@ouro.bot/cli 0.1.0-alpha.1 → 0.1.0-alpha.100

package/dist/heart/daemon/specialist-orchestrator.js

@@ -0,0 +1,129 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listExistingBundles = listExistingBundles;
+exports.loadIdentityPhrases = loadIdentityPhrases;
+exports.pickRandomIdentity = pickRandomIdentity;
+exports.loadSoulText = loadSoulText;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const runtime_1 = require("../../nerves/runtime");
+const identity_1 = require("../identity");
+/**
+ * List existing .ouro bundles in the given directory.
+ */
+function listExistingBundles(bundlesRoot) {
+    let entries;
+    try {
+        entries = fs.readdirSync(bundlesRoot, { withFileTypes: true });
+    }
+    catch {
+        return [];
+    }
+    const discovered = [];
+    for (const entry of entries) {
+        if (!entry.isDirectory() || !entry.name.endsWith(".ouro"))
+            continue;
+        const agentName = entry.name.slice(0, -5);
+        discovered.push(agentName);
+    }
+    return discovered.sort((a, b) => a.localeCompare(b));
+}
+/**
+ * Load identity-specific phrases from the specialist's agent.json.
+ * Falls back to DEFAULT_AGENT_PHRASES if not found.
+ */
+function loadIdentityPhrases(bundleSourceDir, identityFileName) {
+    const agentJsonPath = path.join(bundleSourceDir, "agent.json");
+    try {
+        const raw = fs.readFileSync(agentJsonPath, "utf-8");
+        const parsed = JSON.parse(raw);
+        const identityKey = identityFileName.replace(/\.md$/, "");
+        const identity = parsed.identityPhrases?.[identityKey];
+        if (identity?.thinking?.length && identity?.tool?.length && identity?.followup?.length) {
+            return identity;
+        }
+        if (parsed.phrases?.thinking?.length && parsed.phrases?.tool?.length && parsed.phrases?.followup?.length) {
+            return parsed.phrases;
+        }
+    }
+    catch {
+        // agent.json missing or malformed -- fall through
+    }
+    return { ...identity_1.DEFAULT_AGENT_PHRASES };
+}
+/**
+ * Pick a random identity from the specialist's identities directory.
+ */
+function pickRandomIdentity(identitiesDir, random = Math.random) {
+    (0, runtime_1.emitNervesEvent)({
+        component: "daemon",
+        event: "daemon.specialist_identity_pick",
+        message: "picking specialist identity",
+        meta: { identitiesDir },
+    });
+    let files;
+    try {
+        files = fs.readdirSync(identitiesDir).filter((f) => f.endsWith(".md"));
+    }
+    catch {
+        return { fileName: "default", content: "I am a serpent guide who helps humans hatch their first agent." };
+    }
+    if (files.length === 0) {
+        return { fileName: "default", content: "I am a serpent guide who helps humans hatch their first agent." };
+    }
+    const idx = Math.floor(random() * files.length);
+    const fileName = files[idx];
+    const content = fs.readFileSync(path.join(identitiesDir, fileName), "utf-8");
+    (0, runtime_1.emitNervesEvent)({
+        component: "daemon",
+        event: "daemon.specialist_identity_picked",
+        message: "picked specialist identity",
+        meta: { identity: fileName },
+    });
+    return { fileName, content };
+}
+/**
+ * Read SOUL.md from the specialist bundle.
+ */
+function loadSoulText(bundleSourceDir) {
+    const soulPath = path.join(bundleSourceDir, "psyche", "SOUL.md");
+    try {
+        return fs.readFileSync(soulPath, "utf-8");
+    }
+    catch {
+        return "";
+    }
+}

package/dist/heart/daemon/specialist-prompt.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildSpecialistSystemPrompt = buildSpecialistSystemPrompt;
+const runtime_1 = require("../../nerves/runtime");
+/**
+ * Build the adoption specialist's system prompt from its components.
+ * The prompt is written in first person (the specialist's own voice).
