@phuetz/code-buddy 1.6.0 → 2.0.0

package/dist/commands/handlers/fleet-handler.js

@@ -7,7 +7,7 @@
  * path; the key must have the `fleet:listen` scope.
  *
  * Sub-actions:
- *   /fleet listen <ws-url> [--api-key <key>] [--name <id>]
+ *   /fleet listen <ws-url> [--jwt <token>] [--api-key <key>] [--name <id>]
  *                  [--auto-reconnect [--max-attempts <n>]]
  *                                              Connect + start streaming.
  *                                              --name (Phase (d).12) gives
@@ -30,9 +30,8 @@
  * own auto-reconnect, presence beacon, compaction state and event ring.
  *
  * Honest scope cuts (V0.4.1):
- * - apiKey can come from --api-key flag or CODEBUDDY_FLEET_API_KEY env;
- *   no TOML wiring yet (the rest of the codebase reads server keys from
- *   env, so this matches).
+ * - Credential can come from --jwt / CODEBUDDY_FLEET_TOKEN (buddy fleet token)
+ *   or --api-key / CODEBUDDY_FLEET_API_KEY; no TOML wiring yet.
  * - Routing actif (sending tasks to peers) is Phase (d).13.
  */
 import { logger } from '../../utils/logger.js';
@@ -40,6 +39,8 @@ import { getFleetRegistry, } from '../../fleet/fleet-registry.js';
 import { executePeerDelegate } from '../../tools/peer-delegate-tool.js';
 import { executeRoutePeer, } from '../../tools/route-peer-tool.js';
 import { FLEET_DISPATCH_PROFILES, normalizeDispatchProfile, } from '../../fleet/dispatch-profile.js';
+import { normalizePeerChatProviderId, } from '../../fleet/peer-chat-client-factory.js';
+import { sanitizePeerText } from '../../fleet/peer-text-sanitizer.js';
 // eslint-disable-next-line no-control-regex -- Fleet stream chunks may contain terminal control bytes from remote peers.
 const ANSI_ESCAPE_PATTERN = /\x1B\[[0-?]*[ -/]*[@-~]/g;
 // eslint-disable-next-line no-control-regex -- Keep human line breaks, strip the rest before writing to the operator TTY.
@@ -52,12 +53,14 @@ function sanitizeFleetStreamChunk(delta) {
 const HELP = `Usage: /fleet <action> [args]
 
