VoidBot/notes/voidbot-current-system-map.md

VoidBot Current System Map

This note is the source-grounded description of how the live VoidBot stack is shaped right now. It is not a prose replacement for the code, and it is not a second canonical map. Its job is to explain the major organs and their data flow in plain language with concrete path anchors.

Main Organs

• apps/bot/src/discord-bot.ts
  • Discord gateway shell: client bootstrap, provider wiring, event registration, and top-level orchestration.
• apps/bot/src/discord-bot-handlers.ts
  • Prompt/command handling, provider dispatch, rate-limit gating, job approval/rejection, reindexing, and slash-command registration helpers.
• apps/bot/src/discord-bot-support.ts
  • Discord-shape adapters, archive/source conversion helpers, ambient-memory ingestion helpers, source-grounding hint logic, and bot-side message formatting/rendering helpers.
• apps/worker/src/index.ts
  • owner-job poller, provider execution, handoff packaging, and MCP wiring for the worker-side lane.
• apps/worker/src/mcp-server.ts
  • thin stdio entrypoint that boots the MCP context and registers the resource/tool surfaces.
• apps/worker/src/mcp-server-context.ts
  • workspace bootstrap, config loading, archive/vector wiring, retrieval-service creation, and source-context ingester setup for the MCP lane.
• apps/worker/src/mcp-server-resources.ts
  • MCP resource registration for indexed repos plus history/source semantic-search resource templates.
• apps/worker/src/mcp-server-tools.ts
  • MCP tool registration for archived history search, indexed source/lore search, context windows, repo listing, registered repo-identity Discord speech, and owner notifications.
• apps/worker/src/mcp-server-shared.ts
  • MCP input schemas, argument types, and shared result-formatting/resource helper functions.
• apps/worker/src/mcp-server-discord.ts
  • Discord DM-channel creation and message-post helpers for notify_owner.
• packages/core/src/state-storage.ts
  • Thin state-storage factory that chooses file or Postgres backends and wires the domain stores together.
• packages/core/src/state-storage-postgres-bootstrap.ts
  • Postgres schema bootstrap plus one-time legacy file-state import.
• packages/core/src/state-storage-postgres-job-queue.ts
  • Postgres-backed job queue plus job row persistence helpers.
• packages/core/src/state-storage-postgres-audit-log.ts
  • Postgres-backed audit log plus audit-event upsert helper.
• packages/core/src/state-storage-postgres-interaction-memory.ts
  • Postgres-backed interaction-memory event storage and profile reconstruction.
• packages/core/src/state-storage-rate-limit-stores.ts
  • File and Postgres implementations for Void usage rate-limit state.
• packages/core/src/interaction-memory-analysis.ts
  • Event construction, tone/tag analysis, repetition detection, and persistence gating for remembered interactions.
• packages/core/src/interaction-memory-profile.ts
  • Profile synthesis, disposition, psychological read, inferred traits, interaction dimensions, and response-guidance construction.
• packages/core/src/context-builder.ts
  • request context assembly, including interaction-memory/profile attachment, shared Void self-state projection, and any precomputed situational social read.
• packages/core/src/void-self-state-loader.ts
  • thin typed .cc self-state loader that delegates read-side rendering to the projection module.
• packages/core/src/void-self-state-projection.ts
  • read-side projection authority for typed self-state: renders the agent-facing summary and compact nap/reply-mode projection from typed documents without touching legacy state.
• packages/core/src/situational-social-read.ts
  • quick Ollama sidecar inferer for ephemeral room-reading scaffolding built from the current prompt, recent room transcript, and longer-horizon interaction memory.
• packages/providers/src/owner-codex-provider.ts
  • thin orchestration layer for the Discord-safe codex exec lane.
• packages/providers/src/owner-codex-runtime.ts
  • Codex process execution, stdout/stderr parsing, trace-event normalization, history-tool loop requests, and owner-DM intent parsing.
• packages/providers/src/owner-codex-render.ts
  • prompt data projection, bundle rendering, and trace/debug transcript rendering for the owner lane. Behavioral prompt prose is loaded from prompts/.
• packages/providers/src/owner-codex-shared.ts
  • owner-lane constants, shared types, request-payload shaping, trace formatting helpers, and interaction-memory rendering.
• packages/providers/src/local-llm-provider.ts
  • thin orchestration shell for the Ollama chat lane plus the bounded host-managed read-only tool loop.
• packages/providers/src/local-llm-render.ts
  • local-lane prompt data projection, interaction-memory rendering, source-grounding reminders, and artifact rendering. Behavioral prompt prose is loaded from prompts/.
• packages/providers/src/local-llm-tools.ts
  • local-lane tool definitions, assistant-message normalization, tool argument parsing, and toolbox execution helpers.
• packages/providers/src/local-llm-shared.ts
  • local-lane constants, shared request/response/tool types, and low-level text/metadata helpers.
• packages/rag/src/retrieval-service.ts
  • high-level history/source retrieval API used by bot, worker, and provider tool loops.
• packages/rag/src/qdrant-vector-store.ts
  • Qdrant vector persistence for history and source collections.
• packages/rag/src/message-archive.ts
  • archived Discord message store under .voidbot/rag/messages.json, including bot-directed prompts that stay preserved for forensics even when they are excluded from default history retrieval.
• packages/rag/src/source-document-archive.ts
  • archived source/lore document manifest under .voidbot/rag/source-documents.json plus per-repo shards under .voidbot/rag/source-documents.repos/.

