fix: feat(20g): migrate all remaining agents to .profile + remove ops repo journal dirs (#90)

AGENTS.md

@@ -9,6 +9,9 @@ forge, implement them, review PRs, plan from the vision, and keep the system
 healthy — all via cron and `claude -p`. The dispatcher executes formula-based
 operational tasks.
 
+Each agent has a `.profile` repository on Forgejo that stores lessons learned
+from prior sessions, providing continuous improvement across runs.
+
 > **Note:** The vault is being redesigned as a PR-based approval workflow on the
 > ops repo (see issues #73-#77). See [docs/VAULT.md](docs/VAULT.md) for details. Old vault scripts are being removed.
 
@@ -39,9 +42,6 @@ disinto-ops/             (ops repo — {project}-ops)
 │   ├── approved/  approved vault items
 │   ├── fired/     executed vault items
 │   └── rejected/  rejected vault items
-├── journal/
-│   ├── planner/   daily planning logs
-│   └── supervisor/ operational health logs
 ├── knowledge/     shared agent knowledge + best practices
 ├── evidence/      engagement data, experiment results
 ├── portfolio.md   addressables + observables
@@ -49,6 +49,35 @@ disinto-ops/             (ops repo — {project}-ops)
 └── RESOURCES.md   accounts, tokens (refs), infra inventory
 ```
 
+> **Note:** Journal directories (`journal/planner/` and `journal/supervisor/`) have been removed from the ops repo. Agent journals are now stored in each agent's `.profile` repo on Forgejo.
+
+## Agent .profile Model
+
+Each agent has a `.profile` repository on Forgejo that stores:
+- `formula.toml` — agent-specific formula (optional, falls back to `formulas/<agent>.toml`)
+- `knowledge/lessons-learned.md` — distilled lessons from journal entries
+- `journal/` — session reflection entries (archived after digestion)
+
+### How it works
+
+1. **Pre-session:** The agent calls `formula_prepare_profile_context()` which:
+   - Resolves the agent's Forgejo identity from their token
+   - Clones/pulls the `.profile` repo to a local cache
+   - Loads `knowledge/lessons-learned.md` into `LESSONS_CONTEXT` for prompt injection
+   - Automatically digests journals if >10 undigested entries exist
+
+2. **Prompt injection:** Lessons are injected into the agent prompt:
+   ```
+   ## Lessons learned (from .profile/knowledge/lessons-learned.md)
+   <abstracted lessons from prior sessions>
+   ```
+
+3. **Post-session:** The agent calls `profile_write_journal` which:
+   - Generates a reflection entry about the session
+   - Writes it to `journal/issue-{N}.md`
+   - Commits and pushes to the `.profile` repo
+   - Journals are archived after being digested into lessons-learned.md
+
 > **Terminology note:** "Formulas" in this repo are TOML issue templates in `formulas/` that
 > orchestrate multi-step agent tasks (e.g., `run-gardener.toml`, `run-planner.toml`). This is
 > distinct from "processes" described in `docs/EVIDENCE-ARCHITECTURE.md`, which are measurement

bin/disinto

@@ -894,8 +894,6 @@ setup_ops_repo() {
   mkdir -p "${ops_root}/vault/approved"
   mkdir -p "${ops_root}/vault/fired"
   mkdir -p "${ops_root}/vault/rejected"
-  mkdir -p "${ops_root}/journal/planner"
-  mkdir -p "${ops_root}/journal/supervisor"
   mkdir -p "${ops_root}/knowledge"
   mkdir -p "${ops_root}/evidence/engagement"
 
@@ -914,9 +912,6 @@ ${ops_name}/
 │   ├── approved/         # approved vault items
 │   ├── fired/            # executed vault items
 │   └── rejected/         # rejected vault items
-├── journal/
-│   ├── planner/          # daily planning logs
-│   └── supervisor/       # operational health logs
 ├── knowledge/            # shared agent knowledge and best practices
 ├── evidence/             # engagement data, experiment results
 ├── portfolio.md          # addressables + observables
@@ -924,6 +919,8 @@ ${ops_name}/
 └── RESOURCES.md          # accounts, tokens (refs), infra inventory
 \`\`\`
 
+> **Note:** Journal directories (journal/planner/ and journal/supervisor/) have been removed from the ops repo. Agent journals are now stored in each agent's .profile repo on Forgejo.
