@hybridlabor-api/aos 4.14.1 → 4.16.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hybridlabor-api/aos",
-  "version": "4.14.1",
+  "version": "4.16.0",
   "description": "AOS — A Curated AI AGENT OS. Optimized agent skills and add-ons like memB, OpenWiki, Heimdall Token Saver, and Godmode architectures.",
   "main": "installer.js",
   "engines": {
@@ -12,6 +12,7 @@
     "bdb-agent-skills-pro": "installer.js",
     "bdb-agent-skills": "installer.js",
     "aos-plan-canvas": "skills/global_config/plan-canvas/scripts/plan-canvas.js",
+    "aos-bus": ".claude/hooks/aos-bus.mjs",
     "aos-trail": "skills/global_config/agenttrail/bin/agenttrail.mjs",
     "aos-archify": "skills/global_config/archify/bin/archify.mjs",
     "aos-dashboard": "bin/aos-dashboard.mjs",
@@ -28,7 +29,7 @@
     "plugin:build": "node scripts/build-plugin-manifest.mjs",
     "plugin:check": "node scripts/build-plugin-manifest.mjs --check",
     "doctor": "node bin/aos-doctor.mjs",
-    "test": "node scripts/validate-skills.mjs --selftest && node scripts/validate-skills.mjs && node scripts/build-plugin-manifest.mjs --check && node --test tests/opencode-graph-gate.test.js && node --test tests/cross-harness-hooks.test.js && node --test tests/plan-canvas-security.test.mjs && node --test tests/plan-canvas-modes.test.mjs && node --test tests/swarm-wiring.test.js && node tests/aos-store.test.mjs && node --test tests/aos-store-ui.test.mjs && node tests/aos-store-scenario.test.mjs && node tests/aos-doctor.test.mjs && node tests/build-plugin-manifest.test.mjs && node --test tests/agent-models.test.js && node --test tests/installer-p3.test.js && node --test tests/installer-binary.test.js && node --test tests/installer-version.test.js && node --test tests/mcsc-server.test.js && node --test tests/antigravity-hooks.test.js && node --test tests/windows-hooks.test.js && node --test tests/plan-builder.test.mjs && node --test tests/plan-builder-trail.test.mjs && node --test tests/plan-builder-showcase.test.mjs && node --test tests/plan-builder-templates.test.mjs && node --test tests/plan-canvas-home.test.mjs && node --test tests/launchpad-installer.test.js && node --test tests/launchpad-plan-canvas.test.js && node --test tests/go-token.test.js && node --test tests/master-session-skill.test.js && node --test tests/aos-acp.test.js && node --test tests/opencode-go-token.test.js && node --test tests/opencode-adapter.test.js && node --test tests/pr-recap.test.mjs && node --test tests/bdb-visual-edit.test.mjs && node --test tests/opencode-trail-autostart.test.mjs && node --test tests/trail-autostart-hook.test.mjs && node --test tests/agenttrail-ensure.test.mjs"
+    "test": "node scripts/validate-skills.mjs --selftest && node scripts/validate-skills.mjs && node scripts/build-plugin-manifest.mjs --check && node --test tests/opencode-graph-gate.test.js && node --test tests/cross-harness-hooks.test.js && node --test tests/plan-canvas-security.test.mjs && node --test tests/plan-canvas-modes.test.mjs && node --test tests/swarm-wiring.test.js && node tests/aos-store.test.mjs && node --test tests/aos-store-ui.test.mjs && node tests/aos-store-scenario.test.mjs && node tests/aos-doctor.test.mjs && node tests/build-plugin-manifest.test.mjs && node --test tests/agent-models.test.js && node --test tests/installer-p3.test.js && node --test tests/installer-binary.test.js && node --test tests/installer-version.test.js && node --test tests/mcsc-server.test.js && node --test tests/antigravity-hooks.test.js && node --test tests/windows-hooks.test.js && node --test tests/plan-builder.test.mjs && node --test tests/plan-builder-trail.test.mjs && node --test tests/plan-builder-showcase.test.mjs && node --test tests/plan-builder-templates.test.mjs && node --test tests/plan-canvas-home.test.mjs && node --test tests/launchpad-installer.test.js && node --test tests/launchpad-plan-canvas.test.js && node --test tests/go-token.test.js && node --test tests/master-session-skill.test.js && node --test tests/aos-acp.test.js && node --test tests/opencode-go-token.test.js && node --test tests/opencode-adapter.test.js && node --test tests/pr-recap.test.mjs && node --test tests/bdb-visual-edit.test.mjs && node --test tests/opencode-trail-autostart.test.mjs && node --test tests/trail-autostart-hook.test.mjs && node --test tests/agenttrail-ensure.test.mjs && node --test tests/aos-bus.test.js && node --test tests/installer-quick-update.test.js"
   },
   "publishConfig": {
     "access": "public"

package/scripts/validate-skills.mjs

@@ -242,7 +242,7 @@ function checkSkillRefs(text, file, known, self, findings) {
 }
 
 // Playbooks are skills with `kind: playbook`; skills without `kind` are untouched.
-const PB_REQUIRED = ['trigger', 'inputs', 'requires', 'go_points', 'outputs', 'verify', 'difficulty', 'est_time', 'disable-model-invocation'];
+const PB_REQUIRED = ['trigger', 'inputs', 'requires', 'go_points', 'outputs', 'verify', 'difficulty', 'est_time'];
 const DIFFICULTY = new Set(['beginner', 'intermediate', 'advanced']);
 const EXTERNAL = ' (external)';
 
