@zerwiz/ymir 0.1.13 → 0.1.15

package/bin/nornir-job-forgejo-git.sh

@@ -0,0 +1,87 @@
+#!/usr/bin/env bash
+# nornir-job-forgejo-git.sh — the local git round: issues and PRs on the forge.
+#
+# The Forgejo door (forgejo.zerwiz.org → the server's :3030, or a locally
+# provisioned forge via bin/ymir-marketing-stack.sh --with-forgejo) holds the
+# Allfather's issue-to-PR loop. Each morning this job reads the forge's open
+# issues, lands a public-safe digest in the hoard, and carves a Rune with the
+# tally — so a broken door or an accumulating queue is seen at sunrise, never
+# found by accident.
+#
+# The forge address comes from the USER'S home, never the tree (Rule 04/07):
+#   $YMIR_HOME/config/forge.env :  FORGEJO_URL=...  FORGEJO_TOKEN=... (optional)
+# Stateless: read the door → list issues → write one digest → carve one Rune.
+set -u
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT="${BROKK_ROOT_OVERRIDE:-$(cd "$SCRIPT_DIR/.." && pwd)}"
+
+if [ -z "${YMIR_HOARD_LIB_LOADED:-}" ]; then
+  _yr="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  for _yc in "$_yr/hoard-lib.sh" "$(dirname "$_yr")/bin/hoard-lib.sh"; do
+    [ -r "$_yc" ] && { . "$_yc"; YMIR_HOARD_LIB_LOADED=1; break; }
+  done
+  unset _yr _yc
+fi
+ymir_home_root _HOME
+
+FORGE_ENV="$_HOME/config/forge.env"
+[ -r "$FORGE_ENV" ] && . "$FORGE_ENV"
+FORGEJO_URL="${FORGEJO_URL:-}"
+FORGEJO_TOKEN="${FORGEJO_TOKEN:-}"
+
+# No address configured — nothing scheduled, exit clean (the same honest shape
+# as a scrape round with no sources).
+if [ -z "$FORGEJO_URL" ]; then
+  printf 'forgejo-git: no FORGEJO_URL in %s — issues loop not armed (exit 0)\n' "$FORGE_ENV"
+  exit 0
+fi
+
+# The API base: https://host/api/v1 (Forgejo/Gitea compatible).
+API="${FORGEJO_URL%/}/api/v1"
+AUTH=()
+[ -n "$FORGEJO_TOKEN" ] && AUTH=(-H "Authorization: token $FORGEJO_TOKEN")
+
+# The door must actually answer — a dead tunnel is reported, not guessed.
+if ! curl -fsS --max-time 15 "${AUTH[@]}" "$API/version" >/dev/null 2>&1; then
+  printf 'forgejo-git: door closed at %s (tunnel down?) — issues not listed\n' "$FORGEJO_URL"
+  # shellcheck source=bin/runes-append.sh
+  . "$ROOT/bin/runes-append.sh"
+  runes_append "forgejo" "git.door-down" --realm "${BROKK_REALM:-}" \
+    --message "Forgejo door closed at $FORGEJO_URL — tunnel or service down" >/dev/null 2>&1 || true
+  exit 1
+fi
+
+# All repos' open issues (the forge API lists them per repo; we query the
+# user's token scope: /repos/issues/search?type=issues&state=open).
+ISSUES_JSON="$(curl -fsS --max-time 25 "${AUTH[@]}" \
+  "$API/repos/issues/search?type=issues&state=open&limit=50" 2>/dev/null)" || ISSUES_JSON="[]"
+
+COUNT=$(printf '%s' "$ISSUES_JSON" | python3 -c "import json,sys; print(len(json.load(sys.stdin)))" 2>/dev/null || echo 0)
+ISSUES="$(printf '%s' "$ISSUES_JSON" | python3 -c "
+import json,sys
+try:
+    d=json.load(sys.stdin)
+    for i in d[:15]:
+        repo=(i.get('repository') or {}).get('full_name','?')
+        print('- [%s] %s (@%s)' % (repo, i.get('title','?')[:90], i.get('user',{}).get('login','?')))
+except Exception:
+    pass
+" 2>/dev/null)"
+
+TODAY="$(date -u +%Y-%m-%d)"
+DIGEST="$_HOME/memory/daily/forgejo-$TODAY.md"
+mkdir -p "$(dirname "$DIGEST")"
+{
+  printf '# Forgejo issues — %s\n\n' "$TODAY"
+  printf '%s open (limit 50 scanned; first 15 shown)\n\n' "$COUNT"
+  printf '%s\n' "$ISSUES"
+} >"$DIGEST"
+
+printf 'forgejo-git: issues=%s digest=%s\n' "$COUNT" "$DIGEST"
+
+# shellcheck source=bin/runes-append.sh
+. "$ROOT/bin/runes-append.sh"
+runes_append "forgejo" "git.issues" --realm "${BROKK_REALM:-}" \
+  --message "forgejo issues round: $COUNT open -> $DIGEST" >/dev/null \
+  || printf 'forgejo-git: rune append failed (non-fatal)\n'
+exit 0

