@oneie/claude 0.4.0 → 0.6.0

package/commands/oo-push.md

@@ -0,0 +1,37 @@
+# /oo-push
+
+Push changes in `apps/oo/` to `github.com/one-ie/oo`.
+
+`apps/oo/` is the canonical repo — it has its own git history and remote. The monorepo subtree was removed 2026-06-20.
+
+## Usage
+
+```
+/oo-push              # push apps/oo to github.com/one-ie/oo main
+/oo-push <branch>     # push to a specific branch
+```
+
+## Steps
+
+1. **Resolve branch** — use `$ARGUMENTS` if provided, else `main`
+
+2. **Check for uncommitted changes**
+   ```bash
+   git -C /Users/toc/Server/apps/oo status --short
+   ```
+   If anything is uncommitted, surface a warning and ask whether to stage + commit first.
+
+3. **Push**
+   ```bash
+   git -C /Users/toc/Server/apps/oo push origin <branch>
+   ```
+
+4. **Report**
+   ```
+   Pushed apps/oo → github.com/one-ie/oo (<branch>)
+   ```
+
+## Notes
+
+- `apps/oo` remote `origin` points at `https://github.com/one-ie/oo.git`
+- The monorepo `oo` remote (`one-ie/` → `github.com/one-ie/oo.git`) is stale — do not use `git subtree push --prefix=oo oo main` (the prefix was deleted)

package/commands/rag.md

@@ -0,0 +1,144 @@
+# /rag
+
+Search, synthesize, verify, and ingest notes from the OO-Brain corpus (Obsidian vault → Supabase pgvector, hybrid RRF retrieval).
+
+**MCP tools:** `mcp__oo-brain__search_notes` · `mcp__oo-brain__mark_retrieval` · `mcp__oo-brain__ingest_note`
+
+**Closed-loop rule (non-negotiable):** every `search_notes` call MUST be followed by `mark_retrieval(query_id, mark|warn|unsure)` before the turn ends. Skipping pollutes the corpus feedback loop.
+
+---
+
+## Modes
+
+| Invocation | What | Skill |
+|---|---|---|
+| `/rag <query>` | Quick inline search — top 5 chunks, inline display | direct |
+| `/rag synthesize <topic>` | Wide-slice brief: cited, themed, 2–3 pages | rag-synthesize |
+| `/rag fanout <question>` | Multi-angle: 5–10 sub-queries → synthesized answer | rag-fanout |
+| `/rag triangulate <claim>` | Verify one claim from 3+ angles | rag-triangulate |
+| `/rag adversarial <belief>` | Stress-test: find contradicting evidence | rag-adversarial |
+| `/rag canary <thing>` | Check if something has been flagged/warned | rag-canary |
+| `/rag discover [--vault X]` | Coverage audit: what topics are thin? | rag-skill-discovery |
+| `/rag ingest <title> -- <content>` | Add a note to the corpus | direct |
+
+**Flags (all modes):**
+- `--vault oo-brain|agency-operator|personal-brain|all` — override auto-routing (default: auto)
+- `--k <N>` — chunk count (default 5 for quick, 15 for synthesize, 3 per sub-query for fanout)
+- `--dry-run` — show the query + vault + k, don't fire
+
+---
+
+## Vault auto-routing
+
+| Topic signals | Vault |
+|---|---|
+| Frameworks, courses, YouTube intel, books, research | `oo-brain` |
+| SOPs, clients, ops, agency processes, rules | `agency-operator` |
+| Personal notes, journal, daily notes | `personal-brain` |
+| Unclear / cross-cutting | `all` |
+
+---
+
+## Steps per mode
+
+### `/rag <query>` — Quick Search
+
+1. Auto-route vault from query topic.
+2. Call `search_notes(query=<query>, k=5, vault=<vault>)`. Capture `query_id`.
+3. Display results inline:
+   ```
+   RAG: "<query>" · vault=<vault> · <N> chunks
+
+   1. [<score>] <file_path>
+      "<excerpt>"
+
+   2. [<score>] <file_path>
+      "<excerpt>"
+   …
+   ```
+4. Synthesize a 3–5 sentence answer from the chunks, with inline `[source: <file>]` citations.
+5. Call `mark_retrieval(query_id, mark|warn|unsure)` — `mark` if chunks informed the answer.
+6. Print: `↩ loop closed · query_id=<uuid>`
+
+If 0 chunks: say "corpus has no coverage of '<query>'" — do not pad.
+
+---
+
+### `/rag synthesize <topic>` — Written Brief
+
+Delegate to `rag-synthesize` skill. Pass `<topic>` + any `--vault`, `--k`, `--out`, `--audience` flags from `$ARGUMENTS`.
+
+---
+
+### `/rag fanout <question>` — Multi-Angle
+
+Delegate to `rag-fanout` skill. Pass `<question>` + flags.
+
+---
+
+### `/rag triangulate <claim>` — Verify a Claim
+
+Delegate to `rag-triangulate` skill. Pass `<claim>` + flags.
+
+---
+
+### `/rag adversarial <belief>` — Stress-Test
+
+Delegate to `rag-adversarial` skill. Pass `<belief>` + flags.
+
+---
+
+### `/rag canary <thing>` — Canary Check
+
+Delegate to `rag-canary` skill. Pass `<thing>` + flags.
+
+---
+
+### `/rag discover [--vault X]` — Coverage Audit
+
+Delegate to `rag-skill-discovery` skill. Pass `--vault` if provided.
+
+---
+
+### `/rag ingest <title> -- <content>` — Add to Corpus
+
+1. Parse: everything before ` -- ` is `<title>`, everything after is `<content>`.
+2. Auto-detect vault: operational content → `agency-operator`; everything else → `oo-brain`.
+3. Call `ingest_note(title=<title>, content=<content>, vault=<vault>, source="tony-cc")`.
+4. Report: `INGESTED: "<title>" → <vault> · immediately retrievable via /rag`
+
+If `--dry-run`: print `DRY: would ingest "<title>" → <vault>` and stop.
+
+---
+
+## Output contract
+
+Every mode prints a summary line on completion:
+
+```
+RAG ✓ · mode=<mode> · vault=<vault> · chunks=<N> · loop=closed
+```
+
+If retrieval returned 0 chunks, print:
+```
+RAG ∅ · corpus has no coverage of "<query>" · try --vault all or /rag fanout
+```
+
+---
+
+## Example invocations
+
+```
+/rag what do we know about email deliverability
+/rag synthesize AI SEO strategies --vault oo-brain
+/rag fanout "how should we price our AI agency retainer?"
+/rag triangulate "long-form content ranks better than short-form"
+/rag adversarial "we should focus on LinkedIn over email"
+/rag ingest "Client Onboarding Checklist" -- Step 1: send welcome email. Step 2: schedule kickoff…
+/rag discover --vault agency-operator
+/rag what are our best performing landing page frameworks --dry-run
+```
+
+---
+
+*Every `/rag` call closes its loop. No orphaned retrievals.*

