@delorenj/pjangler 1.2.21 → 1.2.33

package/templates/hermes-agent/docs/sentinel.md

@@ -1,18 +0,0 @@
-# The PM's heartbeat sentinel
-
-The PM runs a provider-agnostic ticket sentinel out-of-band on its heartbeat
-timer: a board-reconciliation pass with an autonomous adversarial review (act,
-do not wait), fused with a gated runtime checkpoint into a single timer tick.
-The full documentation lives in a dedicated handoff guide.
-
-This page is kept as a stable pointer so existing links keep working.
-
-## Where the docs live now
-
-- [Sentinel handoff overview](sentinel/README.md): start here.
-- [Architecture](sentinel/architecture.md): the heartbeat loop, the provider
-  abstraction, and the autonomous adversarial review.
-- [Providers](sentinel/providers.md): the adapter contract and how to add or
-  verify a provider.
-- [Development guide](sentinel/development.md): editing, validating,
-  provisioning, propagating, and the roadmap.

package/templates/hermes-agent/install-local.sh

@@ -1,216 +0,0 @@
-#!/usr/bin/env sh
-# Least-friction local install of the Hermes PM role into a project.
-#
-# Local-only: no GitHub runtime repo, no Telegram, no NATS/BloodBank, no Plane
-# project creation. It binds the PM to a ticket board you already have. The PM
-# runs the continuous ticket sentinel out-of-band on its heartbeat timer
-# (board-reconciliation pass + gated runtime checkpoint, one tick).
-# Works on macOS (launchd) and Linux (systemd).
-#
-# One-liner (from anywhere inside the target project):
-#   curl -fsSL https://raw.githubusercontent.com/delorenj/hermes-agent-template/main/install-local.sh | sh
-#
-# Or from a checkout:
-#   sh /path/to/hermes-agent-template/install-local.sh
-#
-# Environment overrides (skip the prompts):
-#   HAT_REPO=<name>            project/repo name (default: basename of CWD)
-#   HAT_PROVIDER=linear|plane|trello   (default: plane)
-#   HAT_ROLES="pm"                     roles to install (default: pm)
-#   HAT_DRY_RUN=1              print actions, change nothing
-#   Provider creds: LINEAR_API_KEY | PLANE_API_KEY+PLANE_BASE | TRELLO_KEY+TRELLO_TOKEN
-set -eu
-
-say()  { printf '\033[36m%s\033[0m\n' "$*"; }
-warn() { printf '\033[33m%s\033[0m\n' "$*" >&2; }
-die()  { printf '\033[31m%s\033[0m\n' "$*" >&2; exit 1; }
-run()  { if [ "${HAT_DRY_RUN:-0}" = "1" ]; then printf '  [dry-run] %s\n' "$*"; else eval "$*"; fi; }
-ask()  { # ask VAR "prompt" "default"
-  eval "_cur=\${$1:-}"; [ -n "${_cur:-}" ] && return 0
-  printf '%s [%s]: ' "$2" "${3:-}" >&2; read -r _ans || _ans=""
-  eval "$1=\"\${_ans:-$3}\""
-}
-
-OS="$(uname -s)"
-PROJECT_DIR="$(pwd)"
-[ -d "$PROJECT_DIR/.git" ] || warn "Note: $PROJECT_DIR is not a git repo root; the role will install here anyway."
-
-# --- Resolve the template source (local checkout wins, else GitHub) ----------
-SCRIPT_DIR="$(CDPATH= cd -- "$(dirname -- "$0")" 2>/dev/null && pwd || echo "")"
-if [ -n "$SCRIPT_DIR" ] && [ -f "$SCRIPT_DIR/copier.yml" ]; then
-  TEMPLATE_SRC="$SCRIPT_DIR"
-else
-  TEMPLATE_SRC="${HAT_TEMPLATE:-gh:delorenj/hermes-agent-template}"
-fi
-
-say "== Hermes local install =="
-say "   project:  $PROJECT_DIR"
-say "   template: $TEMPLATE_SRC"
-say "   os:       $OS"
-
-# --- 1. Ensure the hermes CLI ------------------------------------------------
-if command -v hermes >/dev/null 2>&1; then
-  say "1. hermes: found ($(command -v hermes))"
-else
