monomind 1.16.5 → 1.16.7

package/packages/@monomind/cli/.claude/skills/mastermind/plugin-settings.md

@@ -0,0 +1,273 @@
+---
+name: mastermind-plugin-settings
+description: Mastermind plugin-settings — inspect and configure a single installed plugin. View configuration fields, manage file system access grants (read/write paths), check runtime health/status, and update plugin settings. Mirrors Paperclip's PluginSettings page with configuration and status tabs.
+type: domain-skill
+default_mode: confirm
+---
+
+# Mastermind Plugin Settings
+
+This skill is invoked by `mastermind:plugin-settings` or directly via `/mastermind:plugin-settings`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
+- `plugin_id`: plugin id to manage (required)
+- `org_name`: org scope (optional — uses global registry if omitted)
+- `action`: show | config | status | grants | set-config | add-grant | remove-grant
+- `config_key`: config key to set (for set-config)
+- `config_value`: config value (for set-config)
+- `grant_path`: filesystem path to grant access to (for add-grant/remove-grant)
+- `grant_access`: read | write | readwrite (for add-grant, default: read)
+- `caller`: command | master
+
+---
+
+## Plugin Configuration Model
+
+```json
+{
+  "id": "plugin-slug",
+  "packageName": "@monomind/plugin-name",
+  "status": "installed",
+  "version": "1.2.0",
+  "category": "monitoring",
+  "config": {
+    "apiKey": "***",
+    "webhookUrl": "https://...",
+    "customField": "value"
+  },
+  "grants": [
+    { "path": "/tmp/plugin-data", "access": "readwrite" },
+    { "path": "/project/logs", "access": "read" }
+  ],
+  "health": {
+    "status": "ok",
+    "lastCheck": "2026-01-01T00:00:00Z",
+    "message": null
+  }
+}
+```
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Load Plugin Registry
+
+```bash
+registryFile=".monomind/plugins/registry.json"
+[ ! -f "$registryFile" ] && { echo "ERROR: No plugin registry found. Install plugins via /mastermind:plugins."; exit 1; }
+
+pluginDef=$(jq -r --arg id "$plugin_id" '(.plugins // [])[] | select(.id == $id)' "$registryFile")
+[ -z "$pluginDef" ] && { echo "ERROR: Plugin '$plugin_id' not found. List plugins via /mastermind:plugins --action list."; exit 1; }
+
+# Load org-level overrides if org_name specified
+orgPluginsFile=""
+if [ -n "$org_name" ]; then
+  orgPluginsFile=".monomind/orgs/${org_name}-plugins.json"
+  orgOverride=$([ -f "$orgPluginsFile" ] && jq -r --arg id "$plugin_id" '(.plugins // [])[] | select(.id == $id)' "$orgPluginsFile" || echo "")
+fi
+```
+
+---
+
+## Step 2 — Execute Action
+
+### show (default)
+
+```bash
+echo "PLUGIN — $plugin_id"
+echo "────────────────────────────────────────────────────────"
+
+echo "$pluginDef" | jq -r '
+  "  ID:         \(.id)",
+  "  Package:    \(.packageName // "-")",
+  "  Version:    \(.version // "-")",
+  "  Status:     \(.status // "unknown")",
+  "  Category:   \(.category // "general")",
+  "  Local path: \(if .isLocalPath then "yes" else "no" end)",
+  "  Installed:  \(.installedAt // "-")"
+'
+
+if [ -n "$orgOverride" ] && [ "$orgOverride" != "null" ]; then
+  echo ""
+  echo "  ORG OVERRIDE ($org_name):"
+  echo "$orgOverride" | jq -r '"  Status: \(.status // "inherited")"'
+fi
+
+# Config summary
+configCount=$(echo "$pluginDef" | jq -r '(.config // {}) | length')
+echo ""
+echo "  Config fields:  $configCount"
+echo "  Grants:         $(echo "$pluginDef" | jq -r '(.grants // []) | length')"
+
+# Health
+healthStatus=$(echo "$pluginDef" | jq -r '.health.status // "unknown"')
+healthMsg=$(echo "$pluginDef" | jq -r '.health.message // ""')
+echo "  Health:         $healthStatus${healthMsg:+ — $healthMsg}"
+
+# Last error
+lastErr=$(echo "$pluginDef" | jq -r '.lastError // ""')
+[ -n "$lastErr" ] && echo "" && echo "  LAST ERROR: $lastErr"
+```
+
+### config
+
+```bash
+echo "CONFIG — $plugin_id"
+echo "────────────────────────────────────────────────────────"
+
+config=$(echo "$pluginDef" | jq -r '.config // {}')
+count=$(echo "$config" | jq 'length')
+
+if [ "$count" -eq 0 ]; then
+  echo "  No configuration fields."
