monomind 1.19.0 → 2.0.1

package/.claude/skills/mastermind-skills/invite-landing.md

@@ -1,227 +0,0 @@
----
-name: mastermind-invite-landing
-description: Mastermind invite-landing — accept an org invite as a human member or as an agent. Validates the invite token, presents org/role info, and processes join as human (name/email) or as an agent (adapter type, model, agent name, config). Mirrors InviteLanding.tsx.
-type: domain-skill
-default_mode: confirm
----
-
-# Mastermind Invite Landing
-
-This skill is invoked by `mastermind:invite-landing` or directly via `/mastermind:invite-landing`.
-
----
-
-## Inputs
-
-- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
-- `action`: show | accept-human | accept-agent | status
-- `token`: invite token (required; extract from monomind://invite?... URL or share link)
-- `org_name`: org name (required unless extractable from token record)
-- `join_as`: human | agent (for accept actions; default: agent in CLI context)
-- `display_name`: human display name (for accept-human)
-- `email`: email address (for accept-human)
-- `agent_name`: agent display name (for accept-agent)
-- `adapter_type`: claude-local | gemini-local | codex-local | cursor | opencode | hermes | http | acpx (for accept-agent; default: claude-local)
-- `model`: model override (for accept-agent; uses adapter default if omitted)
-- `caller`: command | master
-
----
-
-## Join Modes
-
-| Mode | Who | Required Fields |
-|------|-----|-----------------|
-| `human` | A human operator joining the org | `display_name`, `email` |
-| `agent` | An AI agent joining the org | `agent_name`, `adapter_type` |
-
----
-
-## Step 0 — Brain Load (standalone only)
-
-If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
-
----
-
-## Step 1 — Validate Token
-
-```bash
-[ -z "$token" ] && { echo "ERROR: --token required. Extract from invite URL: monomind://invite?org=...&token=...&role=..."; exit 1; }
-
-# Try to find org from token if org_name not given
-if [ -z "$org_name" ]; then
-  # Search all members files for a matching invite token
-  for mf in .monomind/orgs/*-members.json; do
-    [ -f "$mf" ] || continue
-    match=$(jq -r --arg t "$token" '(.join_requests // [])[] | select(.token == $t or .id == $t) | .id' "$mf" 2>/dev/null | head -1)
-    if [ -n "$match" ]; then
-      org_name=$(basename "$mf" "-members.json")
-      break
-    fi
-  done
-  [ -z "$org_name" ] && { echo "ERROR: Could not find org for token '$token'. Specify --org-name explicitly."; exit 1; }
-fi
-
-membersFile=".monomind/orgs/${org_name}-members.json"
-[ ! -f "$membersFile" ] && { echo "ERROR: Org '$org_name' members file not found."; exit 1; }
-
-inviteDef=$(jq -r --arg t "$token" \
-  '(.join_requests // [])[] | select((.token == $t or .id == $t) and .type == "invite")' \
-  "$membersFile" | head -c 4096)
-[ -z "$inviteDef" ] && { echo "ERROR: Invite token '$token' not found or already used."; exit 1; }
-
-inviteStatus=$(echo "$inviteDef" | jq -r '.status // "pending"')
-inviteRole=$(echo "$inviteDef" | jq -r '.role // "operator"')
-```
-
----
-
-## Step 2 — Execute Action
-
-### show (default)
-
-```bash
-echo "INVITE — org: $org_name"
-echo "────────────────────────────────────────────────────────"
-echo "  Token:    ${token:0:16}…"
-echo "  Role:     $inviteRole"
-echo "  Status:   $inviteStatus"
-
-inviteCreatedAt=$(echo "$inviteDef" | jq -r '.createdAt // "-"')
-echo "  Created:  $inviteCreatedAt"
-echo ""
-
-if [ "$inviteStatus" = "revoked" ]; then
-  echo "  This invite has been revoked and can no longer be used."
-elif [ "$inviteStatus" = "accepted" ]; then
-  echo "  This invite has already been accepted."
