@delorenj/pjangler 1.1.3

package/templates/commonproject/copier.yml

@@ -0,0 +1,90 @@
+# CommonProject Template
+# https://copier.readthedocs.io/
+#
+# Generic base project template. Creates a project skeleton with:
+# - BMAD methodology (pre-initialized)
+# - Plane project (auto-created in 33god workspace)
+# - mise environment management
+# - CLI coder configs (Claude, Codex, Gemini, etc.)
+
+_min_copier_version: "9.0.0"
+_subdirectory: template
+_templates_suffix: .jinja
+_envops:
+  block_start_string: "{%"
+  block_end_string: "%}"
+  variable_start_string: "{{"
+  variable_end_string: "}}"
+  comment_start_string: "{#"
+  comment_end_string: "#}"
+
+# --- Questions (only what we can't derive) ---
+
+project_name:
+  type: str
+  help: Project name
+  validator: "{% if not project_name %}Required{% endif %}"
+
+project_description:
+  type: str
+  help: One-line description
+  default: ""
+
+# Ticket board provider for this project. The board itself is created by
+# init-project.sh (create-plane-project.sh) BEFORE copier runs; its identity is
+# threaded back in via plane_* below and persisted into .project.json so it is
+# the single source of truth shared with the hermes-agent template's agents.
+ticket_provider:
+  type: str
+  help: Ticket board provider this project's board lives in
+  default: plane
+  choices:
+    Linear: linear
+    Plane: plane
+    Trello: trello
+
+# --- Derived (never asked) ---
+
+project_slug:
+  type: str
+  default: "{{ project_name | lower | replace(' ', '-') | replace('_', '-') }}"
+  when: false
+
+# Board binding — supplied by init-project.sh's --data-file after the board is
+# created. Defaults keep a bare `copier copy` rendering valid (empty binding).
+plane_workspace:
+  type: str
+  default: "33god"
+  when: false
+
+plane_project_id:
+  type: str
+  default: ""
+  when: false
+
+project_identifier:
+  type: str
+  default: "{{ project_slug[:4] | upper }}"
+  when: false
+
+plane_base:
+  type: str
+  default: "https://plane.delo.sh"
+  when: false
+
+# Drives conditional blocks in rendered files (e.g. _.python.venv in mise.toml).
+# Not asked interactively; init-project.sh can override via --data-file.
+primary_language:
+  type: str
+  default: python
+  when: false
+
+# --- Post-generation tasks ---
+
+_tasks:
+  - "cp ~/.config/git/ignore .gitignore 2>/dev/null || echo '# Add ignores here' > .gitignore"
+  - "ln -sf AGENTS.md CLAUDE.md"
+  - "ln -sf AGENTS.md GEMINI.md"
+  # Stamp the repo's absolute path into .project.json (the SOT) post-render.
+  - "python3 -c \"import json,os,pathlib; p=pathlib.Path('.project.json'); d=json.loads(p.read_text()); d['repo_path']=os.getcwd(); p.write_text(json.dumps(d,indent=2)+chr(10))\""
+  - "mise trust"

package/templates/commonproject/mise.toml

@@ -0,0 +1,38 @@
+[env]
+_.file = [".env"]
+_.path = [".mise/scripts"]
+CODEX_HOME = { value = ".codex", path = true }
+
+# This block will handle the linking of 
+# agent files to the main AGENTS.md file.
+#
+# TODO: Ensure this works for all levels of nesting.
+# i.e. All linked agent files MUST be siblings at 
+# any given level of nesting.
+[hooks]
+enter = '{{config_root}}/.mise/scripts/link-agentfiles.sh'
+
+[[watch_files]]
+patterns = ["AGENTS.md"]
+task = "link-agentfiles"
+
+[tasks]
+# Project initialization - creates Plane project + runs Copier
+init-project = { run = ".mise/scripts/init-project.sh", description = "Initialize new 33GOD project with Plane + Copier" }
+init-project-non-interactive = { run = ".mise/scripts/init-project.sh --non-interactive", description = "Non-interactive project init" }
+
+# Direct Plane project creation
+create-plane-project = { run = ".mise/scripts/create-plane-project.sh", description = "Create a Plane project and output ID" }
+
+# Template testing
+test-template = { run = "bash .scripts/test-template.sh", description = "Run template test scenarios" }
+
+# Template linting
+lint-template = { run = "copier lint", description = "Lint the Copier template" }
+
+# Development
+dev = { run = "echo 'Run: mise run init-project'", description = "Placeholder for project-specific dev" }
+
+[tasks.link-agentfiles]
+description = "Symlink all agent files to AGENTS.md"
+run = ".mise/scripts/link-agentfiles.sh"

