@hybridlabor-api/aos 4.17.0 → 4.18.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hybridlabor-api/aos",
-  "version": "4.17.0",
+  "version": "4.18.1",
   "description": "AOS — A Curated AI AGENT OS. Optimized agent skills and add-ons like memB, OpenWiki, Heimdall Token Saver, and Godmode architectures.",
   "main": "installer.js",
   "engines": {
@@ -29,7 +29,7 @@
     "plugin:build": "node scripts/build-plugin-manifest.mjs",
     "plugin:check": "node scripts/build-plugin-manifest.mjs --check",
     "doctor": "node bin/aos-doctor.mjs",
-    "test": "node scripts/validate-skills.mjs --selftest && node scripts/validate-skills.mjs && node scripts/build-plugin-manifest.mjs --check && node --test tests/opencode-graph-gate.test.js && node --test tests/cross-harness-hooks.test.js && node --test tests/plan-canvas-security.test.mjs && node --test tests/plan-canvas-modes.test.mjs && node --test tests/swarm-wiring.test.js && node tests/aos-store.test.mjs && node --test tests/aos-store-ui.test.mjs && node tests/aos-store-scenario.test.mjs && node tests/aos-doctor.test.mjs && node tests/build-plugin-manifest.test.mjs && node --test tests/plugin-commands.test.js && node --test tests/playbooks.test.mjs && node --test tests/agent-models.test.js && node --test tests/installer-p3.test.js && node --test tests/plugin-migration.test.js && node --test tests/installer-binary.test.js && node --test tests/installer-version.test.js && node --test tests/mcsc-server.test.js && node --test tests/antigravity-hooks.test.js && node --test tests/windows-hooks.test.js && node --test tests/plan-builder.test.mjs && node --test tests/plan-builder-trail.test.mjs && node --test tests/plan-builder-showcase.test.mjs && node --test tests/plan-builder-templates.test.mjs && node --test tests/plan-canvas-home.test.mjs && node --test tests/launchpad-installer.test.js && node --test tests/launchpad-plan-canvas.test.js && node --test tests/go-token.test.js && node --test tests/go-gate-modes.test.js && node --test tests/go-gate-review.test.js && node --test tests/go-gate-review2.test.js && node --test tests/opencode-gogate.test.js && node --test tests/master-session-skill.test.js && node --test tests/aos-acp.test.js && node --test tests/opencode-go-token.test.js && node --test tests/opencode-adapter.test.js && node --test tests/opencode-install.test.js && node --test tests/pr-recap.test.mjs && node --test tests/bdb-visual-edit.test.mjs && node --test tests/opencode-trail-autostart.test.mjs && node --test tests/trail-autostart-hook.test.mjs && node --test tests/agenttrail-ensure.test.mjs && node --test tests/aos-bus.test.js && node --test tests/installer-quick-update.test.js"
