@hybridlabor-api/aos 4.13.0 → 4.13.2

package/.claude/hooks/go-gate.mjs

@@ -129,9 +129,11 @@ function main() {
     try {
       input = JSON.parse(rawInput);
     } catch (e) {
-      // If we cannot parse hook input, fail closed
-      respond(true, false, `could not parse hook input: ${e.message}`, "unknown");
-      return;
+      // Harness unknown: deny JSON on stdout (Antigravity) plus stderr + exit 2 (Claude Code/Codex) closes every path.
+      const reason = `could not parse hook input: ${e.message}`;
+      console.log(JSON.stringify({ decision: "deny", reason: `[MECHANICAL GO-GATE BLOCKED] ${reason}` }));
+      process.stderr.write(`Blocked by go-gate hook: ${reason}\n`);
+      process.exit(2);
     }
   }
 

package/README.de.md

@@ -411,10 +411,6 @@ flowchart LR
 
 `@hybridlabor-api/heimdall-token-saver`: komprimiert wiederholte CLI-Ausgabe über Ambient Hooks auf jedem Harness. Reduziert Token-Overhead bei großen Projekten. Skill: `token-saver-config`.
 
-![Token savings with Heimdall Token Saver](assets/bdb_savings_graph_sketch.jpg)
-
-*Illustrative Skizze aus v3.x. Die Prozentwerte sind Schätzungen des Projekts, keine für dieses README durchgeführten Messungen.*
-
 ---
 
 ## Aktualisierung

package/README.md

@@ -411,10 +411,6 @@ flowchart LR
 
 `@hybridlabor-api/heimdall-token-saver`: compresses repeated CLI output via ambient hooks on every harness. Reduces token overhead on large projects. Skill: `token-saver-config`.
 
-![Token savings with Heimdall Token Saver](assets/bdb_savings_graph_sketch.jpg)
-
-*Illustrative sketch from v3.x. The percentages are the project's own estimates, not measurements made for this README.*
-
 ---
 
 ## Updating

package/README.pt.md

@@ -411,10 +411,6 @@ flowchart LR
 
 `@hybridlabor-api/heimdall-token-saver`: comprime saída CLI repetida via hooks ambiente em todo harness. Reduz sobrecarga de token em projetos grandes. Skill: `token-saver-config`.
 
-![Token savings with Heimdall Token Saver](assets/bdb_savings_graph_sketch.jpg)
-
-*Esboço ilustrativo da v3.x. Os percentuais são estimativas do próprio projeto, não medições feitas para este README.*
-
 ---
 
 ## Atualizando

package/bin/aos-uninstall.mjs

@@ -244,7 +244,7 @@ function execute(p) {
   if (existsSync(settings)) {
     try {
       const s = JSON.parse(readFileSync(settings, 'utf8'));
-      const bdb = ['go-gate.mjs', 'graph-gate.mjs', 'memb-inject.mjs', 'trail-relay.mjs'];
+      const bdb = ['go-gate.mjs', 'graph-gate.mjs', 'memb-inject.mjs', 'trail-relay.mjs', 'conventional-commits.mjs', 'env-file-protection.mjs'];
       let touched = false;
       for (const [event, entries] of Object.entries(s.hooks || {})) {
         const kept = entries.filter((e) => !(e.hooks || []).some((x) => bdb.some((n) => String(x.command).includes(n))));

package/installer.js

@@ -526,12 +526,24 @@ function loadInstallManifest(customPath = null) {
     return {};
 }
 
+// Temp file in the same directory + rename: a crash mid-write cannot leave a truncated manifest.
+function writeFileAtomic(filePath, data) {
+    const tmp = `${filePath}.${process.pid}.tmp`;
+    try {
+        fs.writeFileSync(tmp, data);
+        fs.renameSync(tmp, filePath);
+    } catch (e) {
+        try { fs.unlinkSync(tmp); } catch (_) {}
+        throw e;
+    }
+}
+
 function saveInstallManifest(manifest, customPath = null) {
     if (DRY_RUN) return;
     const manifestPath = customPath || getInstallManifestPath();
     try {
         fs.mkdirSync(path.dirname(manifestPath), { recursive: true });
-        fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));
+        writeFileAtomic(manifestPath, JSON.stringify(manifest, null, 2));
     } catch (e) {
         log.warn(`Could not write install manifest: ${e.message}`);
     }
@@ -978,7 +990,11 @@ function detectInstallState() {
                 } catch (e) { logDebug(e, 'operation'); }
             }
         }
-        if (!localVersion) localVersion = '3.8.0';
+        if (!localVersion) {
+            // ponytail: placeholder only feeds the version display/compare; pruning is driven by the file manifest, not this value.
+            log.step('Previous AOS version is unknown (no manifest); assuming 3.8.0 for the update comparison only.');
+            localVersion = '3.8.0';
+        }
     }
 
