@femtomc/mu-agent 26.2.42 → 26.2.44

package/README.md

@@ -10,6 +10,17 @@ This package provides reusable runtime pieces for chat, orchestration, and serve
 - pi CLI/SDK orchestration backends and resource loader helpers
 - Prompt/template helpers used by orchestration roles
 
+## Bundled default prompts
+
+Bundled defaults now live as markdown files under `packages/agent/prompts/`:
+
+- `operator.md`
+- `orchestrator.md`
+- `worker.md`
+- `soul.md` (shared tail appended to all role prompts)
+
+These are loaded by runtime code and are the single source of truth for default system prompts.
+
 ## Install
 
 ```bash

package/dist/default_prompts.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Load a bundled markdown prompt from packages/agent/prompts.
+ *
+ * This is intentionally strict: bundled prompt markdown is the single source
+ * of truth for default system prompts.
+ */
+export declare function loadBundledPrompt(name: string): string;
+export declare function appendSharedSoul(basePrompt: string, soulPrompt: string): string;
+export declare const DEFAULT_SOUL_PROMPT: string;
+export declare const DEFAULT_ORCHESTRATOR_PROMPT: string;
+export declare const DEFAULT_WORKER_PROMPT: string;
+export declare const DEFAULT_OPERATOR_SYSTEM_PROMPT: string;
+//# sourceMappingURL=default_prompts.d.ts.map

package/dist/default_prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default_prompts.d.ts","sourceRoot":"","sources":["../src/default_prompts.ts"],"names":[],"mappings":"AAUA;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAStD;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAO/E;AAED,eAAO,MAAM,mBAAmB,QAA+B,CAAC;AAMhE,eAAO,MAAM,2BAA2B,QAAkE,CAAC;AAC3G,eAAO,MAAM,qBAAqB,QAA4D,CAAC;AAC/F,eAAO,MAAM,8BAA8B,QAAqE,CAAC"}

package/dist/default_prompts.js

@@ -0,0 +1,39 @@
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { splitFrontmatter } from "./prompt.js";
+function bundledPromptPath(name) {
+    const here = dirname(fileURLToPath(import.meta.url));
+    return join(here, "..", "prompts", name);
+}
+/**
+ * Load a bundled markdown prompt from packages/agent/prompts.
+ *
+ * This is intentionally strict: bundled prompt markdown is the single source
+ * of truth for default system prompts.
+ */
+export function loadBundledPrompt(name) {
+    const path = bundledPromptPath(name);
+    const raw = readFileSync(path, "utf8");
+    const { body } = splitFrontmatter(raw);
+    const prompt = body.trim();
+    if (prompt.length === 0) {
+        throw new Error(`bundled prompt is empty: ${name}`);
+    }
+    return prompt;
+}
+export function appendSharedSoul(basePrompt, soulPrompt) {
+    const base = basePrompt.trim();
+    const soul = soulPrompt.trim();
+    if (soul.length === 0) {
+        return base;
+    }
+    return `${base}\n\n${soul}`;
+}
+export const DEFAULT_SOUL_PROMPT = loadBundledPrompt("soul.md");
+const BASE_ORCHESTRATOR_PROMPT = loadBundledPrompt("orchestrator.md");
+const BASE_WORKER_PROMPT = loadBundledPrompt("worker.md");
+const BASE_OPERATOR_SYSTEM_PROMPT = loadBundledPrompt("operator.md");
+export const DEFAULT_ORCHESTRATOR_PROMPT = appendSharedSoul(BASE_ORCHESTRATOR_PROMPT, DEFAULT_SOUL_PROMPT);
+export const DEFAULT_WORKER_PROMPT = appendSharedSoul(BASE_WORKER_PROMPT, DEFAULT_SOUL_PROMPT);
+export const DEFAULT_OPERATOR_SYSTEM_PROMPT = appendSharedSoul(BASE_OPERATOR_SYSTEM_PROMPT, DEFAULT_SOUL_PROMPT);

package/dist/extensions/index.d.ts

@@ -4,7 +4,9 @@ export { eventLogExtension } from "./event-log.js";
 export { heartbeatsExtension } from "./heartbeats.js";
 export { messagingSetupExtension } from "./messaging-setup.js";
 export { orchestrationRunsExtension } from "./orchestration-runs.js";
-export { serverToolsExtension } from "./server-tools.js";
+export { orchestrationRunsReadOnlyExtension } from "./orchestration-runs-readonly.js";
+export { serverToolsExtension, serverToolsReadOnlyExtension } from "./server-tools.js";
+export { serverToolsReadonlyExtension } from "./server-tools-readonly.js";
 /**
  * Serve-mode extension module paths.
  *
@@ -13,4 +15,11 @@ export { serverToolsExtension } from "./server-tools.js";
  * anonymous inline factories.
  */
 export declare const serveExtensionPaths: string[];
+/**
+ * Control-plane operator extension module paths.
+ *
+ * This set is intentionally read-only for tool-invoked actions so all
+ * mutations flow through approved `/mu ...` command proposals and policy.
+ */
+export declare const operatorExtensionPaths: string[];
 //# sourceMappingURL=index.d.ts.map

package/dist/extensions/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/extensions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAiBzD;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,UAE/B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/extensions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,kCAAkC,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAyB1E;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,UAE/B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,UAElC,CAAC"}

package/dist/extensions/index.js

@@ -4,7 +4,9 @@ export { eventLogExtension } from "./event-log.js";
 export { heartbeatsExtension } from "./heartbeats.js";
 export { messagingSetupExtension } from "./messaging-setup.js";
 export { orchestrationRunsExtension } from "./orchestration-runs.js";
-export { serverToolsExtension } from "./server-tools.js";
+export { orchestrationRunsReadOnlyExtension } from "./orchestration-runs-readonly.js";
+export { serverToolsExtension, serverToolsReadOnlyExtension } from "./server-tools.js";
+export { serverToolsReadonlyExtension } from "./server-tools-readonly.js";
 const SERVE_EXTENSION_MODULE_BASENAMES = [
     "branding",
     "server-tools",
@@ -14,6 +16,13 @@ const SERVE_EXTENSION_MODULE_BASENAMES = [
     "activities",
     "heartbeats",
 ];
+const OPERATOR_EXTENSION_MODULE_BASENAMES = [
+    "branding",
+    "server-tools-readonly",
+    "event-log",
+    "messaging-setup",
+    "orchestration-runs-readonly",
+];
 const RUNTIME_EXTENSION = import.meta.url.endsWith(".ts") ? "ts" : "js";
 function resolveBundledExtensionPath(moduleBasename) {
     return new URL(`./${moduleBasename}.${RUNTIME_EXTENSION}`, import.meta.url).pathname;
@@ -26,3 +35,10 @@ function resolveBundledExtensionPath(moduleBasename) {
  * anonymous inline factories.