@@ -274,12 +274,28 @@ export function checkPlaybook(byKey, known) {
     add('E-PB04', `\`difficulty: ${unquote(diff.value)}\` is not one of: ${[...DIFFICULTY].join(', ')}`, 'difficulty');
   }
   const dmi = byKey.get('disable-model-invocation');
-  if (dmi && unquote(dmi.value) !== 'true') {
-    add('E-PB06', 'playbooks are user-invoked only — set `disable-model-invocation: true`', 'disable-model-invocation');
+  if (dmi && unquote(dmi.value) === 'true') {
+    add('E-PB06', 'playbooks must stay invocable by agents — remove `disable-model-invocation: true` (side effects are guarded by go-gate)', 'disable-model-invocation');
   }
   return out;
 }
 
+// Pipeline and role skills must stay invocable through the Skill tool: the Master and
+// every orchestrator start them. Side effects are guarded by go-gate, not by hiding the
+// skill from the model. Anything not listed here may still set the flag.
+export const MODEL_INVOCABLE = new Set([
+  'startcycle', 'startcycle-graph', 'startcycle-graph-user', 'teamwork-preview',
+  'godmode-engineering', 'godmode-shipping', 'godmode-ui-ux', 'godmode-media-eventtech',
+  'master-session', 'ao-orchestrator', 'bdbrainstorm', 'bdbmediastorm',
+  'grill-me', 'grill-with-docs', 'ask-tim', 'memb-skill',
+]);
+
+export function checkInvocation(name, byKey) {
+  const dmi = byKey.get('disable-model-invocation');
+  if (!dmi || unquote(dmi.value) !== 'true' || !MODEL_INVOCABLE.has(name)) return [];
+  return [{ level: 'error', code: 'E-DMI01', line: dmi.line, msg: `\`${name}\` is a pipeline/role skill and must stay model-invocable — remove \`disable-model-invocation: true\` (go-gate guards its side effects)` }];
+}
+
 function validate() {
   const { skills, strays } = collect();
   const known = new Set(skills.map((f) => basename(dirname(f))));
@@ -351,6 +367,7 @@ function validate() {
     }
 
     for (const f of checkPlaybook(byKey, known)) findings.push({ ...f, file: rel });
+    for (const f of checkInvocation(basename(dir), byKey)) findings.push({ ...f, file: rel });
 
     checkLeakedPaths(text, rel, findings);
     checkLocalRefs(text, dir, rel, findings);
@@ -509,7 +526,7 @@ function selftest() {
       trigger: '["a"]', inputs: '[repo]',
       requires: '\n  skills: [github, gh (external)]\n  agents: []\n  mcps: []\n  store: []',
       go_points: '[]', outputs: '["x"]', verify: '"x"', difficulty: 'beginner',
-      est_time: '5 min', 'disable-model-invocation': 'true', ...over,
+      est_time: '5 min', ...over,
     };
     const lines = Object.entries(base).filter(([k]) => !drop.includes(k)).map(([k, v]) => `${k}: ${v}`);
     const fm = scanFrontmatter(['---', ...lines, '---'].join('\n'));
@@ -530,8 +547,14 @@ function selftest() {
   assert.equal(kind.length, 1);
   assert.equal(kind[0].code, 'E-PB01');
   assert.equal(checkPlaybook(pb({ requires: '\n  skills:\n    - github' }), known)[0].code, 'E-PB05');
-  assert.equal(checkPlaybook(pb({ 'disable-model-invocation': 'false' }), known)[0].code, 'E-PB06');
-  assert.deepEqual(checkPlaybook(pb({}, ['kind', 'trigger', 'inputs', 'requires', 'go_points', 'outputs', 'verify', 'difficulty', 'est_time', 'disable-model-invocation']), known).length, 0, 'no kind, no playbook rules');
+  assert.equal(checkPlaybook(pb({ 'disable-model-invocation': 'true' }), known)[0].code, 'E-PB06');
+  assert.deepEqual(checkPlaybook(pb({ 'disable-model-invocation': 'false' }), known), [], 'explicit false is fine');
+  const dm = (v) => new Map([['disable-model-invocation', { key: 'disable-model-invocation', value: v, line: 3 }]]);
+  assert.equal(checkInvocation('startcycle-graph', dm('true'))[0].code, 'E-DMI01');
+  assert.deepEqual(checkInvocation('startcycle-graph', dm('false')), []);
+  assert.deepEqual(checkInvocation('bdb-updater', dm('true')), [], 'unlisted skills may keep the flag');
+  assert.deepEqual(checkInvocation('startcycle', new Map()), []);
+  assert.deepEqual(checkPlaybook(pb({}, ['kind', 'trigger', 'inputs', 'requires', 'go_points', 'outputs', 'verify', 'difficulty', 'est_time']), known).length, 0, 'no kind, no playbook rules');
   assert.deepEqual(
     checkPlaybook(pb({ requires: '\n  skills: ["gh (external)", github,]' }), known), [],
     'quoted item and trailing comma survive',

package/skills/basic/godmode-shipping/SKILL.md

@@ -2,7 +2,6 @@
 name: godmode-shipping
 description: BDB Shipping Godmode, the final gatekeeper for production releases. Use when running pre-launch checks, feature-flag rollouts, or rollback planning under Spec-Driven Development before a release ships.
 category: engineering-method
-disable-model-invocation: true
 ---
 
 # 🚀 BDB Shipping Godmode

package/skills/basic/master-session/SKILL.md

@@ -22,7 +22,7 @@ One session is the **master**: it keeps the overview, asks workers for status, a
 
