@guuey/host 0.1.0 → 0.2.1

package/dist/frameworks/claude-options.d.ts

@@ -20,18 +20,21 @@
  * `@guuey/worker`, `@guuey/config`, and Node built-ins.
  */
 import type { CanUseTool, Options, SDKMessage } from "@anthropic-ai/claude-agent-sdk";
-import type { Fs, HistoryMessage, JsonValue } from "@guuey/worker";
-import { type GuueyAgent } from "@guuey/config";
+import type { Fs, HistoryMessage, JsonValue, ProfileSection } from "@guuey/worker";
+import { type GuueyAgent, type ProfileAccess } from "@guuey/config";
 export type { SDKMessage };
 /**
  * Env-var names the Router injects so agent code reaches the home/app layers
- * portably. Host-owned copies of `@guuey/fs`'s `ENV_HOME_DIR`/`ENV_APP_DIR`
- * (trivial string literals — not imported, to keep this package OSS-legal).
+ * portably. Host-owned copies (trivial string literals — not imported, to
+ * keep this published package OSS-legal: it cannot depend on the
+ * platform-private `@guuey-private/fs-contract`). Sync sites if these ever
+ * change: `backend/libs/fs-contract/src/contract.ts` (the platform-internal
+ * source of truth) and `oss/packages/fs/src/roots.ts` (the public dev-guidance
+ * helper's own copy, same OSS-legality constraint).
  */
 export declare const ENV_HOME_DIR = "GUUEY_HOME_DIR";
 export declare const ENV_APP_DIR = "GUUEY_APP_DIR";
-export type { CredentialFile } from "../creds.js";
-import type { CredentialFile } from "../creds.js";
+import type { CredentialFile } from "@guuey/worker";
 /**
  * SDK's `mcpServers` value shape — recreated structurally rather than imported
  * because the SDK ships it as part of `Options['mcpServers']` (a record-of-union)
@@ -104,6 +107,43 @@ export interface BuildOptionsContext {
     priorMemory?: PriorMemoryRecord[];
     /** Prior working-state blob for the `<working_state>` preamble. */
     priorState?: JsonValue;
+    /**
+     * Content of the authenticated caller's `<home>/memories/MEMORY.md` file —
+     * prompted memory's RECALL half (memory-mcp spec §4), read Router-side BEFORE
+     * this invoke so recall never depends on the model choosing to read a file.
+     * Rendered into the RECALL block of the "## What you remember about this user"
+     * section when present (the SAVE half is gated on {@link memoryAttached}, not
+     * this). DISTINCT from {@link priorMemory}: that is the persistence-fold
+     * THREAD-scoped conversation memory (AgJSON `<thread_memory>` preamble); this
+     * is the cross-session, cross-thread USER memory file. Absent for an anonymous
+     * caller (never read Router-side) and for an authenticated caller with no
+     * memory file yet (turn one — the SAVE instruction still renders via
+     * {@link memoryAttached}).
+     */
+    userMemory?: string;
+    /**
+     * Whether the memory MCP child booted this pod (memory-mcp T5) — the Router
+     * threads it per-invoke. Gates the SAVE instruction (`save_memory`) on
+     * `authMode === "authenticated" && memoryAttached`, INDEPENDENT of
+     * {@link userMemory}: the bootstrap fix so a brand-new authenticated user is
+     * told the tool exists before any file. Was previously proxied by `fs`; this
+     * is the real signal (the tool is spliced iff this is true for an
+     * authenticated invoke).
+     */
+    memoryAttached?: boolean;
+    /**
+     * The Router's fail-closed cross-app profile access for this invoke
+     * (cross-app-profile T7) — present ONLY for a consenting authenticated caller,
+     * clamped to the app's declared posture. Gates the profile system-prompt
+     * section ({@link buildProfileSection}): the `save_profile` SAVE instruction on
+     * `read-write`, the RECALL block on {@link profileSections}. DISTINCT from
+     * {@link memoryAttached}: that is this app's own memory tool; this is the
+     * consent-gated cross-app profile.
+     */
+    profileAccess?: ProfileAccess;
+    /** The user's cross-app profile sections for the RECALL push (cross-app-profile
+     *  T7), read Router-side. Gated by {@link profileAccess}. */
+    profileSections?: ProfileSection[];
     /**
      * Returns every credential the Router broker wrote to
      * `<sessionDir>/.guuey/credentials/` this invoke — one `{name, cred}` per