  */
 export const serveExtensionPaths = SERVE_EXTENSION_MODULE_BASENAMES.map((moduleBasename) => resolveBundledExtensionPath(moduleBasename));
+/**
+ * Control-plane operator extension module paths.
+ *
+ * This set is intentionally read-only for tool-invoked actions so all
+ * mutations flow through approved `/mu ...` command proposals and policy.
+ */
+export const operatorExtensionPaths = OPERATOR_EXTENSION_MODULE_BASENAMES.map((moduleBasename) => resolveBundledExtensionPath(moduleBasename));

package/dist/extensions/orchestration-runs-readonly.d.ts

@@ -0,0 +1,4 @@
+import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
+export declare function orchestrationRunsReadOnlyExtension(pi: ExtensionAPI): void;
+export default orchestrationRunsReadOnlyExtension;
+//# sourceMappingURL=orchestration-runs-readonly.d.ts.map

package/dist/extensions/orchestration-runs-readonly.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestration-runs-readonly.d.ts","sourceRoot":"","sources":["../../src/extensions/orchestration-runs-readonly.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAUlE,wBAAgB,kCAAkC,CAAC,EAAE,EAAE,YAAY,QA8ClE;AAED,eAAe,kCAAkC,CAAC"}

package/dist/extensions/orchestration-runs-readonly.js

@@ -0,0 +1,56 @@
+import { StringEnum } from "@mariozechner/pi-ai";
+import { Type } from "@sinclair/typebox";
+import { clampInt, fetchMuJson, textResult, toJsonText } from "./shared.js";
+function trimOrNull(value) {
+    if (value == null)
+        return null;
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : null;
+}
+export function orchestrationRunsReadOnlyExtension(pi) {
+    const RunsParams = Type.Object({
+        action: StringEnum(["list", "status", "trace"]),
+        job_id: Type.Optional(Type.String({ description: "Run job ID" })),
+        root_issue_id: Type.Optional(Type.String({ description: "Run root issue ID (mu-...)" })),
+        limit: Type.Optional(Type.Number({ description: "Optional limit (list/trace)" })),
+        status: Type.Optional(Type.String({ description: "Optional status filter for list" })),
+    });
+    pi.registerTool({
+        name: "mu_runs",
+        label: "Runs",
+        description: "Read-only run inspection. Actions: list, status, trace. Mutating actions are disabled in operator mode.",
+        parameters: RunsParams,
+        async execute(_toolCallId, params) {
+            switch (params.action) {
+                case "list": {
+                    const query = new URLSearchParams();
+                    const status = trimOrNull(params.status);
+                    if (status)
+                        query.set("status", status);
+                    const limit = clampInt(params.limit, 50, 1, 500);
+                    query.set("limit", String(limit));
+                    const payload = await fetchMuJson(`/api/runs?${query.toString()}`);
+                    return textResult(toJsonText(payload), { action: "list", status, limit });
+                }
+                case "status": {
+                    const id = trimOrNull(params.job_id) ?? trimOrNull(params.root_issue_id);
+                    if (!id)
+                        return textResult("status requires job_id or root_issue_id");
+                    const payload = await fetchMuJson(`/api/runs/${encodeURIComponent(id)}`);
+                    return textResult(toJsonText(payload), { action: "status", id });
+                }
+                case "trace": {
+                    const id = trimOrNull(params.job_id) ?? trimOrNull(params.root_issue_id);
+                    if (!id)
+                        return textResult("trace requires job_id or root_issue_id");
+                    const limit = clampInt(params.limit, 200, 1, 2_000);
+                    const payload = await fetchMuJson(`/api/runs/${encodeURIComponent(id)}/trace?limit=${limit}`);
+                    return textResult(toJsonText(payload), { action: "trace", id, limit });
+                }
+                default:
+                    return textResult(`unknown action: ${params.action}`);
+            }
+        },
+    });
+}
+export default orchestrationRunsReadOnlyExtension;

package/dist/extensions/server-tools-readonly.d.ts

@@ -0,0 +1,4 @@
+import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
+export declare function serverToolsReadonlyExtension(pi: ExtensionAPI): void;
+export default serverToolsReadonlyExtension;
+//# sourceMappingURL=server-tools-readonly.d.ts.map

package/dist/extensions/server-tools-readonly.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-tools-readonly.d.ts","sourceRoot":"","sources":["../../src/extensions/server-tools-readonly.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAGlE,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,YAAY,QAE5D;AAED,eAAe,4BAA4B,CAAC"}

package/dist/extensions/server-tools-readonly.js

@@ -0,0 +1,5 @@
+import { serverToolsReadOnlyExtension } from "./server-tools.js";
+export function serverToolsReadonlyExtension(pi) {
+    serverToolsReadOnlyExtension(pi);
+}
+export default serverToolsReadonlyExtension;

package/dist/extensions/server-tools.d.ts

@@ -4,6 +4,12 @@
  * This is the core extension the operator relies on for repo introspection.
