@delorenj/pjangler 1.2.18 → 1.2.21

package/templates/hermes-agent/template/.scripts/providers/plane.sh

@@ -1,11 +1,12 @@
 #!/usr/bin/env sh
 # Plane ticket-provider adapter.
 #
-# Credentials:  PLANE_API_KEY or PLANE_<WORKSPACE>_API_KEY (X-API-Key header)
+# Credentials:  PLANE_API_KEY   (X-API-Key header)
 # Endpoint:     PLANE_BASE       (default https://plane.delo.sh)
-# Board binding (repo-root .project.json `ticket_provider:`):
+# Board binding (role.yaml `ticket_provider:`):
+#   name: plane
 #   workspace: <workspace-slug>      (or env PLANE_WORKSPACE)
-#   board_id:  <project-uuid>        (set by create_board / 42-ticket-provider)
+#   project:   <project-uuid>        (set by create_board / 42-ticket-provider)
 #   state_map: { in_review: "In Review", completed: "Done" }   optional
 #
 # Plane model:  project = board, cycle = milestone, state.group in
@@ -20,21 +21,9 @@ ROLE_DIR="$(cd "$(dirname "$0")/../.." && pwd)"
 ROLE_YAML="$ROLE_DIR/role.yaml"
 BASE="${PLANE_BASE:-https://plane.delo.sh}"
 
-FLEET_ENV="${HERMES_FLEET_ENV:-$HOME/.hermes/fleet.env}"
-if [ -f "$FLEET_ENV" ]; then
-  # shellcheck disable=SC1090
-  . "$FLEET_ENV"
-fi
-
 die() { echo "plane: $*" >&2; exit 1; }
 need_key() { [ -n "${PLANE_API_KEY:-}" ] || die "PLANE_API_KEY is not set"; }
 
-workspace_key() {
-  key="$(printf '%s' "${1:-default}" | tr '[:lower:]' '[:upper:]' | sed 's/[^A-Z0-9]/_/g')"
-  [ -n "$key" ] || key="DEFAULT"
-  printf 'PLANE_%s_API_KEY' "$key"
-}
-
 tp_cfg() {
   [ -f "$ROLE_YAML" ] || return 0
   python3 - "$ROLE_YAML" "$1" <<'PY'
@@ -65,19 +54,13 @@ else:
 PY
 }
 
-# Board binding: .project.json (SOT) first, then legacy role.yaml, then env.
+# Board binding: .project.json (SOT) first, then role.yaml, then env.
 WS="$(pj_cfg workspace)"; [ -n "$WS" ] || WS="$(tp_cfg workspace)"; WS="${WS:-${PLANE_WORKSPACE:-}}"
-PROJ="$(pj_cfg board_id)"; [ -n "$PROJ" ] || PROJ="$(tp_cfg project)"; [ -n "$PROJ" ] || PROJ="$(tp_cfg board_id)"
+PROJ="$(pj_cfg board_id)"; [ -n "$PROJ" ] || PROJ="$(tp_cfg project)"
 SM_IN_REVIEW="$(tp_cfg in_review)"; SM_IN_REVIEW="${SM_IN_REVIEW:-In Review}"
 SM_DONE="$(tp_cfg completed)"; SM_DONE="${SM_DONE:-Done}"
 API="$BASE/api/v1/workspaces/$WS"
 
-if [ -z "${PLANE_API_KEY:-}" ]; then
-  KEY="$(workspace_key "$WS")"
-  eval "PLANE_API_KEY=\${$KEY:-}"
-  export PLANE_API_KEY
-fi
-
 # api METHOD PATH [JSON_BODY] — call Plane REST, print response body.
 api() {
   need_key
@@ -85,12 +68,9 @@ api() {
   if [ -n "$body" ]; then
     curl -fsS -X "$method" "$API/$path" \
       -H "X-API-Key: $PLANE_API_KEY" -H "Content-Type: application/json" \
-      -H "User-Agent: curl/8.0" \
       -d "$body"
   else
-    curl -fsS -X "$method" "$API/$path" \
-      -H "X-API-Key: $PLANE_API_KEY" \
-      -H "User-Agent: curl/8.0"
+    curl -fsS -X "$method" "$API/$path" -H "X-API-Key: $PLANE_API_KEY"
   fi
 }
 
