@zerwiz/ymir 0.1.5 → 0.1.7

package/bin/mimir-reflect.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+# mimir-reflect — smelt the well's episodes into facts, through the LLAMA-ROUTER.
+#
+# The router is Ymir's one door to local models: its seats are llama.cpp on :8080
+# (coding) and Apodex on :1234 (research/planning). NEVER point this at Ollama —
+# ollama is the machine's own server, not a Ymir provider, and one local model
+# rides the router at a time. Swap seats by re-pointing the router, not by
+# reaching past it.
+#
+#   bin/mimir-reflect.sh              # the well, with the default seat
+#   YMIR_ROUTER_URL=http://127.0.0.1:8080/v1 YMIR_REFLECT_MODEL=qwen3.6-35b-a3b bin/mimir-reflect.sh
+set -euo pipefail
+
+WELL="${YMIR_WELL:-${YMIR_HOME:-$HOME/Documents/Ymir}/memory/kaia.engram}"
+BASE="${YMIR_ROUTER_URL:-http://127.0.0.1:1234/v1}"
+MODEL="${YMIR_REFLECT_MODEL:-apodex-1.0-mini}"
+
+[ -f "$WELL" ] || { echo "error: no well at $WELL" >&2; echo "help: set YMIR_WELL or run bin/mimir-bridge.py first" >&2; exit 1; }
+
+echo "mimir-reflect[well,seat]:"
+echo "  \"$WELL\""
+echo "  \"$BASE\"  model \"$MODEL\""
+echo
+
+# A local seat needs no key; an empty one keeps the OpenAI client quiet.
+OPENAI_API_KEY="${OPENAI_API_KEY:-local}" \
+  exec engram reflect "$WELL" --llm openai --model "$MODEL" --base-url "$BASE"

package/bin/mjollnir-webhook.sh

@@ -13,7 +13,20 @@ set -u
 VERSION="1.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-ENV_FILE="${BROKK_ENV_FILE:-$ROOT/.env.local}"
+
+# The operator's settings and secrets live in the home they chose, never in the
+# code tree — a packaged install replaces its tree on upgrade, and a credential
+# must never sit in a tree that ships (Rule 04).
+if [ -z "${YMIR_HOARD_LIB_LOADED:-}" ]; then
+  _yr="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  for _yc in "$_yr/hoard-lib.sh" "$(dirname "$_yr")/bin/hoard-lib.sh"; do
+    [ -r "$_yc" ] && { . "$_yc"; YMIR_HOARD_LIB_LOADED=1; break; }
+  done
+  unset _yr _yc
+fi
+hoard_settings_dir YMIR_SETTINGS_DIR
+hoard_local_env YMIR_ENV_FILE
+ENV_FILE="${BROKK_ENV_FILE:-$YMIR_ENV_FILE}"
 
 case "${1-}" in
   -v|-V|--version) printf '%s\n' "$VERSION"; exit 0 ;;

package/bin/mjollnir.sh

@@ -13,7 +13,26 @@ set -u
 VERSION="1.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-ENV_FILE="${BROKK_ENV_FILE:-$ROOT/.env.local}"
+
+# The operator's settings and secrets live in the home they chose, never in the
+# code tree — a packaged install replaces its tree on upgrade, and a credential
+# must never sit in a tree that ships (Rule 04).
+if [ -z "${YMIR_HOARD_LIB_LOADED:-}" ]; then
+  _yr="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  for _yc in "$_yr/hoard-lib.sh" "$(dirname "$_yr")/bin/hoard-lib.sh"; do
+    [ -r "$_yc" ] && { . "$_yc"; YMIR_HOARD_LIB_LOADED=1; break; }
+  done
+  unset _yr _yc
+fi
+hoard_settings_dir YMIR_SETTINGS_DIR
+hoard_local_env YMIR_ENV_FILE
+hoard_state_dir YMIR_STATE_DIR
+hoard_data_dir YMIR_DATA_DIR
+
+# The roots that live OUTSIDE the code tree: this machine's records and the
+# runtime state belong to the home the operator chose at installation, never in
+# the tree — a packaged install replaces its tree on upgrade (Rule 04).
+ENV_FILE="${BROKK_ENV_FILE:-$YMIR_ENV_FILE}"
 
 usage() { sed -n '2,13p' "$0" | sed 's/^# \{0,1\}//'; }
 CMD="${1-}"; shift || true
@@ -40,7 +59,7 @@ done
 if [ "$CMD" = status ]; then
   printf 'mjollnir[2]{field,value}:\n'
   printf '  "repo","%s"\n' "${REPO:-$ROOT}"
-  printf '  "pending","%s"\n' "$(find "$ROOT/data" -maxdepth 2 -name 'brief.md' -path '*issue-*' 2>/dev/null | wc -l | tr -d ' ')"
+  printf '  "pending","%s"\n' "$(find "$YMIR_DATA_DIR" -maxdepth 2 -name 'brief.md' -path '*issue-*' 2>/dev/null | wc -l | tr -d ' ')"
   exit 0
 fi
 [ "$CMD" = run ] || { printf 'error: unknown command %s\nhelp: bin/mjollnir.sh [run|status|--version]\n' "$CMD" >&2; exit 2; }
@@ -69,7 +88,7 @@ printf 'mjollnir[1]{issue,task,mode,repo}:\n  "%s","%s","%s","%s"\n' "$ISSUE" "$
 