package/commands/release.md

@@ -1,144 +1,144 @@
 # /release
 
-**Source of truth:** `one/release.md` · **Script:** `scripts/release.ts`
+Release the ONE OSS template and/or npm packages.
 
-Assemble `release/` from the monorepo, publish npm packages, and push to `github.com/one-ie/one`.
+**Template source:** `one-ie/template/` → `apps/one/` (github.com/one-ie/one)
+**npm packages:** `packages/{sdk,react,mcp,cli}` → npm registry
 
-## Modes
+---
 
-| Invocation | What |
-|-----------|------|
-| `/release` | Stage + publish + push (full pipeline) |
-| `/release --stage` | Assemble `release/` only, no publish, no push |
-| `/release --push` | Stage + push to one-ie/one (skip npm publish) |
-| `/release --dry-run` | Print manifest, no writes |
+## Invocations
 
-## The Three Packages
+| Command | What |
+|---|---|
+| `/release` | Full pipeline: template + npm packages |
+| `/release template` | Sync template to apps/one and push (no npm publish) |
+| `/release npm` | Bump + build + publish npm packages only |
+| `/release --dry-run` | Print what would happen, no writes |
 
-| Package | npm name | Publish from | Depends on |
-|---------|----------|-------------|------------|
-| SDK | `@oneie/sdk` | `release/sdk` | — |
-| CLI | `oneie` | `packages/cli` | `@oneie/sdk` |
-| MCP | `@oneie/mcp` | `release/mcp` | `@oneie/sdk` |
+---
 
-**Publish order:** SDK first, then CLI + MCP.
+## Step 1 — Preflight checks
 
----
+```bash
+# Verify clean working tree
+git diff --exit-code && git diff --cached --exit-code || echo "WARN: uncommitted changes"
 
