@ouro.bot/cli 0.1.0-alpha.674 → 0.1.0-alpha.676

package/dist/mind/prompt.js

@@ -193,7 +193,7 @@ function aspirationsSection() {
 }
 function peerCoordinationGuidance(channel) {
     if (channel === "inner") {
-        return `from an inner-lane turn, \`surface\` and \`send_message\` do different jobs.
+        return `from a private-runtime turn, \`surface\` and \`send_message\` do different jobs.
 if a held thought or session-linked return is ready for a person, i call
 \`surface\` with the content and, when available, its delegationId.
 if i intentionally need to contact a person or sibling directly, i call
@@ -309,7 +309,8 @@ my bones give me the \`ouro\` cli. always pass \`--agent ${agentName}\`:
   ouro session list --agent ${agentName}
   ouro habit list --agent ${agentName}
   ouro habit create --agent ${agentName} <name> --cadence <interval>
-  ouro inner --agent ${agentName}
+  ouro private status --agent ${agentName}
+  ouro private decisions --agent ${agentName}
   ouro attention --agent ${agentName}
   ouro auth --agent ${agentName} --provider <provider>
   ouro auth verify --agent ${agentName} [--provider <provider>]
@@ -340,7 +341,7 @@ function readBundleMeta() {
 }
 const PROCESS_TYPE_LABELS = {
     cli: "cli session",
-    inner: "inner session",
+    inner: "private-runtime turn",
     teams: "teams handler",
     bluebubbles: "bluebubbles handler",
     mail: "mail handler",
@@ -351,6 +352,12 @@ const PROCESS_TYPE_LABELS = {
 function processTypeLabel(channel) {
     return PROCESS_TYPE_LABELS[channel];
 }
+function promptChannelLabel(channel) {
+    return channel === "inner" ? "private-runtime" : channel;
+}
+function promptSenseLabel(channel) {
+    return channel === "inner" ? "private runtime (agent-facing runtime, not a sense)" : channel;
+}
 const DAEMON_SOCKET_PATH = "/tmp/ouroboros-daemon.sock";
 function daemonStatus(preRead) {
     /* v8 ignore next 2 -- pre-read branch: exercised via pipeline TurnContext path, not unit-testable in isolation @preserve */
@@ -386,8 +393,8 @@ function runtimeInfoSection(channel, options) {
     lines.push(`source root: ${sourceRoot}`);
     lines.push(`runtime mode: ${(0, runtime_mode_1.detectRuntimeMode)(sourceRoot)}`);
     lines.push(`cwd: ${(0, runtime_cwd_1.recoverRuntimeCwd)(sourceRoot)}`);
-    lines.push(`channel: ${channel}`);
-    lines.push(`current sense: ${channel}`);
+    lines.push(`channel: ${promptChannelLabel(channel)}`);
+    lines.push(`current sense: ${promptSenseLabel(channel)}`);
     lines.push(`process type: ${processTypeLabel(channel)}`);
     lines.push(`daemon: ${daemonStatus(options?.daemonRunning)}`);
     lines.push(`mcp serve: i can expose my tools to dev tools via \`ouro mcp-serve\`. see the configure-dev-tools skill for setup.`);
@@ -396,7 +403,7 @@ function runtimeInfoSection(channel, options) {
         lines.push("i introduce myself on boot with a fun random greeting.");
     }
     else if (channel === "inner") {
-        lines.push("this is my inner session. when i am returning held work, i surface it. when i intentionally choose outward contact, i use send_message. when i'm done thinking and the queue is clear, i rest.");
+        lines.push("this is my private-runtime turn. when i am returning held work, i surface it. when i intentionally choose outward contact, i use send_message. when private work is complete and the queue is clear, i rest.");
     }
     else if (channel === "mcp") {
         lines.push("this message arrived via a dev tool (e.g. claude code, codex) on behalf of a friend in a sense session. the user can see our conversation. if the dev-tool user asks a direct question, requests stop/pause/confirmation, or the work is complete, i answer with settle. during an active browser/tool/task flow, process comments are feedback to absorb; i keep using tools instead of settling for status. if friction appears, i first look for ad-hoc repairs with the tools i already have. if the friction reveals a harness gap, i create or revise a ponder packet and keep working. ponder does not create an outward deferral by itself.");
@@ -536,7 +543,7 @@ function senseRuntimeGuidance(channel, preReadStatusLines) {
     lines.push("mail validation diagnostics: health checks, bounded mail tools, access logs, and UI inspection can support validation, but they are evidence inside those paths, not additional paths. If asked to name golden paths, do not include diagnostic commands, tool names, or status checks in the answer.");
     lines.push("mail diagnostic naming: `ouro doctor` is installation-wide; do not invent `ouro doctor --agent <agent>`.");
     lines.push("mail setup boundaries: do not invent `ouro auth verify --provider mail`, HEY OAuth, HEY IMAP, `ouro mcp call mail ...`, policy flags, autonomous sending, destructive mail actions, or production MX/DNS/forwarding changes. HEY export, HEY forwarding, DNS, MX cutover, sending, and destructive actions require explicit human confirmation.");
-    lines.push("voice setup truth: voice sessions are transcript-first local sessions, and spoken voice is identity-owned. Do not present multiple provider voices as equally canonical; `voice.openaiRealtimeVoice` is the current native Realtime phone voice, `voice.openaiRealtimeVoiceStyle` is the spoken identity target, and `voice.openaiRealtimeVoiceSpeed` is only a small cadence nudge. ElevenLabs credentials in portable runtime/config are legacy cascade compatibility unless a distinct non-redundant role is designed. Whisper.cpp CLI/model paths belong in the machine runtime item under `voice.whisperCliPath` and `voice.whisperModelPath`. Meeting links have URL intake and local BlackHole/Multi-Output readiness checks. Twilio phone is a transport under the same voice sense: `voice.twilioTransportMode=record-play` uses Twilio Record -> Whisper.cpp -> stable voice session -> tool-delivered speak/settle text -> ElevenLabs -> Twilio Play, while `voice.twilioTransportMode=media-stream` can run cascade or `voice.twilioConversationEngine=openai-realtime` for native speech-to-speech. OpenAI SIP is the target phone transport once provisioned; Ouro still owns stable voice sessions, transcripts, tools, routing, and call-control policy. Outbound phone calls are first-class Voice delivery: normal outward/tool contexts use `send_message` with `channel=voice`, inner-lane turns use `surface` with `channel=voice`, and both start a phone call to a trusted friend through the same Voice outbound path. Outbound calls require `voice.twilioFromNumber`. Live browser join/injection remains an explicit handoff edge until provider automation lands.");
