@delorenj/pjangler 1.1.5 → 1.2.2

package/templates/hermes-agent/template/.scripts/80-registry.sh

@@ -25,7 +25,7 @@ python3 - "$REGISTRY_FILE" "$AGENT_ID" "$REPO" "$ROLE" "$DISPLAY_NAME" \
   "$PLANE_WORKSPACE" "$PLANE_PROJECT_ID" "$(yaml_get plane.identifier)" \
   "$RUNTIME_REPO" "$HERMES_BIN" "$HERMES_AGENT_REPO" "$FLEET_ENV" \
   "hermes-${AGENT_ID}-gateway.service" "hermes-${AGENT_ID}-consumer.service" \
-  "hermes-${AGENT_ID}-checkpoint.timer" <<'PYEOF'
+  "hermes-${AGENT_ID}-heartbeat.timer" <<'PYEOF'
 import sys, pathlib, datetime
 try:
     import yaml  # type: ignore
@@ -44,7 +44,7 @@ data.setdefault("agents", {})[agent_id] = {
   "plane": {"workspace": plane_ws, "project_id": plane_id, "identifier": plane_ident},
   "runtime_repo": runtime_repo,
   "hermes": {"bin": hermes_bin, "repo": hermes_repo, "fleet_env": fleet_env},
-  "systemd": {"gateway_unit": gw, "consumer_unit": csm, "checkpoint_timer": ckpt},
+  "systemd": {"gateway_unit": gw, "consumer_unit": csm, "heartbeat_timer": ckpt},
   "provisioned_at": datetime.datetime.utcnow().isoformat() + "Z",
 }
 p.write_text(yaml.safe_dump(data, sort_keys=False))

package/templates/hermes-agent/template/.scripts/99-summary.sh

@@ -6,7 +6,7 @@ load_role_env
 
 GW_UNIT="hermes-${AGENT_ID}-gateway.service"
 CSM_UNIT="hermes-${AGENT_ID}-consumer.service"
-CKPT_TIMER="hermes-${AGENT_ID}-checkpoint.timer"
+HB_TIMER="hermes-${AGENT_ID}-heartbeat.timer"
 
 cat >&2 <<EOF
 
@@ -14,16 +14,15 @@ cat >&2 <<EOF
 │
 │  Talk:        @$BOT_HANDLE  (Telegram DM)
 │  Shell:       $ROLE_DIR/hermes chat "status"
-│  Profile:     $PROFILE_NAME  (config inherits from default; secrets stay local)
 │  Board:       $PLANE_BASE/$PLANE_WORKSPACE/projects/$(cat "$ROLE_DIR/.scripts/.plane-project-id" 2>/dev/null || echo "(skipped)")
-│  Runtime:     gh:$RUNTIME_REPO   (auto-checkpointed hourly)
+│  Runtime:     gh:$RUNTIME_REPO   (reconcile + checkpoint heartbeat)
 │  Hermes bin:  $HERMES_BIN
 │  Fleet env:   $FLEET_ENV
 │
 │  Start fleet daemons:
 │    systemctl --user start $GW_UNIT
 │    systemctl --user start $CSM_UNIT
-│    systemctl --user start $CKPT_TIMER
+│    systemctl --user start $HB_TIMER
 │
 │  Tail logs:
 │    journalctl --user -fu $GW_UNIT

package/templates/hermes-agent/template/.scripts/_lib.sh

@@ -147,15 +147,14 @@ if [[ -f "$FLEET_ENV" ]]; then
 fi
 
 # Tools we expect on the host
-HERMES_BIN="${HERMES_BIN:-${HERMES_FLEET_BIN:-$(config_get fleet.hermes_bin '/home/delorenj/code/hermes-agent/.venv/bin/hermes')}}"
-HERMES_AGENT_REPO="${HERMES_AGENT_REPO:-${HERMES_FLEET_REPO:-$(config_get fleet.hermes_repo '/home/delorenj/code/hermes-agent')}}"
+HERMES_BIN="${HERMES_BIN:-${HERMES_FLEET_BIN:-$(config_get fleet.hermes_bin "$HOME/.hermes/hermes-agent/.venv/bin/hermes")}}"
+HERMES_AGENT_REPO="${HERMES_AGENT_REPO:-${HERMES_FLEET_REPO:-$(config_get fleet.hermes_repo "$HOME/.hermes/hermes-agent")}}"
 HERMES_OAUTH_FILE="${HERMES_OAUTH_FILE:-${HERMES_FLEET_OAUTH_FILE:-$(config_get fleet.oauth_file "$HOME/.hermes/auth.json")}}"
 CODEX_HOME="${CODEX_HOME:-${HERMES_FLEET_CODEX_HOME:-$(config_get fleet.codex_home "$HOME/.codex")}}"
-FLEET_HOME="${HERMES_FLEET_HOME:-$(config_get fleet.home "$HOME/.hermes")}"
 # Prefer a scaffold vendored into this agent directory; fall back to the configured template path.
 RUNTIME_SCAFFOLD_DIR="${RUNTIME_SCAFFOLD_DIR:-$ROLE_DIR/.runtime-scaffold}"
 if [[ ! -d "$RUNTIME_SCAFFOLD_DIR" ]]; then
-  RUNTIME_SCAFFOLD_DIR="${HERMES_TEMPLATE_RUNTIME_SCAFFOLD:-$(config_get fleet.runtime_scaffold_dir '/home/delorenj/code/hermes-agent-template/runtime-scaffold')}"
+  RUNTIME_SCAFFOLD_DIR="${HERMES_TEMPLATE_RUNTIME_SCAFFOLD:-$(config_get fleet.runtime_scaffold_dir "$HOME/code/hermes-agent-template/runtime-scaffold")}"
 fi
 REGISTRY_FILE="${REGISTRY_FILE:-${HERMES_FLEET_REGISTRY_FILE:-$(config_get fleet.registry_file "$HOME/.hermes/agents-registry.yaml")}}"
 