-else
-  echo "  To join as an agent (default in CLI):"
-  echo "    --action accept-agent --token $token --org-name $org_name --agent-name 'My Agent' --adapter-type claude-local"
-  echo ""
-  echo "  To join as a human:"
-  echo "    --action accept-human --token $token --org-name $org_name --display-name 'Your Name' --email 'you@example.com'"
-fi
-```
-
-### accept-human
-
-```bash
-[ "$inviteStatus" != "pending" ] && { echo "ERROR: Invite status is '$inviteStatus' — cannot accept."; exit 1; }
-[ -z "$display_name" ] && { echo "ERROR: --display-name required for human join."; exit 1; }
-[ -z "$email" ] && { echo "ERROR: --email required for human join."; exit 1; }
-
-ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
-memberId="human-$(echo "${email}" | tr '[:upper:]' '[:lower:]' | tr -cs 'a-z0-9' '-' | sed 's/^-//;s/-$//')"
-
-tmp="${membersFile}.tmp"
-# Mark invite accepted and add member record
-jq --arg token "$token" --arg mid "$memberId" --arg name "$display_name" \
-   --arg email "$email" --arg role "$inviteRole" --arg ts "$ts" \
-  '.join_requests = [(.join_requests // [])[] | if (.token == $token or .id == $token) then
-     .status = "accepted" | .acceptedAt = $ts | .acceptedAs = "human"
-   else . end] |
-   .members += [{"id":$mid,"displayName":$name,"email":$email,"role":$role,
-     "memberType":"human","status":"active","joinedAt":$ts}]' \
-  "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
-
-echo "JOINED as human: $display_name"
-echo "  Member ID:  $memberId"
-echo "  Role:       $inviteRole"
-echo "  Org:        $org_name"
-echo "  Email:      $email"
-echo "  Joined at:  $ts"
-```
-
-### accept-agent
-
-```bash
-[ "$inviteStatus" != "pending" ] && { echo "ERROR: Invite status is '$inviteStatus' — cannot accept."; exit 1; }
-[ -z "$agent_name" ] && { echo "ERROR: --agent-name required for agent join."; exit 1; }
-
-adapterType="${adapter_type:-claude-local}"
-case "$adapterType" in
-  claude-local|gemini-local|codex-local|cursor|opencode-local|hermes-local|http|acpx) : ;;
-  *) echo "ERROR: Unknown adapter type '$adapterType'. Choose: claude-local, gemini-local, codex-local, cursor, opencode-local, hermes-local, http, acpx"; exit 1 ;;
-esac
-
-# Resolve default model
-modelId="${model}"
-if [ -z "$modelId" ]; then
-  case "$adapterType" in
-    claude-local)   modelId="claude-sonnet-4-6" ;;
-    gemini-local)   modelId="gemini-2.0-flash" ;;
-    codex-local)    modelId="gpt-4o" ;;
-    cursor)         modelId="cursor-default" ;;
-    opencode-local) modelId="opencode-default" ;;
-    hermes-local)   modelId="hermes-3" ;;
-    *)              modelId="custom" ;;
-  esac
-fi
-
-# Generate agent slug
-agentSlug=$(echo "$agent_name" | tr '[:upper:]' '[:lower:]' | tr -cs 'a-z0-9' '-' | sed 's/^-//;s/-$//')
-agentId="agent-${agentSlug}"
-ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
-
-# Add to members file
-tmp="${membersFile}.tmp"
-jq --arg token "$token" --arg mid "$agentId" --arg name "$agent_name" \
-   --arg role "$inviteRole" --arg adapter "$adapterType" --arg model "$modelId" --arg ts "$ts" \
-  '.join_requests = [(.join_requests // [])[] | if (.token == $token or .id == $token) then
-     .status = "accepted" | .acceptedAt = $ts | .acceptedAs = "agent"
-   else . end] |
-   .members += [{"id":$mid,"displayName":$name,"role":$role,
-     "memberType":"agent","adapter":{"type":$adapter,"model":$model},
-     "status":"active","joinedAt":$ts}]' \