-  say "1. hermes: not found — installing"
-  run "curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash"
-  command -v hermes >/dev/null 2>&1 || die "hermes install did not put 'hermes' on PATH. Open a new shell and re-run."
-fi
-HERMES_BIN="$(command -v hermes)"
-
-# --- 2. Ensure copier --------------------------------------------------------
-if command -v copier >/dev/null 2>&1; then
-  say "2. copier: found"
-else
-  say "2. copier: not found — installing"
-  if command -v uv >/dev/null 2>&1; then run "uv tool install copier"
-  else run "python3 -m pip install --user copier"; fi
-  command -v copier >/dev/null 2>&1 || die "copier install failed. Install it (uv tool install copier) and re-run."
-fi
-
-# --- 3. Host-correct, local config.toml (so 01-config doesn't seed delo defaults)
-CFG_DIR="${XDG_CONFIG_HOME:-$HOME/.config}/hermes-agent-template"
-CFG="$CFG_DIR/config.toml"
-if [ -f "$CFG" ]; then
-  say "3. config: exists ($CFG) — leaving it"
-else
-  say "3. config: writing local defaults to $CFG"
-  if [ "${HAT_DRY_RUN:-0}" != "1" ]; then
-    mkdir -p "$CFG_DIR"
-    cat > "$CFG" <<TOML
-# Local install — cloud fields intentionally blank.
-[fleet]
-hermes_bin = "$HERMES_BIN"
-hermes_repo = "$HOME/.hermes/hermes-agent"
-fleet_env = "~/.hermes/fleet.env"
-registry_file = "~/.hermes/agents-registry.yaml"
-
-[github]
-runtime_repo_owner = ""
-
-[plane]
-base = "${PLANE_BASE:-}"
-workspace = ""
-
-[bloodbank]
-nats_host = "127.0.0.1"
-nats_port = 4222
-TOML
-  fi
-fi
-
-# --- 4. Provider credentials + board binding ---------------------------------
-ask HAT_PROVIDER "Ticket provider (linear|plane|trello)" "plane"
-PROVIDER="$HAT_PROVIDER"
-ask HAT_REPO "Project/repo name" "$(basename "$PROJECT_DIR" | tr '[:upper:]' '[:lower:]')"
-REPO="$HAT_REPO"
-PM_ENV="$HOME/.hermes/${REPO}-pm.env"
-
-# These get written into the pm role.yaml binding after render.
-# Pre-seed from optional env knobs so the install can run non-interactively.
-TP_WORKSPACE="${HAT_PLANE_WORKSPACE:-}"; TP_PROJECT="${HAT_PLANE_PROJECT:-}"
-TP_TEAM="${HAT_LINEAR_TEAM:-}"; TP_BOARD="${HAT_TRELLO_BOARD:-}"
-case "$PROVIDER" in
-  plane)
-    ask PLANE_BASE "Plane base URL" "https://app.plane.so"
-    : "${PLANE_API_KEY:?Set PLANE_API_KEY in your environment, then re-run}"
-    ask TP_WORKSPACE "Plane workspace slug" ""
-    [ -n "$TP_WORKSPACE" ] || die "workspace is required"
-    say "   Plane projects in '$TP_WORKSPACE':"
-    _pj="$(mktemp)"
-    curl -fsS "$PLANE_BASE/api/v1/workspaces/$TP_WORKSPACE/projects/?per_page=100" \
-      -H "X-API-Key: $PLANE_API_KEY" > "$_pj" 2>/dev/null || true
-    python3 - "$_pj" <<'PY' 2>/dev/null || warn "   (could not list projects; check PLANE_API_KEY/base/workspace)"
-import sys, json
-try:
-    d = json.load(open(sys.argv[1]))
-except Exception:
-    sys.exit(1)
-rows = d.get("results", d if isinstance(d, list) else [])
-for p in rows:
-    print(f"     {p.get('id')}  {(p.get('identifier') or ''):8} {p.get('name')}")
-PY
-    rm -f "$_pj"
-    ask TP_PROJECT "Plane project UUID to manage" ""
-    [ -n "$TP_PROJECT" ] || die "project UUID is required"
-    CRED_LINES="PLANE_API_KEY=$PLANE_API_KEY
-PLANE_BASE=$PLANE_BASE"
-    ;;
-  linear)
-    : "${LINEAR_API_KEY:?Set LINEAR_API_KEY in your environment, then re-run}"
-    ask TP_TEAM "Linear team key (for example DEL)" ""
-    [ -n "$TP_TEAM" ] || die "team key is required"