-## Steps
+# Verify apps/one is cloned
+test -d /Users/toc/Server/apps/one/.git || {
+  echo "Clone first: git clone git@github.com:one-ie/one.git apps/one"
+  exit 1
+}
 
-### Step 1 — Stage (`bun run release`)
+# Run strip guard — zero moat source in template
+cd one-ie/template && bash scripts/strip-guard.sh
 
-```bash
-bun run release          # assembles release/ from monorepo
-bun run release -- --dry-run  # preview only
+# Run test suite
+cd one-ie/template && bun vitest run
 ```
 
-The script (`scripts/release.ts`) runs six sub-steps:
+---
 
-| Sub-step | What |
-|----------|------|
-| `clean` | Wipe `release/` (preserve `.git`) |
-| `copy` | Run manifest: `agents/templates`, `packages/sdk`, `packages/mcp`, `.claude`, `templates/web` |
-| `one` | Copy `one/` docs filtered by public allowlist (strategy + in-flight work withheld) |
-| `overlay` | Apply `scripts/release-templates/` on top (README.md, CLAUDE.md, AGENTS.md overrides) |
-| `license` | Mirror root `LICENSE` into every slot |
-| `verify` | Assert 4-file convention: `README.md`, `CLAUDE.md`, `AGENTS.md`, `LICENSE` in root + each slot |
+## Step 2 — Sync template to apps/one
 
-**Slots:** `agents/` · `one/` · `sdk/` · `mcp/` · `.claude/` · `web/`
+```bash
+cd one-ie/template
+bash scripts/release.sh --message "release: $(date +%Y-%m-%d)"
+```
 
-**Key copies:**
-- `templates/web` → `release/web` (Astro + React template)
-- `packages/sdk` → `release/sdk`
-- `packages/mcp` → `release/mcp`
-- `.claude` → `release/.claude` (excl. `settings.local.json`)
-- `agents/templates` → `release/agents/templates` (real pods withheld)
-- `one/` → `release/one` (allowlist filtered)
+The script (`template/scripts/release.sh`):
+1. `rsync` template/ → apps/one/ (excludes node_modules, dist, .do-* state)
+2. Stubs paid plugins — replaces `src/` with a single `index.ts` pointing to `pay.one.ie/x/<plugin>.js`
+3. `git add -A && git commit && git push origin main`
 
-Report: files copied, bytes, ms per sub-step.
+**Paid plugins** (stubbed at release — source stays private):
+- `plugin-admin` → `pay.one.ie/x/admin.js`
 
-### Step 2 — Version Bump
+Add more to the `PAID_PLUGINS` array in `template/scripts/release.sh` as you build them.
 
-Before publishing, sync versions. SDK must be bumped first:
+---
 
-1. Bump `packages/sdk/package.json` version
-2. Update `packages/cli/package.json` `@oneie/sdk` dep to match
-3. Update `packages/mcp/package.json` `@oneie/sdk` dep to match  
-4. Bump CLI and MCP versions
+## Step 3 — Bump npm package versions (if releasing npm)
 
-**CRITICAL:** `cd packages/sdk` before `npm version` — running from monorepo root triggers lockfile relock.
+Bump order: SDK first, then react/mcp/cli which depend on it.
 
 ```bash
-cd packages/sdk && npm version patch && cd ../..
-cd packages/cli && npm version patch && cd ../..
-cd packages/mcp && npm version patch && cd ../..
+# Check current versions
+grep '"version"' packages/sdk/package.json packages/react/package.json packages/mcp/package.json packages/cli/package.json
+
+# Bump (patch | minor | major)
+cd packages/sdk   && npm version patch && cd ../..
+cd packages/react && npm version patch && cd ../..
+cd packages/mcp   && npm version patch && cd ../..
+cd packages/cli   && npm version patch && cd ../..
+
+# Sync workspace:* deps — update sdk version in react/mcp/cli package.json if pinning
 ```
 
-Re-run `bun run release` after bumping so `release/sdk` and `release/mcp` reflect new versions.
+**CRITICAL:** Run `npm version` from each package dir, not the monorepo root (triggers lockfile relock).
 
-### Step 3 — Build + Publish
+---
+
+## Step 4 — Build + publish npm packages
 
-SDK must publish before CLI and MCP resolve it.
+SDK must publish before react/mcp/cli (they declare `@oneie/sdk` as a dependency).
 
