@zerwiz/ymir 0.1.5 → 0.1.7

package/scripts/lower.sh

@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+# lower.sh — the whole house in one word: the windows first, then the web.
+#
+# The shells are lowered BEFORE the services, so no window is left watching a
+# port that has just gone away. That order is the whole point of owning both
+# lifecycles in one place.
+#
+#   scripts/lower.sh              # every shell + the services
+#   scripts/lower.sh --desktop    # the shells only
+#   scripts/lower.sh --web        # the services only
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+
+WHAT="all"
+case "${1-}" in
+  --web) WHAT=web ;;
+  --desktop) WHAT=desktop ;;
+  -h|--help|"") sed -n '2,12p' "$0" | sed 's/^# \{0,1\}//'; exit 0 ;;
+esac
+
+if [ "$WHAT" != "web" ]; then
+  printf '\n— the windows —\n'
+  if [ -x "$ROOT/bin/sessrumnir.sh" ]; then
+    "$ROOT/bin/sessrumnir.sh" stop || printf 'lower: sessrumnir did not stop cleanly\n' >&2
+  fi
+  "$ROOT/scripts/electron.sh" stop || printf 'lower: electron.sh stop reported errors\n' >&2
+fi
+
+if [ "$WHAT" != "desktop" ]; then
+  printf '\n— the web —\n'
+  "$ROOT/scripts/stop.sh" || printf 'lower: stop.sh reported errors\n' >&2
+fi

package/scripts/raise.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+# raise.sh — the whole house in one word: the web AND the windows.
+#
+# scripts/start.sh raises the services; scripts/electron.sh raises the desktop
+# shells. Two lifecycles that never met — which is why "the electrons are not
+# running" was true while 28 processes stood, and why a web restart left the
+# shells pointing at a dead port. This is the pair of hands.
+#
+#   scripts/raise.sh              # services + every desktop shell
+#   scripts/raise.sh --web        # the services only
+#   scripts/raise.sh --desktop    # the shells only
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+
+WHAT="all"
+case "${1-}" in
+  --web) WHAT=web ;;
+  --desktop) WHAT=desktop ;;
+  -h|--help|"") sed -n '2,12p' "$0" | sed 's/^# \{0,1\}//'; exit 0 ;;
+esac
+
+if [ "$WHAT" != "desktop" ]; then
+  printf '\n— the web —\n'
+  "$ROOT/scripts/start.sh" || printf 'raise: start.sh reported errors\n' >&2
+fi
+
+if [ "$WHAT" != "web" ]; then
+  printf '\n— the windows —\n'
+  # Every shell, by name: hlidskjalf is the default view; smidja and odrerir need
+  # their own start; sessrumnir is its own app.
+  "$ROOT/scripts/electron.sh" start || printf 'raise: hlidskjalf failed\n' >&2
+  for v in smidja odrerir; do
+    "$ROOT/scripts/electron.sh" start --view "$v" || printf 'raise: %s failed\n' "$v" >&2
+  done
+  if [ -x "$ROOT/bin/sessrumnir.sh" ]; then
+    "$ROOT/bin/sessrumnir.sh" start || printf 'raise: sessrumnir failed\n' >&2
+  fi
+  printf '\n'
+  "$ROOT/scripts/electron.sh" status
+fi

package/scripts/start.sh

@@ -17,10 +17,45 @@ if [ -z "${YMIR_PLATFORM_LOADED:-}" ]; then
 fi
 
 ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+# The operator's settings and secrets live in the home they chose, never in the
+# code tree — a packaged install replaces its tree on upgrade, and a credential
+# must never sit in a tree that ships (Rule 04).
+if [ -z "${YMIR_HOARD_LIB_LOADED:-}" ]; then
+  _yr="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  for _yc in "$_yr/hoard-lib.sh" "$(dirname "$_yr")/bin/hoard-lib.sh"; do
+    [ -r "$_yc" ] && { . "$_yc"; YMIR_HOARD_LIB_LOADED=1; break; }
+  done
+  unset _yr _yc
+fi
+hoard_settings_dir YMIR_SETTINGS_DIR
+hoard_local_env YMIR_ENV_FILE
+hoard_state_dir YMIR_STATE_DIR
+hoard_data_dir YMIR_DATA_DIR
+
+# The roots that live OUTSIDE the code tree: this machine's records and the
+# runtime state belong to the home the operator chose at installation, never in
+# the tree — a packaged install replaces its tree on upgrade (Rule 04).
 APP="$ROOT/apps/hlidskjalf"
 RUN="$ROOT/.run"
 PID_FILE="$RUN/hlidskjalf.pid"
 LOG="$RUN/hlidskjalf.log"
+
+# Load the platform env once (Rule 04): the gate, the Bifrost bridge and Mimir
+# all read their credentials from .env.local — 0600, gitignored, never printed.
+# The bun gate reads process.env, and nothing loaded the file for it, so a
+# credential set by bin/ymir-setup-auth.sh never reached it — and the gate treats
+# an empty GATE_AUTH as "open". Loaded before the ports below so those may be
+# overridden from it too.
+if [ -r "$YMIR_ENV_FILE" ]; then
+  set +eu
+  set -a
+  # shellcheck disable=SC1090,SC1091
+  . "$YMIR_ENV_FILE" || true
+  set +a
+  set -eu
+fi
+
 PORT="${HLIDSKJALF_PORT:-3888}"
 