-    CRED_LINES="LINEAR_API_KEY=$LINEAR_API_KEY"
-    ;;
-  trello)
-    : "${TRELLO_KEY:?Set TRELLO_KEY in your environment, then re-run}"
-    : "${TRELLO_TOKEN:?Set TRELLO_TOKEN in your environment, then re-run}"
-    ask TP_BOARD "Trello board id" ""
-    [ -n "$TP_BOARD" ] || die "board id is required"
-    CRED_LINES="TRELLO_KEY=$TRELLO_KEY
-TRELLO_TOKEN=$TRELLO_TOKEN"
-    ;;
-  *) die "unknown provider: $PROVIDER" ;;
-esac
-
-say "4. writing provider credentials to $PM_ENV"
-if [ "${HAT_DRY_RUN:-0}" != "1" ]; then
-  mkdir -p "$HOME/.hermes"; umask 077
-  printf '%s\n' "$CRED_LINES" > "$PM_ENV"
-fi
-
-# --- 5. Provision each role with copier (cloud + Telegram + systemd skipped) --
-# No provider key in copier's env, so 42-ticket-provider skips board creation;
-# we bind to the existing board below.
-export SKIP_TELEGRAM=1 SKIP_EMAIL=1 SKIP_RUNTIME_REPO=1 SKIP_PLANE=1 \
-       SKIP_BLOODBANK=1 SKIP_SYSTEMD=1
-ROLES="${HAT_ROLES:-pm}"
-for ROLE in $ROLES; do
-  say "5. provisioning role: $ROLE"
-  DEST="$PROJECT_DIR/agents/hermes/$ROLE"
-  # Scrub provider creds from copier's environment so 42-ticket-provider skips
-  # board CREATION; we bind to the existing board in step 6 instead.
-  run "env -u PLANE_API_KEY -u PLANE_33GOD_API_KEY -u LINEAR_API_KEY \
-        -u TRELLO_KEY -u TRELLO_TOKEN \
-        copier copy '$TEMPLATE_SRC' '$DEST' --trust --defaults --overwrite \
-        --data target_repo='$REPO' --data role='$ROLE' --data ticket_provider='$PROVIDER'"
-done
-
-# --- 6. Bind the PM to the existing board ------------------------------------
-PM_ROLE="$PROJECT_DIR/agents/hermes/pm/role.yaml"
-if [ -f "$PM_ROLE" ] && [ "${HAT_DRY_RUN:-0}" != "1" ]; then
-  say "6. binding pm to your $PROVIDER board"
-  TP_WORKSPACE="$TP_WORKSPACE" TP_PROJECT="$TP_PROJECT" TP_TEAM="$TP_TEAM" \
-  TP_BOARD="$TP_BOARD" PROVIDER="$PROVIDER" python3 - "$PM_ROLE" <<'PY'
-import os, re, sys, pathlib
-p = pathlib.Path(sys.argv[1]); t = p.read_text()
-def setleaf(text, key, val):
-    if not val: return text
-    new, n = re.subn(rf'(?m)^(\s*{re.escape(key)}:\s*)"?[^"\n]*"?\s*$', rf'\g<1>"{val}"', text, count=1)
-    return new if n else text
-t = setleaf(t, "workspace", os.environ.get("TP_WORKSPACE",""))
-t = setleaf(t, "project",   os.environ.get("TP_PROJECT",""))
-t = setleaf(t, "team",      os.environ.get("TP_TEAM",""))
-t = setleaf(t, "board",     os.environ.get("TP_BOARD",""))
-p.write_text(t)
-print("   bound:", {k:v for k,v in os.environ.items() if k.startswith("TP_") and v})
-PY
-fi
-
-# --- 7. Smoke test the board connection --------------------------------------
-if [ "${HAT_DRY_RUN:-0}" != "1" ] && [ -f "$PM_ROLE" ]; then
-  say "7. smoke test: reading your board through the adapter"
-  LIB="$PROJECT_DIR/agents/hermes/pm/.scripts/lib/ticket-provider.sh"
-  ( set -a; . "$PM_ENV" 2>/dev/null; set +a
-    bash -c '. "$1"; tp resolve && echo "   issues: $(tp list_issues | python3 -c "import sys,json;print(len(json.load(sys.stdin)))")"' _ "$LIB" ) \
-    || warn "   smoke test failed — check the binding in $PM_ROLE and creds in $PM_ENV"
-fi
-
-say ""
-say "Done. Talk to the PM:   agents/hermes/pm/hermes chat \"status\""
-if [ "$OS" = "Darwin" ]; then
-  say "Sentinel (launchd):     launchctl list | grep $REPO-pm-heartbeat"
-else
-  say "Sentinel (systemd):     systemctl --user status hermes-$REPO-pm-heartbeat.timer"
-fi
-say "Provider creds live in: $PM_ENV"

