metame-cli 1.4.17 → 1.4.19

package/README.md

@@ -14,25 +14,31 @@
   <a href="./README.md">English</a> | <a href="./README中文版.md">中文</a>
 </p>
 
-> **Claude Code that knows you — and works from your phone.**
+> **Your digital twin. Lives on your Mac.**
 
-MetaMe turns Claude Code into a persistent AI that remembers how you think, runs on your Mac 24/7, and takes commands from your phone via Telegram or Feishu.
+MetaMe is an AI that lives on your machine — remembers how you think, stays online 24/7, and takes commands from your phone via Telegram or Feishu. Not in the cloud. In your computer.
 
-One command. No cloud. Your machine, your data.
+No cloud. Your machine, your data.
 
+**macOS / Linux / Windows WSL — same command:**
+```bash
+curl -fsSL https://raw.githubusercontent.com/Yaron9/MetaMe/main/install.sh | bash
+```
+
+**Already have Node.js ≥ 18:**
 ```bash
 npm install -g metame-cli && metame
 ```
 
 ---
 
-> ### 🚀 v1.4.0 — Layered Memory Architecture
+> ### 🚀 v1.4.18 — Multi-User ACL + Session Context Preview
 >
-> MetaMe now has a **three-layer memory system** that works completely in the background:
-> - **Long-term facts** extracted from every session, recalled semantically on demand
-> - **Session summary cache** — when you resume after a 2h+ gap, MetaMe injects what you were last working on
-> - **Automatic session tagging** — every conversation is indexed by topic, enabling future session routing
-> - **Unix Socket IPC** — dispatch latency dropped from ~60s to <100ms
+> - **Multi-user permission system**: role-based ACL (admin / member / stranger) — share your bots with teammates without giving them full access. Manage users with `/user` commands.
+> - **Session context preview**: `/resume` and `/sessions` now show the last message snippet so you know exactly what to pick up.
+> - **Team Task protocol**: multi-agent task board for cross-agent collaboration. Agents can dispatch and track tasks across workspaces.
+> - **Layered Memory Architecture**: three-layer memory (long-term facts, session summaries, session index) — all automatic.
+> - **Unix Socket IPC**: dispatch latency <100ms.
 >
 > Zero configuration. It just works.
 
@@ -64,7 +70,7 @@ Claude:       ✏️ Edit: api/login.ts
               ✅ Fixed. 3 tests passing.
 ```
 
-Start on your laptop, continue on the train. `/stop` to interrupt, `/undo` to rollback, `/sh ls` for raw shell access when everything else breaks.
+Start on your laptop, continue on the train. `/stop` to interrupt, `/undo` to rollback, `/mac check` for macOS automation diagnostics, and `/sh ls` for raw shell access when everything else breaks.
 
 ### 3. Layered Memory That Works While You Sleep
 
@@ -124,7 +130,8 @@ projects:
     heartbeat_tasks:
       - name: "daily-draft"
         prompt: "Research top AI news and write an article"
-        interval: "24h"
+        at: "09:30"
+        days: "weekdays"
         model: "sonnet"
         notify: true
 
@@ -132,7 +139,7 @@ heartbeat:
   tasks:
     - name: "morning-brief"
       prompt: "Summarize my git activity from yesterday"
-      interval: "24h"
+      at: "09:00"
       notify: true
 ```
 
