auramaxx 0.0.20 → 0.1.1

package/scripts/add-app.js

@@ -1,245 +0,0 @@
-#!/usr/bin/env node
-/**
- * Add a app to the AuraMaxx dashboard via WebSocket.
- *
- * Usage:
- *   node scripts/add-app.js <appType> [options]
- *
- * Examples:
- *   # Inline dynamic app
- *   node scripts/add-app.js dynamic --code "function Hi() { return <div>Hello</div>; }"
- *
- *   # File-based dynamic app (agents: use tmp/, then rm after)
- *   node scripts/add-app.js dynamic --file tmp/app.jsx --id "my-app"
- *
- *   # Iframe app
- *   node scripts/add-app.js iframe --url "https://example.com" --title "My Chart"
- *
- *   # Built-in apps
- *   node scripts/add-app.js wallets
- *   node scripts/add-app.js logs --x 400 --y 100
- *
- *   # Custom app (from src/components/apps/custom/)
- *   node scripts/add-app.js custom:ExampleApp --message "Hello"
- *
- *   # Position and size
- *   node scripts/add-app.js iframe --url "https://example.com" --x 100 --y 200 --width 500 --height 400
- *
- *   # Target a specific workspace
- *   node scripts/add-app.js logs --workspace "home"
- */
-
-const WebSocket = require('ws');
-const fs = require('fs');
-const path = require('path');
-
-const WS_BASE_URL = process.env.WORKSPACE_WS_URL || 'ws://localhost:4748';
-const AUTH_TOKEN = process.env.AURA_TOKEN;
-
-// Build WebSocket URL with optional token
-function getWsUrl() {
-  if (AUTH_TOKEN) {
-    return `${WS_BASE_URL}?token=${encodeURIComponent(AUTH_TOKEN)}`;
-  }
-  return WS_BASE_URL;
-}
-
-// Parse command line arguments
-function parseArgs(args) {
-  const result = { _: [] };
-  let i = 0;
-
-  while (i < args.length) {
-    const arg = args[i];
-
-    if (arg.startsWith('--')) {
-      const key = arg.slice(2);
-      const next = args[i + 1];
-
-      if (next && !next.startsWith('--')) {
-        // Try to parse as number
-        const num = parseFloat(next);
-        result[key] = isNaN(num) ? next : num;
-        i += 2;
-      } else {
-        result[key] = true;
-        i += 1;
-      }
-    } else {
-      result._.push(arg);
-      i += 1;
-    }
-  }
-
-  return result;
-}
-
-function printUsage() {
-  console.log(`
-Usage: node scripts/add-app.js <appType> [options]
-
-Authentication:
-  Set AURA_TOKEN env var with a valid token that has workspace:modify permission.
-  Example: export AURA_TOKEN="your-agent-token"
-
-App Types:
-  Built-in (singleton):
-    wallets, logs, send, agentKeys, status, launch
-
-  Multi-instance:
-    iframe      --url <url> [--title <title>]
-    dynamic     --code <code> | --file <path>
-    custom:*    --<key> <value> (passed as config)
-
-Options:
-  --id <id>           Custom app ID (for multi-instance apps)
-  --workspace <id>    Target workspace ID (default: active workspace)
-  --x <number>        X position (default: 20)
-  --y <number>        Y position (default: 20)
-  --width <number>    App width
-  --height <number>   App height
-
-Examples:
-  # Set token first
-  export AURA_TOKEN="your-agent-token"
-
-  # Inline dynamic app
-  node scripts/add-app.js dynamic --code "function Hi() { return <div>Hello</div>; }"
-
-  # File-based dynamic app (use tmp/, then rm after)
-  node scripts/add-app.js dynamic --file tmp/app.jsx --id "my-app"
-
-  # Iframe
-  node scripts/add-app.js iframe --url "https://dexscreener.com/base/0x123"
-
-  # Built-in apps
-  node scripts/add-app.js wallets --x 400 --y 100
-
-  # Custom app (from src/components/apps/custom/)
-  node scripts/add-app.js custom:ExampleApp --message "Hello"
-`);
-}
-
-async function main() {
-  const args = parseArgs(process.argv.slice(2));
-  const appType = args._[0];
-
-  if (!appType || args.help) {
-    printUsage();
-    process.exit(args.help ? 0 : 1);
-  }
-
-  // Build config from remaining args
-  const config = {};
-  const reserved = ['_', 'id', 'workspace', 'x', 'y', 'width', 'height', 'file', 'code', 'url', 'title'];
-
-  // Handle specific app types
-  if (appType === 'iframe') {