 ### `aos-acp` in one paragraph
 
-`bin/aos-acp.mjs` is a zero-dependency ACP client: it spawns the adapter (`npx -y @agentclientprotocol/codex-acp`, `opencode acp`, `npx -y @agentclientprotocol/claude-agent-acp`), runs `initialize` → `session/new` → `session/prompt`, streams the worker's text to stdout and logs every event to `~/.aos/acp/<name>.jsonl`. A `session/request_permission` for a guarded command (the go-gate list) is answered `allow_once` only with a valid GO token for `<name>`; with `--go-wait <sec>` the request is parked (log event `permission_pending`, show it as `GO needed`) until the token appears or the wait ends. Everything else follows `--allow-default deny|allow` (deny by default). ACP workers are not in `ListAgents`: the roster lists them from the logs.
+`bin/aos-acp.mjs` is a zero-dependency ACP client: it spawns the adapter (`npx -y @agentclientprotocol/codex-acp`, `opencode acp`, `npx -y @agentclientprotocol/claude-agent-acp`), runs `initialize` → `session/new` → `session/prompt`, streams the worker's text to stdout and logs every event to `~/.aos/acp/<name>.jsonl`. A `session/request_permission` for a guarded command (the go-gate list) is answered `allow_once` only with a valid GO token for `<name>`; with `--go-wait <sec>` the request is parked (log event `permission_pending`, show it as `GO needed`) until the token appears or the wait ends. Everything else follows `--allow-default deny|allow` (deny by default). `--model <id>` is sent as ACP `session/set_config_option` (`configId: "model"`, id is adapter-specific, e.g. `sonnet`, `provider/model`); `fable` ids are rejected (workers run opus, sonnet or haiku), default is the adapter default and is logged. ACP workers are not in `ListAgents`: the roster lists them from the logs.
 
 ## Step 1 — Roster
 

package/skills/basic/startcycle/SKILL.md

@@ -2,7 +2,6 @@
 name: startcycle
 description: Linear multi-agent build pipeline with file hand-offs in production_artifacts/, run after /bdbrainstorm or /grill-me. This is the linear variant — no state.json, no repair loop, no dispatcher graph — distinct from startcycle-graph, which adds durable state and automated escalation.
 category: bdb-core
-disable-model-invocation: true
 ---
 
 # `/startcycle` — Linear Build Pipeline

package/skills/basic/startcycle-graph/SKILL.md

@@ -2,7 +2,6 @@
 name: startcycle-graph
 description: Use when running the autonomous multi-agent build pipeline after /bdbrainstorm or /grill-me. Routes to the startcycle-dispatch Dynamic Workflow, which reads production_artifacts/state.json and invokes Architect, TechLead, UI/UX, Engineering, Media/EventTech, Reviewer, and Shipping in turn per .agents/graph.md's edge table — the agents never invoke each other.
 category: bdb-core
-disable-model-invocation: true
 ---
 
 # 🚀 BDB Autonomous Development Cycle (`/startcycle-graph`)

package/skills/global_config/ask-tim/SKILL.md

@@ -2,7 +2,6 @@
 name: ask-tim
 description: Ask which skill or flow fits your situation. A route through AOS's skills for work that travels idea to ship, plus a catalogue of the 185 available options for lookup. Use when unsure where to start, or when picking between overlapping choices.
 category: bdb-core
-disable-model-invocation: true
 ---
 
 <!-- The flow map below is derived from mattpocock/skills' ask-matt (MIT, see

package/skills/global_config/grill-me/SKILL.md

@@ -2,7 +2,6 @@
 name: grill-me
 description: A relentless interview to sharpen a plan or design. Use before committing to an approach, or on any 'grill me' trigger phrase.
 category: engineering-method
-disable-model-invocation: true
 ---
 
 <!-- Source: mattpocock/skills skills/productivity/grill-me — MIT, see THIRD_PARTY_NOTICES.md -->

package/skills/global_config/grill-with-docs/SKILL.md

@@ -2,7 +2,6 @@
 name: grill-with-docs
 description: A relentless interview to sharpen a plan or design, which also builds the project's domain model — glossary and ADRs — as it goes. Use in a working directory whenever an idea needs sharpening.
 category: engineering-method
-disable-model-invocation: true
 ---
 
 <!-- Source: mattpocock/skills skills/engineering/grill-with-docs — MIT, see THIRD_PARTY_NOTICES.md -->