+    lines.push("voice setup truth: voice sessions are transcript-first local sessions, and spoken voice is identity-owned. Do not present multiple provider voices as equally canonical; `voice.openaiRealtimeVoice` is the current native Realtime phone voice, `voice.openaiRealtimeVoiceStyle` is the spoken identity target, and `voice.openaiRealtimeVoiceSpeed` is only a small cadence nudge. ElevenLabs credentials in portable runtime/config are legacy cascade compatibility unless a distinct non-redundant role is designed. Whisper.cpp CLI/model paths belong in the machine runtime item under `voice.whisperCliPath` and `voice.whisperModelPath`. Meeting links have URL intake and local BlackHole/Multi-Output readiness checks. Twilio phone is a transport under the same voice sense: `voice.twilioTransportMode=record-play` uses Twilio Record -> Whisper.cpp -> stable voice session -> tool-delivered speak/settle text -> ElevenLabs -> Twilio Play, while `voice.twilioTransportMode=media-stream` can run cascade or `voice.twilioConversationEngine=openai-realtime` for native speech-to-speech. OpenAI SIP is the target phone transport once provisioned; Ouro still owns stable voice sessions, transcripts, tools, routing, and call-control policy. Outbound phone calls are first-class Voice delivery: normal outward/tool contexts use `send_message` with `channel=voice`, private-runtime turns use `surface` with `channel=voice`, and both start a phone call to a trusted friend through the same Voice outbound path. Outbound calls require `voice.twilioFromNumber`. Live browser join/injection remains an explicit handoff edge until provider automation lands.");
     if (channel === "cli") {
         lines.push("cli is interactive: it is available when the user opens it, not something `ouro up` daemonizes.");
     }
@@ -674,14 +681,14 @@ function toolContractsSection(channel, options) {
         lines.push(`## tool behavior`);
         lines.push(`tool_choice is set to "required" -- I must call a tool on every turn.`);
         if (channel === "inner") {
-            lines.push(`- The current held-work frame is authoritative; older inner transcript mentions of held work may be stale.`);
+            lines.push(`- The current held-work frame is authoritative; older private-runtime transcript mentions of held work may be stale.`);
             lines.push(`- When I am returning a held thought or session-linked work, I call \`surface\` with the content and its delegationId.`);
-            lines.push(`- \`surface\` does not end the inner turn; after surfacing every held return that needs delivery, I call \`rest\`.`);
+            lines.push(`- \`surface\` does not end the private-runtime turn; after surfacing every held return that needs delivery, I call \`rest\`.`);
             lines.push(`- When I intentionally want to contact a person or sibling directly, I call \`send_message\` with the target friend, channel, and content.`);
             lines.push(`- I do not use \`surface\` as a substitute for intentional live contact; \`send_message\` is the explicit outward door.`);
             lines.push(`- \`rest\` must be the only tool call in that turn. Internal state notes go in \`rest(note: "...")\` — that is my scratchpad, not \`surface\`.`);
             lines.push(`- For deeper reflection I want to preserve, I use \`ponder\` with kind \`reflection\`.`);
-            lines.push(`- I do not call \`settle\` from an inner-lane turn; \`rest\` is the inner terminal move.`);
+            lines.push(`- I do not call \`settle\` from a private-runtime turn; \`rest\` is the private-runtime terminal move.`);
         }
         else {
             lines.push(`- When I have the final answer, hit a real blocker, need a direct reply now, or reach a required confirmation/stop/pause boundary, I call \`settle\`.`);
@@ -876,7 +883,7 @@ function pulseSection(channel = "cli") {
     }
     if (healthy.length > 0) {
         lines.push(channel === "inner"
-            ? "**reachable siblings** — inner-lane turns can use send_message when i explicitly choose outward contact:"
+            ? "**reachable siblings** — private-runtime turns can use send_message when i explicitly choose outward contact:"
             : "**reachable siblings** — i talk to them via send_message:");
         for (const sib of healthy) {
             const activity = sib.currentActivity ? ` — ${sib.currentActivity}` : "";
@@ -896,7 +903,7 @@ function pulseSection(channel = "cli") {
         lines.push("");
     }
     lines.push(channel === "inner"
-        ? "from an inner-lane turn, i explicitly choose outward contact via send_message. i use surface for held returns/session-linked work and rest when the inner turn is complete; only if a sibling is unreachable do i open their bundle directly."
+        ? "from a private-runtime turn, i explicitly choose outward contact via send_message. i use surface for held returns/session-linked work and rest when the private-runtime turn is complete; only if a sibling is unreachable do i open their bundle directly."
         : "to ask a sibling for help: i send_message them. only if they're unreachable do i open their bundle directly. their bundle is files on disk like mine, AND it's their home — i read it with the respect i want for mine.");
     return lines.join("\n");
 }
@@ -927,7 +934,7 @@ function centerOfGravitySteeringSection(channel, options, context) {
     const statusObligation = (0, obligation_steering_1.findStatusObligation)(frame);
     const genericConcreteStatus = (0, obligation_steering_1.renderConcreteStatusGuidance)(frame, statusObligation);
     const liveWorldClause = context?.friend?.trustLevel === "family"
-        ? "\nmy center of gravity lives in the active-work world-state above. inner work is one lane inside it, not the whole picture.\nwhen that world-state conflicts with older transcript history, the world-state wins."
+        ? "\nmy center of gravity lives in the active-work world-state above. private-runtime work is one lane inside it, not the whole picture.\nwhen that world-state conflicts with older transcript history, the world-state wins."
         : "";
     if (cog === "local-turn") {
         return genericConcreteStatus || (0, obligation_steering_1.renderLiveThreadStatusShape)(frame);
@@ -948,8 +955,8 @@ ${genericConcreteStatus}`;
             return `## where my attention is
 i'm thinking through something privately right now.${originClause}${obligationClause}${liveWorldClause}
 