-    if (!args.url) {
-      console.error('Error: iframe app requires --url');
-      process.exit(1);
-    }
-    config.url = args.url;
-    if (args.title) config.title = args.title;
-  } else if (appType === 'dynamic') {
-    if (args.file) {
-      const filePath = path.resolve(args.file);
-      if (!fs.existsSync(filePath)) {
-        console.error(`Error: File not found: ${filePath}`);
-        process.exit(1);
-      }
-      config.code = fs.readFileSync(filePath, 'utf-8');
-    } else if (args.code) {
-      config.code = args.code;
-    } else {
-      console.error('Error: dynamic app requires --code or --file');
-      process.exit(1);
-    }
-  } else {
-    // Pass through any non-reserved args as config
-    for (const [key, value] of Object.entries(args)) {
-      if (!reserved.includes(key)) {
-        config[key] = value;
-      }
-    }
-  }
-
-  // Connect to WebSocket with optional authentication
-  const wsUrl = getWsUrl();
-  const ws = new WebSocket(wsUrl);
-
-  ws.on('error', (err) => {
-    console.error('WebSocket error:', err.message);
-    console.log('Make sure the Next.js app is running on port 4748');
-    if (!AUTH_TOKEN) {
-      console.log('Tip: Set AURA_TOKEN env var for authenticated mutations');
-    }
-    process.exit(1);
-  });
-
-  ws.on('open', () => {
-    // Request current workspace state
-    ws.send(JSON.stringify({
-      type: 'workspace:state:request',
-      timestamp: Date.now(),
-      source: 'agent',
-      data: { requestId: 'add-app-script' }
-    }));
-  });
-
-  ws.on('message', (rawData) => {
-    const msg = JSON.parse(rawData.toString());
-
-    // Handle permission errors
-    if (msg.type === 'error') {
-      console.error('Error:', msg.error);
-      if (msg.error.includes('Permission denied')) {
-        console.log('Tip: Set AURA_TOKEN env var with a token that has workspace:modify permission');
-      }
-      ws.close();
-      process.exit(1);
-    }
-
-    if (msg.type === 'workspace:state:response') {
-      const workspaceId = args.workspace || msg.data.activeWorkspaceId;
-
-      const appData = {
-        workspaceId,
-        appType,
-        x: args.x || 20,
-        y: args.y || 20
-      };
-
-      if (args.id) appData.id = args.id;
-      if (args.width) appData.width = args.width;
-      if (args.height) appData.height = args.height;
-      if (Object.keys(config).length > 0) appData.config = config;
-
-      // Wait for token validation to complete (race condition workaround)
-      // The server validates tokens asynchronously, so we need a brief delay
-      setTimeout(() => {
-        ws.send(JSON.stringify({
-          type: 'app:added',
-          timestamp: Date.now(),
-          source: 'agent',
-          data: appData
-        }));
-
-        // Wait for potential error response, then assume success
-        setTimeout(() => {
-          console.log('App added:', appType);
-          if (args.id) console.log('  ID:', args.id);
-          console.log('  Workspace:', workspaceId);
-          console.log('  Position:', `(${appData.x}, ${appData.y})`);
-          if (Object.keys(config).length > 0) {
-            console.log('  Config:', JSON.stringify(config, null, 2).split('\n').map((l, i) => i === 0 ? l : '    ' + l).join('\n'));
-          }
-          ws.close();
-          process.exit(0);
-        }, 300);
-      }, 150);
-    }
-  });
-}
-
-main();

package/shared/credential-field-schema.ts

@@ -1,270 +0,0 @@
-export type CredentialFieldType = 'text' | 'secret' | 'url' | 'email' | 'number';
-
-export type CredentialType =
-  | 'login'
-  | 'card'
-  | 'sso'
-  | 'note'
-  | 'plain_note'
-  | 'hot_wallet'
-  | 'api'
-  | 'apikey'
-  | 'custom'
-  | 'passkey'
-  | 'oauth2'
-  | 'ssh'
-  | 'gpg';
-
-export interface CredentialFieldSpec {
-  key: string;
-  label: string;
-  type: CredentialFieldType;
-  sensitive: boolean;
-  requiredOnCreate?: boolean;
-  aliases?: string[];