+    "test": "node scripts/validate-skills.mjs --selftest && node scripts/validate-skills.mjs && node scripts/build-plugin-manifest.mjs --check && node --test tests/opencode-graph-gate.test.js && node --test tests/cross-harness-hooks.test.js && node --test tests/plan-canvas-security.test.mjs && node --test tests/plan-canvas-modes.test.mjs && node --test tests/swarm-wiring.test.js && node tests/aos-store.test.mjs && node --test tests/aos-store-ui.test.mjs && node tests/aos-store-scenario.test.mjs && node tests/aos-doctor.test.mjs && node tests/build-plugin-manifest.test.mjs && node --test tests/plugin-commands.test.js && node --test tests/playbooks.test.mjs && node --test tests/agent-models.test.js && node --test tests/installer-p3.test.js && node --test tests/plugin-migration.test.js && node --test tests/installer-binary.test.js && node --test tests/installer-version.test.js && node --test tests/mcsc-server.test.js && node --test tests/antigravity-hooks.test.js && node --test tests/windows-hooks.test.js && node --test tests/plan-builder.test.mjs && node --test tests/plan-builder-trail.test.mjs && node --test tests/plan-builder-showcase.test.mjs && node --test tests/plan-builder-templates.test.mjs && node --test tests/plan-canvas-home.test.mjs && node --test tests/launchpad-installer.test.js && node --test tests/launchpad-plan-canvas.test.js && node --test tests/go-token.test.js && node --test tests/go-gate-modes.test.js && node --test tests/go-gate-review.test.js && node --test tests/go-gate-review2.test.js && node --test tests/opencode-gogate.test.js && node --test tests/master-session-skill.test.js && node --test tests/aos-acp.test.js && node --test tests/opencode-go-token.test.js && node --test tests/opencode-adapter.test.js && node --test tests/opencode-install.test.js && node --test tests/pr-recap.test.mjs && node --test tests/bdb-visual-edit.test.mjs && node --test tests/opencode-trail-autostart.test.mjs && node --test tests/trail-autostart-hook.test.mjs && node --test tests/agenttrail-ensure.test.mjs && node --test tests/aos-bus.test.js && node --test tests/installer-quick-update.test.js && node --test tests/no-builderio-visual.test.mjs && node --test tests/retired-skills.test.mjs && node --test tests/plan-canvas-annotate-server.test.mjs && node --test tests/plan-canvas-annotation-schema.test.mjs && node --test tests/plan-canvas-annotate-client.test.mjs && node --test tests/plan-canvas-trail-on-approve.test.mjs && node --test tests/plan-canvas-revive.test.mjs && node --test tests/plan-canvas-route.test.mjs && node --test tests/bdb-visual-edit-locate.test.mjs && node --test tests/agenttrail-worktrees.test.mjs && node --test tests/plan-canvas-e2e-app.test.mjs && node --test tests/plan-canvas-r1.test.mjs && node --test tests/agenttrail-lanes.test.mjs && node --test tests/memb-ambient.test.js && node --test tests/mcsc-depth.test.js && node --test tests/go-check.test.js && node --test tests/coordination-hygiene.test.js && node --test tests/codex-gate-smoke.test.js && node --test tests/setup-subagents-resolve.test.js && node --test tests/codenotch.test.js && node --test tests/installer-dist-tag.test.js"
   },
   "publishConfig": {
     "access": "public"