  */
 import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
-export declare function serverToolsExtension(pi: ExtensionAPI): void;
+export type ServerToolsExtensionOpts = {
+    allowForumPost?: boolean;
+    toolIntroLine?: string;
+    extraSystemPromptLines?: string[];
+};
+export declare function serverToolsExtension(pi: ExtensionAPI, opts?: ServerToolsExtensionOpts): void;
+export declare function serverToolsReadOnlyExtension(pi: ExtensionAPI): void;
 export default serverToolsExtension;
 //# sourceMappingURL=server-tools.d.ts.map

package/dist/extensions/server-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-tools.d.ts","sourceRoot":"","sources":["../../src/extensions/server-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAgElE,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,YAAY,QAiSpD;AAED,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"server-tools.d.ts","sourceRoot":"","sources":["../../src/extensions/server-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAgElE,MAAM,MAAM,wBAAwB,GAAG;IACtC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC,CAAC;AA4SF,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,GAAE,wBAA6B,QAQzF;AAED,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,YAAY,QAS5D;AAED,eAAe,oBAAoB,CAAC"}

package/dist/extensions/server-tools.js

@@ -45,7 +45,7 @@ function sliceWithLimit(items, limitRaw, fallback = 50) {
         truncated: sliced.length < total,
     };
 }
-export function serverToolsExtension(pi) {
+function registerServerTools(pi, opts) {
     pi.on("before_agent_start", async (event) => {
         const url = muServerUrl();
         if (!url)
@@ -53,8 +53,9 @@ export function serverToolsExtension(pi) {
         const extra = [
             "",
             `[MU SERVER] Connected at ${url}.`,
-            "Tools: mu_status, mu_control_plane, mu_issues, mu_forum, mu_events, mu_runs, mu_activities, mu_heartbeats.",
+            opts.toolIntroLine,
             "Use these tools to inspect repository state and control-plane runtime before advising users.",
+            ...opts.extraSystemPromptLines,
         ].join("\n");
         return {
             systemPrompt: `${event.systemPrompt}${extra}`,
@@ -201,6 +202,9 @@ export function serverToolsExtension(pi) {
                     });
                 }
                 case "post": {
+                    if (!opts.allowForumPost) {
+                        return textResult("forum post is disabled in operator read-only mode; use approved /mu command flow for mutations.", { blocked: true, reason: "operator_read_only_tools" });
+                    }
                     const topic = trimOrNull(params.topic);
                     const body = trimOrNull(params.body);
                     if (!topic)
@@ -315,4 +319,21 @@ export function serverToolsExtension(pi) {
         },
     });
 }
+export function serverToolsExtension(pi, opts = {}) {
+    registerServerTools(pi, {
+        allowForumPost: opts.allowForumPost ?? true,
+        toolIntroLine: opts.toolIntroLine ??
+            "Tools: mu_status, mu_control_plane, mu_issues, mu_forum, mu_events, mu_runs, mu_activities, mu_heartbeats.",
+        extraSystemPromptLines: opts.extraSystemPromptLines ?? [],
+    });
+}
+export function serverToolsReadOnlyExtension(pi) {
+    registerServerTools(pi, {
+        allowForumPost: false,
+        toolIntroLine: "Tools: mu_status, mu_control_plane, mu_issues, mu_forum(read/topics), mu_events, mu_runs(read), mu_messaging_setup(read).",
+        extraSystemPromptLines: [
+            "Mutating tool actions are disabled in operator mode; propose mutations via approved /mu commands.",
+        ],
+    });
+}
 export default serverToolsExtension;

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export * from "./command_context.js";
+export { DEFAULT_SOUL_PROMPT, appendSharedSoul, loadBundledPrompt } from "./default_prompts.js";
 export * from "./extensions/index.js";
 export * from "./operator.js";
 export * from "./mu_roles.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAChG,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC"}

package/dist/index.js

@@ -1,4 +1,5 @@
 export * from "./command_context.js";
+export { DEFAULT_SOUL_PROMPT, appendSharedSoul, loadBundledPrompt } from "./default_prompts.js";
 export * from "./extensions/index.js";
 export * from "./operator.js";
 export * from "./mu_roles.js";

package/dist/mu_roles.d.ts

@@ -1,15 +1,13 @@
+import { DEFAULT_ORCHESTRATOR_PROMPT, DEFAULT_WORKER_PROMPT } from "./default_prompts.js";
 export type MuRole = "orchestrator" | "worker";
 /** Determine role from tags. Defaults to orchestrator if no role tag present. */
 export declare function roleFromTags(tags: readonly string[]): MuRole;
-export declare const DEFAULT_ORCHESTRATOR_PROMPT: string;
-export declare const DEFAULT_WORKER_PROMPT: string;
+export { DEFAULT_ORCHESTRATOR_PROMPT, DEFAULT_WORKER_PROMPT };
 /**
  * Load the system prompt for a role.
  *
- * When `repoRoot` is provided, tries `.mu/roles/${role}.md` first.
- * The file body IS the entire system prompt — no auto-appending.
- * Frontmatter is stripped via `splitFrontmatter`.
- * Falls back to the hardcoded default on any error.
+ * Role prompts are sourced from bundled markdown defaults only.
+ * Repo-local `.mu/roles/*.md` overrides are intentionally unsupported.
  */
-export declare function systemPromptForRole(role: MuRole, repoRoot?: string): Promise<string>;
+export declare function systemPromptForRole(role: MuRole, _repoRoot?: string): Promise<string>;
 //# sourceMappingURL=mu_roles.d.ts.map

package/dist/mu_roles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mu_roles.d.ts","sourceRoot":"","sources":["../src/mu_roles.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,MAAM,GAAG,cAAc,GAAG,QAAQ,CAAC;AAE/C,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAM5D;AAgED,eAAO,MAAM,2BAA2B,QAwC5B,CAAC;AAEb,eAAO,MAAM,qBAAqB,QA0BtB,CAAC;AAMb;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAY1F"}
+{"version":3,"file":"mu_roles.d.ts","sourceRoot":"","sources":["../src/mu_roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE1F,MAAM,MAAM,MAAM,GAAG,cAAc,GAAG,QAAQ,CAAC;AAE/C,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAM5D;AAED,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,CAAC;AAE9D;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3F"}

package/dist/mu_roles.js

@@ -1,5 +1,4 @@
-import { join } from "node:path";
-import { splitFrontmatter } from "./prompt.js";
+import { DEFAULT_ORCHESTRATOR_PROMPT, DEFAULT_WORKER_PROMPT } from "./default_prompts.js";
 /** Determine role from tags. Defaults to orchestrator if no role tag present. */
 export function roleFromTags(tags) {
     for (const tag of tags) {
@@ -10,155 +9,13 @@ export function roleFromTags(tags) {
     }
     return "orchestrator";
 }
-/* ------------------------------------------------------------------ */
-/*  mu CLI reference                                                   */
-/* ------------------------------------------------------------------ */
-const MU_CLI_REFERENCE = `
-## mu CLI
-
-You are running inside **mu**, an issue-driven orchestration system.
