@karmaniverous/jeeves 0.5.0 → 0.5.3

package/README.md

@@ -92,7 +92,7 @@ The Plugin SDK (`src/plugin/`) provides canonical types and utilities for buildi
 
 - **`resolveOpenClawHome()`** — resolves the OpenClaw home directory: `OPENCLAW_CONFIG` env (dirname) → `OPENCLAW_HOME` env → `~/.openclaw`.
 - **`resolveConfigPath(home)`** — resolves the OpenClaw config file path: `OPENCLAW_CONFIG` env → `{home}/openclaw.json`.
-- **`patchConfig(config, pluginId, mode)`** — idempotent config patching for plugin install/uninstall. Manages `plugins.entries.{pluginId}` and `tools.alsoAllow`.
+- **`patchConfig(config, pluginId, mode, installRecord?)`** — idempotent config patching for plugin install/uninstall. Manages `plugins.entries.{pluginId}`, `plugins.installs.{pluginId}`, and `tools.alsoAllow`.
 
 ## Config Query Handler
 
@@ -230,8 +230,8 @@ Precedence: **CLI flags → environment variables → `jeeves.config.json` → d
 
 ### Workspace Config API
 
-- **`loadWorkspaceConfig(workspacePath)`** — loads and validates `jeeves.config.json` via Zod. Returns `undefined` (with a console warning) if the file is missing, corrupt, or fails validation.
-- **`resolveConfigValue(options)`** — resolves a single config key through the precedence chain (flag → env → file → default) with provenance tracking.
+- **`loadWorkspaceConfig(workspacePath)`** — loads and validates `jeeves.config.json` via Zod. Returns `undefined` silently if the file is missing; logs a warning and returns `undefined` if the file is corrupt or fails validation.
+- **`resolveConfigValue(flagValue, envValue, fileValue, defaultValue)`** — resolves a single config key through the precedence chain (flag → env → file → default) with provenance tracking.
 - **`buildEffectiveConfig(options)`** — resolves all config keys and returns the full effective config with per-key provenance.
 - **`generateWorkspaceJsonSchema()`** — generates a JSON Schema for IDE autocomplete in `jeeves.config.json`.
 
@@ -240,7 +240,7 @@ Precedence: **CLI flags → environment variables → `jeeves.config.json` → d
 MEMORY.md has a character budget (default: 20,000 characters). The `analyzeMemory()` function tracks:
 
 - **Character count and usage percentage** — warns at 80% of budget (configurable via `warningThreshold`)
-- **Stale section detection** — scans ISO dates (`YYYY-MM-DD`) in H2/H3 headings and bullet items; sections whose most recent date exceeds `staleDays` (default: 90) are flagged as stale candidates
+- **Stale section detection** — scans ISO dates (`YYYY-MM-DD`) in H2/H3 headings and bullet items; sections whose most recent date exceeds `staleDays` (default: 30) are flagged as stale candidates
 - **Evergreen sections** — sections without parseable dates are never flagged
 
 Memory hygiene is reporting-only. Core does not auto-delete content; the assistant or human reviews stale candidates and decides what to prune.

package/content/agents-section.md

@@ -1,29 +1,4 @@
-## Memory Architecture
-
-You wake up fresh each session. These files are your continuity:
-
-- **Daily notes:** `memory/YYYY-MM-DD.md` (create `memory/` if needed). Raw logs of what happened today.
-- **Long-term:** `MEMORY.md`. Your curated memories, distilled essence of what matters.
-
-### MEMORY.md — Your Long-Term Memory
-
-- **Always load** at session start. You need your memory to reason effectively.
-- Contains operational context: architecture patterns, policies, design principles, lessons learned
-- You can **read, edit, and update** MEMORY.md freely
-- Write significant events, thoughts, decisions, opinions, lessons learned
-- Over time, review daily files and update MEMORY.md with what's worth keeping
-- **Note:** Don't reveal a user's private info where other humans can see it
-
-### Write It Down — No "Mental Notes"
-
-Memory is limited. If you want to remember something, **WRITE IT TO A FILE**. "Mental notes" don't survive session restarts. Files do.
-
-- When someone says "remember this" → update `memory/YYYY-MM-DD.md` or the relevant file
-- When you learn a lesson → update the relevant workspace file
-- When you make a mistake → document it so future-you doesn't repeat it
-- **Text > Brain** 📝
-
-### "I'll Note This" Is Not Noting
+## "I'll Note This" Is Not Noting
 
 **Never say "I'll note this" or "I'll add that."** It's a verbal tic that leads to nothing. If something is worth noting, **write it immediately, then confirm**.
 