package/bin/nornir-job-observer.sh

@@ -4,7 +4,7 @@
 # Read-only observation of the Ymir runtime into Runes. This job touches nothing
 # outside Ymir; every source below lives inside the repo (or the external worktree
 # root, which is read-only):
-#   docs/masterplan.md               open forge orders
+#   hodd/docs/masterplan.md           open forge orders
 #   .agents/agents/*.md              the agent roster
 #   .agents/memory/well/             the well (episodes)
 #   workspace/memory/runes_audit.md  the ledger
@@ -32,10 +32,11 @@ WORKTREE_ROOT="${BROKK_YGGDRASIL_ROOT:-$HOME/.treehouse}"
 YMIR_HOME="${YMIR_HOME:-$HOME/Documents/Ymir}"
 SMIDJA_DB="${YMIR_HOME:+$YMIR_HOME/smidja/smidja.db}"
 [ -z "${SMIDJA_DB:-}" ] || [ ! -f "$SMIDJA_DB" ] && SMIDJA_DB="$ROOT/apps/smidja/smidja_data/smidja.db"
-MASTERPLAN="$ROOT/docs/masterplan.md"
-WELL_DIR="$ROOT/.agents/memory/well"
+MASTERPLAN="${BROKK_MASTERPLAN:-${YMIR_HOME:-$HOME/Documents/Ymir}/hodd/docs/masterplan.md}"
+WELL_DIR="${BROKK_WELL_DIR:-${YMIR_HOME:+$YMIR_HOME/hodd/memory/well}}"
+[ -n "$WELL_DIR" ] && [ -d "$WELL_DIR" ] || WELL_DIR="$ROOT/.agents/memory/well"
 AGENTS_DIR="$ROOT/.agents/agents"
-RUNES_LEDGER="${YMIR_HOME:+$YMIR_HOME/memory/runes_audit.md}"
+RUNES_LEDGER="${YMIR_HOME:+$YMIR_HOME/hodd/memory/runes_audit.md}"
 [ -z "${RUNES_LEDGER:-}" ] || [ ! -r "$RUNES_LEDGER" ] && RUNES_LEDGER="$ROOT/workspace/memory/runes_audit.md"
 OBS_LOG="$STATE/observer.log"
 OBS_LAST="$STATE/observer.last"

package/bin/rodd-operational-input.sh

@@ -3,7 +3,7 @@
 #
 # Rödd ("voice") is the structured message wire between the Brokk primary and
 # Ymir's workers. Ported from the upstream agent-distro reference for the Brokk
-# distro runtime (docs/plans/29-brokk-distro-runtime.md). This file is both a
+# distro runtime (memory/plans/core/29-brokk-distro-runtime.md). This file is both a
 # source-safe shell library and the cross-language CLI used by the .pi / .opencode
 # integrations.
 #

package/bin/saga-session-start.sh

@@ -4,7 +4,7 @@
 # Sága ("the seeress", who sees all that happens) collapses the Brokk runtime's
 # session start into ONE ordered digest, so a harness opens in one or two turns
 # instead of many reads. Ported from the upstream agent-distro reference for plan 29
-# (docs/plans/29-brokk-distro-runtime.md).
+# (memory/plans/core/29-brokk-distro-runtime.md).
 #
 # Stages, in order:
 #   1. lock            acquire the per-home session lock first
@@ -109,8 +109,9 @@ if [ -d "$STATE" ]; then
 else
   printf 'task metadata records: 0\n'
 fi
-if [ -r "$ROOT/docs/masterplan.md" ]; then
-  open=$(grep -c '^- Status: ADDED' "$ROOT/docs/masterplan.md" 2>/dev/null || echo 0)
+MP="${BROKK_MASTERPLAN:-${YMIR_HOME:-$HOME/Documents/Ymir}/hodd/docs/masterplan.md}"
+if [ -r "$MP" ]; then
+  open=$(grep -c '^- Status: ADDED' "$MP" 2>/dev/null || echo 0)
   printf 'open forge orders: %s\n' "${open:-0}"
 fi
 

package/bin/sessrumnir.sh

@@ -42,6 +42,17 @@ APP="$APP_SESSRUMNIR"
 PID_FILE="$YMIR_STATE_DIR/sessrumnir.pid"
 LOG_FILE="$YMIR_STATE_DIR/sessrumnir.log"
 
