arkaos 4.33.0 → 4.35.0

package/harness/opencode/commands/arka-lead.md

@@ -0,0 +1,9 @@
+---
+description: "ArkaOS /lead department (Rodrigo)"
+---
+
+[arka:routing] lead -> Rodrigo
+
+Handle the following as the ArkaOS /lead department, orchestrated by Rodrigo. Follow the AGENTS.md contract (plan approval, evidence over narration, quality gate; generated by scripts/harness_gen.py):
+
+$ARGUMENTS

package/harness/opencode/commands/arka-mkt.md

@@ -0,0 +1,9 @@
+---
+description: "ArkaOS /mkt department (Luna)"
+---
+
+[arka:routing] mkt -> Luna
+
+Handle the following as the ArkaOS /mkt department, orchestrated by Luna. Follow the AGENTS.md contract (plan approval, evidence over narration, quality gate; generated by scripts/harness_gen.py):
+
+$ARGUMENTS

package/harness/opencode/commands/arka-ops.md

@@ -0,0 +1,9 @@
+---
+description: "ArkaOS /ops department (Daniel)"
+---
+
+[arka:routing] ops -> Daniel
+
+Handle the following as the ArkaOS /ops department, orchestrated by Daniel. Follow the AGENTS.md contract (plan approval, evidence over narration, quality gate; generated by scripts/harness_gen.py):
+
+$ARGUMENTS

package/harness/opencode/commands/arka-org.md

@@ -0,0 +1,9 @@
+---
+description: "ArkaOS /org department (Sofia)"
+---
+
+[arka:routing] org -> Sofia
+
+Handle the following as the ArkaOS /org department, orchestrated by Sofia. Follow the AGENTS.md contract (plan approval, evidence over narration, quality gate; generated by scripts/harness_gen.py):
+
+$ARGUMENTS

package/harness/opencode/commands/arka-pm.md

@@ -0,0 +1,9 @@
+---
+description: "ArkaOS /pm department (Carolina)"
+---
+
+[arka:routing] pm -> Carolina
+
+Handle the following as the ArkaOS /pm department, orchestrated by Carolina. Follow the AGENTS.md contract (plan approval, evidence over narration, quality gate; generated by scripts/harness_gen.py):
+
+$ARGUMENTS

package/harness/opencode/commands/arka-saas.md

@@ -0,0 +1,9 @@
+---
+description: "ArkaOS /saas department (Tiago)"
+---
+
+[arka:routing] saas -> Tiago
+
+Handle the following as the ArkaOS /saas department, orchestrated by Tiago. Follow the AGENTS.md contract (plan approval, evidence over narration, quality gate; generated by scripts/harness_gen.py):
+
+$ARGUMENTS

package/harness/opencode/commands/arka-sales.md

@@ -0,0 +1,9 @@
+---
+description: "ArkaOS /sales department (Miguel)"
+---
+
+[arka:routing] sales -> Miguel
+
+Handle the following as the ArkaOS /sales department, orchestrated by Miguel. Follow the AGENTS.md contract (plan approval, evidence over narration, quality gate; generated by scripts/harness_gen.py):
+
+$ARGUMENTS

package/harness/opencode/commands/arka-strat.md

@@ -0,0 +1,9 @@
+---
+description: "ArkaOS /strat department (Tomas)"
+---
+
+[arka:routing] strat -> Tomas
+
+Handle the following as the ArkaOS /strat department, orchestrated by Tomas. Follow the AGENTS.md contract (plan approval, evidence over narration, quality gate; generated by scripts/harness_gen.py):
+
+$ARGUMENTS

package/harness/opencode/opencode.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "mcp": {
+    "arka-tools": {
+      "type": "local",
+      "command": [
+        "npx",
+        "-y",
+        "arkaos",
+        "mcp",
+        "start"
+      ],
+      "enabled": true
+    }
+  }
+}

package/harness/zed/.rules

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.33.0 — 89 agents, 17 departments, 331 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.35.0 — 89 agents, 17 departments, 331 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.