@@ -150,7 +157,21 @@ Chain skills into multi-step workflows — research → write → publish — fu
           prompt: "Publish it"
 ```
 
-Task options: `require_idle` (defer when you're active, retry on next heartbeat tick), `precondition` (shell guard — skip if false, zero tokens), `notify` (push result to phone), `model`, `cwd`, `allowedTools`, `timeout`.
+**Task options:**
+
+| Option | Description |
+|--------|-------------|
+| `at` | Fixed-time trigger, e.g. `"09:30"` (local time) |
+| `days` | Day filter, e.g. `"weekdays"`, `[mon, wed, fri]` |
+| `interval` | Interval trigger, e.g. `"4h"`, `"30m"` |
+| `require_idle` | Skip if you're active; retry on next heartbeat tick |
+| `precondition` | Shell guard — skip task if command returns non-zero (zero tokens consumed) |
+| `notify` | Push result to phone when done |
+| `model` | Override model, e.g. `"sonnet"`, `"haiku"` |
+| `cwd` | Working directory for the task |
+| `timeout` | Max run time |
+
+> **Scheduled tasks require system registration.** Run `metame daemon install-launchd` and tasks fire on schedule even with the screen locked or the lid closed — as long as the Mac is on.
 
 ### 5. Skills That Evolve Themselves
 
@@ -172,6 +193,13 @@ Task fails → skill-scout finds a skill → installs → retries → succeeds
 
 ## Quick Start
 
+**macOS / Linux / Windows WSL:**
+```bash
+curl -fsSL https://raw.githubusercontent.com/Yaron9/MetaMe/main/install.sh | bash
+```
+> Same command everywhere. The script detects your OS and uses Homebrew (macOS) or apt/dnf/pacman (Linux/WSL) to install Node.js automatically.
+
+**Already have Node.js ≥ 18:**
 ```bash
 npm install -g metame-cli && metame
 ```
@@ -183,7 +211,35 @@ npm install -g metame-cli && metame
 | 1. Install & profile | `metame` | First run: cognitive interview → builds `~/.claude_profile.yaml` |
 | 2. Connect phone | Follow the setup wizard | Bot token + app credentials → `~/.metame/daemon.yaml` |
 | 3. Start daemon | `metame start` | Background daemon launches, bot goes online |
-| 4. Auto-start | `metame daemon install-launchd` | Survives reboot + crash recovery |
+| 4. Register with system | macOS: `metame daemon install-launchd` · WSL/Linux: see below | Always-on, crash recovery |
+
+> **What does system registration mean?**
+> Once registered, MetaMe runs in the background automatically — screen locked, lid closed, woken from sleep — as long as the machine is on. Scheduled tasks fire on time. No terminal window needed.
+
+**WSL2 / Linux — register with systemd:**
+
+```bash
+cat > ~/.config/systemd/user/metame.service << 'EOF'
+[Unit]
+Description=MetaMe Daemon
+After=network.target
+
+[Service]
+ExecStart=/usr/bin/env metame start
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=default.target
+EOF
+
+systemctl --user enable metame
+systemctl --user start metame
+```
+
+> WSL2 requires systemd enabled first: add `[boot]\nsystemd=true` to `/etc/wsl.conf`, then restart WSL.
+
+> **WSL limitation:** `/mac` commands (macOS AppleScript/JXA automation) are not available.
 
 **Create your first Agent:**
 
@@ -208,15 +264,46 @@ npm install -g metame-cli && metame
 | **Browser Automation** | Built-in Playwright MCP. Browser control out of the box for every user. |
 | **Provider Relay** | Route through any Anthropic-compatible API. Use GPT-4, DeepSeek, Gemini — zero config file mutation. |
 | **Metacognition** | Detects behavioral patterns (decision style, comfort zones, goal drift) and injects mirror observations. Zero extra API cost. |
-| **Emergency Tools** | `/doctor` diagnostics, `/sh` raw shell, `/fix` config restore, `/undo` git-based rollback. |
+| **Multi-User ACL** | Role-based permission system (admin / member / stranger). Share bots with teammates safely. Dynamic user management via `/user` commands with hot-reload config. |
+| **Team Task** | Multi-agent task board for cross-agent collaboration. Agents can create, assign, and track tasks across workspaces. N-agent session scoping for parallel team workflows. |