package/templates/commonproject/template/.copier-answers.yml.jinja

@@ -0,0 +1,2 @@
+# Changes here will be overwritten by Copier; NEVER EDIT MANUALLY
+{{ _copier_answers|to_nice_yaml -}}

package/templates/commonproject/template/.env.op

@@ -0,0 +1,2 @@
+OPENROUTER_API_KEY=op://DeLoSecrets/openrouter/OpenCode
+TEST_SECRETS="Secrets have been overridden by op inject"

package/templates/commonproject/template/.mise/scripts/link-agentfiles.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+
+if [ -f AGENTS.md ]; then
+  ln -sf AGENTS.md CLAUDE.md
+  ln -sf AGENTS.md GEMINI.md
+  echo "✅ AI agent symlinks verified"
+else
+  echo "No AGENTS.md file found. Can't symlink."
+fi

package/templates/commonproject/template/.project.json.jinja

@@ -0,0 +1,19 @@
+{% if ticket_provider == 'plane' and plane_project_id -%}
+{% set board_url = plane_base ~ '/' ~ plane_workspace ~ '/projects/' ~ plane_project_id ~ '/issues/' -%}
+{% else -%}
+{% set board_url = '' -%}
+{% endif -%}
+{
+  "project_name": {{ project_name | tojson }},
+  "project_description": {{ project_description | tojson }},
+  "project_slug": {{ project_slug | tojson }},
+  "repo_path": "",
+  "ticket_provider": {
+    "type": {{ ticket_provider | tojson }},
+    "workspace": {{ plane_workspace | tojson }},
+    "identifier": {{ project_identifier | tojson }},
+    "board_id": {{ plane_project_id | tojson }},
+    "board_url": {{ board_url | tojson }}
+  },
+  "agents": {}
+}

package/templates/commonproject/template/AGENTS.md.jinja

@@ -0,0 +1,7 @@
+# {{ project_name }}
+
+{{ project_description }}
+
+## Overview
+
+__TODO__

package/templates/commonproject/template/mise.toml.jinja

@@ -0,0 +1,26 @@
+# mise configuration for {{ project_name }}
+# https://mise.jdx.dev/configuration.html
+
+[env]
+_.path = [".mise/scripts", "agents/hermes/pm"]
+_.file = [".env"]
+
+# This block will handle the linking of
+# agent files to the main AGENTS.md file.
+#
+# TODO: Ensure this works for all levels of nesting.
+# i.e. All linked agent files MUST be siblings at
+# any given level of nesting.
+[hooks]
+enter = [
+  "{% raw %}{{config_root}}{% endraw %}/.mise/scripts/link-agentfiles.sh",
+  "op inject -i .env.op > .env",
+]
+
+[[watch_files]]
+patterns = ["AGENTS.md"]
+task = "link-agentfiles"
+
+[tasks.link-agentfiles]
+description = "Symlink all agent files to AGENTS.md"
+run = "{% raw %}{{config_root}}{% endraw %}/.mise/scripts/link-agentfiles.sh"