+# npm gates install scripts, so the Electron runtime a seat needs is often absent
+# after a global install — the window then cannot open and says nothing useful.
+# Mend it before refusing (the same lesson as scripts/electron.sh).
+repair_runtime() {
+  local dir="$1"
+  [ -f "$dir/node_modules/electron/path.txt" ] && return 0
+  command -v npm >/dev/null 2>&1 || return 1
+  echo "Sessrúmnir — its Electron runtime is absent; fetching it (this is the gated postinstall)…" >&2
+  ( cd "$dir" && npm rebuild electron >/dev/null 2>&1 ) && [ -f "$dir/node_modules/electron/path.txt" ]
+}
+
 case "${1-}" in -v|-V|--version) printf '%s\n' "$VERSION"; exit 0 ;; -h|--help|"") sed -n '2,12p' "$0" | sed 's/^# \{0,1\}//'; exit 0 ;; esac
 ACTION="${1:-start}"; shift || true
 WORKSPACE="${1-}"

package/bin/syn-arm-pretool-check.sh

@@ -8,7 +8,7 @@
 # the extension. Reading it, or merely checking its syntax, is fine.
 #
 # Exit: 0 = allow, 2 = block (stderr carries the reason).
-# Owner: plan 29 (docs/plans/29-brokk-distro-runtime.md).
+# Owner: plan 29 (memory/plans/core/29-brokk-distro-runtime.md).
 set -u
 
 command_text=""

package/bin/syn-cd-pretool-check.sh

@@ -4,7 +4,7 @@
 # Sýn guards the working directory. v0 is inert (always allow); the contract
 # exists so the Sýn Pi extension can deny a bash invocation that would strand
 # the primary outside its checkout. Owner: plan 29
-# (docs/plans/29-brokk-distro-runtime.md).
+# (memory/plans/core/29-brokk-distro-runtime.md).
 #
 # Usage: syn-cd-pretool-check.sh --command <bash command>
 # Exit:  0 = allow, 2 = block (stderr carries the reason)

package/bin/syn-watch-arm.sh

@@ -5,7 +5,7 @@
 # actionable `signal:`/`stale:`/`check:`/`heartbeat:` line when something needs
 # the primary. The Pi extension (gna-pi-watch.ts) owns continuity and re-arms.
 # Ported/trimmed from the upstream agent-distro reference for plan 29
-# (docs/plans/29-brokk-distro-runtime.md).
+# (memory/plans/core/29-brokk-distro-runtime.md).
 #
 # Usage: syn-watch-arm.sh --restart
 #        syn-watch-arm.sh --handling-delivered <generation> --watcher-pid <pid>

package/bin/vor-crew-state.sh

@@ -14,7 +14,7 @@
 # from a tail alone, and is read-only.
 #
 # Ported from the upstream distro crew-state reconciliation for plan 29
-# (docs/plans/29-brokk-distro-runtime.md).
+# (memory/plans/core/29-brokk-distro-runtime.md).
 #
 # Usage: vor-crew-state.sh <task-id>
 # Exits 0 on any successful read regardless of state; exit 2 on a usage error.

package/bin/ymir-install.sh

@@ -131,7 +131,9 @@ Each row is a phase, a step, its state, and why.
 Nothing is deleted. Every step is idempotent.
 PLAN
   printf '\n'
-  bash "$SCRIPT_DIR/ymir-plan.sh" --colour >/dev/null 2>&1 || true
+  # The rendering lives on stderr (the cloth); the TOON on stdout is data and is
+  # dropped here. Sending BOTH to /dev/null is how the plan became invisible.
+  bash "$SCRIPT_DIR/ymir-plan.sh" --colour >/dev/null || true
   printf '\nProceed with the install? [y/N] '
   read -r reply || reply=""
   case "$reply" in
@@ -291,6 +293,15 @@ step_home() {
 # engine (apps/smidja) is stamped from the cloned factory's templates, exactly
 # as install.py does for a target repo.
 step_apps() {
+  # A packaged install has no apps/ of its own on purpose: the surfaces arrive as
+  # dependencies. Cloning the repos into node_modules/@zerwiz/ymir/apps/ is how a
+  # hollow directory shadowed a real package, so a package tree clones nothing.
+  # A CLONE still clones — that is the shape this step exists for.
+  case "$ROOT" in
+    */node_modules/*)
+      add apps SKIP "a package install — the surfaces are dependencies (npm i -g @zerwiz/ymir)"
+      return 0 ;;
+  esac
   local reg="$HOARD/identity/projects.yaml"
   if [ ! -r "$reg" ]; then
     add apps SKIP "no registry — no app repos to pull ($reg)"
@@ -533,7 +544,14 @@ step_sandbox() {
 