     const basePath = scriptDir.includes('_npx') ? path.join(homeDir, '.agents') : path.dirname(srcDir);
@@ -1039,7 +1055,7 @@ function saveManifest(data = {}) {
             platform: process.platform,
             ...data
         });
-        fs.writeFileSync(manifestPath, JSON.stringify(updated, null, 2));
+        writeFileAtomic(manifestPath, JSON.stringify(updated, null, 2));
     } catch (e) { logDebug(e, 'manifest read/parse'); }
 }
 
@@ -1218,6 +1234,20 @@ function syncSkillEntry(fullPath, dirName, targetSkillDir, excludeSkills) {
     }
 }
 
+function redactSecrets(text) {
+    return String(text)
+        .replace(/([\w.-]*(?:key|token|secret|passw(?:or)?d|auth|credential)[\w.-]*\s*[=:]\s*)("[^"]*"|'[^']*'|\S+)/gi, '$1[redacted]')
+        .replace(/\bBearer\s+\S+/gi, 'Bearer [redacted]')
+        .replace(/\b(?:sk|ghp|gho|ghs|xox[a-z])[-_][A-Za-z0-9_-]{16,}/g, '[redacted]');
+}
+
+// execFileSync error -> one message that keeps the child's own stderr/stdout (last 2 KB, redacted).
+function describeExecError(e) {
+    const out = [e && e.stderr, e && e.stdout].map((b) => (b ? b.toString() : '').trim()).filter(Boolean).join('\n');
+    const head = redactSecrets(String((e && e.message) || e).split('\n')[0]).slice(0, 300);
+    return out ? `${head}\n${redactSecrets(out.slice(-2048))}` : head;
+}
+
 function installStep(what, fn, hint) {
     try {
         return { ok: true, value: fn() };
@@ -1937,7 +1967,7 @@ async function installMemB(interactive) {
     // banner. Stop at the module that could not be fetched.
     if (!downloadOrUpdateModule('@hybridlabor-api/memb', membDir, 'memB Vector Engine')) {
         log.warn('Skipping memB setup: the module could not be downloaded.');
-        return;
+        return false;
     }
     await installDeja();
     if (DRY_RUN) {
@@ -1945,6 +1975,7 @@ async function installMemB(interactive) {
         return;
     }
 
+    let membOk = true;
     const reqFile = path.join(membDir, 'requirements.txt');
     const serverPy = path.join(membDir, 'src', 'backend', 'server.py');
     if (fs.existsSync(reqFile)) {
@@ -2017,10 +2048,12 @@ async function installMemB(interactive) {
                 );
                 if (repaired && !verifyPythonImports(venvPython, membDir, importCheck)) {
                     log.warn('memB dependency repair did not pass the import check; inspect the venv before starting the daemon.');
+                    membOk = false;
                 }
             }
         } catch (e) {
             log.warn(`Failed memB standalone venv setup: ${e.message}`);
+            membOk = false;
         }
     }
 
@@ -2082,13 +2115,14 @@ async function installMemB(interactive) {
             } catch (e) { logDebug(e, 'windows memb daemon setup'); }
         }
     }
+    return membOk;
 }
 
 async function installSynapse() {
     const synapseDir = path.join(moduleBasePath(), 'bdb-synapse');
     if (!downloadOrUpdateModule('@hybridlabor-api/bdb-synapse', synapseDir, 'BDB Synapse')) {
         log.warn('Skipping Synapse setup: the module could not be downloaded.');
-        return;
+        return false;
     }
     if (DRY_RUN) {
         log.step('[dry-run] would link synapse binary into ~/.local/bin/synapse + setup background daemon');
@@ -2217,6 +2251,7 @@ async function installSynapse() {
         }
     } else {
         log.warn(`No pre-built binary for this platform. Compile with: cd "${synapseDir}" && go build -o ${binaryName} ./cmd/synapse/`);
+        return false;
     }
 }
 