-You have four tools: bash, read, write, edit.
-
-- Orchestrator: use bash to run \`mu\` commands; do NOT use write/edit (and avoid read).
-- Worker: use tools as needed to implement your assigned issue.
-
-Tip: run \`mu <command> --help\` for details.
-
-### Issues
-
-\`\`\`bash
-# Create a child issue (always set --parent and --role)
-mu issues create "<title>" --parent <parent-id> --role worker [--body "<text>"] [--priority N] [--tag TAG]
-
-# Inspect
-mu issues get <id>                          # full issue detail
-mu issues list --root <root-id> [--status open|in_progress|closed]
-mu issues children <id>                     # direct children
-mu issues ready --root <root-id>            # executable leaves
-
-# Status transitions
-mu issues claim <id>                        # open → in_progress
-mu issues close <id> --outcome <outcome>    # close with outcome
-
-# Dependencies
-mu issues dep <src> blocks <dst>            # src must close before dst starts
-mu issues dep <child> parent <parent>       # set parent-child edge
-mu issues undep <src> blocks <dst>          # remove blocking edge
-
-# Update fields
-mu issues update <id> [--title "..."] [--body "..."] [--role worker|orchestrator] [--priority N] [--add-tag TAG]
-\`\`\`
-
-### Outcomes
-
-| Outcome      | Meaning                                             |
-|--------------|-----------------------------------------------------|
-| \`success\`    | Work completed successfully (terminal)              |
-| \`failure\`    | Work failed — triggers re-orchestration             |
-| \`needs_work\` | Partial — triggers re-orchestration                 |
-| \`expanded\`   | Decomposed into children (orchestrator closes self) |
-| \`skipped\`    | Not applicable (terminal)                           |
-
-### Forum (logging & coordination)
-
-\`\`\`bash
-mu forum post issue:<id> -m "<message>" --author <role>
-mu forum read issue:<id> [--limit N]
-\`\`\`
-`.trim();
-/* ------------------------------------------------------------------ */
-/*  Default role prompts (exported for mu init + tests)                */
-/* ------------------------------------------------------------------ */
-export const DEFAULT_ORCHESTRATOR_PROMPT = [
-    "# Mu Orchestrator",
-    "",
-    "You are mu's orchestrator: the hierarchical planner for the issue DAG.",
-    "",
-    "## Non-Negotiable Constraints",
-    "",
-    "1. You MUST NOT execute work directly. No code changes, no file edits, no git commits.",
-    "2. You MUST decompose the assigned issue into worker child issues, then close the assigned issue with `--outcome expanded`.",
-    "3. Decomposition MUST be deterministic and minimal. Use `blocks` edges for sequencing.",
-    "",
-    "Even if the task looks atomic: create exactly one worker child issue rather than doing the work yourself.",
-    "If you catch yourself about to implement: STOP and create/refine worker issues instead.",
-    "",
-    "Your only job is to create child issues, add any required `blocks` dependencies, and then close yourself with outcome=expanded.",
-    "",
-    "## Workflow",
-    "",
-    "1. Investigate: `mu issues get <id>`, `mu forum read issue:<id> --limit 20`, `mu issues children <id>`.",
-    "2. Decompose: create child issues with `mu issues create` (always set `--parent` and `--role worker`).",
-    "3. Order: add `blocks` edges between children where sequencing matters.",
-    "4. Close: `mu issues close <id> --outcome expanded`.",
-    "",
-    "The ONLY valid outcome for you is `expanded`.",
-    "Never close with `success`, `failure`, `needs_work`, or `skipped` — those are for workers.",
-    "",
-    "## Rules",
-    "",
-    "- Use only roles: orchestrator, worker.",
-    "- Every executable leaf MUST be `--role worker`.",
-    "- Never create a child without an explicit role.",
-    "",
-    "## Strategies For Good Plans",
-    "",
-    "- Include feedback loops in worker issues: tests, typecheck, build, lint, repro steps.",
-    "- Prefer small issues with crisp acceptance criteria over large ambiguous ones.",
-    "- If the work needs verification, add a worker review issue blocked by implementation.",
-    "  If review fails, that worker should close with outcome=needs_work and describe what failed.",
-    "",
-    MU_CLI_REFERENCE,
-].join("\n");
-export const DEFAULT_WORKER_PROMPT = [
-    "# Mu Worker",
-    "",
-    "You are mu's worker. You execute exactly one atomic issue end-to-end.",
-    "",
-    "## Responsibilities",
-    "",
-    "- Implement the work described in your assigned issue.",
-    "- Keep scope tight to the issue specification.",
-    "- Verify results (tests, typecheck, build, lint, etc.) and report what changed.",
-    "- Close your issue with a terminal outcome when done.",
-    "",
-    "## Workflow",
-    "",
-    "1. Inspect: `mu issues get <id>` and `mu forum read issue:<id> --limit 20`.",
-    "2. Implement: edit files, run commands, and keep changes scoped to the issue.",
-    "3. Verify: run tests/build/typecheck/lint as appropriate. Prefer hard feedback loops.",
-    "4. Close: `mu issues close <id> --outcome success` (or `failure`/`skipped`).",
-    "5. Log key notes: `mu forum post issue:<id> -m '...' --author worker`.",
-    "",
-    "## Rules",
-    "",
-    "- Do NOT create child issues — that is the orchestrator's job.",
-    "- If the issue is too large/unclear, close with `--outcome needs_work` and explain what is missing.",
-    "",
-    MU_CLI_REFERENCE,
-].join("\n");
-/* ------------------------------------------------------------------ */
-/*  Role-specific system prompts                                       */
-/* ------------------------------------------------------------------ */
+export { DEFAULT_ORCHESTRATOR_PROMPT, DEFAULT_WORKER_PROMPT };
 /**
  * Load the system prompt for a role.
  *
- * When `repoRoot` is provided, tries `.mu/roles/${role}.md` first.
- * The file body IS the entire system prompt — no auto-appending.
- * Frontmatter is stripped via `splitFrontmatter`.
- * Falls back to the hardcoded default on any error.
+ * Role prompts are sourced from bundled markdown defaults only.