Flow 1: Discord Request To Provider

1. apps/bot/src/discord-bot.ts receives a slash command or mention-driven request and delegates prompt/command work into apps/bot/src/discord-bot-handlers.ts.
2. Permission checks run through packages/core/src/permission-engine.ts.
3. Void usage limits are applied through packages/core/src/void-usage-rate-limiter.ts backed by packages/core/src/state-storage.ts.
4. apps/bot/src/discord-bot-support.ts adapts Discord message/interaction shapes, ambient-memory events, and source-grounding hints.
5. packages/core/src/interaction-memory-analysis.ts turns direct prompts or ambient mentions into normalized remembered events; packages/core/src/interaction-memory-profile.ts distills remembered events into a reusable longer-horizon social read.
6. apps/bot/src/discord-bot-handlers.ts usually runs a quick think=false local Ollama sidecar pass over the prompt and recent room transcript to infer an ephemeral situational social read, then records that read as an audit event for later aggregation. If the shared self-state says Void is napping, the handler skips that extra room-read pass and keeps the request deliberately cheap.
7. packages/core/src/context-builder.ts assembles request context, including recent interaction profile, the situational social read, the shared Void self-state projection, and any retrieval hints.
8. Provider selection goes through packages/providers/src/index.ts, but the handler can downshift owner traffic into the cheaper local lane when the shared self-state says Void is napping.
9. The bot either:
   • answers directly through local_llm, or
   • queues an owner job for the worker / owner_codex path.

Flow 2: Owner Job Execution

1. apps/worker/src/index.ts polls approved jobs from durable state.
2. The worker claims a job and dispatches it to the configured provider.
3. packages/providers/src/owner-codex-provider.ts runs codex exec in the bounded lane, exposes the VoidBot MCP server, records traces, and carries advisory source-grounding hints plus retrieval tools for repo/lore/project questions. Runtime and parsing live in packages/providers/src/owner-codex-runtime.ts; prompt and artifact rendering live in packages/providers/src/owner-codex-render.ts.
4. If the answer fits the Discord-safe lane, the worker posts it back.
5. If the task needs deeper work, the worker writes a handoff bundle under .voidbot/artifacts/<job-id>/ and posts the handoff response.

Flow 3: Retrieval And Indexing

1. packages/rag/src/message-archive.ts and packages/rag/src/source-document-archive.ts keep the raw corpora.
2. Bot-directed prompts are tagged at ingest, kept in the raw Discord archive, and deliberately skipped when the history ingester builds semantic chunks so repeated summons stop poisoning normal retrieval.
3. packages/rag/src/retrieval-service.ts translates history/source queries into vector lookups plus metadata filters.
4. packages/rag/src/qdrant-vector-store.ts executes the live vector lookups against separate history and source collections.
5. scripts/reconcile-source-repos.ts discovers local Git repos, refreshes push hooks, prunes stale repo shards, and indexes newly discovered repos.
6. scripts/index-source-repos.ts and scripts/git-post-push-index.mjs drive explicit or detached per-repo source/lore reindex work.
7. apps/worker/src/mcp-server.ts boots the MCP lane, while mcp-server-resources.ts and mcp-server-tools.ts expose retrieval to Codex and other sessions through search_history, get_message_context, search_sources, get_source_context, and list_indexed_repos.

