@delorenj/pjangler 1.2.21 → 1.2.33

package/templates/commonproject/template/mise.toml.jinja

@@ -18,9 +18,14 @@ _.file = [".env"]
 [[hooks.enter]]
 script = "'{% raw %}{{config_root}}{% endraw %}/.mise/scripts/link-agentfiles.sh'"
 [[hooks.enter]]
-script = "op inject -i .env.op > .env"
+# Atomic (PJAN-24/PJAN-57): shell complexity lives in the managed script so
+# mise never interpolates temporary variables. The script uses mktemp, traps
+# cleanup, and replaces .env only after op inject succeeds.
+script = "'{% raw %}{{config_root}}{% endraw %}/.mise/scripts/materialize-env.sh'"
 [[hooks.enter]]
-script = "sync-skills.py --scope project"
+script = "python3 '{% raw %}{{config_root}}{% endraw %}/.mise/scripts/provision-packs.py'"
+[[hooks.enter]]
+script = "python3 '{% raw %}{{config_root}}{% endraw %}/.mise/scripts/sync-skills.py' --scope project"
 [[hooks.enter]]
 script = "[ -f '{% raw %}{{config_root}}{% endraw %}/.mise/scripts/codegraph.sh' ] && '{% raw %}{{config_root}}{% endraw %}/.mise/scripts/codegraph.sh' || true"
 {%- if agent_hooks_layer %}
@@ -50,7 +55,12 @@ run = "'{% raw %}{{config_root}}{% endraw %}/.mise/scripts/link-agentfiles.sh'"
 
 [tasks.skills-sync]
 description = "Sync skills from manifest to local CLI dirs"
-run = "sync-skills.py --scope project"
+depends = ["skills-provision-packs"]
+run = "python3 '{% raw %}{{config_root}}{% endraw %}/.mise/scripts/sync-skills.py' --scope project"
+
+[tasks.skills-provision-packs]
+description = "Provision every Skillex pack declared in .agents/skills.json"
+run = "python3 '{% raw %}{{config_root}}{% endraw %}/.mise/scripts/provision-packs.py'"
 {% if agent_hooks_layer %}
 # --- Project-scoped agent hooks + skill fan-out (see .agents/hooks/README.md) ---
 
@@ -67,5 +77,5 @@ description = "Remove per-user agent-hook injections (codex/kimi/hermes)"
 run = "'{% raw %}{{config_root}}{% endraw %}/.agents/hooks/sync.py' --uninstall"
 {% endif %}
 [tasks.hindsight-setup]
-description = "Provision this dev's shared project Hindsight key from 1Password into .env (op inject)"
+description = "Provision this dev's shared project Hindsight key from 1Password into .env (op read; upserts those two keys, leaves the rest of .env intact)"
 run = "'{% raw %}{{config_root}}{% endraw %}/.mise/scripts/hindsight-setup.sh'"

