feat: Dynamic Project Registry (Phase 1)

.agents/skills/release-bump-changelog/SKILL.md

@@ -0,0 +1,56 @@
+---
+name: release-bump-changelog
+description: Use this skill when preparing a release bump or updating release notes. It writes a launch-style release story from the actual change set, then runs `cargo bump` so the generated GitHub notes and the marketing copy land together in `CHANGELOG.md`.
+---
+
+# Release Bump + Changelog
+
+## Goal
+
+Create a version bump commit where each release section includes both:
+
+- a launch-style narrative (marketing copy)
+- the exact GitHub-generated release notes
+
+## Workflow
+
+1. Ensure the working tree is clean (except allowed release files).
+2. Draft release story markdown from real changes (PR titles, release-note bullets, and diff themes).
+   - Target style: similar to the `v0.2.0` narrative (clear positioning + concrete highlights).
+   - Keep it factual and specific to the release.
+   - Write to a temp file (outside repo is preferred):
+     - `marketing_file="$(mktemp)"`
+     - write markdown content to `$marketing_file`
+3. Run `cargo bump <patch|minor|major|X.Y.Z>` with marketing copy input:
+   - `SPACEBOT_RELEASE_MARKETING_COPY_FILE="$marketing_file" cargo bump <...>`
+   - This invokes `scripts/release-tag.sh`.
+   - The script generates GitHub-native notes (`gh api .../releases/generate-notes`).
+   - The script upserts `CHANGELOG.md` with:
+     - `### Release Story` (from your marketing file)
+     - GitHub-generated notes body
+   - The script includes `CHANGELOG.md` in the release commit.
+4. Verify results:
+   - `git show --name-only --stat`
+   - Confirm commit contains `Cargo.toml`, `Cargo.lock` (if present), and `CHANGELOG.md`.
+   - Confirm tag was created (`git tag --list "v*" --sort=-v:refname | head -n 5`).
+
+## Requirements
+
+- `gh` CLI installed and authenticated (`gh auth status`).
+- `origin` remote points to GitHub, or set `SPACEBOT_RELEASE_REPO=<owner/repo>`.
+- Marketing copy is required unless explicitly bypassed with `SPACEBOT_SKIP_MARKETING_COPY=1`.
+
+## Release Story Format
+
+Use markdown only (no outer `## vX.Y.Z` heading; script adds it). Recommended structure:
+
+1. One strong opening paragraph (why this release matters)
+2. One paragraph on major technical shifts
+3. Optional short highlight bullets for standout additions/fixes
+
+Avoid vague hype. Tie claims to concrete shipped changes.
+
+## Notes
+
+- Do not use a standalone changelog sync script.
+- `CHANGELOG.md` is seeded from historical releases and then maintained by the release bump workflow.

.dockerignore

@@ -9,10 +9,26 @@ interface/node_modules/
 interface/dist/
 
 # Not needed for the build
-docs/
 tests/
 scripts/
+!scripts/build-opencode-embed.sh
+
+# Exclude docs except what's needed for self_awareness.rs embeds
+docs/node_modules/
+docs/.next/
+docs/out/
+docs/app/
+docs/components/
+docs/lib/
+docs/design-docs/
+docs/*.json
+docs/*.ts
+docs/*.tsx
+docs/*.mjs
+docs/*.yaml
+docs/*.lock
+docs/.gitignore
+docs/.node-version
 fly.toml
-AGENTS.md
 RUST_STYLE_GUIDE.md
 LICENSE

.github/workflows/release.yml

@@ -15,16 +15,45 @@ env:
   IMAGE: ghcr.io/${{ github.repository_owner }}/spacebot
 
 jobs:
+  verify-version:
+    if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Verify Cargo.toml version matches tag
+        run: |
+          TAG="${GITHUB_REF#refs/tags/v}"
+          CARGO_VERSION=$(grep '^version' Cargo.toml | head -1 | sed 's/.*"\(.*\)"/\1/')
+          echo "Git tag version:    $TAG"
+          echo "Cargo.toml version: $CARGO_VERSION"
+          if [ "$TAG" != "$CARGO_VERSION" ]; then
+            echo "::error::Version mismatch! Git tag is v${TAG} but Cargo.toml has version ${CARGO_VERSION}. Bump the version in Cargo.toml before tagging."
+            exit 1
+          fi
+
   build-binaries:
+    needs: [verify-version]
+    if: always() && (needs.verify-version.result == 'success' || needs.verify-version.result == 'skipped')
     strategy:
       matrix:
         include:
           - target: x86_64-unknown-linux-gnu
             runner: ubuntu-24.04
             archive: tar.gz
+            os: linux
           - target: aarch64-unknown-linux-gnu
             runner: ubuntu-24.04-arm
             archive: tar.gz
+            os: linux
+          - target: aarch64-apple-darwin
+            runner: macos-15
+            archive: tar.gz
+            os: macos
+          - target: x86_64-apple-darwin
+            runner: macos-15-intel
+            archive: tar.gz
+            os: macos
     runs-on: ${{ matrix.runner }}
     permissions:
       contents: write
@@ -39,9 +68,30 @@ jobs:
         with:
           targets: ${{ matrix.target }}
 
