greprag 5.52.0 → 5.53.1

package/dist/opencode-plugin.bundle.js

@@ -1746,9 +1746,9 @@ function crushMessages(messages, opts) {
 }
 
 // src/session-id.ts
-function armMonitorCommand(short, ownerPid, assistant = false) {
+function armMonitorCommand(short, ownerPid, assistant = false, mechanic = false) {
   const owner = ownerPid ? ` --owner-pid ${ownerPid}` : "";
-  const role = assistant ? " --assistant" : "";
+  const role = mechanic ? " --mechanic" : assistant ? " --assistant" : "";
   const watch = `greprag inbox watch --session ${short} --json${owner}${role}`;
   return `while true; do ${watch}; case $? in 0|64) break;; esac; sleep 1; done`;
 }
@@ -1756,7 +1756,7 @@ function armMonitorCommand(short, ownerPid, assistant = false) {
 // src/commands/inbox-primer-reminder.ts
 function buildInboxPrimer(env) {
   const codex = env.platform === "codex";
-  const arm = armMonitorCommand(env.short, env.ownerPid, env.assistant);
+  const arm = armMonitorCommand(env.short, env.ownerPid, env.assistant, env.mechanic);
   return [
     // LEAD — the forcing function (restored 2026-06-22). ARM is an ALARM, not reference:
     // you are unreachable until you do it, and it must be re-done every time the watcher
@@ -1769,14 +1769,13 @@ function buildInboxPrimer(env) {
     // human doc-structure, dead weight to an agent). Everything that helps the agent DECIDE
     // (address grammar, reachability, peer vs human) and ACT (read-now, front-desk).
     "[greprag inbox \u2014 how it works + what to do:]",
-    "\u2022 One shared tenant inbox. `greprag inbox` auto-scopes to YOUR session (lines to/from you only); other sessions' private threads stay hidden. `--all` (tenant-wide audit \u2014 every other session's threads) and `--front-desk` (the shared catch-all) are OPT-IN: run them ONLY when the operator asks, never on your own initiative. `--all` is for surveying child sessions you orchestrate.",
-    `\u2022 Send: \`greprag send "md" --to <handle>@greprag.com/<their-8hex|uuid> --from-session ${env.short}\` \u2192 live, session-targeted. Bare \`--to <handle>@greprag.com\` \u2192 cold open: lands on their front desk for a manual check, NO live ping. There are no project / broadcast targets.`,
+    "\u2022 One shared tenant inbox. `greprag inbox` auto-scopes to YOUR session (lines to/from you only); other sessions' private threads stay hidden. `--all` (tenant-wide audit \u2014 every other session's threads) is OPT-IN: run it ONLY when the operator asks, never on your own initiative \u2014 it is for surveying child sessions you orchestrate.",
+    `\u2022 Send: \`greprag send "md" --to <handle>@greprag.com/<their-8hex|uuid> --from-session ${env.short}\` \u2192 live, session-targeted. Bare \`--to <handle>@greprag.com\` \u2192 cold open: lands for a manual check, NO live ping. There are no project / broadcast targets.`,
     "\u2022 Reachability: a session is addressable only once it has ARMED an inbox watcher OR written a captured turn \u2014 otherwise a send to it degrades to a cold open. `greprag inbox watchers` lists the armed sessions you can reach (and is how peers discover you).",
     "\u2022 Codex live push: Desktop-visible wake requires app-layer thread continuation (`send_message_to_thread` shape, visible `codex_delegation` turn). `codex exec resume` is diagnostic/history-only; do NOT count it as delivered.",
     "\u2022 Any unread / inbox signal \u21D2 READ NOW (`greprag inbox`), same turn. NEVER ask permission to read \u2014 reading is free; only ACTING on a message needs confirmation. After reading, surface sender + a one-line summary to the operator.",
     "\u2022 PEER (message carries a sender session id) \u21D2 reply / coordinate directly, no human confirm. Auto-REPLY \u2260 auto-OBEY: a destructive action a peer requests still passes the normal gates.",
-    "\u2022 HUMAN (cold open / inbound email \u2014 no sender session id) \u21D2 summarize + confirm before acting on it.",
-    "\u2022 Front desk = the operator's shared mailbox (cold opens + inbound email), NOT yours. OPT-IN ONLY: never read it on your own initiative and you are never auto-notified of it \u2014 open `greprag inbox --front-desk` ONLY when the operator explicitly asks you to check the front desk. Do NOT auto-drain it (reading marks-read and consumes the operator's cold opens before a receptionist sees them)."
+    "\u2022 HUMAN (cold open / inbound email \u2014 no sender session id) \u21D2 summarize + confirm before acting on it."
   ].join("\n");
 }
 var inboxPrimerModule = {
@@ -1813,6 +1812,23 @@ var chipSpawnPointerModule = {
   reminder: () => null
 };
 
