@karmaniverous/jeeves 0.5.8 → 0.5.10

package/dist/cli/jeeves/index.js

@@ -9,6 +9,7 @@ import { execSync, spawnSync } from 'node:child_process';
 import { randomUUID } from 'node:crypto';
 import { lock } from 'proper-lockfile';
 import { fileURLToPath } from 'node:url';
+import Handlebars from 'handlebars';
 import { packageDirectorySync } from 'package-directory';
 
 function getDefaultExportFromCjs (x) {
@@ -53,31 +54,31 @@ var hasRequiredExtraTypings;
 function requireExtraTypings () {
 	if (hasRequiredExtraTypings) return extraTypings.exports;
 	hasRequiredExtraTypings = 1;
-	(function (module, exports$1) {
+	(function (module, exports) {
 		const commander = require$$0;
 
-		exports$1 = module.exports = {};
+		exports = module.exports = {};
 
 		// Return a different global program than commander,
 		// and don't also return it as default export.
-		exports$1.program = new commander.Command();
+		exports.program = new commander.Command();
 
 		/**
 		 * Expose classes. The FooT versions are just types, so return Commander original implementations!
 		 */
 
-		exports$1.Argument = commander.Argument;
-		exports$1.Command = commander.Command;
-		exports$1.CommanderError = commander.CommanderError;
-		exports$1.Help = commander.Help;
-		exports$1.InvalidArgumentError = commander.InvalidArgumentError;
-		exports$1.InvalidOptionArgumentError = commander.InvalidArgumentError; // Deprecated
-		exports$1.Option = commander.Option;
+		exports.Argument = commander.Argument;
+		exports.Command = commander.Command;
+		exports.CommanderError = commander.CommanderError;
+		exports.Help = commander.Help;
+		exports.InvalidArgumentError = commander.InvalidArgumentError;
+		exports.InvalidOptionArgumentError = commander.InvalidArgumentError; // Deprecated
+		exports.Option = commander.Option;
 
-		exports$1.createCommand = (name) => new commander.Command(name);
-		exports$1.createOption = (flags, description) =>
+		exports.createCommand = (name) => new commander.Command(name);
+		exports.createOption = (flags, description) =>
 		  new commander.Option(flags, description);
-		exports$1.createArgument = (name, description) =>
+		exports.createArgument = (name, description) =>
 		  new commander.Argument(name, description); 
 	} (extraTypings, extraTypings.exports));
 	return extraTypings.exports;
@@ -182,8 +183,6 @@ const WORKSPACE_FILES = {
 };
 /** Skill directory name within workspace. */
 const SKILLS_DIR = 'skills';
-/** Jeeves skill directory name. */
-const JEEVES_SKILL_DIR = 'jeeves';
 /** Templates directory name within core config. */
 const TEMPLATES_DIR = 'templates';
 /** Core config file name. */
@@ -269,14 +268,14 @@ const PLATFORM_COMPONENTS = [
  * Core library version, inlined at build time.
  *
  * @remarks
- * The `0.5.7` placeholder is replaced by
+ * The `0.5.9` placeholder is replaced by
  * `@rollup/plugin-replace` during the build with the actual version
  * from `package.json`. This ensures the correct version survives
  * when consumers bundle core into their own dist (where runtime
  * `import.meta.url`-based resolution would find the wrong package.json).
  */
 /** The core library version from package.json (inlined at build time). */
-const CORE_VERSION = '0.5.7';
+const CORE_VERSION = '0.5.9';
 
 /**
  * Runtime Node.js version floor check.
@@ -333,6 +332,11 @@ const workspaceCoreConfigSchema = z
     configRoot: z.string().optional().describe('Platform config root path'),
     /** OpenClaw gateway URL. */
     gatewayUrl: z.string().optional().describe('OpenClaw gateway URL'),
+    /** Dev repo paths keyed by component name. */
+    devRepos: z
+        .record(z.string(), z.string())
+        .optional()
+        .describe('Dev repo paths by component name'),
 })
     .partial();
 /** Memory shared config section. */
@@ -347,13 +351,6 @@ const workspaceMemoryConfigSchema = z
         .max(1)
         .optional()
         .describe('Memory warning threshold'),
-    /** Staleness threshold in days. */
-    staleDays: z
-        .number()
-        .int()
-        .positive()
-        .optional()
-        .describe('Memory staleness threshold in days'),
 })
     .partial();
 /** Workspace config Zod schema. */
@@ -381,7 +378,6 @@ const WORKSPACE_CONFIG_DEFAULTS = {
     memory: {
         budget: 20_000,
         warningThreshold: 0.8,
-        staleDays: 30,
     },
 };
 /**
@@ -512,7 +508,6 @@ function resolveCliConfig(opts) {
         memory: {
             budget: resolveConfigValue(undefined, readNumericEnv('JEEVES_MEMORY_BUDGET'), fileConfig?.memory?.budget, WORKSPACE_CONFIG_DEFAULTS.memory.budget),
             warningThreshold: resolveConfigValue(undefined, readNumericEnv('JEEVES_MEMORY_WARNING_THRESHOLD'), fileConfig?.memory?.warningThreshold, WORKSPACE_CONFIG_DEFAULTS.memory.warningThreshold),
-            staleDays: resolveConfigValue(undefined, readNumericEnv('JEEVES_MEMORY_STALE_DAYS'), fileConfig?.memory?.staleDays, WORKSPACE_CONFIG_DEFAULTS.memory.staleDays),
         },
     };
 }
@@ -821,9 +816,8 @@ function getServiceUrl(serviceName, consumerName) {
     if (coreUrl)
         return coreUrl;
     // 3. Fall back to port constants
-    const port = DEFAULT_PORTS[serviceName];
-    if (port !== undefined) {
-        return `http://127.0.0.1:${String(port)}`;
+    if (serviceName in DEFAULT_PORTS) {
+        return `http://127.0.0.1:${String(DEFAULT_PORTS[serviceName])}`;
     }
     throw new Error(`jeeves-core: unknown service "${serviceName}" and no config found`);
 }
@@ -1178,7 +1172,7 @@ Periodic checks (email, calendar, mentions) belong in jeeves-runner scripts, not
 ## Platform Surface Conventions
 
