feat: the agent's identity and soul are two schema-checked documents

[eastriverlee]

What to look at

• internal/persona/schema/identity.schema.json, soul.schema.json, and user.schema.json: the three documents' shape. The identity carries names[] (every one the agent's own, the first is how it introduces itself) and an optional handle; a person's document carries callMe, about, preferences, tone, language. additionalProperties: false, ceilings on every list and string, schemaVersion pinned to 1. These are the contract the host copies; a drift test on the host side compares its copy with these files.
• internal/persona/persona.go: parse, normalize, canonical form. render.go: the instruction block the prompt gets, and the AgentIdentity the turn briefing introduces itself with.
• internal/agentruntime/requester_persona.go: at every launch the requester's private/people/<personID>/.internkim/user.json is read as that person through the workspace actor, rendered, and appended to the turn's host instruction, for that person only. The home is mode 0700, so the service never opens it itself; a refused document is logged as agentruntime.requester_persona_rejected.
• internal/httpserver/persona_handler.go: GET and PUT /admin/api/persona/user?personID= read and write that file the same way for a host that edits it on the person's behalf; a refused document answers 400 naming the field and writes nothing.
• internal/app/application.go: identity.json and soul.json replace BOT_PROFILE.yaml, IDENTITY.md, and SOUL.md; a refused document is logged as application.persona_document_rejected and left out.

What the model now sees

Instead of a YAML dump and two pasted markdown files, one block per document, for example:

Identity:
- Your name is 김인턴 (Intern Kim).
- People mention you as @internkim.
- People also write your name as "인턴킴", "intern kim".
- Your role: 회사의 AI 인턴
- Your emoji: 🐱
- When asked who you are, introduce yourself like this: …

What you hold to:
- …
What you never do:
- …
Tone: keep a polite register; sound warm, brief.
Language: write in ko unless something else decides it; answer in the language the requester wrote in.

Under two hundred tokens with every field filled; the ceilings keep it there. A person's document adds one more block, The person asking has told you how they want to work with you:, of at most eight sentences plus a tone and a language line.

Evidence

internal/persona tests cover normalization, rendering, refusal of unknown fields, wrong versions, over-long values, duplicate list items, and a stable canonical round trip. internal/app tests cover the prompt, the identity, and a refused document staying out with its reason recorded. go test ./... passes.

🤖 Generated with Claude Code