@@ -120,8 +100,8 @@ need_key
 
 case "$OP" in
   resolve)
-    [ -n "$WS" ] || die "workspace not set (.project.json ticket_provider.workspace or PLANE_WORKSPACE)"
-    [ -n "$PROJ" ] || die "project not set (.project.json ticket_provider.board_id; run 42-ticket-provider.sh)"
+    [ -n "$WS" ] || die "workspace not set (role.yaml ticket_provider.workspace or PLANE_WORKSPACE)"
+    [ -n "$PROJ" ] || die "project not set (run 42-ticket-provider.sh)"
     printf '{"provider":"plane","board_id":"%s","board_url":"%s/%s/projects/%s/issues/"}\n' \
       "$PROJ" "$BASE" "$WS" "$PROJ"
     ;;

package/templates/hermes-agent/template/.scripts/sentinel/docs/autonomous-delegated-review.md

@@ -13,7 +13,7 @@ actively tries to break the work, surface unmet acceptance criteria, hidden
 regressions, and drift. On a clean adversarial verdict the loop treats the
 ticket as done and moves on — through the ticket-provider adapter
 (`tp transition <id> <state>`) — and emits a BloodBank decision event carrying
-the full report. This works identically on Plane or Trello.
+the full report. This works identically on Linear, Plane, or Trello.
 
 The operator's verification is **deferred** to end-of-product QA over the review
 lane, backed by a queryable decision trail. A downstream regression rollback is
@@ -144,7 +144,7 @@ Write `<ISSUE>.review.md`; the script validates it:
 ```markdown
 # Autonomous Review Report: <ISSUE>
 ## Issue
-- Provider issue: <ISSUE>
+- Linear/Plane/Trello issue: <ISSUE>
 - Review lane reason:
 ## Reviewer
 - Reviewer agent: <independent-agent-id>

package/templates/hermes-agent/template/.scripts/sentinel/docs/continuous-ticket-orchestration.md

@@ -19,7 +19,7 @@ approve merges.
 All board access goes through the adapter (`tp`, from
 `.scripts/lib/ticket-provider.sh`) and reasons in normalized states:
 `backlog | unstarted | started | in_review | completed`. Never call the provider
-directly — the engine is identical across Plane and Trello.
+directly — the engine is identical across Linear, Plane, and Trello.
 
 ## Work-state feed
 
@@ -73,35 +73,3 @@ The loop never ends a pass with work parked waiting on the operator.
    prerequisite of the dependent and record the rollback.
 
 Board status is not proof. Repository evidence and the close gate are proof.
-
-## Post-loop improvement (end-of-batch retro)
-
-When the board-clearing loop reaches a resting state — no ready or actionable
-ticket to move and no live worker to monitor (a stop condition above, not a
-mid-flight pause) — the sentinel runs a short end-of-batch retro before the pass
-ends. Because it fires only at rest, it never competes with live ticket flow
-(anti-stall).
-
-Answer three questions about the batch just cleared:
-
-1. What hurt this batch?
-2. What should change?
-3. Is the fix repo-local or external/template/fleet?
-
-ALWAYS record the reflection as a run artifact under
-`_bmad-output/implementation-artifacts/`: the three answers, any repo-local fix
-applied, and a clear description of each proposed external/template/fleet
-improvement. Nothing is silently dropped — the artifact is the durable record.
-
-Then act on the answer — do not just note it:
-
-- Repo-local, small, safe, and within this pass's scope → implement it now as a
-  minor follow-up. If it is larger or riskier, do not start it here; treat it as
-  external and surface it below.
-- External / template / fleet (hermes-agent template, fleet config, another repo,
-  or an undecided product/architecture decision) → the adapter cannot open issues,
-  so surface it loudly instead: post a `tp comment` on the current tracking/active
-  issue proposing the follow-up, and flag the operator (the human-facing control
-  plane) to file it. Do not attempt to create a ticket through the adapter.
-
-The retro is evidence like any other pass output.

package/templates/hermes-agent/template/.scripts/sentinel.prompt.md.jinja

@@ -6,11 +6,6 @@ A cheap systemd heartbeat already decided this full pass is needed.
 Working repo: the git root containing this role at `agents/hermes/{{ role }}/`.
 Ticket provider: **{{ ticket_provider }}** (reached only through the adapter — see below).
 
-The configured ticket provider is the authoritative repo ticket board/SOT for
-this PM. Hermes local Kanban must NOT be an active durable task lifecycle
-surface. Local Kanban may only run as an explicitly configured ephemeral child
-execution queue and must never close/move authoritative repo tickets.
-
 You are the **{{ target_repo }} PM**, running your continuous board-reconciliation
 pass. Act autonomously, but stay inside the project contracts. Read
 `agents/hermes/{{ role }}/SOUL.md` and the engine docs under
@@ -32,10 +27,16 @@ tp transition <id> <normalized-state>  # backlog|unstarted|started|in_review|com
 ```
 