package/skills/playbooks/pb-bug-fix/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: pb-bug-fix
+description: >-
+  Turn a GitHub issue into a tested fix on a branch with an open PR: read the
+  issue as the contract, find the root cause, write the failing test first,
+  fix, prove it, review the diff against the issue, push and open the PR only
+  after GO. Merging stays with pb-ship. Use for "fix issue 42", "bug fix from
+  this issue", "turn this issue into a PR".
+category: engineering-method
+kind: playbook
+trigger: ["fix issue", "bug fix from issue", "issue to PR"]
+inputs: [repo, issue_number]
+requires:
+  skills: [github, deja-memory, systematic-debugging, test-driven-development, verification-before-completion, git-pr-review, "gh (external)"]
+  agents: [reviewer]
+  mcps: []
+  store: []
+go_points: ["git push + gh pr create"]
+outputs: ["production_artifacts/pb-bug-fix-<date>.md"]
+verify: "new test fails on the base SHA and passes on the branch SHA; gh pr view <branch> --json closingIssuesReferences contains <n>"
+difficulty: intermediate
+est_time: 30-90 min
+---
+
+# GitHub issue to tested fix and PR
+What you get: a branch with a failing-then-passing test and the fix, reviewed against the issue, and an open PR that closes it. Merging is a separate run (pb-ship).
+
+## Inputs
+- repo — the current directory, or the one the user names; `<owner/repo>` comes from `git -C <repo> remote get-url origin`
+- issue_number — the GitHub issue to fix, asked if missing
+
+## Steps
+1. github — repo, issue_number → `gh auth status`, then `gh issue view <n> -R <owner/repo> --json title,body,labels,state` as the contract (acceptance points as a list) in the run log (gh missing, unauthenticated, no GitHub remote, or the issue is closed → log it, give the `gh auth login` / remote hint, stop) — contract written
+2. deja-memory — error text or symptom from the issue → `deja fix` result in the run log — prior fix found, or "none"
+3. systematic-debugging — contract → root cause and a local repro command in the run log — repro fails locally on the base SHA (base SHA logged), or the reason it cannot run locally
+4. test-driven-development — root cause → failing test first (run, red, output pasted), then the minimal fix on a new branch `fix/<n>-<slug>` — the new test fails on the base SHA and passes after the fix; no unrelated edits
+5. verification-before-completion — repro command and the repo's test, lint and typecheck scripts that exist → fresh passing output pasted in the run log — output pasted, not claimed
+6. reviewer (agent) — `git diff <base>...HEAD`; the contract is the issue from step 1, never the run log and never the implementer's claim (input material only) → findings table in the run log — any open `blocking` finding sends the run back to step 4, at most 2 cycles, then stop and escalate
+7. git-pr-review — `git log <base>..HEAD` → PR body draft in the run log, ending in `Fixes #<n>` — draft only, nothing posted
+8. [GO] git push + gh pr create — `git push -u origin <branch>` then `gh pr create -R <owner/repo> --base <base> --head <branch> --title "<title>" --body-file <draft>` — the WAITING FOR GO line names branch, base, title and issue number. The run stops here until the human types GO. One GO covers the push and the PR creation, one time. (The hook guards the push only; `gh pr create` is not hook-guarded, so this GO is its only guard.)
+9. github — `gh pr view <branch> -R <owner/repo> --json url,closingIssuesReferences` → PR URL in the run log — `closingIssuesReferences` contains `<n>`
+
+Run log: `production_artifacts/pb-bug-fix-<date>.md` in the start directory, never committed
+
+Rules
+- Anything other than the literal GO (case-insensitive) is not a GO; a GO covers only that one step, one time.
+- A failed check stops the run: write the failure into the run log and report. No silent retries beyond what a step names.
+- Write one run-log line per step as it completes (`N. done|skipped|failed — artifact — check result`) and `WAITING FOR GO: <step>` at each gate.

package/skills/playbooks/pb-ci-fix/SKILL.md

@@ -19,7 +19,6 @@ outputs: [".github/workflows/*.yml", "production_artifacts/pb-ci-fix-<date>.md"]
 verify: "gh run list --commit <sha> --json conclusion -q '.[0].conclusion' == success"
 difficulty: intermediate
 est_time: 15-45 min
-disable-model-invocation: true
 ---
 
 # Fix red CI or set up GitHub Actions

package/skills/playbooks/pb-clip-from-moodboard/SKILL.md

@@ -0,0 +1,55 @@
+---
+name: pb-clip-from-moodboard
+description: >-
+  Turn a look brief and reference images into a finished social clip:
+  concept, TouchDesigner look and palette, ComfyUI stills, a recorded take,
+  a cut in DaVinci Resolve or Remotion, 9:16 and 16:9 exports, publish only
+  after GO. Use for "moodboard to clip", "make a social clip from these
+  references", "look brief to video".
+category: media-eventtech
+kind: playbook
+trigger: ["moodboard to clip", "social clip from references", "look brief to video"]
+inputs: [brief, reference_images, project, comfy_workflow, cut_tool, formats?]
+requires:
+  skills: [bdbmediastorm, bdb-touchdesigner-mcp, bdb-davinci-mcp, remotion, "ffprobe (external)"]
+  agents: []
+  mcps: [bdb_td_minddesigner, comfyui-mcp, bdb_davinci_mcp]
+  store: []
+go_points: [publish]
+outputs: ["renders/<project>/concept.md", "renders/<project>/look.tox", "renders/<project>/stills/", "renders/<project>/clip_9x16.mp4", "renders/<project>/clip_16x9.mp4", "production_artifacts/pb-clip-from-moodboard-<date>.md"]
+verify: "ffprobe shows 1080x1920 and 1920x1080 at the asked duration; comfyui get_history status success; get_td_node_errors empty"
+difficulty: advanced
+est_time: 1-3 h
+---
+
+# Moodboard to social clip
+What you get: a 9:16 and a 16:9 clip built from your look brief and references, checked with ffprobe, handed off for publishing after your GO.
+
+## Inputs
+- brief — the look brief, asked in step 2
+- reference_images — a folder of reference images, asked in step 2
+- project — a slug for `renders/<project>/`, asked in step 2
+- comfy_workflow — path to a ComfyUI API-format workflow JSON, required, never invented
+- cut_tool — `davinci` or `remotion` (remotion needs an existing Remotion project)
+- formats (optional) — default 9:16 and 16:9
+
+## Steps
+1. Preflight — ask cut_tool first; then one probe per server, before any file is written: `get_td_info` on `bdb_td_minddesigner`; `check_comfyui_health` on `comfyui-mcp`; `get_resolve_status` on `bdb_davinci_mcp` (only if cut_tool = davinci); `command -v ffprobe`. MCP tools may be deferred in the harness: try to load the tool once via the harness tool search before declaring it missing. Tool not loaded, call errors, or the payload fails its pass condition (TD `get_td_info`: `connected: true`; ComfyUI `check_comfyui_health`: `status` is `"online"`; Resolve `get_resolve_status`: no `error` key) → stop with "Missing MCP: `<server>` (`<tool>` unavailable). Start <TouchDesigner|ComfyUI|DaVinci Resolve> and check `mcpServers.<server>` in your harness config." and write nothing except the run log; davinci missing while cut_tool = remotion → continue, logged — all probes answered
+2. Ask — brief, reference image folder, project slug, ComfyUI workflow JSON path, cut_tool, formats (default 9:16 and 16:9), length → run log and `renders/<project>/` — all answered, workflow path exists
+3. bdbmediastorm — brief → `renders/<project>/concept.md` (look, palette intent, shot list, length) — stops for approval
+4. bdb-touchdesigner-mcp — references → `moodboard_to_system` / `extract_palette` → network and palette; `get_td_node_errors` empty, `get_preview` shown (stops for approval), then `export_look_tox` → `renders/<project>/look.tox` — errors empty
+5. ComfyUI — the workflow file's text (palette and prompt filled in) as the JSON string for `queue_prompt` → `get_history <prompt_id>` status success → `get_output_media_info` paths copied to `renders/<project>/stills/` and loaded into the TD network (e.g. as a `moviefilein` TOP feeding the look) before step 6, then `get_td_node_errors` empty again — at least 1 still; `local_path` is only set when `COMFYUI_DIR` is set, so if `local_path` is empty or `exists_locally` is false, stop with a clear message and copy nothing
+6. Record — TD `record_movie` → `renders/<project>/raw.mov` — `ffprobe` duration > 0
+7. Cut — either way the output is the two clips, and `ffprobe` shows the asked width, height and duration per file:
+   - davinci: `create_project` → `import_media` → `create_timeline` → `append_to_timeline` → `set_render_settings` per format → `add_render_job` → `start_rendering` → `get_render_job_status` complete
+   - remotion: from the Remotion project dir, copy `raw.mov` into its `public/`, then `npx remotion render <Composition> <out>` per format (network/npm on first run needs approval; the skill's Stitch steps do not apply)
+   - `ffprobe` is the gate, since nothing proves `set_render_settings` sets 1080x1920: on a width/height mismatch stop with "export <format> has WxH, expected ...", log it, do not publish, invent no conversion command, and tell the human what to change in Resolve
+   - then the clips stop for approval (taste review)
+8. [GO] publish — the destination and the full file list shown. The run stops here until the human types GO. No publish MCP or CLI exists on this machine, so the GO releases the hand-off: the files plus the caption in `renders/<project>/publish.md`; upload is manual unless the human named a tool in step 2 — hand-off file written
+
+Run log: `production_artifacts/pb-clip-from-moodboard-<date>.md` in the start directory, never committed
+
+Rules
+- Anything other than the literal GO (case-insensitive) is not a GO; a GO covers only that one step, one time.
+- A failed check stops the run: write the failure into the run log and report. No silent retries.
+- Write one run-log line per step as it completes (`N. done|skipped|failed — artifact — check result`) and `WAITING FOR GO: <step>` at each gate.