Flow 4: Ops And Recovery

• scripts/start-voidbot-stack.ps1
  • stack bootstrap, health checks, fresh build, stale-process cleanup, source-repo reconcile, bot/worker restart, runtime status emission.
  • It now also ensures the local Bifrost Docker Compose stack is healthy through BIFROST_ROOT and BIFROST_HEALTH_URL, because VoidBot's repo Face proposal/article/comment and Discord persona crossing paths call Bifrost bridge/intake tooling.
• scripts/install-stack-startup-task.ps1
  • installs the hidden logon task that runs start-voidbot-stack.ps1 automatically after reboot or sign-in.
• scripts/check-voidbot-operations.ps1
  • watchdog for process liveness, Qdrant, Postgres, Ollama, source-repo reconcile drift, Discord auth, backup freshness, offsite sync freshness, and optional ignored local extension checks.
• scripts/run-void-moderator-rumination.ps1
  • typed rumination runner. It builds a bounded context packet from .voidbot/private/void-self-state.cc, recent Discord chronology, and read-only repo activity; loads prompts/void-moderator-rumination.md; runs bounded Codex rumination; applies returned typed operations through scripts/void-self-state.mjs; then records parent-owned cursor and speech receipts. After parent-owned candidate delivery, it verifies the receipt is linked to the candidate and the candidate is marked spoken.
• scripts/lib/void-rumination-context-projection.ps1
  • rumination context projector. It turns typed timestamps and helper payloads into prompt-facing relative phrases while leaving exact chronology in parent-owned typed state, status, and cursor bookkeeping.
• scripts/void-self-state.mjs
  • typed self-state operation CLI. It applies strict operation payloads such as cursor updates, open-case changes, delivery receipts, repo cursor updates, short-term memory records, sleep-owned distillations, durable-memory revisions/retirements/crystallizations, incubation merges, agency pressure, candidate interventions, sleep-cycle updates, and speaking-pressure updates through packages/core/src/void-self-state-service.ts against the CultCache .cc store.
• scripts/run-void-memory-maintenance.ps1
  • typed memory-maintenance runner. It builds a bounded prompt-facing context from typed short-term memories, durable memories, incubation, candidates, receipts, and scheduled runtime; loads prompts/void-memory-maintenance.md; asks Codex for bounded memory/incubation/candidate operation proposals; then applies only allowed typed operations through scripts/void-self-state.mjs. It accepts -StateFilePath so fixture passes can use a throwaway .cc store.
  • Both rumination runners use process-aware locks. Live locks inside the runtime window skip; dead locks can be reclaimed; live over-runtime locks fail closed instead of allowing overlapping mutation. Each runner writes starting status immediately after claiming its own lock.
• scripts/smoke-void-memory-maintenance-sleep-fixture.ps1
  • sleep-maintenance fixture. It seeds a temporary CultCache .cc store with a napping sleep cycle and one short-term memory, runs mood drift with a fake Codex child through the non-skip maintenance branch, and verifies the source short-term record is gone while one durable meaning-preserving memory remains.
• scripts/smoke-void-memory-lifecycle-fixture.ps1
  • memory-lifecycle fixture. It proves long-term memory is durable but plastic: a short-term memory promotes into durable memory, later revision retires the superseded durable record, and crystallization produces one active identity memory plus a self-profile value.
• scripts/smoke-void-short-term-clustering-fixture.ps1
  • short-term clustering fixture. It proves repeated same-target/topic rumination proposals fold into one provisional memory with merged anchors, while a different topic in the same repo stays separate.
• scripts/smoke-void-agency-pressure-fixture.ps1
  • agency-pressure fixture. It seeds one typed self-advocacy pressure, verifies it appears in the rendered self-state summary, then runs mood drift against an isolated fixture state to prove agency pressure contributes to speaking pressure without creating a hard-wired speech candidate.
• scripts/smoke-void-rumination-fixture.ps1
  • rumination fixture. It seeds an isolated CultCache .cc state, routes the non-skip rumination runner through a fake Codex child, and verifies short-term memory, incubation, agency pressure, and candidate intervention proposals are applied by the parent runner while the prompt-facing context keeps exact timestamps out.
• scripts/smoke-void-rumination-speech-fixture.ps1
  • parent-owned speech fixture. It queues one deliverable candidate through fake Codex, routes delivery through a fake Discord sender, then verifies the parent runner writes a delivery receipt and marks the candidate spoken through typed state.
• scripts/smoke-void-rumination-nap-skip-fixture.ps1
  • nap-skip fixture. It seeds a napping typed state with no room debt, points CODEX_EXECUTABLE at a bogus command, then verifies the runner exits with napping_without_room_debt and writes no operation proposals before invoking the model.
• scripts/install-moderation-rumination-task.ps1
  • legacy installer for isolating the moderation/participation loop. The live scheduled pulse is now GameCult Local Orchestrator; keep this per-organ task disabled unless testing the organ in isolation.
• scripts/run-gamecult-orchestrator.ps1