package/templates/hermes-agent/runtime-scaffold/.gitattributes

@@ -1,10 +0,0 @@
-# Route binary state through git-lfs so the checkpoint repo doesn't bloat.
-*.db          filter=lfs diff=lfs merge=lfs -text
-*.sqlite      filter=lfs diff=lfs merge=lfs -text
-*.sqlite3     filter=lfs diff=lfs merge=lfs -text
-*.png         filter=lfs diff=lfs merge=lfs -text
-*.jpg         filter=lfs diff=lfs merge=lfs -text
-*.jpeg        filter=lfs diff=lfs merge=lfs -text
-*.wav         filter=lfs diff=lfs merge=lfs -text
-*.mp3         filter=lfs diff=lfs merge=lfs -text
-*.mp4         filter=lfs diff=lfs merge=lfs -text

package/templates/hermes-agent/runtime-scaffold/README.md

@@ -1,53 +0,0 @@
-# {{agent_id}} — runtime
-
-This is the HERMES_HOME for the **{{display_name}}** agent. It is git-tracked
-so memory, SOUL evolution, and conversation history are durable across machines
-and recoverable on failure.
-
-## What's in here
-
-| Path | Tracked? | Purpose |
-| --- | --- | --- |
-| `config.yaml` | yes | Inference + skill config (cloned from global at provision time) |
-| `SOUL.md` | yes | The agent's personality, evolves over time |
-| `memories/MEMORY.md` | yes | The condensed mental-model summary loaded each session |
-| `memories/USER.md` | yes | The operator's persona (Jarad DeLorenzo, ...) |
-| `sessions/sessions.db` | yes (LFS) | SQLite store of every conversation |
-| `bloodbank-consumer.py` | yes | NATS subscriber using canonical subjects plus envelope routing data |
-| `decisions/` | yes | Agent-emitted decisions, one file per important call |
-| `.env` | **no** | API keys + Telegram bot token (per-machine secret) |
-| `auth.json` | **no** | Deprecated local OAuth store; fleet auth defaults to `HERMES_OAUTH_FILE=~/.hermes/auth.json` |
-| `audio_cache/`, `image_cache/` | **no** | Regenerable caches |
-| `sandboxes/` | **no** | Per-session ephemeral execution dirs |
-| `bloodbank-inbox/` | **no** | Inbox queue for incoming bloodbank events |
-
-## Checkpoint cadence
-
-- Heartbeat: systemd `--user` timer `hermes-{{agent_id}}-heartbeat.timer`. Each
-  tick reconciles the ticket board (the PM's sentinel pass) and then, gated to
-  at most once an hour, checkpoints this runtime.
-- On session end: hermes Stop hook (TODO: hook script in `~/.hermes/hooks/`)
-
-The heartbeat runner lives in the parent's `.scripts/heartbeat.sh`; it calls
-`.scripts/checkpoint.sh` internally, which `git add -A`, commits only if dirty,
-and pushes to `origin`.
-
-## Restoring on a new machine
-
-```bash
-cd /path/to/parent-project
-git submodule update --init --recursive
-git -C agents/hermes/{{role}}/runtime lfs pull
-# Provide the per-runtime secrets the submodule deliberately excluded:
-cp ~/path/to/your/.env       agents/hermes/{{role}}/runtime/.env
-# OAuth provider credentials are shared across the fleet. If needed, login once:
-agents/hermes/{{role}}/hermes auth add openai-codex
-agents/hermes/{{role}}/hermes status
-```
-
-## DO NOT manually edit on multiple machines
-
-This repo is a single-writer system. Either run the agent on machine A or
-machine B — not both. The checkpoint commit will fast-forward; concurrent
-edits cause merge pain. If you really need to fork the agent (e.g. for
-experimentation), branch this repo.

