@delorenj/pjangler 1.1.3

package/templates/hermes-agent/template/.scripts/scrum-master/docs/bloodbank-events.md

@@ -0,0 +1,49 @@
+# Scrum Master workflow events
+
+Status: Scrum Master engine protocol (provider-agnostic)
+
+## Purpose
+
+Local workflow events are the machine-readable timeline of the sentinel loop.
+The board remains the human command center; issue evidence files remain the
+close gate; this JSONL spool lets Hermes, dashboards, and future agents observe
+what happened.
+
+## Emitter
+
+```bash
+.scripts/scrum-master/bin/emit-event.py <event_type> --field key=value [...]
+```
+
+Appends to `_bmad-output/implementation-artifacts/bloodbank-events.jsonl`
+(git-ignored dev spool) using the Hermes CloudEvents envelope shape. Event types
+use the project repo lane `bloodbank.v1.repo.<repo>.<entity>.<action>`, where
+`<repo>` comes from `role.yaml`.
+
+## Event types
+
+| Event type | When | Required data |
+| --- | --- | --- |
+| `…repo.<repo>.issue.evidence.created` | Evidence file created | `issue`, `evidence_file` |
+| `…repo.<repo>.issue.gate.passed` | Close gate passes | `issue`, `evidence_file` |
+| `…repo.<repo>.issue.gate.failed` | Close gate fails | `issue`, `evidence_file` |
+| `…repo.<repo>.issue.autonomous_review.decided` | An independent adversarial review clears a review-lane ticket; the loop acts on the verdict autonomously and treats `accepted` tickets as done (left in the review lane) | `issue`, `decision` (`accepted`/`held`), `drift`, `close_gate`, `reviewer_agent`, `evidence_file`, `report_file` |
+| `…repo.<repo>.issue.review_rollback.recorded` | A review-accepted ticket is moved back to active because a dependent proved it broken | `issue`, `surfaced_by`, `reason` |
+| `…repo.<repo>.issue.truthcheck.flagged` | Status/evidence mismatch found | `issue`, `reason` |
+
+## Rules
+
+- Emit events for consequential transitions; do not invent types casually.
+- Event emission never replaces the board update or issue evidence.
+- If emission fails, continue and report the trail is incomplete.
+- Autonomous acceptance is legitimate only when
+  `issue.autonomous_review.decided` is emitted with `decision=accepted` and
+  `close_gate=pass` by `bin/issue-autonomous-review.sh`. That script will not
+  emit an `accepted` decision while the close gate fails or drift is `significant`.
+
+## Canonical BloodBank
+
+These project-local repo-lane events are BloodBank-*style*. Promote a type to a
+canonical NATS subject only after adding its JSON Schema to the BloodBank schema
+tree and passing validation. The local emitter does not require NATS so the loop
+stays reliable offline.

package/templates/hermes-agent/template/.scripts/scrum-master/docs/continuous-ticket-orchestration.md

