@sigrun/sigrun 0.5.0 → 0.6.0

package/CHANGELOG.md

@@ -5,6 +5,47 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.0] - 2026-11-02
+
+### Added
+- **Escalations core.** Extensions send notices through `host.notify`
+  (validated targets, delivered on the bounded side lane), look jobs up
+  with `host.jobs.get`, create job-scoped conversations, and read a
+  conversation's history through the trusted `host.conversations.entries`
+  / `entry` (callers enforce access themselves).
+- **Per-job state.** Each job gets a state folder under its owner's jobs
+  root (jail-granted to the run); the run's prompt names it. State follows
+  the job through delete, transfer and retire, and resets on request
+  (`POST /v1/jobs/{id}/state/reset`, and a Reset button in the jobs tab).
+- Extension views and panels render through the block renderer (they were
+  a JSON placeholder in 0.5.0 — the curator view showed raw data).
+- The settings page gains the `builtinExtensions.gateway` toggle.
+
+### Changed
+- **Ownerless jobs belong to the primary admin** (the earliest-created
+  directory admin): run conversations, access checks, `host.jobs.get` and
+  job state all use that effective owner. A single-operator install with
+  an empty directory stays ownerless.
+- The identity prompt section is multi-user and no longer names the agent
+  (naming is persona territory, `SOUL.md`).
+- Built-in documentation says six built-ins everywhere (codemode, MCP,
+  tool search, gateway, OAuth, curator); everything else is optional.
+
+### Fixed
+- The web conversation list heals after the events stream drops: it
+  reloads on every reconnect and when the tab becomes visible again, and
+  reopens an EventSource the browser gave up on (5-60 s backoff).
+  Conversations created on another device no longer stay invisible until
+  a reload.
+- Leaving an extension view: the Chats rail entry works and picking a
+  conversation in the sidebar returns to the chat.
+- Phone layout: a long URL in a user message no longer makes the chat
+  slide sideways; tables keep readable columns and scroll inside their
+  card; the composer's controls stay on one row.
+- Extension surfaces: params-carrying action/data URLs, zero-width surface
+  pages, and cadence refreshes.
+- `SIGRUN_EXTENSIONS` without a model env no longer crashes boot.
+
 ## [0.5.0] - 2026-11-02
 
 ### Added
@@ -32,7 +73,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   step read `.list` off a promise). A lazy store proxy now preserves the
   sync-store contract through the pre-bind window.
 
+### Added
+- `host.notify` lets extensions send validated explicit notices through
+  every declared notifier, with optional conversation or declared-view
+  deep links. Delivery is enqueued on the bounded side lane and is not
+  gated by `notifications.runSettled`.
+- Extension host job hooks: `host.jobs.get(id)` returns a read-only live-job
+  projection with its effective owner, and `host.conversations.create({job})`
+  stamps a validated job association in the session-meta creation commit.
+  Unknown, retired, and owner-mismatched jobs are rejected before storage
+  writes; creating the conversation does not create a job run or `lastRun`.
+
 ### Changed
+- Ownerless and orphaned-owner jobs now run as the primary admin; their
+  runs are no longer visible to every user. The effective owner is
+  resolved live without rewriting the declared record.
 - Reworded the `pi` manifest handling so it no longer implies pi
   extension compatibility. Sigrun reads `pi.extensions`/`pi.skills` only
   to LOCATE files and shares the SKILL.md format; it does not implement

package/README.md

@@ -531,8 +531,8 @@ form when the effective auth methods include `token`; `/v1/auth/providers`
 returns an empty list on proxy-only deployments because their completed
 sign-ins could not authenticate the resulting session. The TUI continues to
 use tokens. Login providers come from extensions.
