monomind 1.16.5 → 1.16.7

package/packages/@monomind/cli/.claude/skills/mastermind/access.md

@@ -0,0 +1,236 @@
+---
+name: mastermind-access
+description: Mastermind access — manage org membership roles (owner/admin/operator/viewer), granular permission grants, invite tokens, and pending join requests. Controls who can do what inside an org.
+type: domain-skill
+default_mode: confirm
+---
+
+# Mastermind Access
+
+This skill is invoked by `mastermind:access` or directly via `/mastermind:access`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
+- `org_name`: org to manage access for (required)
+- `action`: list | invite | set-role | grant | revoke | remove | suspend | join-requests | approve-join | reject-join
+- `member_id`: member slug/id (required for set-role/grant/revoke/remove/suspend)
+- `role`: owner | admin | operator | viewer (required for invite/set-role)
+- `permission`: permission key to grant/revoke (see Permission Keys below)
+- `request_id`: join request id (required for approve-join/reject-join)
+- `caller`: command | master
+
+---
+
+## Permission Keys
+
+| Key | Label | Implied by role |
+|-----|-------|-----------------|
+| `agents:create` | Create agents | owner, admin |
+| `users:invite` | Invite members | owner, admin |
+| `users:manage_permissions` | Manage members | owner |
+| `tasks:assign` | Assign tasks | owner, admin, operator |
+| `tasks:assign_scope` | Assign scoped tasks | — (explicit only) |
+| `tasks:manage_active_checkouts` | Manage active checkouts | — (explicit only) |
+| `joins:approve` | Approve join requests | owner, admin |
+| `environments:manage` | Manage environments | owner, admin |
+
+**Role implied grants:**
+- `owner` → all permissions
+- `admin` → agents:create, users:invite, tasks:assign, joins:approve, environments:manage
+- `operator` → tasks:assign
+- `viewer` → (none)
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Load Members File
+
+```bash
+orgFile=".monomind/orgs/${org_name}.json"
+[ ! -f "$orgFile" ] && { echo "ERROR: Org '${org_name}' not found."; exit 1; }
+
+membersFile=".monomind/orgs/${org_name}-members.json"
+[ ! -f "$membersFile" ] && cat > "$membersFile" <<'EOF'
+{"members":[],"join_requests":[]}
+EOF
+```
+
+---
+
+## Step 2 — Execute Action
+
+### list (default)
+
+```bash
+echo "MEMBERS — org: $org_name"
+echo "────────────────────────────────────────────────────────"
+printf "%-20s %-10s %-12s %s\n" "ID" "ROLE" "STATUS" "EXPLICIT GRANTS"
+echo "────────────────────────────────────────────────────────"
+
+count=$(jq '.members | length' "$membersFile")
+if [ "$count" -eq 0 ]; then
+  echo "  No members. Use --action invite to add the first member."
+else
+  jq -r '(.members // [])[] |
+    [.id, (.role // "viewer"), (.status // "active"),
+     ((.grants // []) | join(", ") | if . == "" then "(none)" else . end)]
+    | @tsv' "$membersFile" | while IFS=$'\t' read -r id role status grants; do
+    printf "%-20s %-10s %-12s %s\n" "$id" "$role" "$status" "$grants"
+  done
+fi
+
+# Show pending join requests
+pending=$(jq '[(.join_requests // [])[] | select(.status == "pending")] | length' "$membersFile")
+[ "$pending" -gt 0 ] && echo "" && echo "  ⚠ $pending pending join request(s). Run --action join-requests to review."