package/installer/adapters/opencode.js

@@ -0,0 +1,118 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { listBundleFiles, readBundleFile } from "../harness-bundle.js";
+
+/**
+ * OpenCode adapter (Foundation PR-6). Deploys the generated harness
+ * bundle onto OpenCode's native surfaces (opencode.ai/docs):
+ *
+ *   AGENTS.md      instructions contract (same body as codex)
+ *   agents/*.md    curated agent cut (C-suite + squad leads)
+ *   commands/*.md  one /arka-<dept> router command per department
+ *   opencode.json  arka-tools MCP — merged NON-destructively
+ *
+ * Merge contract: user keys ALWAYS win. An existing `$schema`, any
+ * user-defined `mcp` server, or a user-modified `arka-tools` entry is
+ * never overwritten; a corrupt opencode.json is never clobbered (we
+ * skip with a warning instead — config-seed.js posture).
+ */
+
+/**
+ * Pure, exported for tests. Returns:
+ *   { config, changed }  merged object + whether anything was added
+ *   null                 leave the file alone (corrupt input)
+ */
+export function mergeOpencodeConfig(existingText, fragmentText) {
+  let fragment;
+  try {
+    fragment = JSON.parse(fragmentText);
+  } catch {
+    return null;
+  }
+  let existing = {};
+  const trimmed = (existingText ?? "").trim();
+  if (trimmed !== "") {
+    try {
+      existing = JSON.parse(trimmed);
+    } catch {
+      return null; // corrupt user config — never clobber
+    }
+    if (!existing || typeof existing !== "object" || Array.isArray(existing)) {
+      return null;
+    }
+  }
+  const merged = { ...existing };
+  let changed = false;
+  if (!merged.$schema && fragment.$schema) {
+    merged.$schema = fragment.$schema;
+    changed = true;
+  }
+  const userMcp =
+    merged.mcp && typeof merged.mcp === "object" && !Array.isArray(merged.mcp)
+      ? merged.mcp
+      : {};
+  const mcp = { ...userMcp };
+  for (const [name, server] of Object.entries(fragment.mcp || {})) {
+    if (!(name in mcp)) {
+      mcp[name] = server;
+      changed = true;
+    }
+  }
+  if (changed && Object.keys(mcp).length > 0) merged.mcp = mcp;
+  return { config: merged, changed };
+}
+
+export default {
+  configureHooks(config) {
+    // OpenCode has no shell-hook chain; "configure" means deploying the
+    // instruction/agent/command surfaces + the MCP config merge.
+    const agentsMd = readBundleFile("opencode", "AGENTS.md");
+    if (!agentsMd) {
+      console.warn(
+        "         OpenCode bundle missing (harness/opencode/) — " +
+          "run scripts/harness_gen.py; skipping."
+      );
+      return;
+    }
+    mkdirSync(config.configDir, { recursive: true });
+    writeFileSync(join(config.configDir, "AGENTS.md"), agentsMd);
+
+    let deployed = 0;
+    for (const sub of ["agents", "commands"]) {
+      const names = listBundleFiles("opencode", sub);
+      if (names.length === 0) continue;
+      mkdirSync(join(config.configDir, sub), { recursive: true });
+      for (const name of names) {
+        const content = readBundleFile("opencode", `${sub}/${name}`);
+        if (content === null) continue;
+        writeFileSync(join(config.configDir, sub, name), content);
+        deployed += 1;
+      }
+    }
+
+    const fragment = readBundleFile("opencode", "opencode.json");
+    if (fragment) {
+      const existingText = existsSync(config.settingsFile)
+        ? readFileSync(config.settingsFile, "utf-8")
+        : "";
+      const result = mergeOpencodeConfig(existingText, fragment);
+      if (result === null) {
+        console.warn(
+          "         opencode.json unreadable — left untouched " +
+            "(the merge is never destructive)."
+        );
+      } else if (result.changed) {
+        writeFileSync(
+          config.settingsFile,
+          JSON.stringify(result.config, null, 2) + "\n"
+        );
+        console.log(
+          "         opencode.json updated (arka-tools MCP registered, user keys preserved)."
+        );
+      }
+    }
+    console.log(
+      `         OpenCode configured (AGENTS.md + ${deployed} agent/command files).`
+    );
+  },
+};