-The reference implementation is **`@sigrun/oauth`, the fourth built-in
-extension**. It is bundled and loads by default, so no `extensions` entry is
+The reference implementation is **`@sigrun/oauth`, one of the six built-in
+extensions**. It is bundled and loads by default, so no `extensions` entry is
 needed. Set `"builtinExtensions": {"oauth": false}` to disable it; like the
 other built-in toggles, this is restart-required. A configured extension
 whose package name is also `@sigrun/oauth` replaces the built-in. If the
@@ -1082,10 +1082,13 @@ a dashboard) are in
 
 ## Built-in extensions
 
-Five extensions are built into core — **codemode**, **MCP**, **tool
-search**, **gateway**, and **OAuth login**. The first three mirror
-what pi 1.3.0 ships built-in; the gateway is sigrun's own channel-adapter
-engine; OAuth provides OIDC, GitHub, and Discord login providers. They
+Six extensions are built into core — **codemode**, **MCP**, **tool
+search**, **gateway**, **OAuth login**, and the **curator**. The first
+three mirror what pi 1.3.0 ships built-in; the gateway is sigrun's own
+channel-adapter engine; OAuth provides OIDC, GitHub, and Discord login
+providers; the curator learns per-user skills (see
+[Skills and prompt templates](#skills-and-prompt-templates)). Every other extension is optional
+and loads only when `extensions` names it. The built-ins
 load by default on every boot, with no settings entry, and resolve from
 core's own `node_modules` (they are core dependencies, never installed
 into the packages dir — `extensions` has nothing to install for them,
@@ -1093,7 +1096,8 @@ unless a same-named package is deliberately installed to replace one;
 see below).
 A default install therefore has pi's tool surface without configuring
 anything. On `GET /v1/extensions` they report under the names
-`codemode`, `sigrun-mcp`, `tool-search`, `gateway`, and `oauth`.
+`codemode`, `sigrun-mcp`, `tool-search`, `gateway`, `oauth`, and
+`curator`.
 Configure OAuth providers in `settings/oauth.json`; see the
 `@sigrun/oauth` package README for provider settings and secrets.
 
@@ -1109,7 +1113,8 @@ default. They join the offered set when an enabled MCP server's
   automatic decision (auto-enable only narrows the default set, never a
   named list).
 - **Turning one off** — `"builtinExtensions": {"codemode": false,
-  "mcp": false, "toolSearch": false, "gateway": false, "oauth": false}`.
+  "mcp": false, "toolSearch": false, "gateway": false, "oauth": false,
+  "curator": false}`.
   Each defaults to `true`; each is restart-required. A disabled built-in
   disappears from `GET /v1/extensions` entirely — no row, not even a
   skipped one — and its config is then ignored.
@@ -1136,12 +1141,13 @@ docs/extending.md).
   "extensions": [ // configured extensions install + load as above
     "@acme/sigrun-ext-example@^0.1.0"
   ],
-  "builtinExtensions": { // all five default to true; restart required
+  "builtinExtensions": { // all six default to true; restart required
     "codemode": true,
     "mcp": true,
     "toolSearch": false,
     "gateway": true,
-    "oauth": true
+    "oauth": true,
+    "curator": true
   }
 }
 ```
@@ -1202,7 +1208,8 @@ model receives the expanded text.
 
 **The curator and learned skills.** Beyond the three roots above, every
 user has a private fourth root — learned skills the curator records for
-them under `<data-dir>/users/<user>/skills/`. The curator reviews the
+them under `<data-dir>/users/<user>/skills/`. For skills it ranks second:
+the workspace wins over it, and it wins over the user dir and packages. The curator reviews the
 user's conversations (owner-authored tool calls are captured as
 "Noted" hints, never executed on the spot) and writes through the
 versioned `skill_manage` surface, so every learned skill keeps its last

package/dist/extension.d.ts

@@ -38,7 +38,7 @@ import type { Access, Sharing } from "@sigrun/shared/access";
 import type { AmbientPlace, AmbientRecord } from "@sigrun/shared/ambient";
 import type { Action, DataOps, IconName, Tree } from "@sigrun/shared/blocks";
 import type { InteractionAnswer, InteractionRecord } from "@sigrun/shared/interactions";
-import type { JobSpec } from "@sigrun/shared/jobs";
+import type { JobSpec, JobWire } from "@sigrun/shared/jobs";