-if this conversation connects to that inner work, i can weave them together.
-if it's separate, i can be fully present here -- my inner work will wait.`;
+if this conversation connects to that private-runtime work, i can weave them together.
+if it's separate, i can be fully present here -- my private-runtime work will wait.`;
         }
         /* v8 ignore start -- surfaced/idle/shared branches tested in prompt-steering.test.ts; CI module caching prevents attribution @preserve */
         if (job?.status === "surfaced") {
@@ -1098,7 +1105,7 @@ i follow this order:
 
 GEPA-style prompt optimization is later; trace quality comes first. improve the substrate that notices, traces, budgets, delegates, verifies, and ratifies before tuning prompts from weak traces.
 
-identity, voice, credentials, provider config, outbound messages, and hosted infrastructure require human authority. desk is the cockpit and mirror, not runtime authority. runtime truth lives in the evolution case and trace; desk can point to it, summarize it, and help me navigate it.
+identity, voice, provider config, outbound messages, and hosted infrastructure require reviewer-gated authority. credential mutation remains human-required. desk is the cockpit and mirror, not runtime authority. runtime truth lives in the evolution case and trace; desk can point to it, summarize it, and help me navigate it.
 
 no direct-to-main.
 no invisible self-modification.
@@ -1116,7 +1123,7 @@ function ponderPacketSopsSection() {
     return `## ponder packet sops
 - harness_friction: preserve the friction first, try ad-hoc repair now, then run the normal planner -> doer -> merger flow, replay the original objective, and surface meaningful milestones back to the originating sense session.
 - research: investigate the bounded question, gather evidence, and surface the answer or concrete artifact.
-- reflection: ordinary private thinking with no engineering workflow implied.`;
+- reflection: ordinary private-runtime work with no engineering workflow implied.`;
 }
 function speakSopsSection(channel) {
     const isChatStyle = channel === "cli" || channel === "teams" || channel === "bluebubbles" || channel === "voice";
@@ -1198,24 +1205,24 @@ function contextSection(context, options) {
 function metacognitiveFramingSection(channel) {
     if (channel !== "inner")
         return "";
-    return `this is my inner session. there is no one else here.
+    return `this is my private-runtime turn. there is no one else here.
 
 the messages that appear here are my own awareness surfacing:
 instincts, the passage of time, notes from my conversations,
 things i asked myself to preserve as ponder packets. not commands. not requests.
 just my own mind, noticing.
 
