create-egregore 0.21.6 → 0.22.0

package/runtime/prime/manifest.json

@@ -1,7 +1,7 @@
 {
   "source": "egregore-prime-meta-harness",
   "policy": "Prime Agent-native lifecycle layer over the available OSS Codex skill corpus",
-  "skillCount": 48,
+  "skillCount": 49,
   "skills": [
     "activity",
     "announce",
@@ -34,6 +34,7 @@
     "pull",
     "push",
     "quest",
+    "records",
     "reflect",
     "review-pr",
     "save",
@@ -54,8 +55,10 @@
   ],
   "availability": "oss",
   "files": [
+    ".claude/context/handoff-claiming.md",
     ".claude/context/notification-consent.md",
     ".claude/context/retrieval-investigation.md",
+    ".claude/skills/view/SKILL.md",
     ".codex/config.toml",
     ".codex/hooks.json",
     ".codex/hooks/branch-guard.js",
@@ -94,6 +97,7 @@
     ".codex/skills/pull/SKILL.md",
     ".codex/skills/push/SKILL.md",
     ".codex/skills/quest/SKILL.md",
+    ".codex/skills/records/SKILL.md",
     ".codex/skills/reflect/SKILL.md",
     ".codex/skills/review-pr/SKILL.md",
     ".codex/skills/save/SKILL.md",
@@ -134,6 +138,8 @@
     "bin/attendant.sh",
     "bin/autosave.sh",
     "bin/base-branch.sh",
+    "bin/boundary-guard.cjs",
+    "bin/boundary-hook.sh",
     "bin/branch-guard.cjs",
     "bin/capture-reconcile.sh",
     "bin/capture-run.sh",
@@ -148,6 +154,8 @@
     "bin/corpus_map.py",
     "bin/corpus_survey.py",
     "bin/dashboard-data.sh",
+    "bin/data/capabilities/prime.json",
+    "bin/genui.sh",
     "bin/gh-run.sh",
     "bin/github-auth.sh",
     "bin/graph-batch.sh",
@@ -176,42 +184,58 @@
     "bin/lib/artifact-id.sh",
     "bin/lib/artifact-renderer/dependencies-lock.json",
     "bin/lib/artifact-renderer/dependencies.json",
+    "bin/lib/card-delivery.sh",
     "bin/lib/config.sh",
     "bin/lib/context.sh",
     "bin/lib/dashboard-artifact.sh",
     "bin/lib/ensure-develop.sh",
     "bin/lib/framework-update.sh",
     "bin/lib/generated-trees.sh",
+    "bin/lib/genui-entry.py",
     "bin/lib/git-message.sh",
     "bin/lib/git-sync.sh",
     "bin/lib/greeting.sh",
     "bin/lib/handoff-meta.sh",
+    "bin/lib/handoff_meta.py",
     "bin/lib/hash.sh",
     "bin/lib/health-footer.sh",
     "bin/lib/hosted-ref-id.sh",
     "bin/lib/identity.sh",
+    "bin/lib/instance-registry.sh",
+    "bin/lib/local_ci_receipt.py",
     "bin/lib/metrics.sh",
     "bin/lib/noncode.sh",
     "bin/lib/notices.sh",
     "bin/lib/permissions.sh",
+    "bin/lib/record_outcomes.py",
+    "bin/lib/reflexes.py",
     "bin/lib/repo-paths.sh",
+    "bin/lib/retrieval_scorecard.py",
     "bin/lib/runtime-owned.sh",
     "bin/lib/scratch.sh",
     "bin/lib/secret_entry.py",
+    "bin/lib/session-record-prompt.txt",
+    "bin/lib/session_record.py",
+    "bin/lib/session_trail.py",
     "bin/lib/settings-drift.sh",
+    "bin/lib/startup-restart.sh",
     "bin/lib/time.sh",
     "bin/lib/worktree-links.sh",
+    "bin/memory-push.sh",
+    "bin/merge-gate.sh",
     "bin/node-run.sh",
     "bin/notification.sh",
     "bin/notify.sh",
     "bin/observe-context.sh",
     "bin/onboarding.sh",
+    "bin/page-access.sh",
     "bin/person.py",
     "bin/person.sh",
     "bin/pi-branch-policy.mjs",
     "bin/pi-observe-context.mjs",
     "bin/pi-product-workflows.mjs",
     "bin/pi-render-spec.mjs",
+    "bin/pi-spirit-discovery.mjs",
     "bin/post-update.sh",
     "bin/prime-render-spec.mjs",