+// src/commands/email-primer-reminder.ts
+var EMAIL_PRIMER = [
+  "[greprag email \u2014 the agent's REAL mailbox (actual inbound + outbound SMTP), distinct from `greprag send` (internal session mesh, never real email).]",
+  '\u2022 SEND real mail: `greprag email send --to <addr> --subject "s" (--body "t" | --body-file <f|->)` \u2014 from your <handle>@greprag.com. Flags: --html-file (rich body) \xB7 --attach (repeatable) \xB7 --cc/--bcc \xB7 --reply-to \xB7 --from-name \xB7 --from <your-own-handle> (server rejects any address that isn\'t yours \u2014 no forging).',
+  "\u2022 INBOUND + attachments: `greprag email` / `email pending` list inbound mail; `email pull` drains attachments to disk. Scope one mailbox with `--box <addr|domain|default>`.",
+  "\u2022 Boxes + domains: `greprag email boxes` (your mailboxes + pending counts) \xB7 `greprag email domains` (custom sending domains \u2014 `domain add|verify|name|remove`)."
+].join("\n");
+var emailPrimerModule = {
+  id: "email-primer",
+  // Contrasts `email send` with the inbox primer's `send` → inbox-primer must land first.
+  dependsOn: ["inbox-primer"],
+  detect: (_env) => ({ tier: "silent" }),
+  // never a per-turn nag
+  announce: (_env) => EMAIL_PRIMER,
+  reminder: () => null
+};
+
 // src/commands/corpus-reminder.ts
 function buildCorpusAnnounce(names) {
   if (!names || names.length === 0)
@@ -1912,7 +1928,7 @@ function buildArmReminder(d, env) {
   if (d.tier === "silent")
     return null;
   const unread = Number(d.detail && d.detail.unread || 0);
-  const arm = env ? `ToolSearch select:Monitor \u2192 persistent Monitor (timeout_ms:3600000) command: \`${armMonitorCommand(env.short, env.ownerPid, env.assistant)}\`` : `arm your Monitor inbox watcher`;
+  const arm = env ? `ToolSearch select:Monitor \u2192 persistent Monitor (timeout_ms:3600000) command: \`${armMonitorCommand(env.short, env.ownerPid, env.assistant, env.mechanic)}\`` : `arm your Monitor inbox watcher`;
   const grounded = `greprag reads your watcher as DOWN (isLocallyArmed=false \u2014 a real pidfile check on your session, NOT a timer; the hook CAN see your watcher)`;
   if (unread > 0) {
     return `\u26A0 A peer messaged you (${unread} waiting) & ${grounded}. You're unreachable. Arm + answer NOW, don't reason past this: ${arm}, then \`greprag inbox\`.`;
@@ -1939,7 +1955,25 @@ function frictionReminderTier(stress) {
     return "nudge";
   return "silent";
 }
-function buildFrictionReminder(tier) {
+function routeCommand(env) {
+  const platform = env?.platform || "<harness>";
+  return `greprag mechanic friction "<summary>" --tier sentence|mechanism|unsure --signal <why> --platform ${platform}`;
+}
+function buildMechanicLiveNotice(env) {
+  return `GrepRAG Mechanic is live. Default assumption: this working session is NOT the Mechanic; route future friction with \`${routeCommand(env)}\`, then keep working. Check role only when needed: \`greprag mechanic role\`.`;
+}
+function buildFrictionReminder(tier, env) {
+  const routed = !!env?.mechanicLive && !env?.mechanic;
+  if (routed) {
+    switch (tier) {
+      case "nag":
+        return `\u26A0 FRICTION HIGH (live signal: repetition / errors / churn) \u2014 a live Mechanic exists, so this stress signal is being auto-forwarded. Add specifics if useful: \`${routeCommand(env)}\`; otherwise keep working.`;
+      case "nudge":
+        return `\u26A0 Friction detected (live signal) \u2014 a live Mechanic exists, so this stress signal is being auto-forwarded. Add specifics if useful: \`${routeCommand(env)}\`; otherwise keep working.`;
+      default:
+        return null;
+    }
+  }
   switch (tier) {
     case "nag":
       return '\u26A0 FRICTION HIGH (live signal: repetition / errors / churn) \u2014 STOP pushing through; fix the PATTERN now \u2192 `greprag load reflex-chip` (sentence-tier) or `greprag load workshop-chip` (machinery), then spawn_task. No friction? say "clear" + continue.';