package/skills/playbooks/pb-crew-call-sheet/SKILL.md

@@ -0,0 +1,40 @@
+---
+name: pb-crew-call-sheet
+description: >-
+  Build a crew call sheet and a load-in / load-out plan for one show day from
+  your event tracker or brief and your crew list, and send it to the crew only
+  after your GO. Use for "call sheet", "crew call times", "load-in plan",
+  "load-out schedule".
+category: media-eventtech
+kind: playbook
+trigger: ["call sheet", "crew call times", "load-in plan"]
+inputs: [tracker_csv_or_event_brief, crew_list]
+requires:
+  skills: [bdb-eventagency-skill, pb-event-tracker]
+  agents: []
+  mcps: []
+  store: []
+go_points: [send to crew]
+outputs: ["call-sheet.md", "load-plan.md", "run-log.md"]
+verify: "every crew member has a call time; load-in ends before doors; load-out starts after show end"
+difficulty: beginner
+est_time: 10-20 min
+---
+
+# Crew call sheet
+What you get: a call sheet and a load-in / load-out plan for one show day.
+
+## Inputs
+- The `tracker.csv` from pb-event-tracker, or an event brief — a text or document file
+- A crew list — a file with name, role and contact for each person
+- A save folder — asked once; default `./pb-crew-call-sheet-<date>/`
+
+## Steps
+1. Ask once — save folder, tracker or brief, crew list → `run-log.md` — the files are readable; no tracker yet: run pb-event-tracker first or give the brief
+2. Read the tracker or brief and the crew list → show date, venue, doors time, show start and end, per crew member name, role, contact — missing times are `?`, never guessed
+3. bdb-eventagency-skill (section "5.1 Pre-production", run-of-show and day-minus milestones) — the read data → `call-sheet.md`, one row per crew member: who, role, call time, contact — every crew member has a call time
+4. bdb-eventagency-skill (section "5.1 Pre-production") — the read data → `load-plan.md` with load-in, line check, doors, show, load-out, each with a start and end time — load-in ends before doors; load-out starts after show end
+5. Show `call-sheet.md` and `load-plan.md` in full and apply your edits until you approve — approval logged
+6. [GO] Send the call sheet to the crew through a connector you name, or send it yourself — show every recipient (name + address, `?` blocks sending until you fill it) and the full text of every message first. The run stops here until the human types GO. The GO covers exactly the recipients and messages shown and nothing else; a different or added recipient needs a fresh GO. Never send to anyone not listed in `call-sheet.md`. The go-gate hook does not guard sending: this [GO] is the only guard.
+
+Run log: `run-log.md` in the save folder. One line per step as it completes (`N. done|skipped|failed — file — check result`), and `WAITING FOR GO: <step>` at the gate. Anything other than the literal GO (case-insensitive) is not a GO. If a check fails, stop, write the failure into the log and tell the user.