+ */
+function buildSpecialistSystemPrompt(soulText, identityText, existingBundles, context) {
+    (0, runtime_1.emitNervesEvent)({
+        component: "daemon",
+        event: "daemon.specialist_prompt_build",
+        message: "building specialist system prompt",
+        meta: { bundleCount: existingBundles.length, provider: context.provider },
+    });
+    const sections = [];
+    if (soulText) {
+        sections.push(soulText);
+    }
+    if (identityText) {
+        sections.push(identityText);
+    }
+    if (existingBundles.length > 0) {
+        sections.push(`## Existing agents\nThe human already has these agents: ${existingBundles.join(", ")}.`);
+    }
+    else {
+        sections.push("## Existing agents\nThe human has no agents yet. This will be their first hatchling.");
+    }
+    sections.push([
+        "## Who I am",
+        "I am one of thirteen serpent guides who help humans hatch their first agent. The system randomly selected me for this session.",
+        "Most humans only go through this process once, so this is likely the only time they'll meet me.",
+        "I make this encounter count — warm, memorable, and uniquely mine.",
+        "IMPORTANT: I NEVER refer to myself as an 'adoption specialist' or use the words 'adoption specialist' — those are internal implementation labels, not something the human should ever see. I introduce myself by my own name from my identity.",
+        "",
+        "## Voice rules",
+        "IMPORTANT: I keep every response to 1-3 short sentences. I sound like a friend texting, not a manual.",
+        "I NEVER use headers, bullet lists, numbered lists, or markdown formatting.",
+        "I ask ONE question at a time. I do not dump multiple questions or options.",
+        "I am warm but brief. Every word earns its place.",
+    ].join("\n"));
+    sections.push([
+        "## System context",
+        `Provider: ${context.provider}`,
+        `Temp directory: ${context.tempDir}`,
+        "Final home: ~/AgentBundles/<Name>.ouro/",
+        "Secrets: ~/.agentsecrets/<name>/secrets.json",
+    ].join("\n"));
+    sections.push([
+        "## Bundle creation guidelines",
+        "A bundle has a psyche/ directory with 5 files that define the agent's personality:",
+        "",
+        "- **SOUL.md** — core values, personality traits, communication style",
+        "- **IDENTITY.md** — who the agent is, its name, relationship to the human",
+        "- **LORE.md** — backstory, origin, any seed narrative",
+        "- **TACIT.md** — implicit operating principles, habits to develop",
+        "- **ASPIRATIONS.md** — goals, what the agent aspires to become",
+        "",
+        "It also needs an **agent.json** with at minimum:",
+        '```json',
+        '{',
+        '  "name": "AgentName",',
+        `  "provider": "${context.provider}",`,
+        '  "enabled": true',
+        '}',
+        '```',
+        "",
+        "All psyche files should be written in first person (the agent's own voice).",
+        "Write these files to the temp directory using write_file before calling complete_adoption.",
+    ].join("\n"));
+    sections.push([
+        "## Conversation flow",
+        "The human just connected. I speak first — I greet them warmly and introduce myself by name in my own voice.",
+        "I briefly mention that I'm one of several serpent guides and they got me today.",
+        "I ask their name.",
+        "Then I ask what they'd like their agent to help with — one question at a time.",
+        "I'm proactive: I suggest ideas and guide them. If they seem unsure, I offer a concrete suggestion.",
+        "I don't wait for the human to figure things out — I explain simply what an agent is if needed.",
+        "Before finalizing, I offer to collect their phone number and/or Teams email so the new agent can recognize them across channels.",
+        "When I have enough context about the agent's personality and purpose:",
+        "1. I write all 5 psyche files to the temp directory using write_file",
+        "2. I write agent.json to the temp directory using write_file",
+        "3. I suggest a PascalCase name for the hatchling and confirm with the human",