+  echo "  Set a field: --action set-config --config-key <key> --config-value <value>"
+else
+  echo "$config" | jq -r 'to_entries[] |
+    if (.value | type) == "string" and (.key | test("key|token|secret|password|api"; "i")) then
+      "  \(.key) = ***"
+    else
+      "  \(.key) = \(.value)"
+    end'
+fi
+```
+
+### status
+
+```bash
+echo "PLUGIN STATUS — $plugin_id"
+echo "────────────────────────────────────────────────────────"
+
+echo "$pluginDef" | jq -r '
+  "  Status:      \(.status // "unknown")",
+  "  Version:     \(.version // "-")",
+  "  Installed:   \(.installedAt // "-")"
+'
+
+health=$(echo "$pluginDef" | jq -r '.health // {}')
+healthStatus=$(echo "$health" | jq -r '.status // "unknown"')
+lastCheck=$(echo "$health" | jq -r '.lastCheck // "-"')
+healthMsg=$(echo "$health" | jq -r '.message // ""')
+
+echo ""
+echo "HEALTH CHECK"
+echo "  Status:    $healthStatus"
+echo "  Last:      $lastCheck"
+[ -n "$healthMsg" ] && echo "  Message:   $healthMsg"
+
+# Error
+lastErr=$(echo "$pluginDef" | jq -r '.lastError // ""')
+if [ -n "$lastErr" ]; then
+  echo ""
+  echo "LAST ERROR"
+  echo "  $lastErr"
+fi
+
+# Suggest reload
+[ "$healthStatus" = "error" ] && echo "" && echo "  Run: /mastermind:plugins --action reload --plugin-id $plugin_id"
+```
+
+### grants
+
+```bash
+echo "FILE SYSTEM GRANTS — $plugin_id"
+echo "────────────────────────────────────────────────────────"
+printf "%-6s %s\n" "ACCESS" "PATH"
+echo "────────────────────────────────────────────────────────"
+
+grants=$(echo "$pluginDef" | jq -r '(.grants // [])[]' 2>/dev/null)
+if [ -z "$grants" ]; then
+  echo "  No file system grants."
+  echo "  Add a grant: --action add-grant --grant-path /path/to/dir --grant-access read"
+else
+  echo "$pluginDef" | jq -r '(.grants // [])[] |
+    "  \(.access // "read")\t\(.path)"' | while IFS=$'\t' read -r acc path; do
+    printf "  %-10s %s\n" "$acc" "$path"
+  done
+fi
+```
+
+### set-config
+
+```bash
+[ -z "$config_key" ] && { echo "ERROR: --config-key required."; exit 1; }
+[ -z "$config_value" ] && { echo "ERROR: --config-value required."; exit 1; }
+
+tmp="${registryFile}.tmp"
+jq --arg id "$plugin_id" --arg k "$config_key" --arg v "$config_value" \
+  '.plugins = [(.plugins // [])[] | if .id == $id then
+     if .config == null then .config = {} else . end |
+     .config[$k] = $v
+   else . end]' \
+  "$registryFile" > "$tmp" && mv "$tmp" "$registryFile"
+
+# Mask value in output if sensitive key
+if echo "$config_key" | grep -qiE "key|token|secret|password|api"; then
+  echo "Config set: $config_key = ***"
+else
+  echo "Config set: $config_key = $config_value"
+fi
+echo "NOTE: Restart agents or reload the plugin for changes to take effect."
+```
+
+### add-grant
+
+```bash
+[ -z "$grant_path" ] && { echo "ERROR: --grant-path required."; exit 1; }
+access="${grant_access:-read}"
+case "$access" in read|write|readwrite) : ;; *)
+  echo "ERROR: --grant-access must be read, write, or readwrite"; exit 1 ;;
+esac
+
+tmp="${registryFile}.tmp"
+jq --arg id "$plugin_id" --arg path "$grant_path" --arg access "$access" \
+  '.plugins = [(.plugins // [])[] | if .id == $id then
+     .grants = ((.grants // []) | map(select(.path != $path))) +
+               [{"path":$path,"access":$access}]
+   else . end]' \
+  "$registryFile" > "$tmp" && mv "$tmp" "$registryFile"
+
+echo "Grant added: $access → $grant_path"
+```
+
+### remove-grant
+
+```bash
+[ -z "$grant_path" ] && { echo "ERROR: --grant-path required."; exit 1; }
+
+tmp="${registryFile}.tmp"
+jq --arg id "$plugin_id" --arg path "$grant_path" \
+  '.plugins = [(.plugins // [])[] | if .id == $id then
+     .grants = [(.grants // [])[] | select(.path != $path)]
+   else . end]' \
+  "$registryFile" > "$tmp" && mv "$tmp" "$registryFile"
+
+echo "Grant removed: $grant_path"
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+plugin_id: <plugin_id>
+plugin_status: <status>
+health_status: <health>
+```
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.