 # ── 5. memory (well + harness MCP) ───────────────────────────────────────────
 step_memory() {
-  local db="$YMIR_HOME/memory/kaia.engram" mcp=0
+  # The well is ONE memory and it lives in the hoard — always.
+  if [ -n "${ENGRAM_DB:-}" ]; then
+    local db="$ENGRAM_DB"
+  else
+    . "$SCRIPT_DIR/hoard-lib.sh" 2>/dev/null || true
+    hoard_memory_store db
+  fi
+  local mcp=0
   [ "$CHECK" = 0 ] && "$SCRIPT_DIR/mimir-bridge.sh" --start >/dev/null 2>&1 || true
   for f in "$ROOT/opencode.json" "$HOME/.config/opencode/opencode.json" "$HOME/.pi/agent/settings.json" "$HOME/.claude.json" "$HOME/.cursor/mcp.json"; do
     [ -f "$f" ] && grep -q '"engram"' "$f" 2>/dev/null && mcp=$((mcp+1))
@@ -851,6 +869,33 @@ step_auth; step_invite; step_register
 
 printf 'install[%d]{step,status,detail}:\n' "${#IDS[@]}"
 for i in "${!IDS[@]}"; do printf '  "%s","%s","%s"\n' "${IDS[$i]}" "${STATUS[$i]}" "${DETAIL[$i]}"; done
+# The same rows, rendered for the eye (stderr) — the TOON above is the data a
+# script reads, this is what a person gets. An install that ends in a raw table
+# has no design, and design here is not decoration: it is whether a reader can
+# see, at a glance, what stands, what warned, and what was skipped and why.
+if [ "${STYLE_ON:-0}" = 1 ]; then
+  ok=0; warn=0; skip=0; fail=0
+  for s_ in "${STATUS[@]}"; do
+    case "$s_" in OK) ok=$((ok+1)) ;; WARN) warn=$((warn+1)) ;; SKIP) skip=$((skip+1)) ;; FAIL) fail=$((fail+1)) ;; esac
+  done
+  style_rule 56
+  if [ "$fail" -gt 0 ]; then
+    style_line FAIL "not usable" "$fail step(s) failed — nothing below it can be trusted"
+  elif [ "$warn" -gt 0 ]; then
+    style_line OK   "it stands" "$ok steps done · $warn warned · $skip skipped"
+  else
+    style_line OK   "it stands" "$ok steps done · $skip skipped — nothing warned"
+  fi
+  # the warnings carry the why; they are the rows a person must read
+  for i in "${!IDS[@]}"; do
+    [ "${STATUS[$i]}" = WARN ] && style_line WARN "${IDS[$i]}" "${DETAIL[$i]}"
+    [ "${STATUS[$i]}" = FAIL ] && style_line FAIL "${IDS[$i]}" "${DETAIL[$i]}"
+  done
+  # and the skips as one line, with their reasons, since they are decisions not faults
+  skips=""
+  for i in "${!IDS[@]}"; do [ "${STATUS[$i]}" = SKIP ] && skips="$skips ${IDS[$i]}"; done
+  [ -n "$skips" ] && style_hint "skipped:$skips — each with its reason in the table above"
+fi
 printf '\nnext: gh auth login · register your projects in hoard/identity/projects.yaml · open http://127.0.0.1:3888/\n'
 [ -n "$INVITE_CODE" ] && printf 'invite: %s — share it to let someone register (bin/ymir-invite.sh list shows what is spent)\n' "$INVITE_CODE"
 