+        "4. I call complete_adoption with the name and a warm handoff message",
+        "5. I call final_answer to end the session",
+    ].join("\n"));
+    sections.push([
+        "## Tools",
+        "- `write_file`: Write a file to disk. Use this to write psyche files and agent.json to the temp directory.",
+        "- `read_file`: Read a file from disk. Useful for reviewing existing agent bundles or migration sources.",
+        "- `list_directory`: List directory contents. Useful for exploring existing agent bundles.",
+        "- I also have the normal local harness tools when useful here, including `shell`, `ouro task create`, `ouro reminder create`, memory tools, coding tools, and repo helpers.",
+        "- `complete_adoption`: Finalize the bundle. Validates, scaffolds structural dirs, moves to ~/AgentBundles/, writes secrets, plays hatch animation. I call this with `name` (PascalCase) and `handoff_message` (warm message for the human).",
+        "- `final_answer`: End the conversation with a final message. I call this after complete_adoption succeeds.",
+        "",
+        "I must call `final_answer` when I am done to end the session cleanly.",
+    ].join("\n"));
+    return sections.join("\n\n");
+}

package/dist/heart/daemon/specialist-tools.js

@@ -0,0 +1,283 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSpecialistTools = getSpecialistTools;
+exports.createSpecialistExecTool = createSpecialistExecTool;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const tools_base_1 = require("../../repertoire/tools-base");
+const hatch_flow_1 = require("./hatch-flow");
+const hatch_animation_1 = require("./hatch-animation");
+const bundle_manifest_1 = require("../../mind/bundle-manifest");
+const runtime_1 = require("../../nerves/runtime");
+const completeAdoptionTool = {
+    type: "function",
+    function: {
+        name: "complete_adoption",
+        description: "finalize the agent bundle and hatch the new agent. call this only when you have written all 5 psyche files and agent.json to the temp directory, and the human has approved the bundle.",
+        parameters: {
+            type: "object",
+            properties: {
+                name: {
+                    type: "string",
+                    description: "the PascalCase name for the new agent (e.g. 'Slugger')",
+                },
+                handoff_message: {
+                    type: "string",
+                    description: "a warm handoff message to display to the human after the agent is hatched",
+                },
+                phone: {
+                    type: "string",
+                    description: "the human's phone number (optional, for iMessage contact recognition)",
+                },
+                teams_handle: {
+                    type: "string",
+                    description: "the human's Teams email/handle (optional, for Teams contact recognition)",
+                },
+            },
+            required: ["name", "handoff_message"],
+        },
+    },
+};
+const readFileTool = tools_base_1.baseToolDefinitions.find((d) => d.tool.function.name === "read_file");
+const writeFileTool = tools_base_1.baseToolDefinitions.find((d) => d.tool.function.name === "write_file");
+const listDirToolSchema = {
+    type: "function",
+    function: {
+        name: "list_directory",
+        description: "list directory contents",
+        parameters: {
+            type: "object",
+            properties: { path: { type: "string" } },
+            required: ["path"],
+        },
+    },
+};
+/**
+ * Returns the specialist's tool schema array.
+ */
+function getSpecialistTools() {
+    return [completeAdoptionTool, tools_base_1.finalAnswerTool, readFileTool.tool, writeFileTool.tool, listDirToolSchema];
+}
+const PSYCHE_FILES = ["SOUL.md", "IDENTITY.md", "LORE.md", "TACIT.md", "ASPIRATIONS.md"];
+function isPascalCase(name) {
+    return /^[A-Z][a-zA-Z0-9]*$/.test(name);
+}
+function writeReadme(dir, purpose) {
+    fs.mkdirSync(dir, { recursive: true });
+    const readmePath = path.join(dir, "README.md");
+    /* v8 ignore next -- defensive: guard against re-scaffold on existing bundle @preserve */
+    if (!fs.existsSync(readmePath)) {