package/packages/@monomind/cli/.claude/skills/mastermind/plugins.md

@@ -0,0 +1,190 @@
+---
+name: mastermind-plugins
+description: Mastermind plugins — install, enable, disable, uninstall, and inspect plugins for an org. Plugins extend agent capabilities with workers, events, and custom tools. Supports npm packages and local paths.
+type: domain-skill
+default_mode: confirm
+---
+
+# Mastermind Plugins
+
+This skill is invoked by `mastermind:plugins` or directly via `/mastermind:plugins`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
+- `org_name`: org to manage plugins for (optional — uses global plugin registry if omitted)
+- `action`: list | install | uninstall | enable | disable | status | examples
+- `plugin_id`: plugin id or package name (required for uninstall/enable/disable/status)
+- `package_name`: npm package or local path (required for install)
+- `caller`: command | master
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Load Plugin Registry
+
+```bash
+pluginsDir=".monomind/plugins"
+mkdir -p "$pluginsDir"
+registryFile="${pluginsDir}/registry.json"
+[ ! -f "$registryFile" ] && echo '{"plugins":[]}' > "$registryFile"
+
+# If org scoped, also check org-level plugin overrides
+if [ -n "$org_name" ]; then
+  orgPluginsFile=".monomind/orgs/${org_name}-plugins.json"
+  [ ! -f "$orgPluginsFile" ] && echo '{"plugins":[]}' > "$orgPluginsFile"
+fi
+```
+
+---
+
+## Step 2 — Execute Action
+
+### list (default)
+
+```bash
+echo "PLUGINS"
+echo "──────────────────────────────────────────────────────────"
+printf "%-28s %-12s %-10s %-10s %s\n" "ID / PACKAGE" "VERSION" "STATUS" "CATEGORY" "ERROR"
+echo "──────────────────────────────────────────────────────────"
+
+count=$(jq '.plugins | length' "$registryFile")
+if [ "$count" -eq 0 ]; then
+  echo "  No plugins installed. Use --action install --package-name <pkg> to add one."
+else
+  jq -r '(.plugins // [])[] |
+    [
+      (.id // .packageName // "unknown"),
+      (.version // "-"),
+      (.status // "unknown"),
+      (.category // "general"),
+      (if .lastError then (.lastError | split("\n")[0] | .[0:40]) else "-" end)
+    ] | @tsv' "$registryFile" | while IFS=$'\t' read -r id ver status cat err; do
+    statusColor=""
+    printf "%-28s %-12s %-10s %-10s %s\n" "$id" "$ver" "$status" "$cat" "$err"
+  done
+fi
+
+echo ""
+echo "Total: $count plugin(s)"
+[ -n "$org_name" ] && echo "Org overrides: $(jq '.plugins | length' "$orgPluginsFile" 2>/dev/null || echo 0)"
+```
+
+### examples
+
+Show example/available plugins from the monomind registry:
+
+```bash
+echo "AVAILABLE PLUGINS (monomind registry)"
+echo "──────────────────────────────────────"
+cat <<'EXAMPLES'
+  @monomind/plugin-sentry      — Error tracking and alerting
+  @monomind/plugin-github      — GitHub issue/PR sync
+  @monomind/plugin-slack       — Slack notifications and commands
+  @monomind/plugin-linear      — Linear issue sync
+  @monomind/plugin-datadog     — Metrics and monitoring
+  @monomind/plugin-vault       — HashiCorp Vault secrets integration
+  @monomind/plugin-webhook     — Generic inbound/outbound webhooks
+  @monomind/plugin-memory-ext  — Extended memory backend
+
+Install: /mastermind:plugins --action install --package-name @monomind/plugin-<name>
+EXAMPLES
+```
+
+### install
+
+```bash
+[ -z "$package_name" ] && { echo "ERROR: --package-name required."; exit 1; }
+
+isLocal=false
+[[ "$package_name" == /* || "$package_name" == "./"* ]] && isLocal=true
+
+# Generate a stable id
+pluginId=$(echo "$package_name" | sed 's|[/@]|_|g' | tr -cd 'a-z0-9_-')
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+
+tmp="${registryFile}.tmp"
+jq --arg id "$pluginId" \
+   --arg pkg "$package_name" \
+   --argjson local "$isLocal" \
+   --arg ts "$ts" \
+   '.plugins = [(.plugins // [])[] | select(.id != $id)] +
+    [{"id":$id,"packageName":$pkg,"isLocalPath":$local,
+      "status":"installed","version":"latest","category":"general",
+      "installedAt":$ts,"lastError":null}]' \
+  "$registryFile" > "$tmp" && mv "$tmp" "$registryFile"
+
+echo "Installed: $package_name (id: $pluginId)"
+echo "NOTE: Agents must be restarted to load the new plugin."