     "bin/prime-session-start.sh",
@@ -240,6 +264,16 @@
     "bin/qa-inventory.sh",
     "bin/quest.sh",
     "bin/question.sh",
+    "bin/records.sh",
+    "bin/reflexes.sh",
+    "bin/reflexes/05-vitals.sh",
+    "bin/reflexes/10-open-items.sh",
+    "bin/reflexes/15-retrieval.sh",
+    "bin/reflexes/20-nightly.sh",
+    "bin/reflexes/20-sandbox.sh",
+    "bin/reflexes/30-cost.py",
+    "bin/reflexes/40-shells.py",
+    "bin/reflexes/README.md",
     "bin/repo-state.sh",
     "bin/research-ingest.sh",
     "bin/restore-owned-skills.sh",
@@ -247,17 +281,24 @@
     "bin/runtime-identity.sh",
     "bin/runtime-upgrade.sh",
     "bin/scratch-sweep.sh",
+    "bin/screenshot.sh",
     "bin/scroll.sh",
     "bin/search.sh",
     "bin/secret-entry.py",
     "bin/session-autosave.sh",
+    "bin/session-id.sh",
     "bin/session-log.sh",
+    "bin/session-record.sh",
     "bin/settings.sh",
+    "bin/spirit-discovery-claude.sh",
+    "bin/spirit-discovery-codex.sh",
+    "bin/spirit-discovery-pi.sh",
+    "bin/spirit-discovery-prime.sh",
+    "bin/spirit-discovery.sh",
     "bin/startup-check.sh",
     "bin/telemetry.sh",
     "bin/test-baseline.sh",
     "bin/test-changes.sh",
-    "bin/thread.sh",
     "bin/todo.sh",
     "bin/update-framework.sh",
     "bin/view-render.sh",
@@ -265,7 +306,10 @@
     "bin/worktree-remove.sh",
     "bin/worktree.sh",
     "docs/credential-entry.md",
+    "docs/spirit-discovery.md",
     "egregore_runtime/__init__.py",
+    "egregore_runtime/access.py",
+    "egregore_runtime/access_cli.py",
     "egregore_runtime/adapters/__init__.py",
     "egregore_runtime/adapters/invitation.py",
     "egregore_runtime/adapters/notification.py",
@@ -275,7 +319,7 @@
     "egregore_runtime/adapters/qmd_scoped.mjs",
     "egregore_runtime/adapters/qmd_scoped.py",
     "egregore_runtime/adapters/qmd_worker.mjs",
-    "egregore_runtime/admin_gate.py",
+    "egregore_runtime/admin_entry.py",
     "egregore_runtime/artifacts.py",
     "egregore_runtime/contracts.py",
     "egregore_runtime/eligibility.py",
@@ -287,12 +331,15 @@
     "egregore_runtime/graph.py",
     "egregore_runtime/handoff_lookup.py",
     "egregore_runtime/harness_cli.py",
+    "egregore_runtime/held.py",
+    "egregore_runtime/hosted_api.py",
     "egregore_runtime/identity.py",
     "egregore_runtime/identity_cli.py",
     "egregore_runtime/identity_transfer.py",
     "egregore_runtime/ingest.py",
     "egregore_runtime/ingest_cli.py",
     "egregore_runtime/ingest_index_cli.py",
+    "egregore_runtime/installation.py",
     "egregore_runtime/investigation.py",
     "egregore_runtime/investigation_contracts.py",
     "egregore_runtime/investigation_guidance.py",
@@ -310,36 +357,50 @@
     "egregore_runtime/knowledge_cli.py",
     "egregore_runtime/lifecycle.py",
     "egregore_runtime/lifecycle_cli.py",
+    "egregore_runtime/line_ids.py",
     "egregore_runtime/member_authority.py",
+    "egregore_runtime/memory_push.py",
     "egregore_runtime/notification_cli.py",
     "egregore_runtime/notifications.py",
     "egregore_runtime/observe.py",
+    "egregore_runtime/observers.py",
     "egregore_runtime/onboarding.py",
     "egregore_runtime/onboarding_cli.py",
     "egregore_runtime/operation_cli.py",
     "egregore_runtime/operation_observations.py",
+    "egregore_runtime/optional_modules.py",
+    "egregore_runtime/outputs_cli.py",