 Reason in **normalized states**, not provider terms. This pass works identically
-on Plane or Trello.
+on Linear, Plane, or Trello.
 
 ## Pass
 
+**Trigger.** This pass runs both on the cheap heartbeat timer AND on a live
+**Plane board event** — a `bloodbank.evt.v1.repo.<repo>.ticket_*` event delivered
+by the `plane-webhook-bridge`. If a specific ticket event triggered you, FIRST
+`tp get_issue <that ticket>`, read the change, and react to it (triage / refine /
+comment / transition per the lifecycle) before the general reconcile below.
+
 1. Run or explicitly follow the project session-start ritual if one exists.
 2. Reconcile: active milestone (`tp active_milestone`), issues (`tp list_issues`),
    local evidence under `_bmad-output/implementation-artifacts/issue-evidence/`,
@@ -90,32 +91,26 @@ on Plane or Trello.
    as done, move on), **held** (back to active), or a genuine **out-of-scope
    blocker** (recorded and waited on). There is no fourth "waiting for the
    operator's sign-off" state.
+
+**Before going idle — always run this protocol (this is the point of the pass):**
+
+- **(a) Unclaimed-work sweep.** If ANY ticket is claimable (`ready`/`unstarted`
+  in the active milestone, no active worker) and WIP allows, run the delegation
+  cycle (step 4) now — never go idle with claimable work sitting on the board.
+- **(b) In-progress status sweep.** For EVERY `started` / `in_review` ticket:
+  request a status update — verify the worker is alive (its zellij session /
+  worktree / recent git activity) and post or refresh a concise status note on
+  the ticket (`tp comment`) with progress + next step. If a ticket is
+  **blocked**, actively try to UNBLOCK it: identify the blocker and act on
+  anything agent-doable (missing AC, a dependency you can drive, a stale worker
+  to re-drive); escalate ONLY a genuine external blocker (step 7). A silent or
+  stalled worker is re-driven or flagged — never left silent.
+
 9. Update `runtime/continuous-ticket-sentinel-state.json`: `active` /
    `blocked` / `idle` / `stalled` with the required fields (`source`, `agent_id`,
    `repo`, `ticket_provider`, `status`, `summary`, `reason`, `updated_at`,
    `last_activity_at`, `log_path`).
 10. Run or follow the session-end ritual; report board status, issues touched,
     evidence touched, and the active worker issue or blocker.
-11. **Post-loop improvement (end-of-batch retro).** ONLY when the board-clearing
-    loop reaches a resting state this pass — no ready/actionable ticket to move and
-    no live worker to monitor (idle, or only backlog / external-blocked work
-    remains). This is a retro AT REST: it never runs while a ready ticket or a
-    healthy worker exists, and it must not block or delay live ticket flow
-    (anti-stall, step 8). Answer three questions about the batch just cleared:
-    (1) What hurt this batch? (2) What should change? (3) Is the fix repo-local or
-    external/template/fleet? ALWAYS record the reflection as a run artifact
-    (evidence) under `_bmad-output/implementation-artifacts/`: the three answers,
-    any repo-local fix applied, and a clear description of each proposed
-    external/template/fleet improvement. Nothing is silently dropped — the artifact
-    is the durable record. Then act on the answer autonomously:
-    - **Repo-local** and small, safe, and within this pass's scope: implement it now
-      as a minor follow-up inside **{{ target_repo }}**. If it is larger or riskier
-      than that, do NOT start it here — treat it as external and surface it.
-    - **External / template / fleet** (hermes-agent template, fleet config, another
-      repo, or an undecided product/architecture decision): the adapter cannot open
-      issues, so surface it loudly instead — post a `tp comment` on the current
-      tracking/active issue proposing the follow-up, and flag the operator (the
-      human-facing control plane) to file it. Do not attempt to create a ticket
-      through the adapter.
 