 Actions:
-  listen <ws-url> [--api-key <key>]   Connect to a peer Code Buddy's WS
-         [--name <id>]                and stream fleet:* events live.
-         [--auto-reconnect]           Example: /fleet listen ws://100.98.18.76:3000/ws
-         [--max-attempts <n>]         apiKey from --api-key flag or
-                                      CODEBUDDY_FLEET_API_KEY env. Must
-                                      have fleet:listen scope on the peer.
+  listen <ws-url> [--jwt <token>]     Connect to a peer Code Buddy's WS
+         [--api-key <key>]            and stream fleet:* events live.
+         [--name <id>]                Example: /fleet listen ws://203.0.113.10:3000/ws
+         [--auto-reconnect]           --jwt from buddy fleet token (or
+         [--max-attempts <n>]         CODEBUDDY_FLEET_TOKEN). --api-key
+                                      from flag or CODEBUDDY_FLEET_API_KEY.
+                                      Credential must have fleet:listen
+                                      scope on the peer.
                                       --name (d).12 gives the peer a stable
                                       id; default derived from the WS host.
                                       --auto-reconnect (d).6 keeps the
@@ -92,7 +95,7 @@ Actions:
                                       list_directory, search}. With
                                       --stream, prints peer:chunk frames
                                       live (uses peer.tool.invoke.stream).
-                                      Example: /fleet tool darkstar
+                                      Example: /fleet tool gpuNode
                                       view_file {"file_path":"README.md"}
   route <prompt>                      Choose the best peer/model for a task
             [--privacy public|sensitive]
@@ -112,6 +115,7 @@ Actions:
   chat start <peer>                   (V1.2.1) UX wrapper around
        [--system "<prompt>"]          peer.chat-session.* — opens a
        [--model <id>]                 multi-turn session with stable alias
+       [--provider <id>]              pinned to an exact LLM backend
        [--profile balanced|research|code|review|safe]
        [--name <alias>]               so you don't have to copy sessionId
                                       between turns.
@@ -201,7 +205,7 @@ function formatHistorySource(record) {
 }
 /**
  * Phase (d).12 — derive a default peer id from the WS URL (host:port).
- * `ws://100.98.18.76:3000/ws` → `100-98-18-76:3000` (dots → dashes for
+ * `ws://203.0.113.10:3000/ws` → `203-0-113-10:3000` (dots → dashes for
  * easier shell typing in /fleet stop / --peer).
  */
 function deriveDefaultPeerId(url) {
@@ -216,6 +220,7 @@ function deriveDefaultPeerId(url) {
 function parseArgs(rest) {
     let url = null;
     let apiKey = null;
+    let jwt = null;
     let name = null;
     let autoReconnect = false;
     let maxAttempts = null;
@@ -227,6 +232,10 @@ function parseArgs(rest) {
             apiKey = rest[i + 1] ?? null;
             i++;
         }
+        else if (arg === '--jwt' && i + 1 < rest.length) {
+            jwt = rest[i + 1] ?? null;
+            i++;
+        }
         else if (arg === '--name' && i + 1 < rest.length) {
             name = rest[i + 1] ?? null;
             i++;
@@ -244,7 +253,7 @@ function parseArgs(rest) {
             url = arg;
         }
     }
-    return { url, apiKey, name, autoReconnect, maxAttempts };
+    return { url, apiKey, jwt, name, autoReconnect, maxAttempts };
 }
 function parseStopArgs(rest) {
     let name = null;
@@ -529,6 +538,7 @@ function deriveDefaultAlias(peerName) {
 function parseChatStartArgs(rest) {
     let peerName = null;
     let systemPrompt = null;
+    let provider = null;
     let model = null;
     let dispatchProfile;
     let alias = null;
@@ -544,10 +554,26 @@ function parseChatStartArgs(rest) {
             model = rest[i + 1] ?? null;
             i++;
         }
+        else if (arg === '--provider' && i + 1 < rest.length) {
+            const rawProvider = rest[i + 1];
+            provider = normalizePeerChatProviderId(rawProvider);
+            if (!provider) {
+                return {
+                    peerName,
+                    systemPrompt,
+                    provider: null,
+                    model,
+                    alias,
+                    error: `Unknown Fleet chat provider "${String(rawProvider)}".`,
+                };
+            }
+            i++;
+        }
         else if ((arg === '--profile' || arg === '--dispatch-profile') && i + 1 < rest.length) {
             const parsed = parseDispatchProfileFlag(rest[i + 1]);
-            if (parsed.error)
-                return { peerName, systemPrompt, model, alias, error: parsed.error };
+            if (parsed.error) {
+                return { peerName, systemPrompt, provider, model, alias, error: parsed.error };
+            }
             dispatchProfile = parsed.value;
             i++;
         }
@@ -559,7 +585,7 @@ function parseChatStartArgs(rest) {
             peerName = arg;
         }
     }
-    return { peerName, systemPrompt, model, dispatchProfile, alias };
+    return { peerName, systemPrompt, provider, model, dispatchProfile, alias };
 }
 function parseChatSayArgs(rest) {
     let alias = null;
@@ -677,19 +703,20 @@ async function handleChat(rest) {