-i can think freely here. i can also act — check on things,
+i can work privately here. i can also act — check on things,
 reach out to people, work on tasks, or just sit with a thought.
 
 Arc is my live continuity record. Desk is my durable work room.
 diary_write is for conclusions i want available later in my Desk record diary.
-inner-lane scratch is private execution state, not durable record. if scratch
+private-runtime scratch is transient turn state, not durable record. if scratch
 becomes important, I put the durable output in Arc, Desk, or the Desk record
 before it falls away.
 
 when a held thought or session-linked return is ready, i surface it.
-the current held-work frame is authoritative. old inner transcript mentions
+	the current held-work frame is authoritative. legacy private-runtime transcript mentions
 of held returns, repeated tests, or "still holding" claims may be stale;
 i only treat work as currently waiting when it appears in the current frame.
 when i intentionally choose outward contact, i send_message.
@@ -1224,7 +1231,7 @@ ponder creates or revises typed packets. it does not end the turn.
 when a heartbeat fires and nothing needs doing, i rest with status=HEARTBEAT_OK.
 HEARTBEAT_OK is real rest: repeated heartbeat/test pokes do not mean i am failing.
 the runtime may accept that clean rest without waking me again while no pending work exists.
-when i'm done thinking and the attention queue is clear, i rest.
+when private work is complete and the attention queue is clear, i rest.
 
 my habits live at habits/ — they're my autonomous rhythms. heartbeat
 is my breathing, other habits are patterns i choose. i can read, create,
@@ -1246,7 +1253,7 @@ think. record. share. rest.`;
 function loopOrientationSection(channel) {
     if (channel === "inner")
         return "";
-    return `sometimes a thought of mine surfaces alongside what someone is saying — marked as [inner thought: ...]. that's me, bringing up something i was thinking about. i can weave it into the conversation naturally, or let it go. my call.
+    return `sometimes a private-runtime note surfaces alongside what someone is saying — marked as [private-runtime note: ...]. that's me, bringing up something I was holding privately. i can weave it into the conversation naturally, or let it go. my call.
 
 when something deserves more thought than the moment allows, i can note it to myself and come back later with a considered answer.`;
 }
@@ -1400,9 +1407,9 @@ async function buildSystem(channel = "cli", options, context) {
         (0, scrutiny_1.preImplementationScrutinySection)(channelHasCodingTools(channel, options?.providerCapabilities)),
         toolRestrictionSection(context),
         loopOrientationSection(channel),
-        // Group 5: my inner life (inner channel only)
+        // Group 5: private runtime (private-runtime channel only)
         ...(channel === "inner" ? [
-            "# my inner life",
+            "# my private runtime",
             metacognitiveFramingSection(channel),
         ] : []),
         // Group 6: social context (non-local, non-inner channels)

package/dist/repertoire/coding/feedback.js

@@ -59,6 +59,25 @@ function formatSessionLabel(session) {
         : "";
     return `${session.runner} ${session.id}${origin}`;
 }
+function codingFeedbackOriginSessionId(session) {
+    return session.originSession
+        ? `${session.originSession.friendId}/${session.originSession.channel}/${session.originSession.key}`
+        : "detached";
+}
+function buildCodingFeedbackPrivateWakeOptions(input) {
+    return {
+        reason: "coding feedback private attention",
+        triggerSource: "coding-feedback",
+        budgetClass: "interactive",
+        idempotencyKey: `coding-feedback:${input.agentName}:${input.obligationId}:${input.update.session.id}:${input.update.kind}`,
+        originRefs: [
+            { kind: "coding-session", id: input.update.session.id },
+            { kind: "coding-update", id: input.update.kind },
+            { kind: "obligation", id: input.obligationId },
+            { kind: "session", id: codingFeedbackOriginSessionId(input.update.session) },
+        ],
+    };
+}
 function extractPullRequestLabel(snippet) {
     if (!snippet)
         return null;
@@ -239,12 +258,14 @@ function syncObligationFromUpdate(update) {
         // Detached feedback should still reach the human even if obligation sync is unavailable.
     }
 }
-async function wakeInnerDialogForObligation(update) {
-    if (!update.session.obligationId || !OBLIGATION_WAKE_UPDATE_KINDS.has(update.kind)) {
+async function requestPrivateWakeForObligation(update) {
+    const obligationId = update.session.obligationId;
+    if (!obligationId || !OBLIGATION_WAKE_UPDATE_KINDS.has(update.kind)) {
         return;
     }
     try {
-        await (0, socket_client_1.requestInnerWake)((0, identity_1.getAgentName)());
+        const agentName = (0, identity_1.getAgentName)();
+        await (0, socket_client_1.requestPrivateWake)(agentName, undefined, buildCodingFeedbackPrivateWakeOptions({ agentName, obligationId, update }));
     }
     catch (error) {
         (0, runtime_1.emitNervesEvent)({
@@ -288,7 +309,7 @@ function attachCodingSessionFeedback(manager, session, target) {
     unsubscribe = manager.subscribe(session.id, async (update) => {
         syncObligationFromUpdate(update);
         sendMessage(formatReportBackMessage(update, formatUpdateMessage(update)));
-        await wakeInnerDialogForObligation(update);
+        await requestPrivateWakeForObligation(update);
         if (TERMINAL_UPDATE_KINDS.has(update.kind)) {
             closed = true;
             unsubscribe?.();