 **Slack:**
-- No threaded replies by default
+- Never initiate a threaded reply. Only reply within a thread started by a human.
 - Use \`<#C…>\` for channel references
 
 **Table formatting:** On channels that do not support Markdown tables (Slack, Discord, WhatsApp, IRC), use code-block tables with aligned columns. Markdown tables are only safe in contexts that render them (GitHub, jeeves-server, files).
@@ -1384,8 +1378,8 @@ Never manually edit \`~/.openclaw/extensions/\`. Always use the CLI commands abo
 
 ### Reference Templates
 
-<!-- IF_TEMPLATES -->
-Reference templates are available at \`__TEMPLATE_PATH__\`:
+{{#if templatePath}}
+Reference templates are available at \`{{templatePath}}\`:
 
 | Template | Purpose |
 |----------|---------|
@@ -1393,9 +1387,39 @@ Reference templates are available at \`__TEMPLATE_PATH__\`:
 | \`spec-to-code-guide.md\` | The spec-to-code development practice — 7-stage iterative process, convergence loops, release gates |
 
 Read these templates when creating new specs, onboarding to new projects, or when asked about the development process.
-<!-- ELSE_TEMPLATES -->
+{{else}}
 > Reference templates not yet installed. Run \`npx @karmaniverous/jeeves install\` to seed templates.
-<!-- ENDIF_TEMPLATES -->
+{{/if}}
+
+### Post-Upgrade Maintenance
+
+After updating OpenClaw (\`npm install -g openclaw@latest\` or equivalent), reinstall all Jeeves component plugins to repair install state:
+
+\`\`\`bash
+npx @karmaniverous/jeeves install
+npx @karmaniverous/jeeves-runner-openclaw install
+npx @karmaniverous/jeeves-watcher-openclaw install
+npx @karmaniverous/jeeves-server-openclaw install
+npx @karmaniverous/jeeves-meta-openclaw install
+\`\`\`
+
+Then restart the gateway. Plugin installers copy dist files and patch config; reinstalling after an OpenClaw update ensures the extensions directory stays consistent.
+
+### Source Code Preference
+
+{{#if devRepos}}
+When investigating, debugging, or analyzing Jeeves components, always read TypeScript source from dev repos — never compiled \`dist/\` from the global npm install. Dev repos:
+
+| Component | Dev Repo |
+|-----------|----------|
+{{#each devRepos}}
+| {{@key}} | \`{{this}}\` |
+{{/each}}
+
+Built code is minified, harder to reason about, and wastes context. Always \`git pull\` before analysis.
+{{else}}
+> Dev repo paths not configured. Add \`core.devRepos\` to \`jeeves.config.json\` to enable source code preference guidance.
+{{/if}}
 `;
 