 import type { AccountLinkWire, ConversationSummary, ConversationViewWire, HealthStatus, ModelEntry, SessionMeta, SlashCommand, SubmissionRecordWire, ThinkingLevelWire, UserWire as DirectoryUserWire } from "@sigrun/shared/views";
 export type { Access, AccountLinkWire, AmbientRecord, DirectoryUserWire, InteractionRecord, JobSpec, ModelEntry, Sharing, SlashCommand, };
 type JsonParams = JsonObject;
@@ -630,6 +630,23 @@ export type RunSettledOutcome = {
     readonly status: "unanswered";
     readonly reason: string;
 };
+/** One explicit notification an extension sends through `host.notify`. */
+export interface ExtensionNoticeInput {
+    /** A directory user; `undefined` only when the directory is empty. */
+    readonly user: string | undefined;
+    /** 1..200 characters. */
+    readonly title: string;
+    /** 0..2000 characters. */
+    readonly body: string;
+    /** 1..64 characters, each `[a-z0-9.-]`. */
+    readonly kind: string;
+    readonly target?: {
+        readonly view: string;
+        readonly params?: JsonObject;
+    } | {
+        readonly conversation: number;
+    };
+}
 /** Fields shared by every notification variant. */
 interface NotificationEventBase {
     readonly conversationId?: number;
@@ -650,6 +667,12 @@ export type NotificationEvent = NotificationEventBase & ({
     readonly callId?: string;
 } | {
     readonly type: "job.failed";
+} | {
+    readonly type: "extension";
+    /** The calling extension's slug. */
+    readonly extension: string;
+    /** The extension-defined notice kind. */
+    readonly kind: string;
 } | {
     readonly type: "run.settled";
     /** Whether the run answered or not (model error, abort, …), with
@@ -1018,6 +1041,15 @@ export type SubmissionInputPart = {
 };
 /** How a submit behaves when a run is already live (pi-durable's `whenBusy`). */
 export type WhenBusyMode = NonNullable<InputSubmissionDraft["whenBusy"]>;
+/** The extension-facing, read-only projection of one live job. */
+export interface HostJobInfo {
+    readonly id: string;
+    readonly name: string;
+    /** The effective owner (ownerless jobs resolve to the primary admin). */
+    readonly owner?: string;
+    readonly enabled: boolean;
+    readonly state: JobWire["state"];
+}
 /**
  * The host context sigrun hands an extension factory: the scoped
  * extension stores, the interaction/ambient seam surfaces, and the
@@ -1146,6 +1178,14 @@ export interface SigrunHost {
             readonly sharing?: Sharing;
             readonly name?: string;
             readonly source?: string;
+            /**
+             * Associate this new conversation with one live job. The requested
+             * owner must equal the job's effective owner (including both absent).
+             * Unknown, retired, or mismatched jobs throw `ConversationOpError`
+             * with `{error: "invalid_field", field: "job"}` before any write.
+             * Success stamps `jobId`; it does not create a job run or `lastRun`.
+             */
+            readonly job?: string;
             /**
              * Pin the conversation's extension/tool selection (gateway C4):
              * names resolved against the registry — an unknown name throws a
@@ -1167,6 +1207,9 @@ export interface SigrunHost {
             readonly archived?: boolean;
         }): Promise<readonly ConversationSummary[]>;
         meta(id: ConversationId): Promise<SessionMeta>;
+        /** The fork-aware transcript read (trusted; enforce access yourself with `host.access.accessOf`). */
+        entries(id: ConversationId, query: Omit<EntryQuery, "conversationId">, limit: number, cursor?: Cursor): Promise<Page<EntryRecord, Cursor>>;
+        entry(id: ConversationId, entryId: EntryId): Promise<EntryRecord | undefined>;
         /**
          * Withdraw/settle the conversation's active submission (gateway
          * C4, the abort route's op). On an idle conversation it RESOLVES
@@ -1233,6 +1276,16 @@ export interface SigrunHost {
             readonly mime?: string;
         }>;
     };
+    /** Read-only job lookup; retired and unknown ids resolve to `undefined`. */
+    readonly jobs: {
+        get(id: string): Promise<HostJobInfo | undefined>;
+    };
+    /**
+     * Send one explicit notice through every registered notifier. Validation
+     * failures throw; once accepted, delivery is enqueued on the bounded side
+     * lane and this resolves without awaiting notifier completion.