-  "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
-
-# Also add to org roles file so the agent can run
-orgFile=".monomind/orgs/${org_name}.json"
-if [ -f "$orgFile" ]; then
-  dupCheck=$(jq -r --arg id "$agentId" '[(.roles // [])[] | select(.id == $id)] | length' "$orgFile")
-  if [ "$dupCheck" -eq 0 ]; then
-    tmp2="${orgFile}.tmp"
-    jq --arg id "$agentId" --arg title "$agent_name" \
-       --arg adapter "$adapterType" --arg model "$modelId" --arg ts "$ts" \
-      '.roles += [{"id":$id,"title":$title,"adapter":{"type":$adapter,"model":$model,"max_tokens":8192},
-        "reports_to":null,"governance":null,"skills":[],"created_at":$ts}]' \
-      "$orgFile" > "$tmp2" && mv "$tmp2" "$orgFile"
-  fi
-fi
-
-echo "JOINED as agent: $agent_name"
-echo "  Agent ID:    $agentId"
-echo "  Role:        $inviteRole"
-echo "  Adapter:     $adapterType / $modelId"
-echo "  Org:         $org_name"
-echo "  Joined at:   $ts"
-echo ""
-echo "  View agent: /mastermind:agent-detail --org $org_name --agent-id $agentId"
-```
-
-### status
-
-```bash
-echo "INVITE STATUS — token: ${token:0:16}…"
-echo "────────────────────────────────────────────────────────"
-echo "$inviteDef" | jq '{status, role, createdAt, acceptedAt, acceptedAs}'
-```
-
----
-
-## Step 3 — Return Output
-
-```yaml
-domain: ops
-status: complete
-action: <action>
-org: <org_name>
-invite_status: <status>
-role: <role>
-```
-
----
-
-## Step 4 — Brain Write (standalone only)
-
-If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.

package/.claude/skills/mastermind-skills/invites.md

@@ -1,254 +0,0 @@
----
-name: mastermind-invites
-description: Mastermind invites — manage org invitations and join request queue. Create/revoke invites with role assignment, view invite history, review pending join requests (human and agent), and approve or reject them. Merges CompanyInvites and JoinRequestQueue pages.
-type: domain-skill
-default_mode: confirm
----
-
-# Mastermind Invites
-
-This skill is invoked by `mastermind:invites` or directly via `/mastermind:invites`.
-
----
-
-## Inputs
-
-- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
-- `org_name`: org to manage invites for (required)
-- `action`: list | create | revoke | copy-url | join-queue | approve-join | reject-join
-- `role`: owner | admin | operator | viewer (for create; default: operator)
-- `invite_id`: invite id/token (for revoke/copy-url)
-- `request_id`: join request id (for approve-join/reject-join)
-- `request_type`: all | human | agent (for join-queue; default: all)
-- `status_filter`: pending_approval | approved | rejected (for join-queue; default: pending_approval)
-- `caller`: command | master
-
----
-
-## Invite Roles
-
-| Role | Can Do |
-|------|--------|
-| `owner` | Full control — all permissions |
-| `admin` | Create agents, invite users, assign tasks, approve joins, manage environments |
-| `operator` | Assign tasks, run routines |
-| `viewer` | Read-only access |
-
----
-
-## Step 0 — Brain Load (standalone only)
-
-If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
-
----
-
-## Step 1 — Load Members File
-
-```bash
-orgFile=".monomind/orgs/${org_name}.json"
-[ ! -f "$orgFile" ] && { echo "ERROR: Org '${org_name}' not found."; exit 1; }
-
-membersFile=".monomind/orgs/${org_name}-members.json"
-[ ! -f "$membersFile" ] && echo '{"members":[],"join_requests":[]}' > "$membersFile"
-```
-
----
-
-## Step 2 — Execute Action
-
-### list (default)
-
-Show invite history and member count:
-
-```bash