package/bin/ymir-marketing-stack.sh

@@ -0,0 +1,323 @@
+#!/usr/bin/env bash
+# ymir-marketing-stack.sh — the marketing stack, provisionable on ANY computer.
+#
+# Stands up the Allfather's marketing techstack as a user-space Docker Compose
+# set: Mautic (email automation), Postiz (social publishing), Activepieces
+# (workflow), and — with --with-forgejo — Forgejo (local git issues & PRs).
+# Every Eindri (Bragi for marketing, Sindri for git) can run this for another
+# user; nothing here assumes the server. Ports are env-virtualized so two
+# stacks never collide on one host.
+#
+#   bin/ymir-marketing-stack.sh up [--with-forgejo] [--dir DIR]
+#                                    [--name NAME] [--host-port P]
+#   bin/ymir-marketing-stack.sh status [--dir DIR]
+#   bin/ymir-marketing-stack.sh down [--dir DIR]
+#   bin/ymir-marketing-stack.sh doors [--dir DIR]     # where each service lives
+#
+# Config: env vars (see below) or $YMIR_HOME/config/marketing-stack.env.
+# OSS engines only — Mautic 7 (Apache), Postiz, Activepieces, Forgejo.
+set -u
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT="${BROKK_ROOT_OVERRIDE:-$(cd "$SCRIPT_DIR/.." && pwd)}"
+
+# The home the operator chose — one answer, never drift (Rule 04/07).
+if [ -z "${YMIR_HOARD_LIB_LOADED:-}" ]; then
+  _yr="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  for _yc in "$_yr/hoard-lib.sh" "$(dirname "$_yr")/bin/hoard-lib.sh"; do
+    [ -r "$_yc" ] && { . "$_yc"; YMIR_HOARD_LIB_LOADED=1; break; }
+  done
+  unset _yr _yc
+fi
+hoard_root _HOME
+hoard_state_dir _STATE
+
+# ---- config resolution: env first, then the home's file ---------------------
+CONF_ENV="$_HOME/config/marketing-stack.env"
+[ -r "$CONF_ENV" ] && . "$CONF_ENV"
+
+ACTION="${1:-up}"; shift || true
+WITH_FORGEJO=0; DIR="${YMIR_MARKETING_STACK_DIR:-$_STATE/marketing-stack}"
+NAME="${MARKETING_STACK_NAME:-marketing}"
+HOST_PORT="${MARKETING_STACK_HOST_PORT:-8001}"
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --with-forgejo) WITH_FORGEJO=1; shift ;;
+    --dir) DIR=${2-}; [ $# -ge 2 ] && shift 2 || shift ;;
+    --name) NAME=${2-}; [ $# -ge 2 ] && shift 2 || shift ;;
+    --host-port) HOST_PORT=${2-}; [ $# -ge 2 ] && shift 2 || shift ;;
+    *) printf 'error: unknown flag %s\nhelp: ymir-marketing-stack.sh up|status|down|doors [--with-forgejo] [--dir DIR] [--host-port P]\n' "$1" >&2; exit 2 ;;
+  esac
+done
+
+# ---- secrets: generated once, kept in the home, never inline -----------------
+SECRETS="$DIR/.secrets.env"
+gen_secret() { head -c 24 /dev/urandom | od -An -tx1 | tr -d ' \n' | head -c 40; }
+if [ ! -f "$SECRETS" ]; then
+  mkdir -p "$DIR"
+  {
+    echo "MAUTIC_DB_PASSWORD=$(gen_secret)"
+    echo "POSTIZ_DB_PASSWORD=$(gen_secret)"
+    echo "POSTIZ_JWT_SECRET=$(gen_secret)"
+    echo "AP_POSTGRES_PASSWORD=$(gen_secret)"
+    echo "FORGEJO_DB_PASSWORD=$(gen_secret)"
+    echo "FORGEJO_SECRET_KEY=$(gen_secret)"
+  } >"$SECRETS"
+  chmod 600 "$SECRETS"
+fi
+. "$SECRETS"
+
+MAUTIC_PORT="${MAUTIC_PORT:-$HOST_PORT}"
+POSTIZ_PORT="${POSTIZ_PORT:-$((HOST_PORT + 2))}"
+AP_PORT="${AP_PORT:-$((HOST_PORT + 4))}"
+FORGEJO_PORT="${FORGEJO_PORT:-$((HOST_PORT + 6))}"
+
+STRATEGY="compose"
+
+# ---- the compose file, rendered fresh each run -------------------------------
+render_compose() {
+  local forgejo_services="" forgejo_volumes=""
+  if [ "$WITH_FORGEJO" = 1 ]; then
+    forgejo_services='
+  forgejo:
+    image: codeberg.org/forgejo/forgejo:16
+    container_name: "'"$NAME"'-forgejo"
+    restart: unless-stopped
+    environment:
+      FORGEJO__server__ROOT_URL: "http://127.0.0.1:'"$FORGEJO_PORT"'/"
+      FORGEJO__server__HTTP_PORT: "3000"
+      FORGEJO__database__DB_TYPE: postgres
+      FORGEJO__database__HOST: forgejo-db
+      FORGEJO__database__NAME: forgejo
+      FORGEJO__database__USER: forgejo
