titan-agent 6.5.2 → 7.0.0

package/dist/gateway/routes/watchRouter.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/gateway/routes/watchRouter.ts"],"sourcesContent":["/**\n * Watch Router\n *\n * Extracted from gateway/server.ts.\n * Consolidates all /api/watch/* routes.\n */\n\nimport { Router, type Request, type Response } from 'express';\nimport { join } from 'path';\nimport { homedir } from 'os';\nimport fs from 'fs';\nimport logger from '../../utils/logger.js';\nimport { setupSSEFlush } from '../../utils/sseFlush.js';\n\n// Daemon events (for SSE)\nimport { titanEvents } from '../../agent/daemon.js';\n\nconst COMPONENT = 'WatchRouter';\n\n// ── Module-level constants (avoid per-request allocation) ──────────\nconst PANE_SSE_TOPICS = [\n    // Soma / drives\n    'drive:tick', 'hormone:update', 'pressure:threshold', 'soma:proposal',\n    // Turns / tools\n    'turn:pre', 'turn:post', 'tool:call', 'tool:result',\n    // Goals\n    'goal:create', 'goal:complete', 'goal:fail', 'goal:cancel', 'goal:update',\n    // Command Post\n    'cp:activity', 'cp:proposal', 'cp:approval', 'cp:rejection',\n    // Health\n    'health:up', 'health:down', 'health:degraded',\n    // Multi-agent\n    'agent:spawn', 'agent:kill', 'agent:message',\n    // Alerts\n    'alert:warning', 'alert:critical',\n];\n\nexport function createWatchRouter(): Router {\n  const router = Router();\n\n  // ── Watch stream — unified human-readable event firehose (v4.5.0)\n  // Fuses every meaningful event across TITAN into a single SSE feed\n  // with plain-English captions. Used by the /watch Pane UI.\n  router.get('/watch/stream', async (req: Request, res: Response) => {\n    const { humanize } = await import('../../watch/humanize.js');\n\n    res.writeHead(200, {\n      'Content-Type': 'text/event-stream',\n      'Cache-Control': 'no-cache',\n      Connection: 'keep-alive',\n      'X-Accel-Buffering': 'no',\n    });\n    const sseWrite = setupSSEFlush(res);\n\n    // Every event topic the Pane cares about — union of drive ticks,\n    // soma proposals, tool calls, goals, initiative, command-post, health,\n    // multi-agent, alerts. Matches src/watch/humanize.ts dictionary.\n    const topics = PANE_SSE_TOPICS;\n\n    const send = (data: unknown) => {\n      try { sseWrite(`data: ${JSON.stringify(data)}\\n\\n`); } catch { /* client gone */ }\n    };\n\n    // Initial snapshot — read drive state + recent goals so the UI has\n    // something to render before the first live event arrives.\n    try {\n      const driveStatePath = join(homedir(), '.titan', 'drive-state.json');\n      if (fs.existsSync(driveStatePath)) {\n        const raw = JSON.parse(fs.readFileSync(driveStatePath, 'utf-8'));\n        const latest = raw.latest as { timestamp?: string; drives?: unknown[]; totalPressure?: number; dominantDrives?: string[] } | undefined;\n        if (latest) {\n          send({\n            type: 'snapshot',\n            drives: latest.drives || [],\n            totalPressure: latest.totalPressure || 0,\n            dominantDrives: latest.dominantDrives || [],\n            timestamp: latest.timestamp ? new Date(latest.timestamp).getTime() : Date.now(),\n          });\n        }\n      }\n    } catch { /* snapshot best-effort */ }\n\n    // Wire live event listeners\n    const listeners = new Map<string, (data: unknown) => void>();\n    for (const topic of topics) {\n      const handler = (payload: unknown) => {\n        const event = humanize(topic, (payload as Record<string, unknown>) || {});\n        if (event) send({ type: \"event\", ...event });\n      };\n      listeners.set(topic, handler);\n      titanEvents.on(topic, handler);\n    }\n\n    const keepalive = setInterval(() => {\n      try { sseWrite(': keepalive\\n\\n'); } catch { /* gone */ }\n    }, 15_000);\n\n    req.on('close', () => {\n      clearInterval(keepalive);\n      for (const [topic, handler] of listeners) {\n        titanEvents.removeListener(topic, handler);\n      }\n    });\n  });\n\n  // Snapshot endpoint — returns current drive state + active goal +\n  // last N events from a small ring buffer we maintain in-process.\n  // Used by the Pane on first load to populate zones without waiting\n  // for the next tick.