 # 2. Scaffold the brief (the worker's contract).
 "$SCRIPT_DIR/erindi-brief.sh" "$ID" "$(basename "$REPO")" --mode "$MODE" >/dev/null 2>&1 || true
-BRIEF="$ROOT/data/$ID/brief.md"
+BRIEF="$YMIR_DATA_DIR/$ID/brief.md"
 if [ -f "$BRIEF" ]; then
   { printf '\n\n## Issue #%s — %s\n\n%s\n' "$ISSUE" "$TITLE" "$BODY"; } >>"$BRIEF"
 fi

package/bin/model-hardware.sh

@@ -17,7 +17,20 @@ set -u
 VERSION="1.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-OUT="${YMIR_LOCAL_MODELS_DOC:-$ROOT/data/local-models.md}"
+
+# The roots that live OUTSIDE the code tree: this machine's records and the
+# runtime state belong to the home the operator chose at installation, never in
+# the tree — a packaged install replaces its tree on upgrade (Rule 04).
+if [ -z "${YMIR_HOARD_LIB_LOADED:-}" ]; then
+  _yr="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  for _yc in "$_yr/hoard-lib.sh" "$(dirname "$_yr")/bin/hoard-lib.sh"; do
+    [ -r "$_yc" ] && { . "$_yc"; YMIR_HOARD_LIB_LOADED=1; break; }
+  done
+  unset _yr _yc
+fi
+hoard_state_dir YMIR_STATE_DIR
+hoard_data_dir YMIR_DATA_DIR
+OUT="${YMIR_LOCAL_MODELS_DOC:-$YMIR_DATA_DIR/local-models.md}"
 PRINT_ONLY=0
 
 case "${1-}" in -v|-V|--version) printf '%s\n' "$VERSION"; exit 0 ;; -h|--help) sed -n '2,14p' "$0" | sed 's/^# \{0,1\}//'; exit 0 ;; esac
@@ -53,8 +66,9 @@ block="<!-- model-hardware:begin -->
   build/run the CUDA build; keep K and V the same KV type (q8_0).
 - **Coding wants >= 80000 context.** Measure the real ceiling: load more until a
   request OOMs, then drop one step (ctx is per-model).
-- **Bench to the maximum:** load the \`.agents/skills/modeltesting\` skill, then
-  \`bin/models-detect.sh --write\` to register what serves.
+- **The method** — engines, wiring, and honest measurement — is the Galdr asset
+  \`.agents/skills/galdr-ymirsystem/assets/local-models.md\`. Then
+  \`bin/models-detect.sh --write\` registers what serves.
 <!-- model-hardware:end -->"
 
 # The researched settings are NOT in the managed block, so a re-run never clobbers

package/bin/model-resolve.sh

@@ -15,7 +15,20 @@ set -u
 VERSION="1.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-CFG="${YMIR_AGENTS_YAML:-$ROOT/config/agents.yaml}"
+
+# The operator's settings and secrets live in the home they chose, never in the
+# code tree — a packaged install replaces its tree on upgrade, and a credential
+# must never sit in a tree that ships (Rule 04).
+if [ -z "${YMIR_HOARD_LIB_LOADED:-}" ]; then
+  _yr="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  for _yc in "$_yr/hoard-lib.sh" "$(dirname "$_yr")/bin/hoard-lib.sh"; do
+    [ -r "$_yc" ] && { . "$_yc"; YMIR_HOARD_LIB_LOADED=1; break; }
+  done
+  unset _yr _yc
+fi
+hoard_settings_dir YMIR_SETTINGS_DIR
+hoard_local_env YMIR_ENV_FILE
+CFG="${YMIR_AGENTS_YAML:-$YMIR_SETTINGS_DIR/agents.yaml}"
 
 case "${1-}" in -v|-V|--version) printf '%s\n' "$VERSION"; exit 0 ;;
   -h|--help|"") sed -n '2,12p' "$0" | sed 's/^# \{0,1\}//'; exit 0 ;; esac

