@delorenj/pjangler 1.3.0 → 1.3.7

package/dist/prompt.js

@@ -0,0 +1,404 @@
+#!/usr/bin/env node
+
+// src/prompt.ts
+import { readFileSync as readFileSync2, realpathSync } from "node:fs";
+import { basename, join as join3 } from "node:path";
+import { pathToFileURL } from "node:url";
+
+// src/describe/activity.ts
+import { spawn, spawnSync } from "node:child_process";
+import { statSync } from "node:fs";
+import { join } from "node:path";
+var ACTIVE_WINDOW_SECONDS = 24 * 60 * 60;
+var MAX_DIRTY_STATS = 500;
+var GIT_TIMEOUT_MS = 5e3;
+var GIT_MAX_BUFFER = 16 * 1024 * 1024;
+function git(repo, args) {
+  const result = spawnSync("git", ["-C", repo, ...args], {
+    encoding: "utf8",
+    timeout: GIT_TIMEOUT_MS,
+    maxBuffer: GIT_MAX_BUFFER
+  });
+  if (result.status !== 0 || typeof result.stdout !== "string") return void 0;
+  return result.stdout;
+}
+function trimmed(raw) {
+  if (raw === void 0) return void 0;
+  const value = raw.trim();
+  return value === "" ? void 0 : value;
+}
+function gitLine(repo, args) {
+  return trimmed(git(repo, args));
+}
+function isGitRepo(repo) {
+  return gitLine(repo, ["rev-parse", "--is-inside-work-tree"]) === "true";
+}
+var MINUTE = 60;
+var HOUR = 60 * MINUTE;
+var DAY = 24 * HOUR;
+var WEEK = 7 * DAY;
+var MONTH = 30 * DAY;
+var YEAR = 365 * DAY;
+function plural(count, unit) {
+  return `${count} ${unit}${count === 1 ? "" : "s"} ago`;
+}
+function formatRelativeAge(deltaSeconds) {
+  const delta = Math.max(0, Math.floor(deltaSeconds));
+  if (delta < MINUTE) return "just now";
+  if (delta < HOUR) return plural(Math.floor(delta / MINUTE), "minute");
+  if (delta < DAY) return plural(Math.floor(delta / HOUR), "hour");
+  if (delta < WEEK) return plural(Math.floor(delta / DAY), "day");
+  if (delta < MONTH) return plural(Math.floor(delta / WEEK), "week");
+  if (delta < YEAR) return plural(Math.floor(delta / MONTH), "month");
+  return plural(Math.floor(delta / YEAR), "year");
+}
+function formatCompactAge(deltaSeconds) {
+  const delta = Math.max(0, Math.floor(deltaSeconds));
+  if (delta < MINUTE) return "now";
+  if (delta < HOUR) return `${Math.floor(delta / MINUTE)}m`;
+  if (delta < DAY) return `${Math.floor(delta / HOUR)}h`;
+  if (delta < WEEK) return `${Math.floor(delta / DAY)}d`;
+  if (delta < MONTH) return `${Math.floor(delta / WEEK)}w`;
+  if (delta < YEAR) return `${Math.floor(delta / MONTH)}mo`;
+  return `${Math.floor(delta / YEAR)}y`;
+}
+var REF_ARGS = [
+  "for-each-ref",
+  "--sort=-committerdate",
+  "--format=%(committerdate:unix)%09%(refname:short)",
+  "refs/heads",
+  "refs/remotes",
+  "refs/tags"
+];
+var WORKTREE_ARGS = ["worktree", "list", "--porcelain"];
+var STATUS_ARGS = ["status", "--porcelain", "-z", "--ignore-submodules=dirty"];
+function parseRefs(raw) {
+  if (raw === void 0) return { count: 0 };
+  const lines = raw.split("\n").filter((line) => line.trim() !== "");
+  if (!lines.length) return { count: 0 };
+  const [stamp, name] = lines[0].split("	");
+  const unix = Number(stamp);
+  if (!Number.isFinite(unix) || unix <= 0) return { count: lines.length };
+  return { source: { kind: "ref", label: name ?? "(unnamed ref)", unix }, count: lines.length };
+}
+function parseWorktrees(raw) {
+  if (raw === void 0) return [];
+  const entries = [];
+  let current = { detached: false };
+  const flush = () => {
+    if (current.path && current.sha) entries.push({ path: current.path, sha: current.sha, detached: current.detached });
+    current = { detached: false };
+  };
+  for (const line of raw.split("\n")) {
+    if (line.startsWith("worktree ")) {
+      flush();