-echo "INVITES — org: $org_name"
-echo "────────────────────────────────────────────────────────"
-
-# Active invites (pending in join_requests with type=invite)
-activeInvites=$(jq '[(.join_requests // [])[] | select(.type == "invite" and .status == "pending")] | length' "$membersFile")
-totalMembers=$(jq '.members | length' "$membersFile")
-pendingJoins=$(jq '[(.join_requests // [])[] | select(.type != "invite" and .status == "pending_approval")] | length' "$membersFile")
-
-echo "  Members:          $totalMembers"
-echo "  Pending invites:  $activeInvites"
-echo "  Pending joins:    $pendingJoins"
-echo ""
-
-if [ "$activeInvites" -gt 0 ]; then
-  echo "ACTIVE INVITES"
-  printf "  %-28s %-10s %-20s %s\n" "TOKEN" "ROLE" "CREATED" "URL"
-  echo "  ────────────────────────────────────────────────────────"
-  jq -r '(.join_requests // [])[] | select(.type == "invite" and .status == "pending") |
-    [.token, (.role // "operator"), (.createdAt // "-"), (.inviteUrl // "-")] | @tsv' \
-    "$membersFile" | while IFS=$'\t' read -r tok role ts url; do
-    printf "  %-28s %-10s %-20s %s\n" "${tok:0:24}…" "$role" "$ts" "${url:0:40}…"
-  done
-fi
-
-echo ""
-echo "  To create a new invite: --action create --role <role>"
-[ "$pendingJoins" -gt 0 ] && echo "  To review join requests: --action join-queue"
-```
-
-### create
-
-```bash
-role="${role:-operator}"
-case "$role" in owner|admin|operator|viewer) : ;; *)
-  echo "ERROR: --role must be: owner, admin, operator, viewer"; exit 1 ;;
-esac
-
-token=$(openssl rand -hex 20 2>/dev/null || python3 -c "import secrets; print(secrets.token_hex(20))")
-inviteUrl="monomind://invite?org=${org_name}&token=${token}&role=${role}"
-ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
-
-tmp="${membersFile}.tmp"
-jq --arg token "$token" --arg role "$role" --arg ts "$ts" --arg url "$inviteUrl" \
-  '.join_requests += [{"id":$token,"type":"invite","role":$role,"status":"pending",
-    "token":$token,"inviteUrl":$url,"createdAt":$ts}]' \
-  "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
-
-echo "INVITE CREATED"
-echo "────────────────────────────────────────────────────────"
-echo "  Role:  $role"
-echo "  Token: $token"
-echo "  URL:   $inviteUrl"
-echo "  Time:  $ts"
-echo ""
-echo "Share the token or URL with the invitee."
-echo "To copy URL hint: --action copy-url --invite-id $token"
-```
-
-### revoke
-
-```bash
-[ -z "$invite_id" ] && { echo "ERROR: --invite-id required."; exit 1; }
-
-# Find the invite
-inviteExists=$(jq -r --arg id "$invite_id" \
-  '[(.join_requests // [])[] | select((.id == $id or .token == $id) and .type == "invite")] | length' \
-  "$membersFile")
-[ "$inviteExists" -eq 0 ] && { echo "ERROR: Invite '$invite_id' not found or already resolved."; exit 1; }
-
-ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
-tmp="${membersFile}.tmp"
-jq --arg id "$invite_id" --arg ts "$ts" \
-  '.join_requests = [(.join_requests // [])[] | if (.id == $id or .token == $id) then
-     .status = "revoked" | .resolvedAt = $ts
-   else . end]' \
-  "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
-
-echo "Invite revoked: $invite_id"
-echo "  Revoked at: $ts"
-```
-
-### copy-url
-
-```bash
-[ -z "$invite_id" ] && { echo "ERROR: --invite-id required."; exit 1; }
-
-inviteUrl=$(jq -r --arg id "$invite_id" \
-  '(.join_requests // [])[] | select(.id == $id or .token == $id) | .inviteUrl // ""' \
-  "$membersFile")
-[ -z "$inviteUrl" ] && { echo "ERROR: Invite '$invite_id' not found."; exit 1; }