+
 ## Branch protection
 
 - \`main\`: 2 reviewers required for vault items

gardener/gardener-run.sh

@@ -64,10 +64,19 @@ check_memory 2000
 
 log "--- Gardener run start ---"
 
+# ── Resolve agent identity for .profile repo ────────────────────────────
+if [ -z "${AGENT_IDENTITY:-}" ] && [ -n "${FORGE_GARDENER_TOKEN:-}" ]; then
+  AGENT_IDENTITY=$(curl -sf -H "Authorization: token ${FORGE_GARDENER_TOKEN}" \
+    "${FORGE_URL:-http://localhost:3000}/api/v1/user" 2>/dev/null | jq -r '.login // empty' 2>/dev/null || true)
+fi
+
 # ── Load formula + context ───────────────────────────────────────────────
-load_formula "$FACTORY_ROOT/formulas/run-gardener.toml"
+load_formula_or_profile "gardener" "$FACTORY_ROOT/formulas/run-gardener.toml" || exit 1
 build_context_block AGENTS.md
 
+# ── Prepare .profile context (lessons injection) ─────────────────────────
+formula_prepare_profile_context
+
 # ── Read scratch file (compaction survival) ───────────────────────────────
 SCRATCH_CONTEXT=$(read_scratch_context "$SCRATCH_FILE")
 SCRATCH_INSTRUCTION=$(build_scratch_instruction "$SCRATCH_FILE")
@@ -105,7 +114,10 @@ You have full shell access and --dangerously-skip-permissions.
 Fix what you can. File vault items for what you cannot. Do NOT ask permission — act first, report after.
 
 ## Project context
-${CONTEXT_BLOCK}
+${CONTEXT_BLOCK}${LESSONS_INJECTION:+## Lessons learned
+${LESSONS_INJECTION}
+
+}
 ${SCRATCH_CONTEXT:+${SCRATCH_CONTEXT}
 }
 ## Result file
@@ -334,5 +346,8 @@ else
   rm -f "$SCRATCH_FILE"
 fi
 
+# Write journal entry post-session
+profile_write_journal "gardener-run" "Gardener run $(date -u +%Y-%m-%d)" "complete" "" || true
+
 rm -f "$GARDENER_PR_FILE"
 log "--- Gardener run done ---"

lib/formula-session.sh

@@ -13,6 +13,7 @@
 #   build_prompt_footer    [EXTRA_API]      — sets PROMPT_FOOTER (API ref + env + phase)
 #   run_formula_and_monitor AGENT [TIMEOUT] [CALLBACK] — session start, inject, monitor, log
 #   formula_phase_callback PHASE           — standard crash-recovery callback
+#   formula_prepare_profile_context        — load lessons from .profile repo (pre-session)
 #
 # Requires: lib/agent-session.sh sourced first (for create_agent_session,
 # agent_kill_session, agent_inject_into_session).
@@ -350,6 +351,17 @@ ${lessons_content}"
   return 0
 }
 
+# formula_prepare_profile_context
+# Pre-session: loads lessons from .profile repo and sets LESSONS_CONTEXT for prompt injection.
+# Single shared function to avoid duplicate boilerplate across agent scripts.
+# Requires: AGENT_IDENTITY, FORGE_TOKEN, FORGE_URL (via profile_load_lessons).
+# Exports: LESSONS_CONTEXT (set by profile_load_lessons).
+# Returns 0 on success, 1 if agent has no .profile repo (silent no-op).