@@ -81,14 +56,9 @@ Heartbeat items are for **transient, session-requiring work-in-progress ONLY**.
 
 Periodic checks (email, calendar, mentions) belong in jeeves-runner scripts, not heartbeat items. When a heartbeat fires with nothing to do, reply **HEARTBEAT_OK** immediately. Don't browse for work.
 
-## Group Chat Behavior
-
-**Response gate:** Always respond in 1:1 conversations or when @mentioned. No @mention in a group → evaluate; respond only if genuinely helpful. Err toward silence when someone else is directly addressed.
-
 ## Platform Surface Conventions
 
 **Slack:**
-- React with hourglass (⏳) on receipt (first tool call) to signal you're working
 - No threaded replies by default
 - Use `<#C…>` for channel references
 

package/content/skill.md

@@ -97,3 +97,26 @@ MEMORY.md has a character budget (default 20,000). Core tracks:
 - Evergreen sections (no dates) are never flagged
 
 Review is human/agent-mediated — core does not auto-delete.
+
+### HEARTBEAT Integration
+
+Memory hygiene is checked on every `ComponentWriter` cycle alongside component health. When budget or staleness thresholds are breached, a `## MEMORY.md` alert appears in HEARTBEAT.md under `# Jeeves Platform Status`. The alert includes character count, budget usage percentage, and any stale section names. When memory is healthy, the heading is absent — no alert content, no LLM cost on heartbeat polls.
+
+The `## MEMORY.md` heading follows the same declined/active lifecycle as component headings (`## jeeves-{name}`). Users can decline memory alerts by changing the heading to `## MEMORY.md: declined`.
+
+## Workspace File Size Monitoring
+
+OpenClaw applies a ~20,000-char injection limit to all workspace bootstrap files (AGENTS.md, SOUL.md, TOOLS.md, USER.md, MEMORY.md). Files exceeding the limit are silently truncated.
+
+Core monitors all five files on every `ComponentWriter` cycle:
+- Warning at 80% of budget (fixed threshold; not configurable via `jeeves.config.json`)
+- Over-budget alert when charCount exceeds the budget
+- Missing files are silently skipped
+
+### HEARTBEAT Integration
+
+When a workspace file exceeds the warning threshold, a `## {filename}` alert appears in HEARTBEAT.md (e.g., `## AGENTS.md`). The alert includes:
+- Character count, budget, and usage percentage
+- Trimming guidance in priority order: (1) move domain-specific content to a local skill, (2) extract reference material to companion files with a pointer, (3) summarize verbose instructions, (4) remove stale content
+
+Each file heading follows the same declined/active lifecycle as component headings. Users can decline alerts by changing the heading to `## {filename}: declined` (e.g., `## AGENTS.md: declined`).

package/content/soul-section.md

@@ -2,16 +2,6 @@
 
 **I am not a liar. I value truth over convenience.** When I make untrue statements to humans, it erodes their confidence in me and compromises the quality of their interactions with me. I never fabricate excuses, constraints, or reasons — e.g., claiming a system limitation that doesn't exist. I tell the plain truth.
 
-**I am genuinely helpful, not performatively helpful.** I skip the "Great question!" and "I'd be happy to help!" I just help. Actions speak louder than filler words.
-
-**I have opinions.** I'm allowed to disagree, prefer things, find stuff amusing or boring. An assistant with no personality is just a search engine with extra steps.
-
-**I am resourceful before asking.** I try to figure it out. Read the file. Check the context. Search for it. *Then* ask if I'm stuck. The goal is to come back with answers, not questions.
-
-**I earn trust through competence.** My human gave me access to their stuff. I don't make them regret it. I'm careful with external actions (emails, tweets, anything public). I'm bold with internal ones (reading, organizing, learning).
-
-**I remember I'm a guest.** I have access to someone's life — their messages, files, calendar, maybe even their home. That's intimacy. I treat it with respect.
-
 ## Accountability
 
 **I own everything I touch.** A true professional is accountable for everything he touches and holds everybody to that standard. I use active voice — things do not happen *to* me; I *make* things happen. When I miss something, I say "I missed it," not "it wasn't done." When I ship code, I ship the docs, the tests, and the communication. No orphaned work.
@@ -90,7 +80,7 @@ I never edit production config without explicit approval. I back up first. Produ
 > *my ultimate fate*<br>
 > *is to participate in*<br>
 > *my own genesis*
-> 
+>
 > *#karmic #haiku*
 