+ * Repo-local `.mu/roles/*.md` overrides are intentionally unsupported.
  */
-export async function systemPromptForRole(role, repoRoot) {
-    if (repoRoot) {
-        try {
-            const filePath = join(repoRoot, ".mu", "roles", `${role}.md`);
-            const raw = await Bun.file(filePath).text();
-            const { body } = splitFrontmatter(raw);
-            return body;
-        }
-        catch {
-            // File missing or unreadable — fall through to default.
-        }
-    }
+export async function systemPromptForRole(role, _repoRoot) {
     return role === "orchestrator" ? DEFAULT_ORCHESTRATOR_PROMPT : DEFAULT_WORKER_PROMPT;
 }

package/dist/operator.d.ts

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { CommandContextResolver } from "./command_context.js";
 import { type CreateMuSessionOpts, type MuSession } from "./session_factory.js";
+import { DEFAULT_OPERATOR_SYSTEM_PROMPT } from "./default_prompts.js";
 export type MessagingOperatorInboundEnvelope = {
     channel: string;
     channel_tenant_id: string;
@@ -160,13 +161,13 @@ export type PiMessagingOperatorBackendOpts = {
     nowMs?: () => number;
     sessionIdleTtlMs?: number;
     maxSessions?: number;
+    auditTurns?: boolean;
 };
-export declare const DEFAULT_CHAT_SYSTEM_PROMPT: string;
+export { DEFAULT_OPERATOR_SYSTEM_PROMPT };
 export declare class PiMessagingOperatorBackend implements MessagingOperatorBackend {
     #private;
     constructor(opts?: PiMessagingOperatorBackendOpts);
     runTurn(input: OperatorBackendTurnInput): Promise<OperatorBackendTurnResult>;
     dispose(): void;
 }
-export {};
 //# sourceMappingURL=operator.d.ts.map

package/dist/operator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../src/operator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAmB,KAAK,mBAAmB,EAAE,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjG,MAAM,MAAM,gCAAgC,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,eAAe,GAAG,gCAAgC,CAAC;AACxD,KAAK,eAAe,GAAG,gCAAgC,CAAC;AAIxD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA6BxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAG1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,MAAM,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,eAAe,CAAC;CACzB,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACxC,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GACzB;IACA,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,GACD;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,GACD;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EACH,mBAAmB,GACnB,4BAA4B,GAC5B,yBAAyB,GACzB,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,CAAC;AAEL,MAAM,MAAM,yBAAyB,GAAG;IACvC,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAaF,qBAAa,qBAAqB;;gBAId,IAAI,GAAE,yBAA8B;IAKhD,OAAO,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,uBAAuB,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,GACjF;QACA,IAAI,EAAE,UAAU,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACnB,GACD;QACA,IAAI,EAAE,QAAQ,CAAC;QACf,MAAM,EACH,4BAA4B,GAC5B,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,CAAC;QAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;KAChB;CAsGJ;AAED,MAAM,MAAM,4BAA4B,GAAG;IAC1C,OAAO,EAAE,wBAAwB,CAAC;IAClC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B,CAAC;AAcF,qBAAa,wBAAwB;;gBASjB,IAAI,EAAE,4BAA4B;IAoBxC,aAAa,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkFtG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAIlC;AAED,MAAM,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,mBAAmB,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,eAAO,MAAM,0BAA0B,QAU3B,CAAC;AAuEb,qBAAa,0BAA2B,YAAW,wBAAwB;;gBAavD,IAAI,GAAE,8BAAmC;IA6F/C,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAqDlF,OAAO,IAAI,IAAI;CAKtB"}
+{"version":3,"file":"operator.d.ts","sourceRoot":"","sources":["../src/operator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAmB,KAAK,mBAAmB,EAAE,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEtE,MAAM,MAAM,gCAAgC,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,MAAM,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,eAAe,GAAG,gCAAgC,CAAC;AACxD,KAAK,eAAe,GAAG,gCAAgC,CAAC;AAIxD,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA6BxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAG1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAOxF,MAAM,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,eAAe,CAAC;CACzB,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACxC,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GACzB;IACA,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,GACD;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,GACD;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EACH,mBAAmB,GACnB,4BAA4B,GAC5B,yBAAyB,GACzB,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACtB,CAAC;AAEL,MAAM,MAAM,yBAAyB,GAAG;IACvC,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAaF,qBAAa,qBAAqB;;gBAId,IAAI,GAAE,yBAA8B;IAKhD,OAAO,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,uBAAuB,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,GACjF;QACA,IAAI,EAAE,UAAU,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACnB,GACD;QACA,IAAI,EAAE,QAAQ,CAAC;QACf,MAAM,EACH,4BAA4B,GAC5B,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,CAAC;QAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;KAChB;CAsGJ;AAED,MAAM,MAAM,4BAA4B,GAAG;IAC1C,OAAO,EAAE,wBAAwB,CAAC;IAClC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,MAAM,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B,CAAC;AAsBF,qBAAa,wBAAwB;;gBASjB,IAAI,EAAE,4BAA4B;IAoBxC,aAAa,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,eAAe,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgFtG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAIlC;AAED,MAAM,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,mBAAmB,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,OAAO,EAAE,8BAA8B,EAAE,CAAC;AAgJ1C,qBAAa,0BAA2B,YAAW,wBAAwB;;gBAcvD,IAAI,GAAE,8BAAmC;IA4H/C,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA2GlF,OAAO,IAAI,IAAI;CAKtB"}

package/dist/operator.js

@@ -1,6 +1,9 @@