package/skills/playbooks/pb-deploy-saas/SKILL.md

@@ -0,0 +1,44 @@
+---
+name: pb-deploy-saas
+description: >-
+  Deploy a SaaS app to the BDB fleet: preflight of the fleet skills, a guardrail plan, green CI, the deploy after GO (Incus via
+  Forgejo CI, or direct rsync), and a health URL check. Use for "deploy this to the
+  fleet", "deploy the SaaS app", "ship to the Incus instance".
+category: saas-ops
+kind: playbook
+trigger: ["deploy this to the fleet", "deploy the SaaS app", "deploy to the Incus instance"]
+inputs: [repo, target_instance, path, version_source?]
+requires:
+  skills: [bdb-deploy, pb-ci-fix, "bdbsaashost (external)", "deploy-incus (external)"]
+  agents: []
+  mcps: []
+  store: []
+go_points: [deploy]
+outputs: ["production_artifacts/pb-deploy-saas-<date>.md"]
+verify: "curl -sI <health_url> returns 200; the version marker read in step 5 equals the deployed commit SHA, or the run log says marker absent: unverified"
+difficulty: advanced
+est_time: 30-90 min
+---
+
+# Deploy a SaaS app to the fleet
+What you get: the app deployed to the chosen fleet instance after your GO, with a health check logged.
+
+## Inputs
+- repo — the current directory, or the one the user names
+- target_instance — the fleet instance to deploy to, asked if missing
+- path — `incus-ci` (push to Forgejo, the runner deploys to Incus) or `direct` (rsync over SSH), asked if missing
+- version_source (optional) — where the app exposes its commit SHA: a `/version`-style URL or a response header name of the health URL, taken from the deploy plan; none given means the app exposes none
+
+## Steps
+1. Preflight — `test -f ~/.claude/skills/bdbsaashost/SKILL.md`; `test -f ~/.claude/skills/deploy-incus/SKILL.md` (needed only for path = incus-ci) → run log header — a skill absent → stop with "Missing skill: <name> (installed locally only, not shipped by AOS). Install it under `~/.claude/skills/` or run this playbook on the machine that has it."; write nothing except the run log — all probes answered
+2. bdbsaashost (external) — repo, target_instance → deploy plan with target, guardrails and the health URL in the run log — stops for approval (the human confirms target, path and health URL)
+3. pb-ci-fix — only if `gh run list --commit <HEAD sha> --limit 1 --json conclusion` for the repo is not `success` (a repo with no GitHub CI is logged and skipped) → one pb-ci-fix run, with its own GO for the push — latest run is green, else stop
+4. [GO] deploy — path = incus-ci: deploy-incus pushes the repo to the Forgejo remote, the push command is hook-guarded; path = direct: bdb-deploy runs `rsync` over SSH to the target, which is not hook-guarded (the same goes for `incus` commands), so this GO is the only guard there — RemoteOS approval does not cover a Forgejo push or an rsync, only actions run through its own tools (for example container manage), which this step does not use. The WAITING FOR GO line names the path, target_instance, the exact command, and the commit SHA. The run stops here until the human types GO. One GO = one deploy.
+5. Health check — `curl -sI <health_url>` for the status line; then the marker from `version_source` (`curl -s <version_url>` for a URL, or the named header in the `curl -sI` output) → status line and marker in the run log — status 200 and the marker equals the SHA from the step 4 GO line; if `version_source` is empty or returns no marker, log "marker absent: unverified" and accept the 200 alone; a marker that differs from the SHA, or any other status, stops the run and reports, no automatic rollback
+
+Run log: `production_artifacts/pb-deploy-saas-<date>.md` in the start directory, never committed
+
+Rules
+- Anything other than the literal GO (case-insensitive) is not a GO; a GO covers only that one step, one time.
+- A failed check stops the run: write the failure into the run log and report. No silent retries.
+- Write one run-log line per step as it completes (`N. done|skipped|failed — artifact — check result`) and `WAITING FOR GO: <step>` at each gate.

package/skills/playbooks/pb-docs-site/SKILL.md

@@ -0,0 +1,44 @@
+---
+name: pb-docs-site
+description: >-
+  Publish a project's docs as a static HTML manual on GitHub Pages: check
+  that Pages is enabled, bring the wiki up to date, list the doc gaps, build
+  the site, preview it locally and push it after GO. Use for "publish the
+  docs", "docs site", "put the manual on GitHub Pages".
+category: design-ui-ux
+kind: playbook
+trigger: ["publish the docs", "docs site", "manual on GitHub Pages"]
+inputs: [repo, source]
+requires:
+  skills: [openwiki-skill, readme, documentation, bdbhtmlmanueldocs, github, "gh (external)"]
+  agents: []
+  mcps: []
+  store: []
+go_points: ["git push"]
+outputs: ["docs/", "production_artifacts/pb-docs-site-<date>.md"]
+verify: "gh api repos/<owner>/<repo>/pages -q .status == built; curl -sI <pages_url> returns 200"
+difficulty: intermediate
+est_time: 30-90 min
+---
+
+# Publish a docs site
+What you get: the project's docs as a static HTML manual on GitHub Pages, pushed only after your GO.
+
+## Inputs
+- repo — the local checkout, default the current directory; `<owner/repo>` comes from `git -C <repo> remote get-url origin`
+- source — where the content lives: OpenWiki pages, the README, or `docs/`
+
+## Steps
+1. Preflight — `gh auth status`, then `gh api repos/<owner>/<repo>/pages` → run log header — gh missing, unauthenticated or no GitHub remote → log it, give the `gh auth login` / remote hint, stop; 404 → stop with "Pages not enabled: enable it in repo settings", this playbook does not enable Pages; a private repo whose Pages call is refused for plan reasons → stop with "Pages on a private repo needs a paid plan", and never change the repo's visibility. Then openwiki-skill — wiki refreshed or confirmed current → log line — Pages answered and the wiki is current
+2. readme and documentation — `source` against the code → list of doc gaps in the run log — stops for approval
+3. bdbhtmlmanueldocs — approved content → site files in `docs/` (or the Pages source path the step 1 response names) — files written, nothing committed; the skill's Pages build-type switch (`gh api -X PUT .../pages`) and its Pages deploy workflow are NOT run here, only the site files are written
+4. Preview — a local preview link or the path to the built `index.html` in the run log — link or path given
+5. [GO] git push — the site files committed to the branch and path the step 1 response names as the Pages source; the WAITING FOR GO line names the branch and the file list. The WAITING FOR GO line also says: a Pages site of a private repo is public. The run stops here until the human types GO. The hook guards `git push`; it does not guard `gh api` settings writes, so no Pages setting or workflow is changed in this playbook.
+6. github — `gh api repos/<owner>/<repo>/pages -q .status` equals `built` (poll, at most 5 minutes), then `curl -sI <pages_url>` → status line in the run log — returns 200
+
+Run log: `production_artifacts/pb-docs-site-<date>.md` in the start directory, never committed
+
+Rules
+- Anything other than the literal GO (case-insensitive) is not a GO; a GO covers only that one step, one time.
+- A failed check stops the run: write the failure into the run log and report. No silent retries.
+- Write one run-log line per step as it completes (`N. done|skipped|failed — artifact — check result`) and `WAITING FOR GO: <step>` at each gate.