+      current.path = line.slice("worktree ".length);
+    } else if (line.startsWith("HEAD ")) {
+      current.sha = line.slice("HEAD ".length).trim();
+    } else if (line === "detached") {
+      current.detached = true;
+    }
+  }
+  flush();
+  return entries;
+}
+function parseWorktreeStamps(raw, entries) {
+  if (raw === void 0) return void 0;
+  let best;
+  for (const line of raw.split("\n")) {
+    const [stamp, sha] = line.trim().split(" ");
+    const unix = Number(stamp);
+    if (!Number.isFinite(unix) || unix <= 0 || !sha) continue;
+    if (best && unix <= best.unix) continue;
+    const owner = entries.find((entry) => entry.sha === sha);
+    const name = owner ? basenameOf(owner.path) : sha.slice(0, 7);
+    best = { kind: "worktree", label: owner?.detached ? `${name} (detached)` : name, unix };
+  }
+  return best;
+}
+function parseStatusPaths(raw) {
+  if (raw === void 0) return [];
+  const parts = raw.split("\0").filter((part) => part !== "");
+  const paths = [];
+  for (let index = 0; index < parts.length; index++) {
+    const entry = parts[index];
+    if (entry.length < 4 || entry[2] !== " ") continue;
+    paths.push(entry.slice(3));
+    if (entry[0] === "R" || entry[0] === "C") index += 1;
+  }
+  return paths;
+}
+function basenameOf(path) {
+  const parts = path.split("/").filter(Boolean);
+  return parts[parts.length - 1] ?? path;
+}
+function uncommittedSource(repo, paths) {
+  if (!paths.length) return void 0;
+  let newest = 0;
+  for (const path of paths.slice(0, MAX_DIRTY_STATS)) {
+    try {
+      const mtime = Math.floor(statSync(join(repo, path)).mtimeMs / 1e3);
+      if (mtime > newest) newest = mtime;
+    } catch {
+    }
+  }
+  if (newest <= 0) return void 0;
+  const label = paths.length === 1 ? "1 uncommitted file" : `${paths.length} uncommitted files`;
+  return { kind: "uncommitted", label, unix: newest };
+}
+var NO_ACTIVITY = {
+  updated: null,
+  updatedUnix: null,
+  relative: "never",
+  compact: "\u2014",
+  active: false,
+  source: null,
+  scanned: { refs: 0, worktrees: 0, dirtyFiles: 0 }
+};
+function emptyActivity() {
+  return { ...NO_ACTIVITY, scanned: { refs: 0, worktrees: 0, dirtyFiles: 0 } };
+}
+function assembleActivity(candidates, scanned, now) {
+  let winner = null;
+  for (const candidate of candidates) {
+    if (!candidate) continue;
+    if (!winner || candidate.unix >= winner.unix) winner = candidate;
+  }
+  if (!winner) return { ...NO_ACTIVITY, scanned };
+  const nowUnix = Math.floor((now?.getTime() ?? Date.now()) / 1e3);
+  const delta = nowUnix - winner.unix;
+  return {
+    updated: new Date(winner.unix * 1e3).toISOString(),
+    updatedUnix: winner.unix,
+    relative: formatRelativeAge(delta),
+    compact: formatCompactAge(delta),
+    active: delta < ACTIVE_WINDOW_SECONDS,
+    source: winner,
+    scanned
+  };
+}
+function computeRepoActivity(repo, options = {}) {
+  if (!isGitRepo(repo)) return emptyActivity();
+  const refs = parseRefs(git(repo, REF_ARGS));
+  const worktrees = parseWorktrees(git(repo, WORKTREE_ARGS));
+  const shas = [...new Set(worktrees.map((entry) => entry.sha))];
+  const worktreeSource = shas.length ? parseWorktreeStamps(git(repo, ["show", "-s", "--format=%ct %H", ...shas]), worktrees) : void 0;
+  const paths = parseStatusPaths(git(repo, STATUS_ARGS));
+  return assembleActivity(
+    [refs.source, worktreeSource, uncommittedSource(repo, paths)],
+    { refs: refs.count, worktrees: worktrees.length, dirtyFiles: paths.length },
+    options.now
+  );
+}
+
+// src/project/boardUrl.ts
+import { existsSync, readFileSync, statSync as statSync2 } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, isAbsolute, join as join2, resolve } from "node:path";
