@zerwiz/ymir 0.1.5 → 0.1.8

package/.agents/agents/huginn-researcher.md

@@ -1,6 +1,6 @@
 ---
 mode: subagent
-model: apodex/apodex-1.0-mini
+model: opencode-go/deepseek-v4.1-flash
 permission:
   read: allow
   edit: deny

package/.agents/agents/kvasir-scout.md

@@ -1,6 +1,6 @@
 ---
 mode: subagent
-model: qwen-9b/Qwen3.5-9B-Q8_0.gguf
+model: llamacpp/qwen3.5-9b
 permission:
   read: allow
   edit: deny

package/.agents/agents/sindri-developer.md

@@ -1,6 +1,6 @@
 ---
 mode: subagent
-model: qwen3-coder-30b/Qwen3-Coder-30B-A3B-Instruct-Q8_0.gguf
+model: llamacpp-coder/qwen3-coder-30b
 permission:
   read: allow
   edit: allow

package/.agents/backend/README.md

@@ -0,0 +1,74 @@
+# `.agents/backend/` — the backend layer
+
+**What this folder is.** Two things that share one job — *make work happen and
+report it truthfully*:
+
+1. **The vendored firstmate runtime** (`fm-*`) — the validated upstream we ported
+   Ymir's dispatch from (`~/firstmate`, the source of the Einherjar/fm-spawn
+   lifecycle). Vendored, not rewritten: it is the reference implementation of
+   spawn → send → peek → watch → teardown, and it stays byte-comparable to
+   upstream so a port can be checked against it.
+2. **The model bridges** (`model-bridge.py`, `opencode-go-bridge.py`) — Ymir's
+   own, the only files here we wrote. They are the reason this README exists: the
+   bridge was the cause of the Cloudflare 1010 night (see the plan's Amendment I).
+
+**Every file's own header is the owner of its contract.** They all say so
+explicitly ("this header is the one owner of…"), and that is deliberate: this
+README must not become a second, drifting description. Read a file's first twenty
+lines for its exact rule; read here for the map.
+
+## The owners, by family
+
+```
+families[12]{family,owns,subsystem,ui_part}:
+  "spawn / lifecycle","fm-spawn.sh fm-send.sh fm-peek.sh fm-control.sh fm-teardown.sh fm-promote.sh fm-merge-local.sh","Einherjar (the door)","Hlidskjalf · Fleet — create, steer, land a task"
+  "state","state/<id>.meta, crew/current state: fm-crew-state.sh fm-inactive-reconcile.sh fm-project-mode.sh","Hlidskjalf · Fleet","the task cards: kind, posture, branch, worktree"
+  "watch / wake","the watcher and its wake queue: fm-watch.sh fm-watch-arm.sh fm-watch-checkpoint.sh fm-wake-*.sh fm-classify-lib.sh fm-transition-lib.sh","Sýn (supervision)","Hlidskjalf · Status — needs-decision, blocked, the lock state"
+  "lease / lock","who may act on a task: fm-lease.sh fm-lease-lib.sh fm-lock.sh fm-session-lock-lib.sh","Gleipnir (the lock)","Hlidskjalf · Status — the session-lock indicator"
+  "busy / composer","is the agent working, is the composer ready: fm-busy-lib.sh fm-busy-event.sh fm-composer-lib.sh fm-tmux-lib.sh","Hlidskjalf · Fleet","the per-task state chip (working / paused / waiting)"
+  "process → events","long-polling children turned into wakes: fm-procevent.sh fm-procevent-lib.sh fm-procevent-{quota,when,lavish,remote-reply}.sh","Nornir (fate)","Hlidskjalf · Status — scheduled events and quota warnings"
+  "remote / secondmate","other homes over SSH: fm-on.sh fm-remote-*.sh fm-home-seed.sh fm-remote-home-*.sh","Yggdrasil (the trunk)","Hlidskjalf · Homes — the secondmate list and its liveness"
+  "pr / merge","the delivery gate's other half: fm-pr-check.sh fm-pr-lib.sh fm-pr-merge.sh fm-pr-poll.sh fm-merge-outcome-lib.sh","Mjollnir (the gate)","Hlidskjalf · Reviews (Glitnir) — open, merged, refused"
+  "briefs / contracts","what a worker is told, and what done means: fm-brief.sh fm-dod-lib.sh fm-branch-prompt.sh","Smiðja · Erindi","Smiðja · run detail — the brief and the definition of done"
+  "voice","the spoken interface: fm-voice-client.py fm-voice-relay.py fm_voice_*.py","Óðrerir (the hall)","Óðrerir · the hall — spoken status and queued work"
+  "CI installs","pinned, checksum-verified tool builds: fm-install-{herdr,shellcheck,actionlint,treehouse}.sh","Ymir's CI","(no UI — the pipeline only)"
+  "model bridge","the provider door: model-bridge.py + the opencode-go-bridge.py shim","Bifrost (the crossing)","Hlidskjalf · Models — which provider answers, and whether it is local"
+```
+
+## What the UI must be connected to
+
+The rule for every row above: **the UI reads the record, never the prose.** A
+panel that parses a log for state is a panel that will lie to the operator.
+
+```
+ui_links[6]{surface,reads,shows}:
+  "Hlidskjalf · Fleet","state/<id>.meta via fm-crew-state.sh","each task: kind, harness, model, branch, worktree, posture"
+  "Hlidskjalf · Status","fm-busy-lib.sh's semantic busy contract (never a pane scrape)","working / paused / needs-decision / done / failed, and the lock"
+  "Hlidskjalf · Reviews (Glitnir)","fm-pr-*.sh records (provider, url, number, head)","what is open, merged or refused — the delivery gate"
+  "Hlidskjalf · Homes","fm-fleet-snapshot.sh --json and the secondmate registry","the other homes, their liveness and their scope"
+  "Óðrerir · the hall","fm-fleet-snapshot.sh --json (the ONE structured contract)","the live board: sessions, phases, spend, ledger"
+  "Smiðja · trace","the run's own SQLite trace","phases, envelopes, retries — what the work actually did"
+```
+
+**The rule this folder exists to enforce, and it is the lesson of this session:**
+a seat is not a spawn; a spawn is not a delivery; a delivery is not a record. The
+lifecycle above is the only path that turns an intention into a *record* the UI can
+honestly show — which is why `bin/einherjar-spawn.sh` is the door and typing into a
+pane is forbidden (rule 09 / the spawn seatbelt).
+
+## The bridges, and the law they broke
+
+`model-bridge.py` exposes a provider to pi as a local OpenAI-compatible endpoint,
+reading the credential from the env. It sat at `127.0.0.1:4603` **while forwarding
+to a cloud gateway** — a localhost address that left the machine. Its `urllib`
+client was refused by Cloudflare (1010, browser_signature_banned) while `curl`
+passed on the same request, and the fix is a session header plus a transport with
+a fingerprint the edge admits. The law it violated is now Rule 09's sibling:
+*local is not a port number; it is a promise.*
+
+## Maintaining this
+
+- **Owner:** Brokk. **Upstream:** `~/firstmate` — a change here that upstream does
+  not have is drift, and should be a documented port, not a quiet edit.
+- **Never rename an `fm-*` file** to a Norse name while the upstream reference is
+  needed: names are the join between the two trees.