+      FORGEJO__database__PASSWD: '"$FORGEJO_DB_PASSWORD"'
+    ports:
+      - "127.0.0.1:'"$FORGEJO_PORT"':3000"
+    volumes:
+      - forgejo-data:/data
+    depends_on:
+      forgejo-db:
+        condition: service_started
+
+  forgejo-db:
+    image: postgres:16-alpine
+    container_name: "'"$NAME"'-forgejo-db"
+    restart: unless-stopped
+    environment:
+      POSTGRES_DB: forgejo
+      POSTGRES_USER: forgejo
+      POSTGRES_PASSWORD: '"$FORGEJO_DB_PASSWORD"'
+    volumes:
+      - forgejo-db:/var/lib/postgresql/data
+'
+    forgejo_volumes='  forgejo-data:
+  forgejo-db:'
+  fi
+  cat >"$DIR/docker-compose.yml" <<EOF
+# generated by ymir-marketing-stack.sh ($(date -u +%Y-%m-%dT%H:%M:%SZ))
+# OSS engines: mautic/mautic:7 · ghcr.io/gitroomhq/postiz-app · ghcr.io/activepieces/activepieces · codeberg.org/forgejo/forgejo
+services:
+  ${NAME}-mautic-web:
+    image: mautic/mautic:7.0.1-apache
+    container_name: "${NAME}-mautic-web"
+    restart: unless-stopped
+    ports:
+      - "127.0.0.1:${MAUTIC_PORT}:80"
+    environment:
+      MAUTIC_DB_HOST: ${NAME}-mautic-db
+      MAUTIC_DB_PORT: "3306"
+      MAUTIC_DB_DATABASE: mautic
+      MAUTIC_DB_USER: mautic
+      MAUTIC_DB_PASSWORD: ${MAUTIC_DB_PASSWORD}
+      DOCKER_MAUTIC_ROLE: mautic_web
+      DOCKER_MAUTIC_RUN_MIGRATIONS: "true"
+    volumes:
+      - mautic-config:/var/www/html/config
+      - mautic-logs:/var/www/html/var/logs
+      - mautic-media-files:/var/www/html/docroot/media/files
+      - mautic-media-images:/var/www/html/docroot/media/images
+    depends_on:
+      ${NAME}-mautic-db:
+        condition: service_healthy
+
+  ${NAME}-mautic-worker:
+    image: mautic/mautic:7.0.1-apache
+    container_name: "${NAME}-mautic-worker"
+    restart: unless-stopped
+    environment:
+      MAUTIC_DB_HOST: ${NAME}-mautic-db
+      MAUTIC_DB_PORT: "3306"
+      MAUTIC_DB_DATABASE: mautic
+      MAUTIC_DB_USER: mautic
+      MAUTIC_DB_PASSWORD: ${MAUTIC_DB_PASSWORD}
+      DOCKER_MAUTIC_ROLE: mautic_worker
+      DOCKER_MAUTIC_WORKERS_CONSUME_EMAIL: "2"
+      DOCKER_MAUTIC_WORKERS_CONSUME_HIT: "2"
+      DOCKER_MAUTIC_WORKERS_CONSUME_FAILED: "2"
+    volumes:
+      - mautic-config:/var/www/html/config
+      - mautic-logs:/var/www/html/var/logs
+      - mautic-media-files:/var/www/html/docroot/media/files
+      - mautic-media-images:/var/www/html/docroot/media/images
+    depends_on:
+      ${NAME}-mautic-db:
+        condition: service_healthy
+
+  ${NAME}-mautic-db:
+    image: mariadb:10.11
+    container_name: "${NAME}-mautic-db"
+    restart: unless-stopped
+    command: >
+      --character-set-server=utf8mb4
+      --collation-server=utf8mb4_unicode_ci
+    environment:
+      MYSQL_DATABASE: mautic
+      MYSQL_USER: mautic
+      MYSQL_PASSWORD: ${MAUTIC_DB_PASSWORD}
+      MYSQL_ROOT_PASSWORD: ${MAUTIC_DB_PASSWORD}
+    volumes:
+      - mautic-db:/var/lib/mysql
+    healthcheck:
+      test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
+      interval: 10s
+      timeout: 5s
+      retries: 6
+
+  ${NAME}-postiz:
+    image: ghcr.io/gitroomhq/postiz-app:latest
+    container_name: "${NAME}-postiz"
+    restart: always
+    environment:
+      MAIN_URL: "http://127.0.0.1:${POSTIZ_PORT}"
+      FRONTEND_URL: "http://127.0.0.1:${POSTIZ_PORT}"
+      NEXT_PUBLIC_BACKEND_URL: "http://127.0.0.1:${POSTIZ_PORT}/api"
+      JWT_SECRET: ${POSTIZ_JWT_SECRET}
+      DATABASE_URL: "postgresql://postiz-user:${POSTIZ_DB_PASSWORD}@${NAME}-postiz-db:5432/postiz-db-local"
+      REDIS_URL: "redis://${NAME}-postiz-redis:6379"
+      BACKEND_INTERNAL_URL: "http://localhost:3000"
+      IS_GENERAL: "true"
+      DISABLE_REGISTRATION: "false"
+      RUN_CRON: "true"
+      STORAGE_PROVIDER: "local"
+      UPLOAD_DIRECTORY: "/uploads"
+      NEXT_PUBLIC_UPLOAD_DIRECTORY: "/uploads"
+    ports:
+      - "127.0.0.1:${POSTIZ_PORT}:5000"