package/templates/hermes-agent/copier.yml

@@ -10,14 +10,16 @@
 #
 # What it does:
 #   1. Renders agents/hermes/<role>/{role.yaml, SOUL.md, hermes, .scripts/}
-#   2. Creates a per-agent runtime repo gh:delorenj/agent-hm-<repo>-<role>
-#   3. Submodules it at agents/hermes/<role>/runtime/  (this is HERMES_HOME)
+#   2. Creates ignored local state at agents/hermes/<role>/runtime/
+#      (this is HERMES_HOME; no project gitlink or runtime remote)
 #   4. Creates a Plane project in 33god workspace
 #   6. Prompts for a BotFather Telegram token, stores in runtime/.env
-#   7. Installs a Bloodbank consumer + heartbeat timer (reconcile + checkpoint)
-#   8. Appends to ~/.hermes/agents-registry.yaml
+#   7. Optionally wires a dedicated Slack app+bot pair into runtime/.env
+#   8. Records fleet-shared Bloodbank routing identity (no profile consumer)
+#   9. Installs a profile gateway + heartbeat timer (reconcile + checkpoint)
+#  10. Appends to ~/.hermes/agents-registry.yaml
 #
-# Environment-specific defaults (Hermes binary path, runtime repo owner, Plane
+# Environment-specific defaults (Hermes binary path, legacy archive owner, Plane
 # workspace/URL, NATS endpoint, skills dir, …) are NOT hardcoded — they live in
 # ~/.config/hermes-agent-template/config.toml, seeded from config.example.toml on
 # first run. Edit that file to retarget the template for a different machine/user.
@@ -50,6 +52,7 @@ role:
     "Project Manager (pm)": pm
     "Developer (dev)": dev
     "Reviewer (review)": review
+    "Company Reporter — daily cross-project rollup (reporter)": reporter
     "Ops (ops)": ops
     "QA (qa)": qa
   validator: "{% if not role %}Required{% endif %}"
@@ -66,7 +69,7 @@ ticket_provider:
 agent_purpose:
   type: str
   help: "One-line description of what this agent does in this repo"
-  default: "Project management, triage, and continuous board reconciliation"
+  default: "{% if role == 'reporter' %}Company-wide evidence gathering, freshness-aware daily reporting, and critical delivery monitoring{% else %}Project management, triage, and continuous board reconciliation{% endif %}"
 
 model_provider:
   type: str
@@ -113,7 +116,7 @@ runtime_repo:
 
 runtime_repo_owner:
   type: str
-  # Empty by default — resolved at provision time from
+# Legacy archive identity only. Empty by default — resolved at provision time from
   # ~/.config/hermes-agent-template/config.toml [github].runtime_repo_owner.
   # Pass --data runtime_repo_owner=<owner> to override per-run.
   default: ""
@@ -138,6 +141,7 @@ _tasks:
   - "./.scripts/10-hermes-profile.sh"
   - "./.scripts/20-runtime-repo.sh"
   - "./.scripts/30-telegram.sh"
+  - "./.scripts/31-slack.sh"
   - "./.scripts/42-ticket-provider.sh"
   - "./.scripts/60-bloodbank.sh"
   - "./.scripts/70-systemd.sh"

package/templates/hermes-agent/template/.gitignore.jinja

@@ -1,6 +1,10 @@
 # Per-role ignores in agents/hermes/{{ role }}/
 
-# The runtime submodule manages its own ignores (.env, auth.json, etc.).
-# We just ignore the provisioning log so it doesn't end up in the project repo.
+# The local runtime contains mutable agent state and secrets. It is never a
+# project submodule or publishable project content.
+runtime/
+
+# Provisioning logs are host-local as well.
 .scripts/.provision.log
 .scripts/.last-run
+.scripts/.done-*

package/templates/hermes-agent/template/.runtime-scaffold/README.md

@@ -13,13 +13,15 @@ and recoverable on failure.
 | `memories/MEMORY.md` | yes | The condensed mental-model summary loaded each session |
 | `memories/USER.md` | yes | The operator's persona (Jarad DeLorenzo, ...) |
 | `sessions/sessions.db` | yes (LFS) | SQLite store of every conversation |
-| `bloodbank-consumer.py` | yes | NATS subscriber using canonical subjects plus envelope routing data |
 | `decisions/` | yes | Agent-emitted decisions, one file per important call |
 | `.env` | **no** | API keys + Telegram bot token (per-machine secret) |
 | `auth.json` | **no** | Deprecated local OAuth store; fleet auth defaults to `HERMES_OAUTH_FILE=~/.hermes/auth.json` |
 | `audio_cache/`, `image_cache/` | **no** | Regenerable caches |
 | `sandboxes/` | **no** | Per-session ephemeral execution dirs |
-| `bloodbank-inbox/` | **no** | Inbox queue for incoming bloodbank events |
+
+Bloodbank ingress is fleet-shared. The fleet gateway discovers this profile
+through `~/.hermes/agents-registry.yaml` and routes commands by
+`data.target_agent_id`; this runtime has no consumer process or inbox bridge.
 