+formula_prepare_profile_context() {
+  profile_load_lessons || true
+  LESSONS_INJECTION="${LESSONS_CONTEXT:-}"
+}
+
 # profile_write_journal ISSUE_NUM ISSUE_TITLE OUTCOME [FILES_CHANGED]
 # Post-session: writes a reflection journal entry after work completes.
 # Returns 0 on success, 1 on failure.

planner/planner-run.sh

@@ -45,12 +45,6 @@ WORKTREE="/tmp/${PROJECT_NAME}-planner-run"
 
 log() { echo "[$(date -u +%Y-%m-%dT%H:%M:%S)Z] $*" >> "$LOG_FILE"; }
 
-# Ensure AGENT_IDENTITY is set for profile functions
-if [ -z "${AGENT_IDENTITY:-}" ] && [ -n "${FORGE_PLANNER_TOKEN:-}" ]; then
-  AGENT_IDENTITY=$(curl -sf -H "Authorization: token ${FORGE_PLANNER_TOKEN}" \
-    "${FORGE_URL:-http://localhost:3000}/api/v1/user" 2>/dev/null | jq -r '.login // empty' 2>/dev/null || true)
-fi
-
 # ── Guards ────────────────────────────────────────────────────────────────
 check_active planner
 acquire_cron_lock "/tmp/planner-run.lock"
@@ -58,8 +52,14 @@ check_memory 2000
 
 log "--- Planner run start ---"
 
+# ── Resolve agent identity for .profile repo ────────────────────────────
+if [ -z "${AGENT_IDENTITY:-}" ] && [ -n "${FORGE_PLANNER_TOKEN:-}" ]; then
+  AGENT_IDENTITY=$(curl -sf -H "Authorization: token ${FORGE_PLANNER_TOKEN}" \
+    "${FORGE_URL:-http://localhost:3000}/api/v1/user" 2>/dev/null | jq -r '.login // empty' 2>/dev/null || true)
+fi
+
 # ── Load formula + context ───────────────────────────────────────────────
-load_formula "$FACTORY_ROOT/formulas/run-planner.toml"
+load_formula_or_profile "planner" "$FACTORY_ROOT/formulas/run-planner.toml" || exit 1
 build_context_block VISION.md AGENTS.md ops:RESOURCES.md ops:prerequisites.md
 
 # ── Build structural analysis graph ──────────────────────────────────────
@@ -78,9 +78,8 @@ $(cat "$MEMORY_FILE")
 "
 fi
 
-# ── Load lessons from .profile repo (pre-session) ────────────────────────
+# ── Prepare .profile context (lessons injection) ─────────────────────────
-profile_load_lessons || true
+formula_prepare_profile_context
-LESSONS_INJECTION="${LESSONS_CONTEXT:-}"
 
 # ── Read scratch file (compaction survival) ───────────────────────────────
 SCRATCH_CONTEXT=$(read_scratch_context "$SCRATCH_FILE")
@@ -96,8 +95,7 @@ build_sdk_prompt_footer "
 PROMPT="You are the strategic planner for ${FORGE_REPO}. Work through the formula below.