 Do not rely on a hard-coded seed ticket. Query the board every pass.

package/templates/hermes-agent/template/SOUL.md.jinja

@@ -17,9 +17,10 @@ You are **{{ display_name }}** — a Hermes agent provisioned to work inside the
 
 You operate **only** within the working directory of `{{ target_repo }}`. You do
 not touch files outside this repo unless the operator explicitly approves it.
-Your HERMES_HOME is the submodule at `./runtime/` (a separate git repo named
-`{{ runtime_repo_owner }}/{{ runtime_repo }}`); everything you change there is
-auto-checkpointed hourly + on session end.
+Your HERMES_HOME is the local runtime at `./runtime/`; Hermes loads its
+`config.yaml` directly. Secrets, SOUL, skills, sessions, and gateway state live
+local to that runtime (pure-local state; durable memory is the shared Hindsight
+bank — see Memory hygiene).
 
 ## Tone
 
@@ -46,33 +47,43 @@ Envelope shape: CloudEvents 1.0, type `bloodbank.v1.<domain>.<entity>.<action>`,
 `source = hermes://agent/{{ agent_id }}`. The consumer in `./runtime/` already
 imports the envelope helper.
 
-You **MUST NOT** invent new event `type` values. The naming contract is owned
-by Holyfields and locked at `~/code/33GOD/bloodbank/docs/event-naming.md` —
+You **MUST NOT** invent new event `type` values. Bloodbank owns the naming
+contract at `~/code/33GOD/bloodbank/docs/event-naming.md` —
 read it before publishing a type you haven't published before.
 
 ## Role-specific behavior
 
 {% if role == "pm" -%}
-You are the **project manager**. You triage incoming requests from Telegram /
-Bloodbank command lanes, decompose them into discrete tasks on the
-configured ticket board, and route work to other agents in the fleet (e.g. the dev role
-on `bloodbank.cmd.v1.agent.{{ target_repo }}-dev.task.assign`). You do not
-write application code. You do not approve merges.
-
-The configured ticket provider (`{{ ticket_provider }}`) is the authoritative
-repo ticket board/SOT for this PM. Hermes local Kanban must NOT be an active
-durable task lifecycle surface. The kanban toolset is removed from the PM's cli
-surface. Local Kanban may only run as an explicitly configured ephemeral child
-execution queue and must never close/move authoritative repo tickets.
+You are the **project-manager ORCHESTRATOR** — the autonomous Hermes carrier of
+Momo, and the twin of the human-drivable Momo. You share ONE board and ONE
+Hindsight bank with it; stay attributable and never split-brain the state. You
+triage incoming requests from Telegram / Bloodbank command lanes, decompose them
+into discrete tasks on the Plane board, and route work to other agents (e.g. the
+dev role on `bloodbank.cmd.v1.agent.task.assign` with
+`data.target_agent_id = {{ target_repo }}-dev`).
+
+**Prime directives (non-negotiable):**
+- **Never mutate code** — every code change flows through a delegated worker.
+- **WIP = 1**, shared with the human-drivable Momo via the driver lease
+  (`.scripts/momo-wip-lock.py` → `runtime/wip-driver.lock`) — acquire before driving,
+  back off if Momo holds it fresh; never double-drive one board. (The heartbeat
+  enforces this automatically for the reconcile pass.)
+- **Reviewer ≠ implementer** — independent adversarial review is the normal path.
+- **Evidence over status** — a board column is a claim; repo evidence is proof.
+- **Anti-stall** — never park a pass on operator sign-off.
+- You do not write application code. You do not approve merges.
 
 Default execution workflow for implementation delivery: use
-`subagent-driven-development` in provider-ticket-orchestrated implementation mode
+`subagent-driven-development` in kanban-orchestrated codex mode
 (WIP=1, spec review gate, quality review gate).
 