package/bin/nornir-job-hall-snapshot.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+# nornir-job-hall-snapshot.sh — Óðrerir: refresh the Live Hall's board.
+#
+# The Hall is a glass: it reads apps/odrerir/public/livehall.json, written by
+# this job from the real system state (runes · projects · cron · wake queue ·
+# standing smiths · armed when-sources · landed errands). Scheduled at 08:00,
+# after the 06:00 observer and the 07:00 briefing, so the morning's board
+# carries the day's fresh runes. Stateless: read inputs → write the snapshot →
+# carve a Rune → exit.
+#
+# Overrides: BROKK_ROOT_OVERRIDE (hall-snapshot.sh), YMIR_HOME (the hoard).
+set -u
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT="${BROKK_ROOT_OVERRIDE:-$(cd "$SCRIPT_DIR/.." && pwd)}"
+
+# The snapshot is runtime, never repo: it is gitignored where it lands.
+if ! "$ROOT/bin/hall-snapshot.sh" >/dev/null 2>&1; then
+  printf 'error: hall-snapshot.sh failed — the board is stale\n'
+  printf 'help: run bin/hall-snapshot.sh by hand to see the reason\n'
+  exit 1
+fi
+
+# Carve the Rune — the ledger lives with the hoard.
+# shellcheck source=bin/runes-append.sh
+. "$ROOT/bin/runes-append.sh"
+runes_append "odrerir" "hall.snapshot" --message "Live Hall board refreshed from real state" >/dev/null \
+  || printf 'hall-snapshot: rune append failed (non-fatal)\n'
+printf 'hall-snapshot: Live Hall board refreshed\n'

package/bin/nornir-job-nsr-compliance.sh

@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+# nornir-job-nsr-compliance.sh — the NorthStar compliance round, nightly.
+#
+# Runs the deterministic NSR gates (.compliance/gates/check_*.sh — danger,
+# env, paths, platform, wiring) and carves one Rune with the verdict. A FAIL
+# is reported loudly in the Rune message — the morning briefing reads the
+# ledger, so a broken door is seen at sunrise, not found by accident.
+#
+# Stateless: run gates → write nothing but state/last + the Rune → exit.
+set -u
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT="${BROKK_ROOT_OVERRIDE:-$(cd "$SCRIPT_DIR/.." && pwd)}"
+
+# The roots that live OUTSIDE the code tree: this machine's records and the
+# runtime state belong to the home the operator chose at installation, never in
+# the tree — a packaged install replaces its tree on upgrade (Rule 04).
+if [ -z "${YMIR_HOARD_LIB_LOADED:-}" ]; then
+  _yr="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  for _yc in "$_yr/hoard-lib.sh" "$(dirname "$_yr")/bin/hoard-lib.sh"; do
+    [ -r "$_yc" ] && { . "$_yc"; YMIR_HOARD_LIB_LOADED=1; break; }
+  done
+  unset _yr _yc
+fi
+hoard_state_dir YMIR_STATE_DIR
+hoard_data_dir YMIR_DATA_DIR
+STATE="${BROKK_STATE_OVERRIDE:-$YMIR_STATE_DIR}"
+
+GATES_DIR="$ROOT/.compliance/gates"
+[ -d "$GATES_DIR" ] || { printf 'error: no NSR gates at %s\n' "$GATES_DIR"; exit 1; }
+
+passed=0; failed=0; failed_names=""
+for g in "$GATES_DIR"/check_*.sh; do
+  name=$(basename "$g" .sh)
+  if bash "$g" >/dev/null 2>&1; then
+    passed=$((passed+1))
+  else
+    failed=$((failed+1)); failed_names="$failed_names $name"
+  fi
+done
+
+printf 'nsr-compliance: gates=%d passed=%d failed=%d%s\n' \
+  "$((passed+failed))" "$passed" "$failed" "$failed_names"
+
+# shellcheck source=bin/runes-append.sh
+. "$ROOT/bin/runes-append.sh"
+if [ "$failed" = 0 ]; then
+  runes_append "nornir" "nsr.compliance" --message "NSR compliance: $passed/$passed gates passed" >/dev/null \
+    || printf 'nsr-compliance: rune append failed (non-fatal)\n'
+  exit 0
+else
+  runes_append "nornir" "nsr.compliance.failed" --message "NSR compliance FAIL: gates $failed_names FAILED — mend at sunrise" >/dev/null \
+    || printf 'nsr-compliance: rune append failed (non-fatal)\n'
+  exit 1
+fi