package/installer/autoupdate.js

@@ -0,0 +1,249 @@
+/**
+ * Background auto-update daemon for ArkaOS (Foundation PR-1).
+ *
+ * Users were found running v2 while v4.33 was live — the update path
+ * (`npx arkaos@latest update`) only fires when the user remembers to run
+ * it. This installs a per-OS scheduled unit that runs
+ * `scripts/auto-update.sh` daily (and at load): the script checks the npm
+ * registry, applies the core update headlessly, and notifies the user.
+ * Project sync stays supervised — the next Claude session picks it up via
+ * [arka:update-available].
+ *
+ * Opt-in by default on install/update (`ensureDefaultEnabled`), with a
+ * persisted opt-out marker so `npx arkaos autoupdate disable` survives
+ * future updates. ESM, Node + Bun, no interactive prompts. Unit
+ * generation (`unitFor`) is pure so it can be unit-tested without
+ * touching the OS (autostart.js precedent).
+ */
+
+import { execSync } from "node:child_process";
+import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+export const AUTOUPDATE_LABEL = "io.wizardingcode.arkaos.updater";
+const SERVICE_NAME = "arkaos-updater.service";
+const TIMER_NAME = "arkaos-updater.timer";
+
+function defaultRepoRoot() {
+  return join(dirname(fileURLToPath(import.meta.url)), "..");
+}
+
+/** Pure: the opt-out marker path — written by disable(), honored by
+ *  ensureDefaultEnabled() and by scripts/auto-update.sh itself. */
+export function optoutPath(home = homedir()) {
+  return join(home, ".arkaos", "autoupdate.optout");
+}
+
+/** Anchor the daemon at the stable ~/.arkaos/lib snapshot, never at the
+ *  package root when it can be an npx cache: `npm cache clean` purges
+ *  that location at any time, and a default-on daemon anchored there
+ *  dies silently — with no surviving daemon to self-heal (QG blocker,
+ *  Foundation PR-1). core-snapshot.js ships scripts/ into the snapshot;
+ *  repoRoot is the fallback for dev checkouts before the first deploy. */
+export function stableRoot({ home = homedir(), repoRoot = defaultRepoRoot() } = {}) {
+  const lib = join(home, ".arkaos", "lib");
+  return existsSync(join(lib, "scripts", "auto-update.sh")) ? lib : repoRoot;
+}
+
+/** Pure: the scheduled unit(s) for a given platform. Throws on
+ *  unsupported OS. Returns { kind, files: [{ path, content }] } —
+ *  systemd needs a service + timer pair, launchd a single plist. */
+export function unitFor(os, { repoRoot, home }) {
+  const script = `${repoRoot}/scripts/auto-update.sh`;
+  const log = `${home}/.arkaos/logs/auto-update-daemon.log`;
+
+  if (os === "darwin") {
+    // launchd runs with a minimal PATH (/usr/bin:/bin:...) — node/npx
+    // live in /opt/homebrew/bin or /usr/local/bin, so the plist must
+    // carry a usable PATH or the daemon dies on `command -v npx`.
+    // StartCalendarInterval fires daily; RunAtLoad covers machines that
+    // were asleep/off at that hour (login catches up).
+    const content = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${AUTOUPDATE_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>/bin/bash</string>
+    <string>${script}</string>
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key>
+    <string>/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin</string>
+  </dict>
+  <key>StartCalendarInterval</key>
+  <dict>
+    <key>Hour</key>
+    <integer>10</integer>
+    <key>Minute</key>
+    <integer>30</integer>
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${log}</string>
+  <key>StandardErrorPath</key>
+  <string>${log}</string>
+</dict>
+</plist>
+`;
+    return {
+      kind: "launchd",
+      files: [
+        {
+          path: join(home, "Library", "LaunchAgents", `${AUTOUPDATE_LABEL}.plist`),
+          content,
+        },
+      ],
+    };
+  }
+
+  if (os === "linux") {
+    const service = `[Unit]
+Description=ArkaOS auto-update (npm registry watch + headless core update)
+After=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=/bin/bash ${script}
+StandardOutput=append:${log}
+StandardError=append:${log}
+`;
+    // Persistent=true replays a missed daily run at next boot — the
+    // laptop-that-was-off case that left users on v2.
+    const timer = `[Unit]
+Description=Daily ArkaOS auto-update check
+
+[Timer]
+OnCalendar=daily
+Persistent=true
+
+[Install]
+WantedBy=timers.target
+`;
+    const unitDir = join(home, ".config", "systemd", "user");
+    return {
+      kind: "systemd",
+      files: [
+        { path: join(unitDir, SERVICE_NAME), content: service },
+        { path: join(unitDir, TIMER_NAME), content: timer },
+      ],
+    };
+  }
+