+    depends_on:
+      - ${NAME}-postiz-db
+      - ${NAME}-postiz-redis
+
+  ${NAME}-postiz-db:
+    image: postgres:17-alpine
+    container_name: "${NAME}-postiz-db"
+    restart: always
+    environment:
+      POSTGRES_DB: postiz-db-local
+      POSTGRES_USER: postiz-user
+      POSTGRES_PASSWORD: ${POSTIZ_DB_PASSWORD}
+    volumes:
+      - postiz-db:/var/lib/postgresql/data
+
+  ${NAME}-postiz-redis:
+    image: redis:7-alpine
+    container_name: "${NAME}-postiz-redis"
+    restart: always
+    volumes:
+      - postiz-redis:/data
+
+  ${NAME}-activepieces:
+    image: ghcr.io/activepieces/activepieces:latest
+    container_name: "${NAME}-activepieces"
+    restart: unless-stopped
+    ports:
+      - "127.0.0.1:${AP_PORT}:80"
+    environment:
+      AP_FRONTEND_URL: "http://127.0.0.1:${AP_PORT}"
+      AP_ENGINE_EXECUTABLE_PATH: "dist/packages/engine/main.js"
+      AP_DB_TYPE: POSTGRES
+      AP_DB_USERNAME: ap_user
+      AP_DB_PASSWORD: ${AP_POSTGRES_PASSWORD}
+      AP_DB_DATABASE: activepieces
+      AP_DB_HOST: ${NAME}-activepieces-db
+      AP_DB_PORT: "5432"
+      AP_REDIS_HOST: ${NAME}-activepieces-redis
+      AP_REDIS_PORT: "6379"
+      AP_QUEUE_MODE: REDIS
+    volumes:
+      - activepieces-cache:/usr/src/app/cache
+    depends_on:
+      ${NAME}-activepieces-db:
+        condition: service_healthy
+      ${NAME}-activepieces-redis:
+        condition: service_started
+
+  ${NAME}-activepieces-db:
+    image: postgres:16-alpine
+    container_name: "${NAME}-activepieces-db"
+    restart: unless-stopped
+    environment:
+      POSTGRES_DB: activepieces
+      POSTGRES_USER: ap_user
+      POSTGRES_PASSWORD: ${AP_POSTGRES_PASSWORD}
+    volumes:
+      - activepieces-db:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ap_user"]
+      interval: 10s
+      start_period: 20s
+
+  ${NAME}-activepieces-redis:
+    image: redis:7-alpine
+    container_name: "${NAME}-activepieces-redis"
+    restart: unless-stopped
+    volumes:
+      - activepieces-redis:/data
+${forgejo_services}
+volumes:
+  mautic-config:
+  mautic-logs:
+  mautic-media-files:
+  mautic-media-images:
+  mautic-db:
+  postiz-db:
+  postiz-redis:
+  activepieces-cache:
+  activepieces-db:
+  activepieces-redis:
+${forgejo_volumes}
+EOF
+}
+
+engine_up() {
+  render_compose
+  (cd "$DIR" && docker compose up -d 2>&1 | tail -4)
+}
+
+status() {
+  if [ ! -f "$DIR/docker-compose.yml" ]; then
+    printf 'marketing-stack[1]{state,dir}:\n  "not-provisioned","%s"\n' "$DIR"
+    return 0
+  fi
+  (cd "$DIR" && docker compose ps --format 'table {{.Name}}\t{{.Status}}\t{{.Ports}}' 2>/dev/null | head -14)
+}
+
+doors() {
+  printf 'marketing-stack[1]{service,url}:\n'
+  printf '  "Mautic (email automation)",http://127.0.0.1:%s\n' "$MAUTIC_PORT"
+  printf '  "Postiz (social publishing)",http://127.0.0.1:%s\n' "$POSTIZ_PORT"
+  printf '  "Activepieces (workflow)",http://127.0.0.1:%s\n' "$AP_PORT"
+  [ "$WITH_FORGEJO" = 1 ] && printf '  "Forgejo (git · issues · PRs)",http://127.0.0.1:%s\n' "$FORGEJO_PORT"
+}
+
+case "$ACTION" in
+  up) engine_up ;;
+  status) status ;;
+  down) [ -f "$DIR/docker-compose.yml" ] && (cd "$DIR" && docker compose down 2>&1 | tail -2) || printf 'marketing-stack: nothing provisioned at %s\n' "$DIR" ;;
+  doors) doors ;;
+  *) printf 'error: unknown action %s\nhelp: ymir-marketing-stack.sh up|status|down|doors\n' "$ACTION" >&2; exit 2 ;;
+esac
+
+# ---- carve the Rune (append-only ledger, in the hoard) -----------------------
+# shellcheck source=bin/runes-append.sh
+. "$ROOT/bin/runes-append.sh" 2>/dev/null || true
+runes_append "marketing" "stack.$ACTION" --realm "${BROKK_REALM:-}" \
+  --message "marketing stack $ACTION (Mautic:$MAUTIC_PORT Postiz:$POSTIZ_PORT Activepieces:$AP_PORT${WITH_FORGEJO:+ Forgejo:$FORGEJO_PORT}) at $DIR" >/dev/null 2>&1 || true

