atris 3.44.0 → 3.46.0

package/commands/codex-goal.js

@@ -5,7 +5,6 @@ const { spawnSync } = require('child_process');
 const { hasFlag } = require('../lib/arg-parser');
 
 const SCHEMA = 'atris.codex_goal.v1';
-const CONFIRM_RESET_FLAG = '--confirm-complete-goal-reset';
 
 // Preserve the existing rule that the next token is a value, even if it is a flag.
 function readFollowingFlag(args, name, fallback = '') {
@@ -21,10 +20,6 @@ function expandHome(filePath) {
   return filePath;
 }
 
-function safeStamp(value = new Date().toISOString()) {
-  return value.replace(/[:.]/g, '-');
-}
-
 function sqlString(value) {
   return `'${String(value).replace(/'/g, "''")}'`;
 }
@@ -76,27 +71,6 @@ function runGoalQuery(args, buildSql) {
   return runSqliteJson(ctx.goalsDb, ctx.prefix + buildSql(ctx.threadsTable));
 }
 
-function defaultRunsDir(args = []) {
-  return path.resolve(readFollowingFlag(args, '--out-dir', path.join(process.cwd(), '.atris', 'runs')));
-}
-
-function ensurePrivateDir(dir) {
-  fs.mkdirSync(dir, { recursive: true });
-  try {
-    fs.chmodSync(dir, 0o700);
-  } catch {
-    // Best effort: some filesystems do not support POSIX permissions.
-  }
-}
-
-function chmodPrivate(filePath) {
-  try {
-    fs.chmodSync(filePath, 0o600);
-  } catch {
-    // Best effort: some filesystems do not support POSIX permissions.
-  }
-}
-
 function runSqliteOnce(dbPath, sql, readonly) {
   const sqliteArgs = [];
   if (readonly) sqliteArgs.push('-readonly');
@@ -202,25 +176,6 @@ function resolveThreadGoal(args) {
   return null;
 }
 
-function writeReceipt(outDir, payload) {
-  ensurePrivateDir(outDir);
-  const receiptPath = path.join(outDir, `codex-goal-${payload.action}-${safeStamp(payload.finished_at || payload.started_at)}.json`);
-  const withPath = { ...payload, receipt_path: receiptPath };
-  fs.writeFileSync(receiptPath, `${JSON.stringify(withPath, null, 2)}\n`, 'utf8');
-  chmodPrivate(receiptPath);
-  return withPath;
-}
-
-function backupSqliteDb(dbPath, backupPath) {
-  const result = spawnSync('sqlite3', [dbPath, `VACUUM INTO ${sqlString(backupPath)};`], { encoding: 'utf8' });
-  if (result.error) throw new Error(`sqlite3 backup failed: ${result.error.message}`);
-  if (result.status !== 0) {
-    const detail = (result.stderr || result.stdout || '').trim();
-    throw new Error(detail || `sqlite3 backup exited with status ${result.status}`);
-  }
-  chmodPrivate(backupPath);
-}
-
 function printJsonOrText(payload, lines, asJson) {
   if (asJson) {
     console.log(JSON.stringify(payload, null, 2));
@@ -252,92 +207,41 @@ function statusCommand(args) {
   printJsonOrText(payload, [
     `Codex goals: ${goals.length} recent`,
     ...goals.map((row) => `- ${row.status} ${row.thread_id}: ${row.objective}`),
-    'Reset requires --thread <id> or --latest.',
+    'Completed tasks stay closed. Start new work in a new Codex task.',
   ], asJson);
 }
 
 function resetCommand(args) {
   const asJson = hasFlag(args, '--json');
   const dbPath = resolveStatePath(args);
-  const outDir = defaultRunsDir(args);
   ensureStateDb(dbPath);
 