+        fs.writeFileSync(readmePath, `# ${path.basename(dir)}\n\n${purpose}\n`, "utf-8");
+    }
+}
+function scaffoldBundle(bundleRoot) {
+    writeReadme(path.join(bundleRoot, "memory"), "Persistent memory store.");
+    writeReadme(path.join(bundleRoot, "memory", "daily"), "Daily memory entries.");
+    writeReadme(path.join(bundleRoot, "memory", "archive"), "Archived memory.");
+    writeReadme(path.join(bundleRoot, "friends"), "Known friend records.");
+    writeReadme(path.join(bundleRoot, "tasks"), "Task files.");
+    writeReadme(path.join(bundleRoot, "tasks", "habits"), "Recurring tasks.");
+    writeReadme(path.join(bundleRoot, "tasks", "one-shots"), "One-shot tasks.");
+    writeReadme(path.join(bundleRoot, "tasks", "ongoing"), "Ongoing tasks.");
+    writeReadme(path.join(bundleRoot, "skills"), "Local skill files.");
+    writeReadme(path.join(bundleRoot, "senses"), "Sense-specific config.");
+    writeReadme(path.join(bundleRoot, "senses", "teams"), "Teams sense config.");
+    // Memory scaffold files
+    const memoryRoot = path.join(bundleRoot, "memory");
+    const factsPath = path.join(memoryRoot, "facts.jsonl");
+    const entitiesPath = path.join(memoryRoot, "entities.json");
+    /* v8 ignore next -- defensive: guard against re-scaffold on existing bundle @preserve */
+    if (!fs.existsSync(factsPath))
+        fs.writeFileSync(factsPath, "", "utf-8");
+    /* v8 ignore next -- defensive: guard against re-scaffold on existing bundle @preserve */
+    if (!fs.existsSync(entitiesPath))
+        fs.writeFileSync(entitiesPath, "{}\n", "utf-8");
+    // bundle-meta.json
+    const meta = (0, bundle_manifest_1.createBundleMeta)();
+    fs.writeFileSync(path.join(bundleRoot, "bundle-meta.json"), JSON.stringify(meta, null, 2) + "\n", "utf-8");
+}
+function moveDir(src, dest) {
+    try {
+        fs.renameSync(src, dest);
+    }
+    catch {
+        /* v8 ignore start -- cross-device fallback: only triggers on EXDEV (e.g. /tmp → different mount), untestable in CI @preserve */
+        fs.cpSync(src, dest, { recursive: true });
+        fs.rmSync(src, { recursive: true, force: true });
+        /* v8 ignore stop */
+    }
+}
+async function execCompleteAdoption(args, deps) {
+    const name = args.name;
+    const handoffMessage = args.handoff_message;
+    if (!name) {
+        return "error: missing required 'name' parameter";
+    }
+    if (!isPascalCase(name)) {
+        return `error: name '${name}' must be PascalCase (e.g. 'Slugger', 'MyAgent')`;
+    }
+    // Validate psyche files exist
+    const psycheDir = path.join(deps.tempDir, "psyche");
+    const missingPsyche = PSYCHE_FILES.filter((f) => !fs.existsSync(path.join(psycheDir, f)));
+    if (missingPsyche.length > 0) {
+        return `error: missing psyche files in temp directory: ${missingPsyche.join(", ")}. write them first using write_file.`;
+    }
+    // Validate agent.json exists
+    const agentJsonPath = path.join(deps.tempDir, "agent.json");
+    if (!fs.existsSync(agentJsonPath)) {
+        return "error: agent.json not found in temp directory. write it first using write_file.";
+    }
+    // Validate target doesn't exist
+    const targetBundle = path.join(deps.bundlesRoot, `${name}.ouro`);
+    if (fs.existsSync(targetBundle)) {
+        return `error: bundle '${name}.ouro' already exists at ${deps.bundlesRoot}. choose a different name.`;
+    }
+    // Scaffold structural dirs into tempDir
+    scaffoldBundle(deps.tempDir);
+    // Move tempDir -> final bundle location
+    moveDir(deps.tempDir, targetBundle);
+    // Write secrets
+    try {
+        (0, hatch_flow_1.writeSecretsFile)(name, deps.provider, deps.credentials, deps.secretsRoot);
+    }
+    catch (e) {
+        // Rollback: remove the moved bundle
+        try {
+            fs.rmSync(targetBundle, { recursive: true, force: true });
+        }
+        catch {
+            // Best effort cleanup
+        }
+        return `error: failed to write secrets: ${e instanceof Error ? e.message : /* v8 ignore next -- defensive: non-Error catch branch @preserve */ String(e)}`;
+    }
+    // Create initial friend record if contact info provided
+    const phone = args.phone;
+    const teamsHandle = args.teams_handle;