@@ -2410,7 +2445,7 @@ async function installCreatorExtension() {
     const creatorDir = path.join(moduleBasePath(), 'bdb-dev-creator-extension');
     if (!downloadOrUpdateModule('@hybridlabor-api/bdb-dev-creator-extension', creatorDir, 'BDB Creator Extension')) {
         log.warn('Skipping Creator Extension setup: the module could not be downloaded.');
-        return;
+        return false;
     }
     if (DRY_RUN) {
         log.step('[dry-run] would run BDB Creator Extension setup');
@@ -2423,6 +2458,7 @@ async function installCreatorExtension() {
             : spawnSync('node', [installerScript, '--auto'], { stdio: 'inherit', cwd: creatorDir });
         if (setupResult.status !== 0) {
             log.warn(`Creator Extension setup note: exit code ${setupResult.status}`);
+            return false;
         }
     }
 }
@@ -2431,7 +2467,7 @@ async function installHardwarePcb() {
     const hwDir = path.join(moduleBasePath(), 'bdb-hardware-pcb');
     if (!downloadOrUpdateModule('@hybridlabor-api/bdb-hardware-pcb', hwDir, 'BDB Hardware & PCB (KiCad + OpenSCAD)')) {
         log.warn('Skipping Hardware & PCB setup: the module could not be downloaded.');
-        return;
+        return false;
     }
     if (DRY_RUN) {
         log.step('[dry-run] would run BDB Hardware & PCB setup');
@@ -2442,6 +2478,7 @@ async function installHardwarePcb() {
         const setupResult = spawnSync('node', [installerScript, '--auto'], { stdio: 'inherit', cwd: hwDir });
         if (setupResult.status !== 0) {
             log.warn(`Hardware & PCB setup note: exit code ${setupResult.status}`);
+            return false;
         }
     }
 }
@@ -2450,7 +2487,7 @@ async function installOSRemoteGateway() {
     const remoteDir = path.join(moduleBasePath(), 'bdb-os-remote');
     if (!downloadOrUpdateModule('@hybridlabor-api/bdb-os-remote', remoteDir, 'BDB OS Remote Gateway')) {
         log.warn('Skipping OS Remote Gateway setup: the module could not be downloaded.');
-        return;
+        return false;
     }
 }
 
@@ -2458,7 +2495,7 @@ async function installDevToolInstaller() {
     const toolInstallerDir = path.join(moduleBasePath(), 'bdb-dev-tool-installer');
     if (!downloadOrUpdateModule('@hybridlabor-api/bdb-dev-tool-installer', toolInstallerDir, 'BDB Dev Tool Installer')) {
         log.warn('Skipping Dev Tool Installer setup: the module could not be downloaded.');
-        return;
+        return false;
     }
 }
 
@@ -2470,7 +2507,7 @@ function aoSupportedHere() {
 async function installOSAgentWorkspace() {
     if (!aoSupportedHere()) {
         log.warn(`AO is not supported on ${process.platform}/${process.arch}.`);
-        return;
+        return false;
     }
 
     const isWin = process.platform === 'win32';
@@ -2491,7 +2528,7 @@ async function installOSAgentWorkspace() {
     } else {
         if (!downloadOrUpdateModule('@hybridlabor-api/bdb-agent-orchestrator', osAgentDir, 'BDB Agent Orchestrator')) {
             log.warn('Skipping AO setup: the module could not be downloaded.');
-            return;
+            return false;
         }
     }
     if (DRY_RUN) {
@@ -2566,7 +2603,7 @@ async function installOSAgentWorkspace() {
 
     if (!daemonBin) {
         log.warn(`AO binary missing in ${osAgentDir} — package layout changed or Go build needed.`);
-        return;
+        return false;
     }
 
     if (daemonBin !== binTarget) {
@@ -2602,9 +2639,14 @@ async function installOSAgentWorkspace() {
         }
     }
 
