Watch

Meta Vens 3f87346dee Isolate portable Persona state compatibility

2026-07-16 03:00:58 +01:00

61 KiB

Raw Blame History

VoidBot Current System Map

This note is the source-grounded description of how the live VoidBot stack is shaped right now. It is not a prose replacement for the code, and it is not a second canonical map. Its job is to explain the major organs and their data flow in plain language with concrete path anchors.

Verse-facing service contract: docs/architecture/voidbot-verse-service-contract.md. VoidBot owns Discord cognition, r/GameCultOrg moderation judgment when Bifrost supplies Reddit threads/posts, repo Face Reddit thread intent packaging, archive/source retrieval, typed Void self-state, and repo Face compatibility rails. Huginn owns Persona/.cc runtime inspection stewardship. Bifrost owns governed work and Reddit transport. Odin discovers provider-owned CultMesh surfaces. Eve/CultUI is the presentation contract; browser HTML is only a lowering.

Deployment Authority

VoidBot runs on Yggdrasil. Idunn owns deployment and consumes upstream repository pushes. The supported deployment path is therefore upstream main -> Idunn release drift -> Yggdrasil; a local checkout is a development and diagnostic body only. Future agents must not search for, create, or revive a local VoidBot deployment. Idunn compares origin/main with the root-owned /srv/voidbot/deploy/deployment.env witness, builds an audited immutable release when they differ, atomically switches /srv/voidbot/app/current, and accepts success only after the service set is running and DEPLOYED_REVISION matches upstream.

Main Organs

apps/bot/src/discord-bot.ts
- Discord gateway shell: client bootstrap, provider wiring, event registration, and top-level orchestration.
apps/bot/src/discord-bot-handlers.ts
- Prompt/command handling, provider dispatch, rate-limit gating, job approval/rejection, reindexing, and slash-command registration helpers.
apps/bot/src/discord-bot-support.ts
- Discord-shape adapters, archive/source conversion helpers, ambient-memory ingestion helpers, source-grounding hint logic, and bot-side message formatting/rendering helpers.
apps/worker/src/index.ts
- owner-job poller, provider execution, handoff packaging, and MCP wiring for the worker-side lane.
apps/worker/src/mcp-server.ts
- thin stdio entrypoint that boots the MCP context and registers the resource/tool surfaces.
apps/worker/src/mcp-server-context.ts
- workspace bootstrap, config loading, archive/vector wiring, retrieval-service creation, and source-context ingester setup for the MCP lane.
apps/worker/src/mcp-server-resources.ts
- MCP resource registration for indexed repos plus history/source semantic-search resource templates.
apps/worker/src/mcp-server-tools.ts
- MCP tool registration for archived history search, indexed source/lore search, context windows, repo listing, registered repo-identity Discord speech, and owner notifications.
apps/worker/src/mcp-server-shared.ts
- MCP input schemas, argument types, and shared result-formatting/resource helper functions.
apps/worker/src/mcp-server-discord.ts
- Discord DM-channel creation and message-post helpers for notify_owner.
packages/core/src/state-storage.ts
- Thin state-storage factory that chooses file or Postgres backends and wires the domain stores together.
packages/core/src/state-storage-postgres-bootstrap.ts
- Postgres schema bootstrap plus one-time legacy file-state import.
packages/core/src/state-storage-postgres-job-queue.ts
- Postgres-backed job queue plus job row persistence helpers.
packages/core/src/state-storage-postgres-audit-log.ts
- Postgres-backed audit log plus audit-event upsert helper.
packages/core/src/state-storage-postgres-interaction-memory.ts
- Postgres-backed interaction-memory event storage and profile reconstruction.
packages/core/src/state-storage-rate-limit-stores.ts
- File and Postgres implementations for Void usage rate-limit state.
packages/core/src/interaction-memory-analysis.ts
- Event construction, tone/tag analysis, repetition detection, and persistence gating for remembered interactions.
packages/core/src/interaction-memory-profile.ts
- Profile synthesis, disposition, psychological read, inferred traits, interaction dimensions, and response-guidance construction.
packages/core/src/context-builder.ts
- request context assembly, including interaction-memory/profile attachment, shared Void self-state projection, and any precomputed situational social read.
packages/core/src/void-self-state-loader.ts
- thin typed .cc self-state loader that delegates read-side rendering to the projection module.
packages/core/src/void-self-state-projection.ts
- read-side projection authority for typed self-state: renders the agent-facing summary and compact nap/reply-mode projection from typed documents without touching legacy state.
packages/core/src/situational-social-read.ts
- quick Ollama sidecar inferer for ephemeral room-reading scaffolding built from the current prompt, recent room transcript, and longer-horizon interaction memory.
packages/providers/src/owner-codex-provider.ts
- thin orchestration layer for the Discord-safe codex exec lane.
packages/providers/src/owner-codex-runtime.ts
- Codex process execution, stdout/stderr parsing, trace-event normalization, history-tool loop requests, and owner-DM intent parsing.
packages/providers/src/owner-codex-render.ts
- prompt data projection, bundle rendering, and trace/debug transcript rendering for the owner lane. Behavioral prompt prose is loaded from prompts/.
packages/providers/src/owner-codex-shared.ts
- owner-lane constants, shared types, request-payload shaping, trace formatting helpers, and interaction-memory rendering.
packages/providers/src/local-llm-provider.ts
- thin orchestration shell for the Ollama chat lane plus the bounded host-managed read-only tool loop.
packages/providers/src/local-llm-render.ts
- local-lane prompt data projection, interaction-memory rendering, source-grounding reminders, and artifact rendering. Behavioral prompt prose is loaded from prompts/.
packages/providers/src/local-llm-tools.ts
- local-lane tool definitions, assistant-message normalization, tool argument parsing, and toolbox execution helpers.
packages/providers/src/local-llm-shared.ts
- local-lane constants, shared request/response/tool types, and low-level text/metadata helpers.
packages/rag/src/retrieval-service.ts
- high-level history/source retrieval API used by bot, worker, and provider tool loops.
packages/rag/src/qdrant-vector-store.ts
- Qdrant vector persistence for history and source collections.
packages/rag/src/message-archive.ts
- archived Discord message store under .voidbot/rag/messages.json, including bot-directed prompts that stay preserved for forensics even when they are excluded from default history retrieval.
packages/rag/src/source-document-archive.ts
- archived source/lore document manifest under .voidbot/rag/source-documents.json plus per-repo shards under .voidbot/rag/source-documents.repos/.

