@hraness/message-like-me 0.8.15 → 0.8.17

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.8.17 (2026-09-23)
+
+- Bind legacy installation to the exact public `@hraness/message-like-me@0.8.17` npm package, with the same reviewed bytes mirrored in the immutable GitHub Release. This does not install the Textbutler menu companion or enable automatic replies.
+- Add isolated per-contact habitats: each enrolled contact gets a private workspace whose bounded evolution loop proposes, evaluates and promotes reply-guidance updates through the admitted subscription driver, with journaled budgets and reservations.
+- Harden the reply steel thread: an uncertain send is quarantined until the owner resolves it with `replies reconcile CONTACT [--sent|--failed]`, which can also prove delivery from bounded conversation history. Runs are retained for 90 days, restart recovery abandons pre-dispatch work and marks dispatched work indeterminate, and grant intent is recorded before any upstream request.
+- Make dispatch cancellation exact: a reply that has crossed the dispatch boundary is never aborted into a false failure, transport receipts stay authoritative over hook errors, and gateway driver failures report stable budget, unavailable, and output fault classes.
+- Keep the automatic loop honest under load: inbound events drain in batches, a degraded transport keeps pending work and only reports attention after repeated failures, reactions and echoes can no longer erase or trigger pending replies, and a continuous inbound stream is answered within a bounded debounce instead of starving.
+- Accept bare-object driver output, map silent suggestions to an explicit outcome, supervise the messaging transport child with custody-verified recovery, keep injected contact-workspace guidance out of trusted policy, and reseal the reviewed XCB composition receipt over the current sources.
+
+## 0.8.16 (2026-09-22)
+
+- Bind legacy installation to the exact public `@hraness/message-like-me@0.8.16` npm package, with the same reviewed bytes mirrored in the immutable GitHub Release. This does not install the Textbutler menu companion or enable automatic replies.
+- Treat an owner text naming the butler in an enrolled contact conversation as a deliberate invocation: it now queues a disclosed reply through the same grant, rate-limit, capability, and freshness checks instead of marking the thread answered. Only a strictly newer owner message suppresses it as a takeover, and invocations no longer count as owner presence, so they cannot cool the butler down or swallow the next inbound. `inbox` and `replies suggest` report the same owner run the loop sees.
+
 ## 0.8.15 (2026-09-21)
 
 - Bind legacy installation to the exact public `@hraness/message-like-me@0.8.15` npm package, with the same reviewed bytes mirrored in the immutable GitHub Release. This does not install the Textbutler menu companion or enable automatic replies.

package/README.md

@@ -167,7 +167,7 @@ Message Like Me requires Bun 1.3.14 or newer. Install the exact public npm
 package, then install both bundled Agent Skills:
 
 ```sh
-bun add --global @hraness/message-like-me@0.8.15
+bun add --global @hraness/message-like-me@0.8.17
 messagelikeme skill install
 ```
 

package/dist/cli.js

@@ -25088,7 +25088,7 @@ function commandPlatformLive(io, cleanupFailure) {
 import { isAbsolute as isAbsolute7, resolve as resolve8 } from "path";
 
 // src/version.ts
-var MESSAGE_LIKE_ME_VERSION = "0.8.15";
+var MESSAGE_LIKE_ME_VERSION = "0.8.17";
 
 // src/command-input.ts
 var HELP = `Message Like Me ${MESSAGE_LIKE_ME_VERSION}

package/docs/textbutler/architecture.md

@@ -106,6 +106,16 @@ An owner send reuses the contact's live standing grant when it covers the needed
 
 `replies.send` returns `submitted`, `failed`, `partial`, `cancelled`, or `indeterminate`. An indeterminate owner send blocks the next reply for that contact — automatic or owner-initiated — until the journaled intent is reconciled, exactly like an automatic send.
 