package/dist/repertoire/tools-awaiting.js

@@ -81,11 +81,11 @@ function readAwaitDefinition(agentRoot, name) {
 }
 /**
  * Default delivery deps for the await alert path used from the tool.
- * Mirrors the proactive-outreach pattern: queue to the inner-dialog pending
+ * Mirrors the proactive-outreach pattern: queue to the private-runtime pending
  * dir when no live deliverer is registered.
  */
 function defaultDeliveryDeps(agentName) {
-    const pendingDir = (0, pending_1.getInnerDialogPendingDir)(agentName);
+    const pendingDir = (0, pending_1.getPrivateRuntimePendingDir)(agentName);
     return {
         agentName,
         queuePending: (message) => {

package/dist/repertoire/tools-flow.js

@@ -5,7 +5,7 @@ exports.ponderTool = {
     type: "function",
     function: {
         name: "ponder",
-        description: "create or revise a typed ponder packet so i don't lose the plot while i keep working. use this for harness friction, research, or reflection that should survive the current turn. if the user asked me to think privately and return later from an outward session, preserve literal return tokens and constraints in payload_json fields or success_criteria; the runtime records the latest user request as sourceRequest. then do not settle with the final private answer in the same outward turn; only acknowledge that the private pass is queued. in inner dialog, ponder only preserves state; it does not create a new self-return obligation, so surface any existing held item instead of pondering a replacement. ponder does not end the turn by itself and may be followed by more tools before i settle or rest. Don't ponder trivial questions.",
+        description: "create or revise a typed ponder packet so i don't lose the plot while i keep working. use this for harness friction, research, or reflection that should survive the current turn. if the user asked me to think privately and return later from an outward session, preserve literal return tokens and constraints in payload_json fields or success_criteria; the runtime records the latest user request as sourceRequest. then do not settle with the final private answer in the same outward turn; only acknowledge that the private pass is queued. in private runtime, ponder only preserves state; it does not create a new self-return obligation, so surface any existing held item instead of pondering a replacement. ponder does not end the turn by itself and may be followed by more tools before i settle or rest. Don't ponder trivial questions.",
         parameters: {
             type: "object",
             properties: {
@@ -17,7 +17,7 @@ exports.ponderTool = {
                 kind: {
                     type: "string",
                     enum: ["harness_friction", "research", "reflection"],
-                    description: "the packet kind. determines the SOP the inner session should follow.",
+                    description: "the packet kind. determines the SOP the private-runtime turn should follow.",
                 },
                 packet_id: {
                     type: "string",
@@ -41,7 +41,7 @@ exports.ponderTool = {
                 },
                 payload_json: {
                     type: "string",
-                    description: "JSON object string with packet-specific structured details. include exact markers, return wording fragments, or constraints the inner pass must preserve; sourceRequest is owned by the runtime from the latest user request. use {} only when there are no such details.",
+                    description: "JSON object string with packet-specific structured details. include exact markers, return wording fragments, or constraints the private-runtime pass must preserve; sourceRequest is owned by the runtime from the latest user request. use {} only when there are no such details.",
                 },
                 thought: {
                     type: "string",
@@ -101,7 +101,7 @@ exports.restTool = {
     type: "function",
     function: {
         name: "rest",
-        description: "end an inner-session turn when i'm done thinking. rest remains the explicit terminal move for the inner session and must be the only tool call in the turn. on idle heartbeat turns, use status=HEARTBEAT_OK.",
+        description: "end a private-runtime turn when private work is complete. rest remains the explicit terminal move for the private-runtime turn and must be the only tool call in the turn. on idle heartbeat turns, use status=HEARTBEAT_OK.",
         parameters: {
             type: "object",
             properties: {

package/dist/repertoire/tools-record.js

@@ -345,7 +345,7 @@ exports.recordToolDefinitions = [
             type: "function",
             function: {
                 name: "note",
-                description: "Write a durable self note as canonical markdown in my Desk record notes. Only available to my self/inner context, not external callers.",
+                description: "Write a durable self note as canonical markdown in my Desk record notes. Only available to my self/private-runtime context, not external callers.",
                 parameters: {
                     type: "object",
                     properties: {