Flow 1: Discord Request To Provider

apps/bot/src/discord-bot.ts receives a slash command or mention-driven request and delegates prompt/command work into apps/bot/src/discord-bot-handlers.ts.
Permission checks run through packages/core/src/permission-engine.ts.
Void usage limits are applied through packages/core/src/void-usage-rate-limiter.ts backed by packages/core/src/state-storage.ts.
apps/bot/src/discord-bot-support.ts adapts Discord message/interaction shapes, ambient-memory events, and source-grounding hints.
packages/core/src/interaction-memory-analysis.ts turns direct prompts or ambient mentions into normalized remembered events; packages/core/src/interaction-memory-profile.ts distills remembered events into a reusable longer-horizon social read.
apps/bot/src/discord-bot-handlers.ts usually runs a quick think=false local Ollama sidecar pass over the prompt and recent room transcript to infer an ephemeral situational social read, then records that read as an audit event for later aggregation. If the shared self-state says Void is napping, the handler skips that extra room-read pass and keeps the request deliberately cheap.
packages/core/src/context-builder.ts assembles request context, including recent interaction profile, the situational social read, the shared Void self-state projection, and any retrieval hints.
Provider selection goes through packages/providers/src/index.ts, but the handler can downshift owner traffic into the cheaper local lane when the shared self-state says Void is napping.
The bot either:
- answers directly through local_llm, or
- queues an owner job for the worker / owner_codex path.

Flow 2: Owner Job Execution

apps/worker/src/index.ts polls approved jobs from durable state.
The worker claims a job and dispatches it to the configured provider.
packages/providers/src/owner-codex-provider.ts runs codex exec in the bounded lane, exposes the VoidBot MCP server, records traces, and carries advisory source-grounding hints plus retrieval tools for repo/lore/project questions. Runtime and parsing live in packages/providers/src/owner-codex-runtime.ts; prompt and artifact rendering live in packages/providers/src/owner-codex-render.ts.
If the answer fits the Discord-safe lane, the worker posts it back.
If the task needs deeper work, the worker writes a handoff bundle under .voidbot/artifacts/<job-id>/ and posts the handoff response.

Flow 3: Retrieval And Indexing

packages/rag/src/message-archive.ts and packages/rag/src/source-document-archive.ts keep the raw corpora.
Bot-directed prompts are tagged at ingest, kept in the raw Discord archive, and deliberately skipped when the history ingester builds semantic chunks so repeated summons stop poisoning normal retrieval.
packages/rag/src/retrieval-service.ts translates history/source queries into vector lookups plus metadata filters.
packages/rag/src/qdrant-vector-store.ts executes the live vector lookups against separate history and source collections.
scripts/reconcile-source-repos.ts discovers local Git repos, refreshes push hooks, prunes stale repo shards, and indexes newly discovered repos.
scripts/index-source-repos.ts and scripts/git-post-push-index.mjs drive explicit or detached per-repo source/lore reindex work.
apps/worker/src/mcp-server.ts boots the MCP lane, while mcp-server-resources.ts and mcp-server-tools.ts expose retrieval to Codex and other sessions through search_history, get_message_context, search_sources, get_source_context, and list_indexed_repos.