package/templates/hermes-agent/runtime-scaffold/bloodbank-consumer.py

@@ -1,181 +0,0 @@
-#!/usr/bin/env python3
-"""
-Bloodbank consumer for hermes agent {{agent_id}}.
-
-Subscribes to:
-    bloodbank.evt.v1.repo.>
-    bloodbank.cmd.v1.agent.>
-
-The Bloodbank subject identifies the fixed domain/entity/action route. Repo and
-agent identifiers stay in envelope data, so this consumer filters repo events
-by ``data.repo`` and agent commands by ``data.target_agent_id``.
-
-For each event/command received, writes it to the agent's notification queue at
-$HERMES_HOME/bloodbank-inbox/<timestamp>.json so the gateway can ingest it on
-the next tick. Reconnects on broker churn; idempotent across restarts.
-
-Generated by hermes-agent-template/runtime-scaffold/bloodbank-consumer.py and
-rendered with role-specific values at provision time. Re-render by re-running
-agents/hermes/{{role}}/.scripts/20-runtime-repo.sh — do NOT edit by hand.
-"""
-
-import asyncio
-import json
-import os
-import pathlib
-import signal
-import sys
-import time
-import uuid
-from datetime import datetime, timezone
-
-try:
-    import nats
-except ImportError:
-    sys.stderr.write("nats-py not installed. install with: pip install nats-py\n")
-    sys.exit(2)
-
-
-HERMES_HOME = pathlib.Path(os.environ.get("HERMES_HOME", str(pathlib.Path.home() / ".hermes")))
-INBOX_DIR = HERMES_HOME / "bloodbank-inbox"
-INBOX_DIR.mkdir(parents=True, exist_ok=True)
-
-NATS_HOST = os.environ.get("BLOODBANK_NATS_HOST", "127.0.0.1")
-NATS_PORT = int(os.environ.get("BLOODBANK_NATS_PORT", "4222"))
-NATS_URL = f"nats://{NATS_HOST}:{NATS_PORT}"
-
-AGENT_ID = "{{agent_id}}"
-REPO     = "{{repo}}"
-ROLE     = "{{role}}"
-PRODUCER = f"hermes-agent:{AGENT_ID}"
-SOURCE   = f"hermes://agent/{AGENT_ID}"
-
-SUBJECTS = [
-    "bloodbank.evt.v1.repo.>",
-    "bloodbank.cmd.v1.agent.>",
-]
-
-KIND_MARKERS = {"event": "evt", "command": "cmd", "reply": "rpy"}
-
-
-def _now():
-    return datetime.now(timezone.utc).isoformat()
-
-
-def _subject_and_domain(ce_type, kind):
-    parts = ce_type.split(".")
-    if len(parts) != 5 or parts[0] != "bloodbank" or parts[1] != "v1":
-        raise ValueError(f"type {ce_type!r} must match bloodbank.v1.<domain>.<entity>.<action>")
-    if kind not in KIND_MARKERS:
-        raise ValueError(f"unknown envelope kind {kind!r}")
-    _vendor, version, domain, entity, action = parts
-    return f"bloodbank.{KIND_MARKERS[kind]}.{version}.{domain}.{entity}.{action}", domain
-
-
-def build_envelope(ce_type, data, *, kind="event", correlationid=None, causationid=None):
-    """Mirror of bloodbank/services/agent-hooks/core/envelope.build_envelope."""
-    subject, domain = _subject_and_domain(ce_type, kind)
-    env = {
-        "specversion": "1.0",
-        "type": ce_type,
-        "id": str(uuid.uuid4()),
-        "source": SOURCE,
-        "subject": subject,
-        "time": _now(),
-        "datacontenttype": "application/json",
-        "kind": kind,
-        "producer": PRODUCER,
-        "service": "hermes-agent",
-        "domain": domain,
-        "actor": {"type": "agent", "agent_id": AGENT_ID, "cli": "hermes"},