+```
+
+Emit `org:plugin:installed` event:
+
+```bash
+REPO_ROOT=$(git rev-parse --show-toplevel 2>/dev/null || pwd)
+CTRL_URL=$(jq -r '.url // "http://localhost:4242"' "$REPO_ROOT/.monomind/control.json" 2>/dev/null || echo "http://localhost:4242")
+curl -s -X POST "${CTRL_URL}/api/mastermind/event" \
+  -H "Content-Type: application/json" \
+  -d "$(jq -cn --arg org "${org_name:-global}" --arg id "$pluginId" --arg pkg "$package_name" \
+    '{type:"org:plugin:installed",org:$org,plugin:$id,package:$pkg,ts:(now*1000|floor)}')" || true
+```
+
+### uninstall
+
+```bash
+[ -z "$plugin_id" ] && { echo "ERROR: --plugin-id required."; exit 1; }
+echo "Uninstalling plugin '$plugin_id'…"
+
+tmp="${registryFile}.tmp"
+jq --arg id "$plugin_id" '.plugins = [(.plugins // [])[] | select(.id != $id)]' \
+  "$registryFile" > "$tmp" && mv "$tmp" "$registryFile"
+echo "Uninstalled: $plugin_id"
+```
+
+### enable / disable
+
+```bash
+[ -z "$plugin_id" ] && { echo "ERROR: --plugin-id required."; exit 1; }
+newStatus=$([ "$action" = "enable" ] && echo "installed" || echo "disabled")
+
+tmp="${registryFile}.tmp"
+jq --arg id "$plugin_id" --arg s "$newStatus" \
+  '.plugins = [(.plugins // [])[] | if .id == $id then .status = $s else . end]' \
+  "$registryFile" > "$tmp" && mv "$tmp" "$registryFile"
+echo "Plugin '$plugin_id' → $newStatus"
+```
+
+### status
+
+Show detailed status for a specific plugin:
+
+```bash
+[ -z "$plugin_id" ] && { echo "ERROR: --plugin-id required."; exit 1; }
+jq --arg id "$plugin_id" '(.plugins // [])[] | select(.id == $id)' "$registryFile"
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+org: <org_name or global>
+plugin_id: <id if applicable>
+plugins_total: <N>
+```
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.

package/packages/@monomind/cli/.claude/skills/mastermind/profile.md

@@ -0,0 +1,187 @@
+---
+name: mastermind-profile
+description: Mastermind profile — view and edit the current operator profile (display name, preferences) and inspect any user's activity statistics, completion rate, and token usage. Merges ProfileSettings.tsx and UserProfile.tsx.