+  throw new Error(`unsupported platform for autoupdate: ${os}`);
+}
+
+function _silent(cmd) {
+  try {
+    execSync(cmd, { stdio: "pipe" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+export function enable({ repoRoot = defaultRepoRoot() } = {}) {
+  const root = stableRoot({ repoRoot });
+  const unit = unitFor(process.platform, { repoRoot: root, home: homedir() });
+  mkdirSync(join(homedir(), ".arkaos", "logs"), { recursive: true });
+  for (const f of unit.files) {
+    mkdirSync(dirname(f.path), { recursive: true });
+    writeFileSync(f.path, f.content, "utf8");
+  }
+  if (existsSync(optoutPath())) rmSync(optoutPath());
+  const mainPath = unit.files[0].path;
+  if (unit.kind === "launchd") {
+    _silent(`launchctl unload "${mainPath}"`);
+    if (!_silent(`launchctl load -w "${mainPath}"`)) {
+      return { ok: false, path: mainPath,
+        message: "Plist written but launchctl load failed — it will still run at next login." };
+    }
+  } else if (unit.kind === "systemd") {
+    _silent("systemctl --user daemon-reload");
+    if (!_silent(`systemctl --user enable --now ${TIMER_NAME}`)) {
+      return { ok: false, path: mainPath,
+        message: "Timer written but systemctl enable failed — check 'systemctl --user' availability." };
+    }
+  }
+  return { ok: true, path: mainPath,
+    message: "Auto-update enabled. ArkaOS checks npm daily and updates itself." };
+}
+
+export function disable() {
+  const unit = unitFor(process.platform, { repoRoot: defaultRepoRoot(), home: homedir() });
+  const mainPath = unit.files[0].path;
+  if (unit.kind === "launchd") _silent(`launchctl unload "${mainPath}"`);
+  else if (unit.kind === "systemd") _silent(`systemctl --user disable --now ${TIMER_NAME}`);
+  for (const f of unit.files) if (existsSync(f.path)) rmSync(f.path);
+  // Persisted opt-out: future `npx arkaos update` runs must not re-enable.
+  mkdirSync(join(homedir(), ".arkaos"), { recursive: true });
+  writeFileSync(optoutPath(), new Date().toISOString(), "utf8");
+  return { ok: true, path: mainPath, message: "Auto-update disabled (opt-out persisted)." };
+}
+
+export function status() {
+  let unit;
+  try {
+    unit = unitFor(process.platform, { repoRoot: defaultRepoRoot(), home: homedir() });
+  } catch (err) {
+    return { installed: false, supported: false, optout: false, message: err.message };
+  }
+  return {
+    installed: unit.files.every((f) => existsSync(f.path)),
+    supported: true,
+    optout: existsSync(optoutPath()),
+    kind: unit.kind,
+    path: unit.files[0].path,
+  };
+}
+
+/** Default-on wiring for install/update flows: enable unless the user
+ *  opted out or the platform is unsupported. Never throws. */
+export function ensureDefaultEnabled({ repoRoot = defaultRepoRoot() } = {}) {
+  const s = status();
+  if (!s.supported) return { action: "unsupported" };
+  if (s.optout) return { action: "optout" };
+  if (s.installed) {
+    // Refresh unit content in place (paths/schedule may change between
+    // versions) but do not force a reload storm on every update.
+    try {
+      const root = stableRoot({ repoRoot });
+      const unit = unitFor(process.platform, { repoRoot: root, home: homedir() });
+      for (const f of unit.files) writeFileSync(f.path, f.content, "utf8");
+    } catch {}
+    return { action: "already-enabled" };
+  }
+  const r = enable({ repoRoot });
+  return { action: r.ok ? "enabled" : "partial", message: r.message };
+}
+
+export async function autoupdate(args = []) {
+  const action = (args[0] || "status").toLowerCase();
+  if (action === "enable") {
+    const r = enable();
+    console.log(`  ${r.ok ? "✓" : "⚠"} ${r.message}\n    ${r.path}`);
+  } else if (action === "disable") {
+    const r = disable();
+    console.log(`  ✓ ${r.message}`);
+  } else if (action === "run") {
+    // Foreground one-shot check — same script (and anchor) the daemon runs.
+    const script = join(stableRoot(), "scripts", "auto-update.sh");
+    try {
+      execSync(`/bin/bash "${script}" --force`, { stdio: "inherit" });
+    } catch { process.exitCode = 1; }
+  } else if (action === "status") {
+    const s = status();
+    if (!s.supported) console.log(`  Auto-update not supported here: ${s.message}`);
+    else if (s.optout) console.log(`  Auto-update: DISABLED by user opt-out\n    (re-enable: npx arkaos autoupdate enable)`);
+    else console.log(`  Auto-update: ${s.installed ? "ENABLED" : "disabled"} (${s.kind})\n    ${s.path}`);
+  } else {
+    console.error(`  Unknown autoupdate action: ${action}. Use enable | disable | status | run.`);
+    process.exitCode = 1;
+  }
+}

