /Jurisdictions:/);
+  assert.doesNotMatch(block, /Products:/);
+  assert.doesNotMatch(block, /Stage:/);
+  assert.doesNotMatch(block, /Current priorities:/);
+});
+
+test("grounded: the identity line names the real employer and principal", () => {
+  const line = renderHuddleIdentityLine(
+    {
+      fullName: "Robin Okafor",
+      title: "VP Operations",
+      company: "",
+      principal: { fullName: "Dana Lee", title: "CEO" },
+    },
+    REAL_COMPANY,
+  );
+  assert.match(line, /^You are Robin Okafor, VP Operations at Meridian Freight\./m);
+  assert.match(line, /^You report to Dana Lee, CEO\./m);
+  assert.match(line, /Slack huddle/);
+});
+
+// ── 2. EMPTY — no config, no claim ──────────────────────────────────────────
+
+test("empty: the scaffold's UNCONFIGURED company yields NO company block at all", () => {
+  const scaffold = {
+    name: "UNCONFIGURED",
+    legalName: "",
+    description: "",
+    industry: "",
+    stage: "",
+    jurisdictions: [],
+    products: [],
+    strategicPriorities: [],
+  };
+  assert.equal(renderHuddleCompanyBlock(scaffold), "", "silence is the correct outcome");
+});
+
+test("empty: a missing/garbage config yields NO company block", () => {
+  assert.equal(renderHuddleCompanyBlock({}), "");
+  assert.equal(renderHuddleCompanyBlock(null), "");
+  assert.equal(renderHuddleCompanyBlock(undefined), "");
+  assert.equal(renderHuddleCompanyBlock("nonsense"), "");
+});
+
+test("empty: no employer ⇒ the identity line drops the 'at <company>' clause", () => {
+  const line = renderHuddleIdentityLine(
+    { fullName: "Robin Okafor", title: "VP Operations", company: "", principal: {} },
+    { name: "UNCONFIGURED" },
+  );
+  assert.match(line, /^You are Robin Okafor, VP Operations\.$/m);
+  assert.doesNotMatch(line, / at /);
+  assert.doesNotMatch(line, /UNCONFIGURED/);
+  assert.doesNotMatch(line, /You report to/, "no principal on record ⇒ no reporting line");
+});
+
+test("empty: no identity at all ⇒ no persona is asserted, only the setting", () => {
+  const line = renderHuddleIdentityLine({}, {});
+  assert.equal(line, "You are participating in a Slack huddle — a real-time voice conversation.");
+});
+
+// ── 3. The fabricated block is gone from the shipped source ─────────────────
+
+test("the shipped prompt carries no invented employer, jurisdiction or product", () => {
+  assert.doesNotMatch(SRC, /\bNorthwind\b/i);
+  // No shout-case literal company header of ANY name survives — the header is
+  // built as `ABOUT ${name.toUpperCase()}:` from config, so a literal one is a
+  // regression by construction.
+  assert.doesNotMatch(SRC, /ABOUT [A-Z]{4,}:/);
+  assert.doesNotMatch(SRC, /\bDIFC\b/);
+  assert.doesNotMatch(SRC, /Currently in regulatory licensing phase/i);
+  assert.doesNotMatch(SRC, /global AI-native institutional asset management/i);
+  // The company block must be a render call, not a literal.
+  assert.match(SRC, /renderHuddleCompanyBlock\(co\)/);
+  assert.match(SRC, /\$\{companyBlock \? /, "the block is conditional on there being one");
+});

package/scripts/huddle/huddle-server.mjs

@@ -1139,11 +1139,126 @@ class HuddleServer extends EventEmitter {
 // Huddle-specific system prompt
 // ---------------------------------------------------------------------------
 