package/dist/frameworks/claude-options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-options.d.ts","sourceRoot":"","sources":["../../src/frameworks/claude-options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACtF,OAAO,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAgD,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAE9F,YAAY,EAAE,UAAU,EAAE,CAAC;AAa3B;;;;GAIG;AACH,eAAO,MAAM,YAAY,mBAAmB,CAAC;AAC7C,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAoB3C,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GACrF;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GACpF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE9E;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,SAAS,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,WAAW,GAAG,eAAe,CAAA;KAAE,CAAC;IACtE;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,EAAE,CAAC,EAAE,EAAE,CAAC;IACR,4EAA4E;IAC5E,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3B,+EAA+E;IAC/E,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,mEAAmE;IACnE,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB;;;;;OAKG;IACH,eAAe,EAAE,MAAM,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IACrE,iEAAiE;IACjE,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,mBAAmB,GAAG,OAAO,CA6HpF;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,aAAa,EAAE,UACiC,CAAC;AAE9D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAgBxF;AA8BD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"claude-options.d.ts","sourceRoot":"","sources":["../../src/frameworks/claude-options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAY,MAAM,gCAAgC,CAAC;AAChG,OAAO,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACnF,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,UAAU,EAAE,CAAC;AAa3B;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,mBAAmB,CAAC;AAC7C,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAqE3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GACrF;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GACpF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE9E;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,SAAS,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,WAAW,GAAG,eAAe,CAAA;KAAE,CAAC;IACtE;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,EAAE,CAAC,EAAE,EAAE,CAAC;IACR,4EAA4E;IAC5E,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3B,+EAA+E;IAC/E,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,mEAAmE;IACnE,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;iEAC6D;IAC7D,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC;;;;;OAKG;IACH,eAAe,EAAE,MAAM,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IACrE,iEAAiE;IACjE,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAgKpF;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,aAAa,EAAE,UACiC,CAAC;AAE9D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAgBxF;AAgCD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/frameworks/claude-options.js