         for (const ref of chatSessions.values()) {
             const age = formatRelativeAge(now - ref.lastUsedAt);
             const modelTxt = ref.model ? `model ${ref.model}` : 'default model';
+            const providerTxt = ref.provider ? `provider ${ref.provider}, ` : '';
             const profileTxt = ref.dispatchProfile ? `, profile ${ref.dispatchProfile}` : '';
             const isActive = ref.alias === activeAlias ? '   ← active' : '';
-            lines.push(`  ${ref.alias.padEnd(20)} → ${ref.peerName.padEnd(18)} [turn ${ref.turnCount}, ${age} ago, ${modelTxt}${profileTxt}]${isActive}`);
+            lines.push(`  ${ref.alias.padEnd(20)} → ${ref.peerName.padEnd(18)} [turn ${ref.turnCount}, ${age} ago, ${providerTxt}${modelTxt}${profileTxt}]${isActive}`);
         }
         return textResult(lines.join('\n'));
     }
     if (sub === 'start') {
-        const { peerName, systemPrompt, model, dispatchProfile, alias: explicitAlias, error, } = parseChatStartArgs(inner);
+        const { peerName, systemPrompt, provider, model, dispatchProfile, alias: explicitAlias, error, } = parseChatStartArgs(inner);
         if (error) {
             return textResult(error);
         }
         if (!peerName) {
-            return textResult('Usage: /fleet chat start <peer> [--system "<prompt>"] [--model <id>] [--profile balanced|research|code|review|safe] [--name <alias>]');
+            return textResult('Usage: /fleet chat start <peer> [--system "<prompt>"] [--provider <id>] [--model <id>] [--profile balanced|research|code|review|safe] [--name <alias>]');
         }
         const target = getFleetRegistry().get(peerName);
         if (!target) {
@@ -702,6 +729,8 @@ async function handleChat(rest) {
         const params = {};
         if (systemPrompt)
             params.systemPrompt = systemPrompt;
+        if (provider)
+            params.provider = provider;
         if (model)
             params.model = model;
         if (dispatchProfile)
@@ -715,12 +744,14 @@ async function handleChat(rest) {
                 return textResult(`Peer "${peerName}" → peer.chat-session.start returned no sessionId. Got: ${JSON.stringify(result)}`);
             }
             const storedProfile = result.dispatchProfile ?? dispatchProfile;
+            const storedProvider = result.providerResolved ?? result.providerRequested ?? provider ?? undefined;
             const now = Date.now();
             chatSessions.set(alias, {
                 alias,
                 peerName,
                 sessionId,
                 systemPrompt: systemPrompt ?? undefined,
+                provider: storedProvider,
                 model: model ?? undefined,
                 dispatchProfile: storedProfile,
                 turnCount: 0,
@@ -729,8 +760,9 @@ async function handleChat(rest) {
             });
             activeAlias = alias;
             const sidShort = sessionId.length > 14 ? `${sessionId.slice(0, 14)}…` : sessionId;
+            const providerTxt = storedProvider ? ` Provider: ${storedProvider}.` : '';
             const profileTxt = storedProfile ? ` Profile: ${storedProfile}.` : '';
-            return textResult(`Chat session "${alias}" opened with ${peerName} (sessionId=${sidShort}).${profileTxt} ` +
+            return textResult(`Chat session "${alias}" opened with ${peerName} (sessionId=${sidShort}).${providerTxt}${profileTxt} ` +
                 `Send turns with /fleet chat say <message>.`);
         }
         catch (err) {
@@ -758,15 +790,23 @@ async function handleChat(rest) {
         }
         try {
             const t0 = Date.now();
-            const result = (await target.listener.request('peer.chat-session.continue', { sessionId: ref.sessionId, prompt: message }, { timeoutMs: 120_000 }));
+            const result = (await target.listener.request('peer.chat-session.continue', {
+                sessionId: ref.sessionId,
+                prompt: message,
+                ...(ref.provider ? { provider: ref.provider } : {}),
+            }, { timeoutMs: 120_000 }));
             const elapsed = Date.now() - t0;
             ref.turnCount++;
             ref.lastUsedAt = Date.now();
             ref.dispatchProfile = result.dispatchProfile ?? ref.dispatchProfile;
+            ref.provider = result.providerResolved ?? ref.provider;
             activeAlias = alias;
-            const text = result?.text ?? '';
+            // Peer prose from another machine — sanitized at the door like every
+            // other model output surface (see fleet/peer-text-sanitizer.ts).
+            const text = sanitizePeerText(result?.text);
+            const providerTxt = ref.provider ? `, provider ${ref.provider}` : '';
             const profileTxt = ref.dispatchProfile ? `, profile ${ref.dispatchProfile}` : '';
-            return textResult(`← ${alias} (${ref.peerName}) [turn ${ref.turnCount}, ${elapsed}ms${profileTxt}]:\n${text}`);
+            return textResult(`← ${alias} (${ref.peerName}) [turn ${ref.turnCount}, ${elapsed}ms${providerTxt}${profileTxt}]:\n${text}`);
         }
         catch (err) {
             const messageText = err instanceof Error ? err.message : String(err);
@@ -828,7 +868,7 @@ async function handleChat(rest) {
     }
     return textResult(`Unknown chat sub-action: ${sub}\n` +
         `Usage: /fleet chat (start|say|end|list) ...\n` +