 mkdir -p "$RUN"
@@ -43,6 +78,11 @@ fi
 # Raise the gate API (real runtime data) when bun is available. Demo mode works
 # without it; live data needs it.
 API_PORT="${HLIDSKJALF_API_PORT:-3889}"
+# The public hostnames the gate fronts (written by bin/gjallarhorn-expose.sh):
+# without them the gate cannot route a host to its app, and the login page for
+# that app would never be reached.
+[ -r "$YMIR_STATE_DIR/gjallarhorn-hosts.env" ] && . "$YMIR_STATE_DIR/gjallarhorn-hosts.env" && \
+  export SMIDJA_HOST ODRERIR_HOST YMIR_PRIMARY_HOST
 API_PID_FILE="$RUN/hlidskjalf-api.pid"
 API_LOG="$RUN/hlidskjalf-api.log"
 if command -v bun >/dev/null 2>&1; then
@@ -66,7 +106,7 @@ if [ -x "$ROOT/bin/nornir-cron-start.sh" ]; then
   if "$ROOT/bin/nornir-cron-start.sh" >/dev/null 2>&1; then echo "Nornir cron: started"; else echo "Nornir cron: start failed" >&2; fi
 fi
 if [ -x "$ROOT/bin/bifrost-bridge.sh" ]; then
-  if BROKK_ENV_FILE="$ROOT/.env.local" "$ROOT/bin/bifrost-bridge.sh" --start >/dev/null 2>&1; then echo "Bifrost bridge: up"; else echo "Bifrost bridge: not up (needs OPENCODE_GO_API_KEY)" >&2; fi
+  if BROKK_ENV_FILE="$YMIR_ENV_FILE" "$ROOT/bin/bifrost-bridge.sh" --start >/dev/null 2>&1; then echo "Bifrost bridge: up"; else echo "Bifrost bridge: not up (needs OPENCODE_GO_API_KEY)" >&2; fi
 fi
 # The well — Mimirsbrunn (engram) on :4602; the gate API and mimir.sh drink here.
 if [ -x "$ROOT/bin/mimir-bridge.sh" ]; then
@@ -81,7 +121,17 @@ VIZ_API_PORT="${SMIDJA_VIZ_API_PORT:-8437}"
 VIZ_UI_PORT="${SMIDJA_VIZ_UI_PORT:-8438}"
 VIZ_API_PID_FILE="$RUN/smidja-viz-api.pid"
 VIZ_UI_PID_FILE="$RUN/smidja-viz-ui.pid"
-SMIDJA_DB_PATH="${SMIDJA_DB:-$ROOT/apps/smidja/smidja_data/smidja.db}"
+SMIDJA_DB_PATH="${SMIDJA_DB:-}"
+# The smithy DB follows the HOME: 0003-private-data-separation moved it to
+# $YMIR_HOME/smidja/smidja.db. Prefer an existing DB there, then an in-repo copy
+# for a checkout that keeps its own; SMIDJA_DB overrides either.
+if [ -z "$SMIDJA_DB_PATH" ]; then
+  for _db in "${YMIR_HOME:-$HOME/Documents/Ymir}/smidja/smidja.db" \
+             "$ROOT/apps/smidja/smidja_data/smidja.db"; do
+    [ -f "$_db" ] && { SMIDJA_DB_PATH="$_db"; break; }
+  done
+  SMIDJA_DB_PATH="${SMIDJA_DB_PATH:-${YMIR_HOME:-$HOME/Documents/Ymir}/smidja/smidja.db}"
+fi
 if command -v bun >/dev/null 2>&1 && [ -d "$VIZ_DIR" ]; then
   [ -d "$VIZ_DIR/node_modules" ] || (cd "$VIZ_DIR" && bun install >/dev/null 2>&1 || true)
   # The API serves the UI from ./dist. Without a build it answers the API but