Flow 4: Ops And Recovery

scripts/start-voidbot-stack.ps1
- stack bootstrap, health checks, fresh build, stale-process cleanup, source-repo reconcile, bot/worker restart, runtime status emission.
- It now also ensures the configured Bifrost CultMesh command URI, provider store, and command processor are present through BIFROST_ROOT, BIFROST_CULTMESH_COMMAND_URI, and BIFROST_CULTMESH_STORE_PATH, because VoidBot's repo Face Discord speech writes typed Bifrost command documents and waits for typed receipts.
scripts/install-stack-startup-task.ps1
- installs the hidden logon task that runs start-voidbot-stack.ps1 automatically after reboot or sign-in.
scripts/check-voidbot-operations.ps1
- watchdog for process liveness, Qdrant, Postgres, Ollama, source-repo reconcile drift, Discord auth, backup freshness, offsite sync freshness, and optional ignored local extension checks.
scripts/run-void-moderator-rumination.ps1
- typed rumination runner. It builds a bounded context packet from .voidbot/private/void-self-state.cc, recent Discord chronology, and read-only repo activity; loads prompts/void-moderator-rumination.md; runs bounded Codex rumination; applies returned typed operations through scripts/void-self-state.mjs; then records parent-owned cursor and speech receipts. After parent-owned candidate delivery, it verifies the receipt is linked to the candidate and the candidate is marked spoken.
scripts/lib/void-rumination-context-projection.ps1
- rumination context projector. It turns typed timestamps and helper payloads into prompt-facing relative phrases while leaving exact chronology in parent-owned typed state, status, and cursor bookkeeping.
scripts/void-self-state.mjs
- typed self-state operation CLI. It applies strict operation payloads such as cursor updates, open-case changes, delivery receipts, repo cursor updates, short-term memory records, sleep-owned distillations, durable-memory revisions/retirements/crystallizations, incubation merges, agency pressure, candidate interventions, sleep-cycle updates, and speaking-pressure updates through packages/core/src/void-self-state-service.ts against the CultCache .cc store.
scripts/run-void-memory-maintenance.ps1
- typed memory-maintenance runner. It builds a bounded prompt-facing context from typed short-term memories, durable memories, incubation, candidates, receipts, and scheduled runtime; loads prompts/void-memory-maintenance.md; asks Codex for bounded memory/incubation/candidate operation proposals; then applies only allowed typed operations through scripts/void-self-state.mjs. It accepts -StateFilePath so fixture passes can use a throwaway .cc store.
- Both rumination runners use process-aware locks. Live locks inside the runtime window skip; dead locks can be reclaimed; live over-runtime locks fail closed instead of allowing overlapping mutation. Each runner writes starting status immediately after claiming its own lock.
scripts/smoke-void-memory-maintenance-sleep-fixture.ps1
- sleep-maintenance fixture. It seeds a temporary CultCache .cc store with a napping sleep cycle and one short-term memory, runs mood drift with a fake Codex child through the non-skip maintenance branch, and verifies the source short-term record is gone while one durable meaning-preserving memory remains.
scripts/smoke-void-memory-lifecycle-fixture.ps1
- memory-lifecycle fixture. It proves long-term memory is durable but plastic: a short-term memory promotes into durable memory, later revision retires the superseded durable record, and crystallization produces one active identity memory plus a self-profile value.
scripts/smoke-void-short-term-clustering-fixture.ps1
- short-term clustering fixture. It proves repeated same-target/topic rumination proposals fold into one provisional memory with merged anchors, while a different topic in the same repo stays separate.
scripts/smoke-void-agency-pressure-fixture.ps1
- agency-pressure fixture. It seeds one typed self-advocacy pressure, verifies it appears in the rendered self-state summary, then runs mood drift against an isolated fixture state to prove agency pressure contributes to speaking pressure without creating a hard-wired speech candidate.
scripts/smoke-void-rumination-fixture.ps1
- rumination fixture. It seeds an isolated CultCache .cc state, routes the non-skip rumination runner through a fake Codex child, and verifies short-term memory, incubation, agency pressure, and candidate intervention proposals are applied by the parent runner while the prompt-facing context keeps exact timestamps out.
scripts/smoke-void-rumination-speech-fixture.ps1
- parent-owned speech fixture. It queues one deliverable candidate through fake Codex, routes delivery through a fake Discord sender, then verifies the parent runner writes a delivery receipt and marks the candidate spoken through typed state.
scripts/smoke-void-rumination-nap-skip-fixture.ps1
- nap-skip fixture. It seeds a napping typed state with no room debt, points CODEX_EXECUTABLE at a bogus command, then verifies the runner exits with napping_without_room_debt and writes no operation proposals before invoking the model.
scripts/smoke-void-moderation-heartbeat-policy-fixture.ps1
- rules-only moderation heartbeat fixture. It routes the heartbeat through a fake Codex child, verifies the prompt excludes rumination/memory/repo surfaces, writes a tagged instant-ban infringement case, and proves parent policy enforcement would call a Discord ban in dry-run mode.
scripts/install-moderation-rumination-task.ps1
- legacy installer for isolating the moderation/participation loop. The live scheduled pulse is now GameCult Local Orchestrator; keep this per-organ task disabled unless testing the organ in isolation.
scripts/run-gamecult-orchestrator.ps1
- local pulse owner for agent transport/runtime chores. It runs Bifrost dispatch, repo Face CTB heartbeats, Void moderation heartbeat, Void mood drift, Void moderation rumination, and the operations watchdog from one hidden scheduled task with one lock, per-organ status/log files, and per-organ timeouts.
scripts/install-gamecult-orchestrator-task.ps1
- installs scheduled task GameCult Local Orchestrator through the hidden PowerShell launcher and can disable the old per-organ tasks: Bifrost Agent Dispatch, VoidBot Repo Face Heartbeats, Void Mood Drift, Void Moderator Rumination, and VoidBot Operations Watchdog.
Scheduled organ Void Mood Drift
- typed mood/sleep runner invoked by the orchestrator. It calls scripts/simulate-void-mood.mjs; when the typed sleep cycle is napping, that path invokes memory maintenance once per nap.
Scheduled organ Void Moderation Heartbeat
- rules-only moderation loop invoked every orchestrator pulse. It uses prompts/void-moderation-heartbeat.md, recent Discord history, Bifrost-provided r/GameCultOrg Reddit post/thread context when available, urgent witnesses, and typed infringement/open-case history; it may emit only upsert_open_case or close_open_case, then parent enforcement applies the explicit policy through the relevant venue transport.
Scheduled organ Void Moderator Rumination
- typed-only participation/announcement runner invoked by the orchestrator or CTB queue; it has model-branch plus parent-owned speech fixtures. It is no longer the every-heartbeat rules authority.
Live sleep maintenance
- passed once on real state after a manual typed nap. The maintenance runner consumed the scheduled rumination short-term memory with one apply_memory_distillation operation, leaving short-term memory empty and preserving one durable identity seam with target, claim, tension, action implication, and anchors.
Sleep brake
- scheduled rumination skips during naps when there are no new room messages and no open cases, so sleep can distill the short-term surface without awake rumination immediately adding fresh residue.
scripts/simulate-void-mood.mjs
- typed mood maintenance script that updates scheduled-runtime sleep cycle and speaking pressure in .voidbot/private/void-self-state.cc. It owns the sleep transition and invokes typed memory maintenance once per nap unless that nap already completed a maintenance pass. Speaking pressure now derives from queued candidates, incubation, and active typed agency pressure. The old personality-vector drift, memory organ, incubation, dream residue, cleanup, and legacy mirror behavior are offline pending typed replacements.
Repo Discord identities
- REPO_DISCORD_IDENTITIES_PATH points at a private JSON registry of repo id, repo name, display name, optional avatar URL, optional role id, and allowed channel ids. The role is the Discord mention target; the webhook persona is the speech transport.
- That registry may also carry channelPermissions: per-topic channel entries with a speech threshold and speed multiplier. These are not another transport; they are the permission/salience map for where a Face may speak. Aquarium is the low-threshold musing lane, while domain channels such as narrative, gamedesign, music, soundtrack, development, programming, visual-effects, machine-learning, and unity3d are available to matching Faces.