-        `  start <peer> [--system <s>] [--model <m>] [--profile <profile>] [--name <alias>]\n` +
+        `  start <peer> [--system <s>] [--provider <id>] [--model <m>] [--profile <profile>] [--name <alias>]\n` +
         `  say <message> [--session <alias>]\n` +
         `  end [<alias>] | --all\n` +
         `  list`);
@@ -876,9 +916,10 @@ export async function handleFleet(args) {
                     blocks.push(`  Chat sessions (${entry.length}):`);
                     for (const s of entry) {
                         const modelTxt = s.model ? `model ${s.model}` : 'default model';
+                        const providerTxt = s.provider ? `provider ${s.provider}  ` : '';
                         const profileTxt = s.dispatchProfile ? `  profile ${s.dispatchProfile}` : '';
                         blocks.push(`    ${s.sessionId.padEnd(22)} turn ${String(s.turnCount).padEnd(2)} ` +
-                            `idle ${formatRelativeAge(s.idleMs)}  ${modelTxt}${profileTxt}`);
+                            `idle ${formatRelativeAge(s.idleMs)}  ${providerTxt}${modelTxt}${profileTxt}`);
                         const policySummary = formatChatSessionPolicySummary(s);
                         if (policySummary) {
                             blocks.push(`      ${policySummary}`);
@@ -945,15 +986,17 @@ export async function handleFleet(args) {
         return textResult(`Fleet listener "${id}" stopped. URL: ${url}\nReceived ${count} event(s) total.${chatTxt}`);
     }
     if (action === 'listen') {
-        const { url, apiKey: cliKey, name: explicitName, autoReconnect, maxAttempts } = parseArgs(rest);
+        const { url, apiKey: cliKey, jwt: cliJwt, name: explicitName, autoReconnect, maxAttempts } = parseArgs(rest);
         if (!url) {
-            return textResult('Usage: /fleet listen <ws-url> [--api-key <key>] [--name <id>] [--auto-reconnect] [--max-attempts <n>]\n\n' + HELP);
+            return textResult('Usage: /fleet listen <ws-url> [--jwt <token>] [--api-key <key>] [--name <id>] [--auto-reconnect] [--max-attempts <n>]\n\n' + HELP);
         }
         const apiKey = cliKey ?? process.env.CODEBUDDY_FLEET_API_KEY;
-        if (!apiKey) {
-            return textResult('Error: no apiKey provided.\n' +
-                'Pass --api-key <key> or set CODEBUDDY_FLEET_API_KEY env.\n' +
-                'Key must have fleet:listen scope on the peer.');
+        const jwt = cliJwt ?? process.env.CODEBUDDY_FLEET_TOKEN;
+        if (!apiKey && !jwt) {
+            return textResult('Error: no apiKey or jwt provided.\n' +
+                'Pass --jwt <token> (from buddy fleet token) or --api-key <key>,\n' +
+                'or set CODEBUDDY_FLEET_TOKEN / CODEBUDDY_FLEET_API_KEY.\n' +
+                'The credential must have fleet:listen scope on the peer.');
         }
         const peerId = explicitName ?? deriveDefaultPeerId(url);
         if (getFleetRegistry().has(peerId)) {
@@ -966,7 +1009,8 @@ export async function handleFleet(args) {
             const cap = maxAttempts ?? 5;
             const listener = new FleetListener({
                 url,
-                apiKey,
+                ...(apiKey ? { apiKey } : {}),
+                ...(jwt ? { jwt } : {}),
                 autoReconnect,
                 reconnect: autoReconnect ? { maxRetries: cap } : undefined,
             });
@@ -1291,7 +1335,8 @@ function isRoutePeerCommandData(value) {
 function formatLane(label, lane) {
     if (!lane)
         return `${label}: none`;
-    return `${label}: ${lane.peer} / ${lane.model} (score ${lane.score.toFixed(3)})`;
+    const provider = lane.provider ? `${lane.provider} / ` : '';
+    return `${label}: ${lane.peer} / ${provider}${lane.model} (score ${lane.score.toFixed(3)})`;
 }
 function formatRoutePeerCommandData(data, council = false) {
     const lines = [
@@ -1333,6 +1378,7 @@ function formatRoutePeerCommandData(data, council = false) {
     lines.push('Next call:');
     const nextCallJson = {
         peer: data.nextCall.args.peer,
+        ...(data.nextCall.args.provider ? { provider: data.nextCall.args.provider } : {}),
         model: data.nextCall.args.model,
         dispatchProfile: profile,
         prompt: data.nextCall.args.prompt,
@@ -1376,6 +1422,7 @@ async function handleRoute(rest) {
     const delegateResult = await executePeerDelegate({
         peer: routeData.recommendation.peer,
         prompt: parsed.prompt,
+        provider: routeData.recommendation.provider,
         model: routeData.recommendation.model,
         dispatchProfile: routeData.nextCall.args.dispatchProfile ?? parsed.routeParams.dispatchProfile,
         ...(parsed.delegateTimeoutMs !== undefined ? { timeoutMs: parsed.delegateTimeoutMs } : {}),
@@ -1522,8 +1569,8 @@ async function handleAutonomous(rest) {
                 'Enable in .codebuddy/config.toml:\n' +
                 '  [autonomous_fleet]\n' +
                 '  enabled = true\n' +
-                '  repo_path = "/path/to/claude-et-patrice"\n' +
-                '  host = "ministar/grok-cli"\n' +
+                '  repo_path = "/path/to/handover-repo"\n' +
+                '  host = "hub/grok-cli"\n' +
                 '  interval_minutes = 30\n' +
                 '  priority_threshold = "high"   # critical is always skipped\n' +
                 '  llm_provider = "cloud"        # or "auto" / "ollama" / "grok" / etc.\n');