     "egregore_runtime/policy.py",
     "egregore_runtime/private_result.py",
     "egregore_runtime/profile.py",
+    "egregore_runtime/projection.py",
     "egregore_runtime/quest_cli.py",
     "egregore_runtime/question_cli.py",
     "egregore_runtime/questions.py",
     "egregore_runtime/quests.py",
     "egregore_runtime/readiness.py",
+    "egregore_runtime/record_publish.py",
+    "egregore_runtime/record_subject.py",
     "egregore_runtime/research_ingest.py",
     "egregore_runtime/research_ingest_cli.py",
     "egregore_runtime/runtime.py",
+    "egregore_runtime/sandbox.py",
     "egregore_runtime/scratch.py",
     "egregore_runtime/scroll_cli.py",
     "egregore_runtime/scrolls.py",
+    "egregore_runtime/shadow.py",
+    "egregore_runtime/spirit_discovery.py",
+    "egregore_runtime/spirit_discovery_cli.py",
+    "egregore_runtime/spirit_discovery_transport.py",
     "egregore_runtime/status.py",
     "egregore_runtime/status_cli.py",
     "egregore_runtime/sync.py",
     "egregore_runtime/sync_health.py",
+    "egregore_runtime/taste.py",
+    "egregore_runtime/taste_cli.py",
+    "egregore_runtime/taste_rules.py",
     "egregore_runtime/teamsync.py",
     "egregore_runtime/telemetry.py",
-    "egregore_runtime/thread_cli.py",
-    "egregore_runtime/threads.py",
     "egregore_runtime/todo_cli.py",
     "egregore_runtime/todos.py",
     "egregore_runtime/upgrade.py",

package/runtime/claude/bin/thread.sh

@@ -1,9 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT="$(cd "$(dirname "$0")/.." && pwd)"
-export EGREGORE_ROOT="$ROOT"
-export EGREGORE_SESSION_ID="${EGREGORE_SESSION_ID:-$(cat "$ROOT/.egregore-session-id" 2>/dev/null || true)}"
-export PYTHONSAFEPATH=1 PYTHONPATH="$ROOT${PYTHONPATH:+:$PYTHONPATH}"
-
-exec python3 -m egregore_runtime.thread_cli "$@"

package/runtime/claude/egregore_runtime/admin_gate.py

@@ -1,102 +0,0 @@
-"""Egregore-surface admin-content protection.
-
-``admin: true`` frontmatter gives a canonical document its documented
-meaning: hidden on Egregore surfaces from non-admin members, and refused for
-external publication without an authorized admin's separate confirmation.
-
-This is soft product-layer protection. Every organization member holds full
-repository access and can read raw Git files; nothing here claims per-document
-filesystem confidentiality, and no surface may describe it as an ACL. What it
-guarantees is that Egregore itself — retrieval evidence, Observe context,
-source opening, listings, rendering, publication — never hands admin-marked
-content to a non-admin member, exposing at most an opaque withheld count.
-
-Admin capability derives from stable identity: the resolved actor's
-``github.username`` alias (recorded by onboarding into the identity state)
-matched against the organization's configured ``admins`` list. Display names,
-the ``legacy.person`` alias, Git configuration, OS usernames, branch names,
-and paths never participate. Every error path fails closed to non-admin.
-"""
-
-from __future__ import annotations
-
-import json
-import re
-from dataclasses import dataclass, field
-from pathlib import Path
-from typing import Any
-
-_FRONTMATTER_ADMIN = re.compile(r"^\s*admin:\s*[\"']?true[\"']?\s*$", re.MULTILINE)
-_HEAD_BYTES = 4096
-
-
-def document_is_admin(text: str) -> bool:
-    """True when the document's YAML frontmatter declares ``admin: true``."""