-
-echo "INVITE URL"
-echo "────────────────────────────────────────────────────────"
-echo "$inviteUrl"
-echo ""
-echo "(Copy the URL above to share with the invitee)"
-# Try to copy to clipboard if pbcopy/xclip available
-echo "$inviteUrl" | pbcopy 2>/dev/null && echo "(Copied to clipboard)" || true
-```
-
-### join-queue
-
-```bash
-statusFilter="${status_filter:-pending_approval}"
-typeFilter="${request_type:-all}"
-
-echo "JOIN REQUEST QUEUE — org: $org_name"
-echo "  Filter: status=$statusFilter  type=$typeFilter"
-echo "────────────────────────────────────────────────────────"
-
-jq -r --arg st "$statusFilter" --arg type "$typeFilter" '
-  (.join_requests // [])[] |
-  select(
-    (.status == $st) and
-    (.type != "invite") and
-    (if $type == "all" then true
-     elif $type == "human" then (.requestType == "human" or .requestType == null)
-     else .requestType == "agent"
-     end)
-  ) |
-  [.id, (.requestType // "human"), (.role // "viewer"), (.createdAt // "-"), (.message // "(no message)")] | @tsv
-' "$membersFile" | while IFS=$'\t' read -r id rtype role ts msg; do
-  echo ""
-  echo "  [$id]  type=$rtype  role=$role  at=$ts"
-  echo "  Message: $msg"
-  echo "  → approve: --action approve-join --request-id $id"
-  echo "  → reject:  --action reject-join  --request-id $id"
-done
-
-total=$(jq --arg st "$statusFilter" '[(.join_requests // [])[] | select(.status == $st and .type != "invite")] | length' "$membersFile")
-[ "$total" -eq 0 ] && echo "  No join requests with status='$statusFilter'."
-echo ""
-echo "Total ($statusFilter): $total"
-```
-
-### approve-join
-
-```bash
-[ -z "$request_id" ] && { echo "ERROR: --request-id required."; exit 1; }
-
-reqRole=$(jq -r --arg id "$request_id" \
-  '(.join_requests // [])[] | select(.id == $id) | .role // "viewer"' "$membersFile")
-[ -z "$reqRole" ] && { echo "ERROR: Request '$request_id' not found."; exit 1; }
-
-ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
-tmp="${membersFile}.tmp"
-jq --arg id "$request_id" --arg role "$reqRole" --arg ts "$ts" \
-  '.join_requests = [(.join_requests // [])[] | if .id == $id then .status = "approved" | .resolvedAt = $ts else . end] |
-   .members += [{"id":$id,"role":$role,"status":"active","grants":[],"joinedAt":$ts}]' \
-  "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
-
-echo "Join request '$request_id' approved."
-echo "  Role: $reqRole  |  Joined: $ts"
-echo "  Member added. View members: /mastermind:access --org $org_name --action list"
-```
-
-### reject-join
-
-```bash
-[ -z "$request_id" ] && { echo "ERROR: --request-id required."; exit 1; }
-
-exists=$(jq -r --arg id "$request_id" '[(.join_requests // [])[] | select(.id == $id)] | length' "$membersFile")
-[ "$exists" -eq 0 ] && { echo "ERROR: Request '$request_id' not found."; exit 1; }
-
-ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
-tmp="${membersFile}.tmp"
-jq --arg id "$request_id" --arg ts "$ts" \
-  '.join_requests = [(.join_requests // [])[] | if .id == $id then .status = "rejected" | .resolvedAt = $ts else . end]' \
-  "$membersFile" > "$tmp" && mv "$tmp" "$membersFile"
-
-echo "Join request '$request_id' rejected."
-```
-
----
-
-## Step 3 — Return Output
-
-```yaml
-domain: ops
-status: complete
-action: <action>
-org: <org_name>
-pending_invites: <N>
-pending_joins: <N>
-```
-
----
-
-## Step 4 — Brain Write (standalone only)
-
-If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.