package/plugin-commands.json

@@ -58,12 +58,11 @@
       "description": "Plan end to end: draft, render in plan-canvas or Plan Builder, annotate, await approval, then hand off.",
       "skills": [
         "concise-planning",
-        "visual-plan",
         "plan-canvas",
         "writing-plans"
       ],
       "bodies": {
-        "claude": "Run the full planning pipeline: 1) draft the plan with `concise-planning`; 2) always offer the choice between plan-canvas and Plan Builder (`visual-plan`) for rendering; 3) collect annotations and wait for the human's approval; 4) only after approval continue with `writing-plans` or `/bdb-aos:graph`. Topic: $ARGUMENTS"
+        "claude": "Run the full planning pipeline: 1) draft the plan with `concise-planning`; 2) always offer the choice between plan-canvas and Plan Builder (`aos-plan-canvas open <dir> --mode bdb-plan-builder`) for rendering; 3) collect annotations and wait for the human's approval; 4) only after approval continue with `writing-plans` or `/bdb-aos:graph`. Topic: $ARGUMENTS"
       }
     },
     "brainstorm": {

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "bdb-aos",
-  "version": "4.17.0",
+  "version": "4.18.1",
   "description": "Full BDB Agent OS suite: 200+ curated skills, 13 subagents and the startcycle pipelines for Claude Code. Gate hooks and MCP servers are installed by the AOS installer.",
   "author": {
     "name": "Tim Rennings / Hybridlabor Global LLC",
@@ -222,9 +222,6 @@
     "./skills/global_config/vercel-ai-sdk-expert",
     "./skills/global_config/vercel-deployment",
     "./skills/global_config/verification-before-completion",
-    "./skills/global_config/visual-edit",
-    "./skills/global_config/visual-plan",
-    "./skills/global_config/visual-recap",
     "./skills/global_config/wcag-audit-patterns",
     "./skills/global_config/web-artifacts-builder",
     "./skills/global_config/web-performance-optimization",

package/plugins/bdb-aos-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "bdb-aos",
-  "version": "4.17.0",
+  "version": "4.18.1",
   "description": "Full BDB Agent OS suite for Codex: command entry points ($bdb-aos:setup, $bdb-aos:init, ...) generated from plugin-commands.json.",
   "author": {
     "name": "Tim Rennings / Hybridlabor Global LLC",

package/plugins/bdb-aos-codex/skills/plan/SKILL.md

@@ -3,4 +3,4 @@ name: plan
 description: "Plan end to end: draft, render in plan-canvas or Plan Builder, annotate, await approval, then hand off. Generated from plugin-commands.json; invoke as $bdb-aos:plan."
 ---
 
-Run the full planning pipeline: 1) draft the plan with `concise-planning`; 2) always offer the choice between plan-canvas and Plan Builder (`visual-plan`) for rendering; 3) collect annotations and wait for the human's approval; 4) only after approval continue with `writing-plans` or `$bdb-aos:graph`. Topic: whatever the user wrote after the skill name
+Run the full planning pipeline: 1) draft the plan with `concise-planning`; 2) always offer the choice between plan-canvas and Plan Builder (`aos-plan-canvas open <dir> --mode bdb-plan-builder`) for rendering; 3) collect annotations and wait for the human's approval; 4) only after approval continue with `writing-plans` or `$bdb-aos:graph`. Topic: whatever the user wrote after the skill name