+| **Emergency Tools** | `/doctor` diagnostics, `/mac` macOS control helpers, `/sh` raw shell, `/fix` config restore, `/undo` git-based rollback. |
 
 ## Defining Your Agents
 
-Agent configs live in `~/.metame/daemon.yaml` — local only, never uploaded to npm or Git.
+MetaMe's design philosophy: **one folder = one agent.**
+
+Give an agent a directory, drop a `CLAUDE.md` inside describing its role, and you're done. The folder is the agent — it can be a code project, a blog repo, any workspace you already have.
+
+### Option 1: Just say it (fastest)
+
+No commands needed. Tell the bot what you want in plain language — MetaMe understands intent and acts:
+
+```
+You:  Create an agent for this group, directory ~/projects/assistant
+Bot:  ✅ Agent created and bound
+      Name: assistant
+      Dir: ~/projects/assistant
+
+You:  Change this agent's role to: a writing and content creation assistant
+Bot:  ✅ Role definition updated in CLAUDE.md
+
+You:  Bind an agent to ~/AGI/MyProject
+Bot:  ✅ Agent bound
+      Name: MyProject
+      Dir: ~/AGI/MyProject
+
+You:  List all agents
+Bot:  📋 Agent list
+      🤖 assistant ◀ current
+      Dir: ~/projects/assistant
+      ...
+```
+
+Supported intents: create, bind, unbind, edit role, list — just say it naturally.
 
-### From your phone (recommended)
+### Option 2: Wizard commands
 
-The easiest way. Open any Telegram/Feishu group and use the `/agent` wizard:
+Use `/agent` commands in any Telegram/Feishu group:
 
 | Command | What it does |
 |---------|-------------|
@@ -226,21 +313,7 @@ The easiest way. Open any Telegram/Feishu group and use the `/agent` wizard:
 | `/agent edit` | Update the current agent's role description (rewrites its `CLAUDE.md` section). |
 | `/agent reset` | Remove the current agent's role section. |
 
-Example flow:
-```
-You:     /agent new
-Bot:     Please select a working directory:
-         📁 ~/AGI   📁 ~/projects   📁 ~/Desktop
-You:     ~/AGI/MyProject/NewDir
-Bot:     ✅ 已新建目录：~/AGI/MyProject/NewDir
-         What should we name this agent?
-You:     小美
-Bot:     Describe 小美's role and responsibilities:
-You:     Personal assistant. Manages my calendar, drafts messages, and tracks todos.
-Bot:     ✅ Agent「小美」created. CLAUDE.md updated with role definition.
-```
-
-You can tap a button to pick an existing directory, or type any path directly in chat. If the path doesn't exist, it's created automatically. All entry points (`/agent new` wizard and `/agent bind`) validate that the directory is real before saving.
+You can tap a button to pick an existing directory, or type any path directly in chat. If the path doesn't exist, it's created automatically.
 
 ### From config file (for power users)
 
@@ -263,7 +336,8 @@ projects:
     heartbeat_tasks:
       - name: "daily-review"
         prompt: "Review yesterday's commits and flag any issues"
-        interval: "24h"
+        at: "20:30"
+        days: [mon, tue, wed, thu, fri]
         notify: true
 
 feishu:
@@ -294,10 +368,20 @@ All agents share your cognitive profile (`~/.claude_profile.yaml`) — they all
 | `/list` | Browse & download project files |
 | `/model` | Switch model (sonnet/opus/haiku) |
 | `/agent bind <name> [dir]` | Register group as dedicated agent |
+| `/mac` | macOS control helper: permissions check/open + AppleScript/JXA execution |
 | `/sh <cmd>` | Raw shell — bypasses Claude |
 | `/memory` | Memory stats: fact count, session tags, DB size |
 | `/memory <keyword>` | Search long-term facts by keyword |
 | `/doctor` | Interactive diagnostics |
+| `/user add <open_id>` | Add a user (admin only) |
+| `/user role <open_id> <admin\|member>` | Set user role |
+| `/user list` | List all configured users |
+| `/user remove <open_id>` | Remove a user |
+| `/sessions` | Browse recent sessions with last message preview |
+| `/teamtask create <agent> <goal>` | Create a cross-agent collaboration task |
+| `/teamtask` | List recent TeamTasks (last 10) |