 ## Checkpoint cadence
 

package/templates/hermes-agent/template/.scripts/00-banner.sh

@@ -13,7 +13,7 @@ cat >&2 <<EOF
 │  display     $DISPLAY_NAME
 │  telegram    @$BOT_HANDLE   (one bot per agent)
 │  plane       $PLANE_WORKSPACE workspace
-│  runtime     gh:$RUNTIME_REPO   (auto-checkpointed)
+│  runtime     $ROLE_DIR/runtime   (pure-local, ignored)
 │  profile     ~/.hermes/profiles/$PROFILE_NAME
 ╰────────────────────────────────────────────────────────────────────────╯
 

package/templates/hermes-agent/template/.scripts/01-config.sh

@@ -23,6 +23,9 @@ else
 [fleet]
 hermes_bin = "~/.hermes/hermes-agent/.venv/bin/hermes"
 hermes_repo = "~/.hermes/hermes-agent"
+hermes_git_url = "https://github.com/delorenj/hermes-agent.git"
+hermes_git_ref = "feature/PJAN-19-routing-publication"
+hermes_git_sha = "113e1b182b6d72a7dd02a191f134a41668ceaf0e"
 fleet_env = "~/.hermes/fleet.env"
 registry_file = "~/.hermes/agents-registry.yaml"
 canonical_skills_dir = "/home/delorenj/.agents/skills"

package/templates/hermes-agent/template/.scripts/10-hermes-profile.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 # Stage the per-agent runtime config/secrets via a TRANSIENT Hermes profile.
-# HERMES_HOME is the ./runtime submodule; this profile dir is a staging area
+# HERMES_HOME is the ignored ./runtime directory; this profile dir is a staging area
 # (cred-stripped .env + SOUL) that 20-runtime-repo.sh folds into the runtime and
 # then replaces with a symlink ~/.hermes/profiles/<name> -> ./runtime. That
 # symlink is load-bearing: hermes resolves `--profile <name>` invocations
@@ -57,6 +57,17 @@ rm -f "$PROFILE_HOME/gateway.pid" "$PROFILE_HOME/gateway_state.json" \
 # never borrow the parent's.
 PROFILE_ENV="$PROFILE_HOME/.env"
 if [[ -f "$PROFILE_ENV" ]]; then
+  # Some Hermes versions implement `profile create --clone` by symlinking the
+  # cloned .env back to the default profile.  Never sanitize through that
+  # symlink: doing so would delete the operator's fleet-wide provider secrets.
+  # Break only the .env link into a private, mode-0600 copy first.
+  if [[ -L "$PROFILE_ENV" ]]; then
+    log "    detaching cloned .env symlink before profile-local sanitization"
+    PROFILE_ENV_COPY="$PROFILE_HOME/.env.profile-local.$$"
+    cp -L "$PROFILE_ENV" "$PROFILE_ENV_COPY"
+    chmod 600 "$PROFILE_ENV_COPY"
+    mv -fT "$PROFILE_ENV_COPY" "$PROFILE_ENV"
+  fi
   log "    stripping inherited platform credentials from profile .env"
   python3 - "$PROFILE_ENV" <<'PYEOF'
 import re, sys, pathlib

package/templates/hermes-agent/template/.scripts/20-runtime-repo.sh

@@ -1,147 +1,151 @@
 #!/usr/bin/env bash
-# Create the per-agent runtime GitHub repo, init from scaffold, submodule it.
+# Provision the per-agent, pure-local Hermes runtime without creating a Git
+# repository or a project submodule. Runtime durability belongs to Hindsight;
+# this directory may contain secrets and mutable agent state (PJAN-41).
 # shellcheck source=_lib.sh
 source "$(dirname "$0")/_lib.sh"
 load_role_env
 
-already_done 20-runtime-repo && { log "[20] runtime repo already set up — skipping"; exit 0; }
-[[ "${SKIP_RUNTIME_REPO:-0}" == "1" ]] && { log "[20] runtime repo — SKIPPED (SKIP_RUNTIME_REPO=1)"; mark_done 20-runtime-repo; exit 0; }
+already_done 20-runtime-repo && { log "[20] local runtime already set up — skipping"; exit 0; }
+[[ "${SKIP_RUNTIME_REPO:-0}" == "1" ]] && { log "[20] local runtime — SKIPPED (SKIP_RUNTIME_REPO=1)"; mark_done 20-runtime-repo; exit 0; }
 