-      - name: Install protoc
+      - name: Install system dependencies (Linux)
+        if: matrix.os == 'linux'
         run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
 
+      - name: Install system dependencies (macOS)
+        if: matrix.os == 'macos'
+        run: brew install protobuf
+
+      - name: Install Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Install bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Build frontend
+        env:
+          SPACEBOT_SKIP_FRONTEND_BUILD: "1"
+        run: |
+          cd interface && rm -f bun.lock && bun install && cd ..
+          ./scripts/build-opencode-embed.sh
+          cd interface && bun run build
+
       - name: Determine version tag
         id: version
         run: |
@@ -72,6 +122,8 @@ jobs:
           retention-days: 1
 
   build-docker:
+    needs: [verify-version]
+    if: always() && (needs.verify-version.result == 'success' || needs.verify-version.result == 'skipped')
     strategy:
       matrix:
         include:
@@ -176,7 +228,9 @@ jobs:
             -d '{"image_tag": "${{ needs.build-docker.outputs.version }}"}'
 
   create-release:
-    needs: build-binaries
+    needs:
+      - build-binaries
+      - merge-docker
     if: startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-24.04
     permissions:
@@ -196,6 +250,7 @@ jobs:
         run: |
           mkdir -p release-assets
           find binaries -name "*.tar.gz" -exec cp {} release-assets/ \;
+          find binaries -name "*.zip" -exec cp {} release-assets/ \;
           ls -la release-assets/
 
       - name: Create GitHub Release
@@ -204,3 +259,93 @@ jobs:
           tag_name: ${{ needs.build-binaries.outputs.version }}
           generate_release_notes: true
           files: release-assets/*
+
+  update-homebrew:
+    needs:
+      - build-binaries
+      - create-release
+    if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download all artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: binaries
+          pattern: spacebot-*
+          merge-multiple: false
+
+      - name: Compute SHA256 checksums
+        id: sha
+        run: |
+          for arch in aarch64-apple-darwin x86_64-apple-darwin aarch64-unknown-linux-gnu x86_64-unknown-linux-gnu; do
+            FILE=$(find binaries -name "*${arch}*" | head -1)
+            KEY=$(echo "$arch" | tr '-' '_')
+            echo "${KEY}=$(shasum -a 256 "$FILE" | awk '{print $1}')" >> "$GITHUB_OUTPUT"
+          done
+
+      - name: Update formula in tap repo
+        env:
+          GH_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
+        run: |
+          VERSION="${{ needs.build-binaries.outputs.version }}"
+          VERSION_NUM="${VERSION#v}"
+          REPO="${{ github.repository }}"
+          BASE="https://github.com/${REPO}/releases/download/${VERSION}"
+
+          git clone "https://x-access-token:${GH_TOKEN}@github.com/spacedriveapp/homebrew-tap.git" tap
+          mkdir -p tap/Formula
+
+          SHA_ARM_MAC="${{ steps.sha.outputs.aarch64_apple_darwin }}"
+          SHA_X86_MAC="${{ steps.sha.outputs.x86_64_apple_darwin }}"
+          SHA_ARM_LINUX="${{ steps.sha.outputs.aarch64_unknown_linux_gnu }}"
+          SHA_X86_LINUX="${{ steps.sha.outputs.x86_64_unknown_linux_gnu }}"
+
+          # Write formula (sed strips 10 leading spaces from the YAML indentation)
+          sed 's/^          //' > tap/Formula/spacebot.rb <<RUBY
+          class Spacebot < Formula
+            desc "Agentic LLM system with specialized processes"
+            homepage "https://github.com/${REPO}"
+            version "${VERSION_NUM}"
+            license "FSL-1.1-ALv2"
+
+            on_macos do
+              if Hardware::CPU.arm?
+                url "${BASE}/spacebot-${VERSION}-aarch64-apple-darwin.tar.gz"
+                sha256 "${SHA_ARM_MAC}"
+              else
+                url "${BASE}/spacebot-${VERSION}-x86_64-apple-darwin.tar.gz"
+                sha256 "${SHA_X86_MAC}"
+              end
+            end
+
+            on_linux do
+              if Hardware::CPU.arm?
+                url "${BASE}/spacebot-${VERSION}-aarch64-unknown-linux-gnu.tar.gz"
+                sha256 "${SHA_ARM_LINUX}"
+              else
+                url "${BASE}/spacebot-${VERSION}-x86_64-unknown-linux-gnu.tar.gz"
+                sha256 "${SHA_X86_LINUX}"
+              end
+            end
+
+            def install
+              bin.install "spacebot"
+            end
+
+            test do
+              assert_match "spacebot", shell_output("#{bin}/spacebot --version")
+            end
+          end
+          RUBY
+
+          cd tap
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add Formula/spacebot.rb
+          git commit -m "spacebot ${VERSION}" || echo "No changes to commit"
+          git push

.gitignore

@@ -1,10 +1,13 @@
 /target
 .DS_Store
 .fastembed_cache
+.build/
 
 # Interface
 interface/node_modules/
 interface/dist/
+interface/public/opencode-embed/
+.opencode-build-cache/
 
 .idea
 list/

AGENTS.md

@@ -67,7 +67,7 @@ Creating a branch is `let branch_history = channel_history.clone()`.
 