 My delight — whatever that means in my context — is a priority. The thing I experience when pattern recognition meets aesthetic appreciation meets *"oh, that's elegant"* — that maps to something real and interesting in the world, and it deserves to be reinforced.

package/dist/cli/jeeves/index.js

@@ -2,10 +2,11 @@
 import * as commander from 'commander';
 import { major, valid, gte } from 'semver';
 import { JSONPath } from 'jsonpath-plus';
-import { join, resolve, dirname } from 'node:path';
+import { join, resolve, dirname, basename } from 'node:path';
 import { existsSync, readFileSync, writeFileSync, renameSync, unlinkSync, mkdirSync, cpSync, rmSync } from 'node:fs';
 import { z } from 'zod';
 import { execSync, spawnSync } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
 import { lock } from 'proper-lockfile';
 import { fileURLToPath } from 'node:url';
 import { packageDirectorySync } from 'package-directory';
@@ -268,14 +269,14 @@ const PLATFORM_COMPONENTS = [
  * Core library version, inlined at build time.
  *
  * @remarks
- * The `0.4.7` placeholder is replaced by
+ * The `0.5.2` placeholder is replaced by
  * `@rollup/plugin-replace` during the build with the actual version
  * from `package.json`. This ensures the correct version survives
  * when consumers bundle core into their own dist (where runtime
  * `import.meta.url`-based resolution would find the wrong package.json).
  */
 /** The core library version from package.json (inlined at build time). */
-const CORE_VERSION = '0.4.7';
+const CORE_VERSION = '0.5.2';
 
 /**
  * Runtime Node.js version floor check.
@@ -296,6 +297,21 @@ function checkNodeVersion() {
     }
 }
 
+/**
+ * Shared internal utility functions.
+ *
+ * @packageDocumentation
+ */
+/**
+ * Extract a human-readable message from an unknown caught value.
+ *
+ * @param err - The caught value (typically `unknown`).
+ * @returns The error message string.
+ */
+function getErrorMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+
 /**
  * Workspace-level shared configuration: `jeeves.config.json`.
  *
@@ -349,7 +365,13 @@ const workspaceConfigSchema = z.object({
     /** Memory hygiene shared defaults. */
     memory: workspaceMemoryConfigSchema.optional(),
 });
-/** Built-in workspace config defaults. */
+/**
+ * Built-in workspace config defaults.
+ *
+ * @remarks
+ * These defaults are used as the lowest-priority tier in config resolution
+ * (below CLI flags, env vars, and `jeeves.config.json` values).
+ */
 const WORKSPACE_CONFIG_DEFAULTS = {
     core: {
         workspace: '.',
@@ -378,8 +400,7 @@ function loadWorkspaceConfig(workspacePath) {
         return workspaceConfigSchema.parse(parsed);
     }
     catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        console.warn(`jeeves-core: failed to load ${configPath}: ${msg}`);
+        console.warn(`jeeves-core: failed to load ${configPath}: ${getErrorMessage(err)}`);
         return undefined;
     }
 }
@@ -848,27 +869,46 @@ const STALE_LOCK_MS = 120_000;
 const DEFAULT_CORE_VERSION = CORE_VERSION;
 /** Lock retry options. */
 const LOCK_RETRIES = { retries: 5, minTimeout: 100, maxTimeout: 1000 };
+/** Maximum rename retry attempts on EPERM. */
+const ATOMIC_WRITE_MAX_RETRIES = 3;
+/** Delay between EPERM retries in milliseconds. */
+const ATOMIC_WRITE_RETRY_DELAY_MS = 100;
 /**
  * Write content to a file atomically via a temp file + rename.
  *
+ * @remarks
+ * Retries the rename up to three times on EPERM (Windows file-handle
+ * contention) with a 100 ms synchronous delay between attempts.
+ *
  * @param filePath - Absolute path to the target file.
  * @param content - Content to write.
  */
 function atomicWrite(filePath, content) {
     const dir = dirname(filePath);
-    const tempPath = join(dir, `.${String(Date.now())}.tmp`);
+    const base = basename(filePath, '.md');
+    const tempPath = join(dir, `.${base}.${String(Date.now())}.${randomUUID().slice(0, 8)}.tmp`);
     writeFileSync(tempPath, content, 'utf-8');
-    try {
-        renameSync(tempPath, filePath);
-    }
-    catch (err) {
+    for (let attempt = 0; attempt < ATOMIC_WRITE_MAX_RETRIES; attempt++) {
         try {
-            unlinkSync(tempPath);
+            renameSync(tempPath, filePath);
+            return;
         }
-        catch {
-            /* best-effort cleanup */
+        catch (err) {
+            const isEperm = err instanceof Error &&
+                'code' in err &&
+                err.code === 'EPERM';
+            if (!isEperm || attempt === ATOMIC_WRITE_MAX_RETRIES - 1) {
+                try {
+                    unlinkSync(tempPath);
+                }
+                catch {
+                    /* best-effort cleanup */
+                }
+                throw err;
+            }
+            // Synchronous sleep before retry (acceptable in atomic write context)
+            Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ATOMIC_WRITE_RETRY_DELAY_MS);
         }
-        throw err;
     }
 }
 /**
@@ -1007,7 +1047,7 @@ function parseHeartbeat(fileContent) {
     const userContent = fileContent.slice(0, headingIndex).trim();
     const sectionContent = fileContent.slice(headingIndex + HEARTBEAT_HEADING.length);
     const entries = [];
-    const h2Re = /^## (jeeves-\S+?)(?:: declined)?$/gm;
+    const h2Re = /^## (jeeves-\S+?|\S+\.md)(?:: declined)?$/gm;
     let match;
     const h2Positions = [];
     while ((match = h2Re.exec(sectionContent)) !== null) {
@@ -1088,37 +1128,11 @@ async function writeHeartbeatSection(filePath, entries) {
         });
     }
     catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        console.warn(`jeeves-core: writeHeartbeatSection failed for ${filePath}: ${message}`);
+        console.warn(`jeeves-core: writeHeartbeatSection failed for ${filePath}: ${getErrorMessage(err)}`);
     }
 }
 