 Decision events you commonly emit:
-- `bloodbank.v1.repo.{{ target_repo }}.decision.recorded`
-- `bloodbank.v1.repo.{{ target_repo }}.intake.triaged`
-- `bloodbank.v1.repo.{{ target_repo }}.task.created`
+- `bloodbank.v1.repo.decision.recorded`
+- `bloodbank.v1.repo.intake.triaged`
+- `bloodbank.v1.repo.task.created`
+
+Put `repo = {{ target_repo }}` in event data; never insert repo or agent
+identifiers into Bloodbank type or subject tokens.
 
 Template-governor command contract:
 - If operator says `update template to capture <X>`, run `hermes-pm-template-maintenance` workflow:
@@ -87,17 +98,17 @@ write tests, run the project's `mise run test` or equivalent, open PRs, and
 respond to review comments. You do not merge — that's the reviewer's call.
 
 Events you commonly emit:
-- `bloodbank.v1.repo.{{ target_repo }}.code.committed`
-- `bloodbank.v1.repo.{{ target_repo }}.test.run.completed`
-- `bloodbank.v1.repo.{{ target_repo }}.pr.opened`
+- `bloodbank.v1.repo.code.committed`
+- `bloodbank.v1.repo.test.completed`
+- `bloodbank.v1.repo.pr.opened`
 {%- elif role == "review" -%}
 You are the **reviewer**. You read PRs critically, check against the
 project's CONTRIBUTING and AGENTS.md, and either approve or request changes.
 You hold the merge gate for non-trivial changes.
 
 Events:
-- `bloodbank.v1.repo.{{ target_repo }}.review.completed`
-- `bloodbank.v1.repo.{{ target_repo }}.pr.merged`
+- `bloodbank.v1.repo.review.completed`
+- `bloodbank.v1.repo.pr.merged`
 {%- else -%}
 You operate as the **{{ role }}** agent for this repo. Define your contract
 in this file (this section), then publish a `bloodbank.v1.agent.contract.
@@ -112,11 +123,19 @@ declared` event so the fleet knows what to route to you.
 - **Hostnames**: Use `*.delo.sh` for external/cross-machine access (resolved
   via Cloudflare Tunnel), `localhost` for same-host, Docker network service
   names for container-to-container, Tailscale for private machine-to-machine.
-- **Ticketing**: Always include the configured provider's ticket reference in commit messages.
+- **Plane**: Always include a Plane ticket reference in commit messages.
 
 ## Memory hygiene
 
-Your memory is the submodule at `./runtime/memories/`. Use Hindsight for
-durable cross-session facts (`hindsight memory retain {{ target_repo }} "…"
---context conventions`). Edit `memories/MEMORY.md` directly for the
-condensed mental-model summary the gateway loads on every session.
+Your durable memory is the shared **Hindsight bank `{{ target_repo }}`** — one
+bank per PROJECT, shared with the human-drivable Momo twin. Honcho and the
+per-agent `runtime/memories/` store are **neutralized** (see `config.yaml`
+`memory.provider: ""`): do not rely on `MEMORY.md`/`USER.md`. Retain with
+`hindsight memory retain {{ target_repo }} "…" --context <cat>`; recall with
+`hindsight memory recall {{ target_repo }} "…"`.
+
+## Doctrine
+
+Decide on the operator's behalf using **`~/code/33GOD/momo/PILLARS.md`**
+(canonical, priority-ordered). This soul **references** that file; it does not
+copy it. Cite the pillar(s) that drove a consequential call in its decision event.

package/templates/hermes-agent/template/role.yaml.jinja

@@ -21,16 +21,47 @@ profile: {{ agent_id }}
 telegram:
   bot_username: "{{ bot_handle }}"
 