 PROFILE_HOME="$HOME/.hermes/profiles/$PROFILE_NAME"
 RUNTIME_LOCAL="$ROLE_DIR/runtime"
-GH_OWNER="${RUNTIME_REPO%%/*}"
-GH_NAME="${RUNTIME_REPO##*/}"
+PROJECT_PATH="$(project_repo_path)" || die "no project git root"
+REL_ROLE_PATH="$(realpath --relative-to="$PROJECT_PATH" "$ROLE_DIR")"
+REL_RUNTIME_PATH="${REL_ROLE_PATH}/runtime"
 
-log "[20] runtime repo: gh:$RUNTIME_REPO"
+log "[20] local runtime: $RUNTIME_LOCAL"
 
-# 1. Create the GitHub repo (private) if it doesn't exist
-if gh repo view "$RUNTIME_REPO" >/dev/null 2>&1; then
-  log "    GH repo exists; reusing"
-else
-  log "    creating GH repo (private)"
-  gh repo create "$RUNTIME_REPO" --private \
-    --description "Hermes runtime (HERMES_HOME) for $AGENT_ID — auto-checkpointed memory + state" \
-    --disable-issues --disable-wiki >/dev/null
+# Fail closed if an older installation still models runtime as a project
+# submodule. `pjangler migrate` performs the non-destructive index transition;
+# this provisioner never removes or rewrites an existing nested repository.
+if git -C "$PROJECT_PATH" ls-files --stage -- "$REL_RUNTIME_PATH" | grep -q '^160000 '; then
+  die "$REL_RUNTIME_PATH is still a tracked gitlink; run 'pjangler migrate' before provisioning"
+fi
+if [[ -f "$PROJECT_PATH/.gitmodules" ]] &&
+   git -C "$PROJECT_PATH" config -f .gitmodules --get-regexp '^submodule\..*\.path$' 2>/dev/null |
+     awk -v expected="$REL_RUNTIME_PATH" '$2 == expected { found=1 } END { exit !found }'; then
+  die "$REL_RUNTIME_PATH still has a stale .gitmodules mapping; run 'pjangler migrate' before provisioning"
 fi
 
-REMOTE_URL=$(gh repo view "$RUNTIME_REPO" --json sshUrl -q .sshUrl)
-
-# 2. Check if remote already has commits — if so, skip the scaffold push.
-#    This makes the step idempotent across failed-run retries.
-if git ls-remote --heads "$REMOTE_URL" 2>/dev/null | grep -q refs/heads; then
-  log "    remote already has commits — skipping scaffold push"
-  REMOTE_HAS_CONTENT=1
-else
-  REMOTE_HAS_CONTENT=0
+mkdir -p "$RUNTIME_LOCAL"
+if [[ -e "$RUNTIME_LOCAL/.git" ]]; then
+  warn "    existing nested runtime repository preserved; no fetch, commit, or push will be attempted"
 fi
 