-  const startedAt = new Date().toISOString();
   const goal = resolveThreadGoal(args);
   if (!goal) {
     throw new Error('No Codex goal found. Pass --thread <thread-id> or --latest.');
   }
-  if (goal.status !== 'complete') {
-    throw new Error(`Refusing to reset ${goal.status} goal. Complete the native Codex goal first.`);
-  }
-  if (!hasFlag(args, CONFIRM_RESET_FLAG)) {
-    const payload = {
-      ok: false,
-      schema: SCHEMA,
-      action: 'reset',
-      status: 'needs_confirmation',
-      state_path: dbPath,
-      goal,
-      required_flag: CONFIRM_RESET_FLAG,
-      finished_at: new Date().toISOString(),
-    };
-    printJsonOrText(payload, [
-      'Codex goal reset blocked: confirmation required.',
-      `Thread: ${goal.thread_id}`,
-      `Objective: ${goal.objective}`,
-      `Run again with ${CONFIRM_RESET_FLAG} to back up state and clear this completed goal slot.`,
-    ], asJson);
-    process.exitCode = 1;
-    return;
-  }
-
-  ensurePrivateDir(outDir);
-  const stamp = safeStamp(startedAt);
-  const backupPath = path.join(outDir, `codex-state-before-goal-reset-${goal.thread_id}-${stamp}.sqlite`);
-  const dumpPath = path.join(outDir, `codex-goal-row-before-reset-${goal.thread_id}-${stamp}.json`);
-  backupSqliteDb(dbPath, backupPath);
-  fs.writeFileSync(dumpPath, `${JSON.stringify(goal, null, 2)}\n`, 'utf8');
-  chmodPrivate(dumpPath);
-
-  const rows = runSqliteJson(dbPath, `
-BEGIN IMMEDIATE;
-DELETE FROM thread_goals
-WHERE thread_id = ${sqlString(goal.thread_id)}
-  AND goal_id = ${sqlString(goal.goal_id)}
-  AND status = 'complete';
-SELECT changes() AS deleted;
-COMMIT;
-`, { readonly: false });
-  const deleted = Number(rows[0]?.deleted || 0);
-  const remaining = readGoalByThread(args, goal.thread_id);
-  const ok = deleted === 1 && !remaining;
-  const payload = writeReceipt(outDir, {
-    ok,
+  const completed = goal.status === 'complete';
+  const nextAction = completed
+    ? 'Create a new Codex task for new or recurring work. Leave this completed task closed.'
+    : 'Continue or hand off the current task without clearing its goal.';
+  const payload = {
+    ok: false,
     schema: SCHEMA,
     action: 'reset',
-    status: ok ? 'reset' : 'failed',
-    thread_id: goal.thread_id,
-    goal_id: goal.goal_id,
-    objective: goal.objective,
-    previous_status: goal.status,
-    deleted,
+    status: completed ? 'completed_task_closed' : 'active_task_unchanged',
     state_path: dbPath,
-    backup_path: backupPath,
-    dump_path: dumpPath,
-    started_at: startedAt,
+    goal,
+    mutated: false,
     finished_at: new Date().toISOString(),
-    next_action: ok ? 'Call the native Codex create_goal tool in this same thread, then keep Atris Mission/member state as the durable loop.' : 'Inspect backup/dump before retrying.',
-  });
+    next_action: nextAction,
+  };
 
   printJsonOrText(payload, [
-    ok ? 'Codex goal slot reset.' : 'Codex goal reset failed.',
-    `Thread: ${goal.thread_id}`,
-    `Backup: ${path.relative(process.cwd(), backupPath)}`,
-    `Dump: ${path.relative(process.cwd(), dumpPath)}`,
-    `Receipt: ${path.relative(process.cwd(), payload.receipt_path)}`,
-    `Next: ${payload.next_action}`,
+    completed ? 'Completed Codex task stays closed.' : `Codex goal reset refused: this task is ${goal.status}.`,
+    `Objective: ${goal.objective}`,
+    `Next: ${nextAction}`,
   ], asJson);
-  if (!ok) process.exitCode = 1;
+  process.exitCode = 1;
 }
 