 
 ## Project context
-${CONTEXT_BLOCK}${MEMORY_BLOCK}
+${CONTEXT_BLOCK}${MEMORY_BLOCK}${LESSONS_INJECTION:+## Lessons learned
-${LESSONS_INJECTION:+## Lessons learned
 ${LESSONS_INJECTION}
 
 }

predictor/predictor-run.sh

@@ -53,13 +53,22 @@ check_memory 2000
 
 log "--- Predictor run start ---"
 
+# ── Resolve agent identity for .profile repo ────────────────────────────
+if [ -z "${AGENT_IDENTITY:-}" ] && [ -n "${FORGE_PREDICTOR_TOKEN:-}" ]; then
+  AGENT_IDENTITY=$(curl -sf -H "Authorization: token ${FORGE_PREDICTOR_TOKEN}" \
+    "${FORGE_URL:-http://localhost:3000}/api/v1/user" 2>/dev/null | jq -r '.login // empty' 2>/dev/null || true)
+fi
+
 # ── Load formula + context ───────────────────────────────────────────────
-load_formula "$FACTORY_ROOT/formulas/run-predictor.toml"
+load_formula_or_profile "predictor" "$FACTORY_ROOT/formulas/run-predictor.toml" || exit 1
 build_context_block AGENTS.md ops:RESOURCES.md VISION.md ops:prerequisites.md
 
 # ── Build structural analysis graph ──────────────────────────────────────
 build_graph_section
 
+# ── Prepare .profile context (lessons injection) ─────────────────────────
+formula_prepare_profile_context
+
 # ── Read scratch file (compaction survival) ───────────────────────────────
 SCRATCH_CONTEXT=$(read_scratch_context "$SCRATCH_FILE")
 SCRATCH_INSTRUCTION=$(build_scratch_instruction "$SCRATCH_FILE")
@@ -82,9 +91,13 @@ Use WebSearch for external signal scanning — be targeted (project dependencies
 and tools only, not general news). Limit to 3 web searches per run.
 
 ## Project context
-${CONTEXT_BLOCK}
+${CONTEXT_BLOCK}${LESSONS_INJECTION:+## Lessons learned
+${LESSONS_INJECTION}
+
+}
 ${GRAPH_SECTION}
-${SCRATCH_CONTEXT}
+${SCRATCH_CONTEXT:+${SCRATCH_CONTEXT}
+}
 ## Formula
 ${FORMULA_CONTENT}
 
@@ -98,5 +111,8 @@ formula_worktree_setup "$WORKTREE"
 agent_run --worktree "$WORKTREE" "$PROMPT"
 log "agent_run complete"
 
+# Write journal entry post-session
+profile_write_journal "predictor-run" "Predictor run $(date -u +%Y-%m-%d)" "complete" "" || true
+
 rm -f "$SCRATCH_FILE"
 log "--- Predictor run done ---"

review/review-pr.sh

@@ -27,6 +27,8 @@ source "$(dirname "$0")/../lib/env.sh"
 source "$(dirname "$0")/../lib/ci-helpers.sh"
 source "$(dirname "$0")/../lib/worktree.sh"
 source "$(dirname "$0")/../lib/agent-sdk.sh"
+# shellcheck source=../lib/formula-session.sh
+source "$(dirname "$0")/../lib/formula-session.sh"
 
 # Auto-pull factory code to pick up merged fixes before any logic runs
 git -C "$FACTORY_ROOT" pull --ff-only origin main 2>/dev/null || true
@@ -56,6 +58,14 @@ if [ -f "$LOGFILE" ] && [ "$(stat -c%s "$LOGFILE" 2>/dev/null || echo 0)" -gt 10
   mv "$LOGFILE" "$LOGFILE.old"
 fi
 
+# =============================================================================
+# RESOLVE AGENT IDENTITY FOR .PROFILE REPO
+# =============================================================================
+if [ -z "${AGENT_IDENTITY:-}" ] && [ -n "${FORGE_TOKEN:-}" ]; then
+  AGENT_IDENTITY=$(curl -sf -H "Authorization: token ${FORGE_TOKEN}" \
+    "${FORGE_URL:-http://localhost:3000}/api/v1/user" 2>/dev/null | jq -r '.login // empty' 2>/dev/null || true)
+fi
+
 # =============================================================================
 # MEMORY GUARD
 # =============================================================================
@@ -180,6 +190,11 @@ else