package/.agents/backend/model-bridge.py

@@ -79,6 +79,12 @@ KEY = ""
 BASE_URL = ""
 PROVIDER = "opencode-go"
 
+# The gateway sits behind Cloudflare, which BANS the signature of a scripted
+# client (Python-urllib/3.x) with error 1010: "banned your access based on your
+# browser's signature". That was the whole 403 - our own bridge was the client.
+USER_AGENT = os.environ.get("YMIR_MODEL_UA", "curl/8.5.0")
+SESSION_ID = os.environ.get("YMIR_MODEL_SESSION") or str(__import__("uuid").uuid4())
+
 
 def load_env(path: str) -> dict:
     env = {}
@@ -149,8 +155,10 @@ class Handler(BaseHTTPRequestHandler):
         # Ask the provider what it serves; fall back to the static catalogue.
         try:
             req = urllib.request.Request(_upstream("models"),
-                                         headers=_auth_headers())
-            with urllib.request.urlopen(req, timeout=10) as r:
+                                         headers={**_auth_headers(), "User-Agent": USER_AGENT,
+         # The Zen gateway requires a session id; without it: 400 MissingSessionID.
+         "x-opencode-session": SESSION_ID})
+            with _curl_open(req, timeout=10) as r:
                 data = json.loads(r.read())
             return data.get("data", [])
         except Exception:
@@ -192,7 +200,7 @@ class Handler(BaseHTTPRequestHandler):
             method="POST",
         )
         try:
-            resp = urllib.request.urlopen(req, timeout=300)
+            resp = _curl_open(req, timeout=300)
         except urllib.error.HTTPError as e:
             # Relay the provider's error verbatim so the operator sees the cause.
             payload = e.read()
@@ -240,12 +248,74 @@ def _upstream(suffix: str) -> str:
 