package/.agents/config/agents.yaml

@@ -1,50 +0,0 @@
-# config/agents.yaml — the Allfather's own combination of smiths and models.
-#
-# THIS IS YOUR FILE. Edit it, then run:  bin/agents-config.sh apply
-# No other Ymir file hardcodes a model for you; this YAML is the one place.
-# Any agent without its own `model:` inherits `default_model`.
-
-version: 1
-
-# The harness is chosen by where the model lives — local through pi, online
-# through opencode. An agent may still name `harness:` to override the rule.
-harness:
-  local: pi              # a model on a local provider runs through pi
-  online: opencode       # a hosted model runs through opencode
-  local_providers: [llama.cpp, llama-cpp, lmstudio]
-  # The same local server is named differently per harness; translate on the way.
-  providers:
-    llama.cpp: { pi: llama-cpp }
-
-# The fallback smith for any agent that does not name a model.
-default_model: llama.cpp/qwen3.6-35b-a3b@q2_k_xl
-
-# Local, keyless model servers. `apply` writes these into the project harness
-# config (opencode.json) so a model listed here is immediately usable. A bare
-# alias (no @quant) is auto-resolved against the server's /v1/models.
-providers:
-  llama.cpp:
-    npm: "@ai-sdk/openai-compatible"
-    name: "llama-server (local)"
-    base_url: "http://127.0.0.1:8080/v1"
-    models:
-      # A local llama.cpp router needs the EXACT served id (the @quant suffix);
-      # `apply` resolves the bare alias below to the id the server reports.
-      - frontend-design-expert-8b
-
-# agent name -> { model, harness?, primary? }. Omit model to inherit
-# default_model. Omit harness to follow the local/online rule above.
-# `primary: true` marks the agent runnable directly (mode: all), not only
-# dispatchable by another agent.
-agents:
-  brokk:   { model: llama.cpp/qwen3.6-35b-a3b@q2_k_xl }
-  # Hnoss the Shaper runs local (no cloud key) -> pi, and is directly runnable.
-  hnoss:   { model: "llama.cpp/qwen3.6-35b-a3b@q2_k_xl", primary: true }
-  sindri:  { model: llama.cpp/qwen3.6-35b-a3b@q2_k_xl }
-  bragi:   { model: llama.cpp/qwen3.6-35b-a3b@q2_k_xl }
-  huginn:  { model: llama.cpp/qwen3.6-35b-a3b@q2_k_xl }
-  kvasir:  { model: llama.cpp/qwen3.6-35b-a3b@q2_k_xl }
-  mimir:   { model: llama.cpp/qwen3.6-35b-a3b@q2_k_xl }
-  snotra:  { model: llama.cpp/qwen3.6-35b-a3b@q2_k_xl }
-  forseti: { model: llama.cpp/qwen3.6-35b-a3b@q2_k_xl }
-  galdr:   { model: llama.cpp/qwen3.6-35b-a3b@q2_k_xl }

package/.agents/config/tailscale-sync.yaml

@@ -1,27 +0,0 @@
-# config/tailscale-sync.example.yaml — TEMPLATE for the Allfather's machine mesh.
-#
-# Copies to the private, gitignored config/tailscale-sync.yaml on install, or
-# run: bin/tailscale-sync.sh init
-# Override the path with YMIR_TAILSCALE_SYNC.
-#
-# Sync is peer-to-peer over Tailscale (rsync over ssh, addressed by MagicDNS).
-# There is no central server and no relay unless the Allfather adds one.
-
-machine: zerwiz
-
-# The allowlist: only these tailnet hosts may be synced with. Use the MagicDNS
-# name (e.g. `ymir-desktop`) or the tailnet IP.
-peers:
-  - host: omarchy-1
-  - host: zerwizserver
-
-# What may move. Paths are on both ends; ~ expands on each machine.
-paths:
-  - ~/.pi/agent/models.json
-  - ~/.pi/agent/models-store.json
-  - ~/.pi/agent/settings.json
-  - ~/.pi/agent/trust.json
-
-# auth.json holds live credentials. Leave false unless the Allfather trusts
-# every listed peer to hold them; Tailscale encrypts the wire, not the trust.
-include_auth: false