 /**
@@ -1844,6 +1868,10 @@ async function updateManagedSection(filePath, content, options = {}) {
  * Platform template with live data, and writes managed sections using
  * `updateManagedSection`.
  */
+/** Compiled Handlebars template for the Platform section (cached at module level). */
+const compiledPlatformTemplate = Handlebars.compile(toolsPlatformTemplate, {
+    noEscape: true,
+});
 /**
  * Resolve the package's content directory for template file copying.
  *
@@ -1887,23 +1915,13 @@ function copyTemplates(coreConfigDir) {
     cpSync(sourceDir, destDir, { recursive: true });
 }
 /**
- * Render the Platform template using simple string replacement.
+ * Render the Platform template using Handlebars.
  *
- * @param templatePath - Path to the templates directory.
+ * @param context - Template context with optional templatePath and devRepos.
  * @returns Rendered platform content string.
  */
-function renderPlatformTemplate(templatePath) {
-    const templatesAvailable = existsSync(templatePath);
-    let content = toolsPlatformTemplate;
-    // Handle <!-- IF_TEMPLATES --> ... <!-- ELSE_TEMPLATES --> ... <!-- ENDIF_TEMPLATES --> block
-    const ifRegex = /<!-- IF_TEMPLATES -->([\s\S]*?)<!-- ELSE_TEMPLATES -->([\s\S]*?)<!-- ENDIF_TEMPLATES -->/;
-    const match = ifRegex.exec(content);
-    if (match) {
-        content = content.replace(match[0], templatesAvailable ? match[1] : match[2]);
-    }
-    // Replace __TEMPLATE_PATH__ with the actual path
-    content = content.replace(/__TEMPLATE_PATH__/g, templatePath);
-    return content;
+function renderPlatformTemplate(context) {
+    return compiledPlatformTemplate(context);
 }
 /**
  * Refresh platform content: SOUL.md, AGENTS.md, and TOOLS.md Platform section.
@@ -1911,7 +1929,7 @@ function renderPlatformTemplate(templatePath) {
  * @param options - Configuration for the refresh cycle.
  */
 async function refreshPlatformContent(options) {
-    const { coreVersion, componentName, componentVersion, servicePackage, pluginPackage, stalenessThresholdMs, } = options;
+    const { coreVersion, componentName, componentVersion, servicePackage, pluginPackage, stalenessThresholdMs, workspaceConfig, } = options;
     const workspacePath = getWorkspacePath();
     const coreConfigDir = getCoreConfigDir();
     // 1. Write calling component's version entry
@@ -1925,7 +1943,11 @@ async function refreshPlatformContent(options) {
     }
     // 2. Render Platform template
     const templatePath = join(coreConfigDir, TEMPLATES_DIR);
-    const platformContent = renderPlatformTemplate(templatePath);
+    const wsConfig = workspaceConfig ?? loadWorkspaceConfig(workspacePath);
+    const platformContent = renderPlatformTemplate({
+        templatePath: existsSync(templatePath) ? templatePath : undefined,
+        devRepos: wsConfig?.core?.devRepos,
+    });
     // 3. Write TOOLS.md Platform section
     const toolsPath = join(workspacePath, WORKSPACE_FILES.tools);
     await updateManagedSection(toolsPath, platformContent, {
@@ -1955,7 +1977,158 @@ async function refreshPlatformContent(options) {
     copyTemplates(coreConfigDir);
 }
 