+     */
+    notify(input: ExtensionNoticeInput): Promise<void>;
     /** The user directory (admin wire form; emails are admin material). */
     readonly users: {
         list(): Promise<readonly DirectoryUserWire[]>;

package/dist/harness/boot.js

@@ -30,6 +30,7 @@ import { openIdentityStores, ensureSetupCode, } from "./identity/index.js";
 import { MEMORY_SECTION_KEY, noopMemoryExtension } from "./memory-default.js";
 import { createSeamHost, } from "./seam-host.js";
 import { contextFilesExtension } from "./sections/context-files.js";
+import { createJobStateExtension } from "./sections/job-state.js";
 import { modelGuidanceExtension } from "./sections/model-guidance.js";
 import { createSkillsExtension, scanFsRoot } from "../skills/index.js";
 import { SLASH_COMMANDS } from "../server/commands.js";
@@ -78,6 +79,7 @@ import { IsolationState } from "../sandbox/isolation.js";
 import { probeOsUsers } from "../sandbox/availability.js";
 import { createAdmissionGuard } from "./identity/users.js";
 import { sweepAccountLinks } from "./identity/link-sweep.js";
+import { effectiveOwner as resolveEffectiveOwner } from "./identity/primary-admin.js";
 import { SessionMetaDoc } from "../server/session-meta.js";
 import { learnedSkillsDir } from "../curation/paths.js";
 import { SkillStore } from "../curation/store.js";
@@ -120,6 +122,7 @@ export const RESERVED_CORE_SECTION_OWNERS = {
     skills: "sigrun.skills",
     "tool-guidance": "sigrun.model-guidance",
     "execution-guidance": "sigrun.model-guidance",
+    "job-state": "sigrun.job-state",
 };
 /**
  * Open (or reopen) the durable harness at `config.storagePath`.
@@ -361,6 +364,10 @@ export async function openHarness(config, options = {}) {
     // reads it at RENDER time, long after the assignment — the skills cap
     // is a live setting (`skills.sectionMaxBytes`, default 4KB).
     let skillsSettings;
+    // The job-state section resolves its services only when a job run renders;
+    // both are constructed after the core registry installs.
+    let workspaceService;
+    let jobs;
     // Context-file sections (SOUL.md persona, AGENTS.md instructions), the
     // skills convention, and the core tool surface (plan Task 1: coding
     // tools read/write/edit/bash + search tools find/grep/ls) are all
@@ -500,6 +507,13 @@ export async function openHarness(config, options = {}) {
         },
     };
     registry.install(contextFilesExtension);
+    // Escalations A2: the core-owned job-state prompt section names the run's
+    // state folder (WorkspaceService.jobsRoot, A1); deps late-bind like
+    // skillsSettings — services are created further down.
+    registry.install(createJobStateExtension({
+        jobsRoot: (owner) => workspaceService?.jobsRoot(owner),
+        job: async (id) => await jobs?.get(id),
+    }));
     // Curator A8 (P9): the wrap feed — the mutable set of curation tool
     // names, seeded with the core set and grown by the loader as each
     // extension's curationTargets validate. The skills extension's
@@ -765,6 +779,9 @@ export async function openHarness(config, options = {}) {
     // deps object is shared with `fireJob`'s run-now and the JobsService
     // below (one clock, one tz, one models store).
     const jobRuntimeDeps = {
+        // Resolve declared-job owners against the live directory at each use
+        // (§6.5); no cache and no rewrite of the source's stored record.
+        effectiveOwner: (owner) => resolveEffectiveOwner(identity.users.list(), owner),
         // SAFETY: harness + storage are assigned right after `Harness.open`
         // returns below (the open needs the task registered, so the deps
         // object is created first with placeholders). Every read — task
@@ -912,7 +929,7 @@ export async function openHarness(config, options = {}) {
         stopProviderRefresh();
     };
     // Every tool/file/upload/job env resolves through this one decision seam.
-    const workspaceService = createWorkspaceService({
+    workspaceService = createWorkspaceService({
         isolation: isolationState,
         osUsers,
         pool: sandboxPool,
@@ -1205,6 +1222,7 @@ export async function openHarness(config, options = {}) {
     // (an extension's declaration is its boot-time declaration).
     const fileJobs = () => settingsStore.read().jobs ?? [];
     const jobsSources = () => ({ file: fileJobs(), extensions: jobBindings });
+    const jobEffectiveOwner = (owner) => resolveEffectiveOwner(identity.users.list(), owner);
     // The root conversation — the schedule tasks' owner (spec §8.1).
     // `Harness.root` is idempotent (creates with `agent` on first call,
     // returns the reserved root thereafter), so the server's own
@@ -1233,7 +1251,7 @@ export async function openHarness(config, options = {}) {
                 // SSE stream computes `accessOf` per principal and adds it. A
                 // future in-process hub subscriber must never read a fabricated
                 // access off the hub's copy.