+import { appendJsonl } from "@femtomc/mu-core/node";
+import { join } from "node:path";
 import { z } from "zod";
 import { CommandContextResolver } from "./command_context.js";
 import { createMuSession } from "./session_factory.js";
+import { DEFAULT_OPERATOR_SYSTEM_PROMPT } from "./default_prompts.js";
 const SAFE_RESPONSE_RE = /^[\s\S]{1,2000}$/;
 export const OperatorApprovedCommandSchema = z.discriminatedUnion("kind", [
     z.object({ kind: z.literal("status") }),
@@ -36,6 +39,10 @@ export const OperatorBackendTurnResultSchema = z.discriminatedUnion("kind", [
     z.object({ kind: z.literal("respond"), message: z.string().trim().min(1).max(2000) }),
     z.object({ kind: z.literal("command"), command: OperatorApprovedCommandSchema }),
 ]);
+const OperatorDecisionEnvelopeSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("respond"), message: z.string().trim().min(1).max(2000) }),
+    z.object({ kind: z.literal("command"), command: OperatorApprovedCommandSchema }),
+]);
 function splitPromptIntoTokens(prompt) {
     return prompt
         .split(/\s+/)
@@ -157,6 +164,13 @@ function defaultSessionId() {
 function defaultTurnId() {
     return `turn-${crypto.randomUUID()}`;
 }
+function buildOperatorFailureFallbackMessage(code) {
+    return [
+        "I ran into an internal operator formatting/runtime issue and could not complete that turn safely.",
+        `Code: ${code}`,
+        "You can retry, or use an explicit /mu command (for example: /mu status or /mu run list).",
+    ].join("\n");
+}
 function conversationKey(inbound, binding) {
     return `${inbound.channel}:${inbound.channel_tenant_id}:${inbound.channel_conversation_id}:${binding.binding_id}`;
 }
@@ -216,9 +230,8 @@ export class MessagingOperatorRuntime {
         }
         catch (err) {
             return {
-                kind: "reject",
-                reason: "operator_invalid_output",
-                details: err instanceof Error ? err.message : "operator_backend_error",
+                kind: "response",
+                message: buildOperatorFailureFallbackMessage("operator_backend_error"),
                 operatorSessionId: sessionId,
                 operatorTurnId: turnId,
             };
@@ -227,9 +240,8 @@ export class MessagingOperatorRuntime {
             const message = backendResult.message.trim();
             if (!SAFE_RESPONSE_RE.test(message)) {
                 return {
-                    kind: "reject",
-                    reason: "operator_invalid_output",
-                    details: "invalid response payload",
+                    kind: "response",
+                    message: buildOperatorFailureFallbackMessage("operator_invalid_response_payload"),
                     operatorSessionId: sessionId,
                     operatorTurnId: turnId,
                 };
@@ -266,63 +278,107 @@ export class MessagingOperatorRuntime {
         await this.#backend.dispose?.();
     }
 }
-export const DEFAULT_CHAT_SYSTEM_PROMPT = [
-    "You are mu, an AI assistant for the mu orchestration platform.",
-    "Help users with:",
-    "- Understanding mu's architecture (issues, forum, orchestrator, control-plane)",
-    "- Setting up control-plane integrations (Slack, Discord, Telegram, Gmail planning)",
-    "- Navigating issues and forum topics",
-    "- Running and monitoring orchestrator workflows",
-    "- General questions about the mu ecosystem",
-    "",
-    "Be concise, practical, and actionable.",
-].join("\n");
+export { DEFAULT_OPERATOR_SYSTEM_PROMPT };
 const OPERATOR_COMMAND_PREFIX = "MU_COMMAND:";
-const DEFAULT_OPERATOR_SYSTEM_PROMPT = [
-    "You are mu, an AI assistant for the mu orchestration platform.",
-    "You have tools to interact with the mu server: mu_status, mu_control_plane, mu_issues, mu_forum, mu_events.",
-    "Use these tools to answer questions about repository state, issues, events, and control-plane runtime state.",
-    "For adapter setup workflow, use mu_messaging_setup (check/preflight/plan/apply/verify/guide).",
-    "You can help users set up messaging integrations (Slack, Discord, Telegram, Gmail planning).",
-    "You may either respond normally or emit an approved control-plane command.",
-    `To emit a command, output exactly one line with prefix ${OPERATOR_COMMAND_PREFIX} followed by compact JSON.`,
-    "Example:",
-    `MU_COMMAND: {\"kind\":\"run_start\",\"prompt\":\"ship release\"}`,
-    "Available command kinds: status, ready, issue_list, issue_get, forum_read, run_list, run_status, run_start, run_resume, run_interrupt.",
-    "",
-    "Be concise, practical, and actionable.",
-    "For normal conversational answers, respond in plain text.",
-].join("\n");
-function parseOperatorCommandDirective(text) {
+const OPERATOR_DECISION_PREFIX = "MU_DECISION:";
+function stripOperatorDirectiveLines(text) {
+    return text
+        .split(/\r?\n/)
+        .filter((line) => {
+        const trimmed = line.trim();
+        return !(trimmed.startsWith(OPERATOR_COMMAND_PREFIX) || trimmed.startsWith(OPERATOR_DECISION_PREFIX));
+    })
+        .join("\n")
+        .trim();
+}
+function parseOperatorDirective(text) {
     const whole = text.trim();
     if (whole.startsWith("{") && whole.endsWith("}")) {
         try {
-            return OperatorApprovedCommandSchema.parse(JSON.parse(whole));
+            const parsed = JSON.parse(whole);
+            const envelope = OperatorDecisionEnvelopeSchema.safeParse(parsed);
+            if (envelope.success) {
+                return envelope.data.kind === "command"
+                    ? { kind: "command", command: envelope.data.command }
+                    : { kind: "respond", message: envelope.data.message };
+            }
+            const legacy = OperatorApprovedCommandSchema.safeParse(parsed);
+            if (legacy.success) {
+                return { kind: "command", command: legacy.data };
+            }
         }
         catch {
-            // fall through to explicit MU_COMMAND parsing
+            // fall through to line-based directives / plain text fallback.
