monomind 1.9.16 → 1.10.0

package/.claude/skills/mastermind/createorg.md

@@ -107,7 +107,12 @@ Adjust for the actual roles in this run. Assign `reports_to` on each role using
 
 ## Step 4 — Build Org Config
 
-Produce an org config object using the resolved topology (not hardcoded to `hierarchical`):
+Produce an org config object using the resolved topology (not hardcoded to `hierarchical`).
+
+Ask the user (or infer from prompt) for the optional Paperclip-style fields:
+- **Budget**: max token budget for this org run (e.g. 500000 tokens). Use `unlimited` if not specified.
+- **Governance**: approval policy — `auto` (agents act freely) | `board` (sensitive actions require `/mastermind:approve`) | `strict` (all external actions need approval)
+- **Adapter**: which AI model/adapter the CEO agent should use (e.g. `claude-sonnet-4-6`, `claude-opus-4-7`). Default: `claude-sonnet-4-6`.
 
 ```json
 {
@@ -122,7 +127,11 @@ Produce an org config object using the resolved topology (not hardcoded to `hier
       "title": "<display title>",
       "agent_type": "<subagent_type slug from mapping table>",
       "responsibilities": ["<1-3 bullet responsibilities>"],
-      "reports_to": "<role id or null>"
+      "reports_to": "<role id or null>",
+      "adapter_config": {
+        "model": "<claude model id>",
+        "max_tokens": 8192
+      }
     }
   ],
   "communication": [
@@ -133,6 +142,10 @@ Produce an org config object using the resolved topology (not hardcoded to `hier
       "protocol": "direct"
     }
   ],
+  "governance": {
+    "policy": "auto | board | strict",
+    "approvals_file": ".monomind/orgs/<org_name>-approvals.json"
+  },
   "board_id": "<uuid — filled in Step 6 after board creation>",
   "todo_col_id": "<uuid — filled in Step 6>",
   "doing_col_id": "<uuid — filled in Step 6>",
@@ -142,7 +155,10 @@ Produce an org config object using the resolved topology (not hardcoded to `hier
   "run_config": {
     "checkpoint_interval_min": 30,
     "max_concurrent_agents": 6,
-    "memory_namespace": "org:<org_name>"
+    "memory_namespace": "org:<org_name>",
+    "budget_tokens": "<number or 0 for unlimited>",
+    "alert_threshold": 0.8,
+    "ceo_adapter": "<model id>"
   }
 }
 ```
@@ -263,12 +279,14 @@ jq --arg board_id "$board_id" \
 Read values from the saved JSON file and emit two events: `domain:complete` (for the session stream) and `org:create` (so the dashboard Orgs panel registers the new org immediately):
 
 ```bash
+REPO_ROOT=$(git rev-parse --show-toplevel 2>/dev/null || pwd)
+CTRL_URL=$(jq -r '.url // "http://localhost:4242"' "$REPO_ROOT/.monomind/control.json" 2>/dev/null || echo "http://localhost:4242")
 orgName=$(jq -r '.name' "$orgJson")
 goal_val=$(jq -r '.goal' "$orgJson")
 rolesCount=$(jq '.roles | length // 0' "$orgJson")
 
 # domain:complete — for session correlation
-curl -s -X POST "http://localhost:4242/api/mastermind/event" \
+curl -s -X POST "${CTRL_URL}/api/mastermind/event" \
   -H "Content-Type: application/json" \
   -d "$(jq -cn \
     --arg session "$session_id" \
@@ -279,7 +297,7 @@ curl -s -X POST "http://localhost:4242/api/mastermind/event" \
       org:$orgName,goal:$goal,roles_count:$rolesCount,ts:(now*1000|floor)}')" || true
 
 # org:create — so handleOrgEvent routes it to the Orgs panel event log
-curl -s -X POST "http://localhost:4242/api/mastermind/event" \
+curl -s -X POST "${CTRL_URL}/api/mastermind/event" \
   -H "Content-Type: application/json" \
   -d "$(jq -cn \
     --arg session "$session_id" \

package/.claude/skills/mastermind/diagnose.md

@@ -0,0 +1,249 @@
+---
+name: mastermind-diagnose
+description: Mastermind diagnose — forensic procedure for investigating why agent work stalled, looped, or went too deep. Surfaces the exact stop-point in the issue tree, frames the fix as a product rule respecting three invariants (productive work continues / only real blockers stop work / no infinite loops), and delivers an approved plan before any code changes. Mirrors diagnose-why-work-stopped Paperclip skill.