-                const { access: _dropped, ...row } = jobWireOf(jobId, record);
+                const { access: _dropped, ...row } = jobWireOf(jobId, record, jobEffectiveOwner(record.owner));
                 events.publish({
                     type: "job.changed",
                     job: row,
@@ -1249,7 +1267,9 @@ export async function openHarness(config, options = {}) {
                     id: jobId,
                     name: newest.spec.name,
                     source: newest.source,
-                    ...(newest.owner === undefined ? {} : { owner: newest.owner }),
+                    ...(jobEffectiveOwner(newest.owner) === undefined
+                        ? {}
+                        : { owner: jobEffectiveOwner(newest.owner) }),
                     ...(newest.sharing === undefined ? {} : { sharing: newest.sharing }),
                     schedule: newest.spec.schedule,
                     action: newest.spec.action,
@@ -1285,12 +1305,14 @@ export async function openHarness(config, options = {}) {
             jobRunTotals.set(outcome, (jobRunTotals.get(outcome) ?? 0) + 1);
         }
     });
-    const jobs = createJobsService({
+    jobs = createJobsService({
         harness,
         storage,
         runtime: jobRuntimeDeps,
+        effectiveOwner: jobEffectiveOwner,
         rootId: rootConversationId,
         sources: jobsSources,
+        jobsRoot: (owner) => workspaceService?.jobsRoot(owner),
         settings: () => settingsStore.read(),
         onChange: (jobId) => {
             void publishJobChanged(jobId);
@@ -1311,6 +1333,7 @@ export async function openHarness(config, options = {}) {
         runtime: jobRuntimeDeps,
         rootId: rootConversationId,
         sources: jobsSources,
+        jobsRoot: (owner) => workspaceService?.jobsRoot(owner),
     }, BACKGROUND_CONTEXT);
     // The deleted-owner warning (§8.3): a declared job whose `owner` names
     // a user no longer in the directory runs OWNERLESS until its source is

package/dist/harness/builtins.js

@@ -1,10 +1,13 @@
 /**
- * Built-in extensions: codemode, MCP, tool search, OAuth and the curator
- * ship WITH core — present by default, disableable via settings
+ * Built-in extensions: codemode, MCP, tool search, the gateway, OAuth and
+ * the curator ship WITH core — present by default, disableable via settings
  * `builtinExtensions`, replaceable by a same-named configured extension.
+ * Every other extension is optional and loads only when configured.
  *
- * The first three mirror pi 1.3.0's built-in tool surface; OAuth adds
- * sigrun's standard OIDC/OAuth2 login providers without extra setup.
+ * The first three mirror pi 1.3.0's built-in tool surface; the gateway is
+ * the channel-adapter engine (hermes/openclaw parity: channels work out of
+ * the box); OAuth adds sigrun's standard OIDC/OAuth2 login providers
+ * without extra setup; the curator runs the per-user learning loops.
  *
  * Resolution root (Ruling 2): built-ins resolve through core's OWN
  * node_modules via `createRequire(import.meta.url)` — they are core
@@ -23,7 +26,8 @@
  * (`readPackageName` for path-shaped entries, `parsePackageSpecifier`
  * otherwise), never by string equality on the raw specifier.
  *
- * Disabled (Ruling 6): `builtinExtensions: {codemode?, mcp?, toolSearch?, oauth?}`
+ * Disabled (Ruling 6): `builtinExtensions: {codemode?, mcp?, toolSearch?,
+ * gateway?, oauth?, curator?}`
  * (each defaulting to `true`, restart-required). A disabled built-in is
  * absent from `/v1/extensions` entirely; one log line records the skip.
  *

package/dist/harness/identity/primary-admin.js

@@ -0,0 +1,19 @@
+/**
+ * The primary admin is the first stored admin in directory insertion
+ * order. Callers pass the live directory at each use so demotions and
+ * deletions take effect without a cache or a record rewrite.
+ */
+export function primaryAdmin(records) {
+    return records.find((record) => record.admin === true);
+}
+/**
+ * Resolve the effective owner at use time: a live declared owner wins;
+ * an absent or orphaned owner falls back to the primary admin. An empty
+ * directory (single-operator mode) stays ownerless.
+ */
+export function effectiveOwner(records, owner) {
+    if (owner !== undefined && records.some((record) => record.user === owner)) {
+        return owner;
+    }
+    return primaryAdmin(records)?.user;
+}

package/dist/harness/reserved-sections.js

@@ -21,6 +21,7 @@ export const RESERVED_CORE_SECTION_KEYS = [
     "skills",
     "tool-guidance",
     "execution-guidance",
+    "job-state",
 ];
 /**
  * Core-owned directory names directly under a store root (multi-user M1).