+var DEFAULT_PLANE_BASE = "https://plane.delo.sh";
+var DEFAULT_PLANE_WORKSPACE = "33god";
+function resolveTemplateConfigPath(env = process.env, home = homedir()) {
+  const fromEnv = env.HERMES_TEMPLATE_CONFIG;
+  if (fromEnv && fromEnv.trim()) return fromEnv.trim();
+  const xdg = env.XDG_CONFIG_HOME?.trim();
+  const base = xdg && xdg.length ? xdg : join2(home, ".config");
+  return join2(base, "hermes-agent-template", "config.toml");
+}
+function readTomlScalar(text, section, key) {
+  let inSection = false;
+  for (const raw of text.split("\n")) {
+    const line = raw.trim();
+    if (!line || line.startsWith("#")) continue;
+    if (line.startsWith("[")) {
+      inSection = line === `[${section}]`;
+      continue;
+    }
+    if (!inSection) continue;
+    const eq = line.indexOf("=");
+    if (eq === -1) continue;
+    if (line.slice(0, eq).trim() !== key) continue;
+    const value = line.slice(eq + 1).trim();
+    const quoted = /^"([^"]*)"|^'([^']*)'/.exec(value);
+    if (quoted) return quoted[1] ?? quoted[2];
+    const bare = (value.split("#")[0] ?? "").trim();
+    return bare || void 0;
+  }
+  return void 0;
+}
+function readTemplateConfig(env, home) {
+  try {
+    const path = resolveTemplateConfigPath(env, home);
+    return existsSync(path) ? readFileSync(path, "utf8") : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function planeBase(env = process.env, home = homedir()) {
+  const fromEnv = env.PLANE_BASE?.trim();
+  if (fromEnv) return fromEnv.replace(/\/+$/, "");
+  const config = readTemplateConfig(env, home);
+  const fromConfig = config ? readTomlScalar(config, "plane", "base")?.trim() : void 0;
+  if (fromConfig) return fromConfig.replace(/\/+$/, "");
+  return DEFAULT_PLANE_BASE;
+}
+function planeWorkspace(provider, env, home) {
+  const fromManifest = provider.workspace?.trim();
+  if (fromManifest) return fromManifest;
+  const config = readTemplateConfig(env, home);
+  const fromConfig = config ? readTomlScalar(config, "plane", "workspace")?.trim() : void 0;
+  return fromConfig || DEFAULT_PLANE_WORKSPACE;
+}
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function extractTicketRef(branch, identifier) {
+  if (!branch || !identifier) return void 0;
+  const ident = identifier.trim();
+  if (!ident) return void 0;
+  const match = new RegExp(`\\b${escapeRegExp(ident)}-(\\d+)\\b`, "i").exec(branch);
+  return match ? `${ident.toUpperCase()}-${match[1]}` : void 0;
+}
+function normalizeTicketRef(input, identifier) {
+  const value = input?.trim();
+  if (!value) return void 0;
+  if (/^\d+$/.test(value)) {
+    const ident = identifier?.trim();
+    return ident ? `${ident.toUpperCase()}-${value}` : void 0;
+  }
+  const qualified = /^([A-Za-z][A-Za-z0-9]*)-(\d+)$/.exec(value);
+  if (!qualified) return void 0;
+  return `${qualified[1].toUpperCase()}-${qualified[2]}`;
+}
+function resolveTicketRef(provider, options) {
+  return normalizeTicketRef(options.ref, provider.identifier) ?? extractTicketRef(options.branch, provider.identifier);
+}
+function boardUrl(provider, options = {}) {
+  if (!provider) return void 0;
+  const env = options.env ?? process.env;
+  const home = options.home ?? homedir();
+  const type = (provider.type || "plane").trim().toLowerCase();
+  const boardId = provider.board_id?.trim();
+  if (!boardId) return void 0;
+  if (type === "trello") {
+    return `https://trello.com/b/${boardId}`;
+  }
+  if (type !== "plane") return void 0;
+  const workspace = planeWorkspace(provider, env, home);
+  if (!workspace) return void 0;