+type: domain-skill
+default_mode: confirm
+---
+
+# Mastermind Diagnose
+
+This skill is invoked by `mastermind:diagnose` or directly via `/mastermind:diagnose`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
+- `org_name`: org to investigate (required)
+- `issue_id`: specific issue or task ID that stalled (optional — omit to scan all stalled work)
+- `agent_id`: scope investigation to a specific agent (optional)
+- `action`: scan | diagnose | report
+- `caller`: command | master
+
+---
+
+## Three Invariants (MUST be preserved in all analysis and proposed fixes)
+
+Every diagnosis and every proposed rule must hold these three invariants together:
+
+1. **Productive work continues.** Agents with a clear next action must keep working without needing a human to wake them.
+2. **Only real blockers stop work.** Stops happen when something genuinely cannot proceed (missing approval, missing dependency, human owner). Pseudo-stops must be detected and routed.
+3. **No infinite loops.** Recovery and continuation loops must be bounded and distinguishable from genuinely productive continuation.
+
+If a proposed fix violates any invariant, drop it or rework it. State explicitly how each invariant is held.
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Load Org State
+
+```bash
+orgFile=".monomind/orgs/${org_name}.json"
+[ ! -f "$orgFile" ] && { echo "ERROR: Org '${org_name}' not found."; exit 1; }
+
+stateFile=".monomind/orgs/${org_name}-state.json"
+activityFile=".monomind/orgs/${org_name}-activity.jsonl"
+issuesFile=".monomind/orgs/${org_name}-issues.json"
+routinesFile=".monomind/orgs/${org_name}-routines.json"
+```
+
+---
+
+## Step 2 — Execute Action
+
+### scan (default)
+
+Scan for stalled work across the org:
+
+```bash
+echo "STALL SCAN — $org_name"
+echo "════════════════════════════════════════════════════════"
+
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+now=$(date +%s)
+
+echo ""
+echo "AGENT HEARTBEATS"
+echo "────────────────────────────────────────────────────────"
+
+python3 - "$orgFile" "$stateFile" "$now" <<'PYEOF'
+import json, sys, os
+from datetime import datetime, timezone
+
+org = json.load(open(sys.argv[1]))
+state_path = sys.argv[2]
+now = int(sys.argv[3])
+
+hb = {}
+if os.path.exists(state_path):
+    try:
+        state = json.load(open(state_path))
+        for r in state.get("roles", []):
+            hb[r.get("id","")] = r.get("last_heartbeat")
+    except:
+        pass
+
+roles = org.get("roles", [])
+stalled = []
+for r in roles:
+    rid   = r.get("id","?")
+    title = r.get("title",rid)
+    last  = hb.get(rid)
+    if not last:
+        age = "never"
+        stalled.append((rid, title, "no heartbeat"))
+    else:
+        try:
+            dt = datetime.fromisoformat(last.replace("Z","+00:00"))
+            age_s = now - int(dt.timestamp())
+            age = f"{age_s//60}m ago"
+            if age_s > 3600:
+                stalled.append((rid, title, f"stale ({age})"))
+        except:
+            age = "?"
