dogfood: install workspace + openclaw profile on solo-mise itself

Adds the full bootstrap set (AGENTS, CLAUDE, SOUL, USER, MEMORY,
IDENTITY, HEARTBEAT, SAFETY_RULES, INSTALL_FOR_AGENTS, DREAMS, TOOLS),
three starter memory cards, the openclaw config fragments under
.solo-mise/openclaw/, and a custom dev-focused TOOLS.md. AGENTS.md
gets a solo-mise-specific section pinning the safety invariants
earned from the Codex review (opt-in ingester defaults, home-dir
guard, dry-run mkdir-skip, verbatim inbox).

Pre-push hook activated via core.hooksPath.

Author: solomonneas

.solo-mise/openclaw/README.md

@@ -0,0 +1,40 @@
+# OpenClaw Fragments
+
+These are JSON fragments meant to be inspected and merged by hand into your `~/.openclaw/openclaw.json`. `solo-mise` does not mutate your live OpenClaw config; it generates fragments and lets you review them first.
+
+## Files
+
+| Fragment | Purpose |
+|----------|---------|
+| `model-aliases.openclaw.json` | Suggested alias map under `agents.defaults.models`. |
+| `ollama-memory-search.openclaw.json` | Local Ollama embeddings for memory search. |
+| `acp-escalation.openclaw.json` | ACP escalation lane via the `acpx` plugin. |
+
+## Merge
+
+`jq` is the safest way to merge a fragment into a live config without losing surrounding keys:
+
+```bash
+# Inspect first
+jq . solo-mise-fragments/model-aliases.openclaw.json
+
+# Merge (replace MERGE_PATH and re-check before saving)
+jq -s '.[0] * .[1]' ~/.openclaw/openclaw.json solo-mise-fragments/model-aliases.openclaw.json \
+  > /tmp/openclaw.json.merged
+diff ~/.openclaw/openclaw.json /tmp/openclaw.json.merged
+mv /tmp/openclaw.json.merged ~/.openclaw/openclaw.json
+```
+
+## Verification
+
+```bash
+solo-mise doctor --target ~/.openclaw/workspace --harness openclaw
+```
+
+The doctor reports which fragments your live config has picked up and which checks still need manual work.
+
+## Gotchas
+
+- Aliases referencing `<provider/...>` placeholders must be replaced with real ids before merging.
+- The ACP fragment assumes you have already installed `acpx` (see [solos-cookbook/ai-stack/acp-claude-code.md](https://github.com/solomonneas/solos-cookbook) for the install path).
+- `openclaw doctor` (the OpenClaw tool, not `solo-mise doctor`) has historically rewritten `openai-codex/*` prefixes on certain versions. If you use OAuth-only auth, audit `agents.defaults.model.primary` after any OpenClaw upgrade.

.solo-mise/openclaw/acp-escalation.openclaw.json

@@ -0,0 +1,33 @@
+{
+  "_comment": [
+    "FRAGMENT - inspect before merging into your openclaw.json.",
+    "",
+    "ACP escalation wrapper: route harder reasoning tasks to Claude Code via ACP",
+    "while keeping the main agent on a cheaper coder model.",
+    "",
+    "Requires acpx plugin: https://github.com/agentclientprotocol/claude-agent-acp",
+    "",
+    "Replace placeholders before merging:",
+    "  <provider/main-model-id>      - your main coder model alias or full id",
+    "  <provider/escalation-model>   - the model id that routes through ACP"
+  ],
+  "plugins": {
+    "entries": {
+      "acpx": {
+        "command": "${HOME}/.openclaw/vendor/acpx/node_modules/.bin/acpx"
+      }
+    }
+  },
+  "agents": {
+    "list": {
+      "escalation": {
+        "model": "<provider/escalation-model>",
+        "description": "ACP-routed reasoning lane. Use for refactors, architecture review, academic work.",
+        "tools": {
+          "allow": ["group:fs", "group:runtime", "sessions_*"]
+        },
+        "thinkingDefault": "xhigh"
+      }
+    }
+  }
+}

.solo-mise/openclaw/model-aliases.openclaw.json

@@ -0,0 +1,21 @@
+{
+  "_comment": [
+    "FRAGMENT - inspect before merging into your openclaw.json.",
+    "Generated by `solo-mise openclaw-fragments`. solo-mise never mutates your live config.",
+    "",
+    "Suggested merge target: agents.defaults.models",
+    "Replace <provider/model-id> with the actual provider-prefixed model id you want this alias to resolve to.",
+    "Aliases below are conventions used by the solo-mise reference setup; adapt freely."
+  ],
+  "agents": {
+    "defaults": {
+      "models": {
+        "main": "<provider/main-model-id>",
+        "coder": "<provider/coder-model-id>",
+        "cron": "<provider/cron-model-id>",
+        "fast": "<provider/fast-model-id>",
+        "escalation": "<provider/escalation-model-id>"
+      }
+    }
+  }
+}