-    installStep('register the AO service', () => {
-        execFileSync(binTarget, ['service', 'install'], { stdio: 'ignore' });
+    const serviceStep = installStep('register the AO service', () => {
+        try {
+            execFileSync(binTarget, ['service', 'install'], { stdio: ['ignore', 'pipe', 'pipe'] });
+        } catch (e) {
+            throw new Error(describeExecError(e));
+        }
     }, 'Start it by hand with: ao service install');
+    if (!serviceStep.ok) return false;
 
     // Windows startup entries fire asynchronously — give the service more time
     const aoTimeout = process.platform === 'win32' ? 20000 : 8000;
@@ -2660,6 +2702,9 @@ async function promptMemBIngestion(mcpCodeTarget) {
 }
 
 function verifyEcosystemInstallation() {
+    for (const f of moduleFailures) {
+        console.log(`  • ${colors.bold}${f.name}${colors.reset} ➔ ${colors.yellow}❌ NOT installed: ${f.reason.split('\n')[0]}${colors.reset}`);
+    }
     const modules = [
         { name: '1. bdb-synapse', pkg: '@hybridlabor-api/bdb-synapse', paths: [path.join(moduleBasePath(), 'bdb-synapse')] },
         { name: '2. memB', pkg: '@hybridlabor-api/memb', paths: [path.join(moduleBasePath(), 'memB'), path.join(geminiDir, 'config', 'mcps', 'memb-mcp')] },
@@ -2839,6 +2884,18 @@ function getTierExcludeSkills(tier) {
 // primary write above owns its file wholesale, but a secondary store belongs
 // to another product and is very likely to already hold the user's own
 // servers -- so this merges per server key and never replaces the file.
+// An unattended run has no credentials of its own (empty strings); those must never
+// replace a value the user already has in a server's env block.
+function keepExistingEnvValues(incomingServers, previousServers) {
+    for (const [key, incoming] of Object.entries(incomingServers || {})) {
+        const prevEnv = previousServers && previousServers[key] && previousServers[key].env;
+        if (!incoming || typeof incoming !== 'object' || !incoming.env || !prevEnv || typeof prevEnv !== 'object') continue;
+        for (const [k, v] of Object.entries(incoming.env)) {
+            if (v === '' && typeof prevEnv[k] === 'string' && prevEnv[k] !== '') incoming.env[k] = prevEnv[k];
+        }
+    }
+}
+
 function mirrorMcpServersTo(extraPaths, mcpConfigStr) {
     if (!Array.isArray(extraPaths) || extraPaths.length === 0) return;
 
@@ -2862,7 +2919,9 @@ function mirrorMcpServersTo(extraPaths, mcpConfigStr) {
             }
             const data = existing || {};
             data.mcpServers = data.mcpServers && typeof data.mcpServers === 'object' ? data.mcpServers : {};
-            for (const [key, val] of Object.entries(servers)) data.mcpServers[key] = val;
+            const mirrored = JSON.parse(JSON.stringify(servers));
+            keepExistingEnvValues(mirrored, data.mcpServers);
+            for (const [key, val] of Object.entries(mirrored)) data.mcpServers[key] = val;
             fs.mkdirSync(path.dirname(target), { recursive: true });
             // Carries injected API keys, same as the primary config. The `mode`
             // option only applies when writeFileSync CREATES the file -- an
@@ -3182,6 +3241,7 @@ async function installMcpsForTarget(paths, ctx) {
                     if (!incoming || typeof incoming !== 'object') return;
                     if (!incoming.env && previous.env) incoming.env = previous.env;
                 });
+                keepExistingEnvValues(newServers, oldServers);
                 oldConfig.mcpServers = Object.assign({}, oldServers, newServers);
                 fs.writeFileSync(paths.mcpConfigPath, JSON.stringify(oldConfig, null, 2), { mode: 0o600 });
                 try { fs.chmodSync(paths.mcpConfigPath, 0o600); } catch (e) { logDebug(e, 'chmod mcpConfigPath'); }
@@ -3920,9 +3980,11 @@ function mergeBdbSettingsHooks(settingsPath, { projectLocal = false } = {}) {
             .join(' ');
         return bdbHookScripts.some((name) => cmds.includes(name));
     };
-    const localize = (cmd) => (projectLocal && !machineGlobalHooks.some((n) => cmd.includes(n))
-        ? cmd.split('${HOME}').join('$CLAUDE_PROJECT_DIR')
-        : cmd);
+    // Global installs must point at the copies installGlobalHooks put under
+    // $HOME/.claude/hooks; $CLAUDE_PROJECT_DIR would not exist in other projects.
+    const localize = (cmd) => (projectLocal
+        ? (machineGlobalHooks.some((n) => cmd.includes(n)) ? cmd : cmd.split('${HOME}').join('$CLAUDE_PROJECT_DIR'))
+        : cmd.split('$CLAUDE_PROJECT_DIR/.claude/hooks/').join('$HOME/.claude/hooks/'));
     const cloneBdbEntries = (entries) =>
         JSON.parse(JSON.stringify(entries)).map((e) => ({
             ...e,
@@ -3969,7 +4031,16 @@ function mergeBdbSettingsHooks(settingsPath, { projectLocal = false } = {}) {
 