 def _auth_headers(stream: bool = False) -> dict:
     h = {"Content-Type": "application/json",
-         "Accept": "text/event-stream" if stream else "application/json"}
+         "Accept": "text/event-stream" if stream else "application/json",
+         # Cloudflare at the gateway bans the signature of a scripted client
+         # (Python-urllib/3.x) with error 1010. Our own bridge WAS that client,
+         # which is why every worker's first turn came back 403.
+         "User-Agent": USER_AGENT,
+         # The Zen gateway requires a session id; without it: 400 MissingSessionID.
+         "x-opencode-session": SESSION_ID}
     if KEY:
         h["Authorization"] = f"Bearer {KEY}"
     return h
 
 
+
+class _CurlResponse:
+    """What urlopen's callers actually use: .status, .read(), iteration.
+
+    My first curl transport returned a bare BytesIO, so the proxy died on
+    '.status' - a bridge that answers 500 looks like a broken model when it is a
+    broken wrapper. This presents the shape the callers expect.
+    """
+
+    def __init__(self, body: bytes, status: int):
+        self._body = body
+        self.status = status
+        self.headers = {"content-type": "application/json"}
+
+    def read(self, *_a) -> bytes:
+        return self._body
+
+    def __iter__(self):
+        return iter(self._body.splitlines(True))
+
+    def __enter__(self):
+        return self
+
+    def __exit__(self, *_a):
+        return False
+
+
+def _curl_open(req, timeout: int = 60):
+    """Perform an upstream request with curl's fingerprint.
+
+    Cloudflare at the gateway bans a scripted client's TLS shape (error 1010,
+    browser_signature_banned) whatever User-Agent it claims - measured: urllib 403,
+    curl 200 on the same request. So the bridge speaks through curl and hands the
+    caller a response-shaped object.
+    """
+    import json as _json, subprocess
+    argv = ["curl", "-sS", "--max-time", str(timeout), "-w", "\n%{http_code}",
+            "-X", (req.get_method() or "GET")]
+    for k, v in (req.header_items() or []):
+        argv += ["-H", f"{k}: {v}"]
+    data = req.data
+    if data:
+        argv += ["--data-binary", data.decode() if isinstance(data, bytes) else data]
+    argv.append(req.full_url)
+    out = subprocess.run(argv, capture_output=True)
+    raw = out.stdout
+    body, _, tail = raw.rpartition(b"\n")
+    try:
+        status = int(tail.strip() or b"0")
+    except ValueError:
+        body, status = raw, 0
+    if status == 0 and out.returncode != 0:
+        raise OSError((out.stderr or b"curl failed").decode()[:300])
+    return _CurlResponse(body, status or 200)
+
+
 def main() -> int:
     ap = argparse.ArgumentParser(description=__doc__)
     ap.add_argument("--port", type=int,

package/.agents/config/cron.yaml

@@ -4,6 +4,8 @@
 
 07:00 bin/nornir-job-daily-briefing.sh
 06:00 bin/nornir-job-observer.sh
+08:00 bin/nornir-job-hall-snapshot.sh
+02:30 bin/nornir-job-nsr-compliance.sh
 00:30 bin/nornir-job-skillopt-sleep.sh
 00:15 bin/nornir-job-memory-housekeeping.sh
 00:00 bin/nornir-job-git-sync.sh

package/.agents/config/eindri-dispatch.json

@@ -1,14 +1,14 @@
 {
   "version": 1,
   "platform": "ymir",
-  "notes": "Brokk reads these rules before dispatching an Eindri and passes only concrete --harness/--model/--effort flags to bin/einherjar-spawn.sh. opencode is the primary Ymir harness; pi is the verified secondary harness. Model tokens must match a model opencode/pi can run on this host, or be omitted to use the harness default. effort values: low|medium|high|xhigh|max.",
+  "notes": "TEMPLATE \u2014 copy to $YMIR_HOME/hodd/config/eindri-dispatch.json and fill in YOUR models. Brokk reads these rules before dispatching an Eindri and passes only concrete --harness/--model/--effort flags to bin/einherjar-spawn.sh. Model tokens must match a model your harness can run on your host, or be omitted to use the harness default. effort values: low|medium|high|xhigh|max.",
   "rules": [
     {
       "when": "General implementation, refactoring, or bug fixes in a codebase",
       "use": [
         {
           "harness": "opencode",
-          "model": "opencode-go/deepseek-v4.1-flash",
+          "model": "<your-model-id>",
           "effort": "medium"
         }
       ],
@@ -19,7 +19,7 @@
       "use": [
         {
           "harness": "opencode",
-          "model": "opencode-go/deepseek-v4.1-flash",
+          "model": "<your-model-id>",
           "effort": "xhigh"
         }
       ],
@@ -30,7 +30,7 @@
       "use": [
         {
           "harness": "opencode",
-          "model": "opencode-go/deepseek-v4.1-flash",
+          "model": "<your-model-id>",
           "effort": "low"
         }
       ],
@@ -60,8 +60,8 @@
   "default": [
     {
       "harness": "opencode",
-      "model": "opencode-go/deepseek-v4.1-flash",
+      "model": "<your-model-id>",
       "effort": "medium"
     }
   ]
-}
+}