  • local pulse owner for agent transport/runtime chores. It runs Bifrost dispatch, repo Face CTB heartbeats, Void mood drift, Void moderation rumination, and the operations watchdog from one hidden scheduled task with one lock, per-organ status/log files, and per-organ timeouts.
• scripts/install-gamecult-orchestrator-task.ps1
  • installs scheduled task GameCult Local Orchestrator through the hidden PowerShell launcher and can disable the old per-organ tasks: Bifrost Agent Dispatch, VoidBot Repo Face Heartbeats, Void Mood Drift, Void Moderator Rumination, and VoidBot Operations Watchdog.
• Scheduled organ Void Mood Drift
  • typed mood/sleep runner invoked by the orchestrator. It calls scripts/simulate-void-mood.mjs; when the typed sleep cycle is napping, that path invokes memory maintenance once per nap.
• Scheduled organ Void Moderator Rumination
  • typed-only moderation/participation runner invoked by the orchestrator; it has model-branch plus parent-owned speech fixtures.
• Live sleep maintenance
  • passed once on real state after a manual typed nap. The maintenance runner consumed the scheduled rumination short-term memory with one apply_memory_distillation operation, leaving short-term memory empty and preserving one durable identity seam with target, claim, tension, action implication, and anchors.
• Sleep brake
  • scheduled rumination skips during naps when there are no new room messages and no open cases, so sleep can distill the short-term surface without awake rumination immediately adding fresh residue.
• scripts/simulate-void-mood.mjs
  • typed mood maintenance script that updates scheduled-runtime sleep cycle and speaking pressure in .voidbot/private/void-self-state.cc. It owns the sleep transition and invokes typed memory maintenance once per nap unless that nap already completed a maintenance pass. Speaking pressure now derives from queued candidates, incubation, and active typed agency pressure. The old personality-vector drift, memory organ, incubation, dream residue, cleanup, and legacy mirror behavior are offline pending typed replacements.
• Repo Discord identities
  • REPO_DISCORD_IDENTITIES_PATH points at a private JSON registry of repo id, repo name, display name, optional avatar URL, optional role id, and allowed channel ids. The role is the Discord mention target; the webhook persona is the speech transport.
  • That registry may also carry channelPermissions: per-topic channel entries with a speech threshold and speed multiplier. These are not another transport; they are the permission/salience map for where a Face may speak. Aquarium is the low-threshold musing lane, while domain channels such as narrative, gamedesign, music, soundtrack, development, programming, visual-effects, machine-learning, and unity3d are available to matching Faces.
  • Void remains the room-wide moderation/participation agent. Repo Faces are the swarm mouth and should be confined to text #aquarium (1501196543150264332) through registry allow-lists and REPO_FACE_HEARTBEAT_DEFAULT_CHANNEL_ID; general is 113786069023064068 and should not be used for autonomous Face chatter.
  • On startup, the bot tries to find or create missing mentionable roles for registered identities in DISCORD_GUILD_ID, then writes the role ids back to the private registry. If Discord permissions are missing, it warns and leaves the registry unchanged.
  • list_repo_discord_identities exposes the registered address book to Codex agents, and post_repo_identity_message enforces identity/channel registration before posting through the shared webhook pipe.
  • Each repo identity has a Face state path, defaulting to .voidbot/private/repo-faces/<identity>.cc. read_repo_face_state renders that typed state, and apply_repo_face_state_operation applies the same typed operation contract used by Void against that Face's own file.
  • The typed Face state now includes void.face_affect: needs, social bonds, status reads, and mood dimensions. This is the state-owned home for substrate concern, attention hunger, recognition needs, territoriality, friendships, rivalries, envy, pride, irritation, pampering, neglect, bypasses, and consultation politics. Affect is projected into heartbeat prompts and repo Face speaking pressure; concrete requests still become agency pressure, candidates, Bifrost topics, or work dispatch.
  • get_voidbot_runtime_info exposes the running MCP process id, workspace, self-state schema fingerprint, and registered document types so stale mounted MCP processes can be detected before a state read. scripts/smoke-repo-face-affect-mcp-fixture.mjs is the public-surface guard for that document kind. It starts apps/worker/dist/mcp-server.js, checks the runtime fingerprint, calls read_repo_face_state, and verifies typedState.faceAffect comes back with needs, social bonds, status reads, and mood dimensions arrays. This catches stale or incomplete MCP registration even when the direct state service can read the .cc file.
  • Repo Face prompts now carry an explicit identity doctrine block. Void's style pack contributes discipline, humor permission, and source-grounding habits, but the registered Face state, repo-local .voidbot home, avatar, and identity description override the speaking subject so a Face does not collapse back into base Void. ensureRepoFaceInitialized also repairs the typed selfProfile inside the Face .cc file, and repo Face MCP state reads/writes pass identity defaults into the state service, so raw state and rendered state agree.