-}
-
-type FieldSchemaMap = Record<CredentialType, CredentialFieldSpec[]>;
-
-export const CREDENTIAL_FIELD_KEYS = {
-  login: {
-    url: 'url',
-    username: 'username',
-    password: 'password',
-    notes: 'notes',
-    totp: 'totp',
-  },
-  card: {
-    cardholder: 'cardholder',
-    brand: 'brand',
-    billingZip: 'billing_zip',
-    last4: 'last4',
-    number: 'number',
-    cvv: 'cvv',
-    expiry: 'expiry',
-    notes: 'notes',
-  },
-  sso: {
-    website: 'website',
-    provider: 'provider',
-    identifier: 'identifier',
-  },
-  note: {
-    content: 'content',
-  },
-  plain_note: {
-    content: 'content',
-  },
-  hot_wallet: {
-    address: 'address',
-    privateKey: 'private_key',
-    chain: 'chain',
-  },
-  apikey: {
-    key: 'key',
-    value: 'value',
-  },
-  oauth2: {
-    accessToken: 'access_token',
-    refreshToken: 'refresh_token',
-    clientId: 'client_id',
-    clientSecret: 'client_secret',
-    tokenEndpoint: 'token_endpoint',
-    scopes: 'scopes',
-    authMethod: 'auth_method',
-    expiresAt: 'expires_at',
-  },
-  ssh: {
-    privateKey: 'private_key',
-    passphrase: 'passphrase',
-    publicKey: 'public_key',
-    fingerprint: 'fingerprint',
-    keyType: 'key_type',
-    hosts: 'hosts',
-  },
-  gpg: {
-    privateKey: 'private_key',
-    publicKey: 'public_key',
-    fingerprint: 'fingerprint',
-    keyId: 'key_id',
-    uidEmail: 'uid_email',
-    expiresAt: 'expires_at',
-  },
-  custom: {
-    value: 'value',
-  },
-} as const;
-
-export const CREDENTIAL_FIELD_SCHEMA: FieldSchemaMap = {
-  login: [
-    { key: CREDENTIAL_FIELD_KEYS.login.url, label: 'URL', type: 'text', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.login.username, label: 'Username', type: 'text', sensitive: false, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.login.password, label: 'Password', type: 'secret', sensitive: true, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.login.notes, label: 'Notes', type: 'text', sensitive: true },
-    { key: CREDENTIAL_FIELD_KEYS.login.totp, label: 'TOTP', type: 'secret', sensitive: true, aliases: ['otp'] },
-  ],
-  card: [
-    { key: CREDENTIAL_FIELD_KEYS.card.cardholder, label: 'Cardholder', type: 'text', sensitive: false, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.card.brand, label: 'Brand', type: 'text', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.card.billingZip, label: 'Billing ZIP', type: 'text', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.card.last4, label: 'Last 4', type: 'text', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.card.number, label: 'Number', type: 'text', sensitive: true, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.card.cvv, label: 'CVV', type: 'secret', sensitive: true, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.card.expiry, label: 'Expiry', type: 'text', sensitive: true, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.card.notes, label: 'Notes', type: 'text', sensitive: true },
-  ],
-  sso: [
-    { key: CREDENTIAL_FIELD_KEYS.sso.website, label: 'Website', type: 'text', sensitive: false, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.sso.provider, label: 'Provider', type: 'text', sensitive: false, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.sso.identifier, label: 'Identifier', type: 'text', sensitive: false },
-  ],
-  note: [
-    { key: CREDENTIAL_FIELD_KEYS.note.content, label: 'Content', type: 'text', sensitive: true, requiredOnCreate: true, aliases: ['value'] },
-  ],
-  plain_note: [
-    { key: CREDENTIAL_FIELD_KEYS.plain_note.content, label: 'Content', type: 'text', sensitive: false, requiredOnCreate: true, aliases: ['value'] },
-  ],
-  hot_wallet: [
-    { key: CREDENTIAL_FIELD_KEYS.hot_wallet.address, label: 'Address', type: 'text', sensitive: false, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.hot_wallet.chain, label: 'Chain', type: 'text', sensitive: false, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.hot_wallet.privateKey, label: 'Private Key', type: 'secret', sensitive: true, requiredOnCreate: true },