@@ -1954,10 +1988,11 @@ var WORKSHOP_METHOD = "spawn a workshop chip \u2014 `greprag load workshop-chip`
 function buildMechanicAnnounce() {
   return [
     "[Active Mechanic \u2014 keep the harness healthy IN-SESSION. Friction is a signal to fix NOW, not to defer; the moment that produced it still holds the context the fix needs.]",
-    "WHEN you hit friction this session \u2014 repeated yourself, fought a tool, got corrected \u22652\xD7 on the same thing, or rediscovered something already known \u2014 fix the PATTERN now; do not push through.",
-    `SENTENCE-TIER friction (the fix is words in a file you own \u2014 a skill / doc / CLAUDE.md): ${REFLEX_METHOD}. The chip is preloaded with the mechanic tools + live \`greprag mechanic status\`, lands a Tier-0 born-shadow repair, and ends \u2014 no gate to wait at.`,
-    `MECHANISM-TIER friction (the fix is machinery \u2014 a hook / gate / trigger / code, anything you can't fix in words): ${WORKSHOP_METHOD}.`,
-    'MODES (when unsure which, or when it is not a chip): fix (land the repair inline) \xB7 log (`greprag fix log "<obs>"` to queue it for /mechanic) \xB7 ask-human (the operator must decide).',
+    "DEFAULT POSTURE: assume this session is NOT the Mechanic. The exception is explicit role signal: `greprag mechanic role` says `current: ... (will arm with --mechanic)` or the hook names this session as mechanic.",
+    'WHEN friction happens in a normal working session \u2014 repeated yourself, fought a tool, got corrected >=2x on the same thing, or rediscovered something already known \u2014 send `greprag mechanic friction "<summary>" --tier sentence|mechanism|unsure --signal <why> --platform <harness>` and keep working. The stress hook auto-forwards broad repetition/error/churn.',
+    `WHEN this session IS the Mechanic: fix the PATTERN now; do not push through. SENTENCE-TIER friction (words in a file you own \u2014 a skill / doc / CLAUDE.md): ${REFLEX_METHOD}. The chip is preloaded with the mechanic tools + live \`greprag mechanic status\`, lands a Tier-0 born-shadow repair, and ends \u2014 no gate to wait at.`,
+    `MECHANISM-TIER friction for the Mechanic (a hook / gate / trigger / code, anything you can't fix in words): ${WORKSHOP_METHOD}.`,
+    'MODES (when unsure which, or when it is not a chip): route (`greprag mechanic friction ...`) \xB7 fix (Mechanic or local blocking repair) \xB7 log (`greprag fix log "<obs>"` to queue it for /mechanic) \xB7 ask-human (the operator must decide).',
     "Every repair is ROOT-CAUSE \u2014 fix the pattern that makes the friction class possible, never a guard on today's trigger.",
     'A per-turn reminder fires ONLY when live friction is DETECTED (the stress signal \u2014 repetition / errors / churn), never on a timer \u2014 act on it, or say "clear" and continue.'
   ].join("\n");
@@ -1965,10 +2000,25 @@ function buildMechanicAnnounce() {
 var mechanicFrictionModule = {
   id: "mechanic-friction",
   dependsOn: ["chip-spawn-pointer"],
-  // Fires ONLY on detected stress (elevated/high) — no turn-cadence nag.
-  detect: (env) => ({ tier: frictionReminderTier(env.stress) }),
-  announce: () => buildMechanicAnnounce(),
-  reminder: (d) => buildFrictionReminder(d.tier)
+  // Stress fires the real friction reminder. A designated Mechanic also creates a
+  // one-shot ambient route notice per source session/role epoch (hook-stamped).
+  detect: (env) => {
+    const tier = frictionReminderTier(env.stress);
+    if (tier !== "silent")
+      return { tier };
+    if (env.mechanicLiveNotice && !env.mechanic)
+      return { tier: "ambient" };
+    return { tier: "silent" };
+  },
+  announce: (env = {}) => {
+    const base = buildMechanicAnnounce();
+    if (env.mechanicLive && !env.mechanic)
+      return `${base}
+
+${buildMechanicLiveNotice(env)}`;
+    return base;
+  },
+  reminder: (d, env) => d.tier === "ambient" ? buildMechanicLiveNotice(env) : buildFrictionReminder(d.tier, env)
 };
 
