create-egregore 0.20.2 → 0.21.0-runtime-mvp.1

package/runtime/prime/bin/capture-run.sh

@@ -14,6 +14,7 @@ set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "$0")/.." && pwd)"
 CONFIG="$SCRIPT_DIR/egregore.json"
 CAPTURE_SCHEMA="egregore-capture/v1"
+GRAPH_ENABLED="${EGREGORE_GRAPH_PROJECTION:-0}"
 
 queue_handoff_completion() {
   local session_id="$1"
@@ -108,7 +109,7 @@ case "$CAPTURE_MODE" in
     # same guarded transition as /wrap after the addressed worker has marked
     # the current Session handed_off.
     ADDRESSED_CONFIG_MODE="$(jq -r '.mode // "connected"' "$CONFIG" 2>/dev/null || echo connected)"
-    if [ "$status" = "0" ] && [ "$ADDRESSED_CONFIG_MODE" = "connected" ]; then
+    if [ "$status" = "0" ] && [ "$ADDRESSED_CONFIG_MODE" = "connected" ] && [ "$GRAPH_ENABLED" = "1" ]; then
       CURRENT_SID="$(cat "$SCRIPT_DIR/.egregore-session-id" 2>/dev/null || true)"
       if [ -z "$CURRENT_SID" ]; then
         PROJ_HASH="$(printf '%s' "$SCRIPT_DIR" | md5 2>/dev/null || printf '%s' "$SCRIPT_DIR" | md5sum 2>/dev/null | cut -d' ' -f1)"
@@ -153,6 +154,7 @@ while [ $# -gt 0 ]; do
     --no-push) NO_PUSH=1; shift ;;
     --async-push) ASYNC_PUSH=1; shift ;;
     --no-reconcile) NO_RECONCILE=1; shift ;;
+    --no-index|--no-publish|--no-notify) shift ;; # addressed-only compatibility flags
     *) echo "Unknown capture option: $1" >&2; exit 1 ;;
   esac
 done
@@ -188,6 +190,11 @@ SLUG="$(slugify "$TOPIC")"
 [ -n "$SLUG" ] || SLUG="session"
 AUTHOR_LC="$(printf '%s' "$AUTHOR" | tr '[:upper:]' '[:lower:]')"
 
+yaml_scalar() {
+  # JSON strings are valid YAML scalars and preserve punctuation safely.
+  jq -Rn --arg value "$1" '$value'
+}
+
 if [ "$CAPTURE_MODE" = "personal" ]; then
   REL_FILE="wraps/${YYYY_MM}/${DD}-${AUTHOR_LC}-${SLUG}.md"
   TITLE_PREFIX="Wrap"
@@ -208,6 +215,15 @@ if [ -e "$ABS_FILE" ]; then
 fi
 
 {
+  printf '%s\n' '---'
+  printf 'capture_schema: %s\n' "$CAPTURE_SCHEMA"
+  printf 'capture_mode: %s\n' "$CAPTURE_MODE"
+  printf 'kind: %s\n' "$CAPTURE_MODE"
+  printf 'from: %s\n' "$(yaml_scalar "$AUTHOR_LC")"
+  printf 'date: %s\n' "$DATE_ONLY"
+  printf 'topic: %s\n' "$(yaml_scalar "$TOPIC")"
+  printf 'status: active\n'
+  printf '%s\n\n' '---'
   printf '# %s: %s\n\n' "$TITLE_PREFIX" "$TOPIC"
   printf '**Capture Schema**: %s\n' "$CAPTURE_SCHEMA"
   printf '**Capture Mode**: %s\n' "$CAPTURE_MODE"
@@ -259,7 +275,7 @@ fi
 