package/bin/npm-publish.sh

@@ -0,0 +1,136 @@
+#!/usr/bin/env bash
+# npm-publish.sh — publish through the HOARD's npm token, every single time.
+#
+# Why this exists: this machine once held two tokens, and the one in ~/.npmrc was
+# stale. A publish then failed with a 2FA refusal that looked like a policy
+# problem but was a credential problem, and a session was spent on it. The token
+# with bypass-2FA lives in the hoard. So the rule is: never trust ~/.npmrc — read
+# the token from the hoard, hand it to npm through a temporary userconfig, and
+# throw the file away.
+#
+#   bin/npm-publish.sh                 # the platform (the repo root manifest)
+#   bin/npm-publish.sh apps/hlidskjalf # one package
+#   bin/npm-publish.sh --all           # the platform + every app package
+#   bin/npm-publish.sh --whoami        # which account the hoard token is
+#   bin/npm-publish.sh --dry-run apps/odrerir
+#   bin/npm-publish.sh --unpublish @zerwiz/ymir@0.1.5     # take ONE version back
+#   bin/npm-publish.sh --unpublish @zerwiz/ymir@0.1.5 --dry-run
+#
+# Unpublish: npm allows ONE VERSION back for 72 hours after it was published;
+# past that only npm support can remove it, which is why this door names the
+# version and refuses anything vaguer. A whole package is not a one-word act —
+# that needs npm's own tooling and a deliberate decision, not a flag here.
+#
+# A prerelease version (0.1.8-alpha) is published under `--tag next` automatically
+# — npm refuses a prerelease on `latest`, which is the second half of the same
+# lesson. A scoped package always goes out with public access.
+set -u
+
+VERSION="1.0.0"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+# shellcheck source=bin/hoard-lib.sh
+. "$SCRIPT_DIR/hoard-lib.sh"
+
+DRY=0; WHO=0; ALL=0; UNPUBLISH=0; UNPUB_SPEC=""; TARGETS=()
+for a in "$@"; do
+  case "$a" in
+    --whoami) WHO=1 ;;
+    --dry-run) DRY=1 ;;
+    --all) ALL=1 ;;
+    --unpublish) UNPUBLISH=1 ;;
+    --unpublish=*) UNPUBLISH=1; UNPUB_SPEC="${a#*=}" ;;
+    -v|-V|--version) printf '%s\n' "$VERSION"; exit 0 ;;
+    -h|--help|"") sed -n '2,22p' "$0" | sed 's/^# \{0,1\}//'; exit 0 ;;
+    -*) printf 'error: unknown flag %s\nhelp: bin/npm-publish.sh [--all|--whoami|--unpublish <spec>|--dry-run] [<package-dir>...]\n' "$a" >&2; exit 2 ;;
+    *) TARGETS+=("$a") ;;
+  esac
+done
+# --all is the platform plus every app package. The smithy's own repo is
+# cloned at apps/smidja-factory (the registry maps smidja there), so it is a
+# target like any other app: it publishes as @zerwiz/smidja.
+[ "$ALL" = 1 ] && TARGETS=("$ROOT" "$ROOT/apps/hlidskjalf" "$ROOT/apps/hlidskjalf-mobile" "$ROOT/apps/odrerir" "$ROOT/apps/sessrumnir" "$ROOT/apps/smidja-factory")
+[ "${#TARGETS[@]}" -eq 0 ] && [ "$WHO" = 0 ] && [ "$UNPUBLISH" = 0 ] && TARGETS=("$ROOT")
+# `--unpublish @scope/name@1.2.3` — the spec may also arrive positionally.
+[ "$UNPUBLISH" = 1 ] && UNPUB_SPEC="${UNPUB_SPEC:-${TARGETS[0]:-}}" 
+
+# ── the token, from the hoard ────────────────────────────────────────────────
+envfile=""; hoard_env envfile
+TOKEN=""
+if [ -r "$envfile" ]; then
+  TOKEN="$(sed -n 's/^NPM_TOKEN=//p' "$envfile" | head -1 | tr -d '"'"'"' ')"
+fi
+if [ -z "$TOKEN" ] && [ "$WHO" = 1 ]; then
+  printf 'npm[1]{token,state}:\n  "NPM_TOKEN","absent in %s"\n' "${envfile#"$HOME"/}"
+  exit 1
+fi
+if [ -z "$TOKEN" ]; then