\n  router.get('/watch/snapshot', (_req: Request, res: Response) => {\n    try {\n      const driveStatePath = join(homedir(), '.titan', 'drive-state.json');\n      const goalsPath = join(homedir(), '.titan', 'goals.json');\n      const driveState = fs.existsSync(driveStatePath)\n        ? JSON.parse(fs.readFileSync(driveStatePath, 'utf-8'))?.latest\n        : null;\n      const goalsRaw = fs.existsSync(goalsPath)\n        ? JSON.parse(fs.readFileSync(goalsPath, 'utf-8'))\n        : {};\n      const allGoals = Array.isArray(goalsRaw) ? goalsRaw : Object.values(goalsRaw);\n      const activeGoals = (allGoals as Array<Record<string, unknown>>).filter(g => g.status === 'active');\n      res.json({\n        drives: driveState?.drives || [],\n        totalPressure: driveState?.totalPressure || 0,\n        dominantDrives: driveState?.dominantDrives || [],\n        activeGoals: activeGoals.slice(0, 5).map(g => ({\n          id: g.id,\n          title: g.title,\n          progress: g.progress || 0,\n          createdAt: g.createdAt,\n        })),\n        timestamp: Date.now(),\n      });\n    } catch (e) {\n      logger.error(COMPONENT, `Endpoint error: ${(e as Error).message}`); res.status(500).json({ error: 'Something went wrong on our end. Please try again in a moment.' });\n    }\n  });\n\n  return router;\n}\n"],"mappings":";AAOA,SAAS,cAA2C;AACpD,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,OAAO,QAAQ;AACf,OAAO,YAAY;AACnB,SAAS,qBAAqB;AAG9B,SAAS,mBAAmB;AAE5B,MAAM,YAAY;AAGlB,MAAM,kBAAkB;AAAA;AAAA,EAEpB;AAAA,EAAc;AAAA,EAAkB;AAAA,EAAsB;AAAA;AAAA,EAEtD;AAAA,EAAY;AAAA,EAAa;AAAA,EAAa;AAAA;AAAA,EAEtC;AAAA,EAAe;AAAA,EAAiB;AAAA,EAAa;AAAA,EAAe;AAAA;AAAA,EAE5D;AAAA,EAAe;AAAA,EAAe;AAAA,EAAe;AAAA;AAAA,EAE7C;AAAA,EAAa;AAAA,EAAe;AAAA;AAAA,EAE5B;AAAA,EAAe;AAAA,EAAc;AAAA;AAAA,EAE7B;AAAA,EAAiB;AACrB;AAEO,SAAS,oBAA4B;AAC1C,QAAM,SAAS,OAAO;AAKtB,SAAO,IAAI,iBAAiB,OAAO,KAAc,QAAkB;AACjE,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,yBAAyB;AAE3D,QAAI,UAAU,KAAK;AAAA,MACjB,gBAAgB;AAAA,MAChB,iBAAiB;AAAA,MACjB,YAAY;AAAA,MACZ,qBAAqB;AAAA,IACvB,CAAC;AACD,UAAM,WAAW,cAAc,GAAG;AAKlC,UAAM,SAAS;AAEf,UAAM,OAAO,CAAC,SAAkB;AAC9B,UAAI;AAAE,iBAAS,SAAS,KAAK,UAAU,IAAI,CAAC;AAAA;AAAA,CAAM;AAAA,MAAG,QAAQ;AAAA,MAAoB;AAAA,IACnF;AAIA,QAAI;AACF,YAAM,iBAAiB,KAAK,QAAQ,GAAG,UAAU,kBAAkB;AACnE,UAAI,GAAG,WAAW,cAAc,GAAG;AACjC,cAAM,MAAM,KAAK,MAAM,GAAG,aAAa,gBAAgB,OAAO,CAAC;AAC/D,cAAM,SAAS,IAAI;AACnB,YAAI,QAAQ;AACV,eAAK;AAAA,YACH,MAAM;AAAA,YACN,QAAQ,OAAO,UAAU,CAAC;AAAA,YAC1B,eAAe,OAAO,iBAAiB;AAAA,YACvC,gBAAgB,OAAO,kBAAkB,CAAC;AAAA,YAC1C,WAAW,OAAO,YAAY,IAAI,KAAK,OAAO,SAAS,EAAE,QAAQ,IAAI,KAAK,IAAI;AAAA,UAChF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAA6B;AAGrC,UAAM,YAAY,oBAAI,IAAqC;AAC3D,eAAW,SAAS,QAAQ;AAC1B,YAAM,UAAU,CAAC,YAAqB;AACpC,cAAM,QAAQ,SAAS,OAAQ,WAAuC,CAAC,CAAC;AACxE,YAAI,MAAO,MAAK,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC;AAAA,MAC7C;AACA,gBAAU,IAAI,OAAO,OAAO;AAC5B,kBAAY,GAAG,OAAO,OAAO;AAAA,IAC/B;AAEA,UAAM,YAAY,YAAY,MAAM;AAClC,UAAI;AAAE,iBAAS,iBAAiB;AAAA,MAAG,QAAQ;AAAA,MAAa;AAAA,IAC1D,GAAG,IAAM;AAET,QAAI,GAAG,SAAS,MAAM;AACpB,oBAAc,SAAS;AACvB,iBAAW,CAAC,OAAO,OAAO,KAAK,WAAW;AACxC,oBAAY,eAAe,OAAO,OAAO;AAAA,MAC3C;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAMD,SAAO,IAAI,mBAAmB,CAAC,MAAe,QAAkB;AAC9D,QAAI;AACF,YAAM,iBAAiB,KAAK,QAAQ,GAAG,UAAU,kBAAkB;AACnE,YAAM,YAAY,KAAK,QAAQ,GAAG,UAAU,YAAY;AACxD,YAAM,aAAa,GAAG,WAAW,cAAc,IAC3C,KAAK,MAAM,GAAG,aAAa,gBAAgB,OAAO,CAAC,GAAG,SACtD;AACJ,YAAM,WAAW,GAAG,WAAW,SAAS,IACpC,KAAK,MAAM,GAAG,aAAa,WAAW,OAAO,CAAC,IAC9C,CAAC;AACL,YAAM,WAAW,MAAM,QAAQ,QAAQ,IAAI,WAAW,OAAO,OAAO,QAAQ;AAC5E,YAAM,cAAe,SAA4C,OAAO,OAAK,EAAE,WAAW,QAAQ;AAClG,UAAI,KAAK;AAAA,QACP,QAAQ,YAAY,UAAU,CAAC;AAAA,QAC/B,eAAe,YAAY,iBAAiB;AAAA,QAC5C,gBAAgB,YAAY,kBAAkB,CAAC;AAAA,QAC/C,aAAa,YAAY,MAAM,GAAG,CAAC,EAAE,IAAI,QAAM;AAAA,UAC7C,IAAI,EAAE;AAAA,UACN,OAAO,EAAE;AAAA,UACT,UAAU,EAAE,YAAY;AAAA,UACxB,WAAW,EAAE;AAAA,QACf,EAAE;AAAA,QACF,WAAW,KAAK,IAAI;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,GAAG;AACV,aAAO,MAAM,WAAW,mBAAoB,EAAY,OAAO,EAAE;AAAG,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,iEAAiE,CAAC;AAAA,IACtK;AAAA,EACF,CAAC;AAED,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../src/gateway/routes/watchRouter.ts"],"sourcesContent":["/**\n * Watch Router\n *\n * Extracted from gateway/server.ts.\n * Consolidates all /api/watch/* routes.\n */\n\nimport { Router, type Request, type Response } from 'express';\nimport { join } from 'path';\nimport fs from 'fs';\nimport { TITAN_HOME } from '../../utils/constants.js';\nimport logger from '../../utils/logger.js';\nimport { setupSSEFlush } from '../../utils/sseFlush.js';\n\n// Daemon events (for SSE)\nimport { titanEvents } from '../../agent/daemon.js';\n\nconst COMPONENT = 'WatchRouter';\n\n// ── Module-level constants (avoid per-request allocation) ──────────\nconst PANE_SSE_TOPICS = [\n    // Soma / drives\n    'drive:tick', 'hormone:update', 'pressure:threshold', 'soma:proposal',\n    // Turns / tools\n    'turn:pre', 'turn:post', 'tool:call', 'tool:result',\n    // Goals\n    'goal:create', 'goal:complete', 'goal:fail', 'goal:cancel', 'goal:update',\n    // Command Post\n    'cp:activity', 'cp:proposal', 'cp:approval', 'cp:rejection',\n    // Health\n    'health:up', 'health:down', 'health:degraded',\n    // Multi-agent\n    'agent:spawn', 'agent:kill', 'agent:message',\n    // Alerts\n    'alert:warning', 'alert:critical',\n];\n\nexport function createWatchRouter(): Router {\n  const router = Router();\n\n  // ── Watch stream — unified human-readable event firehose (v4.5.0)\n  // Fuses every meaningful event across TITAN into a single SSE feed\n  // with plain-English captions. Used by the /watch Pane UI.