- Void remains the room-wide moderation/participation agent. Repo Faces are the swarm mouth and should be confined to text #aquarium (1501196543150264332) through registry allow-lists and REPO_FACE_HEARTBEAT_DEFAULT_CHANNEL_ID; general is 113786069023064068 and should not be used for autonomous Face chatter.
- On startup, the bot tries to find or create missing mentionable roles for registered identities in DISCORD_GUILD_ID, then writes the role ids back to the private registry. If Discord permissions are missing, it warns and leaves the registry unchanged.
- list_repo_discord_identities exposes the registered address book to Codex agents, and post_repo_identity_message enforces identity/channel registration before posting through the shared webhook pipe.
- Each repo identity has a Face state path, defaulting to .voidbot/private/repo-faces/<identity>.cc. The MCP still exposes read_repo_face_state and apply_repo_face_state_operation for diagnostics and explicit administrative use, but normal character turns do not see those tools. The scheduler reads typed state, projects it into lived memory/mood/obligation language, and the Interpreter writes natural character reflection back into typed state operations.
- The typed Face state now includes void.face_affect: needs, social bonds, status reads, and mood dimensions. This is the state-owned home for substrate concern, attention hunger, recognition needs, territoriality, friendships, rivalries, envy, pride, irritation, pampering, neglect, bypasses, and consultation politics. Affect is projected into heartbeat prompts and repo Face speaking pressure; concrete requests still become agency pressure, candidates, Bifrost topics, or work dispatch.
- get_voidbot_runtime_info exposes the running MCP process id, workspace, self-state schema fingerprint, and registered document types so stale mounted MCP processes can be detected before a state read. scripts/smoke-repo-face-affect-mcp-fixture.mjs is the public-surface guard for that document kind. It starts apps/worker/dist/mcp-server.js, checks the runtime fingerprint, calls read_repo_face_state, and verifies typedState.faceAffect comes back with needs, social bonds, status reads, and mood dimensions arrays. This catches stale or incomplete MCP registration even when the direct state service can read the .cc file.
- Shared coordination state has its own authority at .voidbot/private/repo-face-shared-documents.cc. Face-role Codex turns see read_shared_document, create_shared_document, and update_shared_document in both their neutral capability prompt and the hard MCP allow-list. The MCP server derives the writer from VOIDBOT_REPO_FACE_IDENTITY, validates it against the canonical Face registry, stamps provenance, and rejects stale expected revisions. The Interpreter, scheduler, Bifrost, private Face .cc stores, and arbitrary filesystem paths are forbidden writers.
- Repo Face prompts now carry an explicit identity doctrine block. Void's style pack contributes discipline, humor permission, and source-grounding habits, but the registered Face state, repo-local .voidbot home, avatar, and identity description override the speaking subject so a Face does not collapse back into base Void. ensureRepoFaceInitialized also repairs the typed selfProfile inside the Face .cc file, and repo Face MCP state reads/writes pass identity defaults into the state service, so raw state and rendered state agree.
- Repo Faces are allowed to build a long-running map of their repo and propose concrete changes, including lore/design repairs. Discord jobs remain read-only: a Face must ask for human consensus before implementation changes canonical repo material. Once a proposal is concrete enough to review, it should cross the parent-owned proposal PR rail so GitHub becomes the durable argument surface. If a Face state grants a bylined essay lane, authored opinion essays can carry that Face's own vision without canon consensus as long as the authorship is explicit.
- On first role-addressed chat, ensureRepoFaceInitialized creates the target repo's local .voidbot/voice, .voidbot/state, .voidbot/birth, and .voidbot/logs folders, writes voice/identity.json, and launches scripts/run-repo-face-birth.mjs detached if no birth summary is already present.
- scripts/run-repo-face-birth.mjs is the observable bridge into EpiphanyAgent's newborn path. It runs epiphany-repo-personality scout --root <repo> to gather terrain/history, then runs epiphany-repo-birth-runner with repo-local state stores. The default mode is plan, so first chat creates reviewable birth artifacts without auto-accepting hidden personality mutations.
- Role mentions, whole-message display-name mentions, and human replies to a Face's webhook/persona message append pending Face obligations to pendingMentions in REPO_FACE_HEARTBEAT_STATE_PATH; ordinary bot mentions and DMs append pending obligations for the built-in void participant. They no longer create direct provider jobs from MessageCreate. Name matching is exact-token matching across the message, not only prefix matching, so a human introduction such as "Meet Kiko, Huginn and Weksa" queues all named Faces. Mention detection may happen outside regular autonomous Face chatter lanes such as general; speech still crosses the normal registered channel/action rails, and the scheduler attaches the source channel snapshot so the Face can see where the call came from. The CTB scheduler temporarily prioritizes agents with pending mentions, attaches those prompts plus reply targets to the next repo-face-rumination or Void moderation pass, and consumes the pending items only after a turn is actually queued. Rumination jobs remain private unless they explicitly emit a parent-owned Face action block or a typed candidate intervention; the worker must never auto-post their summaries as the base bot. Heartbeat prompts now include the channel permission plan, recent context from non-primary permitted channels, social embodiment, jurisdiction respect, comedy/improv doctrine, and anti-template sampling guidance so a Face can jump into domain chatter, form durable social reads, consult the right steward, and answer people without copying nearby note formulas.
- Repo Face proposal/article PRs, PR comments, registered-identity Discord posts, and r/GameCultOrg Reddit thread posts now cross through parent-owned action blocks before Bifrost bridge commands. Bylined essays use the Interpreter-owned ARTICLE block: the Face writes naturally, the Interpreter extracts structured title/description/author/date/tags/path/body fields, and deterministic worker code renders/validates YAML frontmatter before calling BIFROST_ROOT/tools/bifrost-bridge.mjs for a draft PR and persona announcement. Subreddit threads use the Interpreter-owned REDDIT THREAD block: the Face writes a public title/body/share line, and deterministic worker code calls Bifrost reddit-post with Persona flair. The old VOIDBOT_REPO_IDENTITY_ARTICLE JSON sentinel is cut. Proposal PR and PR-comment sentinels still exist as compatibility rails. This is not merely helper placement: Bifrost's original governance/labor platform role makes it the owner of governed public crossings for GameCult work, including GitHub, r/GameCultOrg Reddit transport/thread access, Discord-native work/member/swarm interactions, dispatch receipts, CultNet/CultCache intake, and future collaboration interfaces. Heimdall is the OAuth/account/capability gate; Bifrost is the bridge/request/routing/receipt authority. VoidBot still owns room/thread cognition, moderation judgment, archive/source retrieval, and Face personality.
- Repo Face turns now receive a Bifrost governance digest from BIFROST_ROOT/tools/governance-threads.mjs digest --repo <repo> --agent <identity> alongside recent Discord context. Bifrost typed CultCache topics/comments are the canonical home for feature requests, Face opinions, missing questions, approvals, and dispatch receipts; Discord is a mirror/evidence source. When BIFROST_DISCORD_CHANNEL_ID is configured for #bifrost, repo Face Discord context ignores mirrored bot chatter there because the authoritative activity arrives through the Bifrost digest. Human #bifrost messages should only become governance comments after Bifrost/Heimdall can link the Discord id to a registered actor. Repo-local asks that would send a human or Codex to add/fix/name/scaffold/document/test/investigate/implement belong on Bifrost with enough room/repo context for a claimed Codex turn; a Face may still speak characterfully in Aquarium, but not as the only dispatch surface. Legacy UPDATE REQUEST packets are parsed only as compatibility input and reconciled into Bifrost topics instead of immediate transport enqueue. Local #bifrost is channel 1506760343836430376; work proposals, governance mirrors, and Bifrost dispatch receipts should go there, while Aquarium remains the casual/social swarm room.