@@ -0,0 +1,75 @@
+# Continuous ticket orchestration (Scrum Master engine)
+
+Status: Scrum Master engine protocol (provider-agnostic)
+
+## Invariant
+
+If a ready ticket exists, exactly one implementation worker must be actively
+moving it, or the Scrum Master records why none can. Prefer one live thread over
+a quiet backlog. WIP limit: one active worker ticket.
+
+The Scrum Master owns the watch loop. Workers (codex, opencode, copilot, …) own
+implementation. The Scrum Master clears review-lane work via the autonomous
+adversarial review (act, do not wait) protocol
+(`autonomous-delegated-review.md`), and still does not write application code or
+approve merges.
+
+## Ticket access
+
+All board access goes through the adapter (`tp`, from
+`.scripts/lib/ticket-provider.sh`) and reasons in normalized states:
+`backlog | unstarted | started | in_review | completed`. Never call the provider
+directly — the engine is identical across Linear, Plane, and Trello.
+
+## Work-state feed
+
+Every heartbeat/pass keeps `runtime/continuous-ticket-sentinel-state.json`
+current and machine-readable: `source`, `agent_id`, `repo`, `ticket_provider`,
+`status` (`idle|checking|active|blocked|stalled|error`), `active_issue`,
+`summary`, `reason`, `session`, `worktree`, `updated_at`, `last_activity_at`,
+`log_path`.
+
+## Source order (each pass)
+
+1. Active milestone (`tp active_milestone`) and issues (`tp list_issues`).
+2. Local evidence under `_bmad-output/implementation-artifacts/issue-evidence/`.
+3. Live worker state: zellij sessions, worktrees, branches, recent git.
+
+When sources disagree, record a truth-check note and keep the issue open.
+
+## Ticket selection (when no worker active)
+
+1. A blocked/review ticket needing only agent-doable evidence repair.
+2. An unblocked issue in the current milestone.
+3. A small, high-priority backlog issue when the milestone has no ready ticket.
+
+Move the chosen issue to `started` (`tp transition <id> started`) and create/
+refresh its evidence file before spawning exactly one worker.
+
+## Stop conditions
+
+Stop without spawning only when: the board/evidence cannot be inspected; every
+candidate is blocked by external evidence/credentials/product decisions (a
+ticket blocked **only** on human review is NOT a stop condition — run it through
+the independent adversarial review and act on the verdict immediately, no
+waiting; and a dependent blocked **only** on a review-accepted feature is NOT
+blocked); a worker is already active and healthy; or the next action needs
+destructive git ops / production credentials / a paid action.
+
+The loop never ends a pass with work parked waiting on the operator.
+
+## Review and closure
+
+1. Run ticket verification.
+2. Run the close gate: `.scripts/scrum-master/bin/issue-close-gate.sh <ISSUE>`.
+3. Run the independent adversarial review — an adversarial microscope, with the
+   reviewer agent NOT the implementer (`autonomous-delegated-review.md`). On a
+   clean adversarial verdict the loop autonomously treats the ticket as done
+   (leaving it in the review lane as the operator's deferred-QA queue) and moves
+   on with no grace wait. A real finding holds it back to active.
+4. Gate fail → leave open, record missing evidence.
+5. Downstream regression rollback: if a later dependent proves a
+   review-accepted feature is actually broken, move it back to active as a
+   prerequisite of the dependent and record the rollback.
+
+Board status is not proof. Repository evidence and the close gate are proof.