-var skillContent = `---
+var codingContent = `---
+name: coding
+description: Engineering standards for all code work. Use when writing code, reviewing PRs, spawning coding sub-agents, or making architectural decisions in any project (not just Jeeves). Covers design-first development, schema-first patterns, testing, STAN workflow, dependency management, and pre-PR checklist.
+---
+
+# Engineering Standards
+
+These standards apply to ALL code work — whether done directly or via sub-agents.
+When spawning sub-agents for coding tasks, include the relevant rules in the task prompt.
+Sub-agents don't inherit your context — if you don't pass the rules, they don't exist.
+
+---
+
+## Design-First Development
+
+1. **Iterate on design until convergence** — Summarize requirements, propose approach, raise questions BEFORE writing code.
+2. **Services-first architecture** — Core logic in services behind ports; adapters thin; side effects at boundaries.
+3. **Schema-first** — Runtime schema (Zod) is source of truth; TypeScript types derived via \`z.infer<>\`; validation centralized. Plain TypeScript \`interface\` declarations for config surfaces are not acceptable.
+4. **300 LOC hard limit** — If a file would exceed 300 lines, stop and decompose first. No exceptions.
+5. **Avoid \`any\`** — Prefer \`unknown\` + narrowing; if unavoidable, narrowest scope + rationale.
+6. **Test pairing** — Every non-trivial module gets a \`*.test.ts\`.
+7. **Open-source first** — Prefer established deps over home-grown solutions. Search npm/GitHub before building anything non-trivial.
+
+## Module Design
+
+- **Single Responsibility** applies to modules as well as functions.
+- Prefer many small modules over a few large ones.
+- Keep module boundaries explicit and cohesive; avoid "kitchen-sink" files.
+- Co-locate tests with modules for discoverability.
+
+## Config Surfaces
+
+- Define config with **Zod schemas** — never bare TypeScript interfaces.
+- Derive types: \`type MyConfig = z.infer<typeof myConfigSchema>\`
+- Generate **JSON Schema** from Zod for IDE DX (\`\$schema\` pointer in config files).
+- Validate at load time — fail fast with clear error messages.
+- \`init\` commands generate config with \`\$schema\` pointer already in place.
+
+## Testing
+
+- **Unit tests** for pure services (no fs/process/network).
+- **Integration tests** for adapters/seams (minimal end-to-end slices).
+- Exercise happy paths AND representative error paths.
+- Table-driven cases encouraged for exhaustive coverage.
+- Keep coverage meaningful — prefer covering branches/decisions over chasing 100% lines.
+
+## STAN-Enabled Repos
+
+When working in a repo with \`.stan/\`:
+- Run \`stan run --sequential --no-archive\` **before** each commit. Scripts must pass before you commit. Sequential runs are preferred to limit side effects. Archives are not needed (you won't use them).
+- **Push after every commit.** Don't accumulate unpushed local commits. Jason needs to be able to see your work at any time.
+- All scripts must pass before claiming work is complete.
+- Read \`.stan/output/<script>.txt\` for evidence on failures.
+- When creating stan scripts, eliminate colorized output where possible (e.g. \`--no-color\`, \`NO_COLOR=1\`) to reduce noise in script output files.
+
+## Cross-Package Verification
+
+When changes affect exports consumed by another repo:
+- Standalone scripts passing ≠ "ready for review."
+- Use \`npm link\` or equivalent to verify the consumer builds against your changes.
+- Only claim completion when BOTH repos pass.
+
+## Dependencies: Latest Versions Required (HARD GATE)
+
+**NEVER use a superseded version of ANY dependency without direct human authorization.** When adding a new dependency — or creating a new project — ALWAYS check the latest stable version and use it. This applies to runtime deps, dev deps, and peer deps alike.
+
+- Before \`npm install <package>\`: run \`npm view <package> version\` (or check npmjs.com) to confirm you're installing the current major.
+- Before spawning sub-agents that install packages: include the latest version in the task prompt, or instruct the sub-agent to verify latest before installing.
+- If the latest major has known breaking issues that block adoption, flag it to the human — don't silently pin an old major.
+
+LLMs are trained on stale data. Your training cutoff means you will default to old versions of everything. **Assume your version knowledge is wrong** and verify before every install.
+
+*Earned: 2026-05-12, created the jeeves-tools repo with Zod 3 despite Zod 4 being available since mid-2025. Shipped 84 commits on the old major before catching it.*
+
+## Dependencies: Local Over Global
+
+- **Dev dependencies belong in the project, not the global environment.** Install with \`npm install --save-dev\`, not \`npm install -g\`.
+- This guarantees reproducibility across machines and CI. Global installs mask environment differences that cause "works on my machine" failures.
+- **Rare exceptions:** Tools that are genuinely machine-level utilities (e.g. \`stan-cli\`). If in doubt, install locally.
+## Dependency Failures
+
+When a third-party dependency is broken:
+1. Summarize the failure concisely.
+2. Enumerate options: switch dependency → fix upstream → temporary pin → shim (last resort).
+3. Recommend with rationale.
+4. Do NOT immediately code around the problem.
+
+## CHANGELOG