@@ -1,4 +1,4 @@
-import { GUUEY_DEFAULT_SYSTEM_PROMPT, defaultModelFor } from "@guuey/config";
+import { GUUEY_DEFAULT_SYSTEM_PROMPT, defaultModelFor, } from "@guuey/config";
 /**
  * Default Claude model — only used when the snapshot omits `model`. Derived
  * from the `@guuey/config` registry (single source of truth per the
@@ -10,8 +10,12 @@ const DEFAULT_MODEL = defaultModelFor("claude-agent-sdk");
 const DEFAULT_MAX_TURNS = 25;
 /**
  * Env-var names the Router injects so agent code reaches the home/app layers
- * portably. Host-owned copies of `@guuey/fs`'s `ENV_HOME_DIR`/`ENV_APP_DIR`
- * (trivial string literals — not imported, to keep this package OSS-legal).
+ * portably. Host-owned copies (trivial string literals — not imported, to
+ * keep this published package OSS-legal: it cannot depend on the
+ * platform-private `@guuey-private/fs-contract`). Sync sites if these ever
+ * change: `backend/libs/fs-contract/src/contract.ts` (the platform-internal
+ * source of truth) and `oss/packages/fs/src/roots.ts` (the public dev-guidance
+ * helper's own copy, same OSS-legality constraint).
  */
 export const ENV_HOME_DIR = "GUUEY_HOME_DIR";
 export const ENV_APP_DIR = "GUUEY_APP_DIR";
@@ -29,6 +33,56 @@ const FS_TOOLS = ["Read", "Write", "Edit", "Glob", "Grep"];
  * bubblewrap inside the Router's bwrap); the Router's bwrap IS the isolation.
  */
 const BASH_TOOL = "Bash";
+/**
+ * Belt-and-braces (spec §4): guuey's memory mechanism is prompted file memory
+ * (a platform-owned system-prompt section, below), never the SDK's own
+ * auto-memory. Set UNCONDITIONALLY on every `Options` this module builds so a
+ * future SDK default flip can never start writing its own memory format into
+ * the durable, quota-billed home layer without Guuey explicitly opting in.
+ */
+const AUTO_MEMORY_DISABLED = { autoMemoryEnabled: false };
+/**
+ * Build the platform-owned memory system-prompt section (memory-mcp spec §4):
+ * the SAVE instruction plus, when {@link BuildOptionsContext.userMemory} is
+ * present, a RECALL block rendering the Router-read `MEMORY.md` content. Gated
+ * on `authMode === "authenticated"` AND {@link BuildOptionsContext.memoryAttached}
+ * — the memory child booted this pod, so the `save_memory` tool is spliced. A
+ * guest has no memory tool (the spec forbids offering it), and an unattached pod
+ * has no tool to name. Returns `""` (append-safe) when out of scope.
+ *
+ * The SAVE gate is ATTACHMENT, not file presence — so a brand-new authenticated
+ * user (no `MEMORY.md` yet) STILL gets the save instruction (save-only section)
+ * and can bootstrap turn-one durable memory. The RECALL block is separately
+ * gated on `userMemory` presence INSIDE {@link renderMemorySection}.
+ *
+ * Gate change (memory-mcp T5 review): was `ctx.fs` (a proxy for attachment).
+ * `memoryAttached` is the REAL signal — it no longer over-renders in the
+ * transient fs-on-but-child-unattached window, and no longer under-renders when
+ * the tool exists. Delegates to the framework-neutral {@link renderMemorySection}
+ * (`../preamble.js`) so Claude, OpenAI, and ADK all render the IDENTICAL section;
+ * its RECALL block is byte-identical to the pre-factor inline string (pinned).
+ */
+function buildMemorySection(ctx) {
+    if (ctx.identity.authMode !== "authenticated" || !ctx.memoryAttached)
+        return "";
+    return renderMemorySection(ctx.userMemory);
+}
+/**
+ * Build the platform-owned cross-app profile system-prompt section
+ * (cross-app-profile spec §4) — the SIBLING of {@link buildMemorySection},
+ * appended AFTER it. Gated on `authMode === "authenticated"` AND a resolved
+ * {@link BuildOptionsContext.profileAccess} (the Router's fail-closed grant
+ * check produced a live, clamped access level). A guest / an ungranted app never
+ * reaches here. Delegates to the framework-neutral {@link renderProfileSection}
+ * (`../preamble.js`) so Claude, OpenAI, and ADK render the IDENTICAL section; that
+ * renderer owns the two inner gates (SAVE on `read-write`, RECALL on sections
+ * presence). Returns `""` (append-safe) when out of scope.
+ */
+function buildProfileSection(ctx) {
+    if (ctx.identity.authMode !== "authenticated" || ctx.profileAccess === undefined)
+        return "";
+    return renderProfileSection(ctx.profileSections, ctx.profileAccess);
+}
 /**
  * Build the Claude Agent SDK `Options` for one invoke. Pure: all disk/env access
  * is injected via {@link BuildOptionsContext}. Throws on an unresolved `{file}`
@@ -52,7 +106,12 @@ export function buildOptions(snapshot, ctx) {
     }
     const mcpServers = resolveMcpServers(ctx);
     const allowedTools = buildAllowedTools(snapshot, Object.keys(mcpServers), Boolean(ctx.fs));
-    const systemPrompt = withContextPreamble(snapshot.systemPrompt ?? GUUEY_DEFAULT_SYSTEM_PROMPT, ctx.history, ctx.priorMemory, ctx.priorState);
+    const systemPrompt = withContextPreamble(snapshot.systemPrompt ?? GUUEY_DEFAULT_SYSTEM_PROMPT, ctx.history, ctx.priorMemory, ctx.priorState) +
+        buildMemorySection(ctx) +
+        // cross-app-profile T7: the profile section is a SIBLING of the memory
+        // section, appended AFTER it (memory first, then profile). Both are
+        // framework-blind renderers from ../preamble.js.
+        buildProfileSection(ctx);
     const model = snapshot.model ?? DEFAULT_MODEL;
     const maxTurns = snapshot.runtime?.maxTurns ?? DEFAULT_MAX_TURNS;
     const fs = ctx.fs;
@@ -70,8 +129,21 @@ export function buildOptions(snapshot, ctx) {
     // Explicit Record<string, string> annotation prevents TypeScript from widening
     // the ternary to a union `{ K: string } | {}`, which would make spread targets
     // produce optional-undefined keys that conflict with Record<string, string>.
+    // CLAUDE_CONFIG_DIR pins the CLI's own config/state root to the (ephemeral,
+    // pod-local) session dir — spec §4 belt-and-braces, alongside the
+    // unconditional `settings.autoMemoryEnabled:false` below — so CLI session
+    // state never lands in the durable, quota-billed home layer.
+    // XDG_CACHE_HOME likewise: the CLI's cache tree (~/.cache/claude-cli-nodejs,
+    // MCP logs etc.) follows $HOME by XDG default, and $HOME resolves inside the
+    // durable home mount — live-found on the first G5 gate run (2026-07-20)
+    // leaking per-invoke log files into quota-billed storage.
     const fsEnv = fs
-        ? { [ENV_HOME_DIR]: fs.home, [ENV_APP_DIR]: fs.app }
+        ? {
+            [ENV_HOME_DIR]: fs.home,
+            [ENV_APP_DIR]: fs.app,
+            CLAUDE_CONFIG_DIR: fs.session,
+            XDG_CACHE_HOME: fs.session,
+        }
         : {};
     let env;
     if (baseUrl !== undefined && authToken !== undefined) {
@@ -102,6 +174,15 @@ export function buildOptions(snapshot, ctx) {
         model,
         mcpServers,
         allowedTools,
+        // Token streaming (guuey#91 consumer half): the SDK interleaves
+        // `stream_event` partials, which `@silverprotocol/claude-agent-sdk` ≥0.4
+        // maps to token-granular text/reasoning/tool.args deltas and dedupes
+        // against the complete assistant message that follows. The Router passes
+        // stream_event through its structural SDKMessage guard untouched, and the
+        // render meter never reads partials (it bills user-message tool-results,
+        // idempotent by tool_use id), so this flag's only observable effect is
+        // incremental frames on the SSE wire.
+        includePartialMessages: true,
         // With GuueyFS layers bound, expose the file tools PLUS real `Bash`; without
         // them this is byte-identical to the source (purely MCP-driven). `Bash` is
         // safe here because the host already runs inside the Router's bubblewrap
@@ -111,6 +192,13 @@ export function buildOptions(snapshot, ctx) {
         // against a future SDK change auto-pulling `~/.claude/settings.json` and
         // leaking the operator's logged-in Claude Code MCPs into the tool catalog.
         settingSources: [],
+        // Belt-and-braces (spec §4): the SDK's OWN auto-memory is disabled
+        // UNCONDITIONALLY, on every invoke, regardless of fs/authMode — Guuey's
+        // memory mechanism is the platform-owned prompted-file scheme above, not
+        // the SDK's. This guards against a future SDK default flip writing its
+        // own memory format into (durable, quota-billed) home without Guuey ever
+        // opting in.
+        settings: AUTO_MEMORY_DISABLED,
         strictMcpConfig: true,
         maxTurns,
         env,
@@ -204,5 +292,7 @@ function buildAllowedTools(snapshot, declaredServerNames, fsBound) {
 }
 // withContextPreamble now lives in ../preamble.js (framework-neutral — the
 // ADK runner renders the same preamble); re-exported for existing importers.
+// `renderMemorySection` (the memory SAVE + RECALL block, memory-mcp T5) lives
+// there too — framework-blind, so openai/adk render the identical section.
 export { withContextPreamble } from "../preamble.js";
-import { withContextPreamble } from "../preamble.js";
+import { renderMemorySection, renderProfileSection, withContextPreamble } from "../preamble.js";