-# 2a. Stage the runtime scaffold into a tmp dir (only if remote is empty)
-TMP=$(mktemp -d)
-log "    populating scaffold in $TMP"
+# Render the scaffold in a temporary directory, then copy only missing paths.
+# Existing memory, configuration, credentials, and sessions always win.
+TMP="$(mktemp -d)"
+cleanup() { rm -rf -- "$TMP"; }
+trap cleanup EXIT
 cp -a "$RUNTIME_SCAFFOLD_DIR/." "$TMP/"
-
-# Render scaffold templates with role-specific values
 python3 - "$TMP" "$AGENT_ID" "$REPO" "$ROLE" "$DISPLAY_NAME" <<'PYEOF'
-import sys, pathlib, re
+import pathlib
+import sys
+
 root, agent_id, repo, role, display = sys.argv[1:6]
 root = pathlib.Path(root)
 mapping = {
-    "{{agent_id}}": agent_id, "{{repo}}": repo, "{{role}}": role,
+    "{{agent_id}}": agent_id,
+    "{{repo}}": repo,
+    "{{role}}": role,
     "{{display_name}}": display,
 }
-for p in root.rglob("*"):
-    if p.is_file() and p.suffix in (".md", ".yaml", ".yml", ".sh", ".py", ".gitignore", ".gitattributes"):
+for path in root.rglob("*"):
+    if path.is_file() and path.suffix in (".md", ".yaml", ".yml", ".sh", ".py", ".gitignore", ".gitattributes"):
         try:
-            t = p.read_text()
-            for k, v in mapping.items(): t = t.replace(k, v)
-            p.write_text(t)
+            text = path.read_text()
+            for source, target in mapping.items():
+                text = text.replace(source, target)
+            path.write_text(text)
         except UnicodeDecodeError:
             pass
 PYEOF
-
-# 3. Seed the runtime config from the canonical PM config — the fleet's single
-#    config source of truth (defaults to the global ~/.hermes/config.yaml). This
-#    is a provision-time snapshot; Hermes loads $HERMES_HOME/config.yaml directly
-#    (there is no live profile inheritance). Override via config.toml
-#    [fleet].canonical_pm_config to share one curated PM config across all repos.
-CANONICAL_PM_CONFIG="$(config_get fleet.canonical_pm_config "$HOME/.hermes/config.yaml")"
-if [[ -f "$CANONICAL_PM_CONFIG" ]]; then
-  cp "$CANONICAL_PM_CONFIG" "$TMP/config.yaml"
-fi
-# Copy the project's SOUL.md as the canonical starting personality.
-cp "$ROLE_DIR/SOUL.md" "$TMP/SOUL.md"
-
-# 4. Git init + LFS + initial commit + push (skip if remote already has content)
-if [[ "$REMOTE_HAS_CONTENT" == "0" ]]; then
-  (
-    cd "$TMP"
-    git init -b main >/dev/null
-    git lfs install --local >/dev/null 2>&1 || warn "git-lfs not installed; sessions.db will commit as raw binary"
-    git lfs track "*.db" >/dev/null 2>&1 || true
-    git lfs track "*.sqlite" >/dev/null 2>&1 || true
-    git add -A
-    git -c commit.gpgsign=false commit -m "Initial scaffold for $AGENT_ID" >/dev/null
-    git remote add origin "$REMOTE_URL"
-    git push -u origin main 2>&1 | tail -3
-  )
-fi
-
-# 5. Submodule-add into the role dir
-PROJECT_PATH="$(project_repo_path)" || die "no project git root"
-# Compute relative path from the ROLE dir (which exists), then append /runtime
-REL_ROLE_PATH="$(realpath --relative-to="$PROJECT_PATH" "$ROLE_DIR")"
-REL_SUBMODULE_PATH="${REL_ROLE_PATH}/runtime"
-log "    adding submodule at $REL_SUBMODULE_PATH"
-
-# Idempotent: if the submodule is already registered, just update it.
-# This handles re-runs where the .done marker was cleared or copier
-# --overwrite regenerated the scripts.
-SUBMODULE_ALREADY_REGISTERED=0
-if git -C "$PROJECT_PATH" submodule status "$REL_SUBMODULE_PATH" >/dev/null 2>&1; then
-  SUBMODULE_ALREADY_REGISTERED=1
-fi
-
-if [[ "$SUBMODULE_ALREADY_REGISTERED" == "1" ]]; then
-  log "    submodule already registered — updating"
-  (
-    cd "$PROJECT_PATH"
-    # If the local dir is missing (e.g. previous rm -rf), re-init it
-    if [[ ! -d "$REL_SUBMODULE_PATH/.git" ]]; then
-      git submodule update --init "$REL_SUBMODULE_PATH" 2>&1 | tail -3
-    fi
-  )
+# Never let a literal secret reach the runtime. The scaffold is rendered from
+# templates, so a leaked credential shows up here before anything is copied.
+python3 "$(dirname "$0")/secret-scan.py" "$TMP"
+cp -an "$TMP/." "$RUNTIME_LOCAL/"
+
+# Seed mutable identity/config only when no local value exists.
+if [[ "$ROLE" == "reporter" ]]; then
+  # Generate a delta-only runtime config for least-privilege reporters. Never copy the shared PM
+  # config: it may carry dashboard credentials, write-capable MCPs, or broad tools.
+  MODEL_PROVIDER="$(yaml_get model.provider)"
+  MODEL_NAME="$(yaml_get model.name)"
+  CANONICAL_SKILLS_DIR="${CANONICAL_SKILLS_DIR:-$(config_get fleet.canonical_skills_dir "$HOME/.agents/skills")}"
+  if [[ ! -e "$RUNTIME_LOCAL/config.yaml" ]]; then
+    python3 - "$RUNTIME_LOCAL/config.yaml" "$PROJECT_PATH" "${HERMES_TIMEZONE:-America/New_York}" \
+      "$MODEL_PROVIDER" "$MODEL_NAME" "$CANONICAL_SKILLS_DIR" "$ROLE" <<'PYEOF'
+import json, pathlib, re, sys
+path, cwd, timezone, provider, model, skills, role = sys.argv[1:8]
+if not re.fullmatch(r"[A-Za-z_]+(?:/[A-Za-z_]+)*", timezone):
+    raise SystemExit("unsafe timezone")
+config = {
+    "timezone": timezone,
+    "terminal": {"cwd": cwd},
+    "skills": {"external_dirs": [skills]},
+}
+if provider or model:
+    config["model"] = {}
+    if provider:
+        config["model"]["provider"] = provider
+    if model:
+        config["model"]["default"] = model
+config["platform_toolsets"] = {
+    "cli": ["web", "delegation", "no_mcp"],
+    "cron": ["web", "delegation", "no_mcp"],
+}
+config["agent"] = {
+    "disabled_toolsets": [
+        "browser", "terminal", "file", "code_execution", "cronjob",
+        "kanban", "homeassistant", "computer_use", "project", "skills",
+    ]
+}
+config["delegation"] = {"max_spawn_depth": 1, "inherit_mcp_toolsets": False}
+pathlib.Path(path).write_text(json.dumps(config, indent=2) + "\n")
+PYEOF
+  fi
+  if [[ ! -e "$RUNTIME_LOCAL/profile.yaml" ]]; then
+    cat > "$RUNTIME_LOCAL/profile.yaml" <<'YAML'
+config:
+  inherit_from: default
+  save_mode: delta
+YAML
+  fi
 else
-  # Clean any leftover untracked directory before adding
-  rm -rf "$RUNTIME_LOCAL"
-  (
-    cd "$PROJECT_PATH"
-    # -f forces the add even if a repo .gitignore matches the runtime path
-    # (e.g. a stray `runtime/` rule). The runtime is a tracked submodule gitlink,
-    # never ignored content, so forcing past .gitignore is always correct here.
-    git submodule add -f "$REMOTE_URL" "$REL_SUBMODULE_PATH" 2>&1 | tail -3
-  )
+  CANONICAL_PM_CONFIG="$(config_get fleet.canonical_pm_config "$HOME/.hermes/config.yaml")"
+  if [[ -f "$CANONICAL_PM_CONFIG" && ! -e "$RUNTIME_LOCAL/config.yaml" ]]; then
+    cp "$CANONICAL_PM_CONFIG" "$RUNTIME_LOCAL/config.yaml"
+  fi
+fi
+if [[ ! -e "$RUNTIME_LOCAL/SOUL.md" ]]; then
+  cp "$ROLE_DIR/SOUL.md" "$RUNTIME_LOCAL/SOUL.md"
 fi
 