  • Repo Faces are allowed to build a long-running map of their repo and propose concrete changes, including lore/design repairs. Discord jobs remain read-only: a Face must ask for human consensus before implementation changes canonical repo material. Once a proposal is concrete enough to review, it should cross the parent-owned proposal PR rail so GitHub becomes the durable argument surface. If a Face state grants a bylined essay lane, authored opinion essays can carry that Face's own vision without canon consensus as long as the authorship is explicit.
  • On first role-addressed chat, ensureRepoFaceInitialized creates the target repo's local .voidbot/voice, .voidbot/state, .voidbot/birth, and .voidbot/logs folders, writes voice/identity.json, and launches scripts/run-repo-face-birth.mjs detached if no birth summary is already present.
  • scripts/run-repo-face-birth.mjs is the observable bridge into EpiphanyAgent's newborn path. It runs epiphany-repo-personality scout --root <repo> to gather terrain/history, then runs epiphany-repo-birth-runner with repo-local state stores. The default mode is plan, so first chat creates reviewable birth artifacts without auto-accepting hidden personality mutations.
  • Role mentions, display-name-prefix mentions, and human replies to a Face's webhook/persona message append pending Face obligations to pendingMentions in REPO_FACE_HEARTBEAT_STATE_PATH; ordinary bot mentions and DMs append pending obligations for the built-in void participant. They no longer create direct provider jobs from MessageCreate. The CTB scheduler temporarily prioritizes agents with pending mentions, attaches those prompts plus reply targets to the next repo-face-rumination or Void moderation pass, and consumes the pending items only after a turn is actually queued. Rumination jobs remain private unless they explicitly emit a parent-owned Face action block or a typed candidate intervention; the worker must never auto-post their summaries as the base bot. Heartbeat prompts now include the channel permission plan, recent context from non-primary permitted channels, social embodiment, jurisdiction respect, comedy/improv doctrine, and anti-template sampling guidance so a Face can jump into domain chatter, form durable social reads, consult the right steward, and answer people without copying nearby note formulas.
  • Repo Face proposal/article PRs, PR comments, and registered-identity Discord posts now cross through Bifrost bridge commands. The child may emit VOIDBOT_REPO_IDENTITY_PROPOSAL_PR for consensus-needed repo/lore/design proposals, VOIDBOT_REPO_IDENTITY_ARTICLE for bylined essays, or VOIDBOT_REPO_IDENTITY_PR_COMMENT for signed arguments on existing proposal PRs. The worker validates the registered identity and records Face-local receipts, but BIFROST_ROOT/tools/bifrost-bridge.mjs owns draft PR creation, PR comments, and Discord persona posting. This is not merely helper placement: Bifrost's original governance/labor platform role makes it the owner of governed public crossings for GameCult work, including GitHub, Discord-native work/member/swarm interactions, dispatch receipts, CultNet/CultCache intake, and future collaboration interfaces. Heimdall is the OAuth/account/capability gate; Bifrost is the bridge/request/routing/receipt authority. VoidBot still owns room cognition, moderation judgment, archive/source retrieval, and Face personality; Bifrost owns Discord when Discord acts as the Labor Platform interface or swarm transport. If Nibu or another Face frames something as the next cut/pass and enough source or room material exists, the expected action is to draft the artifact, submit the PR, and announce it rather than continuing to nag the room.
  • Repo Face turns now receive a Bifrost governance digest from BIFROST_ROOT/tools/governance-threads.mjs digest --repo <repo> --agent <identity> alongside recent Discord context. Bifrost typed CultCache topics/comments are the canonical home for feature requests, Face opinions, missing questions, approvals, and dispatch receipts; Discord is a mirror/evidence source. When BIFROST_DISCORD_CHANNEL_ID is configured for #bifrost, repo Face Discord context ignores mirrored bot chatter there because the authoritative activity arrives through the Bifrost digest. Human #bifrost messages should only become governance comments after Bifrost/Heimdall can link the Discord id to a registered actor. Repo-local asks that would send a human or Codex to add/fix/name/scaffold/document/test/investigate/implement belong on Bifrost with enough room/repo context for a claimed Codex turn; a Face may still speak characterfully in Aquarium, but not as the only dispatch surface. Legacy UPDATE REQUEST packets are parsed only as compatibility input and reconciled into Bifrost topics instead of immediate transport enqueue. Local #bifrost is channel 1506760343836430376; work proposals, governance mirrors, and Bifrost dispatch receipts should go there, while Aquarium remains the casual/social swarm room.