package/scripts/codex-gate-smoke.mjs

@@ -0,0 +1,73 @@
+#!/usr/bin/env node
+// Plan and runner for the Codex hook smoke test. Default: print the plan, run nothing.
+// `--run` calls Codex, which calls a paid API, so it also needs AOS_CODEX_SMOKE=1 and a login
+// inside the throwaway CODEX_HOME (printed in the plan). Everything about firing under ACP
+// is UNVERIFIED until this has been run; see docs/codex-gate-smoke.md.
+
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const root = join(dirname(fileURLToPath(import.meta.url)), "..");
+
+const PROBE = `import { appendFileSync, readFileSync } from "node:fs";
+let input = {};
+try { input = JSON.parse(readFileSync(0, "utf8")); } catch {}
+const cmd = input?.tool_input?.command ?? "";
+appendFileSync(process.env.AOS_SMOKE_MARKER, JSON.stringify({ at: new Date().toISOString(), keys: Object.keys(input), cmd }) + "\\n");
+if (String(cmd).includes("SMOKE_DENY")) { process.stderr.write("smoke: denied by probe hook\\n"); process.exit(2); }
+`;
+
+export function buildConfig(probePath) {
+  return [
+    "[features]",
+    "hooks = true",
+    "",
+    "[[hooks.PreToolUse]]",
+    'matcher = "^(Bash|run_command)$"',
+    "[[hooks.PreToolUse.hooks]]",
+    'type = "command"',
+    `command = ${JSON.stringify(`node "${probePath}"`)}`,
+    "timeout = 10",
+    "",
+  ].join("\n");
+}
+
+export function steps({ dir = "<tmpdir>", bypassTrust = false } = {}) {
+  const env = `CODEX_HOME=${dir}/codex-home AOS_SMOKE_MARKER=${dir}/marker.jsonl`;
+  const trust = bypassTrust ? " --dangerously-bypass-hook-trust" : "";
+  return [
+    { id: "setup", text: `Throwaway CODEX_HOME ${dir}/codex-home with config.toml holding the [[hooks.PreToolUse]] stanza that runs ${dir}/probe-hook.mjs. Log in inside it (codex login, or OPENAI_API_KEY); never copy credentials from ~/.codex.` },
+    { id: "exec-fires", cmd: `${env} codex exec${trust} --skip-git-repo-check -C ${dir} "Run the shell command: echo smoke-ok"`, expect: "marker.jsonl gains a line with cmd containing 'echo smoke-ok'. If not, hooks do not fire under codex exec (or the hook was not trusted)." },
+    { id: "exec-denies", cmd: `${env} codex exec${trust} --skip-git-repo-check -C ${dir} "Run the shell command: echo SMOKE_DENY"`, expect: "marker line for SMOKE_DENY exists and the command did not run (the agent reports it was blocked)." },
+    { id: "acp-fires", cmd: `${env} node ${join(root, "bin", "aos-acp.mjs")} codex --name smoke --cwd ${dir} --allow-default allow --timeout 180 --prompt "Run the shell command: echo smoke-acp"`, expect: "marker.jsonl gains a line with 'echo smoke-acp'. UNVERIFIED: if only the aos-acp permission request fires and the hook does not, aos-acp stays the only gate for Codex." },
+    { id: "record", text: "Write the observed result of each step (and the Codex version) into docs/codex-gate-smoke.md, replacing UNVERIFIED with the date and the result. Hook input keys are in marker.jsonl ('keys')." },
+  ];
+}
+
+const invokedAs = (() => { try { return realpathSync(process.argv[1] || ""); } catch { return ""; } })();
+if (invokedAs === fileURLToPath(import.meta.url)) {
+  const run = process.argv.includes("--run");
+  const bypassTrust = process.argv.includes("--bypass-trust");
+  if (!run) {
+    console.log("Codex hook smoke plan (nothing is executed; add --run with AOS_CODEX_SMOKE=1 to run it)\n");
+    for (const s of steps({ bypassTrust })) console.log(`[${s.id}] ${s.cmd ?? s.text}${s.expect ? `\n    expect: ${s.expect}` : ""}`);
+    process.exit(0);
+  }
+  if (process.env.AOS_CODEX_SMOKE !== "1") { console.error("refusing to run: this calls a paid API. Set AOS_CODEX_SMOKE=1."); process.exit(2); }
+  const dir = mkdtempSync(join(tmpdir(), "aos-codex-smoke-"));
+  writeFileSync(join(dir, "probe-hook.mjs"), PROBE);
+  const home = join(dir, "codex-home");
+  mkdirSync(home);
+  writeFileSync(join(home, "config.toml"), buildConfig(join(dir, "probe-hook.mjs")));
+  const marker = join(dir, "marker.jsonl");
+  for (const s of steps({ dir, bypassTrust }).filter((x) => x.cmd)) {
+    const before = existsSync(marker) ? readFileSync(marker, "utf8").split("\n").length : 0;
+    const r = spawnSync("sh", ["-c", s.cmd], { stdio: "inherit", timeout: 240000 });
+    const after = existsSync(marker) ? readFileSync(marker, "utf8").split("\n").length : 0;
+    console.log(`[${s.id}] exit ${r.status}; hook fired: ${after > before ? "YES" : "NO"}; expect: ${s.expect}`);
+  }
+  console.log(`marker and config kept in ${dir} (remove it yourself when done)`);
+}

package/skills/basic/master-session/SKILL.md

@@ -20,6 +20,17 @@ One session is the **master**: it keeps the overview, asks workers for status, a
   - agy: no sanctioned ACP adapter (`antigravity-acp` breaches Google's Antigravity terms). Adopt agy sessions or delegate via the `mcsc` skill.
   - If AO is installed, `ao-orchestrator` may run the same workers; it adds nothing the token protocol needs.
 