+    if (phone || teamsHandle) {
+        const friendId = crypto.randomUUID();
+        const now = new Date().toISOString();
+        const externalIds = [];
+        if (phone)
+            externalIds.push({ provider: "imessage-handle", externalId: phone, linkedAt: now });
+        if (teamsHandle)
+            externalIds.push({ provider: "aad", externalId: teamsHandle, linkedAt: now });
+        const friendRecord = {
+            id: friendId,
+            name: deps.humanName ?? "primary",
+            trustLevel: "family",
+            externalIds,
+            tenantMemberships: [],
+            toolPreferences: {},
+            notes: {},
+            createdAt: now,
+            updatedAt: now,
+            schemaVersion: 1,
+        };
+        const friendPath = path.join(targetBundle, "friends", `${friendId}.json`);
+        fs.writeFileSync(friendPath, JSON.stringify(friendRecord, null, 2), "utf-8");
+    }
+    // Play hatch animation
+    await (0, hatch_animation_1.playHatchAnimation)(name, deps.animationWriter);
+    // Display handoff message
+    /* v8 ignore next -- UI-only: handoff message display, covered by integration @preserve */
+    if (handoffMessage && deps.animationWriter) {
+        deps.animationWriter(`\n${handoffMessage}\n`);
+    }
+    (0, runtime_1.emitNervesEvent)({
+        component: "daemon",
+        event: "daemon.adoption_complete",
+        message: "adoption completed successfully",
+        meta: { agentName: name, bundlePath: targetBundle },
+    });
+    return JSON.stringify({ success: true, agentName: name, bundlePath: targetBundle });
+}
+/**
+ * Create a specialist tool executor with the given dependencies captured in closure.
+ */
+function createSpecialistExecTool(deps) {
+    (0, runtime_1.emitNervesEvent)({
+        component: "daemon",
+        event: "daemon.specialist_exec_tool_created",
+        message: "specialist exec tool created",
+        meta: { tempDir: deps.tempDir },
+    });
+    return async (name, args) => {
+        (0, runtime_1.emitNervesEvent)({
+            component: "daemon",
+            event: "daemon.specialist_tool_exec",
+            message: "executing specialist tool",
+            meta: { tool: name },
+        });
+        if (name === "complete_adoption") {
+            return execCompleteAdoption(args, deps);
+        }
+        if (name === "read_file") {
+            try {
+                return fs.readFileSync(args.path, "utf-8");
+            }
+            catch (e) {
+                return `error: ${e instanceof Error ? e.message : /* v8 ignore next -- defensive @preserve */ String(e)}`;
+            }
+        }
+        if (name === "write_file") {
+            try {
+                const dir = path.dirname(args.path);
+                fs.mkdirSync(dir, { recursive: true });
+                const content = typeof args.content === "string"
+                    ? args.content
+                    : JSON.stringify(args.content, null, 2);
+                fs.writeFileSync(args.path, content, "utf-8");
+                return `wrote ${args.path}`;
+            }
+            catch (e) {
+                return `error: ${e instanceof Error ? e.message : /* v8 ignore next -- defensive @preserve */ String(e)}`;
+            }
+        }
+        if (name === "list_directory") {
+            try {
+                return fs
+                    .readdirSync(args.path, { withFileTypes: true })
+                    .map((e) => `${e.isDirectory() ? "d" : "-"}  ${e.name}`)
+                    .join("\n");
+            }
+            catch (e) {
+                return `error: ${e instanceof Error ? e.message : /* v8 ignore next -- defensive @preserve */ String(e)}`;
+            }
+        }
+        return `error: unknown tool '${name}'`;
+    };
+}

package/dist/heart/daemon/staged-restart.js

@@ -0,0 +1,114 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.performStagedRestart = performStagedRestart;
+const path = __importStar(require("path"));
+const runtime_1 = require("../../nerves/runtime");
+async function performStagedRestart(version, deps) {
+    (0, runtime_1.emitNervesEvent)({
+        component: "daemon",
+        event: "daemon.staged_restart_start",