package/dist/frameworks/claude-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-runner.d.ts","sourceRoot":"","sources":["../../src/frameworks/claude-runner.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,eAAe,EAA0B,MAAM,aAAa,CAAC;AAK3E,wBAAgB,YAAY,IAAI,eAAe,CAa9C"}
+{"version":3,"file":"claude-runner.d.ts","sourceRoot":"","sources":["../../src/frameworks/claude-runner.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,eAAe,EAA0B,MAAM,aAAa,CAAC;AAI3E,wBAAgB,YAAY,IAAI,eAAe,CAa9C"}

package/dist/frameworks/claude-runner.js

@@ -14,8 +14,8 @@
  *  per invoke if neither form is present.
  */
 import { query } from "@anthropic-ai/claude-agent-sdk";
+import { listCredentials } from "@guuey/worker";
 import { runInvoke } from "./claude.js";
-import { listCredentials } from "../creds.js";
 import { buildHostContext } from "../boot-context.js";
 export function createRunner() {
     const bootCtx = buildHostContext(process.env);

package/dist/frameworks/claude.d.ts

@@ -10,13 +10,14 @@
  * `query`.
  */
 import type { Options, SDKMessage } from "@anthropic-ai/claude-agent-sdk";
-import type { Emitter, Fs, HistoryMessage, Identity, JsonValue } from "@guuey/worker";
-import { buildOptions, type CredentialFile, type PriorMemoryRecord } from "./claude-options.js";
+import type { CredentialFile, Emitter, Fs, HistoryMessage, Identity, JsonValue, ProfileSection } from "@guuey/worker";
+import { buildOptions, type PriorMemoryRecord } from "./claude-options.js";
 /**
- * The invoke this host consumes. A superset of `@guuey/worker`'s `Invoke`:
- * `priorMemory`/`priorState` are the §1.4 push-by-value context the worker reads
- * for the preamble (the Worker Protocol `Invoke` is EXTENDED with these in
- * Task 3; until then the worker loop parses them off the raw control line).
+ * The invoke this host consumes. Mirrors `@guuey/worker`'s `Invoke` (minus the
+ * `type` discriminator): `priorMemory`/`priorState` are the §1.4 push-by-value
+ * context the worker renders into the preamble; `userMemory` is the
+ * guueyfs-slice4 prompted-file-memory RECALL push (Task 3) — see the doc on
+ * `Invoke.userMemory` in `@guuey/worker` for how it differs from `priorMemory`.
  */
 export interface HostInvoke {
     input: string;
@@ -25,6 +26,25 @@ export interface HostInvoke {
     history: HistoryMessage[];
     priorMemory?: PriorMemoryRecord[];
     priorState?: JsonValue;
+    userMemory?: string;
+    /**
+     * Whether the memory MCP child booted this pod (memory-mcp T5) — gates the
+     * SAVE instruction on `authenticated && memoryAttached`, independent of
+     * `userMemory` (the bootstrap fix). See `Invoke.memoryAttached` in
+     * `@guuey/worker`.
+     */
+    memoryAttached?: boolean;
+    /**
+     * The resolved cross-app profile access for this invoke (cross-app-profile
+     * T7) — gates the profile system-prompt section: the `save_profile` SAVE
+     * instruction on `read-write`, the RECALL block on {@link profileSections}.
+     * Present only for a consenting authenticated caller. See `Invoke.profileAccess`
+     * in `@guuey/worker`.
+     */
+    profileAccess?: "read" | "read-write";
+    /** The user's cross-app profile sections for the RECALL push (cross-app-profile
+     *  T7). See `Invoke.profileSections` in `@guuey/worker`. */
+    profileSections?: ProfileSection[];
 }
 /** Per-process config the worker resolves once at boot. */
 export interface HostRuntime {