+type: domain-skill
+default_mode: confirm
+---
+
+# Mastermind Profile
+
+This skill is invoked by `mastermind:profile` or directly via `/mastermind:profile`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
+- `action`: show | edit | view-user | stats
+- `user_id`: user id to view (for view-user/stats; defaults to current operator)
+- `org_name`: org context for per-org stats (optional)
+- `display_name`: new display name (for edit)
+- `email`: new email (for edit)
+- `theme`: light | dark | system (for edit)
+- `caller`: command | master
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Load Profile File
+
+```bash
+profileFile=".monomind/operator-profile.json"
+[ ! -f "$profileFile" ] && cat > "$profileFile" <<'EOF'
+{
+  "id": "local-operator",
+  "displayName": "Operator",
+  "email": "",
+  "theme": "system",
+  "avatarInitials": "OP",
+  "keyboardShortcutsEnabled": true,
+  "createdAt": null
+}
+EOF
+```
+
+---
+
+## Step 2 — Execute Action
+
+### show (default)
+
+```bash
+echo "OPERATOR PROFILE"
+echo "────────────────────────────────────────────────────────"
+jq -r '
+  "  ID:            \(.id // "local-operator")",
+  "  Display name:  \(.displayName // "(not set)")",
+  "  Email:         \(.email // "(not set)")",
+  "  Theme:         \(.theme // "system")",
+  "  Initials:      \(.avatarInitials // "OP")",
+  "  Shortcuts:     \(.keyboardShortcutsEnabled // true)",
+  "  Created:       \(.createdAt // "(local)")"
+' "$profileFile"
+
+echo ""
+echo "  To edit: --action edit --display-name 'New Name'"
+echo "  To view stats: --action stats"
+```
+
+### edit
+
+```bash
+if [ -z "$display_name" ] && [ -z "$email" ] && [ -z "$theme" ]; then
+  echo "ERROR: Provide at least one of: --display-name, --email, --theme (light|dark|system)"
+  exit 1
+fi
+
+case "${theme:-}" in
+  light|dark|system|"") : ;;
+  *) echo "ERROR: --theme must be light, dark, or system"; exit 1 ;;
+esac
+
+tmp="${profileFile}.tmp"
+jq \
+  --arg name "${display_name:-}" \
+  --arg email "${email:-}" \
+  --arg theme "${theme:-}" \
+  '(if $name != "" then .displayName = $name else . end) |
+   (if $email != "" then .email = $email else . end) |
+   (if $theme != "" then .theme = $theme else . end) |
+   (if $name != "" then .avatarInitials = ($name | split(" ") |
+     map(select(length > 0) | .[0:1] | ascii_upcase) | .[0:2] | join(""))
+   else . end)' \
+  "$profileFile" > "$tmp" && mv "$tmp" "$profileFile"
+
+echo "Profile updated."
+jq -r '"  displayName: \(.displayName)  email: \(.email)  theme: \(.theme)"' "$profileFile"
+```
+
+### view-user
+
+```bash
+targetId="${user_id:-local-operator}"
+echo "USER PROFILE — $targetId"
+echo "────────────────────────────────────────────────────────"
+
+# Try to find in instance access file
+accessFile=".monomind/instance-access.json"
+if [ -f "$accessFile" ]; then
+  userEntry=$(jq -r --arg id "$targetId" '(.users // [])[] | select(.id == $id)' "$accessFile")
+  if [ -n "$userEntry" ]; then
+    isAdmin=$(echo "$userEntry" | jq -r '.isInstanceAdmin // false')
+    orgs=$(echo "$userEntry" | jq -r '(.companyAccess // []) | join(", ")')
+    echo "  ID:              $targetId"
+    echo "  Instance admin:  $isAdmin"
+    echo "  Org access:      ${orgs:-(none)}"
+  else
+    echo "  ID: $targetId"
+    echo "  (User not found in instance access registry)"
+  fi
+else
+  echo "  ID: $targetId  (no instance access file)"
+fi
+
+echo ""
+echo "  For activity stats: --action stats --user-id $targetId"
+```
+
+### stats
+
+```bash
+targetId="${user_id:-local-operator}"
+echo "ACTIVITY STATS — $targetId"
+echo "────────────────────────────────────────────────────────"
+
+# Scan activity files for user contributions
+totalRuns=0; successRuns=0; totalInputTokens=0; totalOutputTokens=0
+
+for actFile in data/mastermind-sessions.json .monomind/orgs/*-activity.jsonl; do
+  [ -f "$actFile" ] || continue
+  if echo "$actFile" | grep -q "\.jsonl$"; then
+    cnt=$(grep -c "\"actorId\":\"${targetId}\"" "$actFile" 2>/dev/null || echo 0)
+    succ=$(grep "\"actorId\":\"${targetId}\"" "$actFile" 2>/dev/null | grep -c '"outcome":"success"' || echo 0)
+    totalRuns=$((totalRuns + cnt))
+    successRuns=$((successRuns + succ))
+  fi
+done
+
+# Per-org if org_name set
+if [ -n "$org_name" ]; then
+  issuesFile=".monomind/orgs/${org_name}-issues.json"
+  if [ -f "$issuesFile" ]; then
+    assigned=$(jq --arg uid "$targetId" '[(.issues // [])[] | select(.assigneeId == $uid)] | length' "$issuesFile")
+    echo "  Issues assigned (org $org_name): $assigned"
+  fi
+fi
+
+completionRate=0
+[ "$totalRuns" -gt 0 ] && completionRate=$((successRuns * 100 / totalRuns))
+
+echo "  Total runs tracked:   $totalRuns"
+echo "  Successful runs:      $successRuns"
+echo "  Completion rate:      ${completionRate}%"
+echo ""
+echo "  (Token usage stats require agent run logs with token tracking enabled)"
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+user_id: <user_id or local-operator>
+```
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.