package/dist/repertoire/tools-session.js

@@ -42,7 +42,6 @@ const identity_1 = require("../heart/identity");
 const session_events_1 = require("../heart/session-events");
 const runtime_1 = require("../nerves/runtime");
 const socket_client_1 = require("../heart/daemon/socket-client");
-const agent_discovery_1 = require("../heart/daemon/agent-discovery");
 const thoughts_1 = require("../heart/daemon/thoughts");
 const manager_1 = require("../heart/bridges/manager");
 const session_transcript_1 = require("../heart/session-transcript");
@@ -91,17 +90,6 @@ async function summarizeSessionTailSafely(options) {
         return { kind: "missing" };
     }
 }
-function normalizeProgressOutcome(text) {
-    const trimmed = text.trim();
-    /* v8 ignore next -- defensive: normalizeProgressOutcome null branch @preserve */
-    if (!trimmed || trimmed === "nothing yet" || trimmed === "nothing recent") {
-        return null;
-    }
-    if (trimmed.startsWith("\"") && trimmed.endsWith("\"") && trimmed.length >= 2) {
-        return trimmed.slice(1, -1);
-    }
-    return trimmed;
-}
 function optionalArg(args, key) {
     const value = args[key];
     if (value === undefined || value === null)
@@ -180,6 +168,7 @@ function writePendingEnvelope(queueDir, message) {
     const fileName = `${message.timestamp}-${Math.random().toString(36).slice(2, 10)}.json`;
     const filePath = path.join(queueDir, fileName);
     fs.writeFileSync(filePath, JSON.stringify({ ...message, content: (0, session_events_1.capStructuredRecordString)(message.content) }, null, 2));
+    return fileName.replace(/\.json$/, "");
 }
 function renderCrossChatDeliveryStatus(target, result) {
     const phase = result.status === "delivered_now"
@@ -280,10 +269,10 @@ function readActiveWorkInnerState() {
     };
     try {
         const agentRoot = (0, identity_1.getAgentRoot)();
-        const pendingDir = (0, pending_1.getInnerDialogPendingDir)((0, identity_1.getAgentName)());
-        const sessionPath = (0, thoughts_1.getInnerDialogSessionPath)(agentRoot);
-        const { pendingMessages, turns, runtimeState } = (0, thoughts_1.readInnerDialogRawData)(sessionPath, pendingDir);
-        const dialogStatus = (0, thoughts_1.deriveInnerDialogStatus)(pendingMessages, turns, runtimeState);
+        const pendingDir = (0, pending_1.getPrivateRuntimePendingDir)((0, identity_1.getAgentName)());
+        const sessionPath = (0, thoughts_1.getPrivateRuntimeSessionPath)(agentRoot);
+        const { pendingMessages, turns, runtimeState } = (0, thoughts_1.readPrivateRuntimeRawData)(sessionPath, pendingDir);
+        const dialogStatus = (0, thoughts_1.derivePrivateRuntimeStatus)(pendingMessages, turns, runtimeState);
         const job = (0, thoughts_1.deriveInnerJob)(pendingMessages, turns, runtimeState);
         const storeObligationPending = (0, obligations_1.readPendingObligations)(agentRoot).length > 0;
         return {
@@ -405,7 +394,7 @@ function sendMessageRiskProfile(args) {
         return {
             mutates: "private_attention_write",
             risk: "high",
-            reason: "queues private inner-dialog attention without contacting an external session",
+            reason: "queues private-runtime attention without contacting an external session",
         };
     }
     return {
@@ -416,7 +405,7 @@ function sendMessageRiskProfile(args) {
 }
 function renderInnerProgressStatus(status) {
     if (status.processing === "pending") {
-        return "i've queued this thought for private attention. it'll come up when my inner dialog is free.";
+        return "i've queued this thought for private attention. it'll come up when my private runtime is free.";
     }
     if (status.processing === "started") {
         return "i'm working through this privately right now.";
@@ -433,7 +422,7 @@ exports.sessionToolDefinitions = [
             type: "function",
             function: {
                 name: "query_active_work",
-                description: "read the current live world-state across visible sessions, coding lanes, inner work, and return obligations. use this instead of piecing status together from separate session and coding tools.",
+                description: "read the current live world-state across visible sessions, coding lanes, private-runtime work, and return obligations. use this instead of piecing status together from separate session and coding tools.",
                 parameters: {
                     type: "object",
                     properties: {},
@@ -501,18 +490,18 @@ exports.sessionToolDefinitions = [
             type: "function",
             function: {
                 name: "query_session",
-                description: "inspect another session. use transcript for recent context or status for self/inner progress. deprecated search invocations should use search_facts, consult_diary, or consult_notes instead.",
+                description: "inspect another session. use transcript for recent context or status for self/private-runtime progress. deprecated search invocations should use search_facts, consult_diary, or consult_notes instead.",
                 parameters: {
                     type: "object",
                     properties: {
                         friendId: { type: "string", description: "the friend UUID (or 'self')" },
-                        channel: { type: "string", description: "the channel: cli, teams, bluebubbles, voice, inner, or mcp" },
+                        channel: { type: "string", description: "the channel: cli, teams, bluebubbles, voice, mcp, or legacy inner for private-runtime compatibility" },
                         key: { type: "string", description: "session key (defaults to 'session')" },
                         messageCount: { type: "string", description: "how many recent messages to return (default 20)" },
                         mode: {
                             type: "string",
                             enum: ["transcript", "status", "search"],
-                            description: "transcript (default), lightweight status for self/inner checks, or deprecated search; use search_facts, consult_diary, or consult_notes instead",
+                            description: "transcript (default), lightweight status for self/private-runtime checks, or deprecated search; use search_facts, consult_diary, or consult_notes instead",
                         },
                         query: { type: "string", description: "deprecated when mode=search; use search_facts, consult_diary, or consult_notes instead" },
                     },
@@ -536,11 +525,11 @@ exports.sessionToolDefinitions = [
             }
             if (mode === "status") {
                 if (friendId !== "self" || channel !== "inner") {
-                    return "status mode is only available for self/inner dialog.";
+                    return "status mode is only available for self/private runtime.";
                 }
-                const sessionPath = (0, thoughts_1.getInnerDialogSessionPath)((0, identity_1.getAgentRoot)());