\n  router.get('/watch/stream', async (req: Request, res: Response) => {\n    const { humanize } = await import('../../watch/humanize.js');\n\n    res.writeHead(200, {\n      'Content-Type': 'text/event-stream',\n      'Cache-Control': 'no-cache',\n      Connection: 'keep-alive',\n      'X-Accel-Buffering': 'no',\n    });\n    const sseWrite = setupSSEFlush(res);\n\n    // Every event topic the Pane cares about — union of drive ticks,\n    // soma proposals, tool calls, goals, initiative, command-post, health,\n    // multi-agent, alerts. Matches src/watch/humanize.ts dictionary.\n    const topics = PANE_SSE_TOPICS;\n\n    const send = (data: unknown) => {\n      try { sseWrite(`data: ${JSON.stringify(data)}\\n\\n`); } catch { /* client gone */ }\n    };\n\n    // Initial snapshot — read drive state + recent goals so the UI has\n    // something to render before the first live event arrives.\n    try {\n      // Soma-audit fix: respect TITAN_HOME — the old hardcoded ~/.titan made a\n      // staging instance silently read PROD's drive data (cross-env leak).\n      const driveStatePath = join(TITAN_HOME, 'drive-state.json');\n      if (fs.existsSync(driveStatePath)) {\n        const raw = JSON.parse(fs.readFileSync(driveStatePath, 'utf-8'));\n        const latest = raw.latest as { timestamp?: string; drives?: unknown[]; totalPressure?: number; dominantDrives?: string[] } | undefined;\n        if (latest) {\n          send({\n            type: 'snapshot',\n            drives: latest.drives || [],\n            totalPressure: latest.totalPressure || 0,\n            dominantDrives: latest.dominantDrives || [],\n            timestamp: latest.timestamp ? new Date(latest.timestamp).getTime() : Date.now(),\n          });\n        }\n      }\n    } catch { /* snapshot best-effort */ }\n\n    // Wire live event listeners\n    const listeners = new Map<string, (data: unknown) => void>();\n    for (const topic of topics) {\n      const handler = (payload: unknown) => {\n        const event = humanize(topic, (payload as Record<string, unknown>) || {});\n        if (event) send({ type: \"event\", ...event });\n      };\n      listeners.set(topic, handler);\n      titanEvents.on(topic, handler);\n    }\n\n    const keepalive = setInterval(() => {\n      try { sseWrite(': keepalive\\n\\n'); } catch { /* gone */ }\n    }, 15_000);\n\n    req.on('close', () => {\n      clearInterval(keepalive);\n      for (const [topic, handler] of listeners) {\n        titanEvents.removeListener(topic, handler);\n      }\n    });\n  });\n\n  // Snapshot endpoint — returns current drive state + active goal +\n  // last N events from a small ring buffer we maintain in-process.\n  // Used by the Pane on first load to populate zones without waiting\n  // for the next tick.\n  router.get('/watch/snapshot', (_req: Request, res: Response) => {\n    try {\n      const driveStatePath = join(TITAN_HOME, 'drive-state.json');\n      const goalsPath = join(TITAN_HOME, 'goals.json');\n      const driveState = fs.existsSync(driveStatePath)\n        ? JSON.parse(fs.readFileSync(driveStatePath, 'utf-8'))?.latest\n        : null;\n      const goalsRaw = fs.existsSync(goalsPath)\n        ? JSON.parse(fs.readFileSync(goalsPath, 'utf-8'))\n        : {};\n      const allGoals = Array.isArray(goalsRaw) ? goalsRaw : Object.values(goalsRaw);\n      const activeGoals = (allGoals as Array<Record<string, unknown>>).filter(g => g.status === 'active');\n      res.json({\n        drives: driveState?.drives || [],\n        totalPressure: driveState?.totalPressure || 0,\n        dominantDrives: driveState?.dominantDrives || [],\n        activeGoals: activeGoals.slice(0, 5).map(g => ({\n          id: g.id,\n          title: g.title,\n          progress: g.progress || 0,\n          createdAt: g.createdAt,\n        })),\n        timestamp: Date.now(),\n      });\n    } catch (e) {\n      logger.error(COMPONENT, `Endpoint error: ${(e as Error).message}`); res.status(500).json({ error: 'Something went wrong on our end. Please try again in a moment.' });\n    }\n  });\n\n  return