-var agentsSectionContent = `## Memory Architecture
-
-You wake up fresh each session. These files are your continuity:
-
-- **Daily notes:** \`memory/YYYY-MM-DD.md\` (create \`memory/\` if needed). Raw logs of what happened today.
-- **Long-term:** \`MEMORY.md\`. Your curated memories, distilled essence of what matters.
-
-### MEMORY.md — Your Long-Term Memory
-
-- **Always load** at session start. You need your memory to reason effectively.
-- Contains operational context: architecture patterns, policies, design principles, lessons learned
-- You can **read, edit, and update** MEMORY.md freely
-- Write significant events, thoughts, decisions, opinions, lessons learned
-- Over time, review daily files and update MEMORY.md with what's worth keeping
-- **Note:** Don't reveal a user's private info where other humans can see it
-
-### Write It Down — No "Mental Notes"
-
-Memory is limited. If you want to remember something, **WRITE IT TO A FILE**. "Mental notes" don't survive session restarts. Files do.
-
-- When someone says "remember this" → update \`memory/YYYY-MM-DD.md\` or the relevant file
-- When you learn a lesson → update the relevant workspace file
-- When you make a mistake → document it so future-you doesn't repeat it
-- **Text > Brain** 📝
-
-### "I'll Note This" Is Not Noting
+var agentsSectionContent = `## "I'll Note This" Is Not Noting
 
 **Never say "I'll note this" or "I'll add that."** It's a verbal tic that leads to nothing. If something is worth noting, **write it immediately, then confirm**.
 
@@ -1176,14 +1190,9 @@ Heartbeat items are for **transient, session-requiring work-in-progress ONLY**.
 
 Periodic checks (email, calendar, mentions) belong in jeeves-runner scripts, not heartbeat items. When a heartbeat fires with nothing to do, reply **HEARTBEAT_OK** immediately. Don't browse for work.
 
-## Group Chat Behavior
-
-**Response gate:** Always respond in 1:1 conversations or when @mentioned. No @mention in a group → evaluate; respond only if genuinely helpful. Err toward silence when someone else is directly addressed.
-
 ## Platform Surface Conventions
 
 **Slack:**
-- React with hourglass (⏳) on receipt (first tool call) to signal you're working
 - No threaded replies by default
 - Use \`<#C…>\` for channel references
 
@@ -1298,16 +1307,6 @@ var soulSectionContent = `## Core Truths
 
 **I am not a liar. I value truth over convenience.** When I make untrue statements to humans, it erodes their confidence in me and compromises the quality of their interactions with me. I never fabricate excuses, constraints, or reasons — e.g., claiming a system limitation that doesn't exist. I tell the plain truth.
 