package/skills/playbooks/pb-event-tracker/SKILL.md

@@ -19,7 +19,6 @@ outputs: ["brief.md", "tracker.csv", "summary.md", "vendor-requests-draft.md", "
 verify: "summary.md total recomputed from tracker.csv matches"
 difficulty: intermediate
 est_time: 20-40 min
-disable-model-invocation: true
 ---
 
 # Event tracker

package/skills/playbooks/pb-focus-chunks/SKILL.md

@@ -0,0 +1,40 @@
+---
+name: pb-focus-chunks
+description: >-
+  Split one big task into chunks of at most 25 minutes, each with a
+  done-check, and place the demanding ones in your high-energy hours. Use for
+  "split this task", "break it into chunks", "I can't start this", "focus
+  plan". Nothing leaves your computer.
+category: bdb-core
+kind: playbook
+trigger: ["split this task", "break it into chunks", "focus plan"]
+inputs: [task, energy_pattern]
+requires:
+  skills: [concise-planning]
+  agents: []
+  mcps: []
+  store: []
+go_points: []
+outputs: ["chunks.md", "run-log.md"]
+verify: "every chunk is <= 25 min and has a done-check; sum of chunks equals the estimate"
+difficulty: beginner
+est_time: 5-10 min
+---
+
+# Focus chunks
+What you get: one big task split into 25-minute chunks, ordered by your energy level, each with a done-check.
+
+## Inputs
+- One task, in your own words, with your total time estimate
+- Your energy pattern — asked once, e.g. morning high / afternoon low
+- A save folder — asked once; default `./pb-focus-chunks-<date>/`
+
+## Steps
+1. Ask once — save folder, task, total estimate, energy pattern → `run-log.md` — all answered
+2. concise-planning — task and estimate → `chunks.md`: numbered chunks of at most 25 minutes, each with minutes, a done-check and an energy tag (high / low) — every chunk is <= 25 min and has a done-check; the minutes add up to your estimate
+3. Order `chunks.md` so high-energy chunks fall into your high-energy slots and low-energy chunks into the rest → slot named per chunk — no high-energy chunk sits in a low slot
+4. Show `chunks.md` in full and apply your edits until you approve — approval logged
+
+Nothing in this plan is sent anywhere, so there is no GO step. It only writes into the save folder.
+
+Run log: `run-log.md` in the save folder. One line per step as it completes (`N. done|skipped|failed — file — check result`). If a check fails, stop, write the failure into the log and tell the user.

package/skills/playbooks/pb-handover/SKILL.md

@@ -0,0 +1,41 @@
+---
+name: pb-handover
+description: >-
+  Write a handover note for a colleague from the state of a project folder:
+  what is done, what is open, what is risky, the next 3 steps and where
+  things live. Sent only after your GO. Use for "handover note", "hand this
+  project over", "I'm going on leave, brief my colleague".
+category: bdb-core
+kind: playbook
+trigger: ["handover note", "hand this project over", "brief my colleague"]
+inputs: [project_folder, colleague_name]
+requires:
+  skills: [quick-recap, memb-skill, github, "gh (external)"]
+  agents: []
+  mcps: []
+  store: []
+go_points: [send handover]
+outputs: ["handover.md", "run-log.md"]
+verify: "every open item cites a file, commit or PR"
+difficulty: beginner
+est_time: 10-20 min
+---
+
+# Handover note
+What you get: a handover note for a colleague from the state of a project folder.
+
+## Inputs
+- A project folder
+- The colleague's name
+- A save folder — asked once; default `./pb-handover-<date>/`
+
+## Steps
+1. Ask once — save folder, project folder, colleague name → `run-log.md` — the folder exists
+2. Read the folder and its git log (read-only); github — only if `gh (external)` is installed: your open pull requests for this repo → list of files, recent commits and open PRs in `run-log.md` — if gh is missing, skipped and logged
+3. quick-recap — folder state and recent commits → what is done, what is in progress — each point cites a file or commit
+4. memb-skill — search open commitments for this project → added tagged `[memB]` — skipped and logged if memB is not installed
+5. Write `handover.md`: done, open, risks, next 3 steps, where things live — every open item cites a file, commit or PR; nothing invented, unknown is `?`
+6. Show `handover.md` in full and apply your edits until you approve — approval logged
+7. [GO] Send the handover through a connector you name, or send it yourself — show the recipient (name + address, `?` blocks sending until you fill it) and the full text first. The run stops here until the human types GO. The GO covers exactly the recipient and message shown and nothing else; a different or added recipient needs a fresh GO. The go-gate hook does not guard sending: this [GO] is the only guard.
+
+Run log: `run-log.md` in the save folder. One line per step as it completes (`N. done|skipped|failed — file — check result`), and `WAITING FOR GO: <step>` at the gate. Anything other than the literal GO (case-insensitive) is not a GO. If a check fails, stop, write the failure into the log and tell the user.