+    print(f"  {rid:<28} {title:<24} last: {last or 'never'}")
+
+print()
+if stalled:
+    print(f"  STALLED AGENTS ({len(stalled)}):")
+    for rid, title, reason in stalled:
+        print(f"    ⚠  {rid}  {title}  — {reason}")
+else:
+    print("  All agents have recent heartbeats.")
+PYEOF
+
+echo ""
+echo "OPEN ISSUES (stall candidates)"
+echo "────────────────────────────────────────────────────────"
+
+if [ -f "$issuesFile" ]; then
+  python3 - "$issuesFile" "$now" <<'PYEOF'
+import json, sys
+from datetime import datetime, timezone
+
+data = json.load(open(sys.argv[1]))
+now  = int(sys.argv[2])
+
+issues = [i for i in data.get("issues",[])
+          if i.get("status") in ("open","in_progress","in_review")]
+
+if not issues:
+    print("  (no open/stalled issues)")
+else:
+    for iss in issues[:20]:
+        iid   = iss.get("id","?")[:28]
+        title = iss.get("title","-")[:38]
+        st    = iss.get("status","?")
+        upd   = iss.get("updatedAt","-")[:10]
+        asgn  = (iss.get("assigneeId") or "—")[:20]
+        print(f"  [{st:<11}] {title:<38} assigned={asgn}  updated={upd}")
+PYEOF
+else
+  echo "  (no issues file)"
+fi
+
+echo ""
+echo "  For deep diagnosis: /mastermind:diagnose --org $org_name --action diagnose --issue-id <id>"
+```
+
+### diagnose
+
+Forensic deep-dive on a specific issue or agent:
+
+```bash
+echo "DEEP DIAGNOSIS — $org_name"
+echo "════════════════════════════════════════════════════════"
+echo ""
+
+if [ -n "$issue_id" ]; then
+  echo "ISSUE: $issue_id"
+  echo "────────────────────────────────────────────────────────"
+  if [ -f "$issuesFile" ]; then
+    jq --arg id "$issue_id" '.issues[] | select(.id == $id)' "$issuesFile" 2>/dev/null \
+      || echo "  Issue not found: $issue_id"
+  fi
+fi
+
+if [ -n "$agent_id" ]; then
+  echo ""
+  echo "AGENT ACTIVITY: $agent_id"
+  echo "────────────────────────────────────────────────────────"
+  if [ -f "$activityFile" ]; then
+    grep "$agent_id" "$activityFile" | tail -20 | while read -r line; do
+      echo "  $line"
+    done
+  else
+    echo "  (no activity log found)"
+  fi
+fi
+
+echo ""
+echo "DIAGNOSIS FRAMEWORK"
+echo "────────────────────────────────────────────────────────"
+echo "  Walk the issue tree and find the exact stop-point."
+echo "  Common stall shapes:"
+echo "    1. Issue is 'in_review' with no active run or pending interaction"
+echo "    2. Issue is 'in_progress' after a successful run with no next action"
+echo "    3. Blocker chain whose leaf is cancelled or inaccessible"
+echo "    4. Recovery loop waking the same issue repeatedly after successful runs"
+echo "    5. Stranded-work recovery treating its own recovery issues as source work"
+echo ""
+echo "  Root cause format:"
+echo "    - Stop-point: <issue-id> stuck at status=<status> because <reason>"
+echo "    - Evidence: <run ids, timestamps, status transitions>"
+echo "    - Proposed rule: <rule that prevents recurrence>"
+echo "    - Invariant check: [1] productive work continues? [2] real blockers only? [3] bounded?"