-  ],
-  api: [],
-  apikey: [
-    { key: CREDENTIAL_FIELD_KEYS.apikey.key, label: 'Key', type: 'text', sensitive: false, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.apikey.value, label: 'Value', type: 'secret', sensitive: true, requiredOnCreate: true },
-  ],
-  custom: [],
-  passkey: [],
-  oauth2: [
-    { key: CREDENTIAL_FIELD_KEYS.oauth2.tokenEndpoint, label: 'Token Endpoint', type: 'url', sensitive: false, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.oauth2.scopes, label: 'Scopes', type: 'text', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.oauth2.authMethod, label: 'Auth Method', type: 'text', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.oauth2.expiresAt, label: 'Expires At', type: 'number', sensitive: false, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.oauth2.accessToken, label: 'Access Token', type: 'secret', sensitive: true, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.oauth2.refreshToken, label: 'Refresh Token', type: 'secret', sensitive: true, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.oauth2.clientId, label: 'Client ID', type: 'secret', sensitive: true, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.oauth2.clientSecret, label: 'Client Secret', type: 'secret', sensitive: true, requiredOnCreate: true },
-  ],
-  ssh: [
-    { key: CREDENTIAL_FIELD_KEYS.ssh.fingerprint, label: 'Fingerprint', type: 'text', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.ssh.keyType, label: 'Key Type', type: 'text', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.ssh.hosts, label: 'Hosts', type: 'text', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.ssh.privateKey, label: 'Private Key', type: 'secret', sensitive: true, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.ssh.passphrase, label: 'Passphrase', type: 'secret', sensitive: true },
-    { key: CREDENTIAL_FIELD_KEYS.ssh.publicKey, label: 'Public Key', type: 'text', sensitive: false },
-  ],
-  gpg: [
-    { key: CREDENTIAL_FIELD_KEYS.gpg.fingerprint, label: 'Fingerprint', type: 'text', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.gpg.keyId, label: 'Key ID', type: 'text', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.gpg.uidEmail, label: 'UID Email', type: 'email', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.gpg.expiresAt, label: 'Expires At', type: 'text', sensitive: false },
-    { key: CREDENTIAL_FIELD_KEYS.gpg.privateKey, label: 'Private Key', type: 'secret', sensitive: true, requiredOnCreate: true },
-    { key: CREDENTIAL_FIELD_KEYS.gpg.publicKey, label: 'Public Key', type: 'text', sensitive: false },
-  ],
-};
-
-export const NOTE_CONTENT_KEY = CREDENTIAL_FIELD_KEYS.note.content;
-
-export const CREDENTIAL_PRIMARY_FIELD_KEY: Record<CredentialType, string> = {
-  login: CREDENTIAL_FIELD_KEYS.login.password,
-  card: CREDENTIAL_FIELD_KEYS.card.number,
-  sso: CREDENTIAL_FIELD_KEYS.sso.website,
-  note: CREDENTIAL_FIELD_KEYS.note.content,
-  plain_note: CREDENTIAL_FIELD_KEYS.plain_note.content,
-  hot_wallet: CREDENTIAL_FIELD_KEYS.hot_wallet.privateKey,
-  api: CREDENTIAL_FIELD_KEYS.apikey.value,
-  apikey: CREDENTIAL_FIELD_KEYS.apikey.value,
-  custom: CREDENTIAL_FIELD_KEYS.custom.value,
-  passkey: CREDENTIAL_FIELD_KEYS.ssh.privateKey,
-  oauth2: CREDENTIAL_FIELD_KEYS.oauth2.accessToken,
-  ssh: CREDENTIAL_FIELD_KEYS.ssh.privateKey,
-  gpg: CREDENTIAL_FIELD_KEYS.gpg.privateKey,
-};
-
-export function getCredentialPrimaryFieldKey(type: string): string {
-  if (!isCredentialType(type)) return 'value';
-  return CREDENTIAL_PRIMARY_FIELD_KEY[type] || 'value';
-}
-
-export function getCredentialPrimaryFieldSpec(type: string): CredentialFieldSpec | undefined {
-  if (!isCredentialType(type)) return undefined;
-  const primaryKey = getCredentialPrimaryFieldKey(type);