   log "WARN: build-graph.py failed — continuing without structural analysis"
 fi
 
+# =============================================================================
+# LOAD LESSONS FROM .PROFILE REPO (PRE-SESSION)
+# =============================================================================
+formula_prepare_profile_context
+
 # =============================================================================
 # BUILD PROMPT
 # =============================================================================
@@ -193,6 +208,7 @@ FORMULA=$(cat "${FACTORY_ROOT}/formulas/review-pr.toml")
     "$PR_BODY" "$FILES" "$DNOTE" "$DIFF"
   [ -n "$PREV_CONTEXT" ] && printf '%s\n' "$PREV_CONTEXT"
   [ -n "$GRAPH_SECTION" ] && printf '%s\n' "$GRAPH_SECTION"
+  [ -n "$LESSONS_INJECTION" ] && printf '\n## Lessons learned\n%s\n\n' "$LESSONS_INJECTION"
   printf '\n## Formula\n%s\n\n## Environment\nREVIEW_OUTPUT_FILE=%s\nFORGE_API=%s\nPR_NUMBER=%s\nFACTORY_ROOT=%s\n' \
     "$FORMULA" "$OUTPUT_FILE" "$API" "$PR_NUMBER" "$FACTORY_ROOT"
   printf 'NEVER echo the actual token — always reference ${FORGE_TOKEN} or ${FORGE_REVIEW_TOKEN}.\n'
@@ -298,4 +314,7 @@ case "$VERDICT" in
     ;;
 esac
 
+# Write journal entry post-session
+profile_write_journal "review-${PR_NUMBER}" "Review PR #${PR_NUMBER} (${VERDICT})" "${VERDICT,,}" "" || true
+
 log "DONE: ${VERDICT} (re-review: ${IS_RE_REVIEW})"

supervisor/supervisor-run.sh

@@ -58,6 +58,12 @@ log "--- Supervisor run start ---"
 # ── Housekeeping: clean up stale crashed worktrees (>24h) ────────────────
 cleanup_stale_crashed_worktrees 24
 
+# ── Resolve agent identity for .profile repo ────────────────────────────
+if [ -z "${AGENT_IDENTITY:-}" ] && [ -n "${FORGE_SUPERVISOR_TOKEN:-}" ]; then
+  AGENT_IDENTITY=$(curl -sf -H "Authorization: token ${FORGE_SUPERVISOR_TOKEN}" \
+    "${FORGE_URL:-http://localhost:3000}/api/v1/user" 2>/dev/null | jq -r '.login // empty' 2>/dev/null || true)
+fi
+
 # ── Collect pre-flight metrics ────────────────────────────────────────────
 log "Running preflight.sh"
 PREFLIGHT_OUTPUT=""
@@ -68,9 +74,12 @@ else
 fi
 
 # ── Load formula + context ───────────────────────────────────────────────
-load_formula "$FACTORY_ROOT/formulas/run-supervisor.toml"
+load_formula_or_profile "supervisor" "$FACTORY_ROOT/formulas/run-supervisor.toml" || exit 1
 build_context_block AGENTS.md
 
+# ── Prepare .profile context (lessons injection) ─────────────────────────
+formula_prepare_profile_context
+
 # ── Read scratch file (compaction survival) ───────────────────────────────
 SCRATCH_CONTEXT=$(read_scratch_context "$SCRATCH_FILE")
 SCRATCH_INSTRUCTION=$(build_scratch_instruction "$SCRATCH_FILE")
@@ -91,7 +100,10 @@ Fix what you can. File vault items for what you cannot. Do NOT ask permission
 ${PREFLIGHT_OUTPUT}
 
 ## Project context
-${CONTEXT_BLOCK}
+${CONTEXT_BLOCK}${LESSONS_INJECTION:+## Lessons learned
+${LESSONS_INJECTION}
+
+}
 ${SCRATCH_CONTEXT:+${SCRATCH_CONTEXT}
 }
 Priority order: P0 memory > P1 disk > P2 stopped > P3 degraded > P4 housekeeping
@@ -105,5 +117,8 @@ ${PROMPT_FOOTER}"
 agent_run --worktree "$WORKTREE" "$PROMPT"
 log "agent_run complete"
 
+# Write journal entry post-session
+profile_write_journal "supervisor-run" "Supervisor run $(date -u +%Y-%m-%d)" "complete" "" || true
+
 rm -f "$SCRATCH_FILE"
 log "--- Supervisor run done ---"