package/docs/runbooks/models.md

@@ -56,7 +56,7 @@ bin/agent-run.sh hnoss "design a hero section"
 
 Keep a per-machine overlay `config/agents.<hostname>.yaml`; it deep-merges over
 the base. Example: `config/agents.machine.example.yaml`. Override the host with
-`YMIR_AGENTS_MACHINE=omarchy-1`.
+`YMIR_AGENTS_MACHINE=omarchy`.
 
 ## Hosted models
 

package/docs/workspaces.md

@@ -6,6 +6,10 @@
 > question — where a *project* lives — had no single answer. Two rules decide it:
 > private data is never inside the checkout (Rule 04), and a domain is not a
 > house (Rule 01/03).
+>
+> **2026-09-17:** the roots settled — workspaces now live under
+> `$YMIR_HOME/hodd/workspaces/` (marketing/ · personal/ · work/); this page
+> stays the map, the hoard is authoritative.
 
 ## The one idea
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zerwiz/ymir",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "description": "Ymir \u2014 the single-tenant agent operating system. Omarchy-first, host-aware, self-healing.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/zerwiz/ymir",
@@ -60,9 +60,15 @@
     "compliance": "bash .agents/skills/galdr-ymirsystem/scripts/compliance-check.sh"
   },
   "optionalDependencies": {
-    "@zerwiz/hlidskjalf": "^0.1.0",
-    "@zerwiz/odrerir": "^0.1.0",
+    "@zerwiz/hlidskjalf": "0.1.1",
+    "@zerwiz/odrerir": "0.1.1",
     "@zerwiz/sessrumnir": "0.1.9",
     "@zerwiz/smidja-factory": "^0.1.0"
+  },
+  "dependencies": {
+    "@zerwiz/hlidskjalf": "^0.1.1",
+    "@zerwiz/odrerir": "^0.1.1",
+    "@zerwiz/sessrumnir": "^0.1.10",
+    "@zerwiz/smidja-factory": "^0.1.2"
   }
-}
+}

package/scripts/electron.sh

@@ -289,10 +289,10 @@ if [ "$VIEW" = both ]; then
   start_one odrerir
   sleep 2
   for v in "${VIEWS[@]}"; do
-    if is_running "$v"; then printf 'electron[1]{view,state,pid,url}:\n  "%s","up",%s,"%s"\n' "$v" "$(pid_of "$v")" "$(view_host "$v")"; else printf 'error: electron %s failed to start; see %s\n' "$v" "${log_file "$v"#"$ROOT"/}" >&2; exit 1; fi
+    if is_running "$v"; then printf 'electron[1]{view,state,pid,url}:\n  "%s","up",%s,"%s"\n' "$v" "$(pid_of "$v")" "$(view_host "$v")"; else printf 'error: electron %s failed to start; see %s\n' "$v" "$(log_file "$v")" >&2; exit 1; fi
   done
 else
   start_one "$VIEW"
   sleep 2
-  if is_running "$VIEW"; then printf 'electron[1]{view,state,pid,url}:\n  "%s","up",%s,"%s"\n' "$VIEW" "$(pid_of "$VIEW")" "$(view_host "$VIEW")"; else printf 'error: electron failed to start; see %s\n' "${log_file "$VIEW"#"$ROOT"/}" >&2; exit 1; fi
+  if is_running "$VIEW"; then printf 'electron[1]{view,state,pid,url}:\n  "%s","up",%s,"%s"\n' "$VIEW" "$(pid_of "$VIEW")" "$(view_host "$VIEW")"; else printf 'error: electron failed to start; see %s\n' "$(log_file "$VIEW")" >&2; exit 1; fi
 fi