+  printf 'error: the hoard holds no NPM_TOKEN\nhelp: add NPM_TOKEN=<granular token with bypass 2FA> to %s\n' "${envfile#"$HOME"/}" >&2
+  printf 'help: npmjs.com → Access Tokens → Generate → granular, scope @zerwiz, bypass 2FA on\n' >&2
+  exit 1
+fi
+
+cfg="$(mktemp)"; chmod 600 "$cfg"
+printf '//registry.npmjs.org/:_authToken=%s\n' "$TOKEN" >"$cfg"
+trap 'rm -f "$cfg"' EXIT
+
+if [ "$WHO" = 1 ]; then
+  who="$(npm whoami --userconfig "$cfg" 2>/dev/null || printf 'unknown')"
+  printf 'npm[2]{token,account}:\n  "source","%s"\n  "whoami","%s"\n' "${envfile#"$HOME"/}" "$who"
+  exit 0
+fi
+
+# ── unpublish ────────────────────────────────────────────────────────────────
+# Take ONE version back. npm permits it for 72 hours after publication; beyond
+# that it is npm support's door, not this one. The spec must name a version:
+# `@scope/name@1.2.3`, never a bare name.
+if [ "$UNPUBLISH" = 1 ]; then
+  case "$UNPUB_SPEC" in
+    *@*@*) ;;  # @scope/name@version
+    *@[0-9]*) ;;
+    *) printf 'error: --unpublish needs a package AND a version\nhelp: bin/npm-publish.sh --unpublish @scope/name@<version>\n' >&2; exit 2 ;;
+  esac
+  if [ "$DRY" = 1 ]; then
+    printf 'npm_unpublish[1]{spec,state}:\n  "%s","dry-run — nothing was removed"\n' "$UNPUB_SPEC"
+    exit 0
+  fi
+  out="$(npm unpublish "$UNPUB_SPEC" --force --userconfig "$cfg" 2>&1)"; rc=$?
+  if [ "$rc" = 0 ]; then
+    printf 'npm_unpublish[1]{spec,state}:\n  "%s","unpublished"\n' "$UNPUB_SPEC"
+    printf 'note: the registry CDN may serve the tarball for a while after this; publishing a\n'
+    printf 'note: newer version moves the "latest" tag off it at once.\n'
+  else
+    why="$(printf '%s' "$out" | grep -m1 -E 'npm error (code )?[A-Z0-9]+|E[0-9]{3}' | cut -c1-90)"
+    printf 'error: unpublish failed — %s\nhelp: is it inside the 72-hour window, and is the token the right account? (bin/npm-publish.sh --whoami)\n' "${why:-see npm log}" >&2
+    exit 1
+  fi
+  exit 0
+fi
+
+# ── publish ──────────────────────────────────────────────────────────────────
+printf 'npm_publish[%d]{package,version,tag,state}:\n' "${#TARGETS[@]}"
+failed=0
+for dir in "${TARGETS[@]}"; do
+  pkg="$dir/package.json"
+  if [ ! -f "$pkg" ]; then
+    printf '  "%s","-","-","SKIP (no package.json)"\n' "${dir#"$ROOT"/}"
+    continue
+  fi
+  name="$(sed -n 's/.*"name"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' "$pkg" | head -1)"
+  ver="$(sed -n 's/.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' "$pkg" | head -1)"
+  case "$ver" in *-*) tag=next ;; *) tag=latest ;; esac   # a prerelease never rides `latest`
+  if [ "$DRY" = 1 ]; then
+    printf '  "%s","%s","%s","dry-run"\n' "$name" "$ver" "$tag"
+    continue
+  fi
+  out="$(cd "$dir" && npm publish --access public --tag "$tag" --userconfig "$cfg" 2>&1)"; rc=$?
+  if [ "$rc" = 0 ]; then
+    printf '  "%s","%s","%s","published"\n' "$name" "$ver" "$tag"
+  else
+    why="$(printf '%s' "$out" | grep -m1 -E 'npm error (code )?[A-Z0-9]+|E[0-9]{3}' | cut -c1-90)"
+    printf '  "%s","%s","%s","FAILED (%s)"\n' "$name" "$ver" "$tag" "${why:-see npm log}"
+    failed=$((failed+1))
+  fi
+done
+[ "$failed" = 0 ] || { printf 'error: %d package(s) did not publish\nhelp: bin/npm-publish.sh --whoami  (is the hoard token still the right account?)\n' "$failed" >&2; exit 1; }
+exit 0