package/dist/frameworks/claude.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../src/frameworks/claude.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAc,MAAM,eAAe,CAAC;AAClG,OAAO,EACL,YAAY,EAEZ,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAC;AAQ7B;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,EAAE,EAAE,EAAE,CAAC;IACP,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,UAAU,CAAC,EAAE,SAAS,CAAC;CACxB;AAED,2DAA2D;AAC3D,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,eAAe,EAAE,MAAM,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;CACtE;AAED,8EAA8E;AAC9E,MAAM,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB,KAAK,aAAa,CAAC,UAAU,CAAC,CAAC;AA0BhC;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,EACrE,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,IAAI,CAAC,CAgDf"}
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../src/frameworks/claude.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EACV,cAAc,EACd,OAAO,EACP,EAAE,EACF,cAAc,EACd,QAAQ,EACR,SAAS,EACT,cAAc,EAEf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EAEZ,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAC;AAQ7B;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,EAAE,EAAE,EAAE,CAAC;IACP,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IACtC;gEAC4D;IAC5D,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;CACpC;AAED,2DAA2D;AAC3D,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,eAAe,EAAE,MAAM,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;CACtE;AAED,8EAA8E;AAC9E,MAAM,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB,KAAK,aAAa,CAAC,UAAU,CAAC,CAAC;AA0BhC;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,EACrE,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,IAAI,CAAC,CAoDf"}

package/dist/frameworks/claude.js

@@ -49,6 +49,10 @@ export async function runInvoke(snapshot, invoke, runtime, emit, query) {
             ...(runtime.authToken !== undefined ? { authToken: runtime.authToken } : {}),
             ...(invoke.priorMemory !== undefined ? { priorMemory: invoke.priorMemory } : {}),
             ...(invoke.priorState !== undefined ? { priorState: invoke.priorState } : {}),
+            ...(invoke.userMemory !== undefined ? { userMemory: invoke.userMemory } : {}),
+            ...(invoke.memoryAttached !== undefined ? { memoryAttached: invoke.memoryAttached } : {}),
+            ...(invoke.profileAccess !== undefined ? { profileAccess: invoke.profileAccess } : {}),
+            ...(invoke.profileSections !== undefined ? { profileSections: invoke.profileSections } : {}),
         };
         options = buildOptions(snapshot, ctx);
     }

package/dist/frameworks/google-adk.d.ts

@@ -1,7 +1,6 @@
-import type { GuueyContext } from "@guuey/config";
-import type { Emitter, JsonValue } from "@guuey/worker";
+import { type GuueyContext } from "@guuey/config";
+import { type CredentialFile, type Emitter, type JsonValue } from "@guuey/worker";
 import type { FrameworkRunner, HostSnapshot, HostTurn } from "../index.js";
-import { type CredentialFile } from "../creds.js";
 /**
  * Given a require-resolved entry file inside a package, walk up to the
  * package root and return the absolute path of the root export's `import`
@@ -19,7 +18,7 @@ interface AdkModule {
     LlmAgent: new (params: {
         name: string;
         model: string;
-        instruction: string;
+        instruction: string | (() => string);
         tools: unknown[];
     }) => AdkAgent;
     InMemoryRunner: new (params: {

package/dist/frameworks/google-adk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google-adk.d.ts","sourceRoot":"","sources":["../../src/frameworks/google-adk.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAS3E,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAMnE;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAsB9E;AAID;;;;;GAKG;AACH,UAAU,SAAS;IACjB,QAAQ,EAAE,KAAK,MAAM,EAAE;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,OAAO,EAAE,CAAC;KAClB,KAAK,QAAQ,CAAC;IACf,cAAc,EAAE,KAAK,MAAM,EAAE;QAAE,KAAK,EAAE,QAAQ,CAAA;KAAE,KAAK,SAAS,CAAC;IAC/D,UAAU,EAAE,KAAK,gBAAgB,EAAE;QACjC,IAAI,EAAE,gCAAgC,CAAC;QACvC,GAAG,EAAE,MAAM,CAAC;QACZ,gBAAgB,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE;gBAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;aAAE,CAAA;SAAE,CAAC;KAC3E,KAAK,OAAO,CAAC;CACf;AAED,iFAAiF;AACjF,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,UAAU,SAAS;IACjB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE;QACvB,aAAa,CAAC,OAAO,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACtF,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QACf,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,KAAK,CAAC;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC,CAAA;SAAE,CAAC;QAC7D,SAAS,EAAE;YAAE,aAAa,EAAE,KAAK,CAAA;SAAE,CAAC;KACrC,GAAG,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;CAChD;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CA0BpE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAClC,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,GACnD,OAAO,EAAE,CAcX;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAapD;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EACtC,KAAK,EAAE,QAAQ,EACf,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,OAAO,EACb,UAAU,EAAE,MAAM,GAAG,IAAI,GACxB,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,QAAQ,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,OAAO,EAAE,GACrB,YAAY,CAWd;AAED,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,OAAO,OAAO,CAAC;CACvB;AAED,wBAAgB,YAAY,CAAC,IAAI,GAAE,aAAkB,GAAG,eAAe,CAwEtE"}
+{"version":3,"file":"google-adk.d.ts","sourceRoot":"","sources":["../../src/frameworks/google-adk.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAmB,KAAK,cAAc,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AACnG,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAc3E;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAsB9E;AAYD;;;;;GAKG;AACH,UAAU,SAAS;IACjB,QAAQ,EAAE,KAAK,MAAM,EAAE;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QAWd,WAAW,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;QACrC,KAAK,EAAE,OAAO,EAAE,CAAC;KAClB,KAAK,QAAQ,CAAC;IACf,cAAc,EAAE,KAAK,MAAM,EAAE;QAAE,KAAK,EAAE,QAAQ,CAAA;KAAE,KAAK,SAAS,CAAC;IAC/D,UAAU,EAAE,KAAK,gBAAgB,EAAE;QACjC,IAAI,EAAE,gCAAgC,CAAC;QACvC,GAAG,EAAE,MAAM,CAAC;QACZ,gBAAgB,CAAC,EAAE;YAAE,WAAW,CAAC,EAAE;gBAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;aAAE,CAAA;SAAE,CAAC;KAC3E,KAAK,OAAO,CAAC;CACf;AAED,iFAAiF;AACjF,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,UAAU,SAAS;IACjB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE;QACvB,aAAa,CAAC,OAAO,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACtF,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QACf,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,KAAK,CAAC;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC,CAAA;SAAE,CAAC;QAC7D,SAAS,EAAE;YAAE,aAAa,EAAE,KAAK,CAAA;SAAE,CAAC;KACrC,GAAG,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;CAChD;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CA0BpE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAClC,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,GACnD,OAAO,EAAE,CAcX;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAapD;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EACtC,KAAK,EAAE,QAAQ,EACf,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,OAAO,EACb,UAAU,EAAE,MAAM,GAAG,IAAI,GACxB,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,QAAQ,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,OAAO,EAAE,GACrB,YAAY,CAWd;AAED,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,OAAO,OAAO,CAAC;CACvB;AAED,wBAAgB,YAAY,CAAC,IAAI,GAAE,aAAkB,GAAG,eAAe,CA8FtE"}