+  const base = planeBase(env, home);
+  const ref = resolveTicketRef(provider, options);
+  return ref ? `${base}/${workspace}/browse/${ref}` : `${base}/${workspace}/projects/${boardId}/issues`;
+}
+function findProjectRoot(from) {
+  let dir = resolve(from);
+  for (; ; ) {
+    if (existsSync(join2(dir, ".project.json"))) return dir;
+    const parent = dirname(dir);
+    if (parent === dir) return void 0;
+    dir = parent;
+  }
+}
+function readTicketProvider(root) {
+  try {
+    const manifest = JSON.parse(readFileSync(join2(root, ".project.json"), "utf8"));
+    const provider = manifest.ticket_provider;
+    if (!provider || typeof provider !== "object") return void 0;
+    return provider;
+  } catch {
+    return void 0;
+  }
+}
+function currentBranch(from) {
+  try {
+    let dir = resolve(from);
+    for (; ; ) {
+      const dotgit = join2(dir, ".git");
+      if (existsSync(dotgit)) {
+        let gitDir = dotgit;
+        if (statSync2(dotgit).isFile()) {
+          const pointer = /^gitdir:\s*(.+)$/m.exec(readFileSync(dotgit, "utf8"));
+          if (!pointer) return void 0;
+          const target = pointer[1].trim();
+          gitDir = isAbsolute(target) ? target : resolve(dir, target);
+        }
+        const head = readFileSync(join2(gitDir, "HEAD"), "utf8").trim();
+        const ref = /^ref:\s*refs\/heads\/(.+)$/.exec(head);
+        return ref ? ref[1].trim() : void 0;
+      }
+      const parent = dirname(dir);
+      if (parent === dir) return void 0;
+      dir = parent;
+    }
+  } catch {
+    return void 0;
+  }
+}
+function resolveBoardUrl(cwd, ref, env = process.env) {
+  const root = findProjectRoot(cwd);
+  if (!root) return void 0;
+  const provider = readTicketProvider(root);
+  if (!provider) return void 0;
+  return boardUrl(provider, { ref, branch: currentBranch(root), env });
+}
+
+// src/prompt.ts
+function readPromptFacts(root, now) {
+  let slug = basename(root);
+  let identifier;
+  try {
+    const manifest = JSON.parse(readFileSync2(join3(root, ".project.json"), "utf8"));
+    if (typeof manifest.project_slug === "string" && manifest.project_slug) slug = manifest.project_slug;
+    const provider = manifest.ticket_provider;
+    if (provider && typeof provider.identifier === "string" && provider.identifier) identifier = provider.identifier;
+  } catch {
+  }
+  const activity = computeRepoActivity(root, { now });
+  return {
+    root,
+    slug,
+    identifier,
+    age: activity.updatedUnix ? activity.compact : void 0,
+    active: activity.active
+  };
+}
+function formatPromptLine(facts) {
+  const parts = [facts.slug];
+  if (facts.identifier) parts.push(`(${facts.identifier})`);
+  const head = parts.join(" ");
+  return facts.age ? `${head} \xB7 ${facts.age}` : head;
+}
+function promptLine(cwd, now) {
+  const root = findProjectRoot(cwd);
+  if (!root) return void 0;
+  return formatPromptLine(readPromptFacts(root, now));
+}
+function main() {
+  try {
+    const args = process.argv.slice(2);
+    if (args[0] === "--url") {
+      const url = resolveBoardUrl(process.cwd(), args[1]);
+      if (url) process.stdout.write(`${url}
+`);
+      else process.exitCode = 1;
+      return;
+    }
+    const line = promptLine(process.cwd());
+    if (line) process.stdout.write(line);
+  } catch {
+  }
+}
+function isMainModule() {
+  if (!process.argv[1]) return false;
+  try {
+    return import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href;
+  } catch {
+    return false;
+  }
+}
+if (isMainModule()) main();
+export {
+  findProjectRoot,
+  formatPromptLine,
+  promptLine,
+  readPromptFacts
+};