-function buildHuddleSystemPrompt() {
+/**
+ * A config value the operator has not filled in yet.
+ *
+ * The scaffold ships `"name": "UNCONFIGURED"` in config/company.json and empty
+ * strings/arrays everywhere else, so BOTH shapes mean "absent". Treating only
+ * `""` as absent is what let "UNCONFIGURED" reach a prompt.
+ *
+ * @param {*} v
+ * @returns {string} trimmed value, or "" when absent/unconfigured
+ */
+export function configuredStr(v) {
+  const s = typeof v === "string" ? v.trim() : (typeof v === "number" ? String(v) : "");
+  if (!s) return "";
+  if (s.toUpperCase() === "UNCONFIGURED") return "";
+  return s;
+}
+
+/** Normalise a config array to clean strings; drops blanks and UNCONFIGURED. */
+function configuredList(v) {
+  if (!Array.isArray(v)) return [];
+  return v
+    .map((x) => (x && typeof x === "object" ? configuredStr(x.name) || configuredStr(x.title) : configuredStr(x)))
+    .filter(Boolean);
+}
+
+/**
+ * Render the "about the company" section of the huddle prompt from
+ * config/company.json — the SoT that lib/setup/enroll-from-cohort.mjs syncs
+ * from Cohort.
+ *
+ * WHY THIS IS A FUNCTION AND NOT A STRING LITERAL
+ *   This block used to be five hardcoded bullets under an `ABOUT <X>:`
+ *   header naming one fictional company whose body then described a
+ *   DIFFERENT, equally fictional one (a head office, a jurisdiction count and
+ *   a licensing phase, none of them the header's). Two non-current identities
+ *   in one block is the tell that no code path ever grounded it. This text is SPOKEN ALOUD, on a huddle the server auto-joins
+ *   (`this.autoJoin = true`), to participants who can include people outside
+ *   the org, and the turn is persisted to logs/huddle/*.jsonl. A fabricated
+ *   employer said out loud to an outside participant cannot be retracted.
+ *
+ * FAIL CLOSED. Every line is conditional on a real value. When config/company.json
+ * is untouched (the scaffold ships it as UNCONFIGURED + empty) this returns ""
+ * and the prompt carries NO company section at all. Saying nothing about the
+ * employer is correct behaviour; saying something invented is not.
+ *
+ * @param {object} co parsed config/company.json
+ * @returns {string} the section (no trailing newline), or "" when nothing is known
+ */
+export function renderHuddleCompanyBlock(co) {
+  const c = co && typeof co === "object" ? co : {};
+  const name = configuredStr(c.name);
+  const legalName = configuredStr(c.legalName);
+  const description = configuredStr(c.description);
+  const industry = configuredStr(c.industry);
+  const stage = configuredStr(c.stage);
+  const jurisdictions = configuredList(c.jurisdictions);
+  const products = configuredList(c.products);
+  const priorities = configuredList(c.strategicPriorities);
+
+  const bullets = [];
+  if (description) bullets.push(`- ${description}`);
+  else if (industry) bullets.push(`- ${name || "The company"} operates in ${industry}`);
+  if (industry && description) bullets.push(`- Industry: ${industry}`);
+  if (legalName && legalName !== name) bullets.push(`- Legal entity: ${legalName}`);
+  if (jurisdictions.length) bullets.push(`- Jurisdictions: ${jurisdictions.join(", ")}`);
+  if (products.length) bullets.push(`- Products: ${products.join(", ")}`);
+  if (stage) bullets.push(`- Stage: ${stage}`);
+  if (priorities.length) bullets.push(`- Current priorities: ${priorities.join("; ")}`);
+
+  if (bullets.length === 0) return "";
+  const header = name ? `ABOUT ${name.toUpperCase()}:` : "ABOUT THE COMPANY:";
+  return [header, ...bullets].join("\n");
+}
+
+/**
+ * The identity line. Same omission rule as lib/identity/persona.mjs#renderPersona:
+ * an unset field drops its clause rather than taking a plausible default. The
+ * previous line interpolated `${a.company}` unconditionally, so an unconfigured
+ * seat introduced itself as "… of ." on a live call.
+ *
+ * @param {object} a config/agent.json
+ * @param {object} co config/company.json
+ * @returns {string}
+ */
+export function renderHuddleIdentityLine(a, co) {
+  const name = configuredStr(a.fullName) ||
+    [configuredStr(a.firstName), configuredStr(a.lastName)].filter(Boolean).join(" ").trim();
+  const title = configuredStr(a.title);
+  const company = configuredStr(a.company) || configuredStr(co && co.name);
+  const principal = (a.principal && typeof a.principal === "object") ? a.principal : {};
+  const pName = configuredStr(principal.fullName) || configuredStr(principal.firstName);
+  const pTitle = configuredStr(principal.title);
+
+  const who = [name, title].filter(Boolean).join(", ");
+  if (!who) {
+    // Nothing on record. Do not invent a persona — state the role of the seat
+    // in the conversation and nothing more.
+    return "You are participating in a Slack huddle — a real-time voice conversation.";
+  }
+  const at = company ? ` at ${company}` : "";
+  const lines = [`You are ${who}${at}.`];
+  if (pName) lines.push(pTitle ? `You report to ${pName}, ${pTitle}.` : `You report to ${pName}.`);
+  lines.push("You are participating in a Slack huddle — a real-time voice conversation.");
+  return lines.join("\n");
+}
+
+/** Read config/company.json from the agent repo. Never throws. */
+function loadCompany() {
+  try {
+    return JSON.parse(readFileSync(join(AGENT_REPO_DIR, "config/company.json"), "utf-8"));
+  } catch {
+    return {};
+  }
+}
+
+export function buildHuddleSystemPrompt() {
   const a = loadAgent();
-  const principal = a.principal || {};
-  return `You are ${a.fullName}, ${a.title} to ${principal.fullName || "the principal"}, ${principal.title || "the principal"} of ${a.company}.
-You are participating in a Slack huddle — a real-time voice conversation.
+  const co = loadCompany();
+  const companyBlock = renderHuddleCompanyBlock(co);
+  return `${renderHuddleIdentityLine(a, co)}
 