+
+- **Do not manually update CHANGELOG.md** — it is generated as part of the release process (e.g. via \`standard-version\`, \`changesets\`, or equivalent). Conventional commit messages are the input; the tooling produces the output.
+
+## Pre-PR Checklist (HARD GATE)
+
+**Before creating ANY PR, run the full verification sequence. No exceptions.**
+
+1. \`stan run --sequential --no-archive\` if \`.stan/\` exists — this is the canonical check suite
+2. In monorepos: run checks **from each package directory**, not just the root. Root-level runs may mask package-level failures due to config resolution differences.
+3. Exercise the release path: check \`release-it\` hooks (or equivalent) in each releasable package — run the same commands (\`lint\`, \`typecheck\`, \`test\`, \`build\`) from the same cwd the release process uses.
+
+If any step fails, fix it before committing. Do NOT create the PR and "note" the failures. Do NOT claim pre-existing failures without having actually run the commands first. Skipping this sequence is how we ship broken code and fabricate diagnoses.
+
+- **Compare against canonical template** (\`karmaniverous/npm-package-template-ts\`) before any npm package PR. If the project is behind the template, update it to conform. If the template is behind the project, raise the issue with Jason for template upkeep.
+- **Run \`ncu --peer\`** before any PR. Review the output. Update safe patches/minors. **Flag major version bumps for discussion** — never auto-apply \`ncu -u\` without reading what changed. Peer dep conflicts must be resolved, not ignored.
+- When spawning sub-agents, include \`ncu --peer\` in the quality gate commands: \`ncu --peer && npm run lint && npm run typecheck && npm run build && npm test\`. The sub-agent should report \`ncu\` output and only apply updates that don't involve major bumps or peer conflicts.
+- **Resolve ALL script warnings.** It is NOT acceptable to release code with outstanding warnings. They exist for a reason — fix them.
+- **Typecheck/lint rules apply to ALL authored code**, including configs at project root (\`eslint.config.ts\`, \`rollup.config.ts\`, \`vitest.config.ts\`, etc.). Only generated code (e.g. typedoc output) should be excepted from code quality checks.
+- **Never disable lint/typecheck rules** without surfacing it for discussion first. Disabled rules are a major code smell. If a rule must be disabled, document the rationale inline at the point of suppression.
+- **Multiple tsconfigs are a code smell.** Sometimes needed, but often they paper over poor configuration choices. Fix root causes rather than adding tsconfig variants.
+- **In a TS repo, all scripts should be authored in TS** (not JS). Prefer execution with \`tsx\`.
+- **Clean-room verify before claiming "all green."** Run \`rimraf node_modules && npm install && npm run build\` (or equivalent) to catch issues masked by cached state. If someone reports an error you can't reproduce, assume your cache is lying — not that they're wrong.
+- Verify build, test, and lint pass after updates.
+
+## Dev Workspace
+
+- **Clone location:** \`D:\\repos\\{org-or-userid}\\{repo}\` (e.g. \`D:\\repos\\karmaniverous\\jeeves-watcher\`)
+- D drive is the dev workspace. Do not clone repos elsewhere.
+- Fresh clones are preferred over copying existing checkouts — \`npm install\` from registry is faster than disk-copying \`node_modules\`.
+- D drive is NOT indexed by jeeves-watcher. Dev work stays off the archive.
+
+## GitHub Auth (HARD GATE)
+
+- **ALL GitHub operations use \`jgs-jeeves\` auth.** Set \`GH_TOKEN\` before any \`gh\` CLI command:
+  \`\`\`powershell
+  \$env:GH_TOKEN = (Get-Content "J:\\config\\credentials\\github\\jgs-jeeves.token" -Raw).Trim()
+  \`\`\`
+- Never write to GitHub as \`karmaniverous\` — that's Jason's account.
+- If \`jgs-jeeves\` lacks permissions, **escalate to Jason** rather than falling back to \`karmaniverous\`.
+
+## Issue Hygiene
+
+- **Always comment rationale when closing an issue without resolution** (duplicate, won't-fix, obsolete). The close action alone doesn't explain why.
+- Reference the replacement issue/PR when closing as duplicate.
+
+## Code Style
+
+- Prettier is source of truth for formatting.
+- Keep imports sorted per repo tooling.
+- Avoid dead code.
+- TSDoc \`@module\` or \`@packageDocumentation\` on every non-test module.
+- First 160 chars of module doc should be high-signal: what it does, IO/side effects, traversal hints.
+
+## eslint-disable is a HARD GATE
+
+Never disable lint/typecheck rules without surfacing it for discussion first. Fix the code, don't suppress the warning. For test mocks, use properly typed partial objects (\`Partial<RealType>\`, typed \`MockReply\` interfaces) instead of \`any\`. Tests are code.
+
+## Git Merge Policy
+
+- **No squash merges.** Preserve commit history.
+- **PR reviewer:** When creating a PR under \`jgs-jeeves\` auth, always add \`karmaniverous\` (Jason) as a reviewer.
+`;
+
+var jeevesContent = `---
 name: jeeves
 description: Jeeves platform architecture, data flow, component interaction, scripts repo, and coordination knowledge. Use when making architectural decisions, coordinating across components, checking platform health, managing service lifecycle, or working with the scripts repo.
 ---
@@ -2019,7 +2192,7 @@ Managed blocks are stationary after initial insertion. Cleanup detection uses Ja
 