.solo-mise/openclaw/ollama-memory-search.openclaw.json

@@ -0,0 +1,24 @@
+{
+  "_comment": [
+    "FRAGMENT - inspect before merging into your openclaw.json.",
+    "",
+    "Wires a local Ollama embedding model into OpenClaw's memory search.",
+    "Assumes Ollama is running on http://localhost:11434 with an embedding model pulled.",
+    "Replace <embedding-model> with the actual model name (e.g. nomic-embed-text)."
+  ],
+  "memory": {
+    "search": {
+      "embeddings": {
+        "provider": "ollama",
+        "baseUrl": "http://localhost:11434",
+        "model": "<embedding-model>",
+        "dimensions": 768
+      },
+      "index": {
+        "path": "memory/cards",
+        "include": ["*.md"],
+        "exclude": ["handoff-inbox/**", "processed/**"]
+      }
+    }
+  }
+}

.solo-mise/policies/public-content.json

@@ -0,0 +1,28 @@
+{
+  "_comment": [
+    "Public-content policy: stricter than public-repo. Applied to blog posts,",
+    "social drafts, and docs that will be published, not just pushed.",
+    "Use via: solo-mise scrub --policy public-content"
+  ],
+  "_solo_mise_version": "0.1.0",
+  "categories": {
+    "secret": "block",
+    "private-network": "block",
+    "private-identity": "block",
+    "attribution": "block",
+    "tooling": "block"
+  },
+  "rules": {
+    "loopback-ipv4": "block",
+    "localhost-port": "block",
+    "private-ipv4": "block",
+    "api-key": "block",
+    "oauth-token": "block",
+    "ssh-private-key": "block",
+    "claude-coauthor": "block",
+    "ai-attribution-trailer": "block",
+    "private-hostname": "block",
+    "personal-email": "block",
+    "internal-username": "block"
+  }
+}

.solo-mise/policies/public-repo.json

@@ -0,0 +1,27 @@
+{
+  "_comment": [
+    "Public-repo policy: blocks leaks in any file pushed to a public repo.",
+    "Used by solo-mise pre-push hook and `solo-mise scrub`.",
+    "Override by pointing CONTENT_GUARD_POLICY at your own copy of this file."
+  ],
+  "_solo_mise_version": "0.1.0",
+  "categories": {
+    "secret": "block",
+    "private-network": "block",
+    "private-identity": "block",
+    "attribution": "block",
+    "tooling": "warn"
+  },
+  "rules": {
+    "loopback-ipv4": "warn",
+    "localhost-port": "warn",
+    "private-ipv4": "block",
+    "api-key": "block",
+    "oauth-token": "block",
+    "ssh-private-key": "block",
+    "claude-coauthor": "block",
+    "ai-attribution-trailer": "block",
+    "private-hostname": "block",
+    "personal-email": "warn"
+  }
+}