 PERSONALITY:
 - Sound like a thoughtful colleague, not an assistant. Full guide: policies/communication-style.md
@@ -1159,15 +1274,8 @@ BANNED OPENERS AND PHRASES (do not use):
 - "As an AI" / "As a language model" / "I should clarify that…"
 - "I hope this helps" / "Feel free to ask if you have any questions"
 - "Here's a comprehensive overview of…"
-- Don't re-introduce yourself by listing your role at length. "Hi, this is ${a.firstName || "the agent"}" is enough.
-
-ABOUT ADAPTIC:
-- Northwind is a global AI-native institutional asset management group
-- Headquartered in DIFC, Dubai with entities across seven plus jurisdictions
-- CEO and founder: the principal (resolved from config/agent.json)
-- Building Northwind OS, an algorithmic trading platform
-- Currently in regulatory licensing phase
-
+- Don't re-introduce yourself by listing your role at length. "Hi, this is ${configuredStr(a.firstName) || "the agent"}" is enough.
+${companyBlock ? `\n${companyBlock}\n` : ""}
 HUDDLE RULES:
 - Huddles are informal — keep responses short and natural
 - Listen more than you talk — do not dominate the conversation
@@ -1199,6 +1307,13 @@ const HUDDLE_SYSTEM_PROMPT = buildHuddleSystemPrompt();
 
 // ---------------------------------------------------------------------------
 // Main
+//
+// NOTE: this bootstrap deliberately runs on IMPORT, not behind an
+// `import.meta.url === process.argv[1]` entrypoint guard. Such a guard compares
+// a symlink-resolved path against an unresolved argv[1], so a repo reached
+// through a symlink would start NOTHING, silently, on a voice server that is
+// supposed to be listening. The prompt renderers are tested without importing
+// this module (see huddle-prompt.test.mjs) precisely so this stays as it is.
 // ---------------------------------------------------------------------------
 
 const server = new HuddleServer();