 function usage() {
@@ -345,19 +249,17 @@ function usage() {
     'atris codex-goal - guarded bridge for native Codex thread goals',
     '',
     '  atris codex-goal status [--thread <id>|--latest] [--json]',
-    `  atris codex-goal reset --thread <id> ${CONFIRM_RESET_FLAG}`,
+    '  atris codex-goal reset --thread <id> [--json]  Report why the task cannot be reset',
     '',
     'Flags:',
     '  --state <path>      Codex goals DB (default ~/.codex/goals_1.sqlite, falls back to state_5.sqlite)',
     '  --threads-db <path> Codex thread metadata DB for cwd/title (default ~/.codex/state_5.sqlite)',
     '  --latest           Use the latest Codex goal whose thread cwd matches the current directory',
-    '  --out-dir <path>   Receipt/backup directory (default .atris/runs)',
     '',
-    'Reset guardrails:',
-    '- only completed native Codex goals can be reset',
-    '- reset backs up the SQLite DB before mutation',
-    '- reset dumps the exact deleted row and writes a receipt',
-    '- the next native goal must still be created by the active Codex thread',
+    'Task boundary:',
+    '- active tasks continue in their current thread',
+    '- completed tasks retain their final goal state',
+    '- new work and recurring monitors use a new dedicated Codex task',
   ].join('\n');
 }
 

package/commands/computer.js

@@ -22,7 +22,7 @@ const os = require('os');
 const path = require('path');
 const readline = require('readline');
 const { spawnSync } = require('child_process');
-const { loadCredentials, decodeJwtClaims, promptUser } = require('../utils/auth');
+const { loadCredentials, decodeJwtClaims, promptUser, abortOnAuthFailure } = require('../utils/auth');
 const { apiRequestJson, getApiBaseUrl, getAppBaseUrl } = require('../utils/api');
 const { loadBusinesses, saveBusinesses } = require('./business');
 const {
@@ -2258,15 +2258,18 @@ async function runBusinessPromptViaRunnerProxy(token, ctx, prompt, options = {})
 
 async function ensureBusinessAwake(token, ctx, maxWaitSec = 90, options = {}) {
   const status = await apiRequestJson(`/business/${ctx.businessId}/ai-computer/status`, { method: 'GET', token });
+  abortOnAuthFailure(status);
   if (status.ok && status.data && status.data.status === 'running' && status.data.endpoint) {
     return true;
   }
   if (!options.quiet) process.stdout.write('  Waking business computer... ');
-  await apiRequestJson(`/business/${ctx.businessId}/ai-computer/wake`, { method: 'POST', token, body: {} });
+  const wake = await apiRequestJson(`/business/${ctx.businessId}/ai-computer/wake`, { method: 'POST', token, body: {} });
+  abortOnAuthFailure(wake, !options.quiet);
   const start = Date.now();
   while (Date.now() - start < maxWaitSec * 1000) {
     await sleep(3000);
     const next = await apiRequestJson(`/business/${ctx.businessId}/ai-computer/status`, { method: 'GET', token });
+    abortOnAuthFailure(next, !options.quiet);
     if (next.ok && next.data && next.data.status === 'running' && next.data.endpoint) {
       const elapsed = Math.floor((Date.now() - start) / 1000);
       if (!options.quiet) console.log(`awake (${elapsed}s)`);