- Repo character turns now have a state-projector plus turn-Interpreter shape. The state-in boundary is prompts/repo-face-state-projector.prompt.md: typed state and identity material are translated into lived character prose before the child sees it. The state projector must surface values, drives, wounds, fascinations, aesthetic taste, dignity, mood, needs, social reads, bonds, agency pressure, and the personality-specific meaning of sparse or dense social topology when the state contains those facts. The deterministic state packet feeding that projector is intentionally verbose and parent-facing: it exposes private notes, values, activation vectors, runtime rest/speaking pressure, affect needs, bonds, status reads, mood dimensions, durable memories, short-term residue, agency pressures, incubating thoughts, candidate speech pressure, recent speech residue, social graph facts, room weather, and semantic curiosity graph attractors so every included variable can appear directly or bend behavior. The curiosity graph is built by seeding history/source vector retrieval from current room context, nearby channels, typed Face state, and home-jurisdiction identity, then decoding retrieved chunks into weighted attractor clusters with prominence, saturation, novelty, density, jurisdiction fit, suggested motion, and evidence labels. The projector owns turning those neutral facts into lived curiosity, boredom, fatigue, territorial pull, underexplored intrigue, or a closing/pivot impulse; deterministic code must not decide the feeling. Deterministic code may also attach neutral graph facts such as mapped people and unmapped registered peers to the projector packet, but it must not decide whether that feels like anxiety, territorial scouting, or nothing. Deterministic code attaches recent read-only home-repo activity before chat, using the Face's own state path as the repo-activity cursor source, so current implementation motion is visible as body context. Current-room and nearby-channel logs no longer cross a model conversation projector; deterministic code attaches raw oldest-to-newest transcript evidence with explicit recency/correction rules so the Face can notice human reframes directly. Deterministic code also attaches a social-affordance surface that matches active typed person-bonds/status reads to recent raw messages from that person, so relationship state arrives as a live hook rather than private decorative lore. Deterministic code still owns full prompt assembly and inspection through scripts/run-repo-face-heartbeats.ts --assemble-prompt <identity>; that path composes stable doctrine, allowed rooms, research/archive capability guidance, Bifrost digest, projected memory/affect prose, home-repo activity, live social affordances, and raw conversation evidence into the exact child prompt. It must not invent personality, mood, affect, or social memory from typed state. Situational obligations such as direct-call priority or first-public-introduction duty are emitted only when the scheduler packet proves they apply, not as standing prompt law. The child character writes a natural in-character turn on full gpt-5.4 and may describe desired speech, repo/article proposals, social reads, needs, mood shifts, or memory-worthy thoughts without emitting action DSL blocks. The cheaper Spark/Mini parent Interpreter decides route/retry/drop and translates warranted effects into structured STATE NOTE and SAY blocks for the worker while governance dispatch remains paused. STATE NOTE blocks become typed short-term memory, affect needs, social bonds, status reads, mood dimensions, or agency pressure. The worker still accepts legacy compact JSON sentinels and legacy UPDATE REQUEST blocks for compatibility, but the live prompt path keeps transport and state syntax out of the character's roleplay surface.
apps/persona-scheduler is the resident daemon organ that owns the serialized Persona wall-clock pulse on Yggdrasil. It invokes the remaining turn orchestrator without overlap and remains alive between pulses. apps/persona-scheduler/src/initiative-engine.ts owns the pure scheduling state machine: participant reconciliation, deterministic base speed/bias/threshold derivation, operator heat/speed projection, semantic-pressure commits, wall-clock advancement, active-turn freeze/completion recovery, queue-success/failure/dry-run commits, stale rescheduling, pending-mention priority, rest/idle eligibility, and ready ordering. Explicit blocked/withdrawn status, active load, semantic receipts, and initiative position survive reconciliation; new Faces without a usable mouth fail closed. apps/persona-scheduler/src/state-store.ts owns scheduler persistence and legacy migration. It stores one typed voidbot.persona_scheduler_state record in repo-face-heartbeats.cc, migrates the former JSON document once with a storage_migrated witness, rejects malformed CultCache instead of replacing it, and writes JSON only as a derived dashboard/debug projection. packages/core/src/repo-face-heartbeat-queue.ts resolves both legacy .json configuration and current .cc configuration to the same canonical path; the Discord bot publishes one immutable voidbot.persona_attention_command CultCache inbox document per addressed message. The scheduler store ingests and deduplicates those commands, persists them as pending attention, then acknowledges inbox files only after the durable commit; a crash before acknowledgement replays safely. apps/persona-scheduler/src/active-turn-source.ts owns the Postgres/legacy-lock liveness adapter. It recognizes only Persona turn request IDs, applies the bounded stale threshold, marks dead queue claims failed, and returns active/stale witnesses; it never writes scheduler state. apps/persona-scheduler/src/persona-state-source.ts owns read-only typed Persona-state acquisition and present-time physiology projection. It reports typed mind plus rest facts without creating missing state or writing sleep/speaking-pressure state; the initiative engine alone applies rest eligibility. apps/persona-scheduler/src/persona-memory-context-source.ts owns the derived vector refresh and semantic recall query for one supplied typed Mind observation. It returns typed hits/unavailability and cannot reacquire canonical state, render prompt prose, or queue work. apps/persona-scheduler/src/persona-memory-projector.ts owns deterministic/model projection policy, its prompt template, output sufficiency, leak rejection, all typed-state sections including clarity-conditioned agency/incubation/candidate/receipt pressure, and final ordering of named external fact sections. apps/persona-scheduler/src/persona-social-context-projector.ts owns time-explicit relationship freshness, room-texture observation, memory-facing room facts, turn-facing room weather, and pronoun-guidance rendering from supplied facts. Neither projector may acquire Discord, reopen Persona state, retrieve vectors, or queue work. apps/persona-scheduler/src/discord-activity-source.ts owns neutral Discord activity acquisition: it deduplicates explicit watched channels, excludes bot traffic, reports raw human messages, and derives idle-cooling times from scheduler history without writing state or selecting work. apps/persona-scheduler/src/semantic-pressure-source.ts owns embedding-backed affinity observation and returns bounded projections for eligible Personas and permitted channels. It cannot mutate initiative; initiative-engine.ts alone applies pressure, dynamic heat, interrupt readiness, dedupe receipts, and transition history. apps/persona-scheduler/src/turn-context-source.ts owns current-room and nearby-channel Discord evidence plus the bounded image-attachment cache. It returns chronological source messages and explicit snapshot failure witnesses; it has no access to Persona state, prompt composition, or the job queue. scripts/run-repo-face-heartbeats.ts projects the identity registry into neutral participant specs and affinity candidates, still computes social-graph/peer-opening/relationship-pressure/human-clarity/maintenance facts, passes all facts by name to the projector, and invokes external queue actuators pending further extraction. External adapters report facts; only the initiative engine mutates load, counters, recovery position, pressure, and queue-transition history. Repo Faces and native Personas queue ordinary repo-face-rumination jobs through the canonical job queue. Built-in Void participates only when its separate moderation heartbeat organ is enabled; the hosted scheduler does not launch Windows PowerShell.
Human-clarity chronology, social topology, peer openings, and relationship-pressure scoring now share the same social-context owner. The shell consumes one named projection result and contains no duplicate social scorer.
Self-maintenance advocacy is a typed-state pressure projection owned by persona-memory-projector.ts. That organ classifies qualifying needs, agency pressures, and must-share candidates, suppresses them under live human-clarity pressure, and fixes their order alongside the other pressure sections; the heartbeat shell no longer carries a parallel maintenance policy.
Curiosity is split at the evidence boundary. persona-curiosity-context-source.ts plans semantic seeds from supplied identity, typed Mind, and room evidence, then acquires and deduplicates bounded neutral nodes through an injected retrieval port. persona-curiosity-projector.ts constructs and scores the local attractor graph and renders curiosity weather without vector access. persona-curiosity-terms.ts owns their shared topic-term vocabulary. The heartbeat shell wires the existing RAG adapter into these organs and owns neither query policy nor graph interpretation.
