hey-dave system map

hey-dave system map An architecture diagram generated by Archify. CLI · dave · run · init · doctor · Architecture component CLI dave · run · init · doctor UI adapters · TUI · dave run · bg host · Architecture component UI adapters TUI · dave run · bg host Runtime + context catalog · subject · policy · manifest · Core Runtime + context catalog subject · policy · manifest ConfigManager · merge · validate · undo · Architecture component ConfigManager merge · validate · undo Sessions · JSONL · context · compact · Core Sessions JSONL · context · compact AgentLoop · rounds · events · Core · core/loop.py AgentLoop rounds · events core/loop.py Providers · openai · codex · ollama · Architecture component Providers openai · codex · ollama PermissionGate · rules · cards · proposals · Core PermissionGate rules · cards · proposals Tools · fs · bash · delegate · plan · Architecture component Tools fs · bash · delegate · plan Skills · plugins · MCP · web · foreign sources · Architecture component Skills · plugins MCP · web · foreign sources SubagentRunner · Task charges · bounds · D.A.V.E. SubagentRunner Task charges · bounds State services · Core records · transactions · D.A.V.E. State services Core records · transactions npm prefix · XDG data · hey-dave/npm · Architecture component npm prefix XDG data · hey-dave/npm Pi shim · Node · one per ext · Architecture component Pi shim Node · one per ext Daemon · supervise · chat · API · Architecture component Daemon supervise · chat · API launch input · events settings turns persist stream tool calls allowed register delegate dave_* tools installs · Node env MCP stdio dave daemon supervises bg hosts Core D.A.V.E. Legend Frontend Backend Database Cloud Security Message bus External

Design rules

  • • One process, one user, one terminal
  • • The core emits events; TUI and dave run render them
  • • Everything is an extension of a small registry

Trust

  • • The model is untrusted: every call passes the gate
  • • Outward writes need a per-proposal yes
  • • Children inherit only read grants

Vault

  • • DaveState is the only vault writer
  • • Journal is append-only; views rebuild from it
  • • CoreState: isolated schema-2 foundation (stage 66)
  • • JSON/Markdown authority; transactions retain recovery images

Task sessions (stage 67)

  • • Schema-2 Tasks: persistent checklist and prepared switches
  • • Previous conversation or new session with selected Task memory

Portable memory and sources

  • • Schema-2 state owns audited subject Markdown, neutral conversations and allowed attachment copies. Private execution caches hold grants separately. Bounded Project refresh versions documentation without replacing authored knowledge.

Context review

  • • Init and /context use shared source drafts; expand and edit prose, select actual tools, and review before applying at a turn boundary. Setup rolls back on write or reload failure.

General and sidequests

  • • General uses ordinary permissions and isolated child memory/time. Reviewed promotion retains IDs and relocates owned data once.
  • • Sidequests offer Save or Save and switch. Busy switches wait/cancel; failed adoption restores old selection and manual pause.
  • • Missing-checkout returns offer attach or memory-only work; tool filtering and the gate both enforce the restriction.

Headless and remote Task work

  • • Headless supervision and owned reports share Task services. Paired chat offers standard recaps, same-workspace new/restore choices and literal board JSON intake.
  • • Expiring single-use text reviews bind conversation and graph. Returns preserve denials and the bridge; broader grants and workspace changes need terminal review.