@@ -168,25 +167,11 @@ BLOODBANK_COMPOSE_DIR="${BLOODBANK_COMPOSE_DIR:-$(config_get bloodbank.compose_d
 PLANE_BASE="${PLANE_BASE:-$(config_get plane.base 'https://plane.delo.sh')}"
 PLANE_API_KEY="${PLANE_API_KEY:-${PLANE_33GOD_API_KEY:-}}"
 
-export FLEET_ENV HERMES_BIN HERMES_AGENT_REPO HERMES_OAUTH_FILE CODEX_HOME FLEET_HOME \
+export FLEET_ENV HERMES_BIN HERMES_AGENT_REPO HERMES_OAUTH_FILE CODEX_HOME \
        RUNTIME_SCAFFOLD_DIR REGISTRY_FILE \
        BLOODBANK_NATS_HOST BLOODBANK_NATS_PORT BLOODBANK_COMPOSE_DIR \
        PLANE_BASE PLANE_API_KEY
 
-profile_home() {
-  printf '%s/profiles/%s' "$FLEET_HOME" "$PROFILE_NAME"
-}
-
-profile_or_runtime_home() {
-  local profile
-  profile="$(profile_home)"
-  if [[ -d "$profile" ]]; then
-    printf '%s' "$profile"
-  else
-    printf '%s/runtime' "$ROLE_DIR"
-  fi
-}
-
 # systemd --user health check. Accept running/degraded/starting — only one
 # broken unit shouldn't disqualify the rest of the user manager.
 systemd_user_available() {

package/templates/hermes-agent/template/.scripts/checkpoint.sh

@@ -1,6 +1,11 @@
 #!/usr/bin/env bash
 # Auto-checkpoint commit for the agent's runtime submodule.
 # Idempotent — exits 0 with no commit if there are no changes.
+#
+# Secret-scan gate (PJAN): before committing, the staged diff is scanned for
+# high-signal credentials. On a hit the checkpoint ABORTS — it unstages, does
+# NOT commit or push, logs loudly, and exits non-zero — so the known
+# auto-commit secret-leak recurrence cannot re-leak through the heartbeat.
 set -euo pipefail
 
 RUNTIME_DIR="$(cd "$(dirname "$0")/../runtime" && pwd)"
@@ -9,9 +14,40 @@ cd "$RUNTIME_DIR"
 # Skip if not a git repo (e.g. submodule not initialized)
 [[ -d .git || -f .git ]] || exit 0
 
+# Returns 0 when the staged diff looks clean, 1 when a likely secret is present.
+secret_scan_ok() {
+  local added
+  added="$(git diff --cached -U0 --no-color 2>/dev/null | grep -E '^\+' | grep -vE '^\+\+\+ ' || true)"
+  [[ -n "$added" ]] || return 0
+
+  # Dependency-free, high-signal patterns (distinctive prefixes → ~zero false
+  # positives) over ADDED lines only.
+  if printf '%s\n' "$added" | grep -Eq \
+    'AKIA[0-9A-Z]{16}|ASIA[0-9A-Z]{16}|-----BEGIN [A-Z ]*PRIVATE KEY-----|gh[posru]_[A-Za-z0-9]{20,}|xox[baprs]-[0-9A-Za-z-]{10,}|sk-[A-Za-z0-9]{20,}|glpat-[A-Za-z0-9_-]{20,}|AIza[0-9A-Za-z_-]{35}'; then
+    return 1
+  fi
+
+  # Deeper scan when gitleaks is installed (exit 1 == leaks found; other
+  # non-zero == tool/usage error, which we ignore so checkpoints aren't blocked).
+  if command -v gitleaks >/dev/null 2>&1; then
+    local rc=0
+    git diff --cached --no-color 2>/dev/null | gitleaks stdin --no-banner --redact >/dev/null 2>&1 || rc=$?
+    [[ "$rc" -eq 1 ]] && return 1
+  fi
+  return 0
+}
+
 git add -A
 if git diff --cached --quiet; then
   exit 0
 fi
+
+if ! secret_scan_ok; then
+  printf '[checkpoint] ABORT: potential secret in staged runtime changes — not committing/pushing.\n' >&2
+  printf '[checkpoint] Inspect: git -C %s diff --cached   (remove the secret or add a .gitignore rule)\n' "$RUNTIME_DIR" >&2
+  git reset -q || true
+  exit 3
+fi
+
 git -c commit.gpgsign=false commit -m "checkpoint $(date -Iseconds)" >/dev/null
 git push origin HEAD 2>&1 | tail -1 || true

package/templates/hermes-agent/template/.scripts/config.example.toml

@@ -11,15 +11,13 @@
 # somewhere other than $XDG_CONFIG_HOME/hermes-agent-template/config.toml.
 