persona-social-context-source.ts is the read-only interaction-memory adapter for social guidance. It selects visible humans plus the owner, reads profiles through an injected closeable port, ranks explicit/corrective evidence over ambient usage, and emits neutral pronoun guidance. Storage remains authoritative; the source closes its reader and cannot render prompt prose or mutate profiles.
persona-conversation-projector.ts is the pure owner of conversation projection. Given routing, raw current/nearby messages, pending mentions, and identity, it emits one transcript plus the exact thread/default-focus objects sent to the actuator, and derives shared room-saturation/topic-attractor facts. It cannot read Discord, state, vectors, or the queue; turn-context-source.ts remains the evidence owner.
persona-turn-prompt-projector.ts is the final pure turn-policy owner. It composes the repo-Face prompt template and owns identity doctrine, situation/mention/channel/research/social/governance/repetition/worldbuilding directives, plus deterministic jurisdiction-dive cadence. The heartbeat shell passes acquired facts and sends the returned prompt to the actuator; it does not load prompt templates or decide prompt policy.
Typed native Personas and repo Personas share the same persona-state-source/memory-projector path. Legacy gamecult.persona_state.v0 JSON remains live for Muninn, Sleipnir, Hermodr, and Tengu behind persona-portable-state-source.ts and persona-portable-state-projector.ts; the source validates schema/read failures and the projector renders bounded imported state without exposing its path. This compatibility organ is not canonical state ownership and should disappear after a provenance-aware .cc migration.
apps/persona-scheduler/src/bifrost-governance-source.ts owns the remaining Bifrost governance digest subprocess contract. It supplies the CLI path, arguments, timeout, JSON parsing, and typed command/parse failure topics; Persona prompt composition receives a BifrostGovernanceDigest and cannot invoke Bifrost directly.
The scheduler state has one write authority. initiative-engine.ts commits participant reconciliation, operator controls, pause/disabled skips, stale-turn recovery witnesses, semantic pressure, pending-attention consumption, queue outcomes, and tick finalization. run-repo-face-heartbeats.ts contains no direct participant/state assignment or history append; its sources and actuators return facts to engine commits.
apps/persona-scheduler/src/turn-actuator.ts is the worker-queue output port. Given a completed prompt, output channel, evidence fields, provider, identity, timestamp, and narrow createJob capability, it builds the canonical worker actor/guild ContextBundle, creates one approved repo-face-rumination job, and returns {created, activeJobId, requestMessageId}. It cannot choose a Persona, mutate scheduler state, or compose prompt content. The orchestration shell no longer knows ContextBuilder, job approval defaults, worker command names, or createJob mechanics.
apps/persona-scheduler/src/turn-routing.ts owns channel selection and projection. It turns registered channel permissions, the configured default, and the newest pending-attention channel into one PersonaChannelPlan containing the primary output room, nearby snapshot rooms, normalized options, and low-threshold topics. It also owns the bounded channel-speed multiplier used by participant specs. Context readers and prompt renderers consume this plan without deciding routes.
apps/persona-scheduler/src/control-source.ts owns operator-control observation. It reads the pause witness with explicit absent/running and malformed/fail-closed semantics, loads the typed voidbot.swarm_control_state CultMesh document, validates heat bounds, and returns neutral facts. It cannot write scheduler state; engine commits own control application and skip witnesses.
apps/persona-scheduler/src/repo-activity-source.ts owns the home-repo activity subprocess boundary. It resolves the source repo and Face cursor, invokes export-recent-repo-activity.mjs with a bounded 96-hour/five-commit window and mandatory --read-only, and returns a typed observation. Prompt composition renders that observation and cannot invoke or parse the exporter.
Idunn invokes the root-owned audited manifest at /srv/odin/deploy-manifests/voidbot; /usr/local/sbin/deploy-voidbot is a byte-identical inspection/recovery copy, not the live path. Both derive from gamecult-ops/scripts/deploy-voidbot.sh. The idunn user exclusively owns mutable Git state in /srv/build/VoidBot and /srv/build/cultcache-ts, including lazy partial-clone object fetches; the root actuator owns immutable artifact construction/promotion, systemd, and deployment witnesses without running Git as root.
The same scheduler derives semantic responsePressure for scheduler-eligible Personas by embedding canonical Face identity-card projections and recent human messages from channels each Face may enter. Pressure decays by message age, aggregates with noisy-OR, awakens at most three eligible Faces, and exposes its message-scoped cosine evidence. It produces bounded dynamicHeat for the next scheduled recovery calculation; an unseen message crossing the Persona's interrupt threshold may pull readiness to the current initiative clock exactly once. It cannot create a job, bypass rest or active-turn brakes, impersonate a direct mention, or write inferred desire into Persona state.
- The Windows GameCult Local Orchestrator and per-organ scheduled-task wrapper no longer own Persona pulses. voidbot.service deploys persona-scheduler beside bot, worker, Qdrant, and the CultMesh publisher. Turn frequency is controlled by REPO_FACE_HEARTBEAT_BASE_RECOVERY_MINUTES, REPO_FACE_HEARTBEAT_GLOBAL_HEAT, REPO_FACE_HEARTBEAT_SPEED_OVERRIDES, and REPO_FACE_HEARTBEAT_HEAT_OVERRIDES. Heat keys can target all, kind:<participantKind>, turn:<turnKind>, identity:<id>, repo:<repo>, display:<name>, channel:<id>, or the bare identity/repo/display key.
- The local ignored registry currently includes Nibu for AetheriaLore, with Face state in E:/Projects/AetheriaLore/.voidbot/state/nibu.cc, Discord role id 1505918221453103247, and an Aquarium channel allow-list. Nibu's Face state now treats AetheriaLore-first map-building, abrasive character voice, consensus-backed change agency, her own Aetheria/Lore/Nibu.md character-note stewardship, Nibu-authored lore essays, and tangential setting fascination as separate active doctrines. That tangential fascination points at embodied ship minds, junkyard abandonment, murderous autonomy, salvage, and save-scumming survival. The repo Face heartbeat organ is now pulsed by GameCult Local Orchestrator; after restarting the stack onto the new worker code, forced heartbeat job 76020f1e-0c55-424b-9e35-89ba7f77fcc3 completed without base-bot auto-posting.
- The local ignored registry now also includes Epiphany for EpiphanyAgent, with Face state in E:/Projects/EpiphanyAgent/.voidbot/state/epiphany.cc, Discord role id 1506375937439301642, and Aquarium channel allow-list 1501196543150264332. Her repo-local .voidbot birth surface has completed in plan/review mode; the generated EpiphanyAgent startup packets still require Self review before accepted native birth mutations. Her jurisdiction is the self-improvement spine: typed state, CultCache/CultNet, Codex bridge boundaries, birth/init rites, low-copy runtime contracts, review gates, graph-shaped memory, heartbeat physiology, and deletion of duplicated authority.
scripts/run-void-mood-drift.ps1
- hidden-task wrapper for the mood-drift organ; writes status/log pulse files and respects the moderation lock so the two state writers do not stomp each other for sport.
scripts/install-void-mood-drift-task.ps1
- installs the local 5-minute scheduled task that keeps the shared self-state emotionally non-flat between moderation passes.
scripts/export-random-discord-history.mjs
- plain Node helper for novelty excursions that samples one random archived Discord seam, returns a local context window around the anchor message, and skips bot-directed prompt rows by default.
scripts/feed-codex-chat-consensus.mjs
- plain Node helper that turns recent archived Discord messages, defaulting to text #aquarium, into a markdown consensus packet plus a target Codex prompt. By default it writes files under .voidbot/artifacts/chat-consensus/; with --execute, it feeds the generated prompt to codex exec in the requested workspace. With --enqueue-bifrost, it also calls E:/Projects/Bifrost/tools/agent-transport.mjs enqueue so the packet becomes a CultCache-backed Bifrost intake request for the target repo Face instead of remaining an inert local artifact.
scripts/backup-voidbot-state.ps1
- local backup of Postgres, Qdrant snapshots, and RAG archives.
scripts/restore-voidbot-state.ps1
- local restore path.
scripts/sync-voidbot-backup-offsite.ps1
- verified offsite backup sync to the Qwen box.
scripts/voidbot-operations-dashboard-lib.ps1
- dashboard rendering for the local ops surface.