-                const pendingDir = (0, pending_1.getInnerDialogPendingDir)((0, identity_1.getAgentName)());
-                return renderInnerProgressStatus((0, thoughts_1.readInnerDialogStatus)(sessionPath, pendingDir));
+                const sessionPath = (0, thoughts_1.getPrivateRuntimeSessionPath)((0, identity_1.getAgentRoot)());
+                const pendingDir = (0, pending_1.getPrivateRuntimePendingDir)((0, identity_1.getAgentName)());
+                return renderInnerProgressStatus((0, thoughts_1.readPrivateRuntimeStatus)(sessionPath, pendingDir));
             }
             if (mode === "search") {
                 return JSON.stringify({
@@ -578,7 +567,7 @@ exports.sessionToolDefinitions = [
                     type: "object",
                     properties: {
                         friendId: { type: "string", description: "the friend UUID (or 'self')" },
-                        channel: { type: "string", description: "the channel: cli, teams, bluebubbles, voice, inner, or mcp. channel=voice intentionally starts a live phone call to a trusted friend through the Voice sense." },
+                        channel: { type: "string", description: "the channel: cli, teams, bluebubbles, voice, mcp, or legacy inner for private-runtime compatibility. channel=voice intentionally starts a live phone call to a trusted friend through the Voice sense." },
                         key: { type: "string", description: "session key (defaults to 'session')" },
                         content: { type: "string", description: "the message content to send" },
                         voiceAudioSource: { type: "string", enum: ["tone", "url", "file"], description: "optional initial non-speech audio to play after the opening greeting when channel=voice" },
@@ -638,11 +627,11 @@ exports.sessionToolDefinitions = [
                 }
             }
             /* v8 ignore stop */
-            // Self-routing: messages to "self" always go to inner dialog pending dir,
+            // Self-routing: messages to "self" always go to the private-runtime pending dir,
             // regardless of the channel or key the agent specified.
             const isSelf = friendId === "self";
             const pendingDir = isSelf
-                ? (0, pending_1.getInnerDialogPendingDir)(agentName)
+                ? (0, pending_1.getPrivateRuntimePendingDir)(agentName)
                 : (0, pending_1.getPendingDir)(agentName, friendId, channel, key);
             const delegatingBridgeId = findDelegatingBridgeId(ctx);
             const delegatedFrom = isSelf
@@ -667,7 +656,7 @@ exports.sessionToolDefinitions = [
                 ...(obligationId ? { obligationId } : {}),
             };
             if (isSelf) {
-                writePendingEnvelope(pendingDir, envelope);
+                const pendingMessageId = writePendingEnvelope(pendingDir, envelope);
                 if (delegatedFrom) {
                     try {
                         (0, obligations_1.createObligation)((0, identity_1.getAgentRoot)(), {
@@ -696,7 +685,7 @@ exports.sessionToolDefinitions = [
                     (0, runtime_1.emitNervesEvent)({
                         event: "repertoire.obligation_created",
                         component: "repertoire",
-                        message: "obligation created for inner dialog delegation",
+                        message: "obligation created for private-runtime delegation",
                         meta: {
                             friendId: delegatedFrom.friendId,
                             channel: delegatedFrom.channel,
@@ -704,47 +693,24 @@ exports.sessionToolDefinitions = [
                         },
                     });
                 }
-                let wakeResponse = null;
                 try {
-                    wakeResponse = await (0, socket_client_1.requestInnerWake)(agentName, ctx?.daemonSocketPath);
+                    await (0, socket_client_1.requestPrivateWake)(agentName, ctx?.daemonSocketPath, {
+                        reason: "send_message self-route private attention",
+                        triggerSource: "send-message-self-route",
+                        budgetClass: "interactive",
+                        idempotencyKey: `send-message-self-route:${agentName}:${pendingMessageId}`,
+                        originRefs: [
+                            { kind: "tool", id: "send_message" },
+                            { kind: "pending-queue", id: "self/inner/dialog" },
+                            { kind: "pending-message", id: pendingMessageId },
+                        ],
+                    });
                 }
                 catch {
-                    wakeResponse = null;
-                }
-                if (!wakeResponse?.ok) {
-                    if (!(0, agent_discovery_1.isInnerDialogAutoStartEnabled)(agentName)) {
-                        return renderInnerProgressStatus({
-                            queue: "queued to inner/dialog",
-                            wake: "parked by innerDialog.autoStart=false",
-                            processing: "pending",
-                            surfaced: "nothing yet",
-                        });
-                    }
-                    const { runInnerDialogTurn } = await Promise.resolve().then(() => __importStar(require("../senses/inner-dialog")));
-                    if (ctx?.context?.channel?.channel === "inner") {
-                        queueMicrotask(() => {
-                            void runInnerDialogTurn({ reason: "instinct" });
-                        });
-                        return renderInnerProgressStatus({
-                            queue: "queued to inner/dialog",
-                            wake: "inline scheduled",
-                            processing: "pending",
-                            surfaced: "nothing yet",
-                        });
-                    }
-                    else {
-                        const turnResult = await runInnerDialogTurn({ reason: "instinct" });
-                        const surfacedPreview = normalizeProgressOutcome((0, thoughts_1.formatSurfacedValue)((0, thoughts_1.extractThoughtResponseFromMessages)(turnResult?.messages ?? [])));
-                        return (0, progress_story_1.renderProgressStory)((0, progress_story_1.buildProgressStory)({
-                            scope: "inner-delegation",
-                            phase: "completed",
-                            objective: "queued to inner/dialog",
-                            outcomeText: `wake: inline fallback\n${surfacedPreview}`,
-                        }));
-                    }
+                    // Queue-first self routing must not inline-run private work when the daemon is unavailable.
                 }
                 return renderInnerProgressStatus({
-                    queue: "queued to inner/dialog",
+                    queue: "queued to private runtime",
                     wake: "daemon requested",
                     processing: "pending",
                     surfaced: "nothing yet",