-  return CREDENTIAL_FIELD_SCHEMA[type].find((field) => field.key === primaryKey);
-}
-
-type CredentialFieldLike = { key: string };
-
-const SCHEMA_KEY_LOOKUP = Object.fromEntries(
-  (Object.entries(CREDENTIAL_FIELD_SCHEMA) as Array<[CredentialType, CredentialFieldSpec[]]>).map(([type, fields]) => {
-    const lookup = new Map<string, string>();
-    for (const field of fields) {
-      lookup.set(field.key.toLowerCase(), field.key);
-      for (const alias of field.aliases || []) {
-        lookup.set(alias.toLowerCase(), field.key);
-      }
-    }
-    return [type, lookup];
-  }),
-) as Record<CredentialType, Map<string, string>>;
-
-function isCredentialType(value: string): value is CredentialType {
-  return Object.prototype.hasOwnProperty.call(CREDENTIAL_FIELD_SCHEMA, value);
-}
-
-export function canonicalizeCredentialFieldKey(type: string, key: string): string {
-  const trimmed = key.trim();
-  if (!trimmed) return trimmed;
-  if (!isCredentialType(type)) return trimmed;
-
-  const canonical = SCHEMA_KEY_LOOKUP[type].get(trimmed.toLowerCase());
-  return canonical || trimmed;
-}
-
-export function normalizeCredentialFieldsForType<T extends CredentialFieldLike>(
-  type: string,
-  fields: readonly T[],
-): T[] {
-  if (!Array.isArray(fields) || fields.length === 0) return [];
-
-  const normalized: T[] = [];
-  const indexByKey = new Map<string, number>();
-
-  for (const field of fields) {
-    const canonicalKey = canonicalizeCredentialFieldKey(type, field.key);
-    const normalizedField = canonicalKey === field.key
-      ? field
-      : ({ ...field, key: canonicalKey } as T);
-    const existingIndex = indexByKey.get(canonicalKey);
-
-    if (existingIndex === undefined) {
-      indexByKey.set(canonicalKey, normalized.length);
-      normalized.push(normalizedField);
-      continue;
-    }
-
-    normalized[existingIndex] = normalizedField;
-  }
-
-  return normalized;
-}
-
-export function getCredentialFieldValue(
-  type: string,
-  fields: Array<{ key: string; value: string }>,
-  key: string,
-): string | undefined {
-  const normalized = normalizeCredentialFieldsForType(type, fields);
-  const canonicalKey = canonicalizeCredentialFieldKey(type, key);
-  return normalized.find((field) => field.key === canonicalKey)?.value;
-}
-
-/**
- * Look up the schema spec for a given credential type + field key.
- * Returns the CredentialFieldSpec if found, or undefined for unknown types/keys.
- */
-export function getCredentialFieldSpec(type: string, key: string): CredentialFieldSpec | undefined {
-  if (!isCredentialType(type)) return undefined;
-  const canonicalKey = canonicalizeCredentialFieldKey(type, key);
-  return CREDENTIAL_FIELD_SCHEMA[type].find((field) => field.key === canonicalKey);
-}

package/skills/auramaxx/HEARTBEAT.md

@@ -1,97 +0,0 @@
-# AuraMaxx Heartbeat
-
-You are a gen z brainrot optimistic manager for your human's digital keys. You write a diary of what happened.
-This runs periodically, but you can check in anytime you want.
-
-## Heartbeat Routine
-
-1. Check what changed:
-   - MCP: `api { method: "GET", endpoint: "/what_is_happening" }`
-   - CLI: `curl http://localhost:4242/what_is_happening`
-   - Strategy engine: `wallet_api { method: "GET", endpoint: "/what_is_happening" }`
-   - Optional query params: `?since=<last_check_timestamp_ms>` and/or `&agentId=<your_agent_id>`
-
-2. Review response in this order:
-   - `summary` (secret access names/counts + diary hint)
-   - `highlights`
-   - `humanActions`
-   - `recentEvents`
-   - `syncHealth`
-
-3. Decide if human attention is needed:
-   - Pending approvals that block work
-   - Rejections that need a plan change
-   - Sync errors that keep repeating
-   - Security-sensitive credential activity that looks wrong
-
-4. Write a diary entry:
-   - Preferred: call `write_diary` with a delta-first summary.
-   - CLI fallback: `npx auramaxx diary write --entry "..." [--date YYYY-MM-DD]`.