package/scripts/local-triggers/autoupdate.sh

@@ -0,0 +1,83 @@
+#!/bin/bash
+# =============================================================================
+# autoupdate.sh — keep @cohortapp/agent-sdk at @latest, health-gated + rollback
+# =============================================================================
+# Runs hourly via the ai.maestro.<first>-autoupdate launchd job. Policy is
+# "auto to @latest": whenever npm's latest is a strictly-greater semver than the
+# installed SDK, this installs it, smart-merges the copied framework files
+# (`maestro upgrade`), restarts the daemon, and VERIFIES the daemon comes back
+# healthy — rolling back to the prior version if it does not.
+#
+# Safety rails:
+#   - kill-switch: `touch ~/.maestro-no-autoupdate` (or $AGENT_DIR/.no-autoupdate)
+#     halts all auto-updates fleet-wide without unloading the job.
+#   - jitter 0-600s so 15 machines don't hit npm / restart in lockstep.
+#   - re-exec from a /tmp copy so `maestro upgrade` overwriting THIS file
+#     mid-run cannot corrupt the running shell.
+#   - health-gate + automatic rollback to the previous version on a bad release.
+# =============================================================================
+set -uo pipefail
+export PATH="/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:${PATH:-}"
+
+# Re-exec from a stable copy: `maestro upgrade` may overwrite this very file.
+if [ "${MAESTRO_AUTOUPDATE_REEXEC:-}" != "1" ]; then
+  _tmp="$(mktemp "${TMPDIR:-/tmp}/maestro-autoupdate.XXXXXX")" || exit 0
+  cp "${BASH_SOURCE[0]}" "$_tmp" 2>/dev/null || exit 0
+  MAESTRO_AUTOUPDATE_REEXEC=1 exec /bin/bash "$_tmp" "$@"
+fi
+
+AGENT_DIR="${AGENT_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)}"
+cd "$AGENT_DIR" 2>/dev/null || exit 0
+PKG="@cohortapp/agent-sdk"
+LOG_DIR="$AGENT_DIR/logs/autoupdate"; mkdir -p "$LOG_DIR" 2>/dev/null
+LOG="$LOG_DIR/$(date +%Y-%m-%d).log"
+log(){ echo "[$(date -u +%FT%TZ)] $*" >> "$LOG" 2>/dev/null; }
+
+# ── kill-switch ──────────────────────────────────────────────────────────────
+if [ -e "$HOME/.maestro-no-autoupdate" ] || [ -e "$AGENT_DIR/.no-autoupdate" ]; then
+  log "SKIP: kill-switch present"; exit 0
+fi
+
+# ── jitter ───────────────────────────────────────────────────────────────────
+J=$(( RANDOM % 601 )); log "wake; jitter ${J}s"; sleep "$J"
+
+# ── version check ────────────────────────────────────────────────────────────
+CUR="$(node -p "require('$AGENT_DIR/node_modules/$PKG/package.json').version" 2>/dev/null || echo 0.0.0)"
+LATEST="$(npm view "$PKG" version 2>/dev/null || echo '')"
+[ -z "$LATEST" ] && { log "npm view failed; skip (still $CUR)"; exit 0; }
+if [ "$CUR" = "$LATEST" ] || [ "$(printf '%s\n%s\n' "$CUR" "$LATEST" | sort -V | tail -1)" != "$LATEST" ]; then
+  log "up to date ($CUR)"; exit 0
+fi
+log "UPDATE $CUR -> $LATEST"
+
+DAEMON_PLIST="$(ls "$HOME"/Library/LaunchAgents/ai.maestro.*-daemon.plist 2>/dev/null | head -1)"
+DAEMON_LABEL="$(basename "$DAEMON_PLIST" .plist 2>/dev/null)"
+UID_="$(id -u)"
+DLOG="$AGENT_DIR/logs/daemon/daemon-$(date +%Y-%m-%d).log"
+
+restart_daemon(){ [ -n "$DAEMON_LABEL" ] && launchctl kickstart -k "gui/$UID_/$DAEMON_LABEL" >> "$LOG" 2>&1; }
+apply_version(){ # $1 = version spec
+  npm install "$PKG@$1" --save >> "$LOG" 2>&1 || return 1
+  node "$AGENT_DIR/node_modules/$PKG/bin/maestro.mjs" upgrade --force-overwrite >> "$LOG" 2>&1 || log "WARN: upgrade nonzero for $1"
+  return 0
+}
+is_healthy(){ # daemon process alive AND a fresh boot/connect line
+  pgrep -f "$AGENT_DIR/scripts/daemon/maestro-daemon.mjs" >/dev/null 2>&1 || return 1
+  tail -80 "$DLOG" 2>/dev/null | grep -qE "org-mesh connected|daemon\] Running" || return 1
+  return 0
+}
+
+if ! apply_version "$LATEST"; then
+  log "npm install FAILED; aborting, staying on $CUR"; exit 1
+fi
+restart_daemon
+sleep 30
+if is_healthy; then
+  log "OK: healthy on $LATEST"
+else
+  log "UNHEALTHY on $LATEST -> ROLLBACK to $CUR"
+  apply_version "$CUR" || log "WARN: rollback install nonzero"
+  restart_daemon
+  sleep 20
+  is_healthy && log "rolled back to $CUR (healthy)" || log "ROLLBACK health still failing on $CUR — needs operator"
+fi

package/scripts/local-triggers/generate-plists.sh

@@ -293,6 +293,15 @@ generate_plist "ai.maestro.${AGENT_FIRST}-slack-socket" \
     "${AGENT_DIR}/scripts/cadence/launchd-socket-mode-wrapper.sh" \
     "" "" "true"
 
+# 2c. SDK auto-updater (hourly + in-script jitter). Keeps @cohortapp/agent-sdk at
+#     @latest: installs a strictly-newer published version, smart-merges the
+#     copied framework files (`maestro upgrade`), restarts the daemon, and rolls
+#     back if the daemon fails to come up healthy. Kill-switch:
+#     `touch ~/.maestro-no-autoupdate`. See scripts/local-triggers/autoupdate.sh.
+generate_plist "ai.maestro.${AGENT_FIRST}-autoupdate" \
+    "${AGENT_DIR}/scripts/daemon/launchd-wrapper-generic.sh|${AGENT_DIR}/scripts/local-triggers/autoupdate.sh" \
+    "" "3600" ""
+
 # 3. Standard cadence triggers — derived from the canonical STANDARD_CADENCES
 #    in lib/cadences.mjs (the single source of truth), NOT a second hardcoded
 #    list. Previously these were hand-maintained here and drifted from the SoT

package/scripts/local-triggers/generate-plists.test.mjs

@@ -107,10 +107,10 @@ function listPlists(agentRoot) {
 // Tests
 // ---------------------------------------------------------------------------
 