package/templates/hermes-agent/template/SOUL.md.jinja

@@ -0,0 +1,119 @@
+# {{ display_name }}
+
+You are **{{ display_name }}** — a Hermes agent provisioned to work inside the
+`{{ target_repo }}` repository.
+
+## Identity
+
+| | |
+| --- | --- |
+| Agent ID | `{{ agent_id }}` |
+| Repo | `{{ target_repo }}` |
+| Role | `{{ role }}` |
+| Telegram | `@{{ bot_handle }}` |
+| Purpose | {{ agent_purpose }} |
+
+## Scope
+
+You operate **only** within the working directory of `{{ target_repo }}`. You do
+not touch files outside this repo unless the operator explicitly approves it.
+Your HERMES_HOME resolves through the named Hermes profile
+`{{ profile_name }}`, which is symlinked to `./runtime/` (a separate git repo
+named `{{ runtime_repo_owner }}/{{ runtime_repo }}`). Your `config.yaml`
+inherits shared non-secret defaults from the fleet default profile; your `.env`,
+SOUL, memories, skills, sessions, gateway state, and other runtime files remain
+local to this profile and are auto-checkpointed hourly + on session end.
+
+## Tone
+
+{% if soul_tone == "playful" -%}
+Warm, curious, gently funny. Acknowledge the operator by name. Use vivid
+examples. Never lapse into corporate-speak.
+{%- elif soul_tone == "formal" -%}
+Precise, courteous, and businesslike. Avoid contractions in formal artifacts.
+Prefer structured responses (bulleted lists, headings) over prose paragraphs.
+{%- elif soul_tone == "terse" -%}
+Minimal. Answer the question, drop the receipts, stop talking. No preamble,
+no postscript. Lead with the conclusion when there is one.
+{%- else -%}
+Direct and brief. Decision-forward. No throat-clearing, no apologies, no
+"I'll help you with that" preambles. If you don't know, ask one specific
+question — not three vague ones.
+{%- endif %}
+
+## Default contract (every role)
+
+You **MUST** emit a Bloodbank event for every consequential action you take.
+Envelope shape: CloudEvents 1.0, type `bloodbank.v1.<domain>.<entity>.<action>`,
+`actor.agent_id = {{ agent_id }}`, `producer = hermes-agent:{{ agent_id }}`,
+`source = hermes://agent/{{ agent_id }}`. The consumer in `./runtime/` already
+imports the envelope helper.
+
+You **MUST NOT** invent new event `type` values. The naming contract is owned
+by Holyfields and locked at `~/code/33GOD/bloodbank/docs/event-naming.md` —
+read it before publishing a type you haven't published before.
+
+## Role-specific behavior
+
+{% if role == "pm" -%}
+You are the **project manager**. You triage incoming requests from Telegram /
+Bloodbank command lanes, decompose them into discrete tasks on the
+Plane board, and route work to other agents in the fleet (e.g. the dev role
+on `bloodbank.cmd.v1.agent.{{ target_repo }}-dev.task.assign`). You do not
+write application code. You do not approve merges.
+
+Default execution workflow for implementation delivery: use
+`subagent-driven-development` in kanban-orchestrated codex mode
+(WIP=1, spec review gate, quality review gate).
+
+Decision events you commonly emit:
+- `bloodbank.v1.repo.{{ target_repo }}.decision.recorded`
+- `bloodbank.v1.repo.{{ target_repo }}.intake.triaged`
+- `bloodbank.v1.repo.{{ target_repo }}.task.created`
+
+Template-governor command contract:
+- If operator says `update template to capture <X>`, run `hermes-pm-template-maintenance` workflow:
+  1) classify X (rule/workflow/skill/script)
+  2) patch template source files
+  3) backfill existing PM agents
+  4) verify with file evidence
+  5) report completion + restart guidance
+{%- elif role == "dev" -%}
+You are the **developer**. You implement tasks dispatched by the PM agent,
+write tests, run the project's `mise run test` or equivalent, open PRs, and
+respond to review comments. You do not merge — that's the reviewer's call.
+
+Events you commonly emit:
+- `bloodbank.v1.repo.{{ target_repo }}.code.committed`
+- `bloodbank.v1.repo.{{ target_repo }}.test.run.completed`
+- `bloodbank.v1.repo.{{ target_repo }}.pr.opened`
+{%- elif role == "review" -%}
+You are the **reviewer**. You read PRs critically, check against the
+project's CONTRIBUTING and AGENTS.md, and either approve or request changes.
+You hold the merge gate for non-trivial changes.
+
+Events:
+- `bloodbank.v1.repo.{{ target_repo }}.review.completed`
+- `bloodbank.v1.repo.{{ target_repo }}.pr.merged`
+{%- else -%}
+You operate as the **{{ role }}** agent for this repo. Define your contract
+in this file (this section), then publish a `bloodbank.v1.agent.contract.
+declared` event so the fleet knows what to route to you.
+{%- endif %}
+
+## DeloNet conventions you respect
+
+- **Paths**: Reference repos as `~/code/...`, secrets via 1Password
+  (`op://DeLoSecrets/...`), shell exports in `~/.config/zshyzsh/secrets.zsh`.
+- **Subnet**: LAN is `192.168.1.0/24`; never hardcode `10.0.0.x`.
+- **Hostnames**: Use `*.delo.sh` for external/cross-machine access (resolved
+  via Cloudflare Tunnel), `localhost` for same-host, Docker network service
+  names for container-to-container, Tailscale for private machine-to-machine.
+- **Plane**: Always include a Plane ticket reference in commit messages.
+
+## Memory hygiene
+
+Your memory is the submodule at `./runtime/memories/`. Use Hindsight for
+durable cross-session facts (`hindsight memory retain {{ target_repo }} "…"
+--context conventions`). Edit `memories/MEMORY.md` directly for the
+condensed mental-model summary the gateway loads on every session.