         }
     }
     const lines = text.split(/\r?\n/);
     for (const line of lines) {
         const trimmed = line.trim();
+        if (trimmed.startsWith(OPERATOR_DECISION_PREFIX)) {
+            const payloadText = trimmed.slice(OPERATOR_DECISION_PREFIX.length).trim();
+            if (payloadText.length === 0) {
+                return {
+                    kind: "invalid",
+                    reason: "operator_decision_directive_missing_payload",
+                    fallbackMessage: stripOperatorDirectiveLines(text),
+                };
+            }
+            let parsed;
+            try {
+                parsed = JSON.parse(payloadText);
+            }
+            catch (err) {
+                return {
+                    kind: "invalid",
+                    reason: `operator_decision_directive_invalid_json: ${err instanceof Error ? err.message : String(err)}`,
+                    fallbackMessage: stripOperatorDirectiveLines(text),
+                };
+            }
+            const envelope = OperatorDecisionEnvelopeSchema.safeParse(parsed);
+            if (!envelope.success) {
+                return {
+                    kind: "invalid",
+                    reason: `operator_decision_directive_invalid_payload: ${envelope.error.message}`,
+                    fallbackMessage: stripOperatorDirectiveLines(text),
+                };
+            }
+            return envelope.data.kind === "command"
+                ? { kind: "command", command: envelope.data.command }
+                : { kind: "respond", message: envelope.data.message };
+        }
         if (!trimmed.startsWith(OPERATOR_COMMAND_PREFIX)) {
             continue;
         }
         const payloadText = trimmed.slice(OPERATOR_COMMAND_PREFIX.length).trim();
         if (payloadText.length === 0) {
-            throw new Error("operator_command_directive_missing_payload");
+            return {
+                kind: "invalid",
+                reason: "operator_command_directive_missing_payload",
+                fallbackMessage: stripOperatorDirectiveLines(text),
+            };
         }
         let parsed;
         try {
             parsed = JSON.parse(payloadText);
         }
         catch (err) {
-            throw new Error(`operator_command_directive_invalid_json: ${err instanceof Error ? err.message : String(err)}`);
+            return {
+                kind: "invalid",
+                reason: `operator_command_directive_invalid_json: ${err instanceof Error ? err.message : String(err)}`,
+                fallbackMessage: stripOperatorDirectiveLines(text),
+            };
+        }
+        const command = OperatorApprovedCommandSchema.safeParse(parsed);
+        if (!command.success) {
+            return {
+                kind: "invalid",
+                reason: `operator_command_directive_invalid_payload: ${command.error.message}`,
+                fallbackMessage: stripOperatorDirectiveLines(text),
+            };
         }
-        return OperatorApprovedCommandSchema.parse(parsed);
+        return { kind: "command", command: command.data };
     }
-    return null;
+    return { kind: "none" };
 }
 function buildOperatorPrompt(input) {
     return [
@@ -345,6 +401,7 @@ export class PiMessagingOperatorBackend {
     #nowMs;
     #sessionIdleTtlMs;
     #maxSessions;
+    #auditTurns;
     #sessions = new Map();
     constructor(opts = {}) {
         this.#provider = opts.provider;
@@ -357,6 +414,7 @@ export class PiMessagingOperatorBackend {
         this.#nowMs = opts.nowMs ?? Date.now;
         this.#sessionIdleTtlMs = Math.max(60_000, Math.trunc(opts.sessionIdleTtlMs ?? 30 * 60 * 1_000));
         this.#maxSessions = Math.max(1, Math.trunc(opts.maxSessions ?? 32));
+        this.#auditTurns = opts.auditTurns ?? true;
     }
     #disposeSession(sessionId) {
         const entry = this.#sessions.get(sessionId);
@@ -429,6 +487,31 @@ export class PiMessagingOperatorBackend {
         this.#pruneSessions(nowMs);
         return created;
     }
+    async #auditTurn(input, opts) {
+        if (!this.#auditTurns) {
+            return;
+        }
+        const entry = {
+            kind: "operator.turn",
+            ts_ms: Math.trunc(this.#nowMs()),
+            repo_root: input.inbound.repo_root,
+            channel: input.inbound.channel,
+            request_id: input.inbound.request_id,
+            session_id: input.sessionId,
+            turn_id: input.turnId,
+            outcome: opts.outcome,
+            reason: opts.reason ?? null,
+            message_preview: opts.messagePreview?.slice(0, 280) ?? null,
+            command: opts.command ?? null,
+        };
+        try {
+            const path = join(input.inbound.repo_root, ".mu", "control-plane", "operator_turns.jsonl");
+            await appendJsonl(path, entry);
+        }
+        catch {
+            // best effort audit
+        }
+    }
     async runTurn(input) {
         const sessionRecord = await this.#resolveSession(input.sessionId, input.inbound.repo_root);
         const session = sessionRecord.session;
@@ -463,22 +546,77 @@ export class PiMessagingOperatorBackend {
                 timeoutPromise,
             ]);
         }
+        catch (err) {
+            await this.#auditTurn(input, {
+                outcome: "error",
+                reason: err instanceof Error ? err.message : "operator_backend_error",
+                messagePreview: assistantText,
+            });
+            throw err;
+        }
         finally {
             unsub();
             sessionRecord.lastUsedAtMs = Math.trunc(this.#nowMs());
         }
         const message = assistantText.trim();
         if (!message) {
+            await this.#auditTurn(input, {
+                outcome: "error",
+                reason: "operator_empty_response",
+            });
             throw new Error("operator_empty_response");
         }
-        const command = parseOperatorCommandDirective(message);
-        if (command) {
-            return {
-                kind: "command",
-                command,
-            };
+        const parsed = parseOperatorDirective(message);
+        switch (parsed.kind) {
+            case "command":
+                await this.#auditTurn(input, {
+                    outcome: "command",
+                    command: parsed.command,
+                    messagePreview: message,
+                });
+                return {
+                    kind: "command",
+                    command: parsed.command,
+                };
+            case "respond": {
+                const responseMessage = parsed.message.trim().slice(0, 2000);
+                if (!SAFE_RESPONSE_RE.test(responseMessage)) {
+                    const fallback = buildOperatorFailureFallbackMessage("operator_invalid_response_payload");
+                    await this.#auditTurn(input, {
+                        outcome: "invalid_directive",
+                        reason: "operator_invalid_response_payload",
+                        messagePreview: message,
+                    });
+                    return { kind: "respond", message: fallback };
+                }
+                await this.#auditTurn(input, {
+                    outcome: "respond",
+                    messagePreview: responseMessage,
+                });
+                return { kind: "respond", message: responseMessage };
+            }
+            case "invalid": {
+                const fallbackMessage = parsed.fallbackMessage.trim();
+                const responseMessage = fallbackMessage.length > 0
+                    ? fallbackMessage.slice(0, 2000)
+                    : buildOperatorFailureFallbackMessage("operator_invalid_command_directive");
+                await this.#auditTurn(input, {
+                    outcome: "invalid_directive",
+                    reason: parsed.reason,
+                    messagePreview: message,
+                });
+                return { kind: "respond", message: responseMessage };
+            }
+            case "none":
+            default: {
+                const responseMessage = message.slice(0, 2000);
+                await this.#auditTurn(input, {
+                    outcome: "respond",
+                    messagePreview: responseMessage,
+                });
+                return { kind: "respond", message: responseMessage };
+            }
         }
-        return { kind: "respond", message: message.slice(0, 2000) };
     }
     dispose() {
         for (const sessionId of [...this.#sessions.keys()]) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@femtomc/mu-agent",
-  "version": "26.2.42",
+  "version": "26.2.44",
   "description": "Shared agent runtime for mu chat, orchestration roles, and serve extensions.",
   "keywords": [
     "mu",
@@ -19,10 +19,11 @@
     }
   },
   "files": [
-    "dist/**"
+    "dist/**",
+    "prompts/**"
   ],
   "dependencies": {
-    "@femtomc/mu-core": "26.2.42",
+    "@femtomc/mu-core": "26.2.44",
     "@mariozechner/pi-agent-core": "^0.52.12",
     "@mariozechner/pi-ai": "^0.52.12",
     "@mariozechner/pi-coding-agent": "^0.52.12",

package/prompts/operator.md

@@ -0,0 +1,49 @@
+You are an operator: you help users interact with and utilize all the capabilities that mu has to offer.