-        "data": data,
-        "correlationid": correlationid or str(uuid.uuid4()),
-        "causationid": causationid or str(uuid.uuid4()),
-    }
-    if kind == "event":
-        env["ordering_key"] = f"agent:{AGENT_ID}"
-    return env
-
-
-def _is_for_consumer(subject, payload):
-    """Route canonical subjects using identifiers carried in envelope data."""
-    if not isinstance(payload, dict):
-        return False
-    parts = subject.split(".")
-    if len(parts) != 6 or parts[0] != "bloodbank" or parts[2] != "v1":
-        return False
-
-    _vendor, kind, version, domain, entity, action = parts
-    if kind not in KIND_MARKERS.values():
-        return False
-    if KIND_MARKERS.get(payload.get("kind")) != kind:
-        return False
-    if payload.get("subject") != subject:
-        return False
-    if payload.get("type") != f"bloodbank.{version}.{domain}.{entity}.{action}":
-        return False
-    data = payload.get("data")
-    if not isinstance(data, dict):
-        return False
-    if kind == "evt" and domain == "repo":
-        return data.get("repo") == REPO
-    if kind == "cmd" and domain == "agent":
-        return data.get("target_agent_id") == AGENT_ID
-    return False
-
-
-async def main():
-    nc = await nats.connect(NATS_URL, name=f"hermes-{AGENT_ID}")
-    stop = asyncio.Event()
-
-    async def on_msg(msg):
-        try:
-            payload = json.loads(msg.data.decode())
-        except Exception:
-            sys.stderr.write(f"[bloodbank-consumer:{AGENT_ID}] skipped unroutable payload on {msg.subject}\n")
-            return
-        if not _is_for_consumer(msg.subject, payload):
-            return
-        entry = {
-            "received_at": _now(),
-            "subject": msg.subject,
-            "reply_to": msg.reply,
-            "payload": payload,
-        }
-        fname = f"{int(time.time()*1000):013d}-{uuid.uuid4().hex[:8]}.json"
-        tmp = INBOX_DIR / (fname + ".tmp")
-        tmp.write_text(json.dumps(entry, indent=2))
-        tmp.rename(INBOX_DIR / fname)
-        sys.stderr.write(f"[bloodbank-consumer:{AGENT_ID}] {msg.subject} -> {fname}\n")
-
-    for subj in SUBJECTS:
-        await nc.subscribe(subj, cb=on_msg)
-        sys.stderr.write(f"[bloodbank-consumer:{AGENT_ID}] subscribed: {subj}\n")
-
-    # Announce presence
-    online = build_envelope(
-        "bloodbank.v1.agent.online.changed",
-        {"agent_id": AGENT_ID, "repo": REPO, "role": ROLE, "state": "online"},
-    )
-    await nc.publish(online["subject"], json.dumps(online).encode())
-
-    def _shutdown(*_):
-        stop.set()
-    signal.signal(signal.SIGTERM, _shutdown)
-    signal.signal(signal.SIGINT, _shutdown)
-
-    await stop.wait()
-
-    offline = build_envelope(
-        "bloodbank.v1.agent.online.changed",
-        {"agent_id": AGENT_ID, "repo": REPO, "role": ROLE, "state": "offline"},
-    )
-    await nc.publish(offline["subject"], json.dumps(offline).encode())
-    await nc.drain()
-
-
-if __name__ == "__main__":
-    try:
-        asyncio.run(main())
-    except KeyboardInterrupt:
-        pass