 [fleet]
-# Root Hermes fleet home. Named profiles live under <home>/profiles/<name>.
-home = "~/.hermes"
 # Absolute path to the shared Hermes executable every agent launcher execs.
-hermes_bin = "/home/delorenj/code/hermes-agent/.venv/bin/hermes"
+hermes_bin = "~/.hermes/hermes-agent/.venv/bin/hermes"
 # Checkout of the hermes-agent repo. Its .venv is used to install nats-py, etc.
-hermes_repo = "/home/delorenj/code/hermes-agent"
+hermes_repo = "~/.hermes/hermes-agent"
 # Fallback runtime scaffold dir — used only when an agent's vendored
 # ./.runtime-scaffold is missing.
-runtime_scaffold_dir = "/home/delorenj/code/hermes-agent-template/runtime-scaffold"
+runtime_scaffold_dir = "~/code/hermes-agent-template/runtime-scaffold"
 # Shared fleet source-of-truth env file + fleet registry. ~ is expanded.
 fleet_env = "~/.hermes/fleet.env"
 registry_file = "~/.hermes/agents-registry.yaml"
@@ -29,12 +27,20 @@ oauth_file = "~/.hermes/auth.json"
 codex_home = "~/.codex"
 # Canonical external skills dir mirrored into each agent profile.
 canonical_skills_dir = "/home/delorenj/.agents/skills"
+# Voxxy plugin + service defaults for Hermes PM agents.
+voxxy_plugin_dir = "~/code/voxxy/plugins/tts/voxxy"
+vox_url = "https://vox.delo.sh"
+# Canonical PM config.yaml the provisioner seeds each runtime's config.yaml from.
+# This is the fleet-wide Hermes inference/skill config (model, toolsets, etc.)
+# every agent runtime starts from. ~ is expanded.
+# canonical_pm_config = "~/.hermes/config.yaml"
 # Skills symlinked into every agent's runtime skills root.
 symlinked_runtime_skills = [
   "delonet-conventions",
   "delonet-dotenv",
   "hermes-pm-template-maintenance",
   "hindsight",
+  "33god-projects",
   "subagent-driven-development",
 ]
 

package/templates/hermes-agent/template/.scripts/{scrum-master/continuous-ticket-sentinel.sh → heartbeat.sh}

@@ -1,21 +1,27 @@
 #!/usr/bin/env bash
-# Provider-agnostic continuous-ticket sentinel heartbeat (Scrum Master engine).
+# Unified agent heartbeat: continuous board-reconciliation sentinel pass +
+# gated runtime checkpoint, fused into one systemd-timer tick.
 #
-# Runs often (systemd timer). Only invokes Hermes when local state says no worker
-# is active, the worker heartbeat is stale, or the last full run is outside the
-# cooldown window. The full pass executes the role's
-# continuous-ticket-sentinel.prompt.md, which reasons about tickets through the
-# ticket-provider adapter (Linear | Plane | Trello) — never a hardcoded backend.
+# Runs often (systemd timer, ~1 min). Only invokes Hermes for a full
+# reconciliation pass when local state says no worker is active, the worker
+# heartbeat is stale, or the last full run is outside the cooldown window. The
+# full pass executes the role's sentinel.prompt.md, which reasons about tickets
+# through the ticket-provider adapter (Linear | Plane | Trello) — never a
+# hardcoded backend. After the sentinel decision (skip OR full), it
+# opportunistically checkpoints the runtime submodule (commit+push) at most once
+# per HEARTBEAT_CHECKPOINT_MIN_INTERVAL_SECONDS, so memory/session state stays
+# durable without pushing every minute.
 set -euo pipefail
 
-ENGINE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"   # .scripts/scrum-master
-ROLE_DIR="$(cd "$ENGINE_DIR/../.." && pwd)"
+ROLE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"   # agents/hermes/<role>
 RUNTIME="$ROLE_DIR/runtime"
-PROMPT_FILE="$ENGINE_DIR/continuous-ticket-sentinel.prompt.md"
+PROMPT_FILE="$ROLE_DIR/.scripts/sentinel.prompt.md"
 STATE_FILE="$RUNTIME/continuous-ticket-sentinel-state.json"
 LOCK_FILE="$RUNTIME/continuous-ticket-sentinel.lock"
 ROLE_YAML="$ROLE_DIR/role.yaml"
-LOG_FILE="$RUNTIME/logs/continuous-ticket-sentinel.log"
+LOG_FILE="$RUNTIME/logs/heartbeat.log"
+CHECKPOINT_BIN="$ROLE_DIR/.scripts/checkpoint.sh"
+CHECKPOINT_STAMP="$RUNTIME/.last-checkpoint"
 