package/package.json

@@ -1,13 +1,14 @@
 {
   "name": "@delorenj/pjangler",
-  "version": "1.3.0",
+  "version": "1.3.7",
   "description": "Project subsystem bootstrapper CLI",
   "type": "module",
   "main": "dist/index.js",
   "bin": {
     "pjangler": "dist/index.js",
     "pj": "dist/index.js",
-    "pjangler-mcp": "dist/mcp-server.js"
+    "pjangler-mcp": "dist/mcp-server.js",
+    "pjangler-prompt": "dist/prompt.js"
   },
   "files": [
     "dist",
@@ -22,7 +23,7 @@
     "node": ">=20"
   },
   "scripts": {
-    "build": "esbuild src/index.ts src/mcp-server.ts --bundle --packages=external --platform=node --format=esm --outdir=dist",
+    "build": "esbuild src/index.ts src/mcp-server.ts src/prompt.ts --bundle --packages=external --platform=node --format=esm --outdir=dist",
     "check:audit:prod": "npm audit --omit=dev",
     "check:lock": "node scripts/check-package-lock-parity.mjs",
     "check:submodules": "node scripts/check-submodule-contract.mjs",
@@ -31,11 +32,12 @@
     "mcp": "node dist/mcp-server.js",
     "typecheck": "tsc --noEmit",
     "test:bmad-installer-contract": "node tests/bmad-installer-contract-regressions.mjs",
-    "test": "npm run check:lock && npm run check:submodules && npm run check:tracked-secrets && node tests/portable-test-paths-regressions.mjs && node tests/release-regressions.mjs && node tests/submodule-contract-regressions.mjs && node tests/secret-publication-gate-regressions.mjs && node tests/bmad-version-surface-regressions.mjs && node tests/bmad-transaction-regressions.mjs && node tests/parity-migrate-regressions.mjs && node tests/pjan-57-lifecycle-recipes-regressions.mjs && node tests/pjan-57-dogfood-regressions.mjs && node tests/generated-project-lifecycle-regressions.mjs && node tests/pack-flatten-regressions.mjs && node tests/pack-flatten-cross-engine-regressions.mjs && node tests/registry-cache-parity-regressions.mjs && node tests/registry-root-ladder-regressions.mjs && node tests/pjan-23-regressions.mjs && node tests/pjan-24-regressions.mjs && node tests/pjan-28-regressions.mjs && node tests/pjan-30-regressions.mjs && node tests/pjan-31a-regressions.mjs && node tests/pjan-36-regressions.mjs && node tests/pjan-43-regressions.mjs && node tests/pjan-48-regressions.mjs && node tests/pjan-49-regressions.mjs && node tests/pjan-50-regressions.mjs && node tests/skillex-init-regressions.mjs && node tests/fleet-shared-bloodbank-regressions.mjs && node tests/mcp-catalog-regressions.mjs && node tests/mcp-server-regressions.mjs && node tests/project-registry-regressions.mjs && node tests/pg-registry-regressions.mjs && node tests/momo-lifecycle-plane-regressions.mjs",
+    "test": "npm run check:lock && node tests/package-lock-parity-regressions.mjs && npm run check:submodules && npm run check:tracked-secrets && node tests/portable-test-paths-regressions.mjs && node tests/release-regressions.mjs && node tests/submodule-contract-regressions.mjs && node tests/secret-publication-gate-regressions.mjs && node tests/bmad-version-surface-regressions.mjs && node tests/bmad-transaction-regressions.mjs && node tests/parity-migrate-regressions.mjs && node tests/hermes-profile-inheritance-regressions.mjs && node tests/pjan-57-lifecycle-recipes-regressions.mjs && node tests/pjan-57-dogfood-regressions.mjs && node tests/generated-project-lifecycle-regressions.mjs && node tests/pack-flatten-regressions.mjs && node tests/pack-flatten-cross-engine-regressions.mjs && node tests/registry-cache-parity-regressions.mjs && node tests/registry-root-ladder-regressions.mjs && node tests/pjan-23-regressions.mjs && node tests/pjan-24-regressions.mjs && node tests/pjan-28-regressions.mjs && node tests/pjan-30-regressions.mjs && node tests/pjan-31a-regressions.mjs && node tests/pjan-36-regressions.mjs && node tests/pjan-43-regressions.mjs && node tests/pjan-48-regressions.mjs && node tests/pjan-49-regressions.mjs && node tests/pjan-50-regressions.mjs && node tests/pjan-65-regressions.mjs && node tests/pjan-67-lifecycle-preflight-regressions.mjs && node tests/pjan-67-regressions.mjs && node tests/pjan-67-trusted-lifecycle-regressions.mjs && node tests/pjan-71-regressions.mjs && node tests/pjan-72-regressions.mjs && node tests/pjan-75-regressions.mjs && node tests/pjan-76-regressions.mjs && node tests/skillex-init-regressions.mjs && node tests/fleet-shared-bloodbank-regressions.mjs && node tests/mcp-catalog-regressions.mjs && node tests/mcp-server-regressions.mjs && node tests/project-registry-regressions.mjs && node tests/pg-registry-regressions.mjs && node tests/momo-lifecycle-plane-regressions.mjs",
     "migrate:up": "node-pg-migrate --migrations-dir migrations up",
     "migrate:down": "node-pg-migrate --migrations-dir migrations down",
     "migrate:create": "node-pg-migrate --migrations-dir migrations create",
-    "prepublishOnly": "npm run check:lock && npm run check:submodules -- --remote --recursive --archive --npm && npm run build && npm run check:tracked-secrets"
+    "prepublishOnly": "npm run check:lock && npm run check:submodules -- --remote --recursive --archive --npm && npm run build && npm run check:tracked-secrets",
+    "test:hermes-profile-inheritance": "node tests/hermes-profile-inheritance-regressions.mjs"
   },
   "keywords": [
     "cli",