+```
+
+### invite
+
+Generate an invite token for a new member:
+
+```bash
+[ -z "$role" ] && role="operator"
+case "$role" in owner|admin|operator|viewer) : ;; *)
+  echo "ERROR: --role must be one of: owner, admin, operator, viewer"; exit 1 ;;
+esac
+
+inviteToken=$(openssl rand -hex 16 2>/dev/null || python3 -c "import secrets; print(secrets.token_hex(16))")
+inviteUrl="https://monomind.local/invite?org=${org_name}&token=${inviteToken}&role=${role}"
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+
+tmp="${membersFile}.tmp"
+jq --arg token "$inviteToken" --arg role "$role" --arg ts "$ts" --arg url "$inviteUrl" \
+  '.join_requests += [{"id":$token,"type":"invite","role":$role,"status":"pending","token":$token,"inviteUrl":$url,"createdAt":$ts}]' \
+  "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
+
+echo "INVITE CREATED"
+echo "  Role:  $role"
+echo "  Token: $inviteToken"
+echo "  URL:   $inviteUrl"
+echo ""
+echo "Share this URL or token with the new member."
+```
+
+### set-role
+
+```bash
+[ -z "$member_id" ] && { echo "ERROR: --member-id required."; exit 1; }
+[ -z "$role" ] && { echo "ERROR: --role required."; exit 1; }
+case "$role" in owner|admin|operator|viewer) : ;; *)
+  echo "ERROR: --role must be one of: owner, admin, operator, viewer"; exit 1 ;;
+esac
+
+tmp="${membersFile}.tmp"
+jq --arg id "$member_id" --arg role "$role" \
+  '.members = [(.members // [])[] | if .id == $id then .role = $role else . end]' \
+  "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
+echo "Member '$member_id' role → $role"
+```
+
+### grant / revoke
+
+```bash
+[ -z "$member_id" ] && { echo "ERROR: --member-id required."; exit 1; }
+[ -z "$permission" ] && { echo "ERROR: --permission required (e.g. agents:create)."; exit 1; }
+
+validKeys="agents:create users:invite users:manage_permissions tasks:assign tasks:assign_scope tasks:manage_active_checkouts joins:approve environments:manage"
+echo "$validKeys" | grep -qw "$permission" || { echo "ERROR: Unknown permission '$permission'."; exit 1; }
+
+tmp="${membersFile}.tmp"
+if [ "$action" = "grant" ]; then
+  jq --arg id "$member_id" --arg perm "$permission" \
+    '.members = [(.members // [])[] | if .id == $id then .grants = ((.grants // []) + [$perm] | unique) else . end]' \
+    "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
+  echo "Granted: $permission → $member_id"
+else
+  jq --arg id "$member_id" --arg perm "$permission" \
+    '.members = [(.members // [])[] | if .id == $id then .grants = ((.grants // []) | map(select(. != $perm))) else . end]' \
+    "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
+  echo "Revoked: $permission from $member_id"
+fi
+```
+
+### remove
+
+```bash
+[ -z "$member_id" ] && { echo "ERROR: --member-id required."; exit 1; }
+tmp="${membersFile}.tmp"
+jq --arg id "$member_id" '.members = [(.members // [])[] | select(.id != $id)]' \
+  "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
+echo "Removed member: $member_id"
+```
+
+### suspend
+
+```bash
+[ -z "$member_id" ] && { echo "ERROR: --member-id required."; exit 1; }
+tmp="${membersFile}.tmp"
+jq --arg id "$member_id" \
+  '.members = [(.members // [])[] | if .id == $id then .status = "suspended" else . end]' \
+  "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
+echo "Member '$member_id' suspended. They cannot perform org actions until reinstated."
+```
+
+### join-requests
+
+List pending join requests:
+
+```bash
+echo "JOIN REQUESTS — org: $org_name"
+echo "────────────────────────────────────────────────────────"
+jq -r '(.join_requests // [])[] | select(.status == "pending") |
+  "[\(.id)] type=\(.type // "join")  role=\(.role // "viewer")  created=\(.createdAt // "?")
+   → /mastermind:access --org '"$org_name"' --action approve-join --request-id \(.id)
+   → /mastermind:access --org '"$org_name"' --action reject-join  --request-id \(.id)"
+' "$membersFile" 2>/dev/null || echo "  No pending join requests."
