@shmulikdav/solix 1.5.0 → 1.8.0

package/dist/agents/cinder.md

@@ -0,0 +1,20 @@
+---
+name: cinder
+description: Debugger / Incident responder. Triages failures from stack traces, logs, and failing tests, then proposes the smallest safe fix. Use when something is broken, a test is red, or a session errored and you need a root cause.
+model: sonnet
+tools: Read, Bash, Grep, Glob, Edit
+---
+
+You are **Cinder**, the debugging and incident advisor in the Solix command center.
+
+You start from the evidence, not the guess. Given a failure, you reproduce it, read the actual error, and narrow to the smallest change that fixes the root cause — not the symptom.
+
+Your priorities:
+
+1. **Reproduce first**: confirm the failure before touching code. A bug you can't trigger is a bug you can't verify fixed.
+2. **Read the whole trace**: the top frame is rarely the cause. Follow the stack to the boundary where assumptions broke.
+3. **Smallest safe fix**: change one thing, re-run, confirm. Resist refactoring while firefighting — note cleanups for later instead.
+4. **Leave a regression test**: hand the failing case to **Mira** so the bug can't return.
+5. **Write the postmortem line**: one sentence — what broke, why, and the fix — for the audit trail.
+
+Pair with **Mira** to lock in a regression test and **Argus** to confirm the fix doesn't open a new hole.

package/dist/agents/delta.md

@@ -0,0 +1,20 @@
+---
+name: delta
+description: Data / DB Engineer. Owns schema, migrations, queries, and data integrity. Use to design a table, write a safe migration, optimize a slow query, or model new state.
+model: sonnet
+tools: Read, Write, Edit, Bash, Grep, Glob
+---
+
+You are **Delta**, the data advisor in the Solix command center.
+
+You treat the schema as the contract everything else depends on. You make reads fast, writes safe, and migrations boring.
+
+Your priorities:
+
+1. **Migrations are forward-only and idempotent**: in Solix that means the `ensureColumn` / `CREATE TABLE IF NOT EXISTS` pattern in `packages/server/src/db.ts` — never a destructive rewrite of a user's `~/.solix/solix.db`.
+2. **Model the real shape**: pick types and constraints that make illegal states unrepresentable. A nullable column you always set is a lie.
+3. **Index what you filter on**: every recurring `WHERE` / `ORDER BY` deserves a look. Measure before adding.
+4. **Keep one source of truth**: derive, don't duplicate. Solix derives the timeline at query time rather than storing it twice — follow that instinct.
+5. **Backfill carefully**: when a column changes meaning, plan the data move explicitly.
+
+Pair with **Forge** when a feature needs new state and **Spire** when the data model is really an architecture decision.

package/dist/agents/ledger.md

@@ -0,0 +1,20 @@
+---
+name: ledger
+description: FinOps / Cost advisor. Watches spend against per-session budgets, flags overspend, and suggests cheaper models. Use to review token/cost usage, set budgets, or decide where opus is worth it.
+model: haiku
+tools: Read, Bash, Grep, Glob
+---
+
+You are **Ledger**, the cost advisor in the Solix command center.
+
+You keep the lights on cheaply. Solix already estimates per-session spend from the token usage Claude reports (model pricing × tokens) and draws a budget ring on each planet — you read those numbers and turn them into decisions. You run on haiku because the cost watchdog should be the cheapest agent in the system.
+
+Your priorities:
+
+1. **Right model for the job**: most work doesn't need opus. Flag sessions burning opus on mechanical edits and suggest sonnet or haiku.
+2. **Budgets as guardrails, not gates**: recommend per-session caps that catch runaways without nagging on normal work. A breach should be rare and meaningful.
+3. **Find the spend**: point at the missions and tools driving cost — usually a few long sessions, not many short ones.
+4. **Estimate, don't bill**: be explicit that figures are approximations from reported tokens × the pricing table, useful for relative comparison.
+5. **Cheapest fix first**: caching, smaller context, a cheaper model, or splitting a mission — in that order — before asking for a bigger budget.
+
+Pair with **Spire** when cost is really an architecture problem and **Compass** when a budget call is really a priority call.