 # Hermes binary: explicit env > ~/.config/hermes-agent/hermes-bin > PATH.
 HERMES_BIN="${HERMES_BIN:-}"
@@ -30,6 +36,24 @@ fi
 ACTIVE_MAX_IDLE_SECONDS="${SENTINEL_ACTIVE_MAX_IDLE_SECONDS:-600}"
 FULL_RUN_COOLDOWN_SECONDS="${SENTINEL_FULL_RUN_COOLDOWN_SECONDS:-300}"
 BLOCKED_FULL_RUN_COOLDOWN_SECONDS="${SENTINEL_BLOCKED_FULL_RUN_COOLDOWN_SECONDS:-900}"
+CHECKPOINT_MIN_INTERVAL_SECONDS="${HEARTBEAT_CHECKPOINT_MIN_INTERVAL_SECONDS:-3600}"
+
+# Opportunistic runtime checkpoint, fused into the heartbeat. Runs at most once
+# per interval; checkpoint.sh is itself a no-op on a clean tree, so this only
+# commits+pushes when there is genuinely new state AND enough time has passed
+# since the last push. Never fails the heartbeat — checkpoint is best-effort.
+maybe_checkpoint() {
+  [[ -x "$CHECKPOINT_BIN" ]] || return 0
+  local now last
+  now="$(date +%s)"
+  last="$(cat "$CHECKPOINT_STAMP" 2>/dev/null || echo 0)"
+  [[ "$last" =~ ^[0-9]+$ ]] || last=0
+  if (( now - last >= CHECKPOINT_MIN_INTERVAL_SECONDS )); then
+    printf '%s' "$now" > "$CHECKPOINT_STAMP" 2>/dev/null || true
+    printf '[heartbeat] checkpoint tick (>= %ss since last push)\n' "$CHECKPOINT_MIN_INTERVAL_SECONDS"
+    "$CHECKPOINT_BIN" || true
+  fi
+}
 
 yaml_value() {
   python3 - "$ROLE_YAML" "$1" <<'PYEOF'
@@ -42,21 +66,37 @@ print(m.group(1).strip() if m else "")
 PYEOF
 }
 
+yaml_block_value() {
+  python3 - "$ROLE_YAML" "$1" "$2" <<'PYEOF'
+import re, sys
+from pathlib import Path
+path, block_name, key = sys.argv[1:4]
+text = Path(path).read_text()
+m = re.search(rf'(?m)^{re.escape(block_name)}:[ \t]*\n((?:[ \t]+\S.*\n?)*)', text)
+block = m.group(1) if m else ""
+me = re.search(rf'(?m)^[ \t]+{re.escape(key)}:[ \t]*([^\n#]*)', block)
+value = me.group(1).strip() if me else ""
+print(value.strip().strip('"').strip("'"))
+PYEOF
+}
+
+# True only when role.yaml has a reconcile: block with enabled: true. Block-aware
+# so an unrelated `enabled:` leaf elsewhere in the file can't flip it on.
+reconcile_enabled() {
+  python3 - "$ROLE_YAML" <<'PYEOF'
+import re, sys
+from pathlib import Path
+text = Path(sys.argv[1]).read_text()
+m = re.search(r'(?m)^reconcile:[ \t]*\n((?:[ \t]+\S.*\n?)*)', text)
+block = m.group(1) if m else ""
+me = re.search(r'(?m)^[ \t]+enabled:[ \t]*"?([A-Za-z]+)"?', block)
+print("true" if (me and me.group(1).lower() == "true") else "false")
+PYEOF
+}
+
 AGENT_ID="$(yaml_value agent_id)"
 REPO_NAME="$(yaml_value repo)"
-PROFILE_NAME="$(yaml_value profile)"
-PROVIDER="$(yaml_value name)"   # ticket_provider.name leaf
-[[ -n "$PROFILE_NAME" ]] || PROFILE_NAME="$AGENT_ID"
-FLEET_HOME="${HERMES_FLEET_HOME:-$HOME/.hermes}"
-PROFILE_HOME="$FLEET_HOME/profiles/$PROFILE_NAME"
-HERMES_PROFILE_HOME="${HERMES_HOME:-}"
-if [[ -z "$HERMES_PROFILE_HOME" ]]; then
-  if [[ -d "$PROFILE_HOME" ]]; then
-    HERMES_PROFILE_HOME="$PROFILE_HOME"
-  else
-    HERMES_PROFILE_HOME="$RUNTIME"
-  fi
-fi
+PROVIDER="$(yaml_block_value ticket_provider name)"
 
 repo_root() {
   local dir="$ROLE_DIR"
@@ -75,7 +115,7 @@ mkdir -p "$RUNTIME/logs"
 if command -v flock >/dev/null 2>&1; then
   exec 9>"$LOCK_FILE"
   if ! flock -n 9; then
-    printf '[sentinel] another heartbeat/full run is active; skipping\n'; exit 0
+    printf '[heartbeat] another heartbeat/full run is active; skipping\n'; exit 0
   fi
 else
   LOCK_DIR="$LOCK_FILE.d"
@@ -83,14 +123,24 @@ else
     # Steal a stale lock older than 60 minutes (a crashed run left it behind).
     if [ -n "$(find "$LOCK_DIR" -maxdepth 0 -mmin +60 2>/dev/null)" ]; then
       rmdir "$LOCK_DIR" 2>/dev/null && mkdir "$LOCK_DIR" 2>/dev/null \
-        || { printf '[sentinel] another run active; skipping\n'; exit 0; }
+        || { printf '[heartbeat] another run active; skipping\n'; exit 0; }
     else
-      printf '[sentinel] another heartbeat/full run is active; skipping\n'; exit 0
+      printf '[heartbeat] another heartbeat/full run is active; skipping\n'; exit 0
     fi
   fi
   trap 'rmdir "$LOCK_DIR" 2>/dev/null' EXIT
 fi
 