package/dist/frameworks/google-adk.js

@@ -36,9 +36,10 @@ import { readFileSync } from "node:fs";
 import { createRequire } from "node:module";
 import { dirname, join } from "node:path";
 import { pathToFileURL } from "node:url";
+import { defaultModelFor } from "@guuey/config";
+import { listCredentials } from "@guuey/worker";
 import { AGENT_ENTRY_ENV, WORKER_ROOT_ENV, loadAgentEntry, materializeAgent, nativeLoad, resolveAgentEntry, } from "../agent-entry.js";
-import { listCredentials } from "../creds.js";
-import { withContextPreamble } from "../preamble.js";
+import { renderMemorySection, renderProfileSection, withContextPreamble } from "../preamble.js";
 import { resolveSdkVersion } from "../sdk-version.js";
 const ADK_FRAMEWORK = "google-adk";
 /**
@@ -70,7 +71,14 @@ export function importConditionEntry(resolvedEntry) {
     return undefined;
 }
 const ADK_PACKAGE = "@google/adk";
-const DEFAULT_MODEL = "gemini-3.5-flash";
+/**
+ * Default ADK model — only used when the snapshot omits `model`. Derived
+ * from the `@guuey/config` registry (single source of truth per the
+ * model-release playbook §8 item A) rather than a bare literal, so a
+ * registry default change propagates here automatically — the same idiom
+ * `claude-options.ts`'s `DEFAULT_MODEL` uses.
+ */
+const DEFAULT_MODEL = defaultModelFor("google-adk");
 /**
  * Load `@google/adk`, honoring the single-copy rule: when `entryPath` (the
  * graceful agent module) is given, resolve the SDK from THAT tree so the
@@ -239,7 +247,29 @@ export function createRunner(deps = {}) {
                 emit.error(`@guuey/host: snapshot.systemPrompt must be a resolved string (got ${JSON.stringify(snapshot.systemPrompt)}).`);
                 return;
             }
-            const instruction = withContextPreamble(snapshot.systemPrompt ?? "", turn.history, turn.priorMemory, turn.priorState);
+            // The context preamble PLUS the framework-blind memory section (memory-mcp
+            // T5: `save_memory` instruction + optional RECALL block, identical to the
+            // Claude & OpenAI renderers). The SAVE half is gated on `authenticated &&
+            // memoryAttached` — the memory child booted, so the `save_memory` tool is
+            // spliced (T4) — NOT on `userMemory` presence: a brand-new authenticated
+            // user has no file yet but must still be told the tool exists (the
+            // bootstrap fix). The RECALL block inside `renderMemorySection` stays
+            // gated on `userMemory` presence. Brace-content in recalled memory is
+            // safe: no-code rides `instruction` as a FUNCTION (F7 — bypasses ADK
+            // `{var}` substitution), and the graceful path hands it to the dev's
+            // factory verbatim.
+            const memoryOn = turn.identity.authMode === "authenticated" && turn.memoryAttached === true;
+            // cross-app-profile T7: the profile section is a SIBLING of the memory
+            // section, appended AFTER it, gated on `authenticated && profileAccess`
+            // (a live, clamped grant). Brace-content in recalled profile sections is
+            // safe: no-code rides `instruction` as a FUNCTION (F7), and the graceful
+            // path hands it to the dev's factory verbatim. `profileAccess` is aliased
+            // to a const so the truthy branch narrows it to the required `ProfileAccess`.
+            const profileAccess = turn.profileAccess;
+            const profileOn = turn.identity.authMode === "authenticated" && profileAccess !== undefined;
+            const instruction = withContextPreamble(snapshot.systemPrompt ?? "", turn.history, turn.priorMemory, turn.priorState) +
+                (memoryOn ? renderMemorySection(turn.userMemory) : "") +
+                (profileOn ? renderProfileSection(turn.profileSections, profileAccess) : "");
             let agent;
             try {
                 const toolsets = buildToolsets(adk, listCredentials(turn.fs)());
@@ -249,11 +279,15 @@ export function createRunner(deps = {}) {
                     agent = await materializeAgent(exported, ctx, (message) => process.stderr.write(`${message}\n`));
                 }
                 else {
-                    // No-code: construct from the snapshot.
+                    // No-code: construct from the snapshot. `instruction` rides as a
+                    // function (F7, see AdkModule) — the preamble embeds user-authored
+                    // conversation content that may itself contain `{...}`, and a
+                    // string instruction would run it through ADK's session-state
+                    // substitution.
                     agent = new adk.LlmAgent({
                         name: "guuey",
                         model: snapshot.model ?? DEFAULT_MODEL,
-                        instruction,
+                        instruction: () => instruction,
                         tools: toolsets,
                     });
                 }