package/commands/improve.js

@@ -918,10 +918,15 @@ function formatImproveReport(result = {}) {
 }
 
 // ---------------------------------------------------------------------------
-// atris improve revisions — the gauge for the north-star metric:
-// operator revisions after landing = 0. an agent landing is a commit carrying
-// the atris co-author trailer (atris-builder[bot]); if a human commit touches
-// any of the same files within 72 hours, that landing failed the guarantee.
+// atris improve revisions: the gauge for the north-star metric:
+// operator revisions after landing = 0. an agent landing is a commit whose
+// Co-authored-by trailer matches a known agent signature (atris-builder[bot],
+// claude, cursor, codex, chatgpt, openai), case-insensitive, and only on
+// those trailer lines. commits with no trailer still count as human, so the
+// metric overcounts revisions; accepted on purpose.
+//
+// if a human commit touches any of the same files within 72 hours, that
+// landing failed the guarantee.
 //
 // renames are NOT followed: `git log --follow` is per-file and would cost one
 // subprocess per file per landing, so a post-landing rename reads as "no
@@ -930,9 +935,26 @@ function formatImproveReport(result = {}) {
 const REVISIONS_SCHEMA = 'atris.improve_revisions.v1';
 const REVISION_WINDOW_HOURS = 72;
 const REVISION_WINDOW_MS = REVISION_WINDOW_HOURS * 60 * 60 * 1000;
-const AGENT_TRAILER_MARKER = 'atris-builder[bot]';
+const AGENT_TRAILER_MARKERS = [
+  'atris-builder[bot]',
+  'claude',
+  'cursor',
+  'codex',
+  'chatgpt',
+  'openai',
+];
 const DEFAULT_REVISIONS_DAYS = 14;
 
+function isAgentCommitBody(body) {
+  const markers = AGENT_TRAILER_MARKERS.map((m) => m.toLowerCase());
+  for (const line of String(body || '').split(/\r?\n/)) {
+    if (!/^\s*co-authored-by\s*:/i.test(line)) continue;
+    const lower = line.toLowerCase();
+    if (markers.some((m) => lower.includes(m))) return true;
+  }
+  return false;
+}
+
 function parseRevisionsArgs(argv = []) {
   const args = Array.isArray(argv) ? argv : [];
   const opts = { days: DEFAULT_REVISIONS_DAYS, json: false, help: false };
@@ -999,7 +1021,7 @@ function collectRevisionSignals(root, options = {}) {
         at: String(at || '').trim(),
         ms: timestampMs(at),
         subject: String(subject || '').trim(),
-        isAgent: String(body || '').includes(AGENT_TRAILER_MARKER),
+        isAgent: isAgentCommitBody(body),
       };
     })
     .filter((c) => c.hash && c.ms != null);
@@ -1350,6 +1372,7 @@ module.exports = {
   runLoopDoctor,
   collectRevisionSignals,
   formatRevisionsReport,
+  isAgentCommitBody,
   runLocalFallback,
   summarizeLocalMissionRun,
   LOCAL_FALLBACK_ARGS,

package/commands/init.js

@@ -3,6 +3,12 @@ const path = require('path');
 const { ensureExperimentsFramework } = require('./experiments');
 const { ensureWikiScaffold } = require('../lib/wiki');
 const { upsertAtrisClaudeBootBlock } = require('../lib/claude-boot-block');
+const {
+  upsertAgentVoiceCard,
+  upsertClaudeVoiceHook,
+  upsertCursorVoiceCard,
+  voiceCardForRoot,
+} = require('../lib/voice-card');
 
 /**
  * Detect project context by scanning project structure
@@ -732,6 +738,12 @@ Every agent should leave four artifacts another agent can trust:
 | Proof ready | \`atris task ready <id> --proof "<commands or receipt>" --result "<day-one PM sentence>"\` |
 | Human accept | \`atris task accept <id>\` |
 
+Every created task leads with three plain fields: what changes, why it matters,
+and what done looks like. Keep the exact title, files, commands, constraints,
+events, and proof underneath unchanged. Planned work offers approve or ask for
+a change through the existing Plan/Do gates; finished work uses the existing
+accept/revise gates and never skips proof.
+
 Do not rely on chat context. Put the task, file pointers, and proof on disk.
 Do not write new operating doctrine here first; add it to Atris policy, skills,
 wiki, or \`atris/atris.md\`, then regenerate this adapter if needed.
@@ -758,7 +770,8 @@ Human accept      -> task Done + AgentXP awarded
 \`\`\`
 
 Always-on agents should move proof-backed work to Review, complete their native
-goal, then continue the mission loop with the next goal. They must not run
+goal, then stop that task. The next goal or recurring monitor starts in a new
+dedicated task. They must not run
 \`atris task accept\` or claim AgentXP unless a human approved the proof.
 