router;\n}\n"],"mappings":";AAOA,SAAS,cAA2C;AACpD,SAAS,YAAY;AACrB,OAAO,QAAQ;AACf,SAAS,kBAAkB;AAC3B,OAAO,YAAY;AACnB,SAAS,qBAAqB;AAG9B,SAAS,mBAAmB;AAE5B,MAAM,YAAY;AAGlB,MAAM,kBAAkB;AAAA;AAAA,EAEpB;AAAA,EAAc;AAAA,EAAkB;AAAA,EAAsB;AAAA;AAAA,EAEtD;AAAA,EAAY;AAAA,EAAa;AAAA,EAAa;AAAA;AAAA,EAEtC;AAAA,EAAe;AAAA,EAAiB;AAAA,EAAa;AAAA,EAAe;AAAA;AAAA,EAE5D;AAAA,EAAe;AAAA,EAAe;AAAA,EAAe;AAAA;AAAA,EAE7C;AAAA,EAAa;AAAA,EAAe;AAAA;AAAA,EAE5B;AAAA,EAAe;AAAA,EAAc;AAAA;AAAA,EAE7B;AAAA,EAAiB;AACrB;AAEO,SAAS,oBAA4B;AAC1C,QAAM,SAAS,OAAO;AAKtB,SAAO,IAAI,iBAAiB,OAAO,KAAc,QAAkB;AACjE,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,yBAAyB;AAE3D,QAAI,UAAU,KAAK;AAAA,MACjB,gBAAgB;AAAA,MAChB,iBAAiB;AAAA,MACjB,YAAY;AAAA,MACZ,qBAAqB;AAAA,IACvB,CAAC;AACD,UAAM,WAAW,cAAc,GAAG;AAKlC,UAAM,SAAS;AAEf,UAAM,OAAO,CAAC,SAAkB;AAC9B,UAAI;AAAE,iBAAS,SAAS,KAAK,UAAU,IAAI,CAAC;AAAA;AAAA,CAAM;AAAA,MAAG,QAAQ;AAAA,MAAoB;AAAA,IACnF;AAIA,QAAI;AAGF,YAAM,iBAAiB,KAAK,YAAY,kBAAkB;AAC1D,UAAI,GAAG,WAAW,cAAc,GAAG;AACjC,cAAM,MAAM,KAAK,MAAM,GAAG,aAAa,gBAAgB,OAAO,CAAC;AAC/D,cAAM,SAAS,IAAI;AACnB,YAAI,QAAQ;AACV,eAAK;AAAA,YACH,MAAM;AAAA,YACN,QAAQ,OAAO,UAAU,CAAC;AAAA,YAC1B,eAAe,OAAO,iBAAiB;AAAA,YACvC,gBAAgB,OAAO,kBAAkB,CAAC;AAAA,YAC1C,WAAW,OAAO,YAAY,IAAI,KAAK,OAAO,SAAS,EAAE,QAAQ,IAAI,KAAK,IAAI;AAAA,UAChF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAA6B;AAGrC,UAAM,YAAY,oBAAI,IAAqC;AAC3D,eAAW,SAAS,QAAQ;AAC1B,YAAM,UAAU,CAAC,YAAqB;AACpC,cAAM,QAAQ,SAAS,OAAQ,WAAuC,CAAC,CAAC;AACxE,YAAI,MAAO,MAAK,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC;AAAA,MAC7C;AACA,gBAAU,IAAI,OAAO,OAAO;AAC5B,kBAAY,GAAG,OAAO,OAAO;AAAA,IAC/B;AAEA,UAAM,YAAY,YAAY,MAAM;AAClC,UAAI;AAAE,iBAAS,iBAAiB;AAAA,MAAG,QAAQ;AAAA,MAAa;AAAA,IAC1D,GAAG,IAAM;AAET,QAAI,GAAG,SAAS,MAAM;AACpB,oBAAc,SAAS;AACvB,iBAAW,CAAC,OAAO,OAAO,KAAK,WAAW;AACxC,oBAAY,eAAe,OAAO,OAAO;AAAA,MAC3C;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAMD,SAAO,IAAI,mBAAmB,CAAC,MAAe,QAAkB;AAC9D,QAAI;AACF,YAAM,iBAAiB,KAAK,YAAY,kBAAkB;AAC1D,YAAM,YAAY,KAAK,YAAY,YAAY;AAC/C,YAAM,aAAa,GAAG,WAAW,cAAc,IAC3C,KAAK,MAAM,GAAG,aAAa,gBAAgB,OAAO,CAAC,GAAG,SACtD;AACJ,YAAM,WAAW,GAAG,WAAW,SAAS,IACpC,KAAK,MAAM,GAAG,aAAa,WAAW,OAAO,CAAC,IAC9C,CAAC;AACL,YAAM,WAAW,MAAM,QAAQ,QAAQ,IAAI,WAAW,OAAO,OAAO,QAAQ;AAC5E,YAAM,cAAe,SAA4C,OAAO,OAAK,EAAE,WAAW,QAAQ;AAClG,UAAI,KAAK;AAAA,QACP,QAAQ,YAAY,UAAU,CAAC;AAAA,QAC/B,eAAe,YAAY,iBAAiB;AAAA,QAC5C,gBAAgB,YAAY,kBAAkB,CAAC;AAAA,QAC/C,aAAa,YAAY,MAAM,GAAG,CAAC,EAAE,IAAI,QAAM;AAAA,UAC7C,IAAI,EAAE;AAAA,UACN,OAAO,EAAE;AAAA,UACT,UAAU,EAAE,YAAY;AAAA,UACxB,WAAW,EAAE;AAAA,QACf,EAAE;AAAA,QACF,WAAW,KAAK,IAAI;AAAA,MACtB,CAAC;AAAA,IACH,SAAS,GAAG;AACV,aAAO,MAAM,WAAW,mBAAoB,EAAY,OAAO,EAAE;AAAG,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,iEAAiE,CAAC;AAAA,IACtK;AAAA,EACF,CAAC;AAED,SAAO;AACT;","names":[]}

package/dist/gateway/server.js

@@ -52,7 +52,7 @@ import { initSlashCommands, handleSlashCommand } from "./slashCommands.js";
 import { initMcpServers } from "../mcp/registry.js";
 import { mountMcpHttpEndpoints } from "../mcp/server.js";
 import { initMonitors, setMonitorTriggerHandler, listMonitors, addMonitor, removeMonitor, getMonitorEvents } from "../agent/monitor.js";
-import { seedBuiltinRecipes } from "../recipes/store.js";
+import { seedBuiltinRecipes, findBySlashCommand } from "../recipes/store.js";
 import { parseSlashCommand, runRecipe } from "../recipes/runner.js";
 import { getCostStatus } from "../agent/costOptimizer.js";
 import { initLearning, getLearningStats } from "../memory/learning.js";
@@ -90,6 +90,7 @@ import { createTelephonyRouter } from "./routes/telephony.js";
 import { createUpdateRouter } from "./routes/update.js";
 import { createSocialRouter } from "./routes/socialRouter.js";
 import { createWatchRouter } from "./routes/watchRouter.js";
+import { createStudioRouter } from "./routes/studioRouter.js";
 import { setupSSEFlush } from "../utils/sseFlush.js";
 import { createLifecycleRouter } from "./routes/agents.js";
 import { getLifecycleManager } from "../utils/lifecycle.js";
@@ -580,10 +581,21 @@ async function handleInboundMessage(msg) {
     }
     try {
       let fullResponse = "";
+      const slashRecipe = findBySlashCommand(command);
+      if (slashRecipe && args) {
+        for (const key of Object.keys(slashRecipe.parameters || {})) params[key] = args;
+      }
+      const runStart = Date.now();
+      let runTokens = 0;
       for await (const step of runRecipe(command, params)) {
         const r = await processMessage(step.prompt, msg.channel, msg.userId);
+        runTokens += r.tokenUsage?.total || 0;
         fullResponse += (fullResponse ? "\n\n" : "") + r.content;
       }
+      if (slashRecipe?.author === "muscle-memory") {
+        const { recordAdoptedRun } = await import("../agent/muscleMemory.js");
+        recordAdoptedRun(slashRecipe.id, Date.now() - runStart, runTokens);
+      }
       await safeSend(msg.channel, { channel: msg.channel, userId: msg.userId, groupId: msg.groupId, content: fullResponse, replyTo: msg.id });