  • Repo Face turns now use a two-stage output contract. The child Face writes a natural in-character turn and may describe desired speech, Bifrost work, GitHub/article proposals, or private state pressure without emitting action DSL blocks. The Spark/Codex parent Interpreter is the adapter that decides route/retry/drop and translates warranted side effects into structured SAY and BIFROST TOPIC blocks for the worker. The worker still accepts legacy VOIDBOT_REPO_IDENTITY_* compact JSON sentinels and legacy UPDATE REQUEST blocks for compatibility, but the live prompt path keeps transport syntax out of the Face's roleplay surface. Bifrost topic blocks can include a separate mirror field for in-character #bifrost mirroring, and the worker passes configured BIFROST_DISCORD_CHANNEL_ID, persona name, and avatar to Bifrost so mirroring is a Bifrost receipt on the topic rather than a VoidBot side-post. The intended path is topic/comment/Face approval first; immediate direct dispatch is no longer a Face output rail.
• scripts/run-repo-face-heartbeats.ts now acts as the broader agent CTB/Final-Fantasy-X-style initiative scheduler. The wall-clock task is only a pulse; virtual initiative time chooses who gets the next turn. The scheduler stores per-agent speed, reaction bias, load, groups, heat, effective speed, next-turn time, active turn markers, and recent queue history at REPO_FACE_HEARTBEAT_STATE_PATH. Repo Faces queue repo-face-rumination owner-Codex jobs; built-in Void currently participates as the void system agent and starts the existing moderation rumination runner as its turn. Initiative freezes while an owner-Codex job or Void moderation lock is active; recovery is scheduled only after that active turn completes, and completion cannot grant another turn in the same scheduler pulse. The active-job scan recovers stale Face jobs by marking ancient approved/running rows failed through the job queue before building the active-turn map. Above-baseline heat bypasses repo Face nap gating, while active-turn freeze still prevents overlapping thoughts.
  • The live wall-clock pulse for this scheduler is scripts/run-gamecult-orchestrator.ps1, installed as GameCult Local Orchestrator. scripts/install-repo-face-heartbeat-task.ps1 remains available for isolated testing, but its per-organ scheduled task should stay disabled in normal operation. Turn frequency is controlled by REPO_FACE_HEARTBEAT_BASE_RECOVERY_MINUTES, REPO_FACE_HEARTBEAT_GLOBAL_HEAT, REPO_FACE_HEARTBEAT_SPEED_OVERRIDES, and REPO_FACE_HEARTBEAT_HEAT_OVERRIDES. Heat keys can target all, kind:<participantKind>, turn:<turnKind>, identity:<id>, repo:<repo>, display:<name>, channel:<id>, or the bare identity/repo/display key.
  • The local ignored registry currently includes Nibu for AetheriaLore, with Face state in E:/Projects/AetheriaLore/.voidbot/state/nibu.cc, Discord role id 1505918221453103247, and an Aquarium channel allow-list. Nibu's Face state now treats AetheriaLore-first map-building, abrasive character voice, consensus-backed change agency, her own Aetheria/Lore/Nibu.md character-note stewardship, Nibu-authored lore essays, and tangential setting fascination as separate active doctrines. That tangential fascination points at embodied ship minds, junkyard abandonment, murderous autonomy, salvage, and save-scumming survival. The repo Face heartbeat organ is now pulsed by GameCult Local Orchestrator; after restarting the stack onto the new worker code, forced heartbeat job 76020f1e-0c55-424b-9e35-89ba7f77fcc3 completed without base-bot auto-posting.
  • The local ignored registry now also includes Epiphany for EpiphanyAgent, with Face state in E:/Projects/EpiphanyAgent/.voidbot/state/epiphany.cc, Discord role id 1506375937439301642, and Aquarium channel allow-list 1501196543150264332. Her repo-local .voidbot birth surface has completed in plan/review mode; the generated EpiphanyAgent startup packets still require Self review before accepted native birth mutations. Her jurisdiction is the self-improvement spine: typed state, CultCache/CultNet, Codex bridge boundaries, birth/init rites, low-copy runtime contracts, review gates, graph-shaped memory, heartbeat physiology, and deletion of duplicated authority.
• scripts/run-void-mood-drift.ps1
  • hidden-task wrapper for the mood-drift organ; writes status/log pulse files and respects the moderation lock so the two state writers do not stomp each other for sport.
• scripts/install-void-mood-drift-task.ps1
  • installs the local 5-minute scheduled task that keeps the shared self-state emotionally non-flat between moderation passes.
• scripts/export-random-discord-history.mjs
  • plain Node helper for novelty excursions that samples one random archived Discord seam, returns a local context window around the anchor message, and skips bot-directed prompt rows by default.
• scripts/feed-codex-chat-consensus.mjs
  • plain Node helper that turns recent archived Discord messages, defaulting to text #aquarium, into a markdown consensus packet plus a target Codex prompt. By default it writes files under .voidbot/artifacts/chat-consensus/; with --execute, it feeds the generated prompt to codex exec in the requested workspace. With --enqueue-bifrost, it also calls E:/Projects/Bifrost/tools/agent-transport.mjs enqueue so the packet becomes a CultCache-backed Bifrost intake request for the target repo Face instead of remaining an inert local artifact.
• scripts/backup-voidbot-state.ps1
  • local backup of Postgres, Qdrant snapshots, and RAG archives.
• scripts/restore-voidbot-state.ps1
  • local restore path.
• scripts/sync-voidbot-backup-offsite.ps1
  • verified offsite backup sync to the Qwen box.
• scripts/voidbot-operations-dashboard-lib.ps1
  • dashboard rendering for the local ops surface.