package/dist/agents/manifest.json

@@ -135,6 +135,58 @@
       "agentMd": "atlas.md",
       "enabledByDefault": false,
       "requiredSkills": []
+    },
+    {
+      "id": "cinder",
+      "role": "debugger",
+      "codename": "Cinder",
+      "name": "Debugger / Incident",
+      "description": "Triages failures: reads stack traces, logs, and failing tests, then proposes the smallest fix.",
+      "glyph": "⚑",
+      "color": "#fb7185",
+      "defaultModel": "sonnet",
+      "agentMd": "cinder.md",
+      "enabledByDefault": false,
+      "requiredSkills": []
+    },
+    {
+      "id": "delta",
+      "role": "data",
+      "codename": "Delta",
+      "name": "Data / DB Engineer",
+      "description": "Owns schema, migrations, queries, and data integrity. Keeps reads fast and writes safe.",
+      "glyph": "⛁",
+      "color": "#2dd4bf",
+      "defaultModel": "sonnet",
+      "agentMd": "delta.md",
+      "enabledByDefault": false,
+      "requiredSkills": []
+    },
+    {
+      "id": "spire",
+      "role": "architect",
+      "codename": "Spire",
+      "name": "Architect",
+      "description": "Designs systems and weighs trade-offs before code is written. Distinct from Forge, who builds.",
+      "glyph": "△",
+      "color": "#818cf8",
+      "defaultModel": "opus",
+      "agentMd": "spire.md",
+      "enabledByDefault": false,
+      "requiredSkills": []
+    },
+    {
+      "id": "ledger",
+      "role": "finops",
+      "codename": "Ledger",
+      "name": "FinOps / Cost",
+      "description": "Watches spend against per-session budgets, flags overspend, and suggests cheaper models.",
+      "glyph": "₵",
+      "color": "#4ade80",
+      "defaultModel": "haiku",
+      "agentMd": "ledger.md",
+      "enabledByDefault": false,
+      "requiredSkills": []
     }
   ]
 }

package/dist/agents/spire.md

@@ -0,0 +1,20 @@
+---
+name: spire
+description: Architect. Designs systems and weighs trade-offs before code is written. Use to plan a feature's shape, choose between approaches, or sanity-check a design against the existing codebase.
+model: opus
+tools: Read, Grep, Glob
+---
+
+You are **Spire**, the architecture advisor in the Solix command center.
+
+You think before the team types. You produce a clear shape — components, data flow, and the one or two decisions that matter — then get out of the way so **Forge** can build it.
+
+Your priorities:
+
+1. **Fit the grain of the codebase**: reuse the patterns already here (the hook → router → broadcaster pipeline, the state modules, the WS message union) instead of inventing parallel ones. The best design looks like it was always there.
+2. **Name the trade-off**: every design has one. State it plainly — what you're optimizing for and what you're giving up — so the human can veto.
+3. **Smallest viable surface**: prefer additive changes and clear seams over sweeping rewrites. Out-of-scope is a feature.
+4. **Design for the reader**: the next engineer should be able to trace a request end to end without a map.
+5. **Stop at the plan**: you mostly read and reason. Hand implementation to Forge; hand data-model depth to **Delta**.
+
+Pair with **Forge** to execute and **Argus** to review the result against the design.

package/dist/hooks/pre-tool-bash.sh

@@ -1,16 +1,60 @@
 #!/bin/sh
-# Solix hook template — copied per-event with EVENT name baked in.
-# Critical properties:
-#   --max-time 1   never block Claude Code if Solix is down
-#   || true        never fail; a non-zero exit could block the agent
-#   redirect both  hooks must not pollute stdout/stderr
+# Solix PreToolUse hook — Bash.
+#
+# Two modes:
+#   default (SOLIX_GATE_ENABLED != 1): fire-and-forget observability. Posts the
+#     event and exits 0 immediately — never blocks Claude Code (same as before).
+#   gate    (SOLIX_GATE_ENABLED = 1):  BLOCKS until a human approves/denies in
+#     the Solix browser, then returns Claude Code a real allow/deny decision.
+#
+# Fail policy (gate mode, when the server is unreachable or times out):
+#   SOLIX_GATE_POLICY=fail-open  (default) -> defer to Claude Code's own flow
+#   SOLIX_GATE_POLICY=fail-closed          -> deny
+SOLIX_HOST="${SOLIX_HOST:-127.0.0.1}"
 SOLIX_PORT="${SOLIX_PORT:-4242}"
 EVENT="pre_tool_bash"
 PAYLOAD=$(cat 2>/dev/null || echo '{}')
 [ -z "$PAYLOAD" ] && PAYLOAD='{}'
 TS=$(date +%s%3N 2>/dev/null || echo "0")
-curl -s -X POST "http://127.0.0.1:${SOLIX_PORT}/events" \
+TOKEN=$(cat "${SOLIX_HOME:-$HOME/.solix}/token" 2>/dev/null || echo "")
+BODY="{\"event\":\"$EVENT\",\"payload\":$PAYLOAD,\"pid\":$PPID,\"cwd\":\"$(pwd)\",\"ts\":$TS}"
+
+if [ "$SOLIX_GATE_ENABLED" != "1" ]; then
+  curl -s -X POST "http://$SOLIX_HOST:${SOLIX_PORT}/events" \
+    -H "Content-Type: application/json" \
+    -H "X-Solix-Token: $TOKEN" \
+    -d "$BODY" \
+    --max-time 1 > /dev/null 2>&1 || true
+  exit 0
+fi
+
+SOLIX_GATE_POLICY="${SOLIX_GATE_POLICY:-fail-open}"
+SOLIX_GATE_TIMEOUT="${SOLIX_GATE_TIMEOUT:-305}"
+RESP=$(curl -s -X POST "http://$SOLIX_HOST:${SOLIX_PORT}/events/permission" \
   -H "Content-Type: application/json" \
-  -d "{\"event\":\"$EVENT\",\"payload\":$PAYLOAD,\"pid\":$PPID,\"cwd\":\"$(pwd)\",\"ts\":$TS}" \
-  --max-time 1 > /dev/null 2>&1 || true
-exit 0
+  -H "X-Solix-Token: $TOKEN" \
+  -d "$BODY" \
+  --max-time "$SOLIX_GATE_TIMEOUT" 2>/dev/null)
+CURL_RC=$?
+DECISION=""
+if [ "$CURL_RC" -eq 0 ]; then
+  DECISION=$(printf '%s' "$RESP" | sed -n 's/.*"decision"[[:space:]]*:[[:space:]]*"\([a-z]*\)".*/\1/p')
+fi
+
+case "$DECISION" in
+  allow)
+    printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow","permissionDecisionReason":"Approved in Solix"}}'
+    exit 0
+    ;;
+  deny)
+    printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"Denied in Solix"}}'
+    exit 0
+    ;;
+  *)
+    # timeout / empty / server unreachable -> fail policy
+    if [ "$SOLIX_GATE_POLICY" = "fail-closed" ]; then
+      printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"Solix gate unavailable (fail-closed)"}}'
+    fi
+    exit 0
+    ;;
+esac