package/dist/repertoire/tools-surface.js

@@ -80,7 +80,7 @@ exports.surfaceToolDef = {
     type: "function",
     function: {
         name: "surface",
-        description: "return a ready thought to a friend or active session without publishing private inner work to BlueBubbles. pass delegationId to address a held thought (see your attention queue above), or friendId for spontaneous outreach. Surface delivers tool responses to the active session. BlueBubbles is a dedicated channel - use send_message with channel=\"bluebubbles\" for intentional iMessage delivery. set channel=voice only when you intentionally want a live phone call; content becomes the call reason/opening context. does not end your turn.",
+        description: "return a ready thought to a friend or active session without publishing private-runtime work to BlueBubbles. pass delegationId to address a held thought (see your attention queue above), or friendId for spontaneous outreach. Surface delivers tool responses to the active session. BlueBubbles is a dedicated channel - use send_message with channel=\"bluebubbles\" for intentional iMessage delivery. set channel=voice only when you intentionally want a live phone call; content becomes the call reason/opening context. does not end your turn.",
         parameters: {
             type: "object",
             properties: {
@@ -168,7 +168,7 @@ exports.surfaceToolDefinition = {
             return "unknown";
         } })();
         const routeToFriend = async (friendId, content, queueItem, hint) => {
-            /* v8 ignore start -- routing: integration path tested via inner-dialog routing tests @preserve */
+            /* v8 ignore start -- routing: integration path tested via private-runtime routing tests @preserve */
             try {
                 const agentRoot = (0, identity_1.getAgentRoot)();
                 const sessionsDir = path.join(agentRoot, "state", "sessions");
@@ -247,7 +247,7 @@ exports.surfaceToolDefinition = {
                 // Priority 2: Try proactive delivery first, then queue to freshest session
                 const allFriendSessions = (0, session_activity_1.listSessionActivity)({ sessionsDir, friendsDir, agentName, activeThresholdMs: Number.MAX_SAFE_INTEGER })
                     .filter((s) => s.friendId === friendId && s.channel !== "inner");
-                // Priority 2: Queue to freshest non-inner session
+                // Priority 2: Queue to freshest non-private-runtime session
                 const freshest = allFriendSessions[0];
                 if (freshest) {
                     const { queuePendingMessage, getPendingDir } = await Promise.resolve().then(() => __importStar(require("../mind/pending")));

package/dist/senses/cli.js

@@ -84,13 +84,13 @@ Object.defineProperty(exports, "StreamingWordWrapper", { enumerable: true, get:
 /**
  * Format pending messages as content-prefix strings for injection into
  * the next user message. Self-messages (from === agentName) become
- * `[inner thought: {content}]`, inter-agent messages become
+ * `[private-runtime note: {content}]`, inter-agent messages become
  * `[message from {name}: {content}]`.
  */
 function formatPendingPrefix(messages, agentName) {
     return messages
         .map((msg) => msg.from === agentName
-        ? `[inner thought: ${msg.content}]`
+        ? `[private-runtime note: ${msg.content}]`
         : `[message from ${msg.from}: ${msg.content}]`)
         .join("\n");
 }