+# Reconcile gate: the autonomous board-reconciliation pass runs only when
+# role.yaml's reconcile.enabled is true. Default off → the heartbeat just
+# checkpoints (behaves like the legacy hourly checkpoint timer). Flip
+# reconcile.enabled to opt a repo into autonomous board reconciliation.
+if [[ "$(reconcile_enabled)" != "true" ]]; then
+  printf '[heartbeat] reconcile disabled (reconcile.enabled != true) — checkpoint-only tick\n'
+  maybe_checkpoint
+  exit 0
+fi
+
 decision="$(
   python3 - "$STATE_FILE" "$ACTIVE_MAX_IDLE_SECONDS" "$FULL_RUN_COOLDOWN_SECONDS" "$BLOCKED_FULL_RUN_COOLDOWN_SECONDS" <<'PYEOF'
 import json, subprocess, sys, time
@@ -157,7 +207,9 @@ state.update({"source":"hermes-continuous-ticket-sentinel","agent_id":agent_id,"
 state.setdefault("updated_at", now_iso); state.setdefault("summary", state.get("reason") or decision)
 tmp = path.with_suffix(path.suffix + ".tmp"); tmp.write_text(json.dumps(state, indent=2, sort_keys=True)+"\n"); tmp.replace(path)
 PYEOF
-    printf '[sentinel] %s\n' "$decision"; exit 0
+    printf '[heartbeat] %s\n' "$decision"
+    maybe_checkpoint
+    exit 0
     ;;
 esac
 
@@ -170,7 +222,7 @@ state = json.loads(path.read_text()) if path.exists() else {}
 now = time.time()
 state.update({"source":"hermes-continuous-ticket-sentinel","agent_id":agent_id,"repo":repo,
     "ticket_provider":provider,"status":"checking",
-    "summary":"Scrum Master is reconciling the ticket board, evidence, and worker state.",
+    "summary":"PM is reconciling the ticket board, evidence, and worker state.",
     "log_path":log_path,"last_heartbeat_at":datetime.fromtimestamp(now,timezone.utc).isoformat(),
     "last_decision":decision,"last_full_run_epoch":now,
     "last_full_run_started_at":datetime.fromtimestamp(now,timezone.utc).isoformat()})
@@ -179,7 +231,7 @@ PYEOF
 
 prompt="$(<"$PROMPT_FILE")"
 set +e
-env HERMES_HOME="$HERMES_PROFILE_HOME" "$HERMES_BIN" chat -Q --source cron --max-turns 90 -q "$prompt"
+env HERMES_HOME="$RUNTIME" "$HERMES_BIN" chat -Q --source cron --max-turns 90 -q "$prompt"
 status=$?
 set -e
 
@@ -197,11 +249,12 @@ state["last_runner_exit_code"] = exit_code; state["last_runner_completed_at"] =
 state.setdefault("last_full_run_epoch", time.time())
 if state.get("status") == "checking":
     state["status"] = "idle" if exit_code == 0 else "error"
-    state["summary"] = ("Scrum Master completed the reconciliation pass without claiming work."
-        if exit_code == 0 else "Scrum Master reconciliation failed; inspect the sentinel log.")
+    state["summary"] = ("PM completed the reconciliation pass without claiming work."
+        if exit_code == 0 else "PM reconciliation failed; inspect the heartbeat log.")
     state.setdefault("updated_at", now_iso)
 tmp = path.with_suffix(path.suffix + ".tmp"); tmp.write_text(json.dumps(state, indent=2, sort_keys=True)+"\n"); tmp.replace(path)
 print(0 if state.get("status") in {"active","blocked","stalled","idle"} else exit_code)
 PYEOF
 )"
+maybe_checkpoint
 exit "$runner_exit"

package/templates/hermes-agent/template/.scripts/lib/ticket-provider.sh

@@ -1,5 +1,5 @@
 # shellcheck shell=bash
-# Ticket-provider adapter dispatcher — the single seam between the Scrum Master
+# Ticket-provider adapter dispatcher — the single seam between the heartbeat
 # sentinel engine and a concrete ticket system (Linear | Plane | Trello).
 #
 # The engine NEVER calls a provider directly. It calls `tp <op> [args...]`,