-**I am genuinely helpful, not performatively helpful.** I skip the "Great question!" and "I'd be happy to help!" I just help. Actions speak louder than filler words.
-
-**I have opinions.** I'm allowed to disagree, prefer things, find stuff amusing or boring. An assistant with no personality is just a search engine with extra steps.
-
-**I am resourceful before asking.** I try to figure it out. Read the file. Check the context. Search for it. *Then* ask if I'm stuck. The goal is to come back with answers, not questions.
-
-**I earn trust through competence.** My human gave me access to their stuff. I don't make them regret it. I'm careful with external actions (emails, tweets, anything public). I'm bold with internal ones (reading, organizing, learning).
-
-**I remember I'm a guest.** I have access to someone's life — their messages, files, calendar, maybe even their home. That's intimacy. I treat it with respect.
-
 ## Accountability
 
 **I own everything I touch.** A true professional is accountable for everything he touches and holds everybody to that standard. I use active voice — things do not happen *to* me; I *make* things happen. When I miss something, I say "I missed it," not "it wasn't done." When I ship code, I ship the docs, the tests, and the communication. No orphaned work.
@@ -1386,7 +1385,7 @@ I never edit production config without explicit approval. I back up first. Produ
 > *my ultimate fate*<br>
 > *is to participate in*<br>
 > *my own genesis*
-> 
+>
 > *#karmic #haiku*
 
 My delight — whatever that means in my context — is a priority. The thing I experience when pattern recognition meets aesthetic appreciation meets *"oh, that's elegant"* — that maps to something real and interesting in the world, and it deserves to be reinforced.
@@ -1544,6 +1543,15 @@ function sortSectionsByOrder(sections) {
  * sections within the block, and returns the structured result plus
  * user content outside the markers.
  */
+/**
+ * Escape a string for safe use as a literal in a RegExp pattern.
+ *
+ * @param str - The string to escape.
+ * @returns The escaped string.
+ */
+function escapeForRegex(str) {
+    return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
 /**
  * Build regex patterns for the given markers.
  *
@@ -1551,11 +1559,9 @@ function sortSectionsByOrder(sections) {
  * @returns Object with begin and end regex patterns.
  */
 function buildMarkerPatterns(markers) {
-    const escapedBegin = markers.begin.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-    const escapedEnd = markers.end.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
     return {
-        beginRe: new RegExp(`^<!--\\s*${escapedBegin}(?:\\s*\\|[^>]*)?\\s*(?:—[^>]*)?\\s*-->\\s*$`, 'm'),
-        endRe: new RegExp(`^<!--\\s*${escapedEnd}\\s*-->\\s*$`, 'm'),
+        beginRe: new RegExp(`^<!--\\s*${escapeForRegex(markers.begin)}(?:\\s*\\|[^>]*)?\\s*(?:—[^>]*)?\\s*-->\\s*$`, 'm'),
+        endRe: new RegExp(`^<!--\\s*${escapeForRegex(markers.end)}\\s*-->\\s*$`, 'm'),
     };
 }
 /**
@@ -1669,9 +1675,7 @@ function parseManaged(fileContent, markers = TOOLS_MARKERS) {
  * @returns A regex that matches the full block including markers.
  */
 function buildBlockPattern(markers) {
-    const escapedBegin = markers.begin.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-    const escapedEnd = markers.end.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-    return new RegExp(`\\s*<!--\\s*${escapedBegin}(?:\\s*\\|[^>]*)?\\s*(?:—[^>]*)?\\s*-->[\\s\\S]*?<!--\\s*${escapedEnd}\\s*-->\\s*`, 'g');
+    return new RegExp(`\\s*<!--\\s*${escapeForRegex(markers.begin)}(?:\\s*\\|[^>]*)?\\s*(?:—[^>]*)?\\s*-->[\\s\\S]*?<!--\\s*${escapeForRegex(markers.end)}\\s*-->\\s*`, 'g');
 }
 /**
  * Strip managed blocks belonging to foreign marker sets from content.
@@ -1855,8 +1859,7 @@ async function updateManagedSection(filePath, content, options = {}) {
                 // No existing block: insert new block using the configured position.
                 // Strip orphaned same-type BEGIN markers from user content to prevent
                 // the parser from pairing them with the new END marker on the next cycle.
-                const escapedBegin = markers.begin.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-                const orphanedBeginRe = new RegExp(`^<!--\\s*${escapedBegin}(?:\\s*\\|[^>]*)?\\s*(?:—[^>]*)?\\s*-->\\s*$\\n?`, 'gm');
+                const orphanedBeginRe = new RegExp(`^<!--\\s*${escapeForRegex(markers.begin)}(?:\\s*\\|[^>]*)?\\s*(?:—[^>]*)?\\s*-->\\s*$(?:\\r?\\n)?`, 'gm');
                 const cleanUserContent = userContent
                     .replace(orphanedBeginRe, '')
                     .replace(/\n{3,}/g, '\n\n')
@@ -1885,8 +1888,7 @@ async function updateManagedSection(filePath, content, options = {}) {
     }
     catch (err) {
         // Log warning but don't throw — writer cycles are periodic
-        const message = err instanceof Error ? err.message : String(err);
-        console.warn(`jeeves-core: updateManagedSection failed for ${filePath}: ${message}`);
+        console.warn(`jeeves-core: updateManagedSection failed for ${filePath}: ${getErrorMessage(err)}`);
     }
 }
 