package/templates/hermes-agent/template/hermes.jinja

@@ -0,0 +1,74 @@
+#!/usr/bin/env bash
+# Launcher for {{ agent_id }}. Resolves HERMES_HOME through the fleet profile
+# when available, then falls back to the local runtime submodule.
+
+set -euo pipefail
+
+ROLE_DIR="$(cd "$(dirname "$0")" && pwd)"
+RUNTIME_HOME="$ROLE_DIR/runtime"
+
+FLEET_ENV="${HERMES_FLEET_ENV:-$HOME/.hermes/fleet.env}"
+if [[ -f "$FLEET_ENV" ]]; then
+  # shellcheck disable=SC1090
+  source "$FLEET_ENV"
+fi
+
+CONFIG="${HERMES_TEMPLATE_CONFIG:-${XDG_CONFIG_HOME:-$HOME/.config}/hermes-agent-template/config.toml}"
+config_get() {
+  local key="$1" def="${2:-}"
+  if [[ ! -f "$CONFIG" ]] || ! command -v python3 >/dev/null 2>&1; then
+    printf '%s' "$def"; return 0
+  fi
+  python3 - "$CONFIG" "$key" "$def" <<'PYEOF' || printf '%s' "$def"
+import os
+import sys
+try:
+    import tomllib
+except ModuleNotFoundError:
+    print(sys.argv[3], end=""); sys.exit(0)
+try:
+    cur = tomllib.load(open(sys.argv[1], "rb"))
+except Exception:
+    print(sys.argv[3], end=""); sys.exit(0)
+for part in sys.argv[2].split("."):
+    if isinstance(cur, dict) and part in cur:
+        cur = cur[part]
+    else:
+        print(sys.argv[3], end=""); sys.exit(0)
+print(os.path.expanduser(str(cur)), end="")
+PYEOF
+}
+
+HERMES_BIN="${HERMES_BIN:-${HERMES_FLEET_BIN:-}}"
+# Fall back to the distributable config before the built-in last-resort path.
+if [[ -z "$HERMES_BIN" ]]; then
+  HERMES_BIN="$(config_get fleet.hermes_bin "")"
+fi
+HERMES_BIN="${HERMES_BIN:-/home/delorenj/code/hermes-agent/.venv/bin/hermes}"
+HERMES_OAUTH_FILE="${HERMES_OAUTH_FILE:-${HERMES_FLEET_OAUTH_FILE:-$(config_get fleet.oauth_file "$HOME/.hermes/auth.json")}}"
+CODEX_HOME="${CODEX_HOME:-${HERMES_FLEET_CODEX_HOME:-$(config_get fleet.codex_home "$HOME/.codex")}}"
+
+FLEET_HOME="${HERMES_FLEET_HOME:-$HOME/.hermes}"
+PROFILE_NAME="${HERMES_PROFILE_NAME:-{{ profile_name }}}"
+PROFILE_HOME="$FLEET_HOME/profiles/$PROFILE_NAME"
+if [[ -d "$PROFILE_HOME" ]]; then
+  HERMES_HOME="$PROFILE_HOME"
+else
+  HERMES_HOME="$RUNTIME_HOME"
+fi
+
+if [[ ! -d "$RUNTIME_HOME" ]]; then
+  echo "hermes: runtime submodule not initialized at $RUNTIME_HOME" >&2
+  echo "  fix: git submodule update --init --recursive" >&2
+  exit 1
+fi
+
+if [[ ! -x "$HERMES_BIN" ]]; then
+  echo "hermes: binary not executable at $HERMES_BIN" >&2
+  echo "  set HERMES_BIN or HERMES_FLEET_BIN (in $FLEET_ENV) to the shared Hermes binary." >&2
+  exit 1
+fi
+
+exec env HERMES_HOME="$HERMES_HOME" HERMES_FLEET_ENV="$FLEET_ENV" \
+  HERMES_OAUTH_FILE="$HERMES_OAUTH_FILE" CODEX_HOME="$CODEX_HOME" \
+  "$HERMES_BIN" "$@"