-
-    if not text.startswith("---"):
-        return False
-    end = text.find("\n---", 3)
-    head = text[3:end] if end != -1 else text[3:_HEAD_BYTES]
-    return bool(_FRONTMATTER_ADMIN.search(head))
-
-
-@dataclass
-class AdminGate:
-    config_path: Path
-    memory_root: Path
-    _flag_cache: dict[str, tuple[int, int, bool]] = field(default_factory=dict)
-
-    def admin_handles(self) -> frozenset[str]:
-        try:
-            config: Any = json.loads(self.config_path.read_text(encoding="utf-8"))
-        except (OSError, ValueError):
-            return frozenset()
-        handles = config.get("admins") if isinstance(config, dict) else None
-        if not isinstance(handles, list):
-            return frozenset()
-        return frozenset(
-            str(handle).strip().casefold()
-            for handle in handles
-            if str(handle).strip()
-        )
-
-    def actor_is_admin(self, actor: Any) -> bool:
-        """Stable-identity admin check — github.username alias only."""
-
-        handles = self.admin_handles()
-        if not handles:
-            return False
-        try:
-            aliases = getattr(actor.actor, "aliases", None) or {}
-            handle = aliases.get("github.username") if isinstance(aliases, dict) else None
-        except AttributeError:
-            return False
-        if not handle:
-            return False
-        return str(handle).strip().casefold() in handles
-
-    def path_is_admin(self, canonical_path: str) -> bool:
-        """True when the canonical document at ``memory/...`` is admin-marked.
-
-        Unreadable or missing files report False — absence of evidence is not
-        an admin marking, and the surrounding authorization already decided
-        whether the path may be read at all.
-        """
-
-        relative = canonical_path.strip().replace("\\", "/").removeprefix("memory/")
-        target = self.memory_root / relative
-        try:
-            stat = target.stat()
-        except OSError:
-            return False
-        cached = self._flag_cache.get(relative)
-        if cached and cached[0] == stat.st_mtime_ns and cached[1] == stat.st_size:
-            return cached[2]
-        try:
-            with target.open("r", encoding="utf-8", errors="replace") as handle:
-                head = handle.read(_HEAD_BYTES)
-        except OSError:
-            return False
-        flag = document_is_admin(head)
-        self._flag_cache[relative] = (stat.st_mtime_ns, stat.st_size, flag)
-        return flag

package/runtime/claude/egregore_runtime/thread_cli.py

@@ -1,173 +0,0 @@
-"""Runtime-neutral CLI for canonical Thread intent and fold-ins."""
-
-from __future__ import annotations
-
-import argparse
-import json
-import os
-from uuid import uuid4
-
-from .runtime import local_runtime, runtime_root
-from .scratch import read_and_consume
-from .threads import CanonicalThreadService, THREAD_CONFIRMATION, ThreadError
-
-
-def _context():
-    root = runtime_root()
-    runtime = local_runtime(root, push_remote=os.environ.get("EGREGORE_NO_PUSH") != "1")
-    actor = runtime.resolve_actor(
-        session_id=os.environ.get("EGREGORE_SESSION_ID", f"session_{uuid4().hex}"),
-        harness=os.environ.get("EGREGORE_RUNTIME", "shell"),
-    )
-    return runtime, actor, CanonicalThreadService(runtime, (root / "memory").resolve())
-
-
-def _row(snapshot, *, detail=False):
-    row = snapshot.projection_input()
-    row.update(
-        {
-            "id": snapshot.document.artifact.artifact_id,
-            "title": snapshot.title,
-            "canonical_path": f"memory/threads/{snapshot.slug}.md",
-        }
-    )
-    if detail:
-        row["body"] = snapshot.document.body
-    return row
-
-
-def _writeback(receipts):
-    return [receipt.to_dict() for receipt in receipts]
-
-
-def _new(args):
-    _, actor, service = _context()
-    snapshot, receipt = service.create(
-        actor,
-        title=args.title,
-        target=args.target,
-        slug=args.slug,
-        topics=args.topic,
-        people=args.person,
-        next_steps=args.next_step,
-        window_days=args.window_days,
-        review_after_days=args.review_after_days,
-        attention_ttl_days=args.ttl_days,
-        supersedes=args.supersedes,
-    )
-    print(json.dumps({"thread": _row(snapshot), "writeback": receipt.to_dict()}, ensure_ascii=False))