-# 6. Fold the staging profile state into the runtime, then symlink the profile
-# name AT the runtime. HERMES_HOME is the runtime submodule, but the profile
-# symlink is LOAD-BEARING: hermes resolves agents launched as
-# `hermes --profile <name>` through ~/.hermes/profiles/<name> (and recreates it
-# as a fresh standalone dir if it's missing, disconnecting the agent from its
-# runtime), so that name MUST resolve to the runtime.
-PROFILE_HOME="$HOME/.hermes/profiles/$PROFILE_NAME"
+# Fold the two supported staging-profile files into the runtime without
+# deleting unknown profile content. Unknown content blocks the symlink so an
+# operator can reconcile it explicitly instead of losing state.
 if [[ -d "$PROFILE_HOME" && ! -L "$PROFILE_HOME" ]]; then
-  log "    migrating staging profile state into the runtime submodule"
-  # OAuth provider credentials are fleet-shared via HERMES_OAUTH_FILE, so do not
-  # clone auth.json/auth.lock into each runtime.
-  for f in .env config.yaml; do
-    [[ -f "$PROFILE_HOME/$f" && ! -e "$RUNTIME_LOCAL/$f" ]] && cp "$PROFILE_HOME/$f" "$RUNTIME_LOCAL/$f"
+  log "    migrating supported staging profile state into the local runtime"
+  # A reporter never inherits .env; its credentials must be provisioned
+  # explicitly against a bot identity it owns.
+  if [[ "$ROLE" == "reporter" ]]; then
+    MIGRATE_FILES=(config.yaml profile.yaml)
+  else
+    MIGRATE_FILES=(.env config.yaml)
+  fi
+  for file_name in "${MIGRATE_FILES[@]}"; do
+    [[ -f "$PROFILE_HOME/$file_name" && ! -e "$RUNTIME_LOCAL/$file_name" ]] && cp "$PROFILE_HOME/$file_name" "$RUNTIME_LOCAL/$file_name"
+    [[ -f "$PROFILE_HOME/$file_name" ]] && rm -f -- "$PROFILE_HOME/$file_name"
   done
-  rm -rf "$PROFILE_HOME"
+  if ! rmdir "$PROFILE_HOME" 2>/dev/null; then
+    die "staging profile contains unrecognized state and was preserved: $PROFILE_HOME"
+  fi
 fi
 ln -sfn "$RUNTIME_LOCAL" "$PROFILE_HOME"
 log "    profile symlink $PROFILE_HOME -> $RUNTIME_LOCAL"
 