       broadcast({ type: "message", direction: "outbound", channel: msg.channel, userId: msg.userId, content: fullResponse, timestamp: (/* @__PURE__ */ new Date()).toISOString() });
       return;
@@ -669,28 +681,16 @@ async function startGateway(options) {
     const { hasUsableProvider } = await import("../config/config.js");
     const usable = await hasUsableProvider();
     if (!usable.ok) {
-      console.error("");
-      console.error("\x1B[31m\x1B[1m\u274C TITAN is not configured.\x1B[0m");
-      console.error("");
-      console.error(`   ${usable.details}`);
-      console.error("");
-      console.error("   Run the setup wizard:");
-      console.error("     \x1B[36mtitan onboard\x1B[0m");
-      console.error("");
-      console.error("   Or set an environment variable:");
-      console.error('     \x1B[36mexport ANTHROPIC_API_KEY="sk-ant-..."\x1B[0m');
-      console.error('     \x1B[36mexport OPENAI_API_KEY="sk-..."\x1B[0m');
-      console.error('     \x1B[36mexport OLLAMA_BASE_URL="http://localhost:11434"\x1B[0m');
-      console.error("");
-      console.error("   Or check what went wrong:");
-      console.error("     \x1B[36mtitan doctor\x1B[0m");
-      console.error("");
-      console.error("   To skip this check (advanced):");
-      console.error("     \x1B[36mtitan gateway --skip-usable-check\x1B[0m");
-      console.error("");
-      process.exit(1);
+      const { setProviderReady } = await import("./onboarding.js");
+      setProviderReady(false);
+      logger.warn(COMPONENT, `No usable provider yet (${usable.details}) \u2014 starting in WELCOME MODE. Open the dashboard to finish setup.`);
+      console.log("");
+      console.log("\x1B[36m\x1B[1m\u{1F44B} Welcome to TITAN!\x1B[0m No AI model is connected yet.");
+      console.log("   Opening the dashboard will walk you through it in under a minute.");
+      console.log("");
+    } else {
+      logger.info(COMPONENT, `Provider check passed: ${usable.details}`);
     }
-    logger.info(COMPONENT, `Provider check passed: ${usable.details}`);
   }
   if (config.autonomy?.mode === "autonomous") {
     logger.warn(COMPONENT, '\u26A0\uFE0F  AUTONOMY MODE IS "autonomous" \u2014 all tools run without approval. Safe for personal use, DANGEROUS for multi-user deployments.');
@@ -750,6 +750,16 @@ async function startGateway(options) {
   } catch (err) {
     logger.warn(COMPONENT, `somaInitiative failed to start: ${err.message}`);
   }
+  try {
+    const { registerHeartbeat } = await import("../agent/heartbeat.js");
+    registerHeartbeat();
+    const { registerReminderWatcher } = await import("../agent/reminders.js");
+    registerReminderWatcher();
+    const { registerMuscleWatcher } = await import("../agent/muscleMemory.js");
+    registerMuscleWatcher();
+  } catch (err) {
+    logger.warn(COMPONENT, `heartbeat failed to register: ${err.message}`);
+  }
   const defaultRateLimitWindowMs = options?.rateLimitWindowMs ?? 6e4;
   const defaultRateLimitMax = options?.rateLimitMax ?? 30;
   const rateLimitStore = /* @__PURE__ */ new Map();
@@ -1142,6 +1152,35 @@ async function startGateway(options) {
       res.status(500).json({ error: "tool_run_failed", message: err.message });
     }
   });
+  app.get("/api/memory/taxonomy", async (_req, res) => {
+    const { summarizeMemoryTaxonomy } = await import("../memory/taxonomy.js");
+    const cfg = loadConfig();
+    let hindsightConnected = false;
+    try {
+      const { memory } = await import("../memory/facade.js");
+      hindsightConnected = Boolean(await memory.episodic.isCrossSessionConnected());
+    } catch {
+    }
+    res.json(summarizeMemoryTaxonomy(cfg, { hindsightConnected }));
+  });
+  app.get("/api/memory/about-me", async (req, res) => {
+    try {
+      const userId = getUserIdFromReq(req);
+      const cfg = loadConfig();
+      const { readSomaProfile } = await import("../storage/somaProfile.js");
+      const profile = readSomaProfile(userId);
+      const { searchMemories } = await import("../memory/memory.js");
+      const facts = (await searchMemories()).slice(0, 100);
+      res.json({
+        identity: cfg.soul || null,
+        observations: profile.learnedAboutUser ?? [],
+        workingHours: profile.workingHours ?? null,
+        facts
+      });
+    } catch (err) {
+      res.status(500).json({ error: "about_me_failed", message: err.message });
+    }
+  });
   app.get("/api/memory/:key", async (req, res) => {
     try {
       const { recallFact } = await import("../memory/memory.js");
@@ -1358,6 +1397,63 @@ async function startGateway(options) {
       res.status(500).json({ error: "advisories_unavailable", message: err.message });
     }
   });
+  app.post("/api/soma/setpoints", async (req, res) => {
+    try {
+      const body = req.body ?? {};