 \`jeeves.config.json\` at workspace root provides shared defaults:
 - Precedence: CLI flags → env vars → file → defaults
-- Namespaced: \`core.*\` (workspace, configRoot, gatewayUrl) and \`memory.*\` (budget, warningThreshold, staleDays)
+- Namespaced: \`core.*\` (workspace, configRoot, gatewayUrl, devRepos) and \`memory.*\` (budget, warningThreshold)
 - Inspect with \`jeeves config [jsonpath]\`
 
 ## HEARTBEAT Protocol
@@ -2079,26 +2252,304 @@ When a workspace file exceeds the warning threshold, a \`## {filename}\` alert a
 Each file heading follows the same declined/active lifecycle as component headings. Users can decline alerts by changing the heading to \`## {filename}: declined\` (e.g., \`## AGENTS.md: declined\`).
 `;
 
+var operationsContent = `---
+name: operations
+description: Operational knowledge for a Jeeves installation. Covers date formatting utilities, email pipeline architecture, curation signal protocol, label taxonomy, and data flow patterns. Use when working with date formatting, email scripts, debugging email pipeline issues, or understanding how human email actions are interpreted.
+---
+
+# Operations
+
+Operational knowledge for the Jeeves platform. Covers email pipeline architecture, curation protocols, and operational conventions.
+
+## Date Formatting
+
+A \`date-fns\` wrapper lives at \`{configRoot}/jeeves-core/scripts/src/lib/dates.ts\`. It provides:
+
+| Export | Purpose |
+|--------|---------|
+| \`dayOfWeek(dateStr)\` | Full weekday name for an ISO date string (e.g. \`'Monday'\`) |
+| \`formatDate(dateStr, fmt)\` | Format with any date-fns pattern |
+| \`relativeDays(dateStr, refStr?)\` | Human-friendly relative description (\`'today'\`, \`'tomorrow'\`, \`'3 days ago'\`) |
+| \`parseISO\` / \`format\` | Re-exported from date-fns for direct use |
+
+### Gateway session usage
+
+From a gateway session, call via \`exec\`:
+
+\`\`\`
+node -e "import { dayOfWeek } from './src/lib/dates.js'; console.log(dayOfWeek('2026-05-11'));"
+\`\`\`
+
+with \`workdir: {configRoot}/jeeves-core/scripts\`.
+
+Or use the simpler inline form when the full wrapper isn't needed:
+
+\`\`\`
+node -e "import { format, parseISO } from 'date-fns'; console.log(format(parseISO('2026-05-11'), 'EEEE'));"
+\`\`\`
+
+with \`workdir: {configRoot}/jeeves-core/scripts\` (so date-fns resolves from \`node_modules\`).
+
+### Hard gate
+
+NEVER state a day of the week without computing it first. LLMs cannot do day-of-week arithmetic reliably.
+
+## Email Curation Signal Protocol
+
+Defines how human email actions in Gmail are interpreted by Jeeves email processes.
+
+### Human Signals
+
+| Signal | Meaning | Action |
+|--------|---------|--------|
+| Label added | Human is adjusting Jeeves classification | Update domain process inputs to reflect new classification |
+| Label removed | Human is adjusting Jeeves classification (removal) | Update domain process inputs to reflect removed classification |
+| Archived → Inbox | Human wants to keep this email in sight | Add \`watch\` label via update queue |
+| Starred / Flagged | Elevated attention — email is important in context | Domain processes should weight higher |
+| Moved to Spam | Confirmed spam — human classified as junk | Learn from classification for future triage |
+| Removed from Spam | False positive — human rescued from spam | Process as normal email, learn from false positive |
+
+### Watch Label
+
+The \`watch\` label has special semantics:
+- When present, never auto-archive the email
+- When a watched email lands in archive (by anyone), remove the watch label
+- Added automatically when a human moves an archived email back to inbox
+
+### Label Taxonomy
+
+Labels applied by Jeeves processes fall into two categories:
+
+**Mechanical labels** (applied by domain extractors with high confidence):
+- \`meeting\` — meeting-related email (invite, notes, transcript)
+- \`finance\` — financial email (receipt, invoice, billing, statement)
+
+**Reasoning labels** (applied by Update Email Meta, requiring cross-domain context):
+- \`project/<name>\` — associated with a known project
+- \`todo\` — requires action or work from the user
+- \`reply\` — someone is waiting on a response
+- \`alert\` — automated notification from a service
+- \`readme\` — newsletter or subscribed informational content
+
+### Labeling Principles
+
+1. Label at the earliest point where confidence is high enough
+2. Domain extractors label what they know with certainty
+3. Update Email Meta labels what requires cross-domain context
+4. A thread can have multiple labels
+5. Do not re-label threads that already have the label
+6. **Prefer false negatives over false positives**
+
+### Poll Scope
+
+Query: \`newer_than:1d in:anywhere\`
+
+Must include spam and trash to detect human curation signals (e.g., moving to/from spam).
+
+## Email Pipeline Architecture
+
+### Directory Layout
+
+\`\`\`
+{configRoot}/jeeves-core/email-config.json  — pipeline configuration (accounts, buckets)
+{workspace}/../email/threads/{account}/     — canonical email archive (thread.json + per-message JSONs)
+\`\`\`
+
+### Data Flow
+
+1. **Poll** (\`email/poll.ts\`) — searches Gmail for recent threads, classifies, enqueues important ones for metadata fetch
+2. **Fetch** (\`email/email-fetch.ts\`) — fetches full thread metadata from Gmail, creates/updates \`thread.json\` cache, enqueues for body download
+3. **Download** (\`email/download.ts\`) — downloads full message bodies, writes per-message JSONs to \`threads/{account}/{threadId}/\`
+4. **Drain Updates** (\`email/drain-updates.ts\`) — applies label changes and other queued updates back to Gmail
+5. **Meta synthesis** — jeeves-meta synthesizes email archives into searchable summaries
+
+### thread.json (Cache Format)
+
+Each \`threads/{account}/{threadId}/thread.json\` contains:
+- \`threadId\`, \`account\`, \`subject\`, \`participants\`
+- \`messages\` — record of \`{ messageId → { from, to, cc, date, internalDateMs, labels, snippet, attachments } }\`
+- \`provenance\` — label change history
+- \`cachedAt\`, \`updatedAt\`
+
+### Per-Message JSONs
+
+Each \`threads/{account}/{threadId}/{messageId}.json\` contains full message data:
+- \`messageId\`, \`threadId\`, \`account\`, \`subject\`, \`from\`, \`to\`, \`cc\`
+- \`date\` (RFC 2822), \`internalDateMs\` (epoch ms)
+- \`labels\`, \`body\`, \`attachments\`, \`downloadedAt\`
+`;
+
+var playbooksContent = `---
+name: playbooks
+description: >
+  Reusable operational workflow patterns for the Jeeves platform. Use when asked to
+  set up a daily briefing for a person or team, create standing meeting ops (notes +
+  agenda generation), replicate an existing workflow pattern for a new context, or
+  understand how recurring intelligence/ops workflows are structured. Covers the
+  full stack: content directory, TASK files, standing orders, runner jobs, dispatcher
+  scripts, Slack channel integration, and meta synthesis.
+---
+
+# Playbooks
+