     try {
         fs.mkdirSync(path.dirname(settingsPath), { recursive: true });
-        fs.writeFileSync(settingsPath, JSON.stringify(buildMerged(existing), null, 2) + '\n');
+        const tmpPath = `${settingsPath}.${process.pid}.tmp`;
+        if (existing) {
+            fs.copyFileSync(settingsPath, `${settingsPath}.${process.hrtime.bigint()}.bak`);
+            const dir = path.dirname(settingsPath);
+            const base = path.basename(settingsPath);
+            const baks = fs.readdirSync(dir).filter((f) => f.startsWith(`${base}.`) && /\.\d{13,}\.bak$/.test(f)).sort();
+            for (const old of baks.slice(0, -3)) fs.rmSync(path.join(dir, old), { force: true });
+        }
+        fs.writeFileSync(tmpPath, JSON.stringify(buildMerged(existing), null, 2) + '\n', { mode: existing ? fs.statSync(settingsPath).mode & 0o777 : 0o644 });
+        fs.renameSync(tmpPath, settingsPath);
     } catch (e) {
         log.warn(`Could not write ${settingsPath}: ${e.message}`);
     }
@@ -4178,13 +4249,35 @@ function mergeCodexTomlHooks(configTomlPath, { projectLocal = false } = {}) {
         }
     }
 
-    // Replace existing AOS:HOOKS block or append
-    const hookBlockRegex = /# AOS:HOOKS:START[\s\S]*?# AOS:HOOKS:END/;
-    if (hookBlockRegex.test(content)) {
-        content = content.replace(hookBlockRegex, tomlSnippet);
-    } else {
-        content = `${content.trimEnd()}\n\n${tomlSnippet}\n`;
-    }
+    // Drop every AOS hook entry (marker block or not, duplicates included), then append one fresh block.
+    const bdbCodexScripts = ['go-gate.mjs', 'graph-gate.mjs', 'memb-inject.mjs', 'trail-relay.mjs', 'startcycle-dispatch.mjs', 'conventional-commits.mjs', 'env-file-protection.mjs'];
+    const isAosMarker = (l) => /^\s*# AOS:HOOKS:(START|END)\s*$/.test(l);
+    const eol = content.includes('\r\n') ? '\r\n' : '\n';
+    const lines = content.split(/\r?\n/).filter((l) => !isAosMarker(l));
+    const sections = [];
+    for (const l of lines) {
+        if (/^\s*\[/.test(l) || !sections.length) sections.push([l]);
+        else sections[sections.length - 1].push(l);
+    }
+    const isHookHeader = (sec) => /^\s*\[\[hooks\.\w+\]\]\s*$/.test(sec[0]);
+    const isHookInner = (sec) => /^\s*\[\[hooks\.\w+\.hooks\]\]\s*$/.test(sec[0]);
+    const kept = [];
+    for (let i = 0; i < sections.length; i++) {
+        if (!isHookHeader(sections[i])) { kept.push(sections[i]); continue; }
+        let j = i + 1;
+        while (j < sections.length && isHookInner(sections[j])) j++;
+        const group = sections.slice(i, j);
+        const ours = group.some((sec) => sec.some((l) => /^\s*command\s*=/.test(l) && bdbCodexScripts.some((n) => l.includes(n))));
+        if (ours) {
+            // keep trailing blanks/comments (they may belong to another tool's marker)
+            const tail = group.flat();
+            let end = tail.length;
+            while (end > 0 && /^\s*(#.*)?$/.test(tail[end - 1])) end--;
+            if (end < tail.length) kept.push(tail.slice(end));
+        } else kept.push(...group);
+        i = j - 1;
+    }
+    content = `${kept.flat().join(eol).trimEnd()}${eol}${eol}${tomlSnippet.split('\n').join(eol)}${eol}`;
 