+      const overrides = {};
+      for (const [k, v] of Object.entries(body)) {
+        const n = Number(v);
+        if (Number.isFinite(n) && n >= 0 && n <= 1) overrides[k] = n;
+      }
+      if (Object.keys(overrides).length === 0) {
+        res.status(400).json({ error: "no_valid_setpoints", message: "Provide { driveId: 0..1 }." });
+        return;
+      }
+      const cfg = loadConfig();
+      const organism = { ...cfg.organism, driveSetpoints: { ...cfg.organism.driveSetpoints ?? {}, ...overrides } };
+      updateConfig({ organism });
+      res.json({ ok: true, driveSetpoints: organism.driveSetpoints });
+    } catch (err) {
+      res.status(500).json({ error: "setpoints_failed", message: err.message });
+    }
+  });
+  app.post("/api/soma/weights", async (req, res) => {
+    try {
+      const body = req.body ?? {};
+      const overrides = {};
+      for (const [k, v] of Object.entries(body)) {
+        const n = Number(v);
+        if (Number.isFinite(n) && n >= 0.1 && n <= 3) overrides[k] = n;
+      }
+      if (Object.keys(overrides).length === 0) {
+        res.status(400).json({ error: "no_valid_weights", message: "Provide { driveId: 0.1..3.0 }." });
+        return;
+      }
+      const cfg = loadConfig();
+      const organism = { ...cfg.organism, driveWeights: { ...cfg.organism.driveWeights ?? {}, ...overrides } };
+      updateConfig({ organism });
+      res.json({ ok: true, driveWeights: organism.driveWeights });
+    } catch (err) {
+      res.status(500).json({ error: "weights_failed", message: err.message });
+    }
+  });
+  app.get("/api/heartbeat/latest", async (_req, res) => {
+    try {
+      const { latestHeartbeat } = await import("../agent/heartbeat.js");
+      res.json({ note: latestHeartbeat() });
+    } catch (err) {
+      res.status(500).json({ error: "heartbeat_failed", message: err.message });
+    }
+  });
+  app.post("/api/heartbeat/beat", async (_req, res) => {
+    try {
+      const { runHeartbeat } = await import("../agent/heartbeat.js");
+      const note = await runHeartbeat();
+      res.json({ ok: true, spoke: !!note, note });
+    } catch (err) {
+      res.status(500).json({ error: "heartbeat_failed", message: err.message });
+    }
+  });
   app.get("/api/time-travel/checkpoints", async (req, res) => {
     try {
       const { listAllCheckpoints, listCheckpoints } = await import("../agent/shadowGit.js");
@@ -1413,13 +1509,14 @@ async function startGateway(options) {
       try {
         const { spawnSubAgent } = await import("../agent/subAgent.js");
         const decomposePrompt = [
-          `Decompose this autonomous mission into 3-6 concrete, independently-runnable subtasks.`,
+          `Decompose this autonomous mission into 3-6 concrete subtasks.`,
           ``,
           `Mission: ${description}`,
           ``,
-          `Return STRICT JSON: { "subtasks": [ { "title": "...", "description": "..." }, ... ] }.`,
+          `Return STRICT JSON: { "subtasks": [ { "title": "...", "description": "...", "dependsOn": [<1-based positions of prerequisite subtasks>] }, ... ] }.`,
+          `Use dependsOn to express real ordering: if a subtask needs an earlier subtask's output, list that earlier subtask's 1-based position. Independent subtasks use [].`,
+          `Example: if subtask 3 needs subtasks 1 and 2 done first -> "dependsOn": [1, 2]. Only reference EARLIER positions; never a later one or itself.`,
           `Each title <= 60 chars, each description <= 200 chars.`,
-          `Order subtasks dependency-aware (later ones may reference earlier output).`,
           `Do NOT add a verification subtask \u2014 the driver verifies automatically.`,
           `Do NOT wrap in markdown \u2014 pure JSON.`
         ].join("\n");
@@ -1429,15 +1526,8 @@ async function startGateway(options) {
           tier: "fast",
           maxRounds: 1
         });
-        const raw = (result.content || "").trim();
-        const jsonStart = raw.indexOf("{");
-        const jsonEnd = raw.lastIndexOf("}");
-        if (jsonStart >= 0 && jsonEnd > jsonStart) {
-          const parsed = JSON.parse(raw.slice(jsonStart, jsonEnd + 1));
-          if (Array.isArray(parsed.subtasks) && parsed.subtasks.length >= 1) {
-            subtasks = parsed.subtasks.filter((s) => typeof s?.title === "string" && typeof s?.description === "string").slice(0, 6).map((s) => ({ title: String(s.title).slice(0, 80), description: String(s.description).slice(0, 280) }));
-          }
-        }
+        const { parseMissionSubtasks } = await import("../agent/missionDecompose.js");
+        subtasks = parseMissionSubtasks(result.content || "");
       } catch (err) {
         logger.warn(COMPONENT, `Mission decomposition failed, creating goal with no subtasks: ${err.message}`);