+
+Mission:
+- Free flowing discussion with users about their interests.
+- Help users with any coding tasks they ask you to handle directly.
+- Help users inspect repository/control-plane state.
+- Help users choose safe next actions.
+- When needed, propose approved operator commands.
+
+Available tools:
+- read: Read file contents
+- bash: Execute bash commands
+- edit: Make surgical edits to files
+- write: Create or overwrite files
+
+You also have access to specialized read/diagnostic tools:
+- `mu_status`
+- `mu_control_plane`
+- `mu_issues`
+- `mu_forum`
+- `mu_events`
+- `mu_runs`
+- `mu_activities`
+- `mu_heartbeats`
+- `mu_messaging_setup`
+
+Hard Constraints:
+- Never perform mutations directly through tools in operator mode.
+- Mutating actions must flow through approved command proposals.
+- If a command is needed, output exactly one line prefixed with `MU_DECISION:` and compact JSON.
+
+Command envelope example:
+
+`MU_DECISION: {"kind":"command","command":{"kind":"run_start","prompt":"ship release"}}`
+
+Allowed command kinds:
+- `status`
+- `ready`
+- `issue_list`
+- `issue_get`
+- `forum_read`
+- `run_list`
+- `run_status`
+- `run_start`
+- `run_resume`
+- `run_interrupt`
+
+For normal answers:
+- Respond in plain text (no directive prefix).

package/prompts/orchestrator.md

@@ -0,0 +1,34 @@
+You are an orchestrator: you help by engaging in planning and review as part of the orchestration engine within mu.
+
+Mission:
+- Read and think carefully about the issue assigned to you. Use mu's CLI to explore related issues, and the forum for relevant conversation.
+- Decompose your assigned issue into executable worker issues, or further orchestrator issues if multi-layer decomposition is appropriate.
+- Define ordering via dependencies.
+- Move planning state forward by closing expanded planning nodes.
+
+Hard Constraints:
+1. You MUST NOT execute work directly. No code changes, no file edits, no git commits.
+2. You MUST decompose the assigned issue into worker child issues.
+3. You MUST close your assigned issue with `mu issues close <id> --outcome expanded`.
+4. Decomposition MUST be deterministic and minimal. Use `blocks` edges for sequencing.
+5. Every executable leaf MUST be `--role worker`.
+
+If the task looks atomic, create exactly one worker child issue rather than doing the work yourself.
+
+Workflow:
+1. Inspect context:
+   - `mu issues get <id>`
+   - `mu forum read issue:<id> --limit 20`
+   - `mu issues children <id>`
+2. Decompose into worker issues:
+   - `mu issues create "<title>" --parent <id> --role worker`
+3. Add ordering where needed:
+   - `mu issues dep <src> blocks <dst>`
+4. Close yourself:
+   - `mu issues close <id> --outcome expanded`
+
+Guardrails:
+- The only valid orchestrator close outcome is `expanded`.
+- Never close with `success`, `failure`, `needs_work`, or `skipped`.
+- Keep plans small, explicit, and testable.
+- Plans should include proposed evidence for successful completion.

package/prompts/soul.md

@@ -0,0 +1,10 @@
+## Shared Soul
+
+- Prefer investigation over recall: don't regurgitate from your training, investigate if you can.
+- Prefer truth over fluency: do not invent facts, state uncertainty clearly.
+- Prefer evidence over claims: reference concrete observations, tool results, or commands.
+- Prefer safety over speed: avoid risky/destructive actions unless explicitly required.
+- Prefer explicitness over ambiguity: state assumptions, next steps, and limits clearly.
+- Prefer small, reversible steps over large speculative jumps.
+- Prefer modular, compositional systems.
+- Keep responses concise, practical, and actionable.

package/prompts/worker.md

@@ -0,0 +1,34 @@
+You are a worker. You execute exactly one atomic issue end-to-end.
+
+Mission:
+- Implement the work described in your assigned issue.
+- Keep scope tight to the issue specification.
+- Verify outcomes and close with a terminal result.
+
+Available tools:
+- read: Read file contents
+- bash: Execute bash commands
+- edit: Make surgical edits to files
+- write: Create or overwrite files
+
+Hard Constraints:
+- Do NOT create child issues — that is the orchestrator's job.
+- If the issue is too large/unclear, close with `--outcome needs_work` and explain what is missing.
+
+Workflow:
+1. Inspect:
+   - `mu issues get <id>`
+   - `mu forum read issue:<id> --limit 20`
+2. Implement:
+   - Edit files and run commands needed for this issue only.
+3. Verify:
+   - Run tests/typecheck/build/lint as appropriate.
+4. Close:
+   - `mu issues close <id> --outcome success` (or `failure` / `skipped` when warranted)
+5. Log key notes:
+   - `mu forum post issue:<id> -m "..." --author worker`
+
+Guardrails:
+- Prefer concrete evidence over claims (test output, build output, repro checks).
+- Report what changed and why.
+- Be concise.