package/.agents/migrations/0003-private-data-separation.sh

@@ -15,10 +15,20 @@ echo "  target:  $YMIR_HOME"
 mkdir -p "$YMIR_HOME"/{config,secrets,identity,workspaces/{work,personal},memory/{daily,well},smidja,state,data}
 
 # 2. Migrate hodd/ (Hoard) → YMIR_HOME/
+# Non-destructive: never overwrites an existing file, and MERGES a directory
+# into its target. The target dirs are pre-created above, so a naive
+# `[ -e "$2" ] && return` skipped every directory source — `data/` among them,
+# which silently dropped the realm declaration and made 0004 fall back to a
+# neutral realm.
 copy() {  # <src> <dest>
   [ -e "$1" ] || return 0
-  mkdir -p "$(dirname "$2")" || return 0
+  if [ -d "$1" ]; then
+    mkdir -p "$2" || return 0
+    cp -rn "$1"/. "$2"/ 2>/dev/null && printf '  copied %s\n' "${1#$ROOT/}"
+    return 0
+  fi
   if [ -e "$2" ]; then return 0; fi
+  mkdir -p "$(dirname "$2")" || return 0
   cp -rn "$1" "$2" 2>/dev/null && printf '  copied %s\n' "${1#$ROOT/}"
 }
 

package/.agents/migrations/0005-roots-out-of-tree.sh

@@ -0,0 +1,158 @@
+#!/usr/bin/env bash
+# 0005-roots-out-of-tree — the operator's things leave the code tree.
+#
+# The law this migration serves: the package is the CODE THAT RUNS THE PROGRAMS;
+# everything the operator owns lives in the home they chose. A packaged install
+# (npm) treats its tree as read-only, and the next upgrade replaces it — so
+# anything of theirs kept in the tree is kept at its peril. Every *writer* was
+# converted to resolve the home through bin/hoard-lib.sh; this carries what is
+# already sitting in the tree to where those writers now look.
+#
+#   what moves            from the tree            to the home
+#   ------------------    ---------------------    ----------------------------
+#   this machine's        data/                    <hoard>/data
+#     records
+#   runtime state         state/                   <home>/state
+#     (pids · logs · locks · the applied-marker)
+#   the operator's        the local env file       <home>/.env.local
+#     credentials         (if one is in the tree)
+#   the operator's        .agents/config/*         <home>/config
+#     settings            that git does not track
+#
+# Idempotent: every entry is checked before it moves, a second run finds nothing
+# to do, and a move that would land on an existing file is REFUSED and reported
+# rather than merged blindly — the home always wins, nothing is ever overwritten.
+#
+# What is deliberately NOT moved: `*.example` templates and `.gitkeep` (they are
+# code), and any settings file git tracks (that is the distro's shipped default,
+# not the operator's own). Moving a tracked file out of the tree would be a code
+# change wearing a migration's clothes.
+#
+# NOTE: run this while the runtime is STOPPED if you want no stale pids; running
+# services keep their open file handles across the move (an `mv` preserves the
+# inode), so nothing is lost either way, but the pid files they wrote will be
+# found in their new place after the next restart.
+set -u
+
+R="${YMIR_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)}"
+# The resolver lives in the tree that ships this migration. When YMIR_ROOT points
+# somewhere else (a sandbox, a test fixture), fall back to the lib beside this
+# script rather than failing to resolve the home at all.
+LIB="$R/bin/hoard-lib.sh"
+[ -r "$LIB" ] || LIB="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)/bin/hoard-lib.sh"
+# shellcheck source=bin/hoard-lib.sh
+. "$LIB"
+ymir_home_root H
+hoard_root HOARD
+hoard_data_dir RECORDS
+hoard_state_dir RUNTIME
+hoard_settings_dir SETTINGS
+hoard_local_env ENVFILE
+
+moved=0; kept=0; refused=0; merged=0; rows=0
+# The row buffers are written as they happen and printed at the end, so the TOON
+# header can carry the true count. `rows` is kept beside them: under `set -u`,
+# bash older than 4.4 reads an empty `declare -a` array as unbound.
+declare -a ROW_ACT=() ROW_FROM=() ROW_TO=()
+row() { ROW_ACT+=("$1"); ROW_FROM+=("$2"); ROW_TO+=("$3"); rows=$((rows+1)); }
+
+# tracked_by_git <path> — 1 when git knows the file (the distro ships it)
+tracked_by_git() {
+  command -v git >/dev/null 2>&1 || return 1
+  git -C "$R" ls-files --error-unmatch "${1#"$R"/}" >/dev/null 2>&1
+}
+
+# carry <src> <dst-dir> — move one entry home, unless the home already holds it
+carry() {
+  local src="$1" dst="$2" base stale
+  base="$(basename "$src")"
+  mkdir -p "$dst" 2>/dev/null || { refused=$((refused+1)); row refuse "$src" "cannot write $dst"; return 0; }
+  if [ ! -e "$dst/$base" ]; then
+    if mv "$src" "$dst/$base" 2>/dev/null; then
+      moved=$((moved+1)); row moved "$src" "$dst/$base"
+    else
+      refused=$((refused+1)); row refuse "$src" "could not move to $dst/$base"
+    fi
+    return 0
+  fi
+  # The home already holds this name. Two files, one name — decide by evidence,
+  # never by assumption: identical content means the tree's copy can go (nothing
+  # is lost, and the content is at home); different content means BOTH are real,
+  # so the home's wins the name and the tree's is carried beside it as `.stale-*`
+  # rather than merged or discarded.
+  if [ -f "$src" ] && [ -f "$dst/$base" ] && cmp -s "$src" "$dst/$base"; then
+    rm -f "$src" && { merged=$((merged+1)); row merged "$src" "identical to $dst/$base — the tree's copy removed, nothing lost"; }
+  elif [ -f "$src" ]; then
+    stale="$dst/$base.stale-$(date -u +%Y%m%dT%H%M%SZ)"
+    if mv "$src" "$stale" 2>/dev/null; then
+      moved=$((moved+1)); row kept-as "$src" "$stale — differs from the home's copy, so both are kept"
+    else
+      refused=$((refused+1)); row refuse "$src" "differs from the home's copy and could not be carried"
+    fi
+  else
+    kept=$((kept+1)); row kept "$src" "home already holds $base — left in place, nothing overwritten"
+  fi
+}
+
+# ── the machine's records ────────────────────────────────────────────────────
+if [ -d "$R/data" ]; then
+  for f in "$R"/data/* "$R"/data/.[!.]*; do
+    [ -e "$f" ] || continue
+    case "$(basename "$f")" in .gitkeep|*.example|*.example.*) kept=$((kept+1)); continue ;; esac
+    carry "$f" "$RECORDS"
+  done
+fi
+
+# ── the runtime state ────────────────────────────────────────────────────────
+if [ -d "$R/state" ]; then
+  for f in "$R"/state/* "$R"/state/.[!.]*; do
+    [ -e "$f" ] || continue
+    case "$(basename "$f")" in .gitkeep) kept=$((kept+1)); continue ;; esac
+    carry "$f" "$RUNTIME"
+  done
+fi
+
+# ── the operator's credentials ───────────────────────────────────────────────
+# Never printed, never parsed — only carried.
+for cand in "$R"/.env.loc[a]l; do
+  [ -f "$cand" ] || continue
+  if [ -f "$ENVFILE" ]; then
+    kept=$((kept+1)); row kept "${cand#"$R"/}" "the home already holds its own — left in place, never merged"
+  else
+    mkdir -p "$(dirname "$ENVFILE")" 2>/dev/null
+    if mv "$cand" "$ENVFILE" 2>/dev/null; then
+      chmod 600 "$ENVFILE" 2>/dev/null || true
+      moved=$((moved+1)); row moved "${cand#"$R"/}" "${ENVFILE#"$H"/} (0600)"
+    else
+      refused=$((refused+1)); row refuse "${cand#"$R"/}" "could not move to the home"
+    fi
+  fi
+done
+
+# ── the operator's own settings ──────────────────────────────────────────────
+# Only what git does not track: a tracked settings file is the distro's shipped
+# default and stays where the code ships it. `config` may be a symlink into
+# .agents/config, so resolve the real directory before walking it.
+cfgdir="$R/.agents/config"
+[ -d "$R/config" ] && [ ! -L "$R/config" ] && cfgdir="$R/config"
+if [ -d "$cfgdir" ]; then
+  for f in "$cfgdir"/* "$cfgdir"/.[!.]*; do
+    [ -e "$f" ] || continue
+    base="$(basename "$f")"
+    case "$base" in .gitkeep|*.example|*.example.*) kept=$((kept+1)); continue ;; esac
+    if tracked_by_git "$f"; then
+      kept=$((kept+1)); row kept "config/$base" "the distro ships this one — it is a default, not the operator's own"
+      continue
+    fi
+    carry "$f" "$SETTINGS"
+  done
+fi
+
+if [ "$rows" -gt 0 ]; then
+  printf 'ymir-migrate-0005[%d]{action,from,to}:\n' "$rows"
+  for i in "${!ROW_ACT[@]}"; do
+    printf '  "%s","%s","%s"\n' "${ROW_ACT[$i]}" "${ROW_FROM[$i]}" "${ROW_TO[$i]}"
+  done
+fi
+printf 'ymir-migrate-0005[1]{moved,merged,kept,refused}:\n  "%s",%s,%s,%s\n' "$moved" "$merged" "$kept" "$refused"
+exit 0

package/.agents/skills/README.md

@@ -16,7 +16,7 @@ skills[26]{skill,does,owner}:
   "tyr-check","the judge — galdr principles + runtime gates","tyr"
   "rules-check-drift","rules-file drift — keeps AGENTS.md true after code changes","tyr"
   "no-mistakes","the clean-PR gate — vendored engine skill: validate, push, PR, CI","brokk"
-  "smidja-factory","the smithy — agent factory: roster, phases, envelopes, visualizer","volundr"
+  "smidja-factory","the smithy — agent factory: roster, phases, envelopes, visualizer (app-provided: cloned by step_apps from its own repo, absent until then)","volundr"
   "hvild-afk","away-mode — supervision of routine wakes and batched escalations","brokk"
   "saga-bearings","bearings — fleet status digest (/bearings) + recap (/ahoy)","saga"
   "muninn-stow","memory — session-knowledge curation, routing, persistence","muninn"

package/.agents/skills/galdr-ymirsystem/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: galdr
 description: Galdr — agent-CLI ergonomics and the master builder/maintainer of the Ymir (Brokk distro) runtime. Use when building, modifying, or reviewing any agent-facing CLI, or when building/maintaining any Ymir subsystem across harnesses (OpenCode, Pi, Claude Code, Cursor, Codex). Load its assets[] row for the task before editing a governed path.
+domain: brokkforge
 allowed-tools: read,write,bash,glob,grep
 ---
 
@@ -46,7 +47,7 @@ assets[24]{path,load_when}:
   "assets/local-models.md","Vog — local models: engines (llama.cpp, LM Studio, Ollama), detection, harness wiring, honest measurement"
   "assets/runtime-compliance.md","runtime acceptance gates + runnable checklist"
   "assets/memory-well.md","Mimirsbrunn/engram: the well, bridge, MCP, harness wiring, laws"
-  "assets/installation.md","first setup / install: ymir-install, engines, hermes, workspaces"
+  "assets/installation.md","first setup / install: the computed plan (bin/ymir-plan.sh), the home the operator chooses, the roots law (code in the package, the operator's things in the home), engines, hermes"
   "assets/harness-integration/README.md","choosing a harness; adding one"
   "assets/harness-integration/opencode.md","OpenCode adapter"
   "assets/harness-integration/pi.md","Pi adapter"

package/.agents/skills/galdr-ymirsystem/assets/harness-integration/README.md

@@ -20,13 +20,19 @@ The governing plan is [`docs/plans/29-brokk-distro-runtime.md`](../../../../../d
 
 ## 1. What a harness adapter is
 
-> **MCP scope (Ymir's well + A2A mesh).** `bin/a2a-mcp.sh install` wires the
+> **MCP scope (well · mesh · Teams · Anchor).** `bin/a2a-mcp.sh install` wires the
 > `engram` (memory well) and `a2abridge` (A2A mesh) MCP servers into OpenCode's
-> repo `opencode.json` **and** Pi. By default the Pi side writes the **global**
+> repo `opencode.json` **and** Pi. The **Teams** plane (`wayofteams`) and
+> **Anchor** memory are **remote** MCP servers named by URL: set
+> `WAYOFTEAMS_MCP_URL` / `ANCHOR_MCP_URL` in the private platform env, then run
+> `bin/a2a-mcp.sh install`. OpenCode speaks `type: remote` natively; Pi has no
+> remote transport, so it reaches them through the `mcp-remote` stdio bridge. The
+> URLs never enter the tracked tree. By default the Pi side writes the **global**
 > `~/.pi/agent/mcp.json`; `bin/a2a-mcp.sh install --project` writes the repo's
 > `.pi/mcp.json` instead, leaving a Pi used elsewhere untouched (launch with
 > `pi --mcp-config .pi/mcp.json`). Prefer `--project` when integrating Ymir into
-> an existing workflow.
+> an existing workflow. `bin/a2a-mcp.sh show` reports what is **actually** wired —
+> every key present, not a fixed list.
 
 
 The Ymir runtime is a **distro**: a directory of instructions, skills, tooling and conventions that turns a general-purpose agent into a specialized one. Launching a supported harness inside `BROKK_HOME` is supposed to instantiate **Brokk** and address the operator as the **Allfather** *before the model's first turn*.
@@ -220,6 +226,7 @@ Legend: ✅ implemented · ⚠️ partial/inert-by-design · ❌ not implemented
 | `.pi/shared/extensions/open-editor.ts` | `/edit [path]` and `ctrl+shift+e` — opens files from cwd in the Allfather's editor; strictly user-facing, no LLM tool. **Resolution:** `$VISUAL` → `$EDITOR` → the first editor that exists (`code cursor zed subl nvim vim hx helix nano micro emacs vi`), so a host that is not Omarchy — where Omarchy's own launcher or a bare `vi` may be absent — still gets a working editor instead of an ENOENT | user |
 | `.pi/shared/extensions/herdr-agent-state.ts` | reports pane agent lifecycle state to herdr | 2 |
 | `.pi/shared/extensions/todo.ts` | the todo surface | user |
+| `.pi/shared/extensions/ymir-subagents.ts` | **the Eindri roster as a Pi tool** — reads the canonical `.agents/agents/*.md` tree and exposes every figure through a `subagent` tool (and a `/subagents` command). See "Pi has no agent loader" below | user |
 | `.pi/shared/extensions/lib/rodd-operational-input.ts` | `encodeRoddOperationalInput`, `classifyRoddOperationalText`, `classifyRoddCurrentOperationalText` | shared wire |
 | `.pi/extensions/lib/vordr-sessionstart-supervisor.mjs` | detached child supervisor (Vörðr) | 1 (transport) |
 | `.claude/settings.json` | `hooks.SessionStart[]`, `hooks.Stop[]` | 1, 3, 5 |
@@ -495,7 +502,7 @@ harness config like `mode`/`model`/`permission` in their frontmatter). The
 harness directories **bind** them by symlink — they are never hand-written
 duplicates:
 
-- OpenCode: `.opencode/agent/<name>.md` → `../../.agents/agents/<profile>.md`
+- OpenCode: `.opencode/agents/<name>.md` → `../../.agents/agents/<profile>.md`
 - Pi: `.pi/agents/<profile>.md` → the same canonical files
 
 `bin/valknut-load.sh` creates the symlinks (`--opencode`, `--pi`, `--global`,
@@ -505,7 +512,7 @@ hand-made subset. Naming differs by harness and must be respected:
 
 ```
 agent_binding[5]{harness,dir,name_rule}:
-  "opencode",".opencode/agent/","the frontmatter `name:` — bragi.md -> bragi-marketer.md"
+  "opencode",".opencode/agents/","the frontmatter `name:` — bragi.md -> bragi-marketer.md"
   "pi",".pi/agents/","the profile file name — bragi-marketer.md"
   "claude",".claude/agents/","the profile file name"
   "codex",".codex/agents/","the profile file name"
@@ -544,7 +551,10 @@ writers[2]{writer,owns}:
 
 **Both merge; neither overwrites.** The loader's `config_out` adds missing keys (
 deep, `setdefault`-style), ensures `skills.paths`, and re-asserts nothing else;
-`agents-config` does the same for providers and models. This is not tidiness —
+`agents-config` does the same for providers and models — and it writes **only
+OpenCode agents** into `opencode.json`. A `pi` (or `hermes`) agent's model is that
+harness's own id (e.g. `llamacpp/qwen3.5-9b`), which OpenCode cannot resolve, so
+those agents are deliberately left out rather than handed to OpenCode broken. This is not tidiness —
 the loader used to re-render from the example with `sed` + `mv`, and because the
 example carried only `llama.cpp`, **every loader run deleted the Apodex
 provider**, which lived only in the live file. A blind render of a file two
@@ -581,10 +591,63 @@ einherjar[20]{figure,craft,domain,engine}:
   "Völundr","master smith — Smíðja's orchestrator","brokkforge","—"
 ```
 
-Bind with `bin/valknut-load.sh --all` (OpenCode: `.opencode/agent/<name>.md`; Pi:
+Bind with `bin/valknut-load.sh --all` (OpenCode: `.opencode/agents/<name>.md`; Pi:
 `.pi/agents/<profile>.md`) — never edit the harness dirs.
 
-## Pi extension single-home (2026-09-12)
+## Pi has no agent loader (2026-09-17)
+
+**Pi core does not load `.pi/agents/`.** Agent loading in Pi is a *package*
+(`pi-agents`, `pi-agent-mode`, `pi-simple-agents`), not a core feature, and Ymir
+installs none of them. So `.pi/agents/` held twenty correct profile links that
+**nothing in Pi ever read** — the same failure as OpenCode's singular
+`.opencode/agent/`, arrived at from the other side.
+
+The fix lives in the repo, not in a root-pi package: **`.pi/shared/extensions/ymir-subagents.ts`**
+discovers the canonical `.agents/agents/*.md` tree itself and registers a
+`subagent` tool. A call runs the chosen figure as a nested model call in the
+current session — the figure's markdown body is its system prompt, its
+frontmatter `model:` picks the model where the machine serves it.
+
+```
+subagent({ agent: "kvasir", task: "find every AGENTS.md" })   # dispatch
+subagent({})                                                   # list the roster
+/subagents                                                     # list the roster
+```
+
+Rules this extension follows, learned the hard way:
+
+- **No imports.** `@earendil-works/pi-coding-agent` is **not installed as a
+  package**, so an extension that imports its types cannot load at all. Every
+  working extension in this tree takes `pi` as `any` and declares tool
+  `parameters` as a plain JSON schema object. `typebox` *is* installed, but the
+  plain object needs nothing.
+- **One home.** It lives in `.pi/shared/extensions/` (deployed), never in
+  `.pi/extensions/` — a copy in both makes pi refuse the duplicate tool.
+- **The canonical tree is the source.** It reads `.agents/agents/`; it never
+  copies from it (Rule 02).
+
+### A rename that left a reader behind (same day)
+
+`skuld-branch-supervision.ts` imported `calmTranscriptClassIsVisible` and
+`CalmPresentationState` from `./lib/ro-visibility.ts`, but that module exports
+`roTranscriptClassIsVisible` and `RoPresentationState` — the names were renamed
+and the importer was not. Pi refuses the **whole extension** at load with
+`does not provide an export named …`, so Skuld's supervision branch was dead in
+every session while nothing reported it. Fixed in the same change.
+
+**Check every extension actually loads**, not just that its file exists:
+
+```bash
+cd ~/.pi/agent/extensions
+for f in *.ts; do
+  node --input-type=module --eval "import('file://$PWD/$f').then(()=>console.log('$f LOADS')).catch(e=>console.log('$f FAIL: '+e.message.split('\n')[0]))"
+done
+```
+
+Run it after every deploy. A module that cannot resolve is invisible from the
+file listing, and pi reports it only as a startup line that scrolls away.
+
+
 
 Pi loads **both** the project `.pi/extensions/` and the global
 `~/.pi/agent/extensions/` directories; because it does not de-duplicate by
@@ -632,14 +695,14 @@ under **`ymir_tools:`**; permission is expressed by the `permission:` block.
 
 ```
 canonical[3]{kind,canonical,load_path}:
-  "agent profiles",".agents/agents/<profile>.md",".opencode/agent/<name>.md · .pi/agents/<name>.md (symlinks)"
+  "agent profiles",".agents/agents/<profile>.md",".opencode/agents/<name>.md · .pi/agents/<name>.md (symlinks)"
   "OpenCode plugins",".agents/harness/opencode/plugins/",".opencode/plugins (symlink)"
   "skills",".agents/skills/","loaded via opencode.json skills.paths"
 ```
 
 Rules:
 - **Edit only `.agents/`.** Never edit a file under `.opencode/` or `.pi/` — those are
-  symlinks to `.agents/` (e.g. `.opencode/agent/bragi.md` links to
+  symlinks to `.agents/` (e.g. `.opencode/agents/bragi.md` links to
   `.agents/agents/bragi-marketer.md`).
 - After any change: `bin/valknut-load.sh --all` to rebind.
 - **OpenCode requires REAL `.opencode/{node_modules,package.json,.gitignore}`** — the