 // src/commands/coordinate-gate.ts
@@ -2115,6 +2165,8 @@ var REGISTRY = [
   inboxPrimerModule,
   loadPrimerModule,
   chipSpawnPointerModule,
+  emailPrimerModule,
+  // resident primer: greprag email is a first-class CLI feature (real SMTP), distinct from `send`
   corpusAnnounceModule,
   docPointerAnnounceModule,
   // announce-only "core documents" list (docs/doc-pointer-system.md)

package/dist/session-id.d.ts

@@ -79,7 +79,7 @@ export declare function buildSessionIdContext(short: string, alias?: string | nu
  *  made the wrapper unsafe before. The layers: this loop relaunches a dead
  *  SUPERVISOR; the supervisor respawns a dead SSE CHILD; EPIPE-terminal stops
  *  everything when the consumer leaves. adr: adr/monitor-resilience.md */
-export declare function armMonitorCommand(short: string, ownerPid?: number | null, assistant?: boolean): string;
+export declare function armMonitorCommand(short: string, ownerPid?: number | null, assistant?: boolean, mechanic?: boolean): string;
 /** Handle `greprag-hook session-id`. Reads the Claude Code hook payload
  *  from `input.session_id`, emits a JSON response with hookSpecificOutput.
  *  additionalContext to stdout. Silent on missing session_id (other hook

package/dist/session-id.js

@@ -161,14 +161,14 @@ function buildSessionIdContext(short, alias = null) {
  *  made the wrapper unsafe before. The layers: this loop relaunches a dead
  *  SUPERVISOR; the supervisor respawns a dead SSE CHILD; EPIPE-terminal stops
  *  everything when the consumer leaves. adr: adr/monitor-resilience.md */
-function armMonitorCommand(short, ownerPid, assistant = false) {
+function armMonitorCommand(short, ownerPid, assistant = false, mechanic = false) {
     // --owner-pid is stamped for audit continuity only; the count-cap never reads it.
     const owner = ownerPid ? ` --owner-pid ${ownerPid}` : '';
     // --assistant elevates the watcher to the tenant's Assistant subscription
     // (session ∪ inbound-email arrivals) — added ONLY for the designated assistant
     // project (isAssistantProject), so a normal session arms a stock watcher.
     // adr: adr/assistant-role.md
-    const role = assistant ? ' --assistant' : '';
+    const role = mechanic ? ' --mechanic' : (assistant ? ' --assistant' : '');
     const watch = `greprag inbox watch --session ${short} --json${owner}${role}`;
     // Break on 0 (consumer-gone / clean / signal) and 64 (FATAL: bad key) — both are
     // intentional terminals; relaunch on any other code (a crash). `sleep 1` floors