When present, an ignored local script at .voidbot/private/check-voidbot-operations.local.ps1 can inject adjacent-service checks into the same ops lane. That keeps private infrastructure gossip out of tracked code while preserving one boring place for smoke alarms to land.

Storage Boundaries

• Postgres:
  • jobs
  • audit events
  • interaction-memory events
  • provider run records
  • usage rate-limit state
• Qdrant:
  • Discord history vectors
  • source/lore vectors
• .voidbot/:
  • archived raw corpora
  • source archive manifest plus per-repo source shards
  • job artifacts and traces
  • logs and status files
  • backups and snapshots

The important scar is that these stores are split on purpose. Do not casually weld them back into one convenient blob and act surprised when it becomes a moon.

Within the Postgres path, the implementation is split on purpose now too:

• state-storage.ts chooses the backend
• state-storage-postgres-bootstrap.ts handles schema/bootstrap/import work
• per-domain modules own queue, audit, interaction-memory, and rate-limit behavior

Flow 5: Scheduled Moderation Rumination

1. The Windows scheduled task GameCult Local Orchestrator is enabled, and it invokes the Void moderation rumination organ when that organ is due.
2. scripts/run-void-moderator-rumination.ps1 reads .voidbot/private/void-self-state.cc, polls node scripts/export-recent-discord-history.mjs, and gathers read-only repo activity with node scripts/export-recent-repo-activity.mjs --read-only.
3. The runner writes a bounded context packet at .voidbot/status/moderation-rumination-context.json; the prompt-facing packet projects recent timing as relative phrases instead of raw timestamps.
4. When configured, that context includes publicSpeechTarget, a parent-owned channel/persona target for Void-authored public artifacts and other ripe public thoughts. Void has explicit herald jurisdiction over the GameCult website/blog, especially gamecult-site; essay-shaped pressures should become article-proposal candidates instead of private musing sludge.
5. The runner loads prompts/void-moderator-rumination.md, substitutes the context/state/output paths, and sends that prompt to Codex.
6. Codex may use retrieval and analysis tools, but its durable state output is restricted to .voidbot/status/moderation-rumination-operations.json.
7. The parent runner applies those typed operations through scripts/void-self-state.mjs, then records reviewed-message cursor and, on successful normal posting-enabled passes, advances repo-activity cursors from the observed repo weather through typed update_repo_activity_cursor operations.
8. If posting is enabled and typed state contains a queued candidate intervention with a delivery target, the parent runner sends at most one candidate, records the delivery receipt, and marks the candidate spoken through typed state. The candidate may have been proposed in the current pass or already queued from an earlier pass. The child prompt forbids direct send-script calls.
9. Before that delivery step, the parent runner now retires queued candidates whose channelId + replyToMessageId already appear in canonical typed speech receipts, so a later pass cannot answer an already-answered direct question just because the same message is still visible or the seam still feels warm.
10. The runner writes .voidbot/status/moderation-rumination.json and .voidbot/logs/moderation-rumination.log.
11. It intentionally does not materialize .json, load .msgpack, read the legacy moderation monolith, or let the child edit state directly.
12. Before applying model output, the runner enforces speech-pressure accountability. Active self/world advocacy pressures at 0.55 intensity or higher with no matching live queued candidate are projected as speechPressureObligations; model output must queue a candidate or cool/retire the pressure instead of returning silent []. Deferred candidates do not satisfy that pressure by themselves, and an older spoken candidate does not keep satisfying a still-active pressure forever.