+## Contact habitats
+
+When the owner enables `habitat` in `host.json`, each enrolled conversation gets an isolated habitat: a bounded, durable learning state stored in the private run journal, plus a fast reply driver and a slower background evolver. Habitat state is never shared between conversations — two threads to the same person keep separate habitats.
+
+The fast driver answers ordinary replies with one bounded model call instead of the multi-turn subscription loop. The default route is a Vercel AI Gateway Qwen model with reasoning disabled; a local OpenAI-compatible endpoint is the alternative route. Prompt, context, output and wall-clock budgets are fixed in code. A classified response and its composition share the same inference, and follow-up learning starts only after the transport accepts a submitted reply — never on a draft.
+
+Evolution runs in the background when the contact is idle: it re-reads the reply's intended purpose against a bounded window of later messages and reactions, proposes a candidate plan, replays incumbent and candidate on retained cases with blinded ordering, and asks an independent judge for per-case scores. Promotion requires follow-up evidence, cited evidence IDs, safety on every case, no regression, and a bounded improvement margin. Every step keeps replayable Algal receipts in the private journal. Plans are data, not code: they can adjust guidance, context size, reply length, humor and bounded tool flags, but never providers, accounts, recipients, permissions, disclosure, or executable programs. Explicit owner rollback restores a retained ancestor plan.
+
+External effects stay host-brokered and off by default. Web search uses the gateway's server-side Exa tool; it is disabled in the default plan, admitted queries are checked against the private corpus for identifier shapes, verbatim spans and proper nouns, and results are untrusted excerpts. Meme search matches a bounded public Imgflip catalog locally, admits only known template images after byte and signature validation, and never uploads conversation text or captions. Billed calls reserve against a global daily budget in the journal before dispatch; provider-reported generation costs settle each reservation to its actual amount, and ambiguous outcomes retain the conservative reservation with no retry. The production gateway key itself also carries a provider-enforced daily quota.
+
 ## Hooks and plugins
 
 The initial lifecycle is `message.received`, `reply.decide`, `reply.compose`, `reply.before-send`, `reply.sent`, `memory.updated`, and `run.failed`. Hooks have a named/versioned owner-installed extension, deterministic registration order, a deadline, and a cancellation signal. Failure before dispatch closes admission. A notification-hook failure after a receipt cannot change that receipt or trigger resend.

package/docs/textbutler/local-data.md

@@ -23,6 +23,14 @@ A pending transition also keeps `state/macos-app-upgrade.json` in the data
 directory until completion or rollback is proven. Keep both locations intact
 while an upgrade is unresolved.
 
+When habitats are enabled, the run journal additionally keeps per-contact
+habitat state (the promoted reply plan, bounded reply episodes, observed
+follow-up windows, evaluation records and rollback lineage), replayable
+inference receipts for each evaluation, and a global daily table of API
+usage reservations with their provider-cost settlements. Gateway and other
+provider credentials live under `state/provider-credentials` with owner-only
+permissions; they never enter contact workspaces or journal evidence.
+
 The explicit legacy iMessage crash reconciliation script accepts a private
 witness for the Ghostget 0.18.16 startup failure. It checks the original crash,
 app, connector, account and process state, then archives a bounded settlement

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hraness/message-like-me",
-  "version": "0.8.15",
+  "version": "0.8.17",
   "description": "A local-first CLI and Agent Skill for studying private messaging history and drafting messages that sound like you.",
   "license": "MIT",
   "type": "module",
@@ -92,18 +92,19 @@
     "@hraness/oh": "https://github.com/hraness/oh/releases/download/v0.10.8/hraness-oh-0.10.8.tgz"
   },
   "devDependencies": {
-    "@hraness/agentmixer": "https://github.com/hraness/agentmixer/releases/download/v0.1.1/hraness-agentmixer-0.1.1.tgz",
     "@anthropic-ai/claude-agent-sdk": "0.3.268",
-    "@hraness/desktop-foundation": "https://github.com/hraness/desktop-foundation/releases/download/v0.7.0/hraness-desktop-foundation-0.7.0.tgz",
     "@anthropic-ai/sdk": "0.125.0",
+    "@hraness/agentmixer": "https://github.com/hraness/agentmixer/releases/download/v0.1.1/hraness-agentmixer-0.1.1.tgz",
+    "@hraness/algal": "github:hraness/algal#c5bd50452a676dc0b035ef206178c397de0cba92",
+    "@hraness/desktop-foundation": "https://github.com/hraness/desktop-foundation/releases/download/v0.7.0/hraness-desktop-foundation-0.7.0.tgz",
+    "@hraness/local-custody": "github:hraness/local-custody#v0.4.0",
+    "@hraness/support-foundation": "github:hraness/support-foundation#2d034b357680353574411217d68b02b6755b07ed",
     "@modelcontextprotocol/sdk": "1.30.0",
     "@types/bun": "1.3.14",
     "effect": "3.22.1",
     "fast-check": "4.9.0",
     "sigstore": "4.1.1",
     "typescript": "6.0.3",
-    "zod": "4.6.2",
-    "@hraness/support-foundation": "github:hraness/support-foundation#2d034b357680353574411217d68b02b6755b07ed",
-    "@hraness/local-custody": "github:hraness/local-custody#v0.4.0"
+    "zod": "4.6.2"
   }
 }