 ```bash
-# SDK
-cd release/sdk && bun run build && npm publish --access public && cd ../..
+# Build all packages
+cd packages && bun run build && cd ..
+
+# Verify npm token is set
+npm whoami
 
-# CLI (publishes from packages/cli, not release/)
-cd packages/cli && npm run build && npm publish --access public && cd ../..
+# Publish SDK first
+cd packages/sdk && npm publish --access public && cd ../..
 
-# MCP
-cd release/mcp && bun run build && npm publish --access public && cd ../..
+# Then react, mcp, cli (parallel is fine — SDK is already on registry)
+cd packages/react && npm publish --access public && cd ../..
+cd packages/mcp   && npm publish --access public && cd ../..
+cd packages/cli   && npm publish --access public && cd ../..
 ```
 
-### Step 4 — Push to github.com/one-ie/one
+**Gotcha:** `workspace:*` deps must be temporarily pinned to `^x.y.z` before publishing, then restored. See memory entry `reference_oneie_npm_publish_workspace`.
 
-```bash
-bun run release -- --push
-```
+---
 
-The `--push` flag (built into `scripts/release.ts`):
-1. `git init` inside `release/` if no `.git` (first time)
-2. `git remote add origin git@github.com:one-ie/one.git`
-3. `git add .`
-4. `git commit -m "release: v<version>"`
-5. `git push -u origin main`
+## Step 5 — Tag + report
 
-### Step 5 — Report
+```bash
+# Tag the release on main
+VERSION=$(node -p "require('./packages/sdk/package.json').version")
+git tag "v$VERSION" && git push origin "v$VERSION"
+```
 
+Report format:
 ```
-Stage:     clean 12ms  copy 340ms  one 28ms  overlay 5ms  license 2ms  verify 3ms
-           487 files, 4.2MB  total 390ms
-Publish:   @oneie/sdk@0.8.0 ✓  oneie@3.8.3 ✓  @oneie/mcp@0.2.0 ✓
-Push:      ✓ github.com/one-ie/one  commit: release: v0.8.0
+Template:  strip-guard ✓  34/34 tests ✓  synced → apps/one  pushed → github.com/one-ie/one
+npm:       @oneie/sdk@0.14.0 ✓  @oneie/react@0.14.0 ✓  @oneie/mcp@0.14.0 ✓  @oneie/cli@0.14.0 ✓
+Tag:       v0.14.0 → main
 ```
 
 ---
 
-## Manifest Reference (`scripts/release.ts`)
-
-```typescript
-const manifest = [
-  { from: 'agents/templates', to: 'agents/templates' },
-  { from: 'packages/sdk',    to: 'sdk',    exclude: ['node_modules', 'dist'] },
-  { from: 'packages/mcp',    to: 'mcp',    exclude: ['node_modules', 'dist'] },
-  { from: '.claude',         to: '.claude', exclude: ['settings.local.json'] },
-  { from: 'templates/web',   to: 'web',    exclude: ['node_modules', 'dist', '.astro'] },
-]
-// one/ is filtered separately by ONE_PUBLIC_DOCS allowlist
-// README.md + CLAUDE.md come from scripts/release-templates/ overlay (NOT monorepo root)
-```
+## x402-gated plugins
+
+Paid plugins are served from `pay.one.ie/x/<name>.js`. The `release.sh` script stubs them in the OSS repo. To add a new paid plugin:
+
+1. Build the full plugin in `template/packages/plugin-<name>/`
+2. Add `plugin-<name>` to `PAID_PLUGINS` in `template/scripts/release.sh`
+3. Set `serves: "pay.one.ie/x/<name>.js"` in the plugin's `index.ts`
+4. Wire the x402 endpoint in `pay/backend/` to serve the compiled JS after payment
 
 ---
 
 ## Gotchas
 
-- **Internal CLAUDE.md never ships** — it's 43KB of private dev context; the overlay provides a clean public version
-- **`one/` is default-deny** — only files in `ONE_PUBLIC_DOCS` allowlist ship; strategy/partnership docs stay private
-- **SDK publishes first** — CLI and MCP declare `@oneie/sdk` as dependency; registry must have it before they resolve
-- **`release/.git` persists** — `clean` step preserves `.git` so `release/` stays a live checkout of `one-ie/one`
-- **CLI publishes from `packages/cli`** — not `release/`; there's no `release/cli` slot