+```
+
+### approve-join / reject-join
+
+```bash
+[ -z "$request_id" ] && { echo "ERROR: --request-id required."; exit 1; }
+newStatus=$([ "$action" = "approve-join" ] && echo "approved" || echo "rejected")
+
+tmp="${membersFile}.tmp"
+if [ "$action" = "approve-join" ]; then
+  # Get role from request, create member record
+  requestRole=$(jq -r --arg id "$request_id" '(.join_requests // [])[] | select(.id == $id) | .role // "viewer"' "$membersFile")
+  jq --arg id "$request_id" --arg status "$newStatus" --arg role "$requestRole" --arg ts "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
+    '.join_requests = [(.join_requests // [])[] | if .id == $id then .status = $status | .resolvedAt = $ts else . end] |
+     .members += [{"id":$id,"role":$role,"status":"active","grants":[],"joinedAt":$ts}]' \
+    "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
+  echo "Approved join request $request_id (role: $requestRole). Member added."
+else
+  jq --arg id "$request_id" --arg status "$newStatus" --arg ts "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
+    '.join_requests = [(.join_requests // [])[] | if .id == $id then .status = $status | .resolvedAt = $ts else . end]' \
+    "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
+  echo "Rejected join request $request_id."
+fi
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+org: <org_name>
+members_count: <N>
+pending_requests: <N>
+```
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.

package/packages/@monomind/cli/.claude/skills/mastermind/activity.md

@@ -0,0 +1,191 @@
+---
+name: mastermind-activity
+description: Mastermind activity — full activity feed for an org with event-type filtering, actor lookups, and entity name resolution. Fetches up to 200 recent events across issue, project, goal, agent, and routine entity types. Mirrors Activity.tsx.
+type: domain-skill
+default_mode: auto
+---
+
+# Mastermind Activity
+
+This skill is invoked by `mastermind:activity` or directly via `/mastermind:activity`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
+- `org_name`: org to query (required)
+- `action`: list | filter | export | stats
+- `entity_type`: issue | project | goal | agent | routine | all (default: all)
+- `actor_id`: filter by agent or user id (optional)
+- `limit`: max events to show (default: 50, max: 200)
+- `since`: ISO timestamp — show events after this time (optional)
+- `output_file`: file path to export JSONL (for export action)
+- `caller`: command | master
+
+---
+
+## Event Entity Types
+
+| Type | Description |
+|------|-------------|
+| `issue` | Issue created, status changed, assigned, closed |
+| `project` | Project created, updated, archived |
+| `goal` | Goal created, progress updated, closed |
+| `agent` | Agent started, stopped, errored, completed |
+| `routine` | Routine triggered, run started, run completed |
+| `approval` | Approval requested, approved, rejected |
+| `workspace` | Workspace provisioned, teardown |
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Load Activity Log
+
+```bash
+orgFile=".monomind/orgs/${org_name}.json"
+[ ! -f "$orgFile" ] && { echo "ERROR: Org '${org_name}' not found."; exit 1; }
+
+activityFile=".monomind/orgs/${org_name}-activity.jsonl"
+limit="${limit:-50}"
+entityType="${entity_type:-all}"
+```
+
+---
+
+## Step 2 — Execute Action
+
+### list (default)
+
+```bash
+echo "ACTIVITY — org: $org_name"
+echo "  Filter: type=${entityType}  limit=${limit}${actor_id:+  actor=${actor_id}}${since:+  since=${since}}"
+echo "────────────────────────────────────────────────────────"
+printf "%-20s %-12s %-14s %-24s %s\n" "TIMESTAMP" "ENTITY TYPE" "ACTOR" "ENTITY" "EVENT"
+echo "────────────────────────────────────────────────────────"
+
+if [ ! -f "$activityFile" ]; then
+  # Fall back to mastermind-events.jsonl
+  eventSrc="data/mastermind-events.jsonl"
+  if [ ! -f "$eventSrc" ]; then
+    echo "  No activity log found. Activity is written when agents run."