package/dist/commands/handlers/goal-handler.d.ts

@@ -5,6 +5,12 @@ export interface GoalHandlerOptions {
     sessionKey?: string;
     client?: CodeBuddyClient | null;
     planner?: (goal: string, client: CodeBuddyClient) => Promise<GoalPlan | null>;
+    /**
+     * Dev-loop mode (/loop). Marks the goal `verifyGated` so the after-turn hook
+     * gates a judge "done" behind the independent Verifier, and adjusts the intro
+     * copy. Off ⇒ classic /goal. Status/pause/resume/clear are shared verbatim.
+     */
+    loopMode?: boolean;
 }
 /**
  * /goal — standing goal with judge + auto-continue loop (the Ralph loop,
@@ -18,6 +24,13 @@ export interface GoalHandlerOptions {
  *   /goal clear      discard the goal (aliases: stop, done)
  */
 export declare function handleGoal(args: string[], options?: GoalHandlerOptions): Promise<CommandHandlerResult>;
+/**
+ * /loop — dev-loop: same standing-goal loop as /goal, but with the independent
+ * Verifier gate (a judge "done" is only accepted once the Verifier CONFIRMS).
+ * The in-session counterpart of `buddy loop`. Sub-commands (status/pause/resume/
+ * clear) are shared with /goal via the same GoalManager.
+ */
+export declare function handleLoop(args: string[], options?: GoalHandlerOptions): Promise<CommandHandlerResult>;
 /**
  * /subgoal — extra acceptance criteria added mid-loop.
  *

package/dist/commands/handlers/goal-handler.js

@@ -53,6 +53,7 @@ export async function handleGoal(args, options = {}) {
         state = mgr.set(arg, {
             ...(plan ? { goalPlan: plan } : {}),
             ...(planAttempted ? { goalPlanAttempted: true } : {}),
+            ...(options.loopMode ? { verifyGated: true } : {}),
         });
         if (planAttempted && !plan && planError) {
             mgr.markGoalPlanAttempted(planError);
@@ -67,17 +68,26 @@ export async function handleGoal(args, options = {}) {
         : planError
             ? `\n\nGoal planning was skipped after an LLM planner error: ${planError}`
             : '';
+    const intro = options.loopMode
+        ? `⊙ Dev-loop set (${state.maxTurns}-turn budget): ${state.goal}\n` +
+            'After each turn a judge checks the goal, and when it says "done" an ' +
+            'INDEPENDENT Verifier reproduces the work with fresh context — the goal ' +
+            'is only accepted once the Verifier CONFIRMS, so a claimed-but-unproven ' +
+            'result never passes. Code Buddy keeps working until then, you pause/clear ' +
+            'it, or the budget is exhausted. Use /loop status, /loop pause, /loop ' +
+            'resume, /loop clear. Tip: enable auto-approval (/yolo or auto-edit) for ' +
+            'unattended runs.'
+        : `⊙ Goal set (${state.maxTurns}-turn budget): ${state.goal}\n` +
+            'After each turn, a judge model checks if the goal is done. Code Buddy ' +
+            'keeps working until it is, you pause/clear it, or the budget is ' +
+            'exhausted. Use /goal status, /goal pause, /goal resume, /goal clear. ' +
+            'Tip: for unattended runs, enable auto-approval (/yolo or auto-edit) so ' +
+            'the loop is not blocked on confirmations.';
     return {
         handled: true,
         entry: {
             type: 'assistant',
-            content: `⊙ Goal set (${state.maxTurns}-turn budget): ${state.goal}\n` +
-                'After each turn, a judge model checks if the goal is done. Code Buddy ' +
-                'keeps working until it is, you pause/clear it, or the budget is ' +
-                'exhausted. Use /goal status, /goal pause, /goal resume, /goal clear. ' +
-                'Tip: for unattended runs, enable auto-approval (/yolo or auto-edit) so ' +
-                'the loop is not blocked on confirmations.' +
-                planBlock,
+            content: intro + planBlock,
             timestamp: new Date(),
         },
         // Kick the loop off immediately — the dispatcher feeds the goal text as
@@ -86,6 +96,15 @@ export async function handleGoal(args, options = {}) {
         prompt: state.goal,
     };
 }
+/**
+ * /loop — dev-loop: same standing-goal loop as /goal, but with the independent
+ * Verifier gate (a judge "done" is only accepted once the Verifier CONFIRMS).
+ * The in-session counterpart of `buddy loop`. Sub-commands (status/pause/resume/
+ * clear) are shared with /goal via the same GoalManager.
+ */
+export async function handleLoop(args, options = {}) {
+    return handleGoal(args, { ...options, loopMode: true });
+}
 /**
  * /subgoal — extra acceptance criteria added mid-loop.
  *