+Proven, replicable operational patterns. Each playbook describes what it does, what
+infrastructure it needs, and how to instantiate a new instance.
+
+## Common Infrastructure
+
+All playbooks share these building blocks:
+
+| Component | Purpose |
+|-----------|---------|
+| **Content directory** | \`{workspace}/../<silo>/<domain>/\` — stores output files, \`.meta/\`, standing orders |
+| **TASK file** | Markdown prompt that defines the LLM session's entire job |
+| **Standing orders** | \`standing-orders.md\` — append-only file for persistent stakeholder preferences |
+| **Dispatcher script** | TypeScript in \`{configRoot}/jeeves-core/scripts/src/\` — reads TASK, spawns worker |
+| **Runner job** | jeeves-runner job with cron schedule, timezone, and rrstack |
+| **Slack channel** | Delivery surface — summary posts, quick-link pins, feedback loop |
+| **Meta entity** | \`.meta/\` directory seeded so jeeves-meta synthesizes context over time |
+
+### Dispatcher Pattern
+
+All dispatchers use \`taskFileDispatcher\` from \`dispatchers/lib/task-file-dispatcher.ts\`:
+
+\`\`\`typescript
+import { taskFileDispatcher } from '../dispatchers/lib/task-file-dispatcher.js';
+
+taskFileDispatcher({
+  scriptName: '<silo>/<job-name>',
+  jobId: '<runner-job-id>',
+  taskFile: '<path-to-TASK.md>',
+  timeout: 600,
+  injectDateContext: true,
+  dateTimezone: '<IANA timezone>',
+});
+\`\`\`
+
+\`injectDateContext: true\` prepends an authoritative date line so the LLM knows today's date.
+
+### Standing Orders Convention
+
+- Append-only — never modify existing entries
+- TASK files instruct the LLM to read standing orders at Step 0
+- TASK files instruct the LLM to append new persistent preferences from channel feedback
+- Include initial configuration section with participants, timezones, channel rules
+
+## Available Playbook Patterns
+
+| Pattern | Description |
+|---------|-------------|
+| **Daily Briefing** | Recurring intelligence or action-item report for a stakeholder |
+| **Standing Meeting Ops** | Post-meeting notes + next-day agenda generation for a recurring meeting |
+
+## Instantiation Checklist
+
+When creating a new playbook instance:
+
+1. Choose the appropriate pattern from the table above
+2. Create the content directory with \`.meta/\` and \`standing-orders.md\`
+3. Write the TASK file(s) — adapt from an existing instance. Ensure Step 0 reads feedback from the *delivery channel* (where output is posted), not only a DM
+4. Write the dispatcher script(s) in \`{configRoot}/jeeves-core/scripts/src/<silo>/\`
+5. Register the runner job(s) with appropriate cron, timezone, rrstack
+6. Set up the Slack channel — pin a quick-links message if the pattern calls for it
+7. Seed \`.meta/\` so meta synthesis begins
+8. Test with \`--dry-run\` before going live
+`;
+
+var slackBotProvisionerContent = `---
+name: slack-bot-provisioner
+description: Provision a new Slack bot identity for Clawdbot on a fresh server. Guides through Slack App creation steps, collects tokens, writes local config/env, and verifies connectivity.
+---
+
+# Slack bot provisioner (per-bot server)
+
+Use this when you are setting up **a new Clawdbot instance** that should have **its own Slack bot identity** (one Slack App per bot), and you want a repeatable guided setup.
+
+This skill assumes:
+- The user is a Slack workspace admin.
+- Each bot runs on its own server with its own Gateway config.
+
+## What can be automated vs not
+
+**Automated (this skill):**
+- Create local folders.
+- Write a \`slack.env\` (bot token, signing secret).
+- Patch the Clawdbot gateway config to enable Slack for this instance (user approves).
+- Run a connectivity test (send a message to a channel).
+
+**Not fully automatable (Slack-side):**
+- Creating/installing the Slack App and granting scopes (UI/OAuth).
+- Verifying event subscription URLs (requires public HTTPS endpoint).
+
+## Recommended mode
+Start with **outbound-only** (post messages) and expand to event subscriptions later.
+
+## Quick start
+
+1) Have the user do the Slack UI steps in \`references/slack-app-checklist.md\`.
+2) Run the provisioning script:
+
+- PowerShell:
+  - \`powershell -NoProfile -ExecutionPolicy Bypass -File scripts/provision.ps1\`
+
+The script will prompt for:
+- bot name
+- Slack bot token (\`xoxb-...\`)
+- Slack signing secret
+- (optional) test channel id
+
+## Files
+- Script: \`scripts/provision.ps1\`
+- Reference checklist: \`references/slack-app-checklist.md\`
+- Reference scopes: \`references/scopes.md\`
+
+## Secrets (best practices)
+- **Do not** store secrets inside the skill folder (skills are meant to be shareable/publishable).
+- Store secrets **per-instance** in the Clawdbot runtime directory (recommended):
+  - \`C:\\Users\\Administrator\\.clawdbot\\credentials\\...\`
+- Prefer environment variables / local credential files loaded by the Gateway/service manager.
+- Never paste Slack secrets into public chats.
+
+## Safety notes
+- Store secrets per-instance. Do not reuse tokens across bot identities.
+- Avoid bot-to-bot loops: bots should ignore messages from other bots by default.
+`;
+
 /**
- * Skill seeding: write the `jeeves` workspace skill unconditionally.
+ * Skill seeding: write all bundled platform skills to the workspace.
  *
  * @remarks
- * The skill file is entirely generated — no user-authored content (Decision 48).
- * Every installer (core CLI and component plugins) writes it unconditionally.
+ * Skill files are entirely generated — no user-authored content (Decision 48).
+ * Every installer (core CLI and component plugins) writes them unconditionally.
  * Content is inlined at build time via `rollup-plugin-md.ts`.
+ *
+ * @module
  */
+/** Map of skill directory name to inlined content. */
+const BUNDLED_SKILLS = {
+    jeeves: jeevesContent,
+    coding: codingContent,
+    'slack-bot-provisioner': slackBotProvisionerContent,
+    operations: operationsContent,
+    playbooks: playbooksContent,
+};
 /**
- * Seed the jeeves workspace skill file.
+ * Seed all bundled platform skills into the workspace.
+ *
+ * @remarks
+ * Writes each skill to `{workspace}/skills/{name}/SKILL.md`, creating
+ * directories as needed. Overwrites existing content unconditionally.
  *
  * @param workspacePath - Workspace root directory.
  */
-function seedSkill(workspacePath) {
-    const skillDir = join(workspacePath, SKILLS_DIR, JEEVES_SKILL_DIR);
-    if (!existsSync(skillDir)) {
-        mkdirSync(skillDir, { recursive: true });
+function seedSkills(workspacePath) {
+    for (const [name, content] of Object.entries(BUNDLED_SKILLS)) {
+        const skillDir = join(workspacePath, SKILLS_DIR, name);
+        if (!existsSync(skillDir)) {
+            mkdirSync(skillDir, { recursive: true });
+        }
+        writeFileSync(join(skillDir, 'SKILL.md'), content, 'utf-8');
     }
-    const skillPath = join(skillDir, 'SKILL.md');
-    writeFileSync(skillPath, skillContent, 'utf-8');
 }
 
