@hybridlabor-api/aos 4.4.2-beta.1 → 4.4.2-beta.3

package/CLAUDE.md

@@ -616,6 +616,58 @@ must not do.
 
 ## Headless timeouts
 
+A trivial headless `agy` prompt was measured at **605s** in 2026-09.
+`agy-delegate` defaults to `--print-timeout 5m`, so it aborts at 300s and
+reports an empty body while the answer is still arriving. Pass `--timeout 15m`
+for anything non-trivial. A short timeout does not read as "slow", it reads as
+"broken".
+
+# AOS — Antigravity / Gemini
+
+**Read [AGENTS.md](AGENTS.md) first.** It holds every rule that applies to all
+harnesses: the non-negotiables, the release gate, Conventional Commits, the
+skill contract and category routing, the pipeline variants, and the delegation
+policy. Nothing from it is repeated here — a rule that lives in two files is a
+rule that will eventually disagree with itself.
+
+This file covers only what is specific to running AOS under Antigravity.
+
+## Nothing enforces the gate here — you are the enforcement
+
+`.claude/hooks/go-gate.mjs` is a Claude Code hook and does not run on this
+harness. Not one of the four release commands is mechanically blocked for you,
+and neither is anything else.
+
+So the full rule in AGENTS.md applies here in its entirety, not just its
+hook-enforced subset: when the user asks for a plan, review, audit or
+multi-step action, you are read-only until they answer with the literal **GO**
+— including file writes and `git commit`. On Claude Code a hook would catch the
+four worst cases if discipline failed. Here there is no backstop, which makes
+this the harness where the rule matters most, not least.
+
+## Model routing
+
+The tier names in `agy-delegate` map to models that go stale — the built-in
+`flash` still points at Gemini 3.7 while 3.8 ships. Re-check against
+`agy models` after every upgrade; the id carries both the version and the
+effort suffix.
+
+| Work | Model |
+|---|---|
+| Media, fast or mechanical coding, boilerplate | `Gemini 3.8 Flash (Medium)` |
+| Trivial one-liners | `Gemini 3.8 Flash (Low)` |
+| Review, architecture, hard reasoning | `Claude Sonnet 4.6 (Thinking)` |
+
+Set these once via `CLAUDE_PLUGIN_OPTION_TIER_{FLASH,FLASH_LO,PRO}` in
+`~/.zshenv` — **not** `~/.zshrc`, which non-interactive tool shells never
+source.
+
+Adversarial review is the case that most repays the stronger model: a Flash
+tier tends to agree with what it is shown, which is the one thing a reviewer
+must not do.
+
+## Headless timeouts
+
 A trivial headless `agy` prompt was measured at **605s** in 2026-09.
 `agy-delegate` defaults to `--print-timeout 5m`, so it aborts at 300s and
 reports an empty body while the answer is still arriving. Pass `--timeout 15m`

package/bin/aos-uninstall.mjs

@@ -50,8 +50,21 @@ const MODULE_DIRS = ['memB', 'bdb-synapse', 'bdb-os-remote', 'bdb-dev-creator-ex
   'bdb-dev-tool-installer',
   'bdb-agent-orchestrator',      // AO
   'bdb-os-agent-workspace',      // AO's archived predecessor, if still lying around
+  'bdb-dev-optimized-agent-skills', // AOS's own core payload cache, when a "from source" or non-npx run left one behind
 ].map((m) => h('.agents', m));
 