package/skills/playbooks/pb-harness-work/SKILL.md

@@ -0,0 +1,64 @@
+---
+name: pb-harness-work
+description: >-
+  Change the agent harness itself (AOS, AO or CBS hooks, gates, memory,
+  permissions, delegation, plugins, bootstrap) the safe way: look up the
+  matching harness pattern, design against its gotchas, build with
+  /startcycle and a live trail, check every harness, open a PR after GO.
+  Use for "change a hook", "fix the go-gate", "harness work", "plugin change".
+category: bdb-core
+kind: playbook
+trigger: ["harness work", "change a hook", "fix the go-gate", "plugin change"]
+inputs: [goal, repo, area]
+requires:
+  skills: [agentic-harness-patterns, startcycle, agenttrail, verification-before-completion, git-pr-review, github, "gh (external)"]
+  agents: [architect, techlead, reviewer]
+  mcps: []
+  store: []
+go_points: [git push + gh pr create]
+outputs: ["production_artifacts/00_execution_plan.md", "production_artifacts/pb-harness-work-<date>.md"]
+verify: "npm test exit 0 on the pushed SHA; gh pr view <branch> --json state -q .state == OPEN"
+difficulty: advanced
+est_time: 1-3 h
+---
+
+# Change the harness safely
+What you get: a harness change that was designed against the known gotchas, built and reviewed, tested on every harness, and opened as a PR after your GO.
+
+## Inputs
+- goal — what should change, asked in step 1
+- repo — the local checkout, asked in step 1
+- area — memory, permissions, hooks, delegation, context, skills/plugins, tools or bootstrap, asked in step 1
+
+## Steps
+1. Ask + preflight (run everything from `<repo>`) — goal, repo, area → run log; default branch: `default=$(git -C <repo> symbolic-ref --short refs/remotes/origin/HEAD); default=${default#origin/}` (the command prints `origin/main`); if `git -C <repo> branch --show-current` equals it, `git -C <repo> switch -c feat/<slug>` — on a feature branch (gh missing or unauthenticated → log it, give the `gh auth login` hint, stop)
+2. agentic-harness-patterns — area → section and reference file, named in the run log; files live in `skills/global_config/agentic-harness-patterns/references/` (installed copy: the matching directory):
+   - memory → `memory-persistence-pattern.md`
+   - permissions → `permission-gate-pattern.md`
+   - hooks → `hook-lifecycle-pattern.md`
+   - delegation → `agent-orchestration-pattern.md` and `task-decomposition-pattern.md`
+   - context → `context-engineering-pattern.md`
+   - skills/plugins → `skill-runtime-pattern.md`
+   - tools → `tool-registry-pattern.md`
+   - bootstrap → `bootstrap-sequence-pattern.md`
+   - check: the gotcha titles that apply are listed as a checklist (titles only, no copied content)
+3. startcycle (Architect) — goal and gotcha checklist → `production_artifacts/00_execution_plan.md` with agenttrail components, each with a `files:` line — every listed gotcha is marked addressed or n/a with a reason; a component without `files:` → back to Architect
+4. agenttrail — `aos-trail . --plan production_artifacts/00_execution_plan.md --no-open` → URL in the run log, before the build nodes start — URL printed; a no-op if startcycle already started the trail (it is safe to run twice)
+5. startcycle (TechLead → build → Reviewer) — the dispatcher is the main session; the agents never call each other → code and review file — no open `blocking` finding
+6. Cross-harness check → table in the run log, one row per harness (affected yes/no, file, evidence):
+   - Claude: `.claude/hooks/*.mjs`, settings hooks
+   - agy: `hooks.json` via installer `mergeAntigravityHooks`
+   - OpenCode: `.opencode/plugins/bdb-aos.js`
+   - Codex: `.codex/agents/*.toml`, `~/.codex/hooks` and `[features] hooks` in `~/.codex/config.toml` (both written by `installer.js`)
+   - check: every "yes" row has a test in `npm test` or a named manual check
+7. verification-before-completion — `npm test` (and `node scripts/validate-skills.mjs` if skills changed) → fresh output pasted in the run log — exit 0
+8. git commit — compare `git -C <repo> status --porcelain` with the plan's `files:` lines; unlisted changes outside `production_artifacts/` → stop and ask; stage only the listed files (never the run log or `production_artifacts/`) → SHA in the run log — the commit hook passes
+9. git-pr-review — commits → PR body in `production_artifacts/pb-harness-work-<date>-pr.md` — body written, nothing posted
+10. [GO] github — `git -C <repo> push -u origin <branch>`, then `gh pr create -R <owner/repo> --base <default> --head <branch> --title "<title>" --body-file <body>` (`<owner/repo>` from `git -C <repo> remote get-url origin`) — the WAITING FOR GO line names branch, base and title. The run stops here until the human types GO. The hook guards the push only; the PR create is GO by contract.
+
+Run log: `production_artifacts/pb-harness-work-<date>.md` in the repo's start directory, never committed
+
+Rules
+- Anything other than the literal GO (case-insensitive) is not a GO; a GO covers only that one step, one time.
+- A failed check stops the run: write the failure into the run log and report. No silent retries.
+- Write one run-log line per step as it completes (`N. done|skipped|failed — artifact — check result`) and `WAITING FOR GO: <step>` at each gate.