package/dist/frameworks/openai-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openai-runner.d.ts","sourceRoot":"","sources":["../../src/frameworks/openai-runner.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,eAAe,EAA0B,MAAM,aAAa,CAAC;AAgB3E,wBAAgB,YAAY,IAAI,eAAe,CAW9C"}
+{"version":3,"file":"openai-runner.d.ts","sourceRoot":"","sources":["../../src/frameworks/openai-runner.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,eAAe,EAA0B,MAAM,aAAa,CAAC;AAe3E,wBAAgB,YAAY,IAAI,eAAe,CAW9C"}

package/dist/frameworks/openai-runner.js

@@ -11,8 +11,8 @@
  * injected by the Router's `buildWorkerEnv` already routes it.
  */
 import { run as openaiRun, setDefaultOpenAIKey } from "@openai/agents";
+import { listCredentials } from "@guuey/worker";
 import { runInvokeOpenai } from "./openai.js";
-import { listCredentials } from "../creds.js";
 import { buildHostContext } from "../boot-context.js";
 /**
  * The real `@openai/agents` `run` (streamed overload), narrowed to the

package/dist/frameworks/openai.d.ts

@@ -14,8 +14,10 @@
  * without a live model — the entrypoint (`index.ts`) passes the real SDK `run`.
  *
  * Snapshot → Agent mapping:
- *  - `model`        → `snapshot.model` (or the SDK's own default when absent —
- *                     NOT Claude's; this is the OpenAI path).
+ *  - `model`        → `snapshot.model`, or (when absent) guuey's own
+ *                     `defaultModelFor("openai-agents-sdk")` — NOT the
+ *                     `@openai/agents` SDK's own built-in fallback. Mirrors
+ *                     `claude-options.ts`'s `DEFAULT_MODEL` idiom.
  *  - `instructions` → `systemPrompt` + the §1.4 context preamble (reuses
  *                     `withContextPreamble`, identical to the Claude path).
  *  - `mcpServers`   → the framework-neutral `resolveMcpServers` output (same

package/dist/frameworks/openai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../src/frameworks/openai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EACL,KAAK,EAIL,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,OAAO,EAAa,MAAM,eAAe,CAAC;AAOxD,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAA+B,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAQ7E;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAgB,SAAQ,aAAa,CAAC,cAAc,CAAC;IACpE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,KACzC,OAAO,CAAC,eAAe,CAAC,CAAC;AAgB9B;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,UAAU,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EAC7C,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,CA4Gf"}
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../src/frameworks/openai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EACL,KAAK,EAIL,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,OAAO,EAAa,MAAM,eAAe,CAAC;AAQxD,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAgD,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAsB9F;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAgB,SAAQ,aAAa,CAAC,cAAc,CAAC;IACpE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,KACzC,OAAO,CAAC,eAAe,CAAC,CAAC;AAgB9B;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,UAAU,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EAC7C,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,CA+Hf"}