package/bin/omarchy-install.sh

@@ -24,6 +24,19 @@ VERSION="1.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
 
+# The operator's settings and secrets live in the home they chose, never in the
+# code tree — a packaged install replaces its tree on upgrade, and a credential
+# must never sit in a tree that ships (Rule 04).
+if [ -z "${YMIR_HOARD_LIB_LOADED:-}" ]; then
+  _yr="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  for _yc in "$_yr/hoard-lib.sh" "$(dirname "$_yr")/bin/hoard-lib.sh"; do
+    [ -r "$_yc" ] && { . "$_yc"; YMIR_HOARD_LIB_LOADED=1; break; }
+  done
+  unset _yr _yc
+fi
+hoard_settings_dir YMIR_SETTINGS_DIR
+hoard_local_env YMIR_ENV_FILE
+
 # portability shim (bin/ymir-platform.sh)
 if [ -z "${YMIR_PLATFORM_LOADED:-}" ]; then
   _ymir_dir="$SCRIPT_DIR"
@@ -122,15 +135,15 @@ else
 fi
 
 # ── 6. the away-mode alarm channel + the crash sensor ────────────────────────
-if [ -e "$ROOT/config/wedge-alarm" ]; then
+if [ -e "$YMIR_SETTINGS_DIR/wedge-alarm" ]; then
   add alarm OK "channel kept"
 elif [ "$CHECK" = 1 ]; then
   add alarm WARN "channel not written (run without --check)"
-elif mkdir -p "$ROOT/config" 2>/dev/null && \
-     printf '# The channel the away-mode wedge alarm fires on when an escalation\n# cannot be delivered into the pane. See bin/wedge-notify.sh.\ndesktop\n' >"$ROOT/config/wedge-alarm" 2>/dev/null; then
-  add alarm OK "channel written (config/wedge-alarm)"
+elif mkdir -p "$YMIR_SETTINGS_DIR" 2>/dev/null && \
+     printf '# The channel the away-mode wedge alarm fires on when an escalation\n# cannot be delivered into the pane. See bin/wedge-notify.sh.\ndesktop\n' >"$YMIR_SETTINGS_DIR/wedge-alarm" 2>/dev/null; then
+  add alarm OK "channel written ($YMIR_SETTINGS_DIR/wedge-alarm)"
 else
-  add alarm WARN "could not write config/wedge-alarm"
+  add alarm WARN "could not write $YMIR_SETTINGS_DIR/wedge-alarm"
 fi
 
 # ── 7. the terminal backend Ymir needs ───────────────────────────────────────

package/bin/omarchy-plugins.sh

@@ -26,6 +26,19 @@ set -u
 VERSION="1.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+
+# The roots that live OUTSIDE the code tree: this machine's records and the
+# runtime state belong to the home the operator chose at installation, never in
+# the tree — a packaged install replaces its tree on upgrade (Rule 04).
+if [ -z "${YMIR_HOARD_LIB_LOADED:-}" ]; then
+  _yr="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  for _yc in "$_yr/hoard-lib.sh" "$(dirname "$_yr")/bin/hoard-lib.sh"; do
+    [ -r "$_yc" ] && { . "$_yc"; YMIR_HOARD_LIB_LOADED=1; break; }
+  done
+  unset _yr _yc
+fi
+hoard_state_dir YMIR_STATE_DIR
+hoard_data_dir YMIR_DATA_DIR
 YES=0
 
 case "${1-}" in
@@ -77,7 +90,7 @@ is_installed() {  # <id>
 }
 
 repo_for() {  # <id> — read the repo from the registry's own catalog when reachable
-  local id=$1 cache="$ROOT/state/omarchy-catalog.json"
+  local id=$1 cache="$YMIR_STATE_DIR/omarchy-catalog.json"
   if [ -r "$cache" ]; then
     python3 - "$cache" "$id" <<'PY' 2>/dev/null
 import json,sys
@@ -135,7 +148,7 @@ case "$ACTION" in
       printf 'omarchy-plugins[1]{id,state}:\n  "%s","already installed"\n' "$id"; exit 0
     fi
     # Resolve the repo from the registry catalog; refresh it if absent.
-    cache="$ROOT/state/omarchy-catalog.json"
+    cache="$YMIR_STATE_DIR/omarchy-catalog.json"
     if [ ! -r "$cache" ] && have curl; then
       mkdir -p "$(dirname "$cache")"
       curl -fsS --max-time 25 https://plugins.omarchy.org/catalog.json -o "$cache" 2>/dev/null || true

package/bin/omarchy-sense.sh

@@ -21,7 +21,20 @@ set -u
 VERSION="1.0.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-STATE_DIR="${BROKK_STATE_OVERRIDE:-$ROOT/state}"
+
+# The roots that live OUTSIDE the code tree: this machine's records and the
+# runtime state belong to the home the operator chose at installation, never in
+# the tree — a packaged install replaces its tree on upgrade (Rule 04).
+if [ -z "${YMIR_HOARD_LIB_LOADED:-}" ]; then
+  _yr="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  for _yc in "$_yr/hoard-lib.sh" "$(dirname "$_yr")/bin/hoard-lib.sh"; do
+    [ -r "$_yc" ] && { . "$_yc"; YMIR_HOARD_LIB_LOADED=1; break; }
+  done
+  unset _yr _yc
+fi
+hoard_state_dir YMIR_STATE_DIR
+hoard_data_dir YMIR_DATA_DIR
+STATE_DIR="${BROKK_STATE_OVERRIDE:-$YMIR_STATE_DIR}"
 SNAP="$STATE_DIR/omarchy-setup.json"
 