+// installer.js's detectInstallState() treats any of these as proof AOS is
+// still installed, independently of the manifest -- a leftover copy after
+// this uninstall runs was reported as "Current & Up-to-date" on the very
+// next launch, with the manifest already gone. Keep this list in exact sync
+// with the `legacyMarkers` array in installer.js's detectInstallState().
+const LEGACY_MARKERS = [
+  h('.agents', 'AGENTS.md'),
+  h('.gemini', 'config', 'skills', 'startcycle', 'SKILL.md'),
+  h('.agents', 'skills', 'startcycle', 'SKILL.md'),
+  h('.claude', 'skills', 'startcycle', 'SKILL.md'),
+];
+
 const sha256 = (file) => {
   try { return createHash('sha256').update(readFileSync(file)).digest('hex'); }
   catch { return null; }
@@ -77,13 +90,14 @@ function plan() {
     .filter((a) => existsSync(a.plist));
 
   const modules = MODULE_DIRS.filter(existsSync);
+  const legacy = LEGACY_MARKERS.filter(existsSync);
   const data = PURGE ? DATA_PATHS.filter((d) => existsSync(d.path)) : [];
 
-  return { manifest, ours, edited, gone, agents, modules, data };
+  return { manifest, ours, edited, gone, agents, modules, legacy, data };
 }
 
 function describe(p) {
-  const { manifest, ours, edited, gone, agents, modules, data } = p;
+  const { manifest, ours, edited, gone, agents, modules, legacy, data } = p;
 
   if (!manifest) {
     console.log('Kein Installations-Manifest unter ' + tilde(MANIFEST) + '.');
@@ -110,6 +124,11 @@ function describe(p) {
     console.log('\nModule:');
     for (const m of modules) console.log(`    ${tilde(m)}`);
   }
+  if (legacy.length) {
+    console.log(`\nInstallations-Marker (${legacy.length}) -- ohne diese hält die nächste`);
+    console.log('  Installation AOS für bereits aktuell installiert:');
+    for (const l of legacy) console.log(`    ${tilde(l)}`);
+  }
 
   console.log('\nBleibt erhalten:');
   if (!PURGE) for (const d of DATA_PATHS.filter((d) => existsSync(d.path))) console.log(`    ${tilde(d.path).padEnd(18)} ${d.what}`);
@@ -140,7 +159,7 @@ function dirSize(p) {
 
 // ------------------------------------------------------------------ execute
 function execute(p) {
-  const { ours, edited, agents, modules, data } = p;
+  const { ours, edited, agents, modules, legacy, data } = p;
   const stamp = new Date().toISOString().replace(/[:.]/g, '').slice(0, 15);
   let removed = 0, backed = 0;
 
@@ -161,6 +180,9 @@ function execute(p) {
   for (const m of modules) { try { rmSync(m, { recursive: true, force: true }); } catch { /* in use */ } }
   if (modules.length) console.log(`  ${modules.length} Module entfernt`);
 
+  for (const l of legacy) { try { rmSync(l); } catch { /* already gone */ } }
+  if (legacy.length) console.log(`  ${legacy.length} Installations-Marker entfernt`);
+
   // Only the BDB hook entries leave settings.json; everything else in it is
   // the user's and must survive an uninstall exactly as it survives an install.
   const settings = h('.claude', 'settings.json');

package/installer.js

@@ -3405,15 +3405,26 @@ function generateAndOpenLaunchpad() {
 
     const filePath = path.join(os.homedir(), '.agents', 'bdb-launchpad.html');
     fs.writeFileSync(filePath, html, 'utf-8');
+    const warnOpenFailed = (e) => log.warn(`Could not open the dashboard automatically (${e.message}). Open it yourself: ${filePath}`);
     try {
+        let child;
         if (process.platform === 'darwin') {
-            spawn('open', [filePath], { detached: true, stdio: 'ignore' }).unref();
+            child = spawn('open', [filePath], { detached: true, stdio: 'ignore' });
         } else if (process.platform === 'win32') {
-            spawn('cmd.exe', ['/c', 'start', '""', filePath], { detached: true, stdio: 'ignore' }).unref();
+            // cmd.exe /c start has a title-vs-path quoting quirk when the
+            // arguments come from spawn's argv array rather than a real shell --
+            // on a real Windows test run it silently opened nothing, and the
+            // failure was invisible: spawn() reports a bad launch asynchronously
+            // via 'error', not by throwing, so the try/catch around this call
+            // could never have caught it regardless of --verbose. explorer.exe
+            // on a plain file path has no title argument to misparse.
+            child = spawn('explorer', [filePath], { detached: true, stdio: 'ignore' });
         } else {
-            spawn('xdg-open', [filePath], { detached: true, stdio: 'ignore' }).unref();
+            child = spawn('xdg-open', [filePath], { detached: true, stdio: 'ignore' });
         }
-    } catch (e) { logDebug(e, 'launchpad open'); }
+        child.on('error', warnOpenFailed);
+        child.unref();
+    } catch (e) { warnOpenFailed(e); }
 }
 