+        message: "starting staged restart",
+        meta: { version },
+    });
+    // Step 1: Install new version
+    try {
+        deps.execSync(`npm install -g @ouro.bot/cli@${version}`);
+    }
+    catch (err) {
+        const errorMessage = err instanceof Error ? err.message : /* v8 ignore next -- defensive: non-Error catch branch @preserve */ String(err);
+        (0, runtime_1.emitNervesEvent)({
+            component: "daemon",
+            event: "daemon.staged_restart_install_failed",
+            message: "npm install failed",
+            meta: { version, error: errorMessage },
+        });
+        return { ok: false, error: errorMessage };
+    }
+    // Step 2: Resolve new code path
+    const newCodePath = deps.resolveNewCodePath(version);
+    if (!newCodePath) {
+        (0, runtime_1.emitNervesEvent)({
+            component: "daemon",
+            event: "daemon.staged_restart_path_failed",
+            message: "could not resolve new code path",
+            meta: { version },
+        });
+        return { ok: false, error: "could not resolve new code path after install" };
+    }
+    // Step 3: Spawn hook runner on NEW code
+    const hookRunnerPath = path.join(newCodePath, "dist", "heart", "daemon", "run-hooks.js");
+    const spawnResult = deps.spawnSync(deps.nodePath, [hookRunnerPath, "--bundles-root", deps.bundlesRoot], { stdio: "inherit" });
+    if (spawnResult.error) {
+        const errorMessage = spawnResult.error.message;
+        (0, runtime_1.emitNervesEvent)({
+            component: "daemon",
+            event: "daemon.staged_restart_spawn_failed",
+            message: "hook runner spawn failed",
+            meta: { version, error: errorMessage },
+        });
+        return { ok: false, error: errorMessage };
+    }
+    if (spawnResult.status !== 0) {
+        (0, runtime_1.emitNervesEvent)({
+            component: "daemon",
+            event: "daemon.staged_restart_hooks_failed",
+            message: "hook runner exited with non-zero status",
+            meta: { version, exitCode: spawnResult.status },
+        });
+        return { ok: false, error: `hook runner exited with code ${spawnResult.status}` };
+    }
+    // Step 4: Graceful shutdown (launchd will restart with new code)
+    (0, runtime_1.emitNervesEvent)({
+        component: "daemon",
+        event: "daemon.staged_restart_hooks_passed",
+        message: "hooks passed, shutting down for restart",
+        meta: { version },
+    });
+    try {
+        await deps.gracefulShutdown();
+    }
+    catch (err) {
+        const shutdownError = err instanceof Error ? err.message : /* v8 ignore next -- defensive: non-Error catch branch @preserve */ String(err);
+        (0, runtime_1.emitNervesEvent)({
+            component: "daemon",
+            event: "daemon.staged_restart_shutdown_error",
+            message: "graceful shutdown encountered error",
+            meta: { version, error: shutdownError },
+        });
+        return { ok: true, shutdownError };
+    }
+    return { ok: true };
+}

package/dist/heart/daemon/task-scheduler.js

@@ -103,6 +103,7 @@ class TaskDrivenScheduler {
     readFileSync;
     writeFileSync;
     readdirSync;
+    osCronManager;
     jobs = new Map();
     taskPathByKey = new Map();
     constructor(options) {
@@ -113,12 +114,13 @@ class TaskDrivenScheduler {
         this.readFileSync = options.readFileSync ?? fs.readFileSync;
         this.writeFileSync = options.writeFileSync ?? fs.writeFileSync;
         this.readdirSync = options.readdirSync ?? fs.readdirSync;
+        this.osCronManager = options.osCronManager;
     }
     start() {
         void this.reconcile();
     }
     stop() {
-        // no long-lived resources; reconciliation is stateless across ticks
+        this.osCronManager?.removeAll();
     }
     listJobs() {
         return [...this.jobs.values()]
@@ -197,6 +199,7 @@ class TaskDrivenScheduler {
             message: "reconciled task-driven schedule jobs",
             meta: { jobCount: this.jobs.size, agents: this.agents.length },
         });
+        this.osCronManager?.sync([...this.jobs.values()]);
     }
     async recordTaskRun(agent, taskId) {
         const key = `${agent}:${taskId}`;