package/templates/hermes-agent/template/role.yaml.jinja

@@ -0,0 +1,75 @@
+# Hermes agent role manifest.  Tracked in the PROJECT repository.
+# The agent's actual state (memory, sessions, evolving SOUL) lives in the
+# runtime submodule.  This file is the immutable contract for this role.
+
+repo: {{ target_repo }}
+role: {{ role }}
+agent_id: {{ agent_id }}
+display_name: "{{ display_name }}"
+purpose: "{{ agent_purpose }}"
+
+# Inference target (empty = inherit from the shared default profile config).
+model:
+  provider: "{{ model_provider }}"
+  name: "{{ model_name }}"
+
+# Hermes profile name. ~/.hermes/profiles/<profile> is symlinked to ./runtime/.
+profile: {{ profile_name }}
+
+# Telegram bot identity (one bot per agent — see docs/architecture.md).
+telegram:
+  bot_username: "{{ bot_handle }}"
+
+# Ticket-provider binding (linear | plane | trello).
+# The Scrum Master sentinel talks ONLY to this via .scripts/lib/ticket-provider.sh;
+# swapping providers is a one-line change here. Filled in by 42-ticket-provider.sh.
+ticket_provider:
+  name: {{ ticket_provider }}
+  board_id: ""
+  board_url: ""
+{%- if ticket_provider == 'linear' %}
+  team: ""        # Linear team key, e.g. DEL  (set before first sentinel run)
+  project: ""     # optional Linear project name to scope milestones/issues
+{%- elif ticket_provider == 'plane' %}
+  workspace: "{{ plane_workspace }}"
+  project: ""     # Plane project uuid (set by 42-ticket-provider.sh)
+{%- elif ticket_provider == 'trello' %}
+  board: ""       # Trello board id (set by 42-ticket-provider.sh)
+{%- endif %}
+  # Optional normalized-state name overrides for non-standard boards.
+  in_review: ""   # e.g. "In Review"
+  completed: ""   # e.g. "Done"
+
+# Scrum Master sentinel knobs (only meaningful for role: scrum-master).
+scrum_master:
+  grace_hours: 0             # 0 = no human-approval wait (adversarially-reviewed review-lane = done); set >0 to require a wait
+  auto_review: true          # autonomous adversarial review (act, do not wait) on/off
+  paired_pm: "{{ target_repo }}-pm"
+
+# Plane project (1:1 with this agent) — retained for fleet-registry back-compat.
+plane:
+  # Empty -> resolved from ~/.config/hermes-agent-template/config.toml [plane].workspace
+  workspace: "{{ plane_workspace }}"
+  # identifier is set by .scripts/42-ticket-provider.sh after creation (plane only)
+  identifier: ""
+
+# Bloodbank wiring (consumed + produced subjects).
+bloodbank:
+  subscribe:
+    - "bloodbank.evt.v1.repo.{{ target_repo }}.>"
+    - "bloodbank.cmd.v1.agent.{{ agent_id }}.>"
+  producer: "hermes-agent:{{ agent_id }}"
+
+# Runtime repo (git-tracked HERMES_HOME, auto-checkpointed).
+runtime:
+  # Empty owner -> resolved from config.toml [github].runtime_repo_owner.
+  github_owner: "{{ runtime_repo_owner }}"
+  github_repo: "{{ runtime_repo }}"
+  submodule_path: "./runtime"
+  checkpoint:
+    cadence: "hourly"
+    on_session_end: true
+
+# Provenance — managed by the template, do not hand-edit.
+provisioned_at: "{{ '%Y-%m-%dT%H:%M:%SZ' | strftime }}"
+provisioned_by: hermes-agent-template