package/dist/frameworks/openai.js

@@ -14,8 +14,10 @@
  * without a live model — the entrypoint (`index.ts`) passes the real SDK `run`.
  *
  * Snapshot → Agent mapping:
- *  - `model`        → `snapshot.model` (or the SDK's own default when absent —
- *                     NOT Claude's; this is the OpenAI path).
+ *  - `model`        → `snapshot.model`, or (when absent) guuey's own
+ *                     `defaultModelFor("openai-agents-sdk")` — NOT the
+ *                     `@openai/agents` SDK's own built-in fallback. Mirrors
+ *                     `claude-options.ts`'s `DEFAULT_MODEL` idiom.
  *  - `instructions` → `systemPrompt` + the §1.4 context preamble (reuses
  *                     `withContextPreamble`, identical to the Claude path).
  *  - `mcpServers`   → the framework-neutral `resolveMcpServers` output (same
@@ -29,12 +31,26 @@
  */
 import { Agent, MaxTurnsExceededError, MCPServerStreamableHttp, } from "@openai/agents";
 import { resolveMcpServers, withContextPreamble, } from "./claude-options.js";
-import { GUUEY_DEFAULT_SYSTEM_PROMPT } from "@guuey/config";
+import { renderMemorySection, renderProfileSection } from "../preamble.js";
+import { GUUEY_DEFAULT_SYSTEM_PROMPT, defaultModelFor } from "@guuey/config";
 import { resolveSdkVersion } from "../sdk-version.js";
 /** The framework tag this arm runs — matches the `AgentFramework` enum value. */
 const OPENAI_FRAMEWORK = "openai-agents-sdk";
 /** The npm package whose installed version is this framework's `hello.sdkVersion`. */
 const OPENAI_SDK_PACKAGE = "@openai/agents";
+/**
+ * Default OpenAI model — only used when the snapshot omits `model`. Derived
+ * from the `@guuey/config` registry (single source of truth per the
+ * model-release playbook §8 item A) rather than a bare literal, so a registry
+ * default change propagates here automatically — the same idiom
+ * `claude-options.ts`'s `DEFAULT_MODEL` / `google-adk.ts`'s `DEFAULT_MODEL`
+ * use. Before this constant existed, a model-less snapshot silently fell
+ * through to `@openai/agents`' OWN built-in default (verified
+ * `gpt-5.4-mini`) — not a registry id, so it escaped the rate-card
+ * exact-match guard and shadow-resolved through the `gpt-5.4` row,
+ * over-metering a mini model (playbook run 2026-07-25, finding M7).
+ */
+const DEFAULT_MODEL = defaultModelFor(OPENAI_FRAMEWORK);
 /**
  * Run one invoke through `@openai/agents`. Emits `native` per `RunStreamEvent`,
  * `done` on completion (with the `max_turns` sentinel + reason on a turn-cap),
@@ -71,7 +87,26 @@ export async function runInvokeOpenai(snapshot, invoke, runtime, emit, run) {
         if (snapshot.systemPrompt !== undefined && typeof snapshot.systemPrompt !== "string") {
             throw new Error(`@guuey/host: snapshot.systemPrompt must be a resolved string (got ${JSON.stringify(snapshot.systemPrompt)}). The CLI inlines {file} references before upload; workers never read the filesystem.`);
         }
-        instructions = withContextPreamble(snapshot.systemPrompt ?? GUUEY_DEFAULT_SYSTEM_PROMPT, ctx.history, ctx.priorMemory, ctx.priorState);
+        // `instructions` = the context preamble PLUS the framework-blind memory
+        // section (memory-mcp T5: `save_memory` instruction + optional RECALL block,
+        // identical to the Claude & ADK renderers). The SAVE half is gated on
+        // `authenticated && memoryAttached` — the memory child booted, so the
+        // `save_memory` tool is spliced (T4) — NOT on `userMemory` presence: a
+        // brand-new authenticated user has no file yet but must still be told the
+        // tool exists (the bootstrap fix). The RECALL block inside
+        // `renderMemorySection` stays gated on `userMemory` presence.
+        const memoryOn = invoke.identity.authMode === "authenticated" && invoke.memoryAttached === true;
+        // cross-app-profile T7: the profile section is a SIBLING of the memory
+        // section, appended AFTER it. Gated on `authenticated && profileAccess`
+        // (a live, clamped grant); `renderProfileSection` owns the inner SAVE/RECALL
+        // gates. `profileAccess` is aliased to a const so the truthy branch narrows
+        // it to the non-undefined `ProfileAccess` the renderer requires.
+        const profileAccess = invoke.profileAccess;
+        const profileOn = invoke.identity.authMode === "authenticated" && profileAccess !== undefined;
+        instructions =
+            withContextPreamble(snapshot.systemPrompt ?? GUUEY_DEFAULT_SYSTEM_PROMPT, ctx.history, ctx.priorMemory, ctx.priorState) +
+                (memoryOn ? renderMemorySection(invoke.userMemory) : "") +
+                (profileOn ? renderProfileSection(invoke.profileSections, profileAccess) : "");
         mcpServers = buildOpenaiMcpServers(ctx);
     }
     catch (err) {
@@ -97,7 +132,7 @@ export async function runInvokeOpenai(snapshot, invoke, runtime, emit, run) {
             name: "guuey-agent",
             instructions,
             mcpServers: servers,
-            ...(snapshot.model !== undefined ? { model: snapshot.model } : {}),
+            model: snapshot.model ?? DEFAULT_MODEL,
         });
         const stream = await run(agent, invoke.input, {
             stream: true,