+```
+
+### report
+
+```bash
+echo "DIAGNOSTIC REPORT — $org_name"
+echo "════════════════════════════════════════════════════════"
+echo "Generated: $(date -u +%Y-%m-%dT%H:%M:%SZ)"
+echo ""
+
+agentCount=$(jq '.roles | length' "$orgFile")
+echo "Org agents:  $agentCount"
+
+if [ -f "$issuesFile" ]; then
+  openCount=$(jq '[.issues[] | select(.status == "open")] | length' "$issuesFile")
+  inpCount=$(jq '[.issues[] | select(.status == "in_progress")] | length' "$issuesFile")
+  doneCount=$(jq '[.issues[] | select(.status == "done")] | length' "$issuesFile")
+  echo "Issues:      open=$openCount  in_progress=$inpCount  done=$doneCount"
+fi
+
+echo ""
+echo "THREE INVARIANT STATUS:"
+echo "  1. Productive work continues:  [check heartbeats + open issues]"
+echo "  2. Only real blockers stop:    [check stall candidates above]"
+echo "  3. No infinite loops:          [check activity log for repeat patterns]"
+echo ""
+echo "  Run scan first: /mastermind:diagnose --org $org_name --action scan"
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+org_name: <org_name>
+invariants:
+  productive_work_continues: check
+  only_real_blockers: check
+  no_infinite_loops: check
+```
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.

package/.claude/skills/mastermind/env.md

@@ -0,0 +1,198 @@
+---
+name: mastermind-env
+description: Mastermind env — audit and configure the runtime environment for an org. Shows LLM provider config, memory backend, agent JWT settings, logging, and storage — highlighting missing or misconfigured values.
+type: domain-skill
+default_mode: auto
+---
+
+# Mastermind Env
+
+This skill is invoked by `mastermind:env` or directly via `/mastermind:env`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block
+- `org_name`: org to inspect env for
+- `action`: show | set | validate
+- `key`: env var key to set (for set action)
+- `value`: value to set (for set action — use env var reference, not inline secrets)
+- `section`: llm | memory | jwt | logging | storage | all (default: all)
+- `caller`: command | master
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Load Org Config
+
+```bash
+orgFile=".monomind/orgs/${org_name}.json"
+[ ! -f "$orgFile" ] && { echo "ERROR: Org '$org_name' not found."; exit 1; }
+
+memNs="org:${org_name}"
+```
+
+---
+
+## Step 2 — Execute Action
+
+### show (default)
+
+Collect and display environment configuration for this org's agents:
+
+```bash
+echo "╔══════════════════════════════════════════════════════╗"
+echo "║  ENV AUDIT — org: ${org_name}"
+echo "╚══════════════════════════════════════════════════════╝"
+echo ""
+
+# LLM / Adapter config
+echo "LLM PROVIDER"
+echo "────────────"
+ceo_model=$(jq -r '.run_config.ceo_adapter // "claude-sonnet-4-6"' "$orgFile")
+echo "  CEO adapter model:  $ceo_model"
+jq -r '.roles[] | "  \(.id): \(.adapter_config.model // "inherited from CEO")"' "$orgFile" 2>/dev/null
+echo ""
+
+# API key availability (check env vars, never print values)
+echo "API KEYS (present/missing)"
+echo "──────────────────────────"
+for key in ANTHROPIC_API_KEY OPENAI_API_KEY GOOGLE_API_KEY; do
+  if [ -n "${!key}" ]; then
+    echo "  $key: ✓ present (${!key:0:6}***)"
+  elif [ -f ".monomind/orgs/.secrets/${org_name}/${key}" ]; then
+    echo "  $key: ✓ in org secrets"
+  else
+    echo "  $key: ✗ MISSING"
+  fi
+done
+echo ""
+
+# Memory config
+echo "MEMORY"
+echo "──────"
+echo "  namespace: org:${org_name}"