+| `/teamtask <task_id>` | View task detail |
+| `/teamtask resume <task_id>` | Resume a task |
 
 ## How It Works
 

package/index.js

@@ -30,7 +30,7 @@ if (!fs.existsSync(METAME_DIR)) {
 // Auto-deploy bundled scripts to ~/.metame/
 // IMPORTANT: daemon.yaml is USER CONFIG — never overwrite it. Only daemon-default.yaml (template) is synced.
 const scriptsDir = path.join(__dirname, 'scripts');
-const BUNDLED_BASE_SCRIPTS = ['signal-capture.js', 'distill.js', 'schema.js', 'pending-traits.js', 'migrate-v2.js', 'daemon.js', 'telegram-adapter.js', 'feishu-adapter.js', 'daemon-default.yaml', 'providers.js', 'session-analytics.js', 'resolve-yaml.js', 'utils.js', 'skill-evolution.js', 'memory.js', 'memory-extract.js', 'qmd-client.js', 'session-summarize.js'];
+const BUNDLED_BASE_SCRIPTS = ['signal-capture.js', 'distill.js', 'schema.js', 'pending-traits.js', 'migrate-v2.js', 'daemon.js', 'telegram-adapter.js', 'feishu-adapter.js', 'daemon-default.yaml', 'providers.js', 'session-analytics.js', 'resolve-yaml.js', 'utils.js', 'skill-evolution.js', 'memory.js', 'memory-extract.js', 'memory-search.js', 'qmd-client.js', 'session-summarize.js', 'check-macos-control-capabilities.sh', 'usage-classifier.js', 'task-board.js'];
 const DAEMON_MODULE_SCRIPTS = (() => {
   try {
     return fs.readdirSync(scriptsDir).filter((f) => /^daemon-[\w-]+\.js$/.test(f));
@@ -1755,15 +1755,22 @@ if (!isKnownUser) {
 // RAG: inject relevant facts based on current project (desktop-side equivalent of daemon RAG)
 try {
   const memory = require(path.join(__dirname, 'scripts', 'memory.js'));
-  // Derive project key from git repo name or cwd basename
-  let projectQuery = path.basename(process.cwd());
+  const { projectScopeFromCwd } = require(path.join(__dirname, 'scripts', 'utils.js'));
+  // Keep cwd basename as authoritative project filter for legacy rows (scope IS NULL).
+  const cwdProject = path.basename(process.cwd());
+  let repoProject = cwdProject;
   try {
     const { execSync } = require('child_process');
     const remote = execSync('git remote get-url origin 2>/dev/null || true', { encoding: 'utf8', stdio: 'pipe' }).trim();
-    if (remote) projectQuery = path.basename(remote, '.git');
+    if (remote) repoProject = path.basename(remote, '.git');
   } catch { /* not a git repo, use dirname */ }
 
-  const facts = memory.searchFacts(projectQuery, { limit: 5 });
+  const factQuery = repoProject === cwdProject ? cwdProject : `${repoProject} ${cwdProject}`;
+  const facts = memory.searchFacts(factQuery, {
+    limit: 5,
+    project: cwdProject || undefined,
+    scope: projectScopeFromCwd(process.cwd()) || undefined,
+  });
   if (facts.length > 0) {
     const factBlock = facts.map(f => `- [${f.relation}] ${f.value}`).join('\n');
     launchArgs.push(

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "metame-cli",
-    "version": "1.4.17",
+    "version": "1.4.19",
     "description": "The Cognitive Profile Layer for Claude Code. Knows how you think, not just what you said.",
     "main": "index.js",
     "bin": {
@@ -13,7 +13,7 @@
     "scripts": {
         "test": "node --test scripts/*.test.js",
         "start": "node index.js",
-        "sync:plugin": "cp scripts/schema.js scripts/pending-traits.js scripts/signal-capture.js scripts/distill.js scripts/daemon.js scripts/daemon-agent-commands.js scripts/daemon-session-commands.js scripts/daemon-admin-commands.js scripts/daemon-exec-commands.js scripts/daemon-ops-commands.js scripts/daemon-session-store.js scripts/daemon-checkpoints.js scripts/daemon-bridges.js scripts/daemon-file-browser.js scripts/daemon-runtime-lifecycle.js scripts/daemon-notify.js scripts/daemon-claude-engine.js scripts/daemon-command-router.js scripts/daemon-agent-tools.js scripts/daemon-task-scheduler.js scripts/telegram-adapter.js scripts/feishu-adapter.js scripts/daemon-default.yaml scripts/providers.js scripts/utils.js scripts/resolve-yaml.js scripts/memory.js scripts/memory-extract.js scripts/qmd-client.js scripts/session-summarize.js scripts/session-analytics.js scripts/skill-evolution.js plugin/scripts/ && echo '✅ Plugin scripts synced'",