@@ -31,6 +32,7 @@ export const RESERVED_CORE_SECTION_KEYS = [
  */
 export const RESERVED_EXTENSION_SLUGS = [
     "users",
+    "jobs",
     "workspace",
     "models",
     "sandbox",

package/dist/harness/seam-host.js

@@ -321,6 +321,7 @@ export function createSeamHost(identity, kinds, bind, sharedStores, perUserTools
                     ...(opts.owner === undefined ? {} : { owner: opts.owner }),
                     ...(opts.sharing === undefined ? {} : { sharing: opts.sharing }),
                     ...(opts.name === undefined ? {} : { name: opts.name }),
+                    ...(opts.job === undefined ? {} : { job: opts.job }),
                     ...(opts.agent === undefined ? {} : { agent: opts.agent }),
                     // The source default: the CALLING extension's slug (spec §9.5).
                     source: opts.source ?? identity.name,
@@ -342,6 +343,12 @@ export function createSeamHost(identity, kinds, bind, sharedStores, perUserTools
                 const bridge = await hostBridge("conversations.meta");
                 return bridge.conversations.meta(id);
             },
+            async entries(id, query, limit, cursor) {
+                return (await hostBridge("conversations.entries")).conversations.entries(id, query, limit, cursor);
+            },
+            async entry(id, entryId) {
+                return (await hostBridge("conversations.entry")).conversations.entry(id, entryId);
+            },
             // The C4a ops: straight delegation (the bridge resolves the id and
             // runs the op its HTTP twin runs).
             async abort(id) {
@@ -367,6 +374,11 @@ export function createSeamHost(identity, kinds, bind, sharedStores, perUserTools
                 return (await hostBridge("conversations.readFile")).conversations.readFile(id, path);
             },
         },
+        jobs: {
+            async get(id) {
+                return (await hostBridge("jobs.get")).jobs.get(id);
+            },
+        },
         users: {
             async list() {
                 return (await hostBridge("users.list")).users.list();
@@ -483,6 +495,9 @@ export function createSeamHost(identity, kinds, bind, sharedStores, perUserTools
                 return (await hostBridge("commands.run")).commands.run(conversationId, name, args, opts);
             },
         },
+        async notify(input) {
+            return (await hostBridge("notify")).notify(identity.name, input);
+        },
         // The surfaces seam (UI-blocks U3 Task 4): `changed` awaits the
         // bridge (so a factory-body call waits, never resolves early) and
         // delegates to the server-side SurfaceService — the rev bump + the

package/dist/harness/sections/context-files.js

@@ -45,10 +45,13 @@ async function readContextFile(input, fileName, context) {
 /**
  * The static `identity` section body: runtime facts only. No tool claims
  * (the system prompt already declares the actually-offered tools per
- * request) and no model name (it would re-emit this section on every
- * mid-conversation model swap, defeating the minimal-patch design).
+ * request), no model name (it would re-emit this section on every
+ * mid-conversation model swap, defeating the minimal-patch design), and
+ * no NAME: what the agent is called is `SOUL.md` territory, since a user
+ * may choose a different name for their own agent. Durability is runtime
+ * truth, not identity copy — it stays out of this section.
  */
-export const IDENTITY_TEXT = "You are sigrun, an AI assistant running as a persistent server built on the pi-durable harness. Conversations are durable: they survive restarts and can span channels (web UI, terminal UI, HTTP API). Multiple conversations may be active at once; each is independent.";
+export const IDENTITY_TEXT = "You are a small but extensible multi-user AI assistant built on the pi-durable harness. Conversations can span channels (web UI, terminal UI, HTTP API), and multiple independent conversations may be active at once.";
 /**
  * The persona sigrun ships when no `SOUL.md` exists. A present `SOUL.md`
  * replaces it wholesale; the default is never merged in.