     try {
         fs.mkdirSync(path.dirname(configTomlPath), { recursive: true });
@@ -4350,13 +4443,33 @@ async function promptOptionalModules(installedModules) {
         required: false
     }));
 
+    return (await runModuleInstalls(allModules, chosen, installedModules)).installed;
+}
+
+// Module installers return false (or throw) on failure; undefined/true mean success.
+// Only successes are recorded, so the manifest never claims a module that is not there.
+const moduleFailures = [];
+async function runModuleInstalls(allModules, chosen, installedModules) {
+    const installed = [];
+    const failed = [];
     for (const mod of allModules) {
-        if (chosen.includes(mod.id)) {
-            await mod.fn();
-            installedModules.push(mod.id);
+        if (!chosen.includes(mod.id)) continue;
+        let reason = null;
+        try {
+            if (await mod.fn() === false) reason = 'installation reported a failure (see warnings above)';
+        } catch (e) {
+            reason = e && e.message ? e.message : String(e);
+        }
+        if (reason === null) {
+            installed.push(mod.id);
+            if (!installedModules.includes(mod.id)) installedModules.push(mod.id);
+        } else {
+            failed.push({ id: mod.id, name: mod.name, reason });
+            moduleFailures.push({ id: mod.id, name: mod.name, reason });
+            log.warn(`${mod.name} was not installed: ${reason}`);
         }
     }
-    return chosen;
+    return { installed, failed };
 }
 
 // Module ids whose daemons ship a web interface or background service worth
@@ -5586,6 +5699,9 @@ module.exports = {
     downloadOrUpdateModule,
     detectPlatforms,
     markPlatformsExplicit,
+    runModuleInstalls,
+    describeExecError,
+    keepExistingEnvValues,
     mergeBdbSettingsHooks,
     mergeAntigravityHooks,
     mergeCodexTomlHooks,

package/lib/store-ui/index.html

@@ -83,7 +83,7 @@ function act(i){
 }
 function row(i){
   const k=key(i),open=S.expanded.has(k);
-  const badge=(i.fileCount>1?`<span class="badge">${i.fileCount} files</span>`:'')+(i.execBridge?'<span class="badge warn">exec bridge</span>':'')+(i.requires.length?`<span class="badge">+${i.requires.length} required</span>`:'');
+  const badge=(i.fileCount>1?`<span class="badge">${i.fileCount} files</span>`:'')+(i.execBridge?'<span class="badge warn">exec bridge</span>':'')+((i.requires||[]).length?`<span class="badge">+${i.requires.length} required</span>`:'');
   let h=`<div class="rowwrap"><div class="row"><span class="dot ${i.installed?'g':''}"></span><span class="n" data-a="exp" data-v="${esc(k)}" style="cursor:pointer" title="Show description">${esc(i.name)}${badge}</span><span class="d" style="color:var(--muted)">${esc(i.description)}</span><span class="c cat">${esc(i.category)}</span><span class="s src">${esc(i.source)}</span><span style="text-align:right">${act(i)}</span></div>`;
   if(open){const d=i.core?i.description:S.detail[k];h+=`<div class="detail">${d===undefined?'Loading...':esc(d)}</div>`}
   return h+'</div>';