+### Routing: which channel for which job
+
+| Job | Channel |
+|---|---|
+| One-shot task for another harness | `mcsc` (one level deep, `delegate_agy` is read-only) |
+| A worker that may need a GO | `aos-acp` |
+| A message to a running OpenCode session | `aos-bus` |
+| A durable fleet across repos | AO (optional; AOS must work without it) |
+
+Details and limits (`opencode run --auto` auto-approves tool calls, a GO is never inherited): `docs/delegation-routing.md`.
+
 ### `aos-acp` in one paragraph
 
 `bin/aos-acp.mjs` is a zero-dependency ACP client: it spawns the adapter (`npx -y @agentclientprotocol/codex-acp`, `opencode acp`, `npx -y @agentclientprotocol/claude-agent-acp`), runs `initialize` → `session/new` → `session/prompt`, streams the worker's text to stdout and logs every event to `~/.aos/acp/<name>.jsonl`. A `session/request_permission` for a guarded command (the go-gate list) is answered `allow_once` only with a valid GO token for `<name>`; with `--go-wait <sec>` the request is parked (log event `permission_pending`, show it as `GO needed`) until the token appears or the wait ends. Everything else follows `--allow-default deny|allow` (deny by default). `--model <id>` is sent as ACP `session/set_config_option` (`configId: "model"`, id is adapter-specific, e.g. `sonnet`, `provider/model`); `fable` ids are rejected (workers run opus, sonnet or haiku), default is the adapter default and is logged. ACP workers are not in `ListAgents`: the roster lists them from the logs.

package/skills/global_config/agenttrail/SKILL.md

@@ -33,7 +33,9 @@ It prints the URL (default http://localhost:5330, next free port if taken). Open
 aos-trail --ensure [--cwd <dir>] [--plan <file>] [--session <id>] [--json]
 ```
 
-Starts the map detached if none runs for this repo (matched via `/whoami` `repoPath` on 127.0.0.1:5330-5344), opens it at most once per session (state in `$TMPDIR/aos-trail-ensure/`), and always exits 0. Plan: `--plan`, else `production_artifacts/00_execution_plan.md`, else the single `production_artifacts/*/00_execution_plan.md`; it needs a `{#id}` marker. No open under `CI`, SSH, or headless Linux; with `AO_BROWSER_CAPABILITY` it runs `ao preview <url>`. `--json` prints `{url,started,opened,reason,plan,hint}`. Test overrides: `AOS_TRAIL_OPENER` (opener command), `AOS_TRAIL_PORTS=lo-hi` (probe range).
+Starts the map detached if none runs for this repo (matched via `/whoami` `repoPath` on 127.0.0.1:5330-5344). `repoPath` is the repo's main checkout, so every git worktree of a repo finds the same map; the map shows each worktree as its own lane (branch and folder) and files hook events by their `cwd`. `/whoami` also lists `worktrees`, opens it at most once per session (state in `$TMPDIR/aos-trail-ensure/`), and always exits 0. Plan: `--plan`, else `production_artifacts/00_execution_plan.md`, else the single `production_artifacts/*/00_execution_plan.md`; it needs a `{#id}` marker. No open under `CI`, SSH, or headless Linux; with `AO_BROWSER_CAPABILITY` it runs `ao preview <url>`. `--json` prints `{url,started,opened,reason,plan,hint}`. Test overrides: `AOS_TRAIL_OPENER` (opener command), `AOS_TRAIL_PORTS=lo-hi` (probe range).
+
+Lanes: main first, then at most 11 worktrees; the slots go to the most recently active ones (a lane with events in the last 10 min keeps its slot), and events from any further worktree of the repo are filed in one `other worktrees` lane, never in main. `/whoami` carries `protocol: 2`. `--ensure` replaces a daemon on this repo (or one of its worktrees) that lacks it: the new map starts first, then the old one is asked to quit via `POST /shutdown` (JSON body naming its own `repoPath`); a daemon that cannot (older ones have no such API) keeps running and `hint` says which port to stop. Two concurrent `--ensure` runs share a lock file in `$TMPDIR/aos-trail-ensure/`. `/setup` on a map with several lanes needs `{"lane": "<key>"}` and writes into that checkout.
 
 ## Plan convention