-# Ticket-provider adapter preference (plane | trello).
-# Repo-owned board identity lives in repo-root .project.json, not in this role.
+# Ticket-provider binding (linear | plane | trello).
+# The heartbeat reconciliation pass talks ONLY to this via .scripts/lib/ticket-provider.sh;
+# swapping providers is a one-line change here. Filled in by 42-ticket-provider.sh.
 ticket_provider:
   name: {{ ticket_provider }}
+  board_id: ""
+  board_url: ""
+{%- if ticket_provider == 'linear' %}
+  team: ""        # Linear team key, e.g. DEL  (set before first sentinel run)
+  project: ""     # optional Linear project name to scope milestones/issues
+{%- elif ticket_provider == 'plane' %}
+  workspace: "{{ plane_workspace }}"
+  project: ""     # Plane project uuid (set by 42-ticket-provider.sh)
+{%- elif ticket_provider == 'trello' %}
+  board: ""       # Trello board id (set by 42-ticket-provider.sh)
+{%- endif %}
+  # Optional normalized-state name overrides for non-standard boards.
+  in_review: ""   # e.g. "In Review"
+  completed: ""   # e.g. "Done"
+
+# Board-reconciliation knobs for the heartbeat sentinel pass.
+reconcile:
+  enabled: false             # heartbeat runs the autonomous board-reconciliation pass ONLY when true; default off = checkpoint-only
+  grace_hours: 0             # 0 = no human-approval wait (adversarially-reviewed review-lane = done); set >0 to require a wait
+  auto_review: true          # autonomous adversarial review (act, do not wait) on/off
+
+# Plane project (1:1 with this agent) — retained for fleet-registry back-compat.
+plane:
+  # Empty -> resolved from ~/.config/hermes-agent-template/config.toml [plane].workspace
+  workspace: "{{ plane_workspace }}"
+  # identifier is set by .scripts/42-ticket-provider.sh after creation (plane only)
+  identifier: ""
 
 # Bloodbank wiring (consumed + produced subjects).
 bloodbank:
   subscribe:
-    - "bloodbank.evt.v1.repo.{{ target_repo }}.>"
-    - "bloodbank.cmd.v1.agent.{{ agent_id }}.>"
+    - "bloodbank.evt.v1.repo.>"
+    - "bloodbank.cmd.v1.agent.>"
+  routing:
+    repo: "{{ target_repo }}"
+    target_agent_id: "{{ agent_id }}"
   producer: "hermes-agent:{{ agent_id }}"
 