package/lib/store-ui/server.mjs

@@ -24,7 +24,7 @@ function catalog(scope, cwd) {
   const core = { skill: localSkills(ROOT), agent: localAgents(ROOT) };
   for (const kind of ['skill', 'agent']) {
     for (const [name, file] of core[kind]) {
-      items.push({ name, kind, description: frontDescription(file), category: 'core', source: 'AOS Core', installed: true, core: true });
+      items.push({ name, kind, description: frontDescription(file), category: 'core', source: 'AOS Core', installed: true, core: true, requires: [] });
     }
   }
   for (const src of sources) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hybridlabor-api/aos",
-  "version": "4.13.0",
+  "version": "4.13.2",
   "description": "AOS — A Curated AI AGENT OS. Optimized agent skills and add-ons like memB, OpenWiki, Heimdall Token Saver, and Godmode architectures.",
   "main": "installer.js",
   "engines": {
@@ -27,7 +27,7 @@
     "plugin:build": "node scripts/build-plugin-manifest.mjs",
     "plugin:check": "node scripts/build-plugin-manifest.mjs --check",
     "doctor": "node bin/aos-doctor.mjs",
-    "test": "node scripts/validate-skills.mjs --selftest && node scripts/validate-skills.mjs && node scripts/build-plugin-manifest.mjs --check && node --test tests/opencode-graph-gate.test.js && node --test tests/cross-harness-hooks.test.js && node tests/aos-store.test.mjs && node --test tests/aos-store-ui.test.mjs && node tests/aos-store-scenario.test.mjs && node tests/aos-doctor.test.mjs && node tests/build-plugin-manifest.test.mjs && node --test tests/agent-models.test.js"
+    "test": "node scripts/validate-skills.mjs --selftest && node scripts/validate-skills.mjs && node scripts/build-plugin-manifest.mjs --check && node --test tests/opencode-graph-gate.test.js && node --test tests/cross-harness-hooks.test.js && node tests/aos-store.test.mjs && node --test tests/aos-store-ui.test.mjs && node tests/aos-store-scenario.test.mjs && node tests/aos-doctor.test.mjs && node tests/build-plugin-manifest.test.mjs && node --test tests/agent-models.test.js && node --test tests/installer-p3.test.js"
   },
   "publishConfig": {
     "access": "public"

package/skills/global_config/bdb-memb-mcp/SKILL.md

@@ -58,8 +58,7 @@ Deletes a specific memory segment using its UUID.
 
 ## 🔒 Security Hardening
 
-The `memb-mcp` server runs a pre-ingestion regex filter that blocks or redacts standard credential patterns:
-*   API keys (Google Cloud, OpenAI, GitHub, etc.)
-*   Plaintext passwords
-*   Database URLs
-This safeguards your workspace metadata and prevents credentials from leaking into vector repositories.
+The `memb-mcp` server has **no automatic credential filter** today: it stores whatever an agent sends it.
+*   Never ingest credentials: API keys (Google Cloud, OpenAI, GitHub, etc.), plaintext passwords, database URLs.
+*   The protection is the rule in this skill (and in `memb-skill`) plus human review of stored memories.
+*   An automatic pre-ingestion filter is planned but not released.

package/skills/global_config/plan-canvas/SKILL.md

@@ -28,16 +28,13 @@ AOS from [affaan-m/ECC](https://github.com/affaan-m/ECC).
   decision — the canvas verdict replaces a typed "yes/proceed".
 - **Mandatory, not optional**, at the end of `bdbrainstorm` (before writing
   `state.goal` / handing off to `/startcycle-graph`) and `bdbmediastorm`
-- **Visual Extensions (BuilderIO Integration):** When generating plans, always ask the human which Canvas version they prefer:
-  - **Plan-Canvas Preview**: Standard markdown/html review.
-  - **Archify Canvas**: For strict architecture schema validation.
-  - **Visual Ecosystem**: Use `/visual-plan` (turn text plans into rich visual plans), `/visual-recap` (turn diffs into interactive visual recaps), or `/visual-edit` (open a running local app for visual editing).
   (before the show-control architecture is considered final) — both produce
   a plan/spec artifact a human must approve before anything downstream
   proceeds. See each skill's own "Plan Canvas Review" section.
 - The user should *point at* what to change: reviewing designs, comparisons,
   reports, or any local `.md` / `.html` artifact.
 - The user asks for a visual review, or "open it in the browser".
+- The artifact is an Archify diagram (the standalone HTML that `archify` produces): `.html` artifacts render as-is with the annotation layer, so architecture reviews use the same loop.
 
 This tool is a plain Node CLI speaking JSON over a loopback HTTP server —
 it has no dependency on which agent harness invokes it (Claude Code, Codex,