package/templates/hermes-agent/README.md

@@ -0,0 +1,149 @@
+# hermes-agent-template
+
+Copier template that provisions a single Hermes agent role into an existing
+repository, complete with its own per-agent runtime repo for git-tracked
+memory/state checkpointing.
+
+## How it relates to CommonProject
+
+| | CommonProject | hermes-agent-template |
+| --- | --- | --- |
+| What it scaffolds | A new top-level project | An agent role inside an existing project |
+| Copier target | `./my-new-project/` | `./agents/hermes/<role>/` |
+| Asks | project name + description | role + purpose + tone |
+| Post-gen artifacts | Plane project, bmad init, mise tasks | Plane project, Telegram bot wiring, agent-hm-* runtime repo, systemd units |
+
+CommonProject runs first to create the umbrella project. hermes-agent-template
+runs second (for each agent role you want) to drop agents into it.
+
+## Roles
+
+The template provisions several roles. The `pm` role handles project management
+and triage. The `scrum-master` role runs a provider-agnostic ticket sentinel
+(Linear, Plane, or Trello) with an autonomous adversarial review (act, do not
+wait).
+
+To work on or extend the Scrum Master, start with the [Scrum Master handoff
+guide](docs/scrum-master/README.md).
+
+## Quickstart
+
+```bash
+# Inside a project (e.g. ~/code/33GOD/bloodbank)
+copier copy gh:delorenj/hermes-agent-template ./agents/hermes/pm \
+  --data role=pm \
+  --data agent_purpose="Triage incoming bloodbank PRs and route work"
+```
+
+The template will:
+
+1. Seed `~/.config/hermes-agent-template/config.toml` from the shipped example (see [Configuration](#configuration))
+2. Ensure `~/.hermes/fleet.env` exists (single source of truth for shared Hermes binary/repo/registry)
+3. Create the Hermes profile `<repo>-pm` via `hermes profile create --inherit-config`
+4. Create a new private GitHub repo `<owner>/agent-hm-<repo>-pm` for the runtime
+5. Populate it with the runtime scaffold (delta config, profile.yaml, SOUL.md, memories, consumer.py)
+6. Add it as a git submodule at `agents/hermes/pm/runtime/` and symlink the named profile to it
+7. Prompt for a BotFather token, store it in `runtime/.env`
+8. Create a Plane project in your configured workspace
+9. Install systemd `--user` units: gateway, consumer, hourly checkpoint timer
+10. Append the agent to `~/.hermes/agents-registry.yaml`
+
+## Configuration
+
+All environment-specific defaults live in **`~/.config/hermes-agent-template/config.toml`**
+(override the path with `$HERMES_TEMPLATE_CONFIG`). Nothing user-specific is
+hardcoded in the scripts — so the template can be handed to someone else and
+retargeted by editing one file.
+
+On the first provisioning run, `.scripts/01-config.sh` seeds that file from
+[`config.example.toml`](config.example.toml) if it doesn't exist yet, then warns
+you to review it. Keys:
+
+| Section | Key | What it sets |
+| --- | --- | --- |
+| `fleet` | `hermes_bin`, `hermes_repo` | Shared Hermes executable + repo checkout |
+| `fleet` | `fleet_env`, `registry_file` | Fleet source-of-truth + registry locations |
+| `fleet` | `oauth_file`, `codex_home` | Shared Hermes OAuth store + Codex CLI/app-server auth home |