package/templates/commonproject/copier.yml

@@ -116,7 +116,12 @@ _exclude:
 _tasks:
   - "cp ~/.config/git/ignore .gitignore 2>/dev/null || echo '# Add ignores here' > .gitignore"
   # Ensure secrets + per-dev agent-hook/skill overrides are ignored (appended after the base ignore).
-  - "printf '\\n# Secrets + per-dev agent-hook/skill overrides (see .agents/local.example.json)\\n.env\\n.env.*\\n!.env.op\\n.agents/local.json\\n.lastagent\\n**/.claude/settings.local.json\\n\\n# PJAN-57: all six generated CLI configurations are durable project state.\\n!.claude/\\n!.claude/**\\n!.codex/\\n!.codex/**\\n!.gemini/\\n!.gemini/**\\n!.copilot/\\n!.copilot/**\\n!.opencode/\\n!.opencode/**\\n!.kimi-code/\\n!.kimi-code/**\\n' >> .gitignore"
+  # Each CLI root's hand-owned config is durable project state; the skill
+  # projections inside it are not — bmad-method and skills:sync rewrite them
+  # on every run, so they are re-ignored after the un-ignore lines (last
+  # match wins). _bmad/_config/manifest.yaml pins the version that
+  # reproduces them exactly.
+  - "printf '\\n# Secrets + per-dev agent-hook/skill overrides (see .agents/local.example.json)\\n.env\\n.env.*\\n!.env.op\\n.agents/local.json\\n.lastagent\\n**/.claude/settings.local.json\\n\\n# Generated CLI configurations are durable project state...\\n!.claude/\\n!.claude/**\\n!.codex/\\n!.codex/**\\n!.gemini/\\n!.gemini/**\\n!.copilot/\\n!.copilot/**\\n!.opencode/\\n!.opencode/**\\n!.kimi-code/\\n!.kimi-code/**\\n# ...but their skill projections are regenerated, so they stay out of the tree.\\n/.agents/skills/\\n.claude/skills/\\n.codex/skills/\\n.gemini/skills/\\n.copilot/skills/\\n.opencode/skills/\\n.kimi-code/skills/\\n' >> .gitignore"
   - "ln -sf AGENTS.md CLAUDE.md"
   - "ln -sf AGENTS.md GEMINI.md"
   # Materialize the declared Skillex packs' manifest + symlink topology

package/templates/commonproject/template/.mise/scripts/provision-packs.py

@@ -19,9 +19,10 @@ What this script owns is the transactional projection into the project:
     one unsafe or tampered pack produces ZERO mutation
   * `.agents/skills.json` is rewritten atomically, preserving its mode
 