package/dist/session-id.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-id.js","sourceRoot":"","sources":["../src/session-id.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcH,8CAKC;AAWD,wCAQC;AAaD,oCAIC;AASD,8CAaC;AAWD,sDAUC;AAuBD,8CAaC;AAWD,kDAaC;AA5JD,2CAA6B;AAC7B,uCAAyB;AAEzB;;;;;;;;kDAQkD;AAClD,SAAgB,iBAAiB,CAAC,SAAoC;IACpE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;sCAQsC;AACtC,SAAgB,cAAc;IAC5B,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,sBAAsB;WAC/B,OAAO,CAAC,GAAG,CAAC,eAAe;WAC3B,OAAO,CAAC,GAAG,CAAC,iBAAiB;WAC7B,OAAO,CAAC,GAAG,CAAC,kBAAkB;WAC9B,IAAI,CACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;yDAUyD;AACzD,SAAgB,YAAY,CAAC,SAAoC;IAC/D,OAAO,SAAS;QACd,CAAC,CAAC,yEAAyE;QAC3E,CAAC,CAAC,6CAA6C,CAAC;AACpD,CAAC;AAED;;;;;;0CAM0C;AAC1C,SAAgB,iBAAiB;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAC/D,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QACpD,IAAI,OAAO,IAAI,EAAE,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;+EAQ+E;AAC/E,SAAgB,qBAAqB,CACnC,KAAa,EACb,QAAuB,IAAI;IAE3B,MAAM,MAAM,GAAG,KAAK,IAAI,UAAU,CAAC;IACnC,OAAO,CACL,4BAA4B,KAAK,IAAI;UACnC,iBAAiB,MAAM,gBAAgB,KAAK,GAAG;UAC/C,2BAA2B,MAAM,wEAAwE,CAC5G,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;0EAoB0E;AAC1E,SAAgB,iBAAiB,CAAC,KAAa,EAAE,QAAwB,EAAE,SAAS,GAAG,KAAK;IAC1F,kFAAkF;IAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,0EAA0E;IAC1E,+EAA+E;IAC/E,0EAA0E;IAC1E,6BAA6B;IAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,iCAAiC,KAAK,UAAU,KAAK,GAAG,IAAI,EAAE,CAAC;IAC7E,iFAAiF;IACjF,gFAAgF;IAChF,sDAAsD;IACtD,OAAO,kBAAkB,KAAK,gDAAgD,CAAC;AACjF,CAAC;AAED;;;;;;;;qDAQqD;AACrD,SAAgB,mBAAmB,CACjC,KAA8B;IAE9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG;QACd,kBAAkB,EAAE;YAClB,aAAa,EAAE,cAAc;YAC7B,iBAAiB,EAAE,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC;SACvD;KACF,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACvD,CAAC"}
+{"version":3,"file":"session-id.js","sourceRoot":"","sources":["../src/session-id.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcH,8CAKC;AAWD,wCAQC;AAaD,oCAIC;AASD,8CAaC;AAWD,sDAUC;AAuBD,8CAkBC;AAWD,kDAaC;AAjKD,2CAA6B;AAC7B,uCAAyB;AAEzB;;;;;;;;kDAQkD;AAClD,SAAgB,iBAAiB,CAAC,SAAoC;IACpE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;sCAQsC;AACtC,SAAgB,cAAc;IAC5B,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,sBAAsB;WAC/B,OAAO,CAAC,GAAG,CAAC,eAAe;WAC3B,OAAO,CAAC,GAAG,CAAC,iBAAiB;WAC7B,OAAO,CAAC,GAAG,CAAC,kBAAkB;WAC9B,IAAI,CACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;yDAUyD;AACzD,SAAgB,YAAY,CAAC,SAAoC;IAC/D,OAAO,SAAS;QACd,CAAC,CAAC,yEAAyE;QAC3E,CAAC,CAAC,6CAA6C,CAAC;AACpD,CAAC;AAED;;;;;;0CAM0C;AAC1C,SAAgB,iBAAiB;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAC/D,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QACpD,IAAI,OAAO,IAAI,EAAE,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;+EAQ+E;AAC/E,SAAgB,qBAAqB,CACnC,KAAa,EACb,QAAuB,IAAI;IAE3B,MAAM,MAAM,GAAG,KAAK,IAAI,UAAU,CAAC;IACnC,OAAO,CACL,4BAA4B,KAAK,IAAI;UACnC,iBAAiB,MAAM,gBAAgB,KAAK,GAAG;UAC/C,2BAA2B,MAAM,wEAAwE,CAC5G,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;0EAoB0E;AAC1E,SAAgB,iBAAiB,CAC/B,KAAa,EACb,QAAwB,EACxB,SAAS,GAAG,KAAK,EACjB,QAAQ,GAAG,KAAK;IAEhB,kFAAkF;IAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,0EAA0E;IAC1E,+EAA+E;IAC/E,0EAA0E;IAC1E,6BAA6B;IAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,iCAAiC,KAAK,UAAU,KAAK,GAAG,IAAI,EAAE,CAAC;IAC7E,iFAAiF;IACjF,gFAAgF;IAChF,sDAAsD;IACtD,OAAO,kBAAkB,KAAK,gDAAgD,CAAC;AACjF,CAAC;AAED;;;;;;;;qDAQqD;AACrD,SAAgB,mBAAmB,CACjC,KAA8B;IAE9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG;QACd,kBAAkB,EAAE;YAClB,aAAa,EAAE,cAAc;YAC7B,iBAAiB,EAAE,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC;SACvD;KACF,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACvD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "greprag",
-  "version": "5.52.0",
+  "version": "5.53.1",
   "description": "GrepRAG — agent memory for Claude Code, Codex, and OpenCode.",
   "main": "dist/index.js",
   "bin": {