+| `fleet` | `runtime_scaffold_dir` | Fallback scaffold (if agent-local one is missing) |
+| `fleet` | `canonical_skills_dir`, `symlinked_runtime_skills` | Skills mirrored into each profile |
+| `github` | `runtime_repo_owner` | Owner of the `agent-hm-*` runtime repos |
+| `plane` | `base`, `workspace` | Plane URL + workspace slug |
+| `bloodbank` | `nats_host`, `nats_port`, `compose_dir` | NATS endpoint + compose dir hint |
+
+Resolution precedence for every value: **explicit env var → `~/.hermes/fleet.env`
+→ `config.toml` → built-in fallback**. So you can still override any single value
+per-run with an env var or `--data`, and existing setups keep working even without
+the config file present.
+
+## What gets created where
+
+```
+your-project/
+├── agents/hermes/pm/                       ← copier output, tracked in YOUR project
+│   ├── role.yaml                           ← role manifest
+│   ├── SOUL.md                             ← personality (canonical)
+│   ├── hermes                              ← launcher
+│   ├── .scripts/                           ← provisioning scripts (idempotent re-run)
+│   └── runtime/                            ← git submodule → agent-hm-<repo>-pm
+│       (symlink target for ~/.hermes/profiles/<repo>-pm)
+└── ...
+
+github.com/delorenj/agent-hm-<repo>-pm/     ← new private repo, this agent's state
+├── profile.yaml                            ← config.inherit_from: default
+├── config.yaml                             ← local overrides only
+├── SOUL.md                                 ← evolves over time
+├── memories/{MEMORY,USER}.md
+├── sessions/sessions.db                    ← LFS-tracked
+├── decisions/                              ← markdown files, one per call
+├── bloodbank-consumer.py
+└── .gitattributes / .gitignore             ← LFS rules + secret guards
+
+~/.hermes/agents-registry.yaml              ← fleet roster
+~/.hermes/fleet.env                          ← shared Hermes binary/repo pointer
+~/.config/systemd/user/                     ← gateway, consumer, checkpoint timer
+```
+
+## Fleet single source-of-truth
+
+All generated launchers read `~/.hermes/fleet.env` for:
+
+- `HERMES_FLEET_BIN`
+- `HERMES_FLEET_REPO`
+- `HERMES_FLEET_REGISTRY_FILE`
+- `HERMES_FLEET_OAUTH_FILE`
+- `HERMES_FLEET_CODEX_HOME`
+
+If you sync/pull your shared Hermes repo and keep the same binary path, every
+agent wrapper picks it up automatically. `HERMES_FLEET_OAUTH_FILE` is the
+shared Hermes provider OAuth store, including `openai-codex`; `HERMES_FLEET_CODEX_HOME`
+is the shared Codex CLI/app-server config/auth home.
+
+To retrofit existing wrappers and user systemd units:
+
+```bash
+cd /home/delorenj/code/hermes-agent-template
+./scripts/backfill-fleet-sot.sh
+```
+
+## Architecture
+
+See `docs/architecture.md`.
+
+## Re-running individual steps
+
+Every `.scripts/<NN>-*.sh` is idempotent. Drop the `.done-<NN>-*` marker file
+to force re-run:
+
+```bash
+cd agents/hermes/pm
+rm .scripts/.done-40-plane
+SKIP_TELEGRAM=1 SKIP_SYSTEMD=1 ./.scripts/40-plane.sh
+```
+
+## Retiring an agent
+
+(TODO: ship `retire.sh` in v1.1)
+
+Manual: stop systemd units, `hermes profile delete`, archive the Plane
+project, `/deletebot` in BotFather, archive the
+`agent-hm-*` runtime repo, remove the registry entry.