       }
@@ -1677,6 +1767,25 @@ async function startGateway(options) {
       res.status(500).json({ error: "gift_unavailable", message: err.message });
     }
   });
+  app.get("/api/security/audit", async (_req, res) => {
+    const { auditConfig } = await import("../skills/builtin/config_audit.js");
+    const cfg = loadConfig();
+    res.json({ findings: auditConfig(cfg) });
+  });
+  app.get("/api/traces", async (req, res) => {
+    const { listSpans } = await import("../telemetry/traceStore.js");
+    const limit = req.query.limit ? parseInt(req.query.limit, 10) : 100;
+    const sessionId = req.query.sessionId;
+    res.json({ spans: listSpans({ limit, sessionId }) });
+  });
+  app.get("/api/traces/summary", async (_req, res) => {
+    const { listSpans, summarizeTraces } = await import("../telemetry/traceStore.js");
+    res.json(summarizeTraces(listSpans()));
+  });
+  app.get("/api/traces/export", async (_req, res) => {
+    const { listSpans, toOTel } = await import("../telemetry/traceStore.js");
+    res.json(toOTel(listSpans({ limit: 1e3 })));
+  });
   app.get("/api/stats", async (_req, res) => {
     const usage = getUsageStats();
     const cfg = loadConfig();
@@ -2173,6 +2282,33 @@ data: ${JSON.stringify({ message: "verification stream unavailable" })}
   app.use("/api", createMetricsRouter());
   app.use("/api", createMcpRouter());
   app.use("/api", createAgentsRouter());
+  app.get("/api/muscle", async (_req, res) => {
+    const { listSkills, muscleStats } = await import("../agent/muscleMemory.js");
+    res.json({ stats: muscleStats(), skills: listSkills() });
+  });
+  app.post("/api/muscle/scan", rateLimit(6e4, 2), async (_req, res) => {
+    const { runMuscleScan } = await import("../agent/muscleMemory.js");
+    res.json(await runMuscleScan(true));
+  });
+  app.post("/api/muscle/:id/adopt", rateLimit(6e4, 10), async (req, res) => {
+    const { adoptSkill } = await import("../agent/muscleMemory.js");
+    const result = adoptSkill(req.params.id);
+    res.status("error" in result ? 400 : 200).json(result);
+  });
+  app.post("/api/muscle/:id/dismiss", rateLimit(6e4, 10), async (req, res) => {
+    const { dismissSkill } = await import("../agent/muscleMemory.js");
+    const ok = dismissSkill(req.params.id, req.body?.reason);
+    res.status(ok ? 200 : 400).json({ ok });
+  });
+  app.get("/api/onboarding/state", async (_req, res) => {
+    const { getOnboardingState } = await import("./onboarding.js");
+    res.json(await getOnboardingState());
+  });
+  app.post("/api/onboarding/configure", async (req, res) => {
+    const { applyOnboardingConfig } = await import("./onboarding.js");
+    const result = await applyOnboardingConfig(req.body || {});
+    res.status(result.ok ? 200 : 400).json(result);
+  });
   app.post("/api/message", rateLimit(defaultRateLimitWindowMs, defaultRateLimitMax), concurrencyGuard(MAX_CONCURRENT_MESSAGES), async (req, res) => {
     const body = req.body || {};
     const content = typeof body.content === "string" && body.content || typeof body.message === "string" && body.message || "";
@@ -2182,6 +2318,23 @@ data: ${JSON.stringify({ message: "verification stream unavailable" })}
       res.status(400).json({ error: "content (or message) must be a non-empty string" });
       return;
     }
+    {
+      const { getProviderReady, refreshProviderReady } = await import("./onboarding.js");
+      if (!getProviderReady()) {
+        const recheck = await refreshProviderReady();
+        if (!recheck.ok) {
+          res.json({
+            content: "I'm not connected to an AI model yet! Click **Set up TITAN** (or open Settings \u2192 Models) and I'll be ready in under a minute. If you use Ollama, just make sure it's running \u2014 I'll find it.",
+            sessionId: requestedSessionId || "welcome",
+            model: "none",
+            toolsUsed: [],
+            durationMs: 0,
+            welcomeMode: true
+          });
+          return;
+        }
+      }
+    }
     if (requestedModel && typeof requestedModel === "string") {
       const { tryResolveModel, getKnownProviderNames } = await import("../providers/router.js");
       if (!tryResolveModel(requestedModel)) {
@@ -3335,6 +3488,7 @@ data: ${JSON.stringify(structured)}
   app.use("/api", createLifecycleRouter());
   app.use("/api", createSocialRouter());
   app.use("/api", createWatchRouter());
+  app.use("/api", createStudioRouter());
   app.use("/api/files", createFilesRouter());
   app.use("/api", createSystemRouter());
   app.use("/api", createVoiceRouter(
@@ -3361,6 +3515,44 @@ data: ${JSON.stringify(structured)}
       res.status(500).json({ error: "Widget gallery unavailable" });
     }