+npx monomind@latest memory list --namespace "org:${org_name}" 2>/dev/null | wc -l | xargs echo "  stored entries:"
+echo ""
+
+# Board config
+echo "TASK BOARD"
+echo "──────────"
+board_id=$(jq -r '.board_id // "NOT CONFIGURED"' "$orgFile")
+echo "  board_id:    $board_id"
+echo "  todo_col:    $(jq -r '.todo_col_id // "NOT CONFIGURED"' "$orgFile")"
+echo "  doing_col:   $(jq -r '.doing_col_id // "NOT CONFIGURED"' "$orgFile")"
+echo "  done_col:    $(jq -r '.done_col_id // "NOT CONFIGURED"' "$orgFile")"
+echo ""
+
+# Run config
+echo "RUN CONFIG"
+echo "──────────"
+jq -r '.run_config | to_entries[] | "  \(.key): \(.value)"' "$orgFile" 2>/dev/null
+echo ""
+
+# Governance
+echo "GOVERNANCE"
+echo "──────────"
+jq -r '"  policy: \(.governance.policy // "auto")"' "$orgFile" 2>/dev/null
+echo ""
+
+# Dashboard
+echo "DASHBOARD"
+echo "─────────"
+CTRL_URL=$(jq -r '.url // "http://localhost:4242"' ".monomind/control.json" 2>/dev/null || echo "http://localhost:4242")
+echo "  url:    $CTRL_URL"
+curl -s "${CTRL_URL}/api/health" >/dev/null 2>&1 && echo "  status: ✓ reachable" || echo "  status: ✗ not reachable"
+```
+
+### validate
+
+Run a preflight check before starting an org run:
+
+```bash
+echo "PREFLIGHT CHECK — org: $org_name"
+errors=0
+
+# Check all required env vars
+for key in ANTHROPIC_API_KEY; do
+  if [ -z "${!key}" ] && [ ! -f ".monomind/orgs/.secrets/${org_name}/${key}" ]; then
+    echo "  ✗ MISSING: $key"
+    errors=$((errors + 1))
+  else
+    echo "  ✓ $key"
+  fi
+done
+
+# Check board IDs
+board_id=$(jq -r '.board_id // empty' "$orgFile")
+[ -z "$board_id" ] && { echo "  ✗ MISSING: board_id — run /mastermind:createorg to rebuild"; errors=$((errors + 1)); } || echo "  ✓ board_id"
+
+# Check roles
+role_count=$(jq '.roles | length' "$orgFile")
+[ "$role_count" -eq 0 ] && { echo "  ✗ MISSING: no roles defined"; errors=$((errors + 1)); } || echo "  ✓ $role_count roles"
+
+# Summary
+echo ""
+if [ "$errors" -eq 0 ]; then
+  echo "✓ All checks passed — org is ready to run."
+else
+  echo "✗ $errors issue(s) found — resolve before running."
+fi
+```
+
+### set
+
+Update a run_config key or governance field in the org JSON:
+
+```bash
+# Only allow safe keys — never set arbitrary JSON to prevent injection
+allowed_keys="checkpoint_interval_min max_concurrent_agents budget_tokens alert_threshold ceo_adapter"
+echo "$allowed_keys" | grep -qw "$key" || { echo "ERROR: Key '$key' not settable via this command. Edit $orgFile directly."; exit 1; }
+
+tmp="${orgFile}.tmp"
+jq --arg key "$key" --arg value "$value" \
+   '.run_config[$key] = ($value | if test("^[0-9]+$") then tonumber else . end)' \
+   "$orgFile" > "$tmp" && mv "$tmp" "$orgFile"
+echo "Set run_config.$key = $value"
+```
+
+---
+
+## Agent Environment Template
+
+When spawning agents, include this env block in their prompt:
+
+```bash
+# CEO/boss agent env block (prepend to all boss prompts):
+echo "ENVIRONMENT:
+  Memory namespace: org:${orgName}
+  Dashboard: ${CTRL_URL}
+  Budget: $(jq -r '.run_config.budget_tokens // "unlimited"' "$orgFile") tokens
+  Governance: $(jq -r '.governance.policy // "auto"' "$orgFile")
+  ANTHROPIC_API_KEY: $([ -n "$ANTHROPIC_API_KEY" ] && echo "present" || echo "missing — check org secrets")
+"
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+org: <org_name>
+validation_errors: <N>
+```
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.