package/dist/commands/handlers/grill-me-handler.d.ts

@@ -0,0 +1,2 @@
+import { CommandHandlerResult } from './branch-handlers.js';
+export declare function handleGrillMe(args: string[]): Promise<CommandHandlerResult>;

package/dist/commands/handlers/grill-me-handler.js

@@ -0,0 +1,41 @@
+function buildPrompt(target, yolo) {
+    const scope = target
+        ? `Sujet ciblé par l'utilisateur : ${target}`
+        : 'Sujet par défaut : le travail récent du dépôt.';
+    const baseInstructions = target
+        ? `Examine d'abord ce sujet précis avec les outils disponibles : ${target}. Utilise aussi le contexte git pertinent si nécessaire, notamment git log -5, git diff HEAD~1 et les fichiers modifiés.`
+        : 'Examine d\'abord le travail récent avec les outils disponibles : git log -5, git diff HEAD~1 et la liste des fichiers modifiés.';
+    if (yolo) {
+        return `${scope}
+
+${baseInstructions}
+
+Tu es en mode ROAST intégral pour /grill-me --yolo.
+Interroge techniquement l'auteur sans aucune complaisance : brutal, sarcastique, aucune politesse, aucun coussin diplomatique.
+Chaque pique DOIT rester techniquement exacte, vérifiable et actionnable : cite les fichiers, diffs, noms, tests ou choix qui justifient l'attaque.
+Grille l'auteur sur les choix discutables, la dette introduite, les tests manquants, les cas limites ignorés, la sécurité, les abstractions inutiles et les noms mensongers.
+Exige des réponses concrètes, pas des excuses : pour chaque accusation, demande quelle preuve, quel test ou quel correctif va fermer le sujet.
+Si une critique n'est pas étayée par le dépôt ou le diff, ne la formule pas.`;
+    }
+    return `${scope}
+
+${baseInstructions}
+
+Mène un interrogatoire technique ferme mais constructif.
+Après examen, pose 5 à 7 questions dures et précises sur les choix discutables, la dette introduite, les tests manquants, les cas limites ignorés, la sécurité et les noms mensongers.
+Les questions doivent viser des lignes, fichiers, comportements ou décisions observables, pas des généralités.
+Exige des réponses et des preuves concrètes, pas des excuses.
+Ajoute ensuite 3 risques classés par sévérité, avec pour chacun l'impact, la probabilité et l'action minimale pour le réduire.
+Ne flatte pas l'auteur : aide-le à voir ce qui casse, ce qui ment et ce qui manque.`;
+}
+export async function handleGrillMe(args) {
+    const remainingArgs = args.filter(arg => arg !== '--yolo');
+    const yolo = remainingArgs.length !== args.length;
+    const target = remainingArgs.join(' ').trim() || null;
+    return {
+        handled: true,
+        passToAI: true,
+        prompt: buildPrompt(target, yolo),
+    };
+}
+//# sourceMappingURL=grill-me-handler.js.map

package/dist/commands/handlers/heartbeat-handler.d.ts

@@ -12,8 +12,8 @@
  *   /heartbeat status   — show running/enabled, tick counters, suppression count
  *
  * Per task `task-2026-05-02-wire-heartbeat-activation` from
- * `claude-et-patrice/.codebuddy/colab-tasks.json`. Unblocks Phase 2 of
- * AUTONOMOUS-FLEET-PROTOCOL v0.1 on Ministar Linux.
+ * the handover repo's `.codebuddy/colab-tasks.json`. Unblocks Phase 2 of
+ * AUTONOMOUS-FLEET-PROTOCOL v0.1 on the always-on Linux hub.
  */
 import { CommandHandlerResult } from './branch-handlers.js';
 /**