 GRAPH_STATUS="skipped"
 MODE="$(jq -r '.mode // "connected"' "$CONFIG" 2>/dev/null || echo connected)"
-if [ "$MODE" = "connected" ] && [ -n "$SESSION_ID" ]; then
+if [ "$MODE" = "connected" ] && [ "$GRAPH_ENABLED" = "1" ] && [ -n "$SESSION_ID" ]; then
   # shellcheck disable=SC2016 # $name tokens are Cypher parameters.
   CAPTURE_CYPHER='
     MERGE (s:Session {id: $sessionId})

package/runtime/prime/bin/codex-render-spec.mjs

@@ -7,8 +7,8 @@
 // same way bin/codex-sync-skills.sh derives skills: deterministic transform,
 // explicit per-section adaptation, manifest of what was adapted or dropped.
 //
-//   node bin/codex-render-spec.mjs            # render AGENTS.md + manifest
-//   node bin/codex-render-spec.mjs --check    # exit 1 if rendered output is stale
+//   bash bin/node-run.sh bin/codex-render-spec.mjs            # render AGENTS.md + manifest
+//   bash bin/node-run.sh bin/codex-render-spec.mjs --check    # exit 1 if rendered output is stale
 //
 // Adaptation rules (the DECIDED option-b translations):
 //   EnterWorktree            -> bin/agent.sh branch / git checkout fallback
@@ -53,16 +53,11 @@ const AGENTS_PREAMBLE = `# Egregore Agent Protocol
 > Egregore skill already covers. This file exists only for runtimes that cannot
 > read \`CLAUDE.md\`.
 >
-> **If you are Pi** (the \`pi\` coding-agent harness): **stop here.** Your
-> authoritative Egregore instructions are loaded from
-> \`.pi/APPEND_SYSTEM.md\`, and your workflows are exposed through the
-> project-local \`.pi/\` runtime. Do not follow the Codex-specific block below.
->
-> **If you are Prime Agent** (the \`prime-agent\` harness): **stop here.** Your
-> authoritative Egregore instructions are loaded from
-> \`.prime/agent/APPEND_SYSTEM.md\`, and your workflows are exposed through the
-> project-local \`.prime/agent/\` runtime. Do not follow the Codex-specific
-> block below.
+> **If you are Pi or Prime Agent:** **stop here.** Your authoritative
+> Egregore instructions are loaded from \`.pi/APPEND_SYSTEM.md\` (Pi) or
+> \`.prime/agent/APPEND_SYSTEM.md\` (Prime), and your workflows are exposed
+> through that project-local runtime. Do not follow the Codex-specific block
+> below.
 >
 > **If you are Codex or another shell-only agent:** this file is yours — continue.
 
@@ -157,6 +152,33 @@ function splitSections(markdown) {
 // (public checkouts carry fewer skills than the source repo).
 const NON_SKILL_TOKENS = new Set(['loop', 'fast', 'config', 'clear', 'help']);
 
+// Shell runtimes read tool stdout as the model's evidence channel — the
+// Claude-only --context-packet flag would strand the evidence in a file no
+// hook delivers there. Rewrite the fallback command to the stdout form and
+// state the same hygiene contract in shell terms: search output is
+// model-internal; the visible reply carries only the retrieval line.
+const CLAUDE_PACKET_NOTE = `\`--context-packet\` keeps the evidence out of the visible transcript and
+attaches it privately; the visible output is the attribution line alone.
+Never re-print ranked results, file/rank/excerpt metadata, or raw JSON.`;
+const SHELL_PACKET_NOTE = `Search output is model-internal: show only the retrieval line and receipts —
+never ranked blocks, file/rank/excerpt metadata, or raw JSON.`;
+
+// The Command Awareness lifecycle bullet is Claude-surface routing prose; on
+// Codex the same typed-lookup routing arrives through the shared hook
+// contract, and the 32 KiB project-doc budget has no room to restate it.
+// Decided 2026-09: drop the bullet from the render rather than ship a stale
+// hand-reverted AGENTS.md.
+const CLAUDE_LIFECYCLE_BULLET_PREFIX = '- Exact lifecycle questions (';
+
+function transformSearchHygiene(body) {
+  return body
+    .split('\n')
+    .filter((line) => !line.startsWith(CLAUDE_LIFECYCLE_BULLET_PREFIX))
+    .join('\n')
+    .replaceAll(CLAUDE_PACKET_NOTE, SHELL_PACKET_NOTE)
+    .replaceAll(' --compact --context-packet', ' --compact');
+}
+
 function transformTokens(body) {
   const lines = body.split('\n');
   let inFence = false;
@@ -211,7 +233,7 @@ Sequence: **intent → safe workspace → relevant context → consequential ass
 When the user continues the current branch's work or asks to resume — sequence: **continuation intent → prior workspace → restored context → open threads → resumed execution**:
 