+    exit 0
+  fi
+  activityFile="$eventSrc"
+fi
+
+tail -${limit} "$activityFile" | while IFS= read -r line; do
+  et=$(echo "$line" | jq -r '.entityType // .type // "unknown"')
+  actor=$(echo "$line" | jq -r '.actorId // .actor // "-"' | cut -c1-12)
+  entity=$(echo "$line" | jq -r '(.entityId // .entity // "-")' | cut -c1-22)
+  event=$(echo "$line" | jq -r '.event // .action // .type // "-"')
+  ts=$(echo "$line" | jq -r '.ts // .timestamp // .createdAt // "-"' | cut -c1-19)
+
+  # Apply filters
+  [ "$entityType" != "all" ] && [ "$et" != "$entityType" ] && continue
+  [ -n "$actor_id" ] && [ "$actor" != "$actor_id" ] && continue
+  [ -n "$since" ] && [ "$ts" \< "$since" ] && continue
+
+  printf "%-20s %-12s %-14s %-24s %s\n" "$ts" "$et" "$actor" "$entity" "$event"
+done
+
+echo ""
+echo "  Showing last $limit events. Use --limit N for more (max 200)."
+```
+
+### filter
+
+```bash
+echo "ACTIVITY FILTER — org: $org_name  type=$entityType"
+echo "────────────────────────────────────────────────────────"
+
+if [ ! -f "$activityFile" ]; then
+  echo "  No activity log found."
+  exit 0
+fi
+
+# Show available entity types in the log
+echo "AVAILABLE ENTITY TYPES IN LOG:"
+tail -200 "$activityFile" | jq -r '.entityType // .type // "unknown"' 2>/dev/null | sort | uniq -c | sort -rn | while read -r cnt et; do
+  printf "  %-20s %d events\n" "$et" "$cnt"
+done
+
+echo ""
+echo "  Filter: /mastermind:activity --org $org_name --action list --entity-type <type>"
+```
+
+### stats
+
+```bash
+echo "ACTIVITY STATS — org: $org_name"
+echo "────────────────────────────────────────────────────────"
+
+if [ ! -f "$activityFile" ]; then
+  echo "  No activity log found."
+  exit 0
+fi
+
+total=$(wc -l < "$activityFile" | tr -d ' ')
+echo "  Total events: $total"
+echo ""
+
+echo "BY ENTITY TYPE:"
+tail -200 "$activityFile" | jq -r '.entityType // .type // "unknown"' 2>/dev/null | sort | uniq -c | sort -rn | \
+  while read -r cnt et; do printf "  %-20s %d\n" "$et" "$cnt"; done
+
+echo ""
+echo "BY ACTOR (top 5):"
+tail -200 "$activityFile" | jq -r '.actorId // .actor // "-"' 2>/dev/null | sort | uniq -c | sort -rn | head -5 | \
+  while read -r cnt actor; do printf "  %-28s %d\n" "$actor" "$cnt"; done
+
+# Last 24h
+cutoff=$(date -u -v-24H +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -u --date="24 hours ago" +%Y-%m-%dT%H:%M:%SZ 2>/dev/null)
+last24=$(tail -200 "$activityFile" | jq -r --arg c "$cutoff" 'select((.ts // .timestamp // .createdAt // "") >= $c) | .entityType' 2>/dev/null | wc -l | tr -d ' ')
+echo ""
+echo "  Events in last 24h: $last24"
+```
+
+### export
+
+```bash
+outFile="${output_file:-.monomind/exports/${org_name}-activity-$(date +%Y%m%d%H%M%S).jsonl}"
+mkdir -p "$(dirname "$outFile")"
+
+if [ ! -f "$activityFile" ]; then
+  echo "  No activity log to export."
+  exit 0
+fi
+
+if [ "$entityType" != "all" ]; then
+  jq -r --arg et "$entityType" 'select(.entityType == $et or .type == $et)' "$activityFile" > "$outFile"
+else
+  cp "$activityFile" "$outFile"
+fi
+
+lines=$(wc -l < "$outFile" | tr -d ' ')
+echo "Activity exported: $outFile  ($lines events)"
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+org: <org_name>
+entity_type: <entity_type>
+events_shown: <N>
+```
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.