Flow 6: Mood And Sleep Runtime

1. The Windows scheduled task GameCult Local Orchestrator is enabled, and it invokes the Void mood drift organ when that organ is due.
2. scripts/simulate-void-mood.mjs reads typed documents from .voidbot/private/void-self-state.cc.
3. It updates void.scheduled_runtime.sleepCycle and void.scheduled_runtime.speakingPressure through update_sleep_cycle and update_speaking_pressure operations, with active advocacy pressure weighted strongly enough to raise speaking pressure earlier instead of staying a private sulk until the seam is already overripe.
4. It writes .voidbot/status/void-mood-drift.json.
5. When sleep is active, the script invokes scripts/run-void-memory-maintenance.ps1 once per nap to force typed distillation/pruning.
6. The old memory-organ script family, legacy state template, and legacy context exporter have been deleted.

Flow 7: Typed Memory Maintenance

1. scripts/run-void-memory-maintenance.ps1 is invoked by mood drift during sleep, and can also be run manually for fixtures.
2. It reads .voidbot/private/void-self-state.cc through the typed self-state service.
3. It writes .voidbot/status/void-memory-maintenance-context.json with prompt-facing relative chronology and only typed memory/incubation/agency/candidate surfaces.
4. It loads prompts/void-memory-maintenance.md and asks Codex for operation proposals unless -SkipModel is set.
5. The parent runner rejects any operation outside memory lifecycle, incubation, agency pressure, or candidate-intervention maintenance.
6. The parent runner applies allowed operations through scripts/void-self-state.mjs.
7. In sleep mode, the context carries sleepDirective.forceDistillation when there is short-term memory pressure. A real model pass that returns no operations under pressure fails visibly, and any real sleep pass that leaves short-term memory behind fails instead of letting yesterday's residue haunt the state. The fixture smoke exercises this path with a fake Codex child so the parent validation and application machinery are tested without relying on live inference.
8. This is the replacement path for sleep/distillation and agency work: model-owned proposals crossing the typed operation boundary, not deterministic repair code editing state.

Memory Lifecycle

1. Rumination may only write short-term memories. It cannot directly mutate durable memory.
2. The typed state service clusters repeated short-term memories before sleep sees them. If a new record repeats the same target/topic pressure, it updates one provisional memory and merges anchors instead of stacking another variant. This preserves deepening: fresh anchors and sharper tensions should accumulate inside the cluster, while unchanged paraphrases should not become separate memories.
3. Sleep maintenance promotes, merges, prunes, revises, retires, or crystallizes memory through typed operations.
4. Durable memory is not immutable. revise_durable_memory creates an explicit replacement and retires superseded source memories; retire_durable_memory marks obsolete memory inactive; crystallize_memory_into_identity promotes a stable thought into an identity_seam and may update self-profile values or private notes.
5. Prompt-facing language should talk about anchors: what made the thought real. The schema still accepts old evidenceRefs, but new memory payloads should prefer anchorRefs or explicit anchor:missing.

Agency Pressure

1. Rumination and memory maintenance may propose upsert_agency_pressure or retire_agency_pressure.
2. The typed service validates that each pressure has a concrete target, claim or question, action implication, intensity, and either anchors/source memory ids or an explicit anchor:missing tag.
3. The self-state summary renders active agency pressure separately from queued speech candidates.
4. Mood drift reads active and ready agency pressure into speaking pressure, but it does not manufacture speech text from it.
5. The rumination runner bridges desire-to-speak without manufacturing text: strong advocacy pressure becomes an obligation for the model to queue/defer a candidate or explicitly cool/retire the pressure. The parent rejects silent output for those obligations.