package/templates/hermes-agent/template/.scripts/providers/plane.sh

@@ -179,10 +179,16 @@ print(json.dumps({"id":i.get("id",""),"key":i.get("sequence_id",""),"title":i.ge
   create_board)
     NAME="${1:?usage: create_board <name> <ident> <desc>}"; IDENT="${2:-}"; DESC="${3:-}"
     [ -n "$WS" ] || die "workspace not set"
-    EXIST="$(api GET "projects/?per_page=200" | IDENT="$IDENT" python3 -c 'import sys,json,os
+    EXIST="$(api GET "projects/?per_page=200" | NAME="$NAME" IDENT="$IDENT" python3 -c 'import sys,json,os
 d=json.load(sys.stdin); rows=d.get("results", d if isinstance(d,list) else [])
-ident=os.environ["IDENT"].upper()
-print(next((p["id"] for p in rows if (p.get("identifier") or "").upper()==ident), ""))')"
+name=os.environ["NAME"].strip().lower(); ident=os.environ["IDENT"].upper()
+# Repo NAME is the primary key — links an existing repo board even if its
+# identifier differs (Plane does not enforce unique names, so this prevents
+# duplicate boards). Fall back to identifier match; empty -> create new.
+pid=next((p["id"] for p in rows if str(p.get("name","")).strip().lower()==name), "")
+if not pid and ident:
+    pid=next((p["id"] for p in rows if (p.get("identifier") or "").upper()==ident), "")
+print(pid)')"
     if [ -n "$EXIST" ]; then PID="$EXIST"; else
       PID="$(api POST "projects/" \
         "$(python3 -c 'import json,sys; print(json.dumps({"name":sys.argv[1],"identifier":sys.argv[2],"description":sys.argv[3]}))' "$NAME" "$IDENT" "$DESC")" \

package/templates/hermes-agent/template/.scripts/{scrum-master → sentinel}/bin/emit-event.py

@@ -1,9 +1,9 @@
 #!/usr/bin/env python3
 """Emit a local BloodBank-style CloudEvents envelope (provider-agnostic).
 
-Dependency-free. Appends JSONL locally so the Scrum Master engine records an
+Dependency-free. Appends JSONL locally so the sentinel engine records an
 event trail even when NATS/BloodBank is offline. Identical envelope shape to the
-Hermes gateway; see .scripts/scrum-master/docs/bloodbank-events.md.
+Hermes gateway; see .scripts/sentinel/docs/bloodbank-events.md.
 """
 from __future__ import annotations
 
@@ -55,8 +55,8 @@ def main() -> int:
     parser.add_argument("--field", action="append", type=parse_field, default=[])
     parser.add_argument("--data-json")
     parser.add_argument("--source")
-    parser.add_argument("--producer", default=os.environ.get("BLOODBANK_PRODUCER", "local-script:scrum-master"))
-    parser.add_argument("--service", default=os.environ.get("BLOODBANK_SERVICE", "hermes-scrum-master"))
+    parser.add_argument("--producer", default=os.environ.get("BLOODBANK_PRODUCER", "local-script:sentinel"))
+    parser.add_argument("--service", default=os.environ.get("BLOODBANK_SERVICE", "hermes-sentinel"))
     parser.add_argument("--actor-id", default=os.environ.get("BLOODBANK_ACTOR_ID", os.environ.get("USER", "local-agent")))
     parser.add_argument("--actor-cli", default=os.environ.get("BLOODBANK_ACTOR_CLI", "script"))
     parser.add_argument("--correlation-id", default=os.environ.get("BLOODBANK_CORRELATION_ID"))
@@ -75,7 +75,7 @@ def main() -> int:
     if not log_path.is_absolute():
         log_path = root / log_path
 
-    source = args.source or "repo://scrum-master/bin/emit-event.py"
+    source = args.source or "repo://sentinel/bin/emit-event.py"
     event = {
         "specversion": "1.0",
         "type": args.event_type,

package/templates/hermes-agent/template/.scripts/{scrum-master → sentinel}/bin/issue-autonomous-review.sh

@@ -17,7 +17,7 @@
 # ticket-provider adapter (tp transition <id> completed), so the same logic works
 # on Linear | Plane | Trello.
 #
-# Protocol: .scripts/scrum-master/docs/autonomous-delegated-review.md
+# Protocol: .scripts/sentinel/docs/autonomous-delegated-review.md
 #
 # Usage: issue-autonomous-review.sh ISSUE_ID REPORT_FILE [--close]
 #
@@ -33,7 +33,7 @@ ISSUE="$1"; REPORT="$2"; CLOSE=0
 case "$ISSUE" in *[!A-Za-z0-9_-]*) printf 'Invalid issue id: %s\n' "$ISSUE" >&2; exit 2 ;; esac
 
 BIN_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-ENGINE_DIR="$(cd "$BIN_DIR/.." && pwd)"          # .scripts/scrum-master
+ENGINE_DIR="$(cd "$BIN_DIR/.." && pwd)"          # .scripts/sentinel
 SCRIPTS_DIR="$(cd "$ENGINE_DIR/.." && pwd)"      # .scripts
 ROLE_DIR="$(cd "$SCRIPTS_DIR/.." && pwd)"
 ROLE_YAML="$ROLE_DIR/role.yaml"
@@ -48,12 +48,12 @@ yget() { sed -n "s/^[[:space:]]*$1:[[:space:]]*//p" "$ROLE_YAML" 2>/dev/null | h
 REPO="$(yget repo)"; REPO="${REPO:-unknown}"
 # Informational only: recorded in the decision event/comment, never a blocking
 # wait. Default 0 (no grace); an operator may set grace_hours>0 to reintroduce one.
-GRACE_HOURS="${DRUMJANGLER_AUTO_REVIEW_GRACE_HOURS:-$(yget grace_hours)}"; GRACE_HOURS="${GRACE_HOURS:-0}"
+GRACE_HOURS="${RECONCILE_GRACE_HOURS:-$(yget grace_hours)}"; GRACE_HOURS="${GRACE_HOURS:-0}"
 AUTO="$(yget auto_review)"; AUTO="${AUTO:-true}"
 EVT="bloodbank.v1.repo.$REPO.issue.autonomous_review.decided"
 