 - Do not create a new workspace for the same topic. After confirming relevance, say: \`I found your previous work on **{topic}** and restored its workspace and context.\` Show \`Workspace: {branch} (worktree).\` secondarily.
-- Retrieve relevant decisions, handoffs, or prior work; keep the Retrieval Beat and \`↳ Context restored:\` receipt. Never claim context was restored from a branch name alone.
+- Interpret continuation from meaning, not fixed phrases. Reuse sufficient \`EGREGORE_ORG_CONTEXT_V1\`; otherwise make exactly one \`bash bin/search.sh query "<concept>" -n 6 --compact\` call. Keep the Retrieval Beat and \`↳ Context restored:\` receipt. Never infer context from a branch or substitute status dashboards, Git, Graph, or raw memory scans.
 - Name only unresolved items that could change the next move, state the next outcome briefly, and continue without replaying setup.
 
 ### Handoff claiming
@@ -327,7 +349,10 @@ const RULES = {
     note: 'EnterWorktree -> bin/agent.sh branch with git checkout fallback; AskUserQuestion -> numbered options in plain text; branch-guard mapped to .codex/hooks/branch-guard.js with instruction fallback; plan-mode note dropped (no plan mode on Codex); /branch + /onboarding -> skill tokens. Handoff claiming and repoState auto-checkout bash kept verbatim (pure git); surrounding prose compressed 2026-08 for the 32 KiB budget, every rule retained.',
   },
   'Config Files': { action: 'keep', note: 'Kept verbatim — shell facts, runtime-neutral.' },
-  'Knowledge Graph': { action: 'keep', note: 'Kept verbatim — bin/graph.sh is runtime-neutral.' },
+  'Optional Knowledge Graph Projection': {
+    action: 'keep',
+    note: 'Kept verbatim — graph traversal remains an explicit optional adapter and canonical evidence wins.',
+  },
   'Egregore Retrieval Beat': { action: 'keep', note: 'Kept verbatim — product attribution applies across runtimes.' },
   'Notifications': { action: 'keep', note: 'Kept verbatim — bin/notify.sh is runtime-neutral.' },
   'Onboarding': { action: 'keep', note: 'Kept; /onboarding rendered as $onboarding.' },
@@ -384,7 +409,7 @@ function render() {
     if (rule.action === 'replace') {
       body = rule.body;
     } else {
-      body = transformTokens(section.body);
+      body = transformSearchHygiene(transformTokens(section.body));
       if (rule.prepend) body = `${rule.prepend}\n\n${body}`;
     }
     parts.push(`${heading}\n\n${body}`);
@@ -426,7 +451,7 @@ if (check) {
   const currentManifest = fs.existsSync(MANIFEST) ? fs.readFileSync(MANIFEST, 'utf-8') : '';
   const stale = nextAgents !== currentAgents || manifestJson !== currentManifest;
   if (stale) {
-    console.error('codex spec out of date — run: node bin/codex-render-spec.mjs');
+    console.error('codex spec out of date — run: bash bin/node-run.sh bin/codex-render-spec.mjs');
     process.exit(1);
   }
   console.log('codex spec up to date');

package/runtime/prime/bin/codex-session-start.sh

@@ -46,8 +46,14 @@ source "$SCRIPT_DIR/bin/lib/hash.sh"
 source "$SCRIPT_DIR/bin/lib/time.sh"
 source "$SCRIPT_DIR/bin/lib/identity.sh" >/dev/null 2>/dev/null
 