-Backwards compatibility: a project that declares no `bmad` pack still gets the
-pinned BMAD pack expanded into `skills[]`, exactly as before. Declaring
-`{"name": "bmad", ...}` in `packs[]` takes over and the pin is not consulted.
+Only packs a project DECLARES in `packs[]` are provisioned. Nothing is pinned
+implicitly -- in particular BMAD is not a pack: `bmad-method install` writes
+bmad-* skills into `.agents/skills` itself, versioned per project by
+`_bmad/_config/manifest.yaml`.
 """
 
 from __future__ import annotations
@@ -40,11 +41,12 @@ from typing import Callable
 SKILLS_SCHEMA = "https://raw.githubusercontent.com/delorenj/skillex/main/skills.schema.json"
 SKILLS_REGISTRY = "https://github.com/delorenj/skillex.git"
 
-# The BMAD pack pinned when a project declares none. Sealed from this side so
-# the pinned release is verified byte-for-byte even though its `pack.toml`
-# predates `[policy] sealed`.
-BMAD_PACK_NAME = "bmad"
-BMAD_PACK_VERSION = "6.10.1-next.31"
+# BMAD is NOT a pack. `bmad-method install` writes bmad-* skills into
+# .agents/skills itself, per project, versioned by _bmad/_config/manifest.yaml.
+# This script used to pin a frozen `packs/bmad/<version>` in the registry and
+# project a second copy of the same skills; when the registry dropped that pack
+# the pin took every `pjangler project create` down with it on any machine
+# without a warm cache. Only packs a project DECLARES are provisioned now.
 
 
 def load_engine():
@@ -68,38 +70,13 @@ engine = load_engine()
 
 
 def pack_root_override(name: str) -> Path | None:
-    """Developer/test pin for one pack root, e.g. `PJ_PACK_ROOT_HERMES_BASE`.
-
-    `PJ_BMAD_PACK_ROOT` predates the generic form and stays a first-class alias
-    for the `bmad` pack.
-    """
+    """Developer/test pin for one pack root, e.g. `PJ_PACK_ROOT_HERMES_BASE`."""
     generic = os.environ.get(f"PJ_PACK_ROOT_{re.sub(r'[^A-Z0-9]', '_', name.upper())}", "").strip()
     if generic:
         return Path(generic).expanduser().absolute()
-    if name == BMAD_PACK_NAME:
-        legacy = os.environ.get("PJ_BMAD_PACK_ROOT", "").strip()
-        if legacy:
-            return Path(legacy).expanduser().absolute()
     return None
 
 
-def implicit_bmad_entry() -> dict:
-    """The implicit BMAD pin, expressed as an ordinary `packs[]` entry.
-
-    It deliberately carries NO `source`: like every declared pack it must walk
-    the one resolution ladder in `resolve_pack_root()` -- env override first,
-    then the contract-ordered registry checkouts. Pinning a hardcoded root here
-    would give the same pack name two resolutions in one process, so adding
-    `packs:[{"name":"bmad",...}]` to a manifest would silently MOVE the pack.
-    """
-    return {
-        "name": BMAD_PACK_NAME,
-        "version": BMAD_PACK_VERSION,
-        "sealed": True,
-        "optional": False,
-    }
-
-
 def apply_root_override(entry: dict) -> dict:
     """Pin a declared pack at an overridden root without changing its identity."""
     if entry.get("source") or entry.get("registry_path"):
@@ -150,24 +127,11 @@ def resolve_declared_packs(manifest: dict, base_dir: Path):
             # Later packs override earlier ones (contract section 5).
             declared_members[name] = path
 