+        "sync:plugin": "cp scripts/schema.js scripts/pending-traits.js scripts/signal-capture.js scripts/distill.js scripts/daemon.js scripts/daemon-agent-commands.js scripts/daemon-session-commands.js scripts/daemon-admin-commands.js scripts/daemon-exec-commands.js scripts/daemon-ops-commands.js scripts/daemon-session-store.js scripts/daemon-checkpoints.js scripts/daemon-bridges.js scripts/daemon-file-browser.js scripts/daemon-runtime-lifecycle.js scripts/daemon-notify.js scripts/daemon-claude-engine.js scripts/daemon-command-router.js scripts/daemon-user-acl.js scripts/daemon-agent-tools.js scripts/daemon-task-scheduler.js scripts/daemon-task-envelope.js scripts/task-board.js scripts/telegram-adapter.js scripts/feishu-adapter.js scripts/daemon-default.yaml scripts/providers.js scripts/utils.js scripts/usage-classifier.js scripts/resolve-yaml.js scripts/memory.js scripts/memory-extract.js scripts/qmd-client.js scripts/session-summarize.js scripts/session-analytics.js scripts/skill-evolution.js scripts/check-macos-control-capabilities.sh plugin/scripts/ && echo '✅ Plugin scripts synced'",
         "restart:daemon": "node index.js stop 2>/dev/null; sleep 1; node index.js start 2>/dev/null || echo '⚠️  Daemon not running or restart failed'",
         "precommit": "npm run sync:plugin && npm run restart:daemon"
     },

package/scripts/check-macos-control-capabilities.sh

@@ -0,0 +1,77 @@
+#!/usr/bin/env bash
+set -u
+set -o pipefail
+
+PASS=0
+FAIL=0
+WARN=0
+
+print_line() {
+  printf '%s\n' "$1"
+}
+
+run_check() {
+  local name="$1"
+  local mode="$2"
+  local cmd="$3"
+
+  local output
+  output="$(bash -o pipefail -lc "$cmd" 2>&1)"
+  local code=$?
+
+  if [ "$mode" = "pass_on_zero" ]; then
+    if [ $code -eq 0 ]; then
+      PASS=$((PASS + 1))
+      print_line "[PASS] $name"
+      [ -n "$output" ] && print_line "  $output"
+    else
+      FAIL=$((FAIL + 1))
+      print_line "[FAIL] $name"
+      [ -n "$output" ] && print_line "  $output"
+    fi
+    return
+  fi
+
+  if [ "$mode" = "warn_on_nonzero" ]; then
+    if [ $code -eq 0 ]; then
+      PASS=$((PASS + 1))
+      print_line "[PASS] $name"
+      [ -n "$output" ] && print_line "  $output"
+    else
+      WARN=$((WARN + 1))
+      print_line "[WARN] $name"
+      [ -n "$output" ] && print_line "  $output"
+    fi
+    return
+  fi
+
+  FAIL=$((FAIL + 1))
+  print_line "[FAIL] $name"
+  print_line "  invalid mode: $mode"
+}
+
+print_line "MetaMe macOS control capability check"
+print_line "Timestamp: $(date '+%Y-%m-%d %H:%M:%S %z')"
+print_line ""
+
+run_check "osascript binary available" "pass_on_zero" "which osascript"
+run_check "AppleScript baseline" "pass_on_zero" "osascript -e 'return \"ok\"'"
+run_check "Finder automation" "pass_on_zero" "osascript -e 'tell application \"Finder\" to get name of startup disk'"
+run_check "System Events accessibility" "pass_on_zero" "osascript -e 'tell application \"System Events\" to get UI elements enabled'"
+run_check "GUI app launch/control (Calculator)" "pass_on_zero" "open -a Calculator >/dev/null 2>&1; sleep 1; osascript -e 'tell application \"System Events\" to tell process \"Calculator\" to return {frontmost, (count of windows)}'; osascript -e 'tell application \"Calculator\" to quit' >/dev/null 2>&1"
+
+SHOT_PATH="/tmp/metame_gui_test_$$.png"
+run_check "Screenshot capability (screencapture)" "pass_on_zero" "screencapture -x '$SHOT_PATH' && ls -lh '$SHOT_PATH'"
+rm -f "$SHOT_PATH" >/dev/null 2>&1
+
+run_check "Full Disk probe: read ~/Library/Mail" "warn_on_nonzero" "ls '$HOME/Library/Mail' | head -n 3"
+run_check "Full Disk probe: query Safari History.db" "warn_on_nonzero" "sqlite3 '$HOME/Library/Safari/History.db' 'select count(*) from history_items;'"
+
+print_line ""
+print_line "Summary: pass=$PASS warn=$WARN fail=$FAIL"
+
+if [ $FAIL -gt 0 ]; then
+  exit 1
+fi
+
+exit 0