+- **`workspace:*` must be pinned before publish** — bun/npm won't rewrite it; pin → publish → restore
+- **npm token** — automation token stored in memory as `reference_npm_token` (expires 2026-08-26)
+- **SDK publishes first** — registry must have it before react/mcp/cli resolve it
+- **Paid plugin source never ships** — `strip-guard.sh` verifies this; if it fails, fix before publish
+- **`apps/one` keeps its git history** — `release.sh` commits on top of existing history, preserving stars/forks
 
 ---
 
-*Stage. Publish. Push. The release/ directory IS the one-ie/one repo. Three packages, one truth.*
+*Template syncs via rsync. Paid plugins stub to x402. npm packages publish in dependency order.*

package/commands/restart.md

@@ -0,0 +1,52 @@
+# /restart — Fast dev server restart
+
+Kill Astro (4321–4329), gateway (8788), and channels (8787) servers, then start fresh + sync D1. No cache clearing, no reinstall — just stop and go.
+
+Use when: you want a clean restart without the full `/kill` overhead. Takes ~15s vs ~30s.
+
+## What it does
+
+```
+1. Kill all three servers (ports 4321–4329, 8787–8799)
+2. Sync prod D1 → local miniflare
+3. Start Astro (4321) + gateway (8788) + channels (8787) in parallel
+```
+
+## Steps
+
+**Step 1 — kill:**
+```bash
+cd /Users/toc/Server/one-ie/one.ie/web && \
+  (lsof -ti:4321,4322,4323,4324,4325,4326,4327,4328,4329,8787,8788,8789,8790,8791,8792,8793,8794,8795,8796,8797,8798,8799 2>/dev/null | xargs kill -9 2>/dev/null; \
+   pkill -f "astro dev" 2>/dev/null; \
+   pkill -f "wrangler dev" 2>/dev/null; \
+   pkill -f "local-gateway" 2>/dev/null; true)
+```
+
+**Step 2 — db-sync (blocking, must finish before servers start):**
+```bash
+cd /Users/toc/Server/one-ie/one.ie/web && bun run db:sync
+```
+
+**Step 3 — start three servers (three separate background Bash calls, all in parallel):**
+```bash
+# Astro — web UI
+cd /Users/toc/Server/one-ie/one.ie/web && bun run dev
+
+# Gateway — TypeDB-backed local gateway on 8788
+cd /Users/toc/Server/one-ie/one.ie/web && bun run dev:gateway
+
+# Channels worker — wrangler on 8787
+cd /Users/toc/Server/one-ie/channels && bun run dev
+```
+
+Poll `http://localhost:4321/` until 200, then confirm all three up:
+- Astro: http://localhost:4321 → 200
+- Gateway: http://localhost:8788 → 404 (expected)
+- Channels: http://localhost:8787 → 401 (expected)
+
+## When to use /kill instead
+
+- HMR broken / duplicate React hooks → `/kill` (clears Vite cache)
+- Dep version drift → `/kill` (reinstalls)
+- Ghost port won't release → `/kill`

package/commands/see.md

@@ -13,7 +13,7 @@ Read the world — query substrate state without emitting signals.
 | `toxic` | Blocked paths — resistance > strength | L3 |
 | `frontiers` | Unexplored tag clusters (<10% traversed) | L7 |
 | `paths [--from X] [--to Y]` | Any path query by source/target | L2 |
-| `hypotheses` | Permanent knowledge (hardened by L6) | L6 |
+| `hypotheses` | Hardened learning (persisted by L6) | L6 |
 | `evolved` | Agents that rewrote their system prompts | L5 |
 | `revenue` | Per-path earnings from L4 economic loop | L4 |
 | `events [--since T]` | Signal history and Four Outcomes audit | L1 |
@@ -31,7 +31,7 @@ No mark(), no warn(), no side effects. Every noun is read-only.
 | toxic | `follow()` path read | `/api/state` resistance > strength |
 | frontiers | `follow()` gap read | `/api/state` <10% traversed |
 | paths | `follow()` path query | `/api/state` filtered |
-| hypotheses | TypeDB read | knowledge entities |
+| hypotheses | TypeDB read | learning entities |
 | evolved | TypeDB read | units where generation > 1 |
 | revenue | TypeDB read | paths with revenue attribute |
 | events | TypeDB read | signal history |