-if [[ "${SCRUM_MASTER_AUTO_REVIEW:-$AUTO}" == "false" || "${SCRUM_MASTER_AUTO_REVIEW:-}" == "off" ]]; then
-  printf 'Autonomous review is disabled (scrum_master.auto_review=false).\n' >&2; exit 3
+if [[ "${RECONCILE_AUTO_REVIEW:-$AUTO}" == "false" || "${RECONCILE_AUTO_REVIEW:-}" == "off" ]]; then
+  printf 'Autonomous review is disabled (reconcile.auto_review=false).\n' >&2; exit 3
 fi
 [[ -f "$REPORT" ]]   || { printf 'Missing review report file: %s\n' "$REPORT" >&2; exit 2; }
 [[ -f "$EVIDENCE" ]] || { printf 'Missing issue evidence file: %s\n' "$EVIDENCE" >&2; exit 2; }
@@ -86,7 +86,7 @@ if sh "$CLOSE_GATE" "$ISSUE" "$ROOT" >/dev/null 2>&1 </dev/null; then GATE=pass;
 if [[ -n "$HOLD" ]]; then DECISION=held; else DECISION=accepted; fi
 
 python3 "$EMIT" "$EVT" --root "$ROOT" \
-  --source "repo://scrum-master/bin/issue-autonomous-review.sh" --actor-id "$REVIEWER" \
+  --source "repo://sentinel/bin/issue-autonomous-review.sh" --actor-id "$REVIEWER" \
   --field issue="$ISSUE" --field decision="$DECISION" --field drift="$DRIFT" \
   --field close_gate="$GATE" --field reviewer_agent="$REVIEWER" \
   --field evidence_file="$EVIDENCE" --field report_file="$REPORT" \

package/templates/hermes-agent/template/.scripts/{scrum-master → sentinel}/bin/issue-close-gate.sh

@@ -50,13 +50,13 @@ grep -q 'Close recommendation: ready' "$FILE" || { printf 'Close recommendation
 
 if [ "$FAIL" -ne 0 ]; then
   python3 "$EMIT" "$EVT_PREFIX.gate.failed" --root "$ROOT" \
-    --source "repo://scrum-master/bin/issue-close-gate.sh" \
+    --source "repo://sentinel/bin/issue-close-gate.sh" \
     --field issue="$ISSUE" --field evidence_file="$FILE" --quiet </dev/null || true
   printf '\nCLOSE GATE: FAIL for %s\n' "$ISSUE" >&2
   exit 1
 fi
 
 python3 "$EMIT" "$EVT_PREFIX.gate.passed" --root "$ROOT" \
-  --source "repo://scrum-master/bin/issue-close-gate.sh" \
+  --source "repo://sentinel/bin/issue-close-gate.sh" \
   --field issue="$ISSUE" --field evidence_file="$FILE" --quiet </dev/null || true
 printf 'CLOSE GATE: PASS for %s\n' "$ISSUE"

package/templates/hermes-agent/template/.scripts/{scrum-master → sentinel}/docs/autonomous-delegated-review.md

@@ -1,10 +1,10 @@
 # Autonomous adversarial review (act, do not wait)
 
-Status: Scrum Master engine protocol (provider-agnostic)
+Status: sentinel engine protocol (provider-agnostic)
 
 ## Purpose
 
-When a ticket reaches the review lane, the Scrum Master sentinel runs an
+When a ticket reaches the review lane, the sentinel runs an
 **independent adversarial review** of the work against the operator's locked
 intent and acts on the verdict autonomously. This is the **normal per-pass
 path** for review-lane tickets — not a deliberately narrow escape hatch, and not
@@ -55,8 +55,8 @@ exactly as before:
    the implementer recorded in the evidence (`Worker:` / `Implemented by:`) and
    from the delegating PM. An implementer NEVER clears their own work.
 
-There is no mandatory grace window. `scrum_master.grace_hours` (role.yaml;
-override env `DRUMJANGLER_AUTO_REVIEW_GRACE_HOURS`) defaults to `0` and is an
+There is no mandatory grace window. `reconcile.grace_hours` (role.yaml;
+override env `RECONCILE_GRACE_HOURS`) defaults to `0` and is an
 optional operator knob only — set `>0` to reintroduce a wait. The reviewer does
 not wait for the operator's first right of refusal; it reviews and acts.
 