package/installer/cli.js

@@ -21,6 +21,10 @@ const { values, positionals } = parseArgs({
     force: { type: "boolean", short: "f" },
     "no-system": { type: "boolean" },
     "with-ollama": { type: "boolean" },
+    // Foundation PR-3 — `npx arkaos install --profile <essential|complete|local-ai>`.
+    // Declared so it lands in `values.profile` instead of a free
+    // positional under strict:false (the documented --fix lesson).
+    profile: { type: "string" },
     // PR3.5 v3.74.1 — declared so `npx arkaos doctor --fix` lands in
     // `values.fix` rather than as a free positional under strict:false.
     // Eliminates the dead-branch fallback flagged by Marta in PR2's QG.
@@ -57,12 +61,15 @@ ArkaOS v${VERSION} — The Operating System for AI Agent Teams
 Usage:
   npx arkaos install          Install ArkaOS in current environment
   npx arkaos install --runtime <runtime>  Install for specific runtime
+  npx arkaos install --profile <profile>  Pick the install profile non-interactively
   npx arkaos init             Initialize project config (.arkaos.json)
   npx arkaos update           Update to latest version
   npx arkaos migrate          Migrate from v1 to v2
   npx arkaos migrate-user-data  Move user data (~/.claude/skills/arka/ → ~/.arkaos/)
   npx arkaos dashboard        Start monitoring dashboard
   npx arkaos autostart <enable|disable|status>  Start dashboard on boot
+  npx arkaos autoupdate <enable|disable|status|run>  Keep ArkaOS updated automatically (daily check + notification)
+  npx arkaos menubar <enable|disable|status>  Menu bar launcher (macOS — ▲ quick actions)
   npx arkaos keys             Manage API keys (OpenAI, fal.ai, etc.)
   npx arkaos models           Model Fabric: which model runs each role
   npx arkaos models set <role> <provider>/<model>  Re-route a role
@@ -76,6 +83,9 @@ Options:
   -r, --runtime <name>   Target runtime: claude-code, codex, gemini, cursor
   -p, --path <dir>       Installation directory (default: auto-detect)
   -f, --force            Force reinstall, overwriting existing files
+  --profile <name>       Install profile: essential (venv, hooks, skills,
+                         dashboard, MCPs), complete (+ litellm[proxy], ffmpeg),
+                         local-ai (+ Ollama, local execution model)
   -v, --version          Show version
   -h, --help             Show this help
 
