Extract live prompt surfaces

notes/fresh-workspace-handoff.md

@@ -145,6 +145,7 @@ Git history and smoke artifacts carry routine proof. `state/evidence.jsonl` shou
 
 - Do not restart the swarm by momentum. The first teardown cut has landed: `state/agent-swarm-paused.json` gates swarm organs, active child-facing prompt/provider framing says Face turn instead of heartbeat, `sanitizeRepoIdentityPostContent` is gone, and public/work output now passes through a Spark/Codex parent reviewer with one retry before routing or dropping.
 - Direct Face `UPDATE REQUEST` dispatch no longer enqueues Bifrost agent transport. Legacy `UPDATE REQUEST` blocks are reconciled into Bifrost topics so governance remains inspectable.
+- Live model-facing prompt prose has started moving out of executable code. The shared loader is `packages/shared/src/prompt-template.ts`; extracted prompt surfaces live under `prompts/`, including repo Face turn/reviewer prompts, provider wrapper prompts, situational social read prompts, source-grounding reminders, consensus-feed prompts, and repo Face model-smoke scenarios. Code should project data and select prompt names; prompt files should own behavioral prose.
 - Identity collapse has started. Active bot, worker, MCP repo-identity tools, and Face CTB scheduler paths now load through the canonical Face registry and treat repo Discord identities as compatibility projections. Next bounded move is to finish removing remaining direct conceptual dependence on repo identities, then split the Face turn loop into scheduler, context assembler, prompt renderer, candidate parser, policy gate, and transport router.
 - After those gates exist, run dry/mock Face turns before re-enabling `GameCult Local Orchestrator`.
 - The direct-ask receipt check remains important, but it is no longer the next move while the swarm is offline.

notes/voidbot-current-system-map.md

@@ -53,13 +53,13 @@ This note is the source-grounded description of how the live VoidBot stack is sh
 - `packages/providers/src/owner-codex-runtime.ts`
   - Codex process execution, stdout/stderr parsing, trace-event normalization, history-tool loop requests, and owner-DM intent parsing.
 - `packages/providers/src/owner-codex-render.ts`
-  - prompt assembly, bundle rendering, and trace/debug transcript rendering for the owner lane.
+  - prompt data projection, bundle rendering, and trace/debug transcript rendering for the owner lane. Behavioral prompt prose is loaded from `prompts/`.
 - `packages/providers/src/owner-codex-shared.ts`
   - owner-lane constants, shared types, request-payload shaping, trace formatting helpers, and interaction-memory rendering.
 - `packages/providers/src/local-llm-provider.ts`
   - thin orchestration shell for the Ollama chat lane plus the bounded host-managed read-only tool loop.
 - `packages/providers/src/local-llm-render.ts`
-  - local-lane prompt assembly, interaction-memory rendering, source-grounding reminders, and artifact rendering.
+  - local-lane prompt data projection, interaction-memory rendering, source-grounding reminders, and artifact rendering. Behavioral prompt prose is loaded from `prompts/`.
 - `packages/providers/src/local-llm-tools.ts`
   - local-lane tool definitions, assistant-message normalization, tool argument parsing, and toolbox execution helpers.
 - `packages/providers/src/local-llm-shared.ts`

notes/voidbot-implementation-plan.md

@@ -218,6 +218,7 @@ First cuts:
 - Landed: add a repo-controlled pause gate that swarm organs obey even when the Windows scheduled task or manual runner is invoked.
 - Landed: rename child-facing `heartbeat` framing to neutral turn/pass language so runtime provenance stops poisoning public speech.
 - Landed: add parent-side public speech/work eligibility before transport as a Spark/Codex reviewer pass with one retry. The reviewer gives concrete reasons; the Face gets one revision; the parent routes or drops the final output.
+- Landed: extract the live prompt surfaces from executable code into `prompts/` and render them through a small shared prompt-template loader. Runtime code should own data projection, parsing, and side effects; prompt files own behavior prose.
 - Landed: delete `sanitizeRepoIdentityPostContent`. Language policing belongs to the reviewer pass, not a brittle regex broom.
 - Landed: route legacy `UPDATE REQUEST` packets into Bifrost topics instead of immediate Bifrost agent transport enqueue.
 - In progress: collapse repo Discord identity and Epiphany Face identity into one canonical Face identity model. Active bot, worker, MCP repo-identity tools, and Face CTB scheduler paths now load through a canonical Face registry and use repo Discord identities as compatibility projections.