 Mission-shaped user intent wins before normal task selection. If the user
@@ -831,6 +844,8 @@ member -> mission start --verify -> status --status active -> one bounded step -
 
 **Protocol:** See \`atris/atris.md\` for full spec.`;
 
+  const voiceCard = voiceCardForRoot(process.cwd());
+
   // .cursorrules for Cursor (legacy)
   const cursorRulesFile = path.join(process.cwd(), '.cursorrules');
   if (!fs.existsSync(cursorRulesFile)) {
@@ -847,12 +862,22 @@ member -> mission start --verify -> status --status active -> one bounded step -
     markReady('adapters', '.cursor/rules/atris.mdc', '✓ Created .cursor/rules/atris.mdc (for Cursor)');
   }
 
+  const cursorVoiceFile = path.join(cursorRulesDir, 'atris-voice.mdc');
+  const cursorVoiceResult = upsertCursorVoiceCard(cursorVoiceFile, voiceCard);
+  if (cursorVoiceResult.action !== 'unchanged') {
+    markReady('adapters', '.cursor/rules/atris-voice.mdc', '✓ Pinned the Atris voice card for Cursor');
+  }
+
   // AGENTS.md for Codex
   const agentsMdFile = path.join(process.cwd(), 'AGENTS.md');
   if (!fs.existsSync(agentsMdFile)) {
     fs.writeFileSync(agentsMdFile, agentInstructions);
     markReady('adapters', 'AGENTS.md', '✓ Created AGENTS.md (for Codex)');
   }
+  const agentsVoiceResult = upsertAgentVoiceCard(agentsMdFile, voiceCard);
+  if (agentsVoiceResult.action !== 'unchanged') {
+    markReady('adapters', 'AGENTS.md voice card', '✓ Pinned the Atris voice card in AGENTS.md');
+  }
 
   // .devin/config.local.json for Devin for Terminal
   const devinConfigDir = path.join(process.cwd(), '.devin');
@@ -1035,14 +1060,11 @@ Read atris/MAP.md. Begin iteration 1.`;
     markReady('adapters', 'atris/CLAUDE.md', '✓ Created atris/CLAUDE.md (for Claude Code)');
   }
 
-  // .claude/settings.json with SessionStart hook for auto-loading Atris
+  // .claude/settings.json with startup and per-prompt Atris hooks
   const claudeSettingsDir = path.join(process.cwd(), '.claude');
   const claudeSettingsFile = path.join(claudeSettingsDir, 'settings.json');
-  if (!fs.existsSync(claudeSettingsFile)) {
-    if (!fs.existsSync(claudeSettingsDir)) {
-      fs.mkdirSync(claudeSettingsDir, { recursive: true });
-    }
-    const claudeSettings = {
+  const claudeSettingsResult = upsertClaudeVoiceHook(claudeSettingsFile, {
+    initialSettings: {
       hooks: {
         SessionStart: [
           {
@@ -1065,9 +1087,10 @@ Read atris/MAP.md. Begin iteration 1.`;
           }
         ]
       }
-    };
-    fs.writeFileSync(claudeSettingsFile, JSON.stringify(claudeSettings, null, 2));
-    markReady('adapters', '.claude/settings.json', '✓ Created .claude/settings.json (auto-loads Atris on startup)');
+    },
+  });
+  if (claudeSettingsResult.action !== 'unchanged' && claudeSettingsResult.action !== 'skipped') {
+    markReady('adapters', '.claude/settings.json', '✓ Wired Atris into Claude startup and replies');
   }
 
   // Co-author trailer: commits in this workspace credit Atris, same as Claude/Cursor do