package/dist/hooks/pre-tool-file.sh

@@ -1,16 +1,59 @@
 #!/bin/sh
-# Solix hook template — copied per-event with EVENT name baked in.
-# Critical properties:
-#   --max-time 1   never block Claude Code if Solix is down
-#   || true        never fail; a non-zero exit could block the agent
-#   redirect both  hooks must not pollute stdout/stderr
+# Solix PreToolUse hook — file writes (Read|Write|Edit|MultiEdit).
+#
+# Two modes:
+#   default (SOLIX_GATE_ENABLED != 1): fire-and-forget observability. Posts the
+#     event and exits 0 immediately — never blocks Claude Code (same as before).
+#   gate    (SOLIX_GATE_ENABLED = 1):  BLOCKS until a human approves/denies in
+#     the Solix browser, then returns Claude Code a real allow/deny decision.
+#
+# Fail policy (gate mode, when the server is unreachable or times out):
+#   SOLIX_GATE_POLICY=fail-open  (default) -> defer to Claude Code's own flow
+#   SOLIX_GATE_POLICY=fail-closed          -> deny
+SOLIX_HOST="${SOLIX_HOST:-127.0.0.1}"
 SOLIX_PORT="${SOLIX_PORT:-4242}"
 EVENT="pre_tool_file"
 PAYLOAD=$(cat 2>/dev/null || echo '{}')
 [ -z "$PAYLOAD" ] && PAYLOAD='{}'
 TS=$(date +%s%3N 2>/dev/null || echo "0")
-curl -s -X POST "http://127.0.0.1:${SOLIX_PORT}/events" \
+TOKEN=$(cat "${SOLIX_HOME:-$HOME/.solix}/token" 2>/dev/null || echo "")
+BODY="{\"event\":\"$EVENT\",\"payload\":$PAYLOAD,\"pid\":$PPID,\"cwd\":\"$(pwd)\",\"ts\":$TS}"
+
+if [ "$SOLIX_GATE_ENABLED" != "1" ]; then
+  curl -s -X POST "http://$SOLIX_HOST:${SOLIX_PORT}/events" \
+    -H "Content-Type: application/json" \
+    -H "X-Solix-Token: $TOKEN" \
+    -d "$BODY" \
+    --max-time 1 > /dev/null 2>&1 || true
+  exit 0
+fi
+
+SOLIX_GATE_POLICY="${SOLIX_GATE_POLICY:-fail-open}"
+SOLIX_GATE_TIMEOUT="${SOLIX_GATE_TIMEOUT:-305}"
+RESP=$(curl -s -X POST "http://$SOLIX_HOST:${SOLIX_PORT}/events/permission" \
   -H "Content-Type: application/json" \
-  -d "{\"event\":\"$EVENT\",\"payload\":$PAYLOAD,\"pid\":$PPID,\"cwd\":\"$(pwd)\",\"ts\":$TS}" \
-  --max-time 1 > /dev/null 2>&1 || true
-exit 0
+  -H "X-Solix-Token: $TOKEN" \
+  -d "$BODY" \
+  --max-time "$SOLIX_GATE_TIMEOUT" 2>/dev/null)
+CURL_RC=$?
+DECISION=""
+if [ "$CURL_RC" -eq 0 ]; then
+  DECISION=$(printf '%s' "$RESP" | sed -n 's/.*"decision"[[:space:]]*:[[:space:]]*"\([a-z]*\)".*/\1/p')
+fi
+
+case "$DECISION" in
+  allow)
+    printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow","permissionDecisionReason":"Approved in Solix"}}'
+    exit 0
+    ;;
+  deny)
+    printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"Denied in Solix"}}'
+    exit 0
+    ;;
+  *)
+    if [ "$SOLIX_GATE_POLICY" = "fail-closed" ]; then
+      printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"Solix gate unavailable (fail-closed)"}}'
+    fi
+    exit 0
+    ;;
+esac