package/dist/harness/sections/job-state.js

@@ -0,0 +1,24 @@
+/** The persistent state folder shared by every run of one job. */
+import { defineExtension, section } from "@earendil-works/pi-durable";
+import { jobStateDir } from "../../jobs/state-dir.js";
+import { SessionMetaDoc } from "../../server/session-meta.js";
+/** Name a new-conversation job run's persistent, per-owner state folder. */
+export function createJobStateExtension(deps) {
+    return defineExtension({
+        name: "sigrun.job-state",
+        sections: [
+            section("job-state", async (input, context) => {
+                const meta = await input.read.snapshot(SessionMetaDoc, input.conversationId, context);
+                if (meta?.jobId === undefined)
+                    return undefined;
+                const job = await deps.job(meta.jobId);
+                if (job === undefined)
+                    return undefined;
+                const root = deps.jobsRoot(meta.owner);
+                if (root === undefined)
+                    return undefined;
+                return `Job state: this conversation is a run of job "${job.name}" (${meta.jobId}). Its state folder is ${jobStateDir(root, meta.jobId)} — create it if missing. Use it to keep notes between runs (for example, when an issue was first seen). Other runs of this job use the same folder; write files atomically.`;
+            }),
+        ],
+    });
+}

package/dist/harness/workspace.js

@@ -1,15 +1,43 @@
 /** Resolve each conversation's ExecutionEnv: single-user, jailed, or fail-closed. */
-import { isAbsolute, resolve } from "node:path";
+import { isAbsolute, join, resolve } from "node:path";
 import { BACKGROUND_CONTEXT } from "@earendil-works/chord/context";
 import { buildUserPolicy } from "../sandbox/policy.js";
 import { SandboxedExecutionEnv } from "../sandbox/sandboxed-env.js";
 import { UnavailableExecutionEnv } from "../sandbox/unavailable-env.js";
 import { selfPackageRoot } from "./packages.js";
 import { defaultModuleTrees } from "../sandbox/policy.js";
+import { primaryAdmin } from "./identity/primary-admin.js";
 import { AgentExecutionEnv } from "./agent-env.js";
 import { lookupOsAccount } from "../sandbox/os-account.js";
+/** The live owner's record, falling back to the primary admin. */
+export function selectRecord(records, owner) {
+    return records.find((record) => record.user === owner) ?? primaryAdmin(records);
+}
 export function createWorkspaceService(deps) {
     return {
+        jobsRoot(owner) {
+            if (deps === undefined)
+                return undefined;
+            const { directory, managed } = deps;
+            const records = directory.list();
+            const record = selectRecord(records, owner);
+            if (record === undefined)
+                return join(managed.roots.dataDir, "jobs");
+            if (record.osUser !== undefined) {
+                if (deps.osUsers?.available !== true)
+                    return undefined;
+                try {
+                    const account = (deps.lookupAccount ?? lookupOsAccount)(record.osUser);
+                    return account === undefined
+                        ? undefined
+                        : join(account.home, ".local", "state", "sigrun", "jobs");
+                }
+                catch {
+                    return undefined;
+                }
+            }
+            return join(managed.userAreas(record.user), "jobs");
+        },
         async forConversation(conversation, prefs, read, ctx) {
             const workspace = prefs.defaultWorkspace;
             if (workspace.type !== "local") {
@@ -22,8 +50,7 @@ export function createWorkspaceService(deps) {
             const owner = read === undefined
                 ? undefined
                 : await deps.ownerOf(conversation.id, read, ctx ?? BACKGROUND_CONTEXT);
-            const record = records.find((candidate) => candidate.user === owner)
-                ?? records.find((candidate) => candidate.admin);
+            const record = selectRecord(records, owner);
             let osAccount;
             if (record?.osUser !== undefined) {
                 if (deps.osUsers?.available !== true) {

package/dist/jobs/fire.js

@@ -216,6 +216,7 @@ async function firePrompt(deps, id, record, fireKey, baseRun, prior, context) {
                     : { thinkingLevel: action.thinking }),
             },
             init: async (tx, newId) => {
+                const owner = deps.effectiveOwner(record.owner);
                 const run = {
                     ...baseRun,
                     conversationId: newId,
@@ -229,9 +230,9 @@ async function firePrompt(deps, id, record, fireKey, baseRun, prior, context) {
                 meta.jobId = id;
                 if (action.deliver !== undefined)
                     meta.deliver = [...action.deliver];
-                if (record.owner !== undefined)
-                    meta.owner = record.owner;
-                await deps.rewriteUserSelection?.(tx, newId, undefined, record.owner);
+                if (owner !== undefined)
+                    meta.owner = owner;
+                await deps.rewriteUserSelection?.(tx, newId, undefined, owner);
                 if (action.runSharing !== undefined)
                     meta.sharing = action.runSharing;
                 meta.name = runName(record.spec.name, deps.now(), record, deps);