-# Keep the durable local identity current before gathering context, then project
-# it to Supabase + Neo4j in the background so startup is never network-blocked.
+# Resolve missing stable ids before gathering context. This is synchronous only
+# for a legacy instance; established identities keep the normal fast startup.
+if [ -f "$SCRIPT_DIR/bin/runtime-identity.sh" ]; then
+  bash "$SCRIPT_DIR/bin/runtime-identity.sh" ensure >/dev/null 2>&1 || true
+fi
+
+# Keep the durable local profile current, then refresh shared projections in
+# the background. Observe never waits on this once stable ids are persisted.
 if [ -f "$STATE_FILE" ] && [ -f "$SCRIPT_DIR/bin/person.py" ]; then
   python3 "$SCRIPT_DIR/bin/person.py" sync-local >/dev/null 2>&1 || true
 fi
@@ -167,7 +173,7 @@ render_card() {
 
   has_failure="false"
   failed_services=""
-  for pair in "github:$HEALTH_GITHUB" "git:$HEALTH_GIT" "api-key:$HEALTH_APIKEY" "graph:$HEALTH_GRAPH" "telegram:$HEALTH_TELEGRAM"; do
+  for pair in "github:$HEALTH_GITHUB" "git:$HEALTH_GIT" "retrieval:${HEALTH_RETRIEVAL:-skip}" "api-key:$HEALTH_APIKEY" "graph:$HEALTH_GRAPH" "telegram:$HEALTH_TELEGRAM"; do
     svc="${pair%%:*}"
     svc_status="${pair#*:}"
     if [ "$svc_status" = "fail" ]; then
@@ -181,7 +187,11 @@ render_card() {
   else
     footer_left="  ✓ ready"
     if [ "${MEMORY_SYNCED:-false}" = "true" ]; then
-      footer_right="◆ memory synced"
+      if [ "${HEALTH_RETRIEVAL:-skip}" = "ok" ]; then
+        footer_right="◆ memory + recall ready"
+      else
+        footer_right="◆ memory synced · recall unavailable"
+      fi
     else
       footer_right="◆ memory not synced"
     fi

package/runtime/prime/bin/codex-skill-render.mjs

@@ -5,10 +5,10 @@ const WIDTH = 72;
 
 function usage() {
   console.error(`usage:
-  node bin/codex-skill-render.mjs classify-graph [--mode connected|local] [--attempt initial|retry] [file|-]
-  node bin/codex-skill-render.mjs activity-card [file|-]
-  node bin/codex-skill-render.mjs dashboard-card [file|-]
-  node bin/codex-skill-render.mjs handoff-card [file|-]`);
+  bash bin/node-run.sh bin/codex-skill-render.mjs classify-graph [--mode connected|local] [--attempt initial|retry] [file|-]
+  bash bin/node-run.sh bin/codex-skill-render.mjs activity-card [file|-]
+  bash bin/node-run.sh bin/codex-skill-render.mjs dashboard-card [file|-]
+  bash bin/node-run.sh bin/codex-skill-render.mjs handoff-card [file|-]`);
   process.exit(2);
 }
 
@@ -154,7 +154,7 @@ function renderActivity(data) {
 
   const brand = `${truncate(org, 20).toUpperCase()} EGREGORE ✦ ACTIVITY DASHBOARD`;
   const lines = [topRule(), padLine(brand), padLine([me, date].filter(Boolean).join(' · ')), rule()];
-  if (graph.status !== 'connected') {
+  if (data.connected_enrichment && graph.status !== 'connected') {
     lines.push(padLine(`graph: ${graph.status}`, graph.reason));
     lines.push(rule());
   }
@@ -235,7 +235,9 @@ function renderDashboard(data) {
   const graph = classifyGraph(data, { mode: data.mode || 'connected', attempt: 'retry' });
   const org = data.org || 'Egregore';
   const date = data.date || '';
-  const me = data.me?.github || data.me?.name || data.github_username || '';
+  const me = typeof data.me === 'string'
+    ? data.me
+    : data.me?.github || data.me?.name || data.github_username || '';
   const current = data.current_session || {};
   const sessions = firstArray(data, ['sessions', 'local_sessions.sessions']);
   const todos = firstArray(data, ['todos', 'open_todos']);
@@ -245,7 +247,7 @@ function renderDashboard(data) {
   const stats = data.stats || {};
 
   const lines = [topRule(), padLine('DASHBOARD', [org, me, date].filter(Boolean).join(' · ')), rule()];
-  if (graph.status !== 'connected') {
+  if (data.connected_enrichment && graph.status !== 'connected') {
     lines.push(padLine(`graph: ${graph.status}`, graph.reason));
     lines.push(rule());
   }