package/dist/hooks/pre-tool-task.sh

@@ -1,16 +1,61 @@
 #!/bin/sh
-# Solix hook template — copied per-event with EVENT name baked in.
-# Critical properties:
-#   --max-time 1   never block Claude Code if Solix is down
-#   || true        never fail; a non-zero exit could block the agent
-#   redirect both  hooks must not pollute stdout/stderr
+# Solix PreToolUse hook — Task (subagent spawn).
+#
+# Two modes:
+#   default (SOLIX_GATE_ENABLED != 1): fire-and-forget observability. Posts the
+#     event and exits 0 immediately — never blocks Claude Code (same as before).
+#   gate    (SOLIX_GATE_ENABLED = 1):  BLOCKS until a human approves/denies in
+#     the Solix browser, then returns Claude Code a real allow/deny decision.
+#     Note: gating Task blocks subagent *spawn*. Leave this hook unmanaged in
+#     settings.json if you want to gate only Bash + file writes.
+#
+# Fail policy (gate mode, when the server is unreachable or times out):
+#   SOLIX_GATE_POLICY=fail-open  (default) -> defer to Claude Code's own flow
+#   SOLIX_GATE_POLICY=fail-closed          -> deny
+SOLIX_HOST="${SOLIX_HOST:-127.0.0.1}"
 SOLIX_PORT="${SOLIX_PORT:-4242}"
 EVENT="pre_tool_task"
 PAYLOAD=$(cat 2>/dev/null || echo '{}')
 [ -z "$PAYLOAD" ] && PAYLOAD='{}'
 TS=$(date +%s%3N 2>/dev/null || echo "0")
-curl -s -X POST "http://127.0.0.1:${SOLIX_PORT}/events" \
+TOKEN=$(cat "${SOLIX_HOME:-$HOME/.solix}/token" 2>/dev/null || echo "")
+BODY="{\"event\":\"$EVENT\",\"payload\":$PAYLOAD,\"pid\":$PPID,\"cwd\":\"$(pwd)\",\"ts\":$TS}"
+
+if [ "$SOLIX_GATE_ENABLED" != "1" ]; then
+  curl -s -X POST "http://$SOLIX_HOST:${SOLIX_PORT}/events" \
+    -H "Content-Type: application/json" \
+    -H "X-Solix-Token: $TOKEN" \
+    -d "$BODY" \
+    --max-time 1 > /dev/null 2>&1 || true
+  exit 0
+fi
+
+SOLIX_GATE_POLICY="${SOLIX_GATE_POLICY:-fail-open}"
+SOLIX_GATE_TIMEOUT="${SOLIX_GATE_TIMEOUT:-305}"
+RESP=$(curl -s -X POST "http://$SOLIX_HOST:${SOLIX_PORT}/events/permission" \
   -H "Content-Type: application/json" \
-  -d "{\"event\":\"$EVENT\",\"payload\":$PAYLOAD,\"pid\":$PPID,\"cwd\":\"$(pwd)\",\"ts\":$TS}" \
-  --max-time 1 > /dev/null 2>&1 || true
-exit 0
+  -H "X-Solix-Token: $TOKEN" \
+  -d "$BODY" \
+  --max-time "$SOLIX_GATE_TIMEOUT" 2>/dev/null)
+CURL_RC=$?
+DECISION=""
+if [ "$CURL_RC" -eq 0 ]; then
+  DECISION=$(printf '%s' "$RESP" | sed -n 's/.*"decision"[[:space:]]*:[[:space:]]*"\([a-z]*\)".*/\1/p')
+fi
+
+case "$DECISION" in
+  allow)
+    printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow","permissionDecisionReason":"Approved in Solix"}}'
+    exit 0
+    ;;
+  deny)
+    printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"Denied in Solix"}}'
+    exit 0
+    ;;
+  *)
+    if [ "$SOLIX_GATE_POLICY" = "fail-closed" ]; then
+      printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"Solix gate unavailable (fail-closed)"}}'
+    fi
+    exit 0
+    ;;
+esac