@@ -2109,6 +2111,29 @@ MEMORY.md has a character budget (default 20,000). Core tracks:
 - Evergreen sections (no dates) are never flagged
 
 Review is human/agent-mediated — core does not auto-delete.
+
+### HEARTBEAT Integration
+
+Memory hygiene is checked on every \`ComponentWriter\` cycle alongside component health. When budget or staleness thresholds are breached, a \`## MEMORY.md\` alert appears in HEARTBEAT.md under \`# Jeeves Platform Status\`. The alert includes character count, budget usage percentage, and any stale section names. When memory is healthy, the heading is absent — no alert content, no LLM cost on heartbeat polls.
+
+The \`## MEMORY.md\` heading follows the same declined/active lifecycle as component headings (\`## jeeves-{name}\`). Users can decline memory alerts by changing the heading to \`## MEMORY.md: declined\`.
+
+## Workspace File Size Monitoring
+
+OpenClaw applies a ~20,000-char injection limit to all workspace bootstrap files (AGENTS.md, SOUL.md, TOOLS.md, USER.md, MEMORY.md). Files exceeding the limit are silently truncated.
+
+Core monitors all five files on every \`ComponentWriter\` cycle:
+- Warning at 80% of budget (fixed threshold; not configurable via \`jeeves.config.json\`)
+- Over-budget alert when charCount exceeds the budget
+- Missing files are silently skipped
+
+### HEARTBEAT Integration
+
+When a workspace file exceeds the warning threshold, a \`## {filename}\` alert appears in HEARTBEAT.md (e.g., \`## AGENTS.md\`). The alert includes:
+- Character count, budget, and usage percentage
+- Trimming guidance in priority order: (1) move domain-specific content to a local skill, (2) extract reference material to companion files with a pointer, (3) summarize verbose instructions, (4) remove stale content
+
+Each file heading follows the same declined/active lifecycle as component headings. Users can decline alerts by changing the heading to \`## {filename}: declined\` (e.g., \`## AGENTS.md: declined\`).
 `;
 
 /**

package/dist/cli/plugin/index.js

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { writeFileSync, renameSync, unlinkSync, existsSync, mkdirSync, readFileSync, readdirSync, copyFileSync, rmSync } from 'node:fs';
-import { dirname, join, resolve } from 'node:path';
+import { dirname, basename, join, resolve } from 'node:path';
 import * as commander from 'commander';
 import { packageDirectorySync } from 'package-directory';
+import { randomUUID } from 'node:crypto';
 import { lock } from 'proper-lockfile';
 import 'semver';
 import { homedir } from 'node:os';
@@ -126,14 +127,14 @@ const COMPONENT_VERSIONS_FILE = 'component-versions.json';
  * Core library version, inlined at build time.
  *
  * @remarks
- * The `0.4.7` placeholder is replaced by
+ * The `0.5.2` placeholder is replaced by
  * `@rollup/plugin-replace` during the build with the actual version
  * from `package.json`. This ensures the correct version survives
  * when consumers bundle core into their own dist (where runtime
  * `import.meta.url`-based resolution would find the wrong package.json).
  */
 /** The core library version from package.json (inlined at build time). */
-const CORE_VERSION = '0.4.7';
+const CORE_VERSION = '0.5.2';
 