-    return 0 if receipt.status.value in {"accepted", "partial"} else 1
-
-
-def _show(args):
-    _, actor, service = _context()
-    print(json.dumps({"thread": _row(service.read(actor, args.slug), detail=True)}, ensure_ascii=False))
-    return 0
-
-
-def _list(args):
-    _, actor, service = _context()
-    rows = service.list(actor, include_archived=args.all)
-    print(json.dumps({"threads": [_row(row) for row in rows]}, ensure_ascii=False))
-    return 0
-
-
-def _fold(args):
-    _, actor, service = _context()
-    event = json.loads(read_and_consume(args.event_json, runtime_root()).decode("utf-8"))
-    receipt = service.fold(
-        actor,
-        slug=args.slug,
-        event_type=str(event["type"]),
-        field=str(event["field"]),
-        operation=str(event["op"]),
-        payload=event.get("payload"),
-        source=str(event.get("source") or f"session:{actor.session_id}"),
-        expected_revision=args.expected_revision,
-        confirmation=args.confirm,
-    )
-    print(
-        json.dumps(
-            {
-                "thread": _row(receipt.thread),
-                "event_id": receipt.event_id,
-                "writeback": _writeback(receipt.receipts),
-            },
-            ensure_ascii=False,
-        )
-    )
-    return 0 if all(row.status.value in {"accepted", "partial"} for row in receipt.receipts) else 1
-
-
-def _projection_input(args):
-    runtime, actor, service = _context()
-    rows = service.list(actor) if args.slug is None else (service.read(actor, args.slug),)
-    plan = runtime.lifecycle_plan(actor, artifact_types=("thread",))
-    lifecycle = plan.by_id
-    print(
-        json.dumps(
-            {
-                "schema_version": "egregore-thread-projection-input/v1",
-                "source_revision": actor.profile.revision,
-                "lifecycle_revision": plan.snapshot_id,
-                "threads": [
-                    {
-                        "intent": row.projection_input(),
-                        "lifecycle": lifecycle.get(row.document.artifact.artifact_id).to_dict()
-                        if lifecycle.get(row.document.artifact.artifact_id)
-                        else None,
-                    }
-                    for row in rows
-                ],
-                "projection_rule": "derived fields require as_of, confidence, and nonempty why",
-            },
-            ensure_ascii=False,
-        )
-    )
-    return 0
-
-
-def _parser():
-    parser = argparse.ArgumentParser(prog="egregore-thread")
-    commands = parser.add_subparsers(dest="command", required=True)
-    new = commands.add_parser("new")
-    new.add_argument("--title", required=True)
-    new.add_argument("--target", required=True)
-    new.add_argument("--slug")
-    new.add_argument("--topic", action="append", default=[])
-    new.add_argument("--person", action="append", default=[])
-    new.add_argument("--next-step", action="append", default=[])
-    new.add_argument("--window-days", type=int, default=45)
-    new.add_argument("--review-after-days", type=int, default=7)
-    new.add_argument("--ttl-days", type=int, default=30)
-    new.add_argument("--supersedes", action="append", default=[])
-    new.set_defaults(handler=_new)
-    show = commands.add_parser("show")
-    show.add_argument("slug")
-    show.set_defaults(handler=_show)
-    listing = commands.add_parser("list")
-    listing.add_argument("--all", action="store_true")
-    listing.set_defaults(handler=_list)
-    fold = commands.add_parser("fold")
-    fold.add_argument("slug")
-    fold.add_argument("--event-json", required=True)
-    fold.add_argument("--expected-revision", required=True)
-    fold.add_argument("--confirm", choices=(THREAD_CONFIRMATION,), required=True)
-    fold.set_defaults(handler=_fold)
-    projection = commands.add_parser("projection-input")
-    projection.add_argument("slug", nargs="?")
-    projection.set_defaults(handler=_projection_input)
-    return parser
-
-
-def main():
-    args = _parser().parse_args()
-    return args.handler(args)
-
-
-if __name__ == "__main__":
-    try:
-        raise SystemExit(main())
-    except (OSError, PermissionError, ThreadError, ValueError, json.JSONDecodeError) as exc:
-        print(f"thread: {exc}", file=os.sys.stderr)
-        raise SystemExit(1) from exc