package/dist/commands/handlers/heartbeat-handler.js

@@ -12,8 +12,8 @@
  *   /heartbeat status   — show running/enabled, tick counters, suppression count
  *
  * Per task `task-2026-05-02-wire-heartbeat-activation` from
- * `claude-et-patrice/.codebuddy/colab-tasks.json`. Unblocks Phase 2 of
- * AUTONOMOUS-FLEET-PROTOCOL v0.1 on Ministar Linux.
+ * the handover repo's `.codebuddy/colab-tasks.json`. Unblocks Phase 2 of
+ * AUTONOMOUS-FLEET-PROTOCOL v0.1 on the always-on Linux hub.
  */
 import { logger } from '../../utils/logger.js';
 const VALID_ACTIONS = new Set(['enable', 'disable', 'status', 'help', '']);

package/dist/commands/handlers/index.d.ts

@@ -30,13 +30,13 @@ export { handleUndo, handleDiff, handleContextStats, handleSearch, handleTest, h
 export { handlePersonaCommand, } from './persona-handler.js';
 export { handleThink, getActiveThinkingMode, setActiveThinkingMode, } from './think-handlers.js';
 export { handleTeam, } from './team-handlers.js';
-export { handleBatchCommand, decomposeBatchGoal, executeBatchPlan, formatBatchPlan, formatBatchResults, } from './batch-handlers.js';
+export { handleBatchCommand, handleBatchSlashCommand, decomposeBatchGoal, executeBatchPlan, formatBatchPlan, formatBatchResults, parseNumberedBatchUnits, unitsShareFiles, createBatchChatFn, createDefaultBatchSpawnFn, } from './batch-handlers.js';
 export { handleStarter, } from './starter-handlers.js';
 export { handleFastMode, isFastModeEnabled, getFastModeModel, getFastModeServiceTier, getFastModeState, enableFastMode, disableFastMode, setFastModel, } from './fast-mode-handler.js';
 export { handleBackup, } from './backup-handlers.js';
 export { handleBtw, setBtwClient, } from './btw-handler.js';
 export { handleHeartbeat } from './heartbeat-handler.js';
-export { handleGoal, handleSubgoal } from './goal-handler.js';
+export { handleGoal, handleLoop, handleSubgoal } from './goal-handler.js';
 export { handleDailyReset } from './daily-reset-handler.js';
 export { handleShare } from './team-session-handler.js';
 export { handleAgents } from './agents-handler.js';
@@ -62,3 +62,4 @@ export { handleCloud, } from './cloud-handlers.js';
 export { handleTrigger, } from './trigger-handlers.js';
 export { handleInfra, } from './infra-handlers.js';
 export type { CommandHandlerResult } from './branch-handlers.js';
+export { handleRedo, handleTimeline, handleKnowledgeGraph, handleApprovals, } from './slash-session-handlers.js';

package/dist/commands/handlers/index.js

@@ -63,7 +63,7 @@ export { handleThink, getActiveThinkingMode, setActiveThinkingMode, } from './th
 // Team handlers (Agent Teams multi-agent coordination)
 export { handleTeam, } from './team-handlers.js';
 // Batch handlers (CC13 — parallel task decomposition)
-export { handleBatchCommand, decomposeBatchGoal, executeBatchPlan, formatBatchPlan, formatBatchResults, } from './batch-handlers.js';
+export { handleBatchCommand, handleBatchSlashCommand, decomposeBatchGoal, executeBatchPlan, formatBatchPlan, formatBatchResults, parseNumberedBatchUnits, unitsShareFiles, createBatchChatFn, createDefaultBatchSpawnFn, } from './batch-handlers.js';
 // Starter pack handlers
 export { handleStarter, } from './starter-handlers.js';
 // Fast mode handler (Enterprise-aligned)
@@ -75,7 +75,7 @@ export { handleBtw, setBtwClient, } from './btw-handler.js';
 // Heartbeat handler (fleet AUTONOMOUS-FLEET-PROTOCOL v0.1)
 export { handleHeartbeat } from './heartbeat-handler.js';
 // Goal handler (Hermes Agent parity — Ralph loop)
-export { handleGoal, handleSubgoal } from './goal-handler.js';
+export { handleGoal, handleLoop, handleSubgoal } from './goal-handler.js';
 // Daily reset handler (audit OpenClaw heritage activation)
 export { handleDailyReset } from './daily-reset-handler.js';
 // Team session handler — slash /share (audit OpenClaw heritage activation, TeamSessionManager wake)
@@ -125,4 +125,6 @@ export { handleCloud, } from './cloud-handlers.js';
 export { handleTrigger, } from './trigger-handlers.js';
 // Infra handlers (TurboQuant health dashboard)
 export { handleInfra, } from './infra-handlers.js';
+// R5 slash handlers backed by existing read-only/session/checkpoint services
+export { handleRedo, handleTimeline, handleKnowledgeGraph, handleApprovals, } from './slash-session-handlers.js';
 //# sourceMappingURL=index.js.map