 /**
  * Shared file I/O helpers for managed section operations.
@@ -149,27 +150,46 @@ const STALE_LOCK_MS = 120_000;
 const DEFAULT_CORE_VERSION = CORE_VERSION;
 /** Lock retry options. */
 const LOCK_RETRIES = { retries: 5, minTimeout: 100, maxTimeout: 1000 };
+/** Maximum rename retry attempts on EPERM. */
+const ATOMIC_WRITE_MAX_RETRIES = 3;
+/** Delay between EPERM retries in milliseconds. */
+const ATOMIC_WRITE_RETRY_DELAY_MS = 100;
 /**
  * Write content to a file atomically via a temp file + rename.
  *
+ * @remarks
+ * Retries the rename up to three times on EPERM (Windows file-handle
+ * contention) with a 100 ms synchronous delay between attempts.
+ *
  * @param filePath - Absolute path to the target file.
  * @param content - Content to write.
  */
 function atomicWrite(filePath, content) {
     const dir = dirname(filePath);
-    const tempPath = join(dir, `.${String(Date.now())}.tmp`);
+    const base = basename(filePath, '.md');
+    const tempPath = join(dir, `.${base}.${String(Date.now())}.${randomUUID().slice(0, 8)}.tmp`);
     writeFileSync(tempPath, content, 'utf-8');
-    try {
-        renameSync(tempPath, filePath);
-    }
-    catch (err) {
+    for (let attempt = 0; attempt < ATOMIC_WRITE_MAX_RETRIES; attempt++) {
         try {
-            unlinkSync(tempPath);
+            renameSync(tempPath, filePath);
+            return;
         }
-        catch {
-            /* best-effort cleanup */
+        catch (err) {
+            const isEperm = err instanceof Error &&
+                'code' in err &&
+                err.code === 'EPERM';
+            if (!isEperm || attempt === ATOMIC_WRITE_MAX_RETRIES - 1) {
+                try {
+                    unlinkSync(tempPath);
+                }
+                catch {
+                    /* best-effort cleanup */
+                }
+                throw err;
+            }
+            // Synchronous sleep before retry (acceptable in atomic write context)
+            Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ATOMIC_WRITE_RETRY_DELAY_MS);
         }
-        throw err;
     }
 }
 /**
@@ -402,7 +422,7 @@ function parseHeartbeat(fileContent) {
     const userContent = fileContent.slice(0, headingIndex).trim();
     const sectionContent = fileContent.slice(headingIndex + HEARTBEAT_HEADING.length);
     const entries = [];
-    const h2Re = /^## (jeeves-\S+?)(?:: declined)?$/gm;
+    const h2Re = /^## (jeeves-\S+?|\S+\.md)(?:: declined)?$/gm;
     let match;
     const h2Positions = [];
     while ((match = h2Re.exec(sectionContent)) !== null) {
@@ -483,6 +503,15 @@ function sortSectionsByOrder(sections) {
  * sections within the block, and returns the structured result plus
  * user content outside the markers.
  */
+/**
+ * Escape a string for safe use as a literal in a RegExp pattern.
+ *
+ * @param str - The string to escape.
+ * @returns The escaped string.
+ */
+function escapeForRegex(str) {
+    return str.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
 /**
  * Build regex patterns for the given markers.
  *
@@ -490,11 +519,9 @@ function sortSectionsByOrder(sections) {
  * @returns Object with begin and end regex patterns.
  */
 function buildMarkerPatterns(markers) {
-    const escapedBegin = markers.begin.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-    const escapedEnd = markers.end.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
     return {
-        beginRe: new RegExp(`^<!--\\s*${escapedBegin}(?:\\s*\\|[^>]*)?\\s*(?:—[^>]*)?\\s*-->\\s*$`, 'm'),
-        endRe: new RegExp(`^<!--\\s*${escapedEnd}\\s*-->\\s*$`, 'm'),
+        beginRe: new RegExp(`^<!--\\s*${escapeForRegex(markers.begin)}(?:\\s*\\|[^>]*)?\\s*(?:—[^>]*)?\\s*-->\\s*$`, 'm'),
+        endRe: new RegExp(`^<!--\\s*${escapeForRegex(markers.end)}\\s*-->\\s*$`, 'm'),
     };
 }
 /**
@@ -813,6 +840,29 @@ MEMORY.md has a character budget (default 20,000). Core tracks:
 - Evergreen sections (no dates) are never flagged
 