package/templates/hermes-agent/copier.yml

@@ -0,0 +1,167 @@
+# hermes-agent-template
+# https://copier.readthedocs.io/
+#
+# Provisions a single Hermes agent role into an existing repository.
+#
+# Usage:
+#   cd /path/to/your-project
+#   copier copy gh:delorenj/hermes-agent-template ./agents/hermes/pm \
+#     --data role=pm
+#
+# What it does:
+#   1. Renders agents/hermes/<role>/{role.yaml, SOUL.md, hermes, .scripts/}
+#   2. Creates a per-agent runtime repo gh:delorenj/agent-hm-<repo>-<role>
+#   3. Submodules it at agents/hermes/<role>/runtime/
+#   4. Creates ~/.hermes/profiles/<repo>-<role> as a symlink to runtime/
+#      with profile.yaml opting config.yaml into inherited default config
+#   5. Creates a Plane project in 33god workspace
+#   6. Prompts for a BotFather Telegram token, stores in runtime/.env
+#   7. Installs a Bloodbank consumer + hourly checkpoint timer
+#   8. Appends to ~/.hermes/agents-registry.yaml
+#
+# Environment-specific defaults (Hermes binary path, runtime repo owner, Plane
+# workspace/URL, NATS endpoint, skills dir, …) are NOT hardcoded — they live in
+# ~/.config/hermes-agent-template/config.toml, seeded from config.example.toml on
+# first run. Edit that file to retarget the template for a different machine/user.
+
+_min_copier_version: "9.0.0"
+_subdirectory: template
+_templates_suffix: .jinja
+_envops:
+  block_start_string: "{%"
+  block_end_string: "%}"
+  variable_start_string: "{{"
+  variable_end_string: "}}"
+  comment_start_string: "{#"
+  comment_end_string: "#}"
+
+# ─── Questions (only what we can't derive) ───────────────────────────────
+
+target_repo:
+  type: str
+  help: "Name of the project repo this agent belongs to"
+  validator: "{% if not target_repo %}Required{% endif %}"
+  # No default — must be provided explicitly via --data or interactively.
+  # Path-based auto-derivation is unreliable across relative/absolute dst_path.
+
+role:
+  type: str
+  help: "Role for this agent"
+  default: pm
+  choices:
+    "Project Manager (pm)": pm
+    "Scrum Master — continuous ticket sentinel (scrum-master)": scrum-master
+    "Developer (dev)": dev
+    "Reviewer (review)": review
+    "Ops (ops)": ops
+    "QA (qa)": qa
+  validator: "{% if not role %}Required{% endif %}"
+
+ticket_provider:
+  type: str
+  help: "Ticket system this agent's board lives in"
+  default: plane
+  choices:
+    "Linear": linear
+    "Plane": plane
+    "Trello": trello
+
+with_scrum_master:
+  type: bool
+  help: "Also provision a paired Scrum Master (continuous ticket sentinel) for this repo?"
+  default: false
+  when: "{{ role == 'pm' }}"
+
+agent_purpose:
+  type: str
+  help: "One-line description of what this agent does in this repo"
+  default: "{% if role == 'scrum-master' %}Continuous ticket sentinel and delegated review{% else %}Project management and triage{% endif %}"
+
+model_provider:
+  type: str
+  help: "Inference provider override (empty = inherit shared default profile config)"
+  default: ""
+
+model_name:
+  type: str
+  help: "Model name override (empty = inherit shared default profile config)"
+  default: ""
+
+soul_tone:
+  type: str
+  help: "Tone for the agent's SOUL.md"
+  default: direct
+  choices:
+    - direct
+    - playful
+    - formal
+    - terse
+
+# ─── Derived (never asked) ───────────────────────────────────────────────
+
+agent_id:
+  type: str
+  default: "{{ target_repo }}-{{ role }}"
+  when: false
+
+profile_name:
+  type: str
+  default: "{{ agent_id }}"
+  when: false
+
+display_name:
+  type: str
+  # Short roles (pm, dev, ops, qa, ci) get uppercased; longer ones get title-cased.
+  default: "{{ target_repo|title }} {% if role|length <= 3 %}{{ role|upper }}{% else %}{{ role|title }}{% endif %}"
+  when: false
+
+bot_handle:
+  type: str
+  default: "{{ target_repo|lower|replace('-','_') }}_{{ role|lower }}_bot"
+  when: false
+
+runtime_repo:
+  type: str
+  default: "agent-hm-{{ target_repo|lower }}-{{ role|lower }}"
+  when: false
+
+runtime_repo_owner:
+  type: str
+  # Empty by default — resolved at provision time from
+  # ~/.config/hermes-agent-template/config.toml [github].runtime_repo_owner.
+  # Pass --data runtime_repo_owner=<owner> to override per-run.
+  default: ""
+  when: false
+
+plane_workspace:
+  type: str
+  # Empty by default — resolved at provision time from
+  # ~/.config/hermes-agent-template/config.toml [plane].workspace.
+  default: ""
+  when: false
+
+# ─── Post-generation tasks ───────────────────────────────────────────────
+# Order matters. Each script logs to .scripts/.provision.log.
+# All scripts are idempotent — safe to re-run if a step fails.
+
+_tasks:
+  - "chmod +x .scripts/*.sh hermes 2>/dev/null || true"
+  - "./.scripts/00-banner.sh"
+  - "./.scripts/01-config.sh"
+  - "./.scripts/05-fleet-env.sh"
+  - "./.scripts/10-hermes-profile.sh"
+  - "./.scripts/20-runtime-repo.sh"
+  - "./.scripts/30-telegram.sh"
+  - "./.scripts/42-ticket-provider.sh"
+  - "./.scripts/60-bloodbank.sh"
+  - "./.scripts/70-systemd.sh"
+  - command: "./.scripts/75-scrum-master.sh"
+    when: "{{ role == 'scrum-master' }}"
+  - "./.scripts/80-registry.sh"
+  - "./.scripts/99-summary.sh"
+  - command: "./.scripts/90-chain-scrum-master.sh"
+    when: "{{ role == 'pm' and with_scrum_master }}"
+
+_skip_if_exists:
+  - hermes
+  - runtime