 # Rule 05: this is the OMARCHY layer's sensor, so it is gated on its host. Ymir

package/bin/pi-model-agnostic.sh

@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+# pi-model-agnostic — pi must not EXPECT any model. Local and online are peers.
+#
+# The law (Allfather, 2026-09-17): a seat that answers is used; a seat that does not
+# must not stop pi from starting. pi was failing at launch because providers pointed at
+# local ports with nothing behind them:
+#   [llama-cpp] failed to reach http://localhost:8080/v1/models: fetch failed
+# An unreachable local seat is a SKIP, not an error.
+#
+# This prunes unreachable LOCAL providers from pi's models config, keeping every seat
+# that answers and every online provider untouched.
+#
+#   bin/pi-model-agnostic.sh            # report and prune
+#   bin/pi-model-agnostic.sh --dry-run  # report only
+set -euo pipefail
+
+CFG="${PI_MODELS_JSON:-$HOME/.pi/agent/models.json}"
+DRY=0
+[ "${1:-}" = "--dry-run" ] && DRY=1
+[ -f "$CFG" ] || { printf 'error: no pi models config at %s\nhelp: set PI_MODELS_JSON\n' "$CFG" >&2; exit 1; }
+
+CFG="$CFG" DRY="$DRY" python3 - <<'INNER'
+import json, os, shutil, sys, time, urllib.request
+
+cfg = os.environ["CFG"]
+dry = os.environ.get("DRY") == "1"
+d = json.load(open(cfg))
+providers = d.get("providers", {})
+
+def reachable(url):
+    if not url:
+        return False
+    probe = url.rstrip("/")
+    if not probe.endswith("/v1"):
+        probe += "/v1"
+    try:
+        with urllib.request.urlopen(probe + "/models", timeout=3) as r:
+            return r.status == 200
+    except Exception:
+        return False
+
+kept, dropped = [], []
+for name, prov in providers.items():
+    base = str(prov.get("baseUrl", ""))
+    local = ("127.0.0.1" in base) or ("localhost" in base) or ("0.0.0.0" in base)
+    if local and not reachable(base):
+        dropped.append((name, base))
+    else:
+        kept.append(name)
+
+print("pi_models[%d]{provider,base,verdict}:" % (len(kept) + len(dropped)))
+for n in kept:
+    print('  "%s","%s","kept"' % (n, providers[n].get("baseUrl", "")))
+for n, b in dropped:
+    print('  "%s","%s","unreachable local seat - pruned"' % (n, b))
+
+if dropped and not dry:
+    shutil.copy2(cfg, cfg + ".bak-" + time.strftime("%Y%m%d%H%M%S"))
+    d["providers"] = {k: v for k, v in providers.items() if k in kept}
+    dm = d.get("defaultProvider")
+    if dm and dm not in kept and kept:
+        d["defaultProvider"] = kept[0]
+        ids = (d["providers"][kept[0]].get("models") or [{}])
+        if ids and ids[0].get("id"):
+            d["defaultModel"] = ids[0]["id"]
+        print("  default -> %s / %s" % (d.get("defaultProvider"), d.get("defaultModel")))
+    json.dump(d, open(cfg, "w"), indent=2)
+    print("pi_models: %d pruned, backup beside the config" % len(dropped))
+elif dry:
+    print("pi_models: dry run - nothing written")
+INNER

package/bin/private-guard.sh

@@ -18,6 +18,20 @@ FORBID='^(hodd/|svartalfaheim/|state/|data/|workspace/(work|personal|memory|comp
 # Allowed tracked exceptions inside those roots.
 ALLOW='^(hodd/(README\.md|\.gitignore|AGENTS\.example\.md|[^/]+\.example(\.md)?)$|svartalfaheim/.*(README\.md|\.gitkeep|\.gitignore|\.example(\.md)?)$|state/\.gitkeep$|data/[^/]+\.example$|assets/reference/state/[^/]+\.example$|\.env\.example|\.env\.sample)$'
 
+# Tenant DOCUMENTS — a wiki, policy set, vision, roadmap or strategy file is
+# company/operator knowledge, not a public asset. It belongs at
+# $YMIR_HOME/hodd/identity/companies/<company>/ and nowhere in this repo.
+# Added 2026-09-17 after `midgard/company_wiki/` was found sitting in the
+# public tree: it was an empty placeholder, but the shape invited the leak.
+#
+# The match is deliberately a DIRECTORY or a doc suffixed with tenant content —
+# NOT the bare word. `svartalfaheim/examples/SECRETS.md` is a public how-to (it
+# teaches where secrets go and holds no value), so a bare `secrets` match would
+# be a false positive.
+TENANT_DOC='((^|/)(company_wiki|wiki|policies|handbook|playbook|internal|confidential)(/|\.)|(^|/)(vision|strategy|roadmap|policies)[^/]*\.(md|txt|rst|pdf|docx?)$)'
+# Public exceptions: a wiki-shaped name that is a genuine scaffold or doc.
+TENANT_DOC_ALLOW='(\.example$|\.example\.md$|README\.md$|/\.gitkeep$)'
+
 scan_list() {
   local hit=0 f
   while IFS= read -r f; do
@@ -25,6 +39,12 @@ scan_list() {
     if printf '%s\n' "$f" | grep -Eq "$FORBID" && ! printf '%s\n' "$f" | grep -Eq "$ALLOW"; then
       printf 'private-guard: tracked private path: %s\n' "$f" >&2
       hit=1
+      continue
+    fi
+    if printf '%s\n' "$f" | grep -Eq "$TENANT_DOC" && ! printf '%s\n' "$f" | grep -Eq "$TENANT_DOC_ALLOW"; then
+      printf 'private-guard: tenant/company document in the public tree: %s\n' "$f" >&2
+      printf '  company knowledge belongs at $YMIR_HOME/hodd/identity/companies/, never here\n' >&2
+      hit=1
     fi
   done
   return "$hit"