-# Apply the one genuine per-repo config delta directly to the runtime config.
 env HERMES_HOME="$RUNTIME_LOCAL" "$HERMES_BIN" config set terminal.cwd "$PROJECT_PATH" >/dev/null 2>&1 || true
 
 if [[ "$ROLE" == "pm" ]]; then
@@ -164,25 +168,4 @@ if [[ "$ROLE" == "pm" ]]; then
   fi
 fi
 
-if [[ "$ROLE" == "pm" ]]; then
-  VOXXY_PLUGIN_DIR="${VOXXY_PLUGIN_DIR:-$(config_get fleet.voxxy_plugin_dir "$HOME/code/voxxy/plugins/tts/voxxy")}"
-  if [[ -d "$VOXXY_PLUGIN_DIR" ]]; then
-    mkdir -p "$RUNTIME_LOCAL/plugins/tts"
-    ln -sfn "$VOXXY_PLUGIN_DIR" "$RUNTIME_LOCAL/plugins/tts/voxxy"
-    log "    linked Voxxy plugin into runtime"
-  else
-    warn "    Voxxy plugin dir missing: $VOXXY_PLUGIN_DIR"
-  fi
-
-  if [[ -x "$HERMES_BIN" ]]; then
-    env HERMES_HOME="$RUNTIME_LOCAL" "$HERMES_BIN" config set plugins.enabled.0 tts/voxxy >/dev/null 2>&1 || true
-    env HERMES_HOME="$RUNTIME_LOCAL" "$HERMES_BIN" config set tts.provider voxxy >/dev/null 2>&1 || true
-    env HERMES_HOME="$RUNTIME_LOCAL" "$HERMES_BIN" config set tts.voice rick >/dev/null 2>&1 || true
-    log "    set PM runtime TTS provider -> voxxy"
-  else
-    warn "    Hermes bin missing; skipped PM Voxxy config"
-  fi
-fi
-
-rm -rf "$TMP"
 mark_done 20-runtime-repo