+    # Nothing is pinned implicitly any more. The empty pair is kept so every
+    # caller keeps one shape and the manifest writer still evicts leftovers
+    # from when something WAS pinned here.
     implicit_members: dict[str, Path] = {}
     implicit_packs: list[dict] = []
-    if not any(entry["name"] == BMAD_PACK_NAME for entry in entries):
-        # Same call shape as a declared pack above, so the pin cannot resolve
-        # anywhere a declared `bmad` entry would not.
-        pinned = engine.normalize_pack_entry(apply_root_override(implicit_bmad_entry()))
-        pinned["sealed"] = True
-        for name, path in engine.resolve_pack(
-            pinned,
-            cache_dir,
-            base_dir,
-            default_registry,
-            registry_roots,
-            managed_roots,
-            on_resolved=implicit_packs.append,
-        ):
-            implicit_members[name] = path
-
     return declared_members, implicit_members, declared_packs, implicit_packs
 
 

package/templates/hermes-agent/copier.yml

@@ -46,17 +46,14 @@ target_repo:
 
 role:
   type: str
-  help: "Role for this agent"
+  help: "Role for this agent (safe single path segment; arbitrary roles are supported)"
   default: pm
-  choices:
-    "Project Manager (pm)": pm
-    "Company Director (director)": director
-    "Developer (dev)": dev
-    "Reviewer (review)": review
-    "Company Reporter — daily cross-project rollup (reporter)": reporter
-    "Ops (ops)": ops
-    "QA (qa)": qa
-  validator: "{% if not role %}Required{% endif %}"
+  validator: >-
+    {% set alnum = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789' -%}
+    {% set safe_chars = alnum ~ '._-' -%}
+    {% if not role or role != role|trim or role in ['.', '..'] or role[0] not in alnum or role[-1] not in alnum or role|reject('in', safe_chars)|list|length -%}
+    Role must be a non-empty safe single path segment using letters, numbers, dots, underscores, or hyphens
+    {%- endif %}
 
 ticket_provider:
   type: str
@@ -157,7 +154,7 @@ plane_workspace:
 # All scripts are idempotent — safe to re-run if a step fails.
 
 _tasks:
-  - "chmod +x .scripts/*.sh .scripts/sentinel/bin/*.sh hermes 2>/dev/null || true"
+  - "chmod +x .scripts/*.sh .scripts/sentinel/bin/*.sh hermes momo 2>/dev/null || true"
   - "./.scripts/00-banner.sh"
   - "./.scripts/01-config.sh"
   - "./.scripts/05-fleet-env.sh"

package/templates/hermes-agent/template/.runtime-scaffold/.gitignore.jinja

@@ -0,0 +1,44 @@
+# Per-agent runtime — what NOT to commit to the checkpoint repo.
+# Sensitive credentials never go in git.
+.env
+.env.*
+!.env.example
+auth.json
+auth.lock
+secrets.*
+*.pem
+*.key
+gateway.pid
+gateway_state.json
+processes.json
+interrupt_debug.log
+
+# Caches (large, regenerable)
+audio_cache/
+image_cache/
+models_dev_cache.json
+context_length_cache.yaml
+honcho.json
+
+# Sandboxes (ephemeral execution environments)
+sandboxes/
+
+# Heartbeat / sentinel ephemeral state — local to this runtime, never checkpointed.
+# (Keeps the fused checkpoint a true no-op on a clean tree.)
+continuous-ticket-sentinel-state.json
+continuous-ticket-sentinel.lock
+continuous-ticket-sentinel.lock.d/
+.last-checkpoint
+
+# Runtime logs (we want the LFS-tracked summary.log if we add one, not the noise)
+logs/*.log
+logs/*.systemd.log
+
+# Python cruft
+__pycache__/
+*.pyc
+.scripts/.done-*
+.scripts/.provision.log
+
+# Allow these subdirs to exist
+!logs/.gitkeep

package/templates/hermes-agent/template/.scripts/01-config.sh

@@ -1,6 +1,15 @@
 #!/usr/bin/env bash
 # Ensure the distributable config exists before any other step reads it.
 # Seeds ~/.config/hermes-agent-template/config.toml from the shipped example.
+
+# MCP render transactions establish repo-local lifecycle eligibility before
+# touching any host-global state. This guard must precede _lib.sh because that
+# library creates the role log and may read fleet configuration.
+if [[ "${SKIP_HOST_STATE:-0}" == "1" ]]; then
+  printf '%s\n' '[01] host config — DEFERRED (SKIP_HOST_STATE=1)' >&2
+  exit 0
+fi
+
 # shellcheck source=_lib.sh
 source "$(dirname "$0")/_lib.sh"