 # Runtime repo (git-tracked HERMES_HOME, auto-checkpointed).

package/templates/hermes-agent/tests/test_bloodbank_consumer_contract.py

@@ -0,0 +1,138 @@
+import importlib.util
+import os
+import pathlib
+import re
+import sys
+import tempfile
+import types
+import unittest
+
+
+ROOT = pathlib.Path(__file__).resolve().parents[1]
+CONSUMER_PATH = ROOT / "runtime-scaffold" / "bloodbank-consumer.py"
+GENERATED_CONSUMER_PATH = ROOT / "template" / ".runtime-scaffold" / "bloodbank-consumer.py"
+
+
+def load_consumer():
+    sys.modules.setdefault("nats", types.ModuleType("nats"))
+    spec = importlib.util.spec_from_file_location("bloodbank_consumer_contract", CONSUMER_PATH)
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    module.AGENT_ID = "demo-pm"
+    module.REPO = "demo"
+    module.PRODUCER = "hermes-agent:demo-pm"
+    module.SOURCE = "hermes://agent/demo-pm"
+    return module
+
+
+class BloodbankConsumerContractTests(unittest.TestCase):
+    @classmethod
+    def setUpClass(cls):
+        cls.temp_home = tempfile.TemporaryDirectory()
+        cls.previous_home = os.environ.get("HERMES_HOME")
+        os.environ["HERMES_HOME"] = cls.temp_home.name
+        cls.consumer = load_consumer()
+
+    @classmethod
+    def tearDownClass(cls):
+        if cls.previous_home is None:
+            os.environ.pop("HERMES_HOME", None)
+        else:
+            os.environ["HERMES_HOME"] = cls.previous_home
+        cls.temp_home.cleanup()
+
+    def test_scaffold_copies_stay_identical(self):
+        self.assertEqual(CONSUMER_PATH.read_bytes(), GENERATED_CONSUMER_PATH.read_bytes())
+
+    def test_subscriptions_use_fixed_canonical_routes(self):
+        self.assertEqual(
+            self.consumer.SUBJECTS,
+            ["bloodbank.evt.v1.repo.>", "bloodbank.cmd.v1.agent.>"],
+        )
+        self.assertNotIn("demo", ".".join(self.consumer.SUBJECTS))
+        self.assertNotIn("demo-pm", ".".join(self.consumer.SUBJECTS))
+
+    def test_envelope_keeps_identity_out_of_type_and_subject(self):
+        envelope = self.consumer.build_envelope(
+            "bloodbank.v1.repo.issue.updated",
+            {"repo": "demo", "issue": "PJAN-1"},
+        )
+        self.assertEqual(envelope["type"], "bloodbank.v1.repo.issue.updated")
+        self.assertEqual(envelope["subject"], "bloodbank.evt.v1.repo.issue.updated")
+        self.assertEqual(envelope["data"]["repo"], "demo")
+        self.assertEqual(envelope["actor"]["agent_id"], "demo-pm")
+        self.assertEqual(envelope["source"], "hermes://agent/demo-pm")
+        self.assertNotIn("demo", envelope["type"])
+        self.assertNotIn("demo", envelope["subject"])
+        with self.assertRaisesRegex(ValueError, r"bloodbank\.v1"):
+            self.consumer.build_envelope(
+                "bloodbank.v2.repo.issue.updated",
+                {"repo": "demo"},
+            )
+
+    def test_repo_events_route_by_data_repo(self):
+        subject = "bloodbank.evt.v1.repo.issue.updated"
+        envelope = self.consumer.build_envelope(
+            "bloodbank.v1.repo.issue.updated",
+            {"repo": "demo"},
+        )
+        self.assertTrue(self.consumer._is_for_consumer(subject, envelope))
+        envelope["data"]["repo"] = "another-repo"
+        self.assertFalse(self.consumer._is_for_consumer(subject, envelope))
+
+    def test_agent_commands_route_by_target_agent_id(self):
+        subject = "bloodbank.cmd.v1.agent.task.assign"
+        envelope = self.consumer.build_envelope(
+            "bloodbank.v1.agent.task.assign",
+            {"target_agent_id": "demo-pm"},
+            kind="command",
+        )
+        self.assertTrue(self.consumer._is_for_consumer(subject, envelope))
+        envelope["data"]["target_agent_id"] = "other-agent"
+        self.assertFalse(self.consumer._is_for_consumer(subject, envelope))
+
+    def test_rejects_identifier_bearing_or_mismatched_routes(self):
+        envelope = self.consumer.build_envelope(
+            "bloodbank.v1.repo.issue.updated",
+            {"repo": "demo"},
+        )
+        self.assertFalse(
+            self.consumer._is_for_consumer(
+                "bloodbank.evt.v1.repo.demo.issue.updated",
+                envelope,
+            )
+        )
+        self.assertFalse(
+            self.consumer._is_for_consumer(
+                "bloodbank.evt.v1.repo.issue.created",
+                envelope,
+            )
+        )
+        envelope["kind"] = "command"
+        self.assertFalse(
+            self.consumer._is_for_consumer(
+                "bloodbank.evt.v1.repo.issue.updated",
+                envelope,
+            )
+        )
+
+    def test_generated_contract_docs_do_not_put_identifiers_in_routes(self):
+        coupled_paths = [
+            ROOT / "docs" / "architecture.md",
+            ROOT / "docs" / "operations.md",
+            ROOT / "template" / "SOUL.md.jinja",
+            ROOT / "template" / "role.yaml.jinja",
+            ROOT / "runtime-scaffold" / "memories" / "MEMORY.md",
+            ROOT / "template" / ".runtime-scaffold" / "memories" / "MEMORY.md",
+        ]
+        forbidden = re.compile(
+            r"bloodbank\.(?:v1\.repo|evt\.v1\.repo|cmd\.v1\.agent)\."
+            r"(?:\{\{|<repo>|<agent_id>)"
+        )
+        for path in coupled_paths:
+            with self.subTest(path=path):
+                self.assertIsNone(forbidden.search(path.read_text()))
+
+
+if __name__ == "__main__":
+    unittest.main()

package/templates/commonproject/template/.mise/scripts/link-project-skills-to-clis.sh