package/templates/hermes-agent/docs/architecture.md

@@ -0,0 +1,111 @@
+# Architecture
+
+## Two-artifact split
+
+```
+┌──────────────────────────────────────────────────────────────────────────┐
+│                                                                          │
+│   gh:delorenj/hermes-agent-template       ← Copier template (this repo)  │
+│   ─────────────────────────────────       used once per role            │
+│                                                                          │
+│        copier copy ... ./agents/hermes/<role>                           │
+│                                                                          │
+└──────────────────────────────────────────────────────────────────────────┘
+                                │
+                                ▼
+                  ┌────────────────────────────────┐
+                  │  your-project/                  │
+                  │   agents/hermes/<role>/         │  ← in YOUR project git
+                  │     ├── role.yaml               │
+                  │     ├── SOUL.md                 │
+                  │     ├── hermes (launcher)       │
+                  │     ├── .scripts/               │
+                  │     └── runtime/    ────────────┼─── git submodule
+                  └────────────────────────────────┘     │
+                                                          ▼
+                  ┌────────────────────────────────────────┐
+                  │  gh:delorenj/agent-hm-<project>-<role> │ ← NEW repo per agent
+                  │  ───────────────────────────────────── │   private
+                  │     ├── profile.yaml                   │
+                  │     ├── config.yaml  (local overrides) │
+                  │     ├── SOUL.md (evolving)             │
+                  │     ├── memories/                      │   auto-checkpointed
+                  │     ├── sessions/sessions.db  (LFS)    │   hourly + on
+                  │     ├── decisions/                     │   session end
+                  │     └── bloodbank-consumer.py          │
+                  └────────────────────────────────────────┘
+```
+
+## Why two artifacts, not one
+
+The **template** is the contract / the bootstrap recipe — it doesn't change
+when an agent learns something. The **runtime** is the agent's accumulating
+state — it changes every conversation. Bundling them would mean every memory
+update churns the template's commit log; separating them means:
+
+- The template repo is small, stable, easy to update fleet-wide
+- The runtime repo is per-agent, fast-moving, auditable in isolation
+- You can fork an agent (branch the runtime repo) without touching others
+- You can wipe an agent (delete the runtime repo) without affecting the template
+
+A third file ties the fleet together: `~/.hermes/fleet.env`.
+It is the single source-of-truth pointer for the shared Hermes executable/repo
+that every generated launcher uses.
+
+Each runtime is also exposed as a named Hermes profile:
+`~/.hermes/profiles/<repo>-<role>` symlinks to `agents/hermes/<role>/runtime/`.
+The runtime's `profile.yaml` opts only `config.yaml` into inheriting shared
+defaults from the fleet default profile; secrets, memories, sessions, skills,
+gateway state, and other runtime files stay local.
+
+## Why git-tracked runtime
+
+The runtime is the agent's "subjective experience" — its memory of every
+conversation, the SOUL refinements it has absorbed, the decisions it has
+emitted. Putting it in git gives:
+
+- **Durability**: nothing lost when the host dies. `git clone` restores it.
+- **Auditability**: `git log` is a full trace of how the agent evolved.
+- **Reversibility**: if the agent develops bad habits, `git revert` rolls back.
+- **Forkability**: experiment with a copy on a branch, merge if it works out.
+- **Cross-machine**: same agent state on big-chungus and on the laptop.
+
+## Checkpoint cadence
+
+A systemd `--user` timer runs `.scripts/checkpoint.sh` every hour. The script:
+
+1. `cd` into the runtime submodule
+2. `git add -A`
+3. Commits only if dirty (exits clean otherwise)
+4. Pushes to `origin`
+
+On session end, a hermes hook (TBD path) does the same thing immediately so
+nothing in-flight is lost between hourly ticks.
+
+Sensitive state — `.env`, `auth.json`, OAuth tokens — never enters git.
+They're in `.gitignore` and live only on the host machine.
+
+## One bot per agent (Telegram)
+
+Each agent gets its own BotFather bot and runs its own gateway daemon.
+Hermes' `gateway/status.py:acquire_scoped_lock(scope="telegram", identity=<token>)`
+already enforces "one token per gateway process" — so even if two profiles
+happen to share a token, the second one's startup fails fast. The N×M cost
+(N BotFather sessions per fleet) is the price we accept for zero custom
+routing code.
+
+## One Plane project per agent
+
+A Plane "project" is the natural unit of work isolation. Mixing agents into a
+shared project would conflate decisions and break filters. 1:1 also makes
+archive-on-retire clean.
+
+## Bloodbank wiring
+
+Each consumer subscribes to two lanes:
+- `bloodbank.evt.v1.repo.<repo>.>`   — events affecting this repo
+- `bloodbank.cmd.v1.agent.<agent_id>.>` — commands targeting THIS agent specifically
+
+Each agent emits CloudEvents 1.0 envelopes with `actor.agent_id`,
+`producer = hermes-agent:<id>`, `source = hermes://agent/<id>`. The naming
+spec is owned by Holyfields (`~/code/33GOD/bloodbank/docs/event-naming.md`).