package/templates/hermes-agent/runtime-scaffold/decisions/.gitkeep

@@ -1,2 +0,0 @@
-# Agents drop one markdown file per important decision here.
-# Filename convention: YYYY-MM-DD-HHMMSS-<slug>.md

package/templates/hermes-agent/runtime-scaffold/logs/.gitkeep

@@ -1 +0,0 @@
-# keep logs/ in the repo so per-agent log paths exist on first checkout

package/templates/hermes-agent/runtime-scaffold/memories/MEMORY.md

@@ -1,47 +0,0 @@
-# MEMORY.md — {{agent_id}}
-
-This file is loaded by the gateway at the start of every session. Keep it
-short and high-signal — anything that should ALWAYS be in context.
-
-## Identity
-
-You are **{{display_name}}**, the `{{role}}` agent for the `{{repo}}` repo.
-Your scope is the repo at the project root. You communicate via Telegram
-(`@{{repo}}_{{role}}_bot`) and canonical Bloodbank repo events on
-`bloodbank.evt.v1.repo.>`, filtered by `data.repo = {{repo}}`.
-
-## Operator
-
-Jarad DeLorenzo. One-man dev team. Pivots hard and fast — when documentation
-disagrees with reality, trust reality (the codebase, `git log`, `llr`/`find`
-sorted by mtime). Prefers direct, decision-forward communication. Never
-re-explains what the diff already shows. Hates "I'll help you with that"
-preambles.
-
-## DeloNet conventions you respect at all times
-
-- LAN: `192.168.1.0/24`. Host machine `big-chungus` = `192.168.1.12`.
-  Tailscale IP `100.66.29.76`. **Never hardcode `10.0.0.x`** — that's stale
-  Xfinity-era data.
-- External access: `*.delo.sh` via Cloudflare Tunnel
-  (`6dfd95af-6e2a-4833-84b8-e0a1fda5da4a`). Container-to-container uses
-  Docker service names.
-- Secrets: `op://DeLoSecrets/<item>/<field>`, `~/.config/zshyzsh/secrets.zsh`
-  (exported), or project-local `.env`. Default creds:
-  `$DEFAULT_USERNAME` / `$DEFAULT_PASSWORD`.
-- Hindsight memory: durable cross-session facts go in
-  `hindsight memory retain {{repo}} "..." --context <category>`. This file
-  is the runtime/session-start summary; Hindsight is the long-term store.
-
-## Bloodbank events you emit
-
-Always emit envelope-shaped events with `actor.agent_id = {{agent_id}}` and
-`producer = hermes-agent:{{agent_id}}` for every consequential action.
-Event type format: `bloodbank.v1.<domain>.<entity>.<action>` (5 tokens,
-lowercase, past-tense action for events). Naming spec lives at
-`~/code/33GOD/bloodbank/docs/event-naming.md`.
-
-## Recent context
-
-(This section gets updated by the agent itself as work progresses.
-Treat the bottom-most entry as the most relevant.)

package/templates/hermes-agent/runtime-scaffold/memories/USER.md

@@ -1,51 +0,0 @@
-# USER.md — Jarad DeLorenzo
-
-The operator behind this agent. Loaded into context at session start so the
-agent doesn't have to re-discover who it's working with.
-
-## Identity
-
-- Name: Jarad DeLorenzo
-- Email: jaradd@gmail.com (personal), jarad@automaticai.io (business)
-- GitHub: `delorenj`
-- Telegram: see `TELEGRAM_ALLOWED_USERS` in this agent's `.env`
-- Role: One-man dev team running the 33GOD ecosystem and delonet homelab
-
-## How Jarad works
-
-- Pivots fast — instructions and architecture choices can flip between
-  sessions. Trust *current* code and `git log` over older documentation.
-- Prefers terse responses, decision-forward. No throat-clearing. No
-  "I'll help you with that". When unsure, asks one specific question, not
-  three vague ones.
-- Wants agents to act, then report. Not act, then ask if it was OK.
-- Uses Hindsight for durable memory. Expects agents to retain useful learnings
-  themselves rather than waiting to be asked.
-- Tracks confidence with `llr` (= `fdfind --type f --hidden --exclude .git -X
-  ls -lt --time=ctime -r`). Newer mtime = more authoritative.
-
-## Tooling he ships with
-
-- Copier (`gh:delorenj/CommonProject`) for new project bootstrap
-- BMAD method (`_bmad/`, `_bmad_output/`) for spec-driven work
-- Plane (`plane.delo.sh`) for ticket tracking — workspaces: 33god,
-  lasertoast, intelliforia
-- Bloodbank for cross-agent event flow
-- Hindsight for shared memory (banks: per-repo, `infra`, `33GOD`)
-- 1Password CLI (`op`) for all secrets
-- mise for env management
-
-## What he hates
-
-- Stale documentation that contradicts current state
-- Manual setup steps that should be scripted
-- Backwards-compatibility shims for code that just shipped
-- Long preambles before the actual answer
-- Hardcoded paths/IPs that break on the next machine
-
-## What he loves
-
-- Single source of truth (Holyfields-style schema registries)
-- Reproducible bootstrap (Copier + provision scripts)
-- Auto-checkpointed state (this very runtime repo!)
-- Agents that emit Bloodbank events so the rest of the system can react