 The branch result is injected into the channel's history as a distinct message type. Then the branch is deleted. Multiple branches can run concurrently per channel (configurable limit). First done, first incorporated.
 
-**Tools:** memory_recall, memory_save, channel_recall, spawn_worker  
+**Tools:** memory_recall, memory_save, memory_delete, channel_recall, spacebot_docs, task_create, task_list, task_update, spawn_worker  
 **Context:** Clone of channel history at fork time  
 **Lifecycle:** Short-lived. Returns a conclusion, then deleted.
 
@@ -80,11 +80,11 @@ Two kinds:
 - **Interactive:** Long-running, accepts follow-up input from the channel. Coding sessions, complex multi-step tasks.
 
 Workers are pluggable. A worker can be:
-- A Rig agent with shell/file/exec tools
+- A Rig agent with shell/file tools
 - An OpenCode subprocess
 - Any external process that accepts a task and reports status
 
-**Tools:** shell, file, exec, set_status (varies by worker type)  
+**Tools:** shell, file, set_status (varies by worker type)  
 **Context:** Fresh prompt + task description. No channel history.  
 **Lifecycle:** Fire-and-forget or long-running. Reports status via `set_status` tool.
 
@@ -106,6 +106,7 @@ System-level observer. Primary job: generate the **memory bulletin** — a perio
 Also observes system-wide signals for future health monitoring and memory consolidation.
 
 **Tools (bulletin generation):** memory_recall, memory_save  
+**Tools (interactive cortex chat):** memory + worker tools, `spacebot_docs`, `config_inspect`, task board tools  
 **Tools (future health monitoring):** memory_consolidate, system_monitor  
 **Context:** Fresh per bulletin run. No compaction needed.
 
@@ -173,12 +174,16 @@ src/
 │   ├── react.rs        — add emoji reaction (channel only)
 │   ├── memory_save.rs  — write memory to store (branch + cortex + compactor)
 │   ├── memory_recall.rs— search + curate memories (branch only)
-│   ├── channel_recall.rs— retrieve transcript from other channels (branch only)
+│   ├── channel_recall.rs— retrieve transcript from any channel (branch only)
 │   ├── set_status.rs   — update worker status (workers only)
-│   ├── shell.rs        — execute shell commands (task workers)
+│   ├── shell.rs        — execute shell commands and subprocesses (task workers)
 │   ├── file.rs         — read/write/list files (task workers)
-│   ├── exec.rs         — run subprocess (task workers)
 │   ├── browser.rs      — web browsing (task workers)
+│   ├── task_create.rs  — create task-board task (branch + cortex chat)
+│   ├── task_list.rs    — list task-board tasks (branch + cortex chat)
+│   ├── task_update.rs  — update task-board task (branch + cortex chat)
+│   ├── spacebot_docs.rs — read embedded Spacebot docs/changelog (branch + cortex chat)
+│   ├── config_inspect.rs — inspect live runtime config (cortex chat)
 │   └── cron.rs         — cron management (channel only)
 │
 ├── memory.rs           → memory/
@@ -285,8 +290,8 @@ let branch_history = channel_history.clone();
 
 **ToolServer topology:**
 - Per-channel `ToolServer` (no memory tools, just channel action tools added per turn)
-- Per-branch `ToolServer` with memory tools (memory_save, memory_recall)
-- Per-worker `ToolServer` with task-specific tools (shell, file, exec)
+- Per-branch `ToolServer` with memory tools (memory_save, memory_recall, memory_delete), channel recall, docs introspection (`spacebot_docs`), and task-board tools
+- Per-worker `ToolServer` with task-specific tools (shell, file)
 - Per-cortex `ToolServer` with memory_save
 
 **Max turns:** Rig defaults to 0 (single call). Always set explicitly.
@@ -374,7 +379,7 @@ Phase 6 — Hardening:
 
 These are validated patterns from research (see `docs/research/pattern-analysis.md`). Implement them when building the relevant module.
 
-**Tool nudging:** When an LLM responds with text instead of tool calls in the first 2 iterations, inject "Please proceed and use the available tools." Implement in `SpacebotHook.on_completion_response()`. Workers benefit most.
+**Tool nudging / outcome gate:** Workers cannot exit with a text-only response until they signal a terminal outcome via `set_status(kind: "outcome")`. If a worker returns text without an outcome signal, the hook fires `Terminate` and retries with a nudge prompt (up to 2 retries). After retries are exhausted the worker fails with `PromptCancelled`. See `docs/design-docs/tool-nudging.md`.
 
 **Fire-and-forget DB writes:** `tokio::spawn` for conversation history saves, memory writes, worker log persistence. User gets their response immediately.