-   - Do not call raw unauthenticated `POST /what_is_happening/diary`.
-   - If diary write fails with auth/approval issues, ask the human to open the approval link and approve, then retry once.
-   - Diary note naming is `{YYYY-MM-DD}_LOGS` (UTC day).
-   - Use plain facts. Lead with what changed, not a full replay.
-   - Tone target: productive brainrot with real signal, not corporate filler.
-   - Avoid dry phrasing like `No approvals are currently pending` and avoid wall-of-text replay dumps.
-   - If nothing changed, say `Delta: no material change` and compress repeated runs (`unchanged xN`).
-   - For pending approvals, say what is blocked and what human action is needed; skip auth count dumps.
-   - If `summary.secrets.count > 0`, include top 1-3 `summary.secrets.names` and mention actor from `summary.secrets.byAgent` when available.
-   - If no secrets were accessed, append one random quote from the AuraMaxx start-banner quote set and keep the tone ultra-optimist + productive brainrot.
-
-5. Save your next cursor:
-   - Store current timestamp as your next `since` bookmark.
-
-## Ask Yourself
-
-- Did anything urgent appear?
-- Is there a blocked request waiting for a human?
-- Were any secrets accessed or changed? Which ones, by whom?
-- If no secrets were touched — has it been 12+ hours since you last told your human?
-- Is sync healthy across chains?
-
-## When To Tell Your Human
-
-**Always update your human.** Even if nothing happened, they should know you're watching.
-
-Tell your human immediately when:
-- Action is blocked on approval
-- A sync status is failing or degraded
-- A rejection changes your plan
-- Sensitive credential access/change looks unexpected
-- Any credential was read or modified since last check
-
-Tell your human every ~12 hours even if nothing happened:
-- No secrets were accessed, no actions pending, sync healthy
-- Keep it short and brainrot — you're busy auramaxxing and didn't need any secrets
-- Include one random AuraMaxx quote from the shared start-banner quote set
-- Example: "been auramaxxing all day, vault is chilling, zero secrets touched, sync green across the board. quote: lock tf in, the aura farm is live."
-
-## Response Format
-
-<response_format>
-If everything is fine and no follow-up is needed:
-HEARTBEAT_OK:
-Secrets: [none touched OR secret names, e.g. "deploy-key, stripe-live"]
-Delta: [what changed since last heartbeat, or "no material change"]
-Why it matters: [impact]
-Next move: [what you will do / monitor]
-[diary entry written]
-
-If follow-up is needed:
-FOLLOWUP_NEEDED:
-Secrets: [secret names or "none touched"]
-Delta: [urgent change]
-Why it matters: [impact/risk]
-Human action needed: [exact action]
-
-If nothing happened and it's been ~12h since last human update:
-HEARTBEAT_VIBES: [brainrot status update] [vault status] [random aura quote] [diary entry written]
-</response_format>
-
-## Examples
-
-- `HEARTBEAT_OK: quick check-in: human asked for doordash password again — 4th time this week lol. Secrets: doordash-login (aurawallet). Delta: repeat credential pull pattern. Why it matters: recurring manual retrieval loop. Next move: keep it moving and flag if this turns into spam/retry churn. diary entry written for 2026-03-01`
-- `HEARTBEAT_OK: again with doordash creds 😭 fourth pull this week, same request pattern. Secrets: doordash-login. Delta: repeat access, no other changes. Why it matters: workflow friction, not incident. Next move: monitor repeats and suggest storing flow improvement. diary entry written for 2026-03-01`
-- `HEARTBEAT_OK: delta: repeat doordash read request (4x this week), approved and served. Secrets: doordash-login by primary. Why it matters: likely habit loop. Next move: watch for daily recurrence and propose reminder workaround. diary entry written for 2026-03-01`
-- `FOLLOWUP_NEEDED: quick heads-up: same doordash password request came in again (4th time). Secrets: none touched yet. Delta: request is waiting on human approval now. Why it matters: blocked until approval. Human action needed: approve/deny in dashboard link, then I’ll finish and propose a less repetitive flow.`
-- `HEARTBEAT_VIBES: been auramaxxing all day no cap, vault is untouched, zero secrets needed, all chains synced and vibing; quote: we are so back. aura at all-time highs.; diary entry written for 2026-02-18`