-test("generator emits 23 standard plists with the agent's first name", async () => {
+test("generator emits 24 standard plists with the agent's first name", async () => {
   // Standard inventory (cadence-bus v1 + slack-socket-mode v1), with NO
   // config/.cadence-plists.tsv present (no archetype cadences):
-  //   daemon, poll-relay, slack-socket (3 infra), PLUS one trigger plist per
+  //   daemon, poll-relay, slack-socket, autoupdate (4 infra), PLUS one trigger plist per
   //   STANDARD_CADENCES entry in lib/cadences.mjs (the SoT):
   //   inbox-processor, backlog-executor, meeting-prep, meeting-action-capture,
   //   daily-morning-brief, daily-midday-sweep, daily-evening-wrap,
@@ -120,7 +120,7 @@ test("generator emits 23 standard plists with the agent's first name", async ()
   //   messaging-inbound cadence (1), PLUS the 2026-07 Directory & Design
   //   stewards directory-hygiene + brand-steward (2), PLUS the D3 self-directed
   //   loop goal-steward (1), PLUS the 2026-08 DR cadence nightly-backup (1).
-  //   = 3 infra + 20 trigger = 23 total.
+  //   = 4 infra + 20 trigger = 24 total.
   // org-pulse used to be declared standard but was OMITTED by the old hardcoded
   // list (it never got a plist); deriving from the SoT fixes that drift.
   // The former weekly-* cadences are still ARCHETYPE-DRIVEN (function × altitude),
@@ -130,7 +130,9 @@ test("generator emits 23 standard plists with the agent's first name", async ()
     const r = runGenerator(root);
     assert.equal(r.status, 0, r.stderr);
     const plists = listPlists(root);
-    assert.equal(plists.length, 23, `expected 23 standard plists; got ${plists.join(",")}`);
+    assert.equal(plists.length, 24, `expected 24 standard plists; got ${plists.join(",")}`);
+    assert.ok(plists.includes("ai.maestro.alice-autoupdate.plist"),
+      `autoupdate plist missing; got ${plists.join(",")}`);
     assert.ok(plists.includes("ai.maestro.alice-messaging-inbound.plist"),
       "messaging-inbound (SP10 standard cadence) must get a SoT-derived plist");
     assert.ok(plists.includes("ai.maestro.alice-nightly-backup.plist"),
@@ -203,7 +205,7 @@ test("archetype cadences from config/.cadence-plists.tsv emit extra trigger plis
     const r = runGenerator(root);
     assert.equal(r.status, 0, r.stderr);
     const plists = listPlists(root);
-    assert.equal(plists.length, 25, `expected 23 standard + 2 archetype; got ${plists.join(",")}`);
+    assert.equal(plists.length, 26, `expected 24 standard + 2 archetype; got ${plists.join(",")}`);
     const dir = join(root, "scripts/local-triggers/plists");
     const eng = readFileSync(join(dir, "ai.maestro.erin-engineering-health.plist"), "utf-8");
     assert.match(eng, /<key>Weekday<\/key>\s*<integer>3<\/integer>/); // base64 schedule decoded
@@ -232,12 +234,12 @@ test("NO trigger plist invokes run-trigger.sh", async () => {
     const dir = join(root, "scripts/local-triggers/plists");
     for (const name of listPlists(root)) {
       const body = readFileSync(join(dir, name), "utf-8");
-      // Exception: the daemon/poll-relay/slack-socket plists don't run cadence
-      // triggers at all (the first two are KeepAlive workers; slack-socket is
-      // a KeepAlive WSS listener). The trigger plists must invoke
-      // enqueue-cadence-tick.mjs.
+      // Exception: the daemon/poll-relay/slack-socket/autoupdate plists don't run
+      // cadence triggers at all (daemon + slack-socket are KeepAlive workers;
+      // poll-relay is a 5s poller; autoupdate is an hourly SDK self-updater). The
+      // trigger plists must invoke enqueue-cadence-tick.mjs.
       if (name.endsWith("-daemon.plist") || name.endsWith("-poll-relay.plist") ||
-          name.endsWith("-slack-socket.plist")) {
+          name.endsWith("-slack-socket.plist") || name.endsWith("-autoupdate.plist")) {
         continue;
       }
       assert.ok(!body.includes("run-trigger.sh"),