 async function universalHarnessSync(primaryMcpConfigPath) {
@@ -3662,12 +3673,14 @@ async function main() {
                 { value: 'quick', label: `⚡ Quick Update (v${installState.localVersion} ➔ v${installState.currentVersion})`, hint: 'refresh skills, templates & daemons' },
                 { value: 'project', label: '📁 Drop Local Project Harness', hint: 'copy dispatcher contract to cwd' },
                 { value: 'reconfigure', label: '🛠️ Reconfigure System', hint: 'change targets, tier or options' },
+                { value: 'uninstall', label: '🗑️ Uninstall AOS', hint: 'remove what this installer placed; your data stays' },
                 { value: 'cancel', label: '❌ Exit' }
               ]
             : [
                 { value: 'project', label: '📁 Drop Local Project Harness', hint: 'copy dispatcher contract to cwd' },
                 { value: 'quick', label: '🔄 Verify & Refresh All Skills', hint: 're-sync and health check' },
                 { value: 'reconfigure', label: '🛠️ Reconfigure System', hint: 'switch tier or targets' },
+                { value: 'uninstall', label: '🗑️ Uninstall AOS', hint: 'remove what this installer placed; your data stays' },
                 { value: 'cancel', label: '❌ Exit' }
               ];
 
@@ -3691,6 +3704,19 @@ async function main() {
             outro('Quick Update complete.');
             return;
         }
+        if (action === 'uninstall') {
+            // aos-uninstall.mjs is its own script, not a function of this file --
+            // it is ESM (installer.js is CommonJS) and drives its own readline
+            // confirmation prompt, so it runs as a real child process with
+            // inherited stdio rather than being imported in-process.
+            const uninstallScript = path.join(srcDir, 'bin', 'aos-uninstall.mjs');
+            if (!fs.existsSync(uninstallScript)) {
+                log.error(`Uninstaller not found at ${uninstallScript} -- run it directly: npx @hybridlabor-api/aos-uninstall`);
+                return;
+            }
+            spawnSync('node', [uninstallScript], { stdio: 'inherit' });
+            return;
+        }
     }
 
     const detectedNames = detections.map(d => d.name).join(', ');

package/lib/startup-ui.js

@@ -83,7 +83,13 @@ function buildTelemetryCard({ installState, detections, daemonStatus = [] }) {
         'Google Antigravity': 'Antigravity',
         'ChatGPT Codex CLI': 'Codex CLI',
         'Claude Code CLI': 'Claude Code',
-        'Roo Code / Cline / VS Code': 'Roo / Cline',
+        // The underlying detection (installer.js's 'vscode' evidence) fires on
+        // any of: the VS Code app/CLI being present, OR a Roo/Cline extension
+        // glob match. Those are not the same claim -- plain VS Code with no
+        // Roo/Cline extension installed used to display as "Roo / Cline" here,
+        // asserting something that was not there. "VS Code" is the one label
+        // that is true in all three trigger cases.
+        'Roo Code / Cline / VS Code': 'VS Code',
         'Aider CLI': 'Aider',
         'OpenCode CLI': 'OpenCode',
         'Cursor / Generic IDE': 'Cursor',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hybridlabor-api/aos",
-  "version": "4.4.2-beta.1",
+  "version": "4.4.2-beta.3",
   "description": "AOS — A Curated AI AGENT OS. Optimized agent skills and add-ons like memB, OpenWiki, Heimdall Token Saver, and Godmode architectures.",
   "main": "installer.js",
   "bin": {