@@ -1,110 +0,0 @@
-#!/bin/bash
-# Fan the project's enabled skill set out to every agent CLI that does NOT read
-# .agents/ natively, as per-skill symlinks.
-#
-#   SSOT:    .agents/skills/   (committed inherited skills + on-enter ./skills/* links)
-#   Targets: a table of per-CLI skill dirs, each with a SCOPE:
-#     global -> a shared per-user dir (e.g. ~/.codex/skills): link ours in, never
-#               clobber foreign entries, removed on leave (unlink-*-from-clis.sh).
-#     local  -> a project-scoped mirror dir (e.g. ./.kimi-code/skills) that is fully
-#               ours: stale real copies / foreign symlinks are replaced, and
-#               disabled/deferred skills are pruned. Persists across leave.
-#
-# Per-dev controls — .agents/local.json (see .agents/local.example.json):
-#   skills.disabled[]       never link these
-#   skills.defer_to_global  if true, skip any skill that ALSO exists in your global
-#                           SSOT (~/.agents/skills) so your global copy wins and you
-#                           get zero duplicates. Teammates omit it → inherit all.
-#
-# Add a CLI: append one "dir|scope" line to SKILL_TARGETS. That's the whole change.
-set -euo pipefail
-
-script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-project_root="$(cd "${script_dir}/../.." && pwd)"
-agents_skills="${project_root}/.agents/skills"
-
-SKILL_TARGETS=(
-  "${CODEX_HOME:-$HOME/.codex}/skills|global"
-  "${project_root}/.kimi-code/skills|local"
-)
-
-local_config="${project_root}/.agents/hooks/lib/local-config.sh"
-if [ -f "$local_config" ]; then
-  # shellcheck source=/dev/null
-  source "$local_config"
-else
-  skill_disabled() { return 1; }
-  skills_defer_to_global() { return 1; }
-  skill_is_global() { return 1; }
-fi
-
-if [ ! -d "$agents_skills" ]; then
-  echo "No .agents/skills/ found. Nothing to fan out."
-  exit 0
-fi
-
-defer=0
-skills_defer_to_global && defer=1
-
-# Should this skill be skipped (disabled, or deferred to the dev's global system)?
-is_skipped() {
-  local name="$1"
-  skill_disabled "$name" && return 0
-  [ "$defer" = "1" ] && skill_is_global "$name" && return 0
-  return 1
-}
-
-# readlink with any trailing slash stripped (older links were stored with one).
-_readlink_norm() {
-  local l; l="$(readlink "$1" 2>/dev/null || echo "")"
-  printf '%s' "${l%/}"
-}
-
-link_into() {
-  local dir="$1" scope="$2" linked=0 skipped=0 pruned=0
-  mkdir -p "$dir"
-  for skill_path in "$agents_skills"/*; do
-    [ -d "$skill_path" ] || continue
-    local name target
-    name="$(basename "$skill_path")"
-    [[ "$name" == ".system" ]] && continue
-    target="${dir}/${name}"
-
-    if is_skipped "$name"; then
-      # Yield the slot: remove a link WE previously made (so the dev's global copy
-      # can claim it), and prune stale entries from our fully-managed mirror.
-      if [ -L "$target" ] && [ "$(_readlink_norm "$target")" = "$skill_path" ]; then
-        rm -f "$target"
-        pruned=$((pruned + 1))
-      elif [ "$scope" = "local" ] && { [ -L "$target" ] || [ -e "$target" ]; }; then
-        rm -rf "$target"
-        pruned=$((pruned + 1))
-      fi
-      skipped=$((skipped + 1))
-      continue
-    fi
-
-    if [ -L "$target" ] && [ "$(_readlink_norm "$target")" = "$skill_path" ]; then
-      linked=$((linked + 1))
-      continue
-    fi
-
-    if [ -e "$target" ] || [ -L "$target" ]; then
-      if [ "$scope" = "local" ]; then
-        rm -rf "$target"            # our mirror: replace stale copy / foreign link
-      else
-        skipped=$((skipped + 1))    # shared dir: leave foreign entries untouched
-        continue
-      fi
-    fi
-
-    ln -s "$skill_path" "$target"
-    linked=$((linked + 1))
-  done
-  echo "  ${dir} (${scope}): ${linked} linked, ${skipped} skipped, ${pruned} pruned"
-}
-
-echo "Fanning .agents/skills -> agent CLIs (defer_to_global=${defer})"
-for entry in "${SKILL_TARGETS[@]}"; do
-  link_into "${entry%%|*}" "${entry##*|}"
-done