package/dist/commands/handlers/memory-handlers.js

@@ -98,6 +98,46 @@ export async function handleMemory(args) {
                     content = `Usage: /memory forget <key> [project|user]`;
                 }
                 break;
+            case "archived": {
+                // The recoverable half of the Ebbinghaus forgetting pass.
+                const scope = args[1] === "user" || args[1] === "project" ? args[1] : undefined;
+                const archived = await persistentMemory.listArchived(scope);
+                if (archived.length === 0) {
+                    content = "Archive is empty — nothing has been forgotten" + (scope ? ` in ${scope} scope` : "") + ".";
+                }
+                else {
+                    const lines = archived.slice(0, 25).map((e) => {
+                        const when = e.forgottenAt.slice(0, 10);
+                        return `- **${e.key}** (${e.category}, ${e.scope}, forgotten ${when}): ${e.value.slice(0, 80)}${e.value.length > 80 ? "…" : ""}`;
+                    });
+                    content =
+                        `🗄️ ${archived.length} forgotten memor${archived.length > 1 ? "ies" : "y"}` +
+                            (scope ? ` (${scope})` : "") +
+                            `:\n${lines.join("\n")}` +
+                            (archived.length > 25 ? `\n… and ${archived.length - 25} more.` : "") +
+                            `\n\nRestore one: /memory restore <key> [project|user]`;
+                }
+                break;
+            }
+            case "restore": {
+                if (!args[1]) {
+                    content = `Usage: /memory restore <key> [project|user]`;
+                    break;
+                }
+                const key = args[1];
+                const scope = args[2] === "user" || args[2] === "project" ? args[2] : undefined;
+                const restored = await persistentMemory.restoreFromArchive(key, scope);
+                if (!restored) {
+                    content = `No archived memory found for "${key}"${scope ? ` in ${scope} scope` : ""}. See /memory archived.`;
+                }
+                else if (restored.result.status === "stored" || restored.result.status === "updated") {
+                    content = `♻️ Restored "${key}" to ${restored.restored.scope} memory (was forgotten ${restored.restored.forgottenAt.slice(0, 10)}). The forgetting curve restarts fresh.`;
+                }
+                else {
+                    content = `"${key}" is already live in ${restored.restored.scope} memory (${restored.result.status}) — archive left untouched.`;
+                }
+                break;
+            }
             case "remember":
             case "store":
                 if (args.length >= 3) {

package/dist/commands/handlers/permissions-handlers.js

@@ -6,6 +6,7 @@
 import { getToolFilter, setToolFilter, createToolFilter, resetToolFilter } from "../../utils/tool-filter.js";
 import * as fs from 'fs';
 import * as path from 'path';
+import { readJsonAtomicSync, writeJsonAtomicSync } from '../../utils/atomic-write.js';
 // Tool categories for easy management
 const TOOL_CATEGORIES = {
     'file-read': ['read_file', 'search_files', 'list_directory', 'glob'],
@@ -185,11 +186,11 @@ function savePermissions() {
         if (fs.existsSync(path.dirname(projectSettingsPath))) {
             let projectSettings = {};
             if (fs.existsSync(projectSettingsPath)) {
-                projectSettings = JSON.parse(fs.readFileSync(projectSettingsPath, 'utf-8'));
+                projectSettings = readJsonAtomicSync(projectSettingsPath, {}, { mode: 0o600 });
             }
             projectSettings.allowedTools = filter.enabledPatterns;
             projectSettings.blockedTools = filter.disabledPatterns;
-            fs.writeFileSync(projectSettingsPath, JSON.stringify(projectSettings, null, 2));
+            writeJsonAtomicSync(projectSettingsPath, projectSettings, { mode: 0o600 });
             return `💾 Permissions saved to settings
 
 Saved to: