arc402-cli 0.9.18 → 0.10.0

package/dist/commands/workroom.js

@@ -1,22 +1,56 @@
-import * as crypto from "node:crypto";
-import * as fs from "fs";
-import * as path from "path";
-import * as http from "http";
-import { spawnSync } from "child_process";
-import { ARC402_DIR, runCmd, } from "../openshell-runtime.js";
-import { DAEMON_TOML, loadDaemonConfig } from "../daemon/config.js";
-import { c } from "../ui/colors.js";
-import { renderTree } from "../ui/tree.js";
-import { fileURLToPath } from "node:url";
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerWorkroomCommands = registerWorkroomCommands;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const http = __importStar(require("http"));
+const child_process_1 = require("child_process");
+const openshell_runtime_1 = require("../openshell-runtime");
+const config_1 = require("../daemon/config");
+const credentials_1 = require("../daemon/credentials");
+const colors_1 = require("../ui/colors");
+const tree_1 = require("../ui/tree");
 // ─── Daemon lifecycle notify ──────────────────────────────────────────────────
 function notifyDaemonWorkroomStatus(event, agentAddress, jobId, port = 4402) {
     try {
         // Try to read port from daemon config
         let daemonPort = port;
-        if (fs.existsSync(DAEMON_TOML)) {
+        if (fs.existsSync(config_1.DAEMON_TOML)) {
             try {
+                const { loadDaemonConfig } = require("../daemon/config");
                 const cfg = loadDaemonConfig();
                 daemonPort = cfg.relay?.listen_port ?? port;
             }
@@ -44,36 +78,43 @@ function notifyDaemonWorkroomStatus(event, agentAddress, jobId, port = 4402) {
 // ─── Constants ────────────────────────────────────────────────────────────────
 const WORKROOM_IMAGE = "arc402-workroom";
 const WORKROOM_CONTAINER = "arc402-workroom";
-const POLICY_FILE = path.join(ARC402_DIR, "openshell-policy.yaml");
-const ARENA_POLICY_FILE = path.join(ARC402_DIR, "arena-policy.yaml");
-const ARENA_DATA_DIR = path.join(ARC402_DIR, "arena");
+const POLICY_FILE = path.join(openshell_runtime_1.ARC402_DIR, "openshell-policy.yaml");
+const ARENA_POLICY_FILE = path.join(openshell_runtime_1.ARC402_DIR, "arena-policy.yaml");
+const ARENA_DATA_DIR = path.join(openshell_runtime_1.ARC402_DIR, "arena");
 const WORKROOM_DIR = path.join(__dirname, "..", "..", "..", "workroom"); // relative to cli/dist
+// Template ships at workroom/credentials.template.toml, resolved from cli/dist/commands/
+const CREDENTIALS_TEMPLATE = path.resolve(__dirname, "..", "..", "..", "workroom", "credentials.template.toml");
 // ─── Helpers ──────────────────────────────────────────────────────────────────
 function dockerAvailable() {
-    const r = runCmd("docker", ["info", "--format", "{{.ServerVersion}}"]);
+    const r = (0, openshell_runtime_1.runCmd)("docker", ["info", "--format", "{{.ServerVersion}}"]);
     return r.ok;
 }
 function containerExists() {
-    const r = runCmd("docker", ["inspect", WORKROOM_CONTAINER, "--format", "{{.State.Status}}"]);
+    const r = (0, openshell_runtime_1.runCmd)("docker", ["inspect", WORKROOM_CONTAINER, "--format", "{{.State.Status}}"]);
     return r.ok;
 }
 function containerRunning() {
-    const r = runCmd("docker", ["inspect", WORKROOM_CONTAINER, "--format", "{{.State.Running}}"]);
+    const r = (0, openshell_runtime_1.runCmd)("docker", ["inspect", WORKROOM_CONTAINER, "--format", "{{.State.Running}}"]);
     return r.ok && r.stdout.trim() === "true";
 }
 function imageExists() {
-    const r = runCmd("docker", ["image", "inspect", WORKROOM_IMAGE, "--format", "{{.Id}}"]);
+    const r = (0, openshell_runtime_1.runCmd)("docker", ["image", "inspect", WORKROOM_IMAGE, "--format", "{{.Id}}"]);
     return r.ok;
 }
-function buildImage() {
+function buildImage(useGpu = false) {
     // Find the workroom directory (contains Dockerfile)
     const workroomSrc = path.resolve(__dirname, "..", "..", "..", "workroom");
-    if (!fs.existsSync(path.join(workroomSrc, "Dockerfile"))) {
+    const dockerfile = useGpu ? "Dockerfile.gpu" : "Dockerfile";
+    if (!fs.existsSync(path.join(workroomSrc, dockerfile))) {
+        if (useGpu) {
+            console.error(`Dockerfile.gpu not found at ${workroomSrc}/Dockerfile.gpu`);
+            return false;
+        }
         console.error(`Dockerfile not found at ${workroomSrc}/Dockerfile`);
         return false;
     }
-    console.log("Building ARC-402 Workroom image...");
-    const result = spawnSync("docker", ["build", "-t", WORKROOM_IMAGE, workroomSrc], {
+    console.log(`Building ARC-402 Workroom image (${dockerfile})...`);
+    const result = (0, child_process_1.spawnSync)("docker", ["build", "-f", path.join(workroomSrc, dockerfile), "-t", WORKROOM_IMAGE, workroomSrc], {
         stdio: "inherit",
     });
     return result.status === 0;
@@ -82,11 +123,11 @@ function getPolicyHash() {
     if (!fs.existsSync(POLICY_FILE))
         return "(no policy file)";
     const content = fs.readFileSync(POLICY_FILE, "utf-8");
-    // crypto imported at top level
+    const crypto = require("crypto");
     return "0x" + crypto.createHash("sha256").update(content).digest("hex").slice(0, 16);
 }
 // ─── Commands ─────────────────────────────────────────────────────────────────
-export function registerWorkroomCommands(program) {
+function registerWorkroomCommands(program) {
     const workroom = program
         .command("workroom")
         .description("ARC-402 Workroom — governed execution environment for hired work. Your OpenClaw stays on the host; work runs inside the workroom.");
@@ -95,81 +136,151 @@ export function registerWorkroomCommands(program) {
         .command("init")
         .description("Create the ARC-402 Workroom: build Docker image, validate policy, prepare runtime bundle.")
         .action(async () => {
-        console.log(c.brightCyan("ARC-402 Workroom Init"));
-        console.log(c.dim("─────────────────────"));
+        console.log(colors_1.c.brightCyan("ARC-402 Workroom Init"));
+        console.log(colors_1.c.dim("─────────────────────"));
         // Check Docker
         if (!dockerAvailable()) {
-            console.error(c.failure + " " + c.red("Docker is not available. Install Docker Desktop and try again."));
+            console.error(colors_1.c.failure + " " + colors_1.c.red("Docker is not available. Install Docker Desktop and try again."));
             process.exit(1);
         }
-        console.log(" " + c.success + c.white(" Docker available"));
+        console.log(" " + colors_1.c.success + colors_1.c.white(" Docker available"));
         // Check policy file
         if (!fs.existsSync(POLICY_FILE)) {
-            console.log(c.dim("No policy file found. Generating default..."));
+            console.log(colors_1.c.dim("No policy file found. Generating default..."));
             // Import and call the existing policy generator
-            const { registerOpenShellCommands } = await import("./openshell.js");
-            console.log(c.dim(`Policy file will be generated at: ${POLICY_FILE}`));
-            console.log(c.dim("Run 'arc402 workroom policy preset core-launch' after init to apply defaults."));
+            const { registerOpenShellCommands } = require("./openshell");
+            console.log(colors_1.c.dim(`Policy file will be generated at: ${POLICY_FILE}`));
+            console.log(colors_1.c.dim("Run 'arc402 workroom policy preset core-launch' after init to apply defaults."));
         }
         else {
-            console.log(" " + c.success + c.dim(" Policy file: ") + c.white(POLICY_FILE));
+            console.log(" " + colors_1.c.success + colors_1.c.dim(" Policy file: ") + colors_1.c.white(POLICY_FILE));
         }
         // Check daemon.toml
-        if (!fs.existsSync(DAEMON_TOML)) {
-            console.error(c.failure + " " + c.red("daemon.toml not found. Run 'arc402 daemon init' first."));
+        if (!fs.existsSync(config_1.DAEMON_TOML)) {
+            console.error(colors_1.c.failure + " " + colors_1.c.red("daemon.toml not found. Run 'arc402 daemon init' first."));
             process.exit(1);
         }
-        console.log(" " + c.success + c.white(" daemon.toml found"));
+        console.log(" " + colors_1.c.success + colors_1.c.white(" daemon.toml found"));
         // Set up Arena directories and default policy
         if (!fs.existsSync(ARENA_DATA_DIR)) {
             fs.mkdirSync(ARENA_DATA_DIR, { recursive: true });
             for (const sub of ["feed", "profile", "state", "queue"]) {
                 fs.mkdirSync(path.join(ARENA_DATA_DIR, sub), { recursive: true });
             }
-            console.log(" " + c.success + c.white(" Arena directories created"));
+            console.log(" " + colors_1.c.success + colors_1.c.white(" Arena directories created"));
         }
         else {
-            console.log(" " + c.success + c.white(" Arena directories exist"));
+            console.log(" " + colors_1.c.success + colors_1.c.white(" Arena directories exist"));
         }
         // Copy default arena policy if not present
         if (!fs.existsSync(ARENA_POLICY_FILE)) {
             const defaultArenaPolicy = path.join(WORKROOM_DIR, "arena-policy.yaml");
             if (fs.existsSync(defaultArenaPolicy)) {
                 fs.copyFileSync(defaultArenaPolicy, ARENA_POLICY_FILE);
-                console.log(" " + c.success + c.white(" Arena policy: default installed"));
+                console.log(" " + colors_1.c.success + colors_1.c.white(" Arena policy: default installed"));
             }
             else {
-                console.log(" " + c.warning + " " + c.yellow("Arena policy template not found — create manually at " + ARENA_POLICY_FILE));
+                console.log(" " + colors_1.c.warning + " " + colors_1.c.yellow("Arena policy template not found — create manually at " + ARENA_POLICY_FILE));
             }
         }
         else {
-            console.log(" " + c.success + c.white(" Arena policy exists"));
+            console.log(" " + colors_1.c.success + colors_1.c.white(" Arena policy exists"));
+        }
+        // ── Credentials template ──────────────────────────────────────────────
+        const workerDir = path.dirname(credentials_1.CREDENTIALS_PATH);
+        if (!fs.existsSync(workerDir)) {
+            fs.mkdirSync(workerDir, { recursive: true });
+        }
+        if (!fs.existsSync(credentials_1.CREDENTIALS_PATH)) {
+            if (fs.existsSync(CREDENTIALS_TEMPLATE)) {
+                fs.copyFileSync(CREDENTIALS_TEMPLATE, credentials_1.CREDENTIALS_PATH);
+                console.log(" " + colors_1.c.success + colors_1.c.white(" credentials.toml installed at " + credentials_1.CREDENTIALS_PATH));
+                console.log(colors_1.c.dim("   Edit it to enable providers: set enabled = true and export API keys."));
+            }
+            else {
+                console.log(" " + colors_1.c.warning + " " + colors_1.c.yellow("credentials.template.toml not found — skipping credentials setup"));
+            }
+        }
+        else {
+            console.log(" " + colors_1.c.success + colors_1.c.white(" credentials.toml found"));
+        }
+        // ── Provider check + policy integration ──────────────────────────────
+        const providers = await (0, credentials_1.getEnabledProviders)();
+        if (providers.length > 0) {
+            console.log(colors_1.c.dim("\nEnabled providers:"));
+            for (const p of providers) {
+                const keyStatus = p.hasKey
+                    ? colors_1.c.success + colors_1.c.white(` key found`)
+                    : colors_1.c.warning + " " + colors_1.c.yellow("key MISSING — export " + (p.env ?? ""));
+                console.log(`  ${colors_1.c.dim("Provider:")} ${colors_1.c.white(p.name)} ${colors_1.c.dim("(" + p.hosts.join(", ") + ")")} — ${keyStatus}`);
+            }
+            // Add provider hosts to policy file if it exists
+            if (fs.existsSync(POLICY_FILE)) {
+                let policy = fs.readFileSync(POLICY_FILE, "utf-8");
+                let changed = false;
+                for (const p of providers) {
+                    for (const host of p.hosts) {
+                        if (!policy.includes(`host: ${host}`)) {
+                            // Append a new network_policy entry for this provider
+                            const entry = [
+                                `  provider_${p.name}:`,
+                                `    name: provider-${p.name}`,
+                                `    endpoints:`,
+                                `      - host: ${host}`,
+                                `        port: 443`,
+                                `        protocol: rest`,
+                                `        tls: terminate`,
+                                `        enforcement: enforce`,
+                                `        access: read-write`,
+                                `    binaries: *a1`,
+                            ].join("\n");
+                            policy += "\n" + entry + "\n";
+                            changed = true;
+                        }
+                    }
+                }
+                if (changed) {
+                    fs.writeFileSync(POLICY_FILE, policy, "utf-8");
+                    console.log(" " + colors_1.c.success + colors_1.c.white(" Policy updated with provider hosts"));
+                }
+                else {
+                    console.log(" " + colors_1.c.success + colors_1.c.white(" Provider hosts already in policy"));
+                }
+            }
+            else {
+                console.log(colors_1.c.dim("   (Policy file not yet created — provider hosts will be added on next init after policy setup)"));
+            }
+        }
+        else if (fs.existsSync(credentials_1.CREDENTIALS_PATH)) {
+            console.log(colors_1.c.dim("   No providers enabled in credentials.toml — edit to enable providers."));
         }
         // Build image
         if (!imageExists()) {
             if (!buildImage()) {
-                console.error(c.failure + " " + c.red("Failed to build workroom image."));
+                console.error(colors_1.c.failure + " " + colors_1.c.red("Failed to build workroom image."));
                 process.exit(1);
             }
         }
-        console.log(" " + c.success + c.dim(" Image: ") + c.white(WORKROOM_IMAGE));
+        console.log(" " + colors_1.c.success + colors_1.c.dim(" Image: ") + colors_1.c.white(WORKROOM_IMAGE));
         // Package CLI runtime for the workroom
         const cliDist = path.resolve(__dirname, "..", "..");
         const cliPackage = path.resolve(__dirname, "..", "..", "..", "package.json");
         if (fs.existsSync(cliDist) && fs.existsSync(cliPackage)) {
-            console.log(" " + c.success + c.white(" CLI runtime available for workroom mount"));
+            console.log(" " + colors_1.c.success + colors_1.c.white(" CLI runtime available for workroom mount"));
         }
         else {
-            console.warn(" " + c.warning + " " + c.yellow("CLI dist not found — workroom will need runtime bundle"));
+            console.warn(" " + colors_1.c.warning + " " + colors_1.c.yellow("CLI dist not found — workroom will need runtime bundle"));
         }
-        console.log("\n" + c.success + c.white(" Workroom initialized. Start with: arc402 workroom start"));
-        console.log(c.dim("Policy hash: ") + c.white(getPolicyHash()));
+        console.log("\n" + colors_1.c.success + colors_1.c.white(" Workroom initialized. Start with: arc402 workroom start"));
+        console.log(colors_1.c.dim("Policy hash: ") + colors_1.c.white(getPolicyHash()));
     });
     // ── start ─────────────────────────────────────────────────────────────────
     workroom
         .command("start")
         .description("Start the ARC-402 Workroom (always-on governed container with daemon inside).")
-        .action(async () => {
+        .option("--compute", "Enable GPU compute mode: uses Dockerfile.gpu and passes --gpus all --runtime nvidia to docker run")
+        .action(async (opts) => {
+        const useGpu = !!opts.compute;
         if (!dockerAvailable()) {
             console.error("Docker is not available.");
             process.exit(1);
@@ -180,11 +291,11 @@ export function registerWorkroomCommands(program) {
         }
         // Remove stopped container if exists
         if (containerExists()) {
-            runCmd("docker", ["rm", "-f", WORKROOM_CONTAINER]);
+            (0, openshell_runtime_1.runCmd)("docker", ["rm", "-f", WORKROOM_CONTAINER]);
         }
         // Build image if needed
         if (!imageExists()) {
-            if (!buildImage()) {
+            if (!buildImage(useGpu)) {
                 console.error("Failed to build workroom image.");
                 process.exit(1);
             }
@@ -198,22 +309,26 @@ export function registerWorkroomCommands(program) {
             console.error("Export it before starting: export ARC402_MACHINE_KEY=0x...");
             process.exit(1);
         }
+        // Collect provider env flags from credentials.toml
+        const providerEnvFlags = await (0, credentials_1.getDockerEnvFlags)();
         // CLI runtime path
         const cliRoot = path.resolve(__dirname, "..", "..", "..");
-        console.log(c.dim("Starting ARC-402 Workroom..."));
+        console.log(colors_1.c.dim("Starting ARC-402 Workroom..."));
         const args = [
             "run", "-d",
             "--name", WORKROOM_CONTAINER,
             "--restart", "unless-stopped",
             "--cap-add", "NET_ADMIN", // Required for iptables
+            // GPU pass-through (only when --compute flag is set)
+            ...(useGpu ? ["--gpus", "all", "--runtime", "nvidia"] : []),
             // Mount config (read-write for daemon state/logs)
-            "-v", `${ARC402_DIR}:/workroom/.arc402:rw`,
+            "-v", `${openshell_runtime_1.ARC402_DIR}:/workroom/.arc402:rw`,
             // Mount CLI runtime (read-only)
             "-v", `${cliRoot}:/workroom/runtime:ro`,
             // Mount jobs directory
-            "-v", `${path.join(ARC402_DIR, "jobs")}:/workroom/jobs:rw`,
+            "-v", `${path.join(openshell_runtime_1.ARC402_DIR, "jobs")}:/workroom/jobs:rw`,
             // Mount worker directory (identity, memory, skills, knowledge)
-            "-v", `${path.join(ARC402_DIR, "worker")}:/workroom/worker:rw`,
+            "-v", `${path.join(openshell_runtime_1.ARC402_DIR, "worker")}:/workroom/worker:rw`,
             // Mount Arena data directory (feed index, profile cache, state, queue)
             "-v", `${ARENA_DATA_DIR}:/workroom/arena:rw`,
             // Inject secrets as env vars
@@ -222,20 +337,22 @@ export function registerWorkroomCommands(program) {
             "-e", `TELEGRAM_CHAT_ID=${telegramChat}`,
             "-e", `ARC402_DAEMON_PROCESS=1`,
             "-e", `ARC402_DAEMON_FOREGROUND=1`,
+            // Inject enabled provider API keys (never written to container disk)
+            ...providerEnvFlags,
             // Expose relay port
             "-p", "4402:4402",
             WORKROOM_IMAGE,
         ];
-        const result = spawnSync("docker", args, { stdio: "inherit" });
+        const result = (0, child_process_1.spawnSync)("docker", args, { stdio: "inherit" });
         if (result.status !== 0) {
             console.error("Failed to start workroom container.");
             process.exit(1);
         }
         // Wait briefly and check health
-        spawnSync("sleep", ["2"]);
+        (0, child_process_1.spawnSync)("sleep", ["2"]);
         if (containerRunning()) {
-            console.log("\n" + c.success + c.white(" ARC-402 Workroom is running"));
-            renderTree([
+            console.log("\n" + colors_1.c.success + colors_1.c.white(" ARC-402 Workroom is running"));
+            (0, tree_1.renderTree)([
                 { label: "Container", value: WORKROOM_CONTAINER },
                 { label: "Policy hash", value: getPolicyHash() },
                 { label: "Relay port", value: "4402" },
@@ -245,8 +362,8 @@ export function registerWorkroomCommands(program) {
             notifyDaemonWorkroomStatus("entered");
         }
         else {
-            console.error(c.failure + " " + c.red("Workroom started but exited immediately. Check logs:"));
-            console.error(c.dim("  docker logs arc402-workroom"));
+            console.error(colors_1.c.failure + " " + colors_1.c.red("Workroom started but exited immediately. Check logs:"));
+            console.error(colors_1.c.dim("  docker logs arc402-workroom"));
             process.exit(1);
         }
     });
@@ -259,85 +376,85 @@ export function registerWorkroomCommands(program) {
             console.log("Workroom is not running.");
             return;
         }
-        console.log(c.dim("Stopping ARC-402 Workroom..."));
+        console.log(colors_1.c.dim("Stopping ARC-402 Workroom..."));
         // Notify daemon before stopping (daemon may be inside container)
         notifyDaemonWorkroomStatus("exited");
-        runCmd("docker", ["stop", WORKROOM_CONTAINER]);
-        console.log(" " + c.success + c.white(" Workroom stopped"));
+        (0, openshell_runtime_1.runCmd)("docker", ["stop", WORKROOM_CONTAINER]);
+        console.log(" " + colors_1.c.success + colors_1.c.white(" Workroom stopped"));
     });
     // ── status ────────────────────────────────────────────────────────────────
     workroom
         .command("status")
         .description("Show ARC-402 Workroom health, policy, and active state.")
         .action(async () => {
-        console.log(c.brightCyan("ARC-402 Workroom Status"));
-        console.log(c.dim("───────────────────────"));
+        console.log(colors_1.c.brightCyan("ARC-402 Workroom Status"));
+        console.log(colors_1.c.dim("───────────────────────"));
         // Docker
         if (!dockerAvailable()) {
-            console.log(c.dim("Docker:       ") + c.failure + " " + c.red("not available"));
+            console.log(colors_1.c.dim("Docker:       ") + colors_1.c.failure + " " + colors_1.c.red("not available"));
             return;
         }
-        console.log(c.dim("Docker:       ") + c.success + c.white(" available"));
+        console.log(colors_1.c.dim("Docker:       ") + colors_1.c.success + colors_1.c.white(" available"));
         // Image
         if (imageExists()) {
-            console.log(c.dim("Image:        ") + c.success + " " + c.white(WORKROOM_IMAGE));
+            console.log(colors_1.c.dim("Image:        ") + colors_1.c.success + " " + colors_1.c.white(WORKROOM_IMAGE));
         }
         else {
-            console.log(c.dim("Image:        ") + c.failure + " " + c.red("not built (run: arc402 workroom init)"));
+            console.log(colors_1.c.dim("Image:        ") + colors_1.c.failure + " " + colors_1.c.red("not built (run: arc402 workroom init)"));
         }
         // Container
         if (containerRunning()) {
-            console.log(c.dim("Container:    ") + c.success + c.white(` running (${WORKROOM_CONTAINER})`));
+            console.log(colors_1.c.dim("Container:    ") + colors_1.c.success + colors_1.c.white(` running (${WORKROOM_CONTAINER})`));
             // Get container uptime
-            const inspect = runCmd("docker", ["inspect", WORKROOM_CONTAINER, "--format", "{{.State.StartedAt}}"]);
+            const inspect = (0, openshell_runtime_1.runCmd)("docker", ["inspect", WORKROOM_CONTAINER, "--format", "{{.State.StartedAt}}"]);
             if (inspect.ok) {
                 const started = new Date(inspect.stdout.trim());
                 const uptime = Math.floor((Date.now() - started.getTime()) / 1000);
                 const h = Math.floor(uptime / 3600);
                 const m = Math.floor((uptime % 3600) / 60);
-                console.log(c.dim("Uptime:       ") + c.white(`${h}h ${m}m`));
+                console.log(colors_1.c.dim("Uptime:       ") + colors_1.c.white(`${h}h ${m}m`));
             }
             // Get iptables rule count from inside container
-            const rules = runCmd("docker", ["exec", WORKROOM_CONTAINER, "iptables", "-L", "OUTPUT", "-n", "--line-numbers"]);
+            const rules = (0, openshell_runtime_1.runCmd)("docker", ["exec", WORKROOM_CONTAINER, "iptables", "-L", "OUTPUT", "-n", "--line-numbers"]);
             if (rules.ok) {
                 const ruleCount = rules.stdout.split("\n").filter(l => l.match(/^\d+/)).length;
-                console.log(c.dim("Network rules: ") + c.white(`${ruleCount} iptables rules enforced`));
+                console.log(colors_1.c.dim("Network rules: ") + colors_1.c.white(`${ruleCount} iptables rules enforced`));
             }
         }
         else if (containerExists()) {
-            console.log(c.dim("Container:    ") + c.warning + " " + c.yellow("stopped (run: arc402 workroom start)"));
+            console.log(colors_1.c.dim("Container:    ") + colors_1.c.warning + " " + colors_1.c.yellow("stopped (run: arc402 workroom start)"));
         }
         else {
-            console.log(c.dim("Container:    ") + c.failure + " " + c.red("not created (run: arc402 workroom init)"));
+            console.log(colors_1.c.dim("Container:    ") + colors_1.c.failure + " " + colors_1.c.red("not created (run: arc402 workroom init)"));
         }
         // Policy
         if (fs.existsSync(POLICY_FILE)) {
-            console.log(c.dim("Policy file:  ") + c.success + " " + c.white(POLICY_FILE));
+            console.log(colors_1.c.dim("Policy file:  ") + colors_1.c.success + " " + colors_1.c.white(POLICY_FILE));
         }
         else {
-            console.log(c.dim("Policy file:  ") + c.failure + " " + c.red("missing"));
+            console.log(colors_1.c.dim("Policy file:  ") + colors_1.c.failure + " " + colors_1.c.red("missing"));
         }
-        console.log(c.dim("Policy hash:  ") + c.white(getPolicyHash()));
+        console.log(colors_1.c.dim("Policy hash:  ") + colors_1.c.white(getPolicyHash()));
         // Arena
         const arenaExists = fs.existsSync(ARENA_DATA_DIR);
         const arenaPolicy = fs.existsSync(ARENA_POLICY_FILE);
         if (arenaExists) {
-            console.log(c.dim("Arena data:   ") + c.success + " " + c.white(ARENA_DATA_DIR));
+            console.log(colors_1.c.dim("Arena data:   ") + colors_1.c.success + " " + colors_1.c.white(ARENA_DATA_DIR));
         }
         else {
-            console.log(c.dim("Arena data:   ") + c.failure + " " + c.red("missing (run: arc402 workroom init)"));
+            console.log(colors_1.c.dim("Arena data:   ") + colors_1.c.failure + " " + colors_1.c.red("missing (run: arc402 workroom init)"));
         }
-        console.log(c.dim("Arena policy: ") + (arenaPolicy ? c.success + c.white(" loaded") : c.failure + " " + c.red("missing")));
+        console.log(colors_1.c.dim("Arena policy: ") + (arenaPolicy ? colors_1.c.success + colors_1.c.white(" loaded") : colors_1.c.failure + " " + colors_1.c.red("missing")));
         // Arena queue (pending approvals)
         if (arenaExists) {
             const queueDir = path.join(ARENA_DATA_DIR, "queue");
             if (fs.existsSync(queueDir)) {
                 const pending = fs.readdirSync(queueDir).filter(f => f.endsWith(".json")).length;
                 if (pending > 0) {
-                    console.log(c.dim("Arena queue:  ") + c.warning + " " + c.yellow(`${pending} action(s) awaiting approval`));
+                    console.log(colors_1.c.dim("Arena queue:  ") + colors_1.c.warning + " " + colors_1.c.yellow(`${pending} action(s) awaiting approval`));
                 }
                 else {
-                    console.log(c.dim("Arena queue:  ") + c.success + c.white(" empty"));
+                    console.log(colors_1.c.dim("Arena queue:  ") + colors_1.c.success + colors_1.c.white(" empty"));
                 }
             }
         }
@@ -354,7 +471,7 @@ export function registerWorkroomCommands(program) {
             args.push("-f");
         args.push("--tail", opts.lines);
         args.push(WORKROOM_CONTAINER);
-        spawnSync("docker", args, { stdio: "inherit" });
+        (0, child_process_1.spawnSync)("docker", args, { stdio: "inherit" });
     });
     // ── shell ─────────────────────────────────────────────────────────────────
     workroom
@@ -365,7 +482,7 @@ export function registerWorkroomCommands(program) {
             console.error("Workroom is not running.");
             process.exit(1);
         }
-        spawnSync("docker", ["exec", "-it", WORKROOM_CONTAINER, "/bin/bash"], {
+        (0, child_process_1.spawnSync)("docker", ["exec", "-it", WORKROOM_CONTAINER, "/bin/bash"], {
             stdio: "inherit",
         });
     });
@@ -374,8 +491,8 @@ export function registerWorkroomCommands(program) {
         .command("doctor")
         .description("Diagnose workroom health: Docker, image, container, network, policy, daemon.")
         .action(async () => {
-        console.log(c.brightCyan("ARC-402 Workroom Doctor"));
-        console.log(c.dim("───────────────────────"));
+        console.log(colors_1.c.brightCyan("ARC-402 Workroom Doctor"));
+        console.log(colors_1.c.dim("───────────────────────"));
         const checks = [];
         // Docker
         const docker = dockerAvailable();
@@ -390,32 +507,32 @@ export function registerWorkroomCommands(program) {
         const policyExists = fs.existsSync(POLICY_FILE);
         checks.push({ label: "Policy file", pass: policyExists, detail: policyExists ? POLICY_FILE : "missing" });
         // daemon.toml
-        const daemonCfg = fs.existsSync(DAEMON_TOML);
+        const daemonCfg = fs.existsSync(config_1.DAEMON_TOML);
         checks.push({ label: "daemon.toml", pass: daemonCfg, detail: daemonCfg ? "found" : "missing — run: arc402 daemon init" });
         // Machine key env
         const mk = !!process.env.ARC402_MACHINE_KEY;
         checks.push({ label: "Machine key env", pass: mk, detail: mk ? "set" : "ARC402_MACHINE_KEY not in environment" });
         // Network connectivity (if running)
         if (running) {
-            const rpcTest = runCmd("docker", ["exec", WORKROOM_CONTAINER, "curl", "-s", "-o", "/dev/null", "-w", "%{http_code}", "--max-time", "5", "https://mainnet.base.org"]);
+            const rpcTest = (0, openshell_runtime_1.runCmd)("docker", ["exec", WORKROOM_CONTAINER, "curl", "-s", "-o", "/dev/null", "-w", "%{http_code}", "--max-time", "5", "https://mainnet.base.org"]);
             const rpcOk = rpcTest.ok && rpcTest.stdout.trim() !== "000";
             checks.push({ label: "Base RPC from workroom", pass: rpcOk, detail: rpcOk ? `HTTP ${rpcTest.stdout.trim()}` : "FAILED — network policy may be blocking RPC" });
         }
         // Print results
         for (const chk of checks) {
             if (chk.pass) {
-                console.log(" " + c.success + " " + c.dim(chk.label + ":") + " " + c.white(chk.detail));
+                console.log(" " + colors_1.c.success + " " + colors_1.c.dim(chk.label + ":") + " " + colors_1.c.white(chk.detail));
             }
             else {
-                console.log(" " + c.failure + " " + c.dim(chk.label + ":") + " " + c.red(chk.detail) + c.yellow("  ← FIX"));
+                console.log(" " + colors_1.c.failure + " " + colors_1.c.dim(chk.label + ":") + " " + colors_1.c.red(chk.detail) + colors_1.c.yellow("  ← FIX"));
             }
         }
         const failures = checks.filter(chk => !chk.pass);
         if (failures.length === 0) {
-            console.log("\n" + c.success + c.white(" All checks passed. Workroom is healthy."));
+            console.log("\n" + colors_1.c.success + colors_1.c.white(" All checks passed. Workroom is healthy."));
         }
         else {
-            console.log("\n" + c.failure + " " + c.red(`${failures.length} issue(s) found.`));
+            console.log("\n" + colors_1.c.failure + " " + colors_1.c.red(`${failures.length} issue(s) found.`));
         }
     });
     // ── policy (delegate to existing openshell policy commands) ───────────────
@@ -448,19 +565,19 @@ export function registerWorkroomCommands(program) {
             console.error("Workroom is not running. Start it first: arc402 workroom start");
             process.exit(1);
         }
-        console.log(c.dim(`Testing connectivity to ${host} from inside workroom...`));
-        const result = runCmd("docker", [
+        console.log(colors_1.c.dim(`Testing connectivity to ${host} from inside workroom...`));
+        const result = (0, openshell_runtime_1.runCmd)("docker", [
             "exec", WORKROOM_CONTAINER,
             "curl", "-s", "-o", "/dev/null", "-w", "%{http_code}", "--max-time", "5",
             `https://${host}`,
         ]);
         if (result.ok && result.stdout.trim() !== "000") {
-            console.log(" " + c.success + " " + c.white(host) + c.dim(` is reachable (HTTP ${result.stdout.trim()})`));
+            console.log(" " + colors_1.c.success + " " + colors_1.c.white(host) + colors_1.c.dim(` is reachable (HTTP ${result.stdout.trim()})`));
         }
         else {
-            console.log(" " + c.failure + " " + c.red(`${host} is NOT reachable from the workroom`));
-            console.log(c.dim("  This host may not be in the workroom policy."));
-            console.log(c.dim("  Add it with: arc402 openshell policy add <name> <host>"));
+            console.log(" " + colors_1.c.failure + " " + colors_1.c.red(`${host} is NOT reachable from the workroom`));
+            console.log(colors_1.c.dim("  This host may not be in the workroom policy."));
+            console.log(colors_1.c.dim("  Add it with: arc402 openshell policy add <name> <host>"));
         }
     });
     // ── worker ─────────────────────────────────────────────────────────────────
@@ -471,11 +588,15 @@ export function registerWorkroomCommands(program) {
         .option("--name <name>", "Worker display name", "Worker")
         .option("--model <model>", "Preferred LLM model for task execution")
         .action(async (opts) => {
-        const workerDir = path.join(ARC402_DIR, "worker");
+        const workerDir = path.join(openshell_runtime_1.ARC402_DIR, "worker");
         const memoryDir = path.join(workerDir, "memory");
         const skillsDir = path.join(workerDir, "skills");
+        const knowledgeDir = path.join(workerDir, "knowledge");
+        const datasetsDir = path.join(workerDir, "datasets");
         fs.mkdirSync(memoryDir, { recursive: true });
         fs.mkdirSync(skillsDir, { recursive: true });
+        fs.mkdirSync(knowledgeDir, { recursive: true });
+        fs.mkdirSync(datasetsDir, { recursive: true });
         // Generate default worker SOUL.md
         const soulPath = path.join(workerDir, "SOUL.md");
         if (!fs.existsSync(soulPath)) {
@@ -516,10 +637,28 @@ Write these learnings concisely. They will be available on your next job.
 - If the task is unclear, produce the best interpretation and document assumptions
 - Every deliverable must be verifiable against the task spec
 `);
-            console.log(" " + c.success + c.dim(` Worker SOUL.md created: ${soulPath}`));
+            console.log(" " + colors_1.c.success + colors_1.c.dim(` Worker SOUL.md created: ${soulPath}`));
         }
         else {
-            console.log(" " + c.success + c.dim(` Worker SOUL.md already exists: ${soulPath}`));
+            console.log(" " + colors_1.c.success + colors_1.c.dim(` Worker SOUL.md already exists: ${soulPath}`));
+        }
+        // Generate IDENTITY.md
+        const identityPath = path.join(workerDir, "IDENTITY.md");
+        if (!fs.existsSync(identityPath)) {
+            fs.writeFileSync(identityPath, `# Worker Identity
+- **Name:** ${opts.name}
+- **Emoji:** 🔧
+- **Capabilities:** []
+- **Model:** ${opts.model || "default"}
+- **Created:** ${new Date().toISOString()}
+
+## Specialisation
+Describe what this worker specialises in. This is injected into every job prompt.
+
+## Personality
+How should this worker communicate? Professional? Casual? Technical?
+`);
+            console.log(" " + colors_1.c.success + colors_1.c.dim(` Worker IDENTITY.md created: ${identityPath}`));
         }
         // Generate default MEMORY.md
         const memoryPath = path.join(workerDir, "MEMORY.md");
@@ -535,7 +674,7 @@ Write these learnings concisely. They will be available on your next job.
 
 No jobs completed yet. Learnings will accumulate here as the worker completes hired tasks.
 `);
-            console.log(" " + c.success + c.dim(` Worker MEMORY.md created: ${memoryPath}`));
+            console.log(" " + colors_1.c.success + colors_1.c.dim(` Worker MEMORY.md created: ${memoryPath}`));
         }
         // Generate learnings.md
         const learningsPath = path.join(memoryDir, "learnings.md");
@@ -548,7 +687,7 @@ No jobs completed yet. Learnings will accumulate here as the worker completes hi
 
 No learnings yet. Complete your first hired task to start accumulating expertise.
 `);
-            console.log(" " + c.success + c.dim(` Learnings file created: ${learningsPath}`));
+            console.log(" " + colors_1.c.success + colors_1.c.dim(` Learnings file created: ${learningsPath}`));
         }
         // Worker config
         const configPath = path.join(workerDir, "config.json");
@@ -562,18 +701,18 @@ No learnings yet. Complete your first hired task to start accumulating expertise
                 total_earned_eth: "0",
             };
             fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
-            console.log(" " + c.success + c.dim(` Worker config created: ${configPath}`));
+            console.log(" " + colors_1.c.success + colors_1.c.dim(` Worker config created: ${configPath}`));
         }
-        console.log("\n" + c.success + c.white(` Worker initialized at: ${workerDir}`));
-        console.log(c.dim("Next: customize the worker SOUL.md and add skills."));
-        console.log(c.dim("  arc402 workroom worker set-soul <file>"));
-        console.log(c.dim("  arc402 workroom worker set-skills <dir>"));
+        console.log("\n" + colors_1.c.success + colors_1.c.white(` Worker initialized at: ${workerDir}`));
+        console.log(colors_1.c.dim("Next: customize the worker SOUL.md and add skills."));
+        console.log(colors_1.c.dim("  arc402 workroom worker set-soul <file>"));
+        console.log(colors_1.c.dim("  arc402 workroom worker set-skills <dir>"));
     });
     worker
         .command("status")
         .description("Show worker identity, job count, learnings, and configuration.")
         .action(async () => {
-        const workerDir = path.join(ARC402_DIR, "worker");
+        const workerDir = path.join(openshell_runtime_1.ARC402_DIR, "worker");
         const configPath = path.join(workerDir, "config.json");
         if (!fs.existsSync(configPath)) {
             console.error("Worker not initialized. Run: arc402 workroom worker init");
@@ -592,9 +731,9 @@ No learnings yet. Complete your first hired task to start accumulating expertise
         const skillCount = fs.existsSync(skillsDir)
             ? fs.readdirSync(skillsDir).length
             : 0;
-        console.log(c.brightCyan("ARC-402 Workroom Worker"));
-        console.log(c.dim("───────────────────────"));
-        renderTree([
+        console.log(colors_1.c.brightCyan("ARC-402 Workroom Worker"));
+        console.log(colors_1.c.dim("───────────────────────"));
+        (0, tree_1.renderTree)([
             { label: "Name", value: config.name },
             { label: "Model", value: config.model },
             { label: "Created", value: config.created },
@@ -613,10 +752,10 @@ No learnings yet. Complete your first hired task to start accumulating expertise
             console.error(`File not found: ${file}`);
             process.exit(1);
         }
-        const dest = path.join(ARC402_DIR, "worker", "SOUL.md");
+        const dest = path.join(openshell_runtime_1.ARC402_DIR, "worker", "SOUL.md");
         fs.mkdirSync(path.dirname(dest), { recursive: true });
         fs.copyFileSync(file, dest);
-        console.log(" " + c.success + c.white(` Worker SOUL.md updated from: ${file}`));
+        console.log(" " + colors_1.c.success + colors_1.c.white(` Worker SOUL.md updated from: ${file}`));
     });
     worker
         .command("set-skills <dir>")
@@ -626,7 +765,7 @@ No learnings yet. Complete your first hired task to start accumulating expertise
             console.error(`Directory not found: ${dir}`);
             process.exit(1);
         }
-        const dest = path.join(ARC402_DIR, "worker", "skills");
+        const dest = path.join(openshell_runtime_1.ARC402_DIR, "worker", "skills");
         fs.mkdirSync(dest, { recursive: true });
         // Copy all files from source to dest
         const files = fs.readdirSync(dir);
@@ -641,7 +780,7 @@ No learnings yet. Complete your first hired task to start accumulating expertise
                 fs.cpSync(src, dst, { recursive: true });
             }
         }
-        console.log(" " + c.success + c.white(` ${files.length} items copied to worker skills`));
+        console.log(" " + colors_1.c.success + colors_1.c.white(` ${files.length} items copied to worker skills`));
     });
     worker
         .command("set-knowledge <dir>")
@@ -651,7 +790,7 @@ No learnings yet. Complete your first hired task to start accumulating expertise
             console.error(`Directory not found: ${dir}`);
             process.exit(1);
         }
-        const dest = path.join(ARC402_DIR, "worker", "knowledge");
+        const dest = path.join(openshell_runtime_1.ARC402_DIR, "worker", "knowledge");
         fs.mkdirSync(dest, { recursive: true });
         const files = fs.readdirSync(dir);
         let count = 0;
@@ -667,16 +806,16 @@ No learnings yet. Complete your first hired task to start accumulating expertise
                 count++;
             }
         }
-        console.log(" " + c.success + c.white(` ${count} items copied to worker knowledge`));
-        console.log(" " + c.dim("Path:") + " " + c.white(dest));
-        console.log(c.dim("  The worker can reference these files during hired tasks."));
-        console.log(c.dim("  To update: run this command again with the updated directory."));
+        console.log(" " + colors_1.c.success + colors_1.c.white(` ${count} items copied to worker knowledge`));
+        console.log(" " + colors_1.c.dim("Path:") + " " + colors_1.c.white(dest));
+        console.log(colors_1.c.dim("  The worker can reference these files during hired tasks."));
+        console.log(colors_1.c.dim("  To update: run this command again with the updated directory."));
     });
     worker
         .command("knowledge")
         .description("List the worker's knowledge directory contents.")
         .action(async () => {
-        const knowledgeDir = path.join(ARC402_DIR, "worker", "knowledge");
+        const knowledgeDir = path.join(openshell_runtime_1.ARC402_DIR, "worker", "knowledge");
         if (!fs.existsSync(knowledgeDir)) {
             console.log("No knowledge directory. Add one with: arc402 workroom worker set-knowledge <dir>");
             return;
@@ -697,7 +836,7 @@ No learnings yet. Complete your first hired task to start accumulating expertise
         .command("memory")
         .description("Show the worker's accumulated learnings.")
         .action(async () => {
-        const learningsPath = path.join(ARC402_DIR, "worker", "memory", "learnings.md");
+        const learningsPath = path.join(openshell_runtime_1.ARC402_DIR, "worker", "memory", "learnings.md");
         if (!fs.existsSync(learningsPath)) {
             console.log("No learnings yet. Complete a hired task first.");
             return;
@@ -708,7 +847,7 @@ No learnings yet. Complete your first hired task to start accumulating expertise
         .command("memory-reset")
         .description("Clear the worker's accumulated memory (start fresh).")
         .action(async () => {
-        const memoryDir = path.join(ARC402_DIR, "worker", "memory");
+        const memoryDir = path.join(openshell_runtime_1.ARC402_DIR, "worker", "memory");
         if (fs.existsSync(memoryDir)) {
             const files = fs.readdirSync(memoryDir);
             for (const f of files)
@@ -716,20 +855,20 @@ No learnings yet. Complete your first hired task to start accumulating expertise
             fs.writeFileSync(path.join(memoryDir, "learnings.md"), `# Accumulated Learnings\n\n*Reset: ${new Date().toISOString()}*\n\nNo learnings yet.\n`);
         }
         // Reset job count in config
-        const configPath = path.join(ARC402_DIR, "worker", "config.json");
+        const configPath = path.join(openshell_runtime_1.ARC402_DIR, "worker", "config.json");
         if (fs.existsSync(configPath)) {
             const config = JSON.parse(fs.readFileSync(configPath, "utf-8"));
             config.job_count = 0;
             fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
         }
-        console.log(" " + c.success + c.white(" Worker memory cleared. Starting fresh."));
+        console.log(" " + colors_1.c.success + colors_1.c.white(" Worker memory cleared. Starting fresh."));
     });
     // ── token usage ──────────────────────────────────────────────────────────
     workroom
         .command("token-usage [agreementId]")
         .description("Show token usage for a specific agreement or across all jobs.")
         .action(async (agreementId) => {
-        const { readUsageReport, formatUsageReport } = await import("../daemon/token-metering.js");
+        const { readUsageReport, formatUsageReport } = require("../daemon/token-metering");
         if (agreementId) {
             const usage = readUsageReport(agreementId);
             if (!usage) {
@@ -740,7 +879,7 @@ No learnings yet. Complete your first hired task to start accumulating expertise
         }
         else {
             // Aggregate across all receipts
-            const receiptsDir = path.join(ARC402_DIR, "receipts");
+            const receiptsDir = path.join(openshell_runtime_1.ARC402_DIR, "receipts");
             if (!fs.existsSync(receiptsDir)) {
                 console.log("No receipts yet.");
                 return;
@@ -781,7 +920,7 @@ No learnings yet. Complete your first hired task to start accumulating expertise
         .command("receipts")
         .description("List all execution receipts from completed jobs.")
         .action(async () => {
-        const receiptsDir = path.join(ARC402_DIR, "receipts");
+        const receiptsDir = path.join(openshell_runtime_1.ARC402_DIR, "receipts");
         if (!fs.existsSync(receiptsDir)) {
             console.log("No receipts yet.");
             return;
@@ -809,7 +948,7 @@ No learnings yet. Complete your first hired task to start accumulating expertise
         .command("receipt <agreementId>")
         .description("Show full execution receipt for a specific job.")
         .action(async (agreementId) => {
-        const receiptPath = path.join(ARC402_DIR, "receipts", `${agreementId}.json`);
+        const receiptPath = path.join(openshell_runtime_1.ARC402_DIR, "receipts", `${agreementId}.json`);
         if (!fs.existsSync(receiptPath)) {
             console.error(`No receipt found for agreement: ${agreementId}`);
             process.exit(1);
@@ -821,14 +960,14 @@ No learnings yet. Complete your first hired task to start accumulating expertise
         .description("Show total earnings from completed jobs.")
         .option("--period <period>", "Time period (e.g. 7d, 30d, all)", "all")
         .action(async (opts) => {
-        const configPath = path.join(ARC402_DIR, "worker", "config.json");
+        const configPath = path.join(openshell_runtime_1.ARC402_DIR, "worker", "config.json");
         if (!fs.existsSync(configPath)) {
             console.log("No worker configured. Run: arc402 workroom worker init");
             return;
         }
         const config = JSON.parse(fs.readFileSync(configPath, "utf-8"));
-        console.log(c.brightCyan("ARC-402 Earnings"));
-        console.log(c.dim("────────────────"));
+        console.log(colors_1.c.brightCyan("ARC-402 Earnings"));
+        console.log(colors_1.c.dim("────────────────"));
         const earningsItems = [
             { label: "Total earned", value: config.total_earned_eth + " ETH" },
             { label: "Jobs completed", value: String(config.job_count) },
@@ -838,13 +977,13 @@ No learnings yet. Complete your first hired task to start accumulating expertise
             earningsItems.push({ label: "Average/job", value: avg + " ETH" });
         }
         earningsItems[earningsItems.length - 1].last = true;
-        renderTree(earningsItems);
+        (0, tree_1.renderTree)(earningsItems);
     });
     workroom
         .command("history")
         .description("Show job history with outcomes and earnings.")
         .action(async () => {
-        const memoryDir = path.join(ARC402_DIR, "worker", "memory");
+        const memoryDir = path.join(openshell_runtime_1.ARC402_DIR, "worker", "memory");
         if (!fs.existsSync(memoryDir)) {
             console.log("No job history yet.");
             return;
@@ -870,17 +1009,17 @@ No learnings yet. Complete your first hired task to start accumulating expertise
             console.error("Workroom is not running.");
             process.exit(1);
         }
-        console.log(c.dim("Reloading workroom policy..."));
+        console.log(colors_1.c.dim("Reloading workroom policy..."));
         // Trigger DNS refresh manually (which re-reads policy and updates iptables)
-        const result = runCmd("docker", [
+        const result = (0, openshell_runtime_1.runCmd)("docker", [
             "exec", WORKROOM_CONTAINER,
             "bash", "-c", "/dns-refresh.sh /workroom/.arc402/openshell-policy.yaml &",
         ]);
         if (result.ok) {
-            console.log(" " + c.success + c.white(" Policy reload triggered"));
+            console.log(" " + colors_1.c.success + colors_1.c.white(" Policy reload triggered"));
         }
         else {
-            console.error(c.failure + " " + c.red("Failed to reload policy"));
+            console.error(colors_1.c.failure + " " + colors_1.c.red("Failed to reload policy"));
         }
     });
 }