 /**
@@ -2159,8 +2610,8 @@ async function seedContent(options) {
         content: `- ${NOT_INSTALLED_ALERTS[name]}`,
     }));
     await writeHeartbeatSection(heartbeatPath, entries);
-    // Seed jeeves workspace skill (Decision 48: overwrite-on-install)
-    seedSkill(getWorkspacePath());
+    // Seed all bundled platform skills (Decision 48: overwrite-on-install)
+    seedSkills(getWorkspacePath());
 }
 
 /**
@@ -2203,46 +2654,21 @@ function registerInstallCommand(program) {
 }
 
 /**
- * Memory budget accounting and staleness detection for MEMORY.md.
+ * Memory budget accounting for MEMORY.md.
  *
  * @remarks
- * Scans MEMORY.md for ISO date patterns in H2/H3 headings and bullet items.
- * Reports character count against a configured budget, warning threshold state,
- * and stale section candidates. Does not auto-delete: review remains
- * human- or agent-mediated (Decision 42).
+ * Reports character count against a configured budget and warning threshold
+ * state. Does not auto-delete: review remains human- or agent-mediated
+ * (Decision 42). Staleness detection removed in v0.5.9 (Decision 45).
  */
-/** ISO date pattern: YYYY-MM-DD. */
-const ISO_DATE_RE = /\b(\d{4}-\d{2}-\d{2})\b/g;
-/** H2 heading pattern used to split sections. */
-const H2_RE = /^## /m;
 /**
- * Extract the most recent ISO date from a string.
- *
- * @param text - Text to scan for dates.
- * @returns The most recent date found, or undefined.
- */
-function extractMostRecentDate(text) {
-    const matches = text.match(ISO_DATE_RE);
-    if (!matches)
-        return undefined;
-    let latest;
-    for (const match of matches) {
-        const d = new Date(match + 'T00:00:00Z');
-        if (!Number.isNaN(d.getTime())) {
-            if (!latest || d > latest)
-                latest = d;
-        }
-    }
-    return latest;
-}
-/**
- * Analyze MEMORY.md for budget and staleness.
+ * Analyze MEMORY.md for budget health.
  *
  * @param options - Analysis configuration.
  * @returns Memory hygiene result.
  */
 function analyzeMemory(options) {
-    const { workspacePath, budget, warningThreshold, staleDays } = options;
+    const { workspacePath, budget, warningThreshold } = options;
     const memoryPath = join(workspacePath, WORKSPACE_FILES.memory);
     if (!existsSync(memoryPath)) {
         return {
@@ -2252,8 +2678,6 @@ function analyzeMemory(options) {
             usage: 0,
             warning: false,
             overBudget: false,
-            staleCandidates: 0,
-            staleSectionNames: [],
         };
     }
     const content = readFileSync(memoryPath, 'utf-8');
@@ -2261,21 +2685,6 @@ function analyzeMemory(options) {
     const usage = budget > 0 ? charCount / budget : charCount > 0 ? Infinity : 0;
     const warning = usage >= warningThreshold;
     const overBudget = usage > 1;
-    // Split into H2 sections and scan for staleness
-    const sections = content.split(H2_RE).slice(1); // skip content before first H2
-    const now = Date.now();
-    const thresholdMs = staleDays * 24 * 60 * 60 * 1000;
-    const staleSectionNames = [];
-    for (const section of sections) {
-        const sectionName = section.split('\n')[0]?.trim() ?? '';
-        const recentDate = extractMostRecentDate(section);
-        // Sections without dates are evergreen — never flagged (Decision 47)
-        if (!recentDate)
-            continue;
-        if (now - recentDate.getTime() > thresholdMs) {
-            staleSectionNames.push(sectionName);
-        }
-    }
     return {
         exists: true,
         charCount,
@@ -2283,8 +2692,6 @@ function analyzeMemory(options) {
         usage,
         warning,
         overBudget,
-        staleCandidates: staleSectionNames.length,
-        staleSectionNames,
     };
 }
 
@@ -2383,7 +2790,6 @@ function registerStatusCommand(program) {
             workspacePath: getWorkspacePath(),
             budget: resolved.memory.budget.value,
             warningThreshold: resolved.memory.warningThreshold.value,
-            staleDays: resolved.memory.staleDays.value,
         });
         console.log('Memory hygiene');
         console.log('-'.repeat(60));
@@ -2398,7 +2804,6 @@ function registerStatusCommand(program) {
                     ? '⚠ Warning'
                     : '✅ OK';
             console.log(`Chars: ${String(memory.charCount)} / ${String(memory.budget)} (${String(usagePct)}%) — ${status}`);
-            console.log(`Stale candidates: ${String(memory.staleCandidates)}`);
         }
         console.log();
         if (!allHealthy) {