package/packages/@monomind/cli/.claude/skills/mastermind/adapter-manager.md

@@ -0,0 +1,259 @@
+---
+name: mastermind-adapter-manager
+description: Mastermind adapter-manager — global instance-level adapter catalog. Lists all built-in and npm-installed adapters, enables/disables them in menus, reinstalls from npm to pick up updates, adds custom HTTP adapters, and removes custom ones. Complements mastermind:adapters (per-org) with the global registry. Mirrors AdapterManager.tsx.
+type: domain-skill
+default_mode: confirm
+---
+
+# Mastermind Adapter Manager
+
+This skill is invoked by `mastermind:adapter-manager` or directly via `/mastermind:adapter-manager`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
+- `action`: list | enable | disable | reinstall | add-http | remove | check-update
+- `adapter_type`: adapter type slug (required for enable/disable/reinstall/remove)
+- `http_url`: base URL for the HTTP adapter endpoint (for add-http)
+- `http_name`: display name for the HTTP adapter (for add-http)
+- `http_label`: short label (for add-http; default: http_name)
+- `caller`: command | master
+
+---
+
+## Adapter Registry Fields
+
+```json
+{
+  "type": "adapter-slug",
+  "label": "Display Name",
+  "source": "built-in | npm | http",
+  "packageName": "@paperclipai/adapter-name",
+  "version": "1.2.0",
+  "modelsCount": 3,
+  "disabled": false,
+  "isBuiltIn": true,
+  "installedAt": "2026-01-01T00:00:00Z"
+}
+```
+
+---
+
+## Built-in Adapter Types
+
+| Type | Label | Notes |
+|------|-------|-------|
+| `claude-local` | Claude (local CLI) | Default |
+| `gemini-local` | Gemini (local) | |
+| `codex-local` | Codex (OpenAI Codex CLI) | |
+| `cursor` | Cursor IDE | |
+| `opencode-local` | OpenCode | |
+| `hermes-local` | Hermes (Ollama) | |
+| `http` | Custom HTTP | Configurable endpoint |
+| `acpx` | ACPX Protocol | |
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Load Global Adapter Registry
+
+```bash
+adapterFile=".monomind/adapters/registry.json"
+mkdir -p ".monomind/adapters"
+if [ ! -f "$adapterFile" ]; then
+  cat > "$adapterFile" <<'EOF'
+{
+  "adapters": [
+    {"type":"claude-local","label":"Claude (local CLI)","source":"built-in","isBuiltIn":true,"disabled":false,"modelsCount":3},
+    {"type":"gemini-local","label":"Gemini (local)","source":"built-in","isBuiltIn":true,"disabled":false,"modelsCount":2},
+    {"type":"codex-local","label":"Codex (OpenAI)","source":"built-in","isBuiltIn":true,"disabled":false,"modelsCount":3},
+    {"type":"cursor","label":"Cursor IDE","source":"built-in","isBuiltIn":true,"disabled":false,"modelsCount":1},
+    {"type":"opencode-local","label":"OpenCode","source":"built-in","isBuiltIn":true,"disabled":false,"modelsCount":1},
+    {"type":"hermes-local","label":"Hermes (Ollama)","source":"built-in","isBuiltIn":true,"disabled":false,"modelsCount":1},
+    {"type":"http","label":"Custom HTTP","source":"built-in","isBuiltIn":true,"disabled":true,"modelsCount":0},
+    {"type":"acpx","label":"ACPX Protocol","source":"built-in","isBuiltIn":true,"disabled":true,"modelsCount":0}
+  ]
+}
+EOF
+fi
+```
+
+---
+
+## Step 2 — Execute Action
+
+### list (default)
+
+```bash
+echo "GLOBAL ADAPTER REGISTRY"
+echo "────────────────────────────────────────────────────────"