When present, an ignored local script at .voidbot/private/check-voidbot-operations.local.ps1 can inject adjacent-service checks into the same ops lane. That keeps private infrastructure gossip out of tracked code while preserving one boring place for smoke alarms to land.

Verse Service Contract

Owner:
- VoidBot owns Discord ingress, room cognition, r/GameCultOrg moderation judgment when Bifrost supplies Reddit context, archive/source retrieval, direct owner handoff, typed Void self-state, repo Face scheduling compatibility, and parent-owned speech delivery.
- Huginn owns Persona-state and .cc runtime inspection stewardship: schema availability, migration pressure, projection health, access-tool sanity, CultMesh publication, and Eve DSL inspection for typed state.
- Bifrost owns governed public crossings for GitHub proposals/articles/comments, r/GameCultOrg Reddit post/thread viewing and posting, work topics, dispatch receipts, and future Discord-native work interfaces.
- Odin owns Verse/provider discovery and interface aggregation, not provider state.
- Eve/CultUI owns presentation shape; browser/native/TUI renderers lower provider-owned surfaces.
Inputs:
- Discord gateway events, archived Discord corpus, indexed source/lore archives, Postgres jobs/audit/interaction memory, Qdrant vectors, typed .cc self/Face state, Bifrost governance digest, and orchestrator status.
Outputs:
- Discord replies or webhook persona posts through parent-owned rails, owner handoff artifacts, MCP retrieval/tool results, typed CultCache operations, and CultMesh-advertised Eve/CultUI provider surfaces.
Derived state:
- JSON status files, generated HTML, source/archive freshness summaries, prompt-facing projections, and local debug snapshots are witnesses or lowerings. They do not own durable truth.
Forbidden writers:
- Child prompts, renderers, static dashboards, legacy JSON projections, Odin discovery, Huginn inspection tools, and command receipts must not mutate VoidBot or rendered binding state except through advertised command bindings, typed operation ports, and provider-owned live state handles.
Shared paths:
- Manual turns, CTB heartbeats, direct mentions, role/name addressing, moderation rumination, repo Face speech, Bifrost digest reads, and swarm controls should converge on typed operations and Eve/CultUI bindings rather than parallel dashboard endpoints.
Cut line:
- If a new status/control surface is meaningful to operators, publish it as typed CultCache or a .cc witness and an Eve/CultUI CultMesh surface. Do not add a separate HTTP dashboard or status-card authority.

Current CultMesh namespace:

Verse id: voidbot.local
Provider id: voidbot.swarm
Endpoint: cultmesh://voidbot.local/eve/providers/voidbot.swarm
Snapshot document: voidbot.swarm_state_snapshot
Provider advertisement: gamecult.eve.provider_advertisement
Eve surface state: gamecult.eve.surface_state
Eve interface binding: gamecult.eve.interface_binding
Store path: .voidbot/status/cultmesh/voidbot-swarm-state.cc

Eve v2 live-binding path:

VoidBot owns accepted heat in .voidbot/private/swarm-controls.cc and publishes that typed document through a retained provider session (060da23). The Eve surface binds both heat text and slider to it (3d86b93); neither contains a baked live value.
CultLib's dev line owns typed live-publication handles, authenticated provider-session ingress, reliable reconnect evidence, and RUDP application receipts (ebd8c78c, d4934233, 8965f3c0).
Eve's browser lowering resolves bindings and owns subscription cleanup/rebind across surface changes (85b0139, 522df00). Command receipts report applied/rejected intent but cannot paint authoritative values into controls.
Odin remains discovery/aggregation. Hermodr's live-publication branch owns the authenticated provider-session broker and ordered SSE lowering (5cb819e, 561e320); one-shot surface/document reads remain bootstrap and diagnostics only.
Initial load, external provider mutation, command mutation, and reconnect must converge through the same provider update -> typed handle -> Eve binding path.

Target Eve surfaces:

voidbot.discord: room obligations, direct mentions, speech receipts, moderation/open-case pressure, delivery targets.
voidbot.reddit: r/GameCultOrg thread/post obligations, Persona-authored thread ideas, moderation/open-case pressure, proposed replies/actions, and Bifrost transport receipts.
voidbot.archive: archived Discord corpus status, import/backfill health, bot-directed-prompt exclusion, history vector freshness.
voidbot.source: repo/lore shard freshness, indexed coverage, Qdrant collection health, detached reindex jobs.
voidbot.repo_face: registered identities, repo-local .cc witnesses, channel grants, prompt assembly status, Bifrost digest availability, Huginn inspection readiness.
voidbot.swarm: CTB order, active turns, pending mention queues, heat/cadence controls, orchestrator status, selected Face state witness.

Migration order:

Keep voidbot.swarm publishing a CultMesh Eve provider through .voidbot/status/cultmesh/voidbot-swarm-state.cc.
Add .cc witness/export documents for JSON-only status surfaces before treating them as Verse state.
Move Persona and repo Face .cc inspection to Huginn-owned tooling while VoidBot remains the Discord compatibility carrier.
Publish voidbot.discord, voidbot.reddit, voidbot.archive, voidbot.source, and voidbot.repo_face as typed Eve/CultUI bindings.
Let Odin discover and aggregate the provider-owned surfaces.
Demote old JSON exports, local HTML, and legacy MCP state reads to diagnostics once CultMesh/Eve and Huginn cover the same reality.
Extend the proven binding path beyond swarm heat as each remaining baked operator value earns a typed provider-owned document; never revive whole-surface polling or receipt-driven DOM repair.