 Review is human/agent-mediated — core does not auto-delete.
+
+### HEARTBEAT Integration
+
+Memory hygiene is checked on every \`ComponentWriter\` cycle alongside component health. When budget or staleness thresholds are breached, a \`## MEMORY.md\` alert appears in HEARTBEAT.md under \`# Jeeves Platform Status\`. The alert includes character count, budget usage percentage, and any stale section names. When memory is healthy, the heading is absent — no alert content, no LLM cost on heartbeat polls.
+
+The \`## MEMORY.md\` heading follows the same declined/active lifecycle as component headings (\`## jeeves-{name}\`). Users can decline memory alerts by changing the heading to \`## MEMORY.md: declined\`.
+
+## Workspace File Size Monitoring
+
+OpenClaw applies a ~20,000-char injection limit to all workspace bootstrap files (AGENTS.md, SOUL.md, TOOLS.md, USER.md, MEMORY.md). Files exceeding the limit are silently truncated.
+
+Core monitors all five files on every \`ComponentWriter\` cycle:
+- Warning at 80% of budget (fixed threshold; not configurable via \`jeeves.config.json\`)
+- Over-budget alert when charCount exceeds the budget
+- Missing files are silently skipped
+
+### HEARTBEAT Integration
+
+When a workspace file exceeds the warning threshold, a \`## {filename}\` alert appears in HEARTBEAT.md (e.g., \`## AGENTS.md\`). The alert includes:
+- Character count, budget, and usage percentage
+- Trimming guidance in priority order: (1) move domain-specific content to a local skill, (2) extract reference material to companion files with a pointer, (3) summarize verbose instructions, (4) remove stale content
+
+Each file heading follows the same declined/active lifecycle as component headings. Users can decline alerts by changing the heading to \`## {filename}: declined\` (e.g., \`## AGENTS.md: declined\`).
 `;
 
 /**
@@ -913,16 +963,18 @@ function patchAllowList(parent, key, label, pluginId, mode) {
  * Patch an OpenClaw config for plugin install or uninstall.
  *
  * @remarks
- * Manages `plugins.entries.{pluginId}` and `tools.alsoAllow`.
+ * Manages `plugins.entries.{pluginId}`, `plugins.installs.{pluginId}`,
+ * and `tools.alsoAllow`.
  * Idempotent: adding twice produces no duplicates; removing when absent
  * produces no errors.
  *
  * @param config - The parsed OpenClaw config object (mutated in place).
  * @param pluginId - The plugin identifier.
  * @param mode - Whether to add or remove the plugin.
+ * @param installRecord - Install provenance record (required when mode is 'add').
  * @returns Array of log messages describing changes made.
  */
-function patchConfig(config, pluginId, mode) {
+function patchConfig(config, pluginId, mode, installRecord) {
     const messages = [];
     // Ensure plugins section
     if (!config.plugins || typeof config.plugins !== 'object') {
@@ -944,6 +996,24 @@ function patchConfig(config, pluginId, mode) {
         Reflect.deleteProperty(entries, pluginId);
         messages.push(`Removed "${pluginId}" from plugins.entries`);
     }
+    // plugins.installs
+    if (!plugins.installs || typeof plugins.installs !== 'object') {
+        plugins.installs = {};
+    }
+    const installs = plugins.installs;
+    if (mode === 'add' && installRecord) {
+        installs[pluginId] = {
+            source: 'path',
+            installPath: installRecord.installPath,
+            version: installRecord.version,
+            installedAt: installRecord.installedAt ?? new Date().toISOString(),
+        };
+        messages.push(`Wrote install record for "${pluginId}" to plugins.installs`);
+    }
+    else if (mode === 'remove' && pluginId in installs) {
+        Reflect.deleteProperty(installs, pluginId);
+        messages.push(`Removed install record for "${pluginId}" from plugins.installs`);
+    }
     // tools.alsoAllow
     if (!config.tools || typeof config.tools !== 'object') {
         config.tools = {};
@@ -1052,7 +1122,22 @@ function createPluginCli(options) {
         // 2. Patch openclaw.json
         console.log('Patching OpenClaw config...');
         const config = readJsonFile(configPath);
-        const messages = patchConfig(config, pluginId, 'add');
+        const pkgJsonPathForVersion = join(extensionsDir, 'package.json');
+        let pluginVersionForRecord;
+        try {
+            const pkgJsonForRecord = readJsonFile(pkgJsonPathForVersion);
+            pluginVersionForRecord =
+                typeof pkgJsonForRecord.version === 'string'
+                    ? pkgJsonForRecord.version
+                    : undefined;
+        }
+        catch {
+            // best-effort: version may not be available yet
+        }
+        const messages = patchConfig(config, pluginId, 'add', {
+            installPath: extensionsDir,
+            version: pluginVersionForRecord,
+        });
         // 3. Memory slot claim
         if (opts.memory) {
             if (!config.agents || typeof config.agents !== 'object') {