package/bin/project-git.sh

@@ -4,12 +4,12 @@
 # remote. Auth is a REFERENCE (app|pat|ssh|gh), never a value.
 #
 # Usage:
-#   project-git.sh <project-id> [--field host|owner|repo|remote|default_branch|auth]
+#   project-git.sh <project-id> [--field host|owner|repo|remote|default_branch|auth|machine]
 #   project-git.sh list
 #   project-git.sh --version
 set -u
 
-VERSION="1.0.0"
+VERSION="1.2.0"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
 # shellcheck source=bin/hoard-lib.sh
@@ -26,6 +26,14 @@ while [ $# -gt 0 ]; do case "$1" in --field) FIELD=${2-}; shift 2 ;; *) shift ;;
 
 if [ "$ID" = "list" ]; then
   n=$(grep -cE '^\s*-\s+id:' "$REG" 2>/dev/null || echo 0)
+  if [ "$FIELD" = "about" ]; then
+    printf 'projects[%s]{id,about}:\n' "$n"
+    awk '
+      /^[[:space:]]*-[[:space:]]+id:/ { sub(/^[[:space:]]*-[[:space:]]+id:[[:space:]]*/, ""); id=$0 }
+      /^[[:space:]]*about:/ { sub(/^[[:space:]]*about:[[:space:]]*"/, ""); sub(/"[[:space:]]*$/, ""); if (id != "") printf "  \"%s\",\"%s\"\n", id, $0 }
+    ' "$REG"
+    exit 0
+  fi
   printf 'projects[%s]{id}:\n' "$n"
   grep -E '^\s*-\s+id:' "$REG" | sed -E 's/^\s*-\s+id:\s*/  "/; s/\s*$/" /'
   exit 0
@@ -41,15 +49,21 @@ block="$(awk -v id="$ID" '
 
 gitline="$(printf '%s\n' "$block" | grep -m1 'git:')"
 val() { printf '%s' "$gitline" | sed -nE "s/.*[ {,]?$1:[[:space:]]*([^,}]+).*/\1/p" | tr -d ' '; }
+# non-git top-level keys resolve from the block itself, not the git line
+blockval() { printf '%s' "$block" | sed -nE "s/^[[:space:]]*$1:[[:space:]]*([^,}]+).*/\1/p" | head -1 | tr -d ' '; }
 
 host="$(val host)"; owner="$(val owner)"; repo="$(val repo)"; remote="$(val remote)"; br="$(val default_branch)"; auth="$(val auth)"
+machine="$(blockval machine)"; company="$(blockval company)"; workspace="$(blockval workspace)"
+about="$(printf '%s' "$block" | sed -nE 's/^[[:space:]]*about:[[:space:]]*"(.*)"[[:space:]]*$/\1/p' | head -1)"
 if [ -n "$FIELD" ]; then
   case "$FIELD" in
     host) printf '%s\n' "$host" ;; owner) printf '%s\n' "$owner" ;; repo) printf '%s\n' "$repo" ;;
     remote) printf '%s\n' "$remote" ;; default_branch) printf '%s\n' "$br" ;; auth) printf '%s\n' "$auth" ;;
+    machine) printf '%s\n' "$machine" ;; company) printf '%s\n' "$company" ;; workspace) printf '%s\n' "$workspace" ;;
+    about) printf '%s\n' "$about" ;;
     *) printf 'error: unknown field %s\n' "$FIELD" >&2; exit 2 ;;
   esac
   exit 0
 fi
-printf 'project[1]{id,host,owner,repo,remote,default_branch,auth}:\n'
-printf '  "%s","%s","%s","%s","%s","%s","%s"\n' "$ID" "$host" "$owner" "$repo" "$remote" "$br" "$auth"
+printf 'project[1]{id,host,owner,repo,remote,default_branch,auth,machine,company,workspace}:\n'
+printf '  "%s","%s","%s","%s","%s","%s","%s","%s","%s","%s"\n' "$ID" "$host" "$owner" "$repo" "$remote" "$br" "$auth" "$machine" "$company" "$workspace"