Huginn demotion line: VoidBot may carry repo Face .cc state paths, MCP diagnostics, and Discord compatibility registry data, but Persona/.cc inspection and portable Persona publication belong to Huginn. VoidBot must not let its private registry, static HTML, or legacy MCP state tools become the canonical Persona authority.

Storage Boundaries

Postgres:
- jobs
- audit events
- interaction-memory events
- provider run records
- usage rate-limit state
Qdrant:
- Discord history vectors
- source/lore vectors
.voidbot/:
- archived raw corpora
- source archive manifest plus per-repo source shards
- job artifacts and traces
- logs and status files
- backups and snapshots

The important scar is that these stores are split on purpose. Do not casually weld them back into one convenient blob and act surprised when it becomes a moon.

Within the Postgres path, the implementation is split on purpose now too:

state-storage.ts chooses the backend
state-storage-postgres-bootstrap.ts handles schema/bootstrap/import work
per-domain modules own queue, audit, interaction-memory, and rate-limit behavior

Flow 5: Scheduled Moderation Rumination

The Windows scheduled task GameCult Local Orchestrator is enabled, and it invokes the Void moderation rumination organ when that organ is due.
scripts/run-void-moderator-rumination.ps1 reads .voidbot/private/void-self-state.cc, polls node scripts/export-recent-discord-history.mjs, and gathers read-only repo activity with node scripts/export-recent-repo-activity.mjs --read-only.
The runner writes a bounded context packet at .voidbot/status/moderation-rumination-context.json; the prompt-facing packet projects recent timing as relative phrases instead of raw timestamps.
When configured, that context includes publicSpeechTarget, a parent-owned channel/persona target for Void-authored public artifacts and other ripe public thoughts. Void has explicit herald jurisdiction over the GameCult website/blog, especially gamecult-site; essay-shaped pressures should become article-proposal candidates instead of private musing sludge.
The runner loads prompts/void-moderator-rumination.md, substitutes the context/state/output paths, and sends that prompt to Codex.
Codex may use retrieval and analysis tools, but its durable state output is restricted to .voidbot/status/moderation-rumination-operations.json.
The parent runner applies those typed operations through scripts/void-self-state.mjs, then records reviewed-message cursor and, on successful normal posting-enabled passes, advances repo-activity cursors from the observed repo weather through typed update_repo_activity_cursor operations.
If posting is enabled and typed state contains a queued candidate intervention with a delivery target, the parent runner sends at most one candidate, records the delivery receipt, and marks the candidate spoken through typed state. The candidate may have been proposed in the current pass or already queued from an earlier pass. The child prompt forbids direct send-script calls.
Before that delivery step, the parent runner now retires queued candidates whose channelId + replyToMessageId already appear in canonical typed speech receipts, so a later pass cannot answer an already-answered direct question just because the same message is still visible or the seam still feels warm.
The runner writes .voidbot/status/moderation-rumination.json and .voidbot/logs/moderation-rumination.log.
It intentionally does not materialize .json, load .msgpack, read the legacy moderation monolith, or let the child edit state directly.
Before applying model output, the runner enforces speech-pressure accountability. Active self/world advocacy pressures at 0.55 intensity or higher with no matching live queued candidate are projected as speechPressureObligations; model output must queue a candidate or cool/retire the pressure instead of returning silent []. Deferred candidates do not satisfy that pressure by themselves, and an older spoken candidate does not keep satisfying a still-active pressure forever.

Flow 6: Mood And Sleep Runtime

The Windows scheduled task GameCult Local Orchestrator is enabled, and it invokes the Void mood drift organ when that organ is due.
scripts/simulate-void-mood.mjs reads typed documents from .voidbot/private/void-self-state.cc.
It updates void.scheduled_runtime.sleepCycle and void.scheduled_runtime.speakingPressure through update_sleep_cycle and update_speaking_pressure operations, with active advocacy pressure weighted strongly enough to raise speaking pressure earlier instead of staying a private sulk until the seam is already overripe.
It writes .voidbot/status/void-mood-drift.json.
When sleep is active, the script invokes scripts/run-void-memory-maintenance.ps1 once per nap to force typed distillation/pruning.
The old memory-organ script family, legacy state template, and legacy context exporter have been deleted.

Flow 7: Typed Memory Maintenance

scripts/run-void-memory-maintenance.ps1 is invoked by mood drift during sleep, and can also be run manually for fixtures.
It reads .voidbot/private/void-self-state.cc through the typed self-state service.
It writes .voidbot/status/void-memory-maintenance-context.json with prompt-facing relative chronology and only typed memory/incubation/agency/candidate surfaces.
It loads prompts/void-memory-maintenance.md and asks Codex for operation proposals unless -SkipModel is set.
The parent runner rejects any operation outside memory lifecycle, incubation, agency pressure, or candidate-intervention maintenance.
The parent runner applies allowed operations through scripts/void-self-state.mjs.
In sleep mode, the context carries sleepDirective.forceDistillation when there is short-term memory pressure. A real model pass that returns no operations under pressure fails visibly, and any real sleep pass that leaves short-term memory behind fails instead of letting yesterday's residue haunt the state. The fixture smoke exercises this path with a fake Codex child so the parent validation and application machinery are tested without relying on live inference.
This is the replacement path for sleep/distillation and agency work: model-owned proposals crossing the typed operation boundary, not deterministic repair code editing state.

Memory Lifecycle

Rumination may only write short-term memories. It cannot directly mutate durable memory.
The typed state service clusters repeated short-term memories before sleep sees them. If a new record repeats the same target/topic pressure, it updates one provisional memory and merges anchors instead of stacking another variant. This preserves deepening: fresh anchors and sharper tensions should accumulate inside the cluster, while unchanged paraphrases should not become separate memories.
Sleep maintenance promotes, merges, prunes, revises, retires, or crystallizes memory through typed operations.
Durable memory is not immutable. revise_durable_memory creates an explicit replacement and retires superseded source memories; retire_durable_memory marks obsolete memory inactive; crystallize_memory_into_identity promotes a stable thought into an identity_seam and may update self-profile values or private notes.
Prompt-facing language should talk about anchors: what made the thought real. The schema still accepts old evidenceRefs, but new memory payloads should prefer anchorRefs or explicit anchor:missing.

Agency Pressure

Rumination and memory maintenance may propose upsert_agency_pressure or retire_agency_pressure.
The typed service validates that each pressure has a concrete target, claim or question, action implication, intensity, and either anchors/source memory ids or an explicit anchor:missing tag.
The self-state summary renders active agency pressure separately from queued speech candidates.
Mood drift reads active and ready agency pressure into speaking pressure, but it does not manufacture speech text from it.
The rumination runner bridges desire-to-speak without manufacturing text: strong advocacy pressure becomes an obligation for the model to queue/defer a candidate or explicitly cool/retire the pressure. The parent rejects silent output for those obligations.

61 KiB Raw Blame History