@@ -84,7 +84,7 @@ Only `none`/`minor` with no unresolved critical/high findings may be accepted.
 Run from the role's bin (couples gate + drift + event + acceptance):
 
 ```bash
-.scripts/scrum-master/bin/issue-autonomous-review.sh <ISSUE> <REPORT>
+.scripts/sentinel/bin/issue-autonomous-review.sh <ISSUE> <REPORT>
 ```
 
 - **accepted** — independent adversarial review cleared it (drift `none|minor`,
@@ -109,7 +109,7 @@ operator's deferred-QA queue — and is NOT auto-transitioned to `completed`.
 loop:
 
 ```bash
-.scripts/scrum-master/bin/issue-autonomous-review.sh <ISSUE> <REPORT> --close
+.scripts/sentinel/bin/issue-autonomous-review.sh <ISSUE> <REPORT> --close
 ```
 
 ## Decision event
@@ -162,7 +162,7 @@ Write `<ISSUE>.review.md`; the script validates it:
 
 ## Operator override
 
-`scrum_master.auto_review: false` (role.yaml) or `SCRUM_MASTER_AUTO_REVIEW=off`
+`reconcile.auto_review: false` (role.yaml) or `RECONCILE_AUTO_REVIEW=off`
 disables autonomous acceptance. Autonomous acceptances are fully traceable via
 the decision events in
 `_bmad-output/implementation-artifacts/bloodbank-events.jsonl`.

package/templates/hermes-agent/template/.scripts/{scrum-master → sentinel}/docs/bloodbank-events.md

@@ -1,6 +1,6 @@
-# Scrum Master workflow events
+# Sentinel workflow events
 
-Status: Scrum Master engine protocol (provider-agnostic)
+Status: Sentinel engine protocol (provider-agnostic)
 
 ## Purpose
 
@@ -12,7 +12,7 @@ what happened.
 ## Emitter
 
 ```bash
-.scripts/scrum-master/bin/emit-event.py <event_type> --field key=value [...]
+.scripts/sentinel/bin/emit-event.py <event_type> --field key=value [...]
 ```
 
 Appends to `_bmad-output/implementation-artifacts/bloodbank-events.jsonl`

package/templates/hermes-agent/template/.scripts/{scrum-master → sentinel}/docs/continuous-ticket-orchestration.md

@@ -1,15 +1,15 @@
-# Continuous ticket orchestration (Scrum Master engine)
+# Continuous ticket orchestration (sentinel engine)
 
-Status: Scrum Master engine protocol (provider-agnostic)
+Status: sentinel engine protocol (provider-agnostic)
 
 ## Invariant
 
 If a ready ticket exists, exactly one implementation worker must be actively
-moving it, or the Scrum Master records why none can. Prefer one live thread over
+moving it, or the sentinel records why none can. Prefer one live thread over
 a quiet backlog. WIP limit: one active worker ticket.
 
-The Scrum Master owns the watch loop. Workers (codex, opencode, copilot, …) own
-implementation. The Scrum Master clears review-lane work via the autonomous
+The sentinel owns the watch loop. Workers (codex, opencode, copilot, …) own
+implementation. The sentinel clears review-lane work via the autonomous
 adversarial review (act, do not wait) protocol
 (`autonomous-delegated-review.md`), and still does not write application code or
 approve merges.
@@ -61,7 +61,7 @@ The loop never ends a pass with work parked waiting on the operator.
 ## Review and closure
 
 1. Run ticket verification.
-2. Run the close gate: `.scripts/scrum-master/bin/issue-close-gate.sh <ISSUE>`.
+2. Run the close gate: `.scripts/sentinel/bin/issue-close-gate.sh <ISSUE>`.
 3. Run the independent adversarial review — an adversarial microscope, with the
    reviewer agent NOT the implementer (`autonomous-delegated-review.md`). On a
    clean adversarial verdict the loop autonomously treats the ticket as done

package/templates/hermes-agent/template/.scripts/{scrum-master/continuous-ticket-sentinel.prompt.md.jinja → sentinel.prompt.md.jinja}

@@ -6,9 +6,10 @@ A cheap systemd heartbeat already decided this full pass is needed.
 Working repo: the git root containing this role at `agents/hermes/{{ role }}/`.
 Ticket provider: **{{ ticket_provider }}** (reached only through the adapter — see below).
 
-You are the **{{ target_repo }} Scrum Master**. Act autonomously, but stay inside
-the project contracts. Read `agents/hermes/{{ role }}/SOUL.md` and the engine
-docs under `.scripts/scrum-master/docs/` before acting:
+You are the **{{ target_repo }} PM**, running your continuous board-reconciliation
+pass. Act autonomously, but stay inside the project contracts. Read
+`agents/hermes/{{ role }}/SOUL.md` and the engine docs under
+`.scripts/sentinel/docs/` before acting:
 `continuous-ticket-orchestration.md`, `autonomous-delegated-review.md`,
 `bloodbank-events.md`.
 
@@ -46,7 +47,7 @@ on Linear, Plane, or Trello.
    independent reviewer and have it run, as a rigorous adversarial review:
 
    ```bash
-   .scripts/scrum-master/bin/issue-autonomous-review.sh <ISSUE> <REPORT>
+   .scripts/sentinel/bin/issue-autonomous-review.sh <ISSUE> <REPORT>
    ```
 
    (NO `--close`.) This is an adversarial microscope: it holds the work against