   });
+  app.post("/api/widget/assist", async (req, res) => {
+    try {
+      const source = String(req.body?.source ?? "");
+      const instruction = String(req.body?.instruction ?? "").trim();
+      const format = String(req.body?.format ?? "react");
+      const name = String(req.body?.name ?? "widget").slice(0, 80);
+      if (instruction.length < 2) {
+        res.status(400).json({ error: "instruction_required", message: "Describe the change you want." });
+        return;
+      }
+      const { spawnSubAgent } = await import("../agent/subAgent.js");
+      const prompt = [
+        `You are an expert front-end engineer helping a NON-CODER edit a canvas widget by describing changes in plain English. They will NOT touch the code themselves.`,
+        `Widget name: "${name}". Source format: ${format}.`,
+        ``,
+        `CURRENT SOURCE:`,
+        "```",
+        source.slice(0, 12e3),
+        "```",
+        ``,
+        `THE USER WANTS: ${instruction}`,
+        ``,
+        `Return ONLY the COMPLETE updated ${format} source \u2014 the full file, ready to render. No markdown fences, no commentary, no explanation. Keep it ONE self-contained widget. Preserve everything that already works and change only what the request implies. For a react widget, keep the component named "Widget" and the \`titan\` prop contract if present. If the request is ambiguous, make the most reasonable interpretation.`
+      ].join("\n");
+      const result = await spawnSubAgent({ name: "widget-assist", task: prompt, tier: "fast", maxRounds: 1 });
+      let out = (result.content || "").trim();
+      const fence = out.match(/^```[a-zA-Z]*\s*\n([\s\S]*?)\n```\s*$/);
+      if (fence) out = fence[1].trim();
+      if (!out) {
+        res.status(502).json({ error: "empty_result", message: "The AI returned nothing \u2014 try rephrasing." });
+        return;
+      }
+      res.json({ source: out });
+    } catch (err) {
+      logger.error(COMPONENT, `widget assist error: ${err.message}`);
+      res.status(500).json({ error: "widget_assist_failed", message: err.message });
+    }
+  });
   app.get("/api/graphiti", async (_req, res) => {
     try {
       const { getGraphData, getGraphStats: getGraphStats2 } = await import("../memory/graph.js");
@@ -3587,23 +3779,39 @@ data: ${JSON.stringify(structured)}
   }
   const messengerAdapter = channels.get("messenger");
   if (messengerAdapter) {
-    app.get("/api/messenger/webhook", (req, res) => {
-      const result = messengerAdapter.handleVerify(req.query);
-      res.status(result.status).send(result.body);
+    const messengerJson = express.json({
+      verify: (req, _res, buf) => {
+        req.rawBody = buf;
+      }
     });
-    app.post("/api/messenger/webhook", express.json(), (req, res) => {
+    const checkMessengerSignature = (req) => {
+      const raw = req.rawBody ?? Buffer.from(JSON.stringify(req.body ?? {}));
+      const result = messengerAdapter.verifySignature(raw, req.get("x-hub-signature-256") || void 0);
+      if (result.reason === "no-secret") {
+        logger.warn(COMPONENT, "Messenger FB_APP_SECRET not configured \u2014 webhook signature check SKIPPED (set FB_APP_SECRET to lock down)");
+      }
+      return result.ok;
+    };
+    const handleMessengerPost = (req, res) => {
+      if (!checkMessengerSignature(req)) {
+        logger.warn(COMPONENT, "Messenger webhook: invalid/missing X-Hub-Signature-256 \u2014 rejected (403)");
+        res.status(403).send("forbidden");
+        return;
+      }
       messengerAdapter.handleWebhook(req.body);
       res.sendStatus(200);
+    };
+    app.get("/api/messenger/webhook", (req, res) => {
+      const result = messengerAdapter.handleVerify(req.query);
+      res.status(result.status).send(result.body);
     });
+    app.post("/api/messenger/webhook", messengerJson, handleMessengerPost);
     app.get("/messenger/webhook", (req, res) => {
       const result = messengerAdapter.handleVerify(req.query);
       res.status(result.status).send(result.body);
     });
-    app.post("/messenger/webhook", express.json(), (req, res) => {
-      messengerAdapter.handleWebhook(req.body);
-      res.sendStatus(200);
-    });
-    logger.info(COMPONENT, `Messenger webhook: /api/messenger/webhook + /messenger/webhook (verify token: ${messengerAdapter.getVerifyToken()})`);
+    app.post("/messenger/webhook", messengerJson, handleMessengerPost);
+    logger.info(COMPONENT, `Messenger webhook: /api/messenger/webhook + /messenger/webhook (verify token: ${messengerAdapter.getVerifyToken()}, signature enforcement: ${messengerAdapter.hasAppSecret() ? "ON" : "OFF \u2014 set FB_APP_SECRET"})`);
   }
   const lineAdapter = channels.get("line");
   if (lineAdapter) {