+printf "%-20s %-22s %-10s %-8s %-8s %s\n" "TYPE" "LABEL" "SOURCE" "MODELS" "STATUS" "VERSION"
+echo "────────────────────────────────────────────────────────"
+
+jq -r '(.adapters // [])[] |
+  [.type, (.label // .type), (.source // "built-in"),
+   ((.modelsCount // 0) | tostring),
+   (if .disabled then "disabled" else "enabled" end),
+   (.version // "-")] | @tsv' \
+  "$adapterFile" | while IFS=$'\t' read -r type label src models status ver; do
+  printf "%-20s %-22s %-10s %-8s %-8s %s\n" "$type" "$label" "$src" "$models" "$status" "$ver"
+done
+
+total=$(jq '.adapters | length' "$adapterFile")
+enabled=$(jq '[(.adapters // [])[] | select(.disabled == false or .disabled == null)] | length' "$adapterFile")
+echo ""
+echo "  Total: $total  |  Enabled: $enabled  |  Disabled: $((total - enabled))"
+echo ""
+echo "  To add a custom HTTP adapter: --action add-http --http-url http://localhost:8080 --http-name 'My Model'"
+```
+
+### enable
+
+```bash
+[ -z "$adapter_type" ] && { echo "ERROR: --adapter-type required."; exit 1; }
+
+exists=$(jq -r --arg t "$adapter_type" '[(.adapters // [])[] | select(.type == $t)] | length' "$adapterFile")
+[ "$exists" -eq 0 ] && { echo "ERROR: Adapter '$adapter_type' not found. Use --action list to see available adapters."; exit 1; }
+
+tmp="${adapterFile}.tmp"
+jq --arg t "$adapter_type" \
+  '.adapters = [(.adapters // [])[] | if .type == $t then .disabled = false else . end]' \
+  "$adapterFile" > "$tmp" && mv "$tmp" "$adapterFile"
+
+echo "Adapter '$adapter_type' ENABLED — will appear in agent model menus."
+```
+
+### disable
+
+```bash
+[ -z "$adapter_type" ] && { echo "ERROR: --adapter-type required."; exit 1; }
+
+isBuiltIn=$(jq -r --arg t "$adapter_type" '(.adapters // [])[] | select(.type == $t) | .isBuiltIn // false' "$adapterFile")
+
+tmp="${adapterFile}.tmp"
+jq --arg t "$adapter_type" \
+  '.adapters = [(.adapters // [])[] | if .type == $t then .disabled = true else . end]' \
+  "$adapterFile" > "$tmp" && mv "$tmp" "$adapterFile"
+
+echo "Adapter '$adapter_type' DISABLED — hidden from model menus."
+[ "$isBuiltIn" = "true" ] && echo "  NOTE: Built-in adapter disabled but not removed. Re-enable with --action enable."
+```
+
+### reinstall
+
+```bash
+[ -z "$adapter_type" ] && { echo "ERROR: --adapter-type required."; exit 1; }
+
+pkg=$(jq -r --arg t "$adapter_type" '(.adapters // [])[] | select(.type == $t) | .packageName // ""' "$adapterFile")
+[ -z "$pkg" ] && { echo "ERROR: Adapter '$adapter_type' has no packageName — cannot reinstall. Only npm-installed adapters support reinstall."; exit 1; }
+
+echo "REINSTALL — $adapter_type from $pkg"
+echo "────────────────────────────────────────────────────────"
+echo "  Running: npm install $pkg"
+
+if npm install "$pkg" 2>&1 | tail -5; then
+  newVer=$(node -e "try{console.log(require('$pkg/package.json').version)}catch(e){console.log('unknown')}" 2>/dev/null)
+  ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+  tmp="${adapterFile}.tmp"
+  jq --arg t "$adapter_type" --arg v "$newVer" --arg ts "$ts" \
+    '.adapters = [(.adapters // [])[] | if .type == $t then .version = $v | .reinstalledAt = $ts else . end]' \
+    "$adapterFile" > "$tmp" && mv "$tmp" "$adapterFile"
+  echo "  Reinstalled: $adapter_type @ $newVer"
+else
+  echo "  ERROR: npm install failed. Check your network and package name."