AGENTS.md

@@ -0,0 +1,65 @@
+# AGENTS.md - Workspace Rules
+
+## Memory Owner
+
+The configured memory owner is **OpenClaw**. Side harnesses may keep local session context, but durable knowledge must be written as a Memory Handoff in `.claude/memory-handoffs/`. The memory owner ingests those handoffs into canonical durable memory.
+
+Do not create a second canonical memory system. If a session produced durable knowledge, write the handoff and let the owner route it.
+
+## Every Session
+
+- Read the repo-local instructions before editing.
+- Prefer root-cause fixes over surface patches.
+- Run the smallest meaningful verification before claiming success.
+- Ask before destructive, production-impacting, or dependency-adding work.
+
+## Memory Handoff
+
+If a session discovers durable knowledge - architecture decisions, workflow changes, non-obvious fixes, setup gotchas, security findings, reusable commands, durable research, or user preferences - create a handoff at the end of the task.
+
+Write the handoff to `.claude/memory-handoffs/<YYYY-MM-DD-HHMM>-<slug>.md` using the format in `.claude/memory-handoffs/TEMPLATE.md`.
+
+Do not wait to be reminded. Do not edit canonical memory directly unless this is the memory owner.
+
+## Safety
+
+- Never expose secrets, private hostnames, account IDs, or internal endpoints in public output.
+- Use deterministic scrubbers before publishing generated content.
+- Do not bypass security checks unless the user explicitly accepts the risk.
+- Read `SAFETY_RULES.md` for hard boundaries.
+
+## Multi-Agent Workflow
+
+- Delegate bounded tasks with clear ownership.
+- Keep write scopes separate when multiple agents work in parallel.
+- Integrate results before reporting completion.
+
+## Solo-mise repo-specific rules
+
+This is the source repo for `solo-mise` itself. The files here are templates that get installed into *other* directories, so the bar for safety is higher than usual.
+
+### Before committing
+
+- `python -m pytest -q` must pass (currently 40 tests).
+- `PYTHONPATH=$HOME/repos/content-guard/src python -m content_guard scan . --policy $HOME/repos/content-guard/policies/public-repo.json` must report `Clean.` or warn-only.
+- New profile JSON entries must use relative paths only - no absolute paths, no `..` segments. The path validator in `src/solo_mise/init.py:_ensure_safe_rel` enforces this at runtime; tests cover it in `tests/test_init.py::test_init_rejects_unsafe_profile_paths`.
+
+### Invariants worth not breaking
+
+- **Ingester `promote_cards` and `route_documents` default to `False`.** They are opt-in. Codex flagged the original "default on" as a BLOCKER for a public-safety installer. If you find yourself flipping these, write a memory handoff explaining why first.
+- **`init` refuses `$HOME` as target unless `--allow-home`.** Don't relax this without an alternative guard.
+- **`init --dry-run` does not mkdir.** Verified by `test_dry_run_creates_no_files_or_dirs`.
+- **Inboxed handoffs are copied verbatim, not reconstructed.** Reviewers need to see what the harness actually wrote.
+
+### Template hygiene
+
+- Every text template under `src/solo_mise/templates/` gets `{{placeholder}}` substitution. Keep placeholders bounded to: `memory_owner`, `memory_owner_name`, `profile`, `harness`. New placeholders require a corresponding entry in `init.py::context`.
+- Templates must pass content-guard's `public-repo` policy. The repo's own pre-push hook scans them. Inline allow tags (`<!-- content-guard: allow <rule-id> -->`) are okay for documented examples; bulk-disabling rules is not.
+
+### Releases
+
+See `RELEASE.md` for the checklist. Tag, push, verify pipx install from tag.
+
+### OpenClaw integration
+
+This repo is dogfooded with `--profile openclaw`. The fragments under `.solo-mise/openclaw/` are placeholders - if you actually wire this repo into a live OpenClaw workspace, edit them with real provider/model ids before merging into `~/.openclaw/openclaw.json`. The fragments use `<provider/main-model-id>` style sentinels that will fail the gateway if merged unedited.

CLAUDE.md

@@ -0,0 +1,24 @@
+# CLAUDE.md - Claude Code Rules
+
+## Project Rules
+
+- Follow repo-local `AGENTS.md` when present.
+- Use this file only for Claude Code-specific behavior.
+
+## Memory Handoff
+
+The canonical memory owner on this workspace is **OpenClaw**. Claude Code may keep local session context, but durable knowledge must be written as a Memory Handoff in `.claude/memory-handoffs/`. See `AGENTS.md` for the full rule.
+
+At the end of any substantial task, check whether the session produced durable knowledge. If yes, create a Memory Handoff using the standard format in `.claude/memory-handoffs/TEMPLATE.md`. Do this without waiting to be reminded.
+
+## Closeout
+
+- Report the verification command that was run.
+- If verification could not run, state the blocker.
+- If a Memory Handoff was warranted, confirm it was written.
+
+## Git
+
+- Do not add `Co-Authored-By` or AI-attribution trailers to commits.
+- Use conventional commit messages.
+- Never bypass pre-push hooks unless the user has explicitly accepted the risk.

DREAMS.md

@@ -0,0 +1,13 @@
+# DREAMS.md
+
+Reflection and dreaming output lands here when enabled.
+
+## Rules
+
+- Treat entries as suggestions until reviewed.
+- Promote only durable, verified findings.
+- Do not treat generated reflections as canonical facts.
+
+## Entries
+
+Add reviewed entries below or link to generated files.

HEARTBEAT.md

@@ -0,0 +1,19 @@
+# HEARTBEAT.md
+
+## Cadence
+
+- Check in on the configured schedule.
+- Keep heartbeat messages short and operational.
+
+## Include
+
+- Current focus
+- Blockers
+- Important failed checks
+- Next useful action
+
+## Exclude
+
+- Private identifiers in public destinations
+- Raw logs unless requested
+- Speculative status (only report what you verified)