@@ -99,7 +109,20 @@ Examples:
 
 async function main() {
   switch (command) {
-    case "install":
+    case "install": {
+      // Validate --profile up front (before runtime detection) so a
+      // typo fails fast instead of silently falling back to the wizard.
+      let profileFlag;
+      if (values.profile !== undefined) {
+        const { normalizeProfileFlag, INSTALL_PROFILES } = await import("./profile.js");
+        profileFlag = normalizeProfileFlag(values.profile);
+        if (!profileFlag) {
+          console.error(
+            `Invalid --profile "${values.profile}". Valid values: ${INSTALL_PROFILES.join(", ")}`
+          );
+          process.exit(1);
+        }
+      }
       const runtime = values.runtime || await detectRuntime();
       await install({
         runtime,
@@ -107,8 +130,10 @@ async function main() {
         force: values.force,
         skipSystem: values["no-system"],
         withOllama: values["with-ollama"],
+        profileFlag,
       });
       break;
+    }
 
     case "init": {
       const { init } = await import("./init.js");
@@ -134,6 +159,18 @@ async function main() {
       break;
     }
 
+    case "autoupdate": {
+      const { autoupdate } = await import("./autoupdate.js");
+      await autoupdate(positionals.slice(1));
+      break;
+    }
+
+    case "menubar": {
+      const { menubar } = await import("./menubar.js");
+      await menubar(positionals.slice(1));
+      break;
+    }
+
     case "uninstall":
       const { uninstall } = await import("./uninstall.js");
       await uninstall();

package/installer/core-snapshot.js

@@ -35,7 +35,11 @@ import { join, basename } from "node:path";
 // resolve_arkaos_root() checks, so a crash mid-deploy on a fresh install
 // leaves a snapshot that fails validation instead of a core-only root
 // that validates but lacks config/departments/knowledge.
-const SNAPSHOT_DIRS = ["config", "departments", "knowledge", "core"];
+// scripts/ joined in Foundation PR-1: the auto-update daemon's launchd/
+// systemd unit anchors at the snapshot (a unit pointing into the npx
+// cache dies silently on `npm cache clean` — QG blocker). Under 0.5MB
+// after the __pycache__ filter.
+const SNAPSHOT_DIRS = ["config", "departments", "knowledge", "scripts", "core"];
 
 export function deployCoreSnapshot(arkaosRoot, installDir) {
   if (!existsSync(join(arkaosRoot, "core", "sync", "__init__.py"))) return false;

package/installer/detect-runtime.js

@@ -69,6 +69,24 @@ const RUNTIMES = [
     skillsDir: () => join(homedir(), ".cursor", "skills"),
     settingsFile: () => join(homedir(), ".cursor", "settings.json"),
   },
+  {
+    // Foundation PR-6 — OpenCode first-class. Listed AFTER the existing
+    // runtimes so multi-runtime machines keep their current default
+    // (detection picks the first match).
+    id: "opencode",
+    name: "OpenCode",
+    detect: () => {
+      try {
+        execSync("opencode --version", { stdio: "pipe" });
+        return true;
+      } catch {
+        return existsSync(join(homedir(), ".config", "opencode"));
+      }
+    },
+    configDir: () => join(homedir(), ".config", "opencode"),
+    skillsDir: () => join(homedir(), ".config", "opencode", "commands"),
+    settingsFile: () => join(homedir(), ".config", "opencode", "opencode.json"),
+  },
 ];
 
 export async function detectRuntime() {