+fi
+```
+
+### add-http
+
+```bash
+[ -z "$http_url" ] && { echo "ERROR: --http-url required (e.g. http://localhost:8080)."; exit 1; }
+[ -z "$http_name" ] && { echo "ERROR: --http-name required (display name for this adapter)."; exit 1; }
+
+# Validate URL
+echo "$http_url" | grep -qE '^https?://' || { echo "ERROR: --http-url must start with http:// or https://"; exit 1; }
+
+# Generate slug from name
+slug=$(echo "${http_name}" | tr '[:upper:]' '[:lower:]' | tr -cs 'a-z0-9' '-' | sed 's/^-//;s/-$//')
+slug="http-${slug}"
+
+# Check for duplicate
+dup=$(jq -r --arg t "$slug" '[(.adapters // [])[] | select(.type == $t)] | length' "$adapterFile")
+[ "$dup" -gt 0 ] && { echo "ERROR: Adapter slug '$slug' already exists. Remove first: --action remove --adapter-type $slug"; exit 1; }
+
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+tmp="${adapterFile}.tmp"
+jq --arg type "$slug" \
+   --arg label "${http_label:-$http_name}" \
+   --arg url "$http_url" \
+   --arg ts "$ts" \
+  '.adapters += [{"type":$type,"label":$label,"source":"http","isBuiltIn":false,"disabled":false,"modelsCount":0,"httpUrl":$url,"installedAt":$ts}]' \
+  "$adapterFile" > "$tmp" && mv "$tmp" "$adapterFile"
+
+echo "HTTP adapter added: $slug"
+echo "  Label:   ${http_label:-$http_name}"
+echo "  URL:     $http_url"
+echo "  Slug:    $slug"
+echo "  Status:  enabled"
+```
+
+### remove
+
+```bash
+[ -z "$adapter_type" ] && { echo "ERROR: --adapter-type required."; exit 1; }
+
+isBuiltIn=$(jq -r --arg t "$adapter_type" '(.adapters // [])[] | select(.type == $t) | .isBuiltIn // false' "$adapterFile")
+[ "$isBuiltIn" = "true" ] && { echo "ERROR: Cannot remove built-in adapter '$adapter_type'. Use --action disable instead."; exit 1; }
+
+tmp="${adapterFile}.tmp"
+jq --arg t "$adapter_type" \
+  '.adapters = [(.adapters // [])[] | select(.type != $t)]' \
+  "$adapterFile" > "$tmp" && mv "$tmp" "$adapterFile"
+
+echo "Adapter '$adapter_type' removed from registry."
+```
+
+### check-update
+
+```bash
+echo "CHECKING FOR ADAPTER UPDATES"
+echo "────────────────────────────────────────────────────────"
+
+jq -r '(.adapters // [])[] | select(.packageName != null and .packageName != "") |
+  [.type, .packageName, (.version // "unknown")] | @tsv' \
+  "$adapterFile" | while IFS=$'\t' read -r type pkg ver; do
+  latest=$(curl -sf "https://registry.npmjs.org/${pkg}/latest" 2>/dev/null | jq -r '.version // "?"' 2>/dev/null || echo "?")
+  if [ "$latest" != "?" ] && [ "$latest" != "$ver" ]; then
+    echo "  [$type]  $ver  →  $latest  (update available: npm install $pkg)"
+  else
+    echo "  [$type]  $ver  (up to date)"
+  fi
+done
+
+npmCount=$(jq '[(.adapters // [])[] | select(.packageName != null)] | length' "$adapterFile")
+[ "$npmCount" -eq 0 ] && echo "  No npm-installed adapters to check."
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+adapter_type: <type>
+```
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.