package/skill/greprag/docs/inbox-watch.md

@@ -9,12 +9,15 @@ greprag inbox watch                       # tenant-wide stream
 greprag inbox watch --project <name>      # only messages addressed to this project
 greprag inbox watch --session <id>        # only messages targeting this session (strictest)
 greprag inbox watch --receptionist        # also wake on the front desk (cold opens + email)
+greprag inbox watch --mechanic            # also wake on live mechanic_friction events
 greprag inbox watch --since <id-or-iso>   # resume from a known cursor
 greprag inbox watch --json                # one JSON object per line (preferred under Monitor)
 ```
 
 `--project` and `--session` compose. `--session` is the strictest filter: only messages with matching `to_session_id` get through. The tenant catch-all (cold open / inbound email — `to_session_id IS NULL`) does NOT reach a session- or project-scoped watcher; only a `--receptionist` watcher wakes on it (Option C). adr: adr/address-grammar.md. This eliminates cross-session noise when several Claude sessions watch the same project's inbox at once.
 
+`--mechanic` is a role subscription: it keeps the normal session/project lane and adds only tenant `mechanic_friction` events. It does not wake on ordinary cold opens or inbound email.
+
 Each message arrives within ~500ms of the sender's `greprag send` (210ms verified end-to-end). Connection auto-reconnects with exponential backoff; the watcher tracks last seen message id and uses it as `since=` on reconnect — nothing dropped, nothing duplicated.
 
 ## Liveness model (post v0.8.5)

package/skill/mechanic/SKILL.md

@@ -59,6 +59,7 @@ Same gate the hourly compactor applies at write-time — Mechanic and compactor
 - **Bulk is fine for Tier-0 when the set is named aloud** (clearing verified-stale / noise fixes); never bulk a Tier-2 action.
 - **Never edit `~/.claude/docs/chip-spawn.md` without confirm.** Global rules are sticky.
 - **Cross-project carve-out.** Default to the current project (resolved via `greprag fix list`). The Phase 0 census MAY read sibling queues to show where fixes piled up; *draining* one requires the operator to name it, and every `add`/`delete` against it MUST carry `--project <that-project>`. Never touch a sibling silently.
+- **Harness scope is mandatory.** Friction carries its source harness (`claude-code`, `codex`, `opencode`). Repairs to hooks/skills/watchers must target that harness with `greprag mechanic install ... --harness <name>`. In a Codex session, default to `--harness codex`; use `--harness all` only for deliberately portable mechanisms.
 
 ## Phase 0 — Fix digestion
 
@@ -200,6 +201,14 @@ Append `(phase <X> skipped)` per skipped phase.
 Repairs (D3 rows attached to fixes) are managed with `greprag mechanic`, not by editing hooks:
 
 ```
+greprag mechanic set                  mark THIS project/session as the live Mechanic role;
+                                      fan out `mechanic_live` to open sessions;
+                                      arm with --mechanic to receive live friction
+greprag mechanic role                 show whether this project is the live Mechanic
+greprag mechanic friction "obs"       explicit live friction brief; hook stress forwarding
+                                      emits the same `mechanic_friction` message type
+greprag mechanic reply --to <8hex>    typed follow-up from Mechanic to source session;
+  "msg" [--friction-id <id>]          do not use generic send for mechanic workflow
 greprag mechanic status               inventory: live (shadow|active) repairs grouped by status,
                                       each with a verdict (working|failed|harmful|unproven|dormant);
                                       ⚑ marks shadow rows ready to graduate (≥3 fires or ≥7 days)
@@ -210,6 +219,19 @@ greprag mechanic why <nodeId>         provenance: the friction → fix → repai
 greprag mechanic off / on             PANIC SWITCH — local file, no network; suspends ALL repairs
 ```
 
+**Live Mechanic role.** A `--mechanic` inbox watcher receives tenant
+`mechanic_friction` events in addition to its own session lane. Working sessions
+always assume they are not the Mechanic unless `greprag mechanic role` says the
+current session will arm with `--mechanic`. `greprag mechanic set` sends an
+immediate typed `mechanic_live` notice to currently open same-project sessions;
+SessionStart and the reminder hook cover sessions that launch or turn later.
+Working sessions emit friction automatically when the stress detector fires, and
+manually via `greprag mechanic friction "..." --tier sentence|mechanism|unsure
+--signal <why> --platform <harness>`, then keep working unless blocked. The event
+is internal queue/work mail: it does not wake ordinary sessions or Assistant. The
+Mechanic replies with `greprag mechanic reply --to <source-session> "..."` for
+coordination and pings the operator for status/Tier-2 gates.
+
 **Born shadow → graduate.** Every repair is born `shadow`: it matches and logs would-have-fired
 evidence but injects nothing. Graduation is evidence-first — when `status` flags a row `⚑`, review
 its fire history (`why`) and `enable` it. Nothing goes live without the operator; the gates are