@polderlabs/bizar 4.2.2 → 4.2.4

package/bizar-dash/src/server/server.mjs

@@ -444,6 +444,7 @@ export async function createServer({
           });
         }
       } catch { /* ignore — mobile.css won't be served, fine */ }
+    }
     app.get('/', (req, res, next) => {
       if (!shouldRedirectToMobile(req)) {
         next();

package/bizar-dash/src/web/views/Config.tsx

@@ -43,6 +43,8 @@ type LightragStatus = {
   port: number;
   llmBinding: string;
   embeddingBinding: string;
+  llmBindingHost: string;
+  embeddingBindingHost: string;
   llmModel: string;
   embeddingModel: string;
   lastError: string | null;

package/bizar-dash/tests/dash-cli-load.test.mjs

@@ -0,0 +1,44 @@
+/**
+ * tests/dash-cli-load.test.mjs
+ *
+ * Regression test for the "is not iterable" bug in loadDashCli (v4.2.4).
+ * The async IIFE was being spread into an array literal before resolving,
+ * producing: TypeError: (intermediate value) is not iterable.
+ *
+ * Run with:
+ *   node --test tests/dash-cli-load.test.mjs
+ */
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const CLI = path.resolve(__dirname, '../../cli/bin.mjs');
+
+test('bizar dash status does not throw "is not iterable" (regression for v4.2.4)', () => {
+  const result = spawnSync('node', [CLI, 'dash', 'status'], {
+    encoding: 'utf8',
+    timeout: 15_000,
+  });
+  const combined = (result.stdout || '') + (result.stderr || '');
+  assert.ok(
+    !combined.includes('is not iterable'),
+    `Expected no "is not iterable" error, got: ${combined.slice(0, 300)}`,
+  );
+});
+
+test('bizar dash status exits cleanly (0) or with a non-iterable error', () => {
+  const result = spawnSync('node', [CLI, 'dash', 'status'], {
+    encoding: 'utf8',
+    timeout: 15_000,
+  });
+  // Exit code 0 = dashboard status resolved successfully.
+  // Non-zero = dashboard not running (acceptable), but must not be the
+  // "is not iterable" TypeError from the broken spread operator.
+  const acceptableExit = result.status === 0 || result.status === 1;
+  const noIterableError = !((result.stdout || '') + (result.stderr || '')).includes('is not iterable');
+  assert.ok(acceptableExit && noIterableError,
+    `Unexpected result: exit=${result.status}, output=${((result.stdout || '') + (result.stderr || '')).slice(0, 200)}`);
+});

package/bizar-dash/tests/memory-install-bootstrap.test.mjs

@@ -0,0 +1,129 @@
+/**
+ * tests/memory-install-bootstrap.test.mjs
+ *
+ * Regression test for v4.2.2: the `bizar` CLI bootstrap path crashed with
+ * `ERR_AMBIGUOUS_MODULE_SYNTAX` on a fresh install because `promptAndInstallOptional`
+ * in `cli/install.mjs` referenced `__dirname` (a CommonJS global) without defining
+ * the ESM polyfill. This was only triggered by the bootstrap path, which the
+ * existing test suite never exercised.
+ *
+ * Test: spawn the CLI in a fresh temp project, with BIZAR_SKIP_INSTALL unset.
+ * The bootstrap should run and exit cleanly (rc 0 or rc 1 for missing auth, but
+ * NOT crash with ERR_AMBIGUOUS_MODULE_SYNTAX).
+ *
+ * Fix: move the `__dirname` polyfill to module scope in cli/install.mjs.
+ */
+
+import { describe, it, beforeEach, afterEach } from 'node:test';
+import assert from 'node:assert/strict';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { mkdirSync, rmSync } from 'node:fs';
+import { execFileSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+
+const __filename = fileURLToPath(import.meta.url);
+const CLI_BIN = join(dirname(__filename), '..', '..', 'cli', 'bin.mjs');
+
+const uid = () => `${Date.now()}-${Math.random().toString(36).slice(2)}`;
+
+/**
+ * Spawn `bizar <subcmd>` in the given cwd, with the given env vars.
+ * Returns { code, stdout, stderr }.
+ *
+ * The bootstrap path is checked by NOT setting BIZAR_SKIP_INSTALL.
+ */
+function runBizarWithoutSkip(args, cwd, extraEnv = {}) {
+  try {
+    const stdout = execFileSync('node', [CLI_BIN, ...args], {
+      cwd,
+      encoding: 'utf8',
+      stdio: 'pipe',
+      timeout: 30_000,
+      env: { ...process.env, ...extraEnv }, // no BIZAR_SKIP_INSTALL
+    });
+    return { code: 0, stdout, stderr: '' };
+  } catch (err) {
+    return {
+      code: err.status ?? 1,
+      stdout: err.stdout ? err.stdout.toString() : '',
+      stderr: err.stderr ? err.stderr.toString() : (err.message ?? ''),
+    };
+  }
+}
+
+describe('bizar CLI bootstrap (v4.2.3 regression)', () => {
+  let projectRoot;
+  let homeDir;
+
+  beforeEach(() => {
+    projectRoot = join(tmpdir(), `bizar-bootstrap-${uid()}`);
+    homeDir = join(tmpdir(), `bizar-bootstrap-home-${uid()}`);
+    mkdirSync(projectRoot, { recursive: true });
+    mkdirSync(homeDir, { recursive: true });
+  });
+
+  afterEach(() => {
+    try { rmSync(projectRoot, { recursive: true, force: true }); } catch { /* ignore */ }
+    try { rmSync(homeDir, { recursive: true, force: true }); } catch { /* ignore */ }
+  });
+
+  it('bizar --version does not crash with ERR_AMBIGUOUS_MODULE_SYNTAX', () => {
+    const r = runBizarWithoutSkip(['--version'], projectRoot, { HOME: homeDir });
+    // Whatever exit code, the key thing is the bootstrap doesn't crash
+    assert.ok(
+      !r.stderr.includes('ERR_AMBIGUOUS_MODULE_SYNTAX'),
+      `bootstrap crashed with ERR_AMBIGUOUS_MODULE_SYNTAX. stderr=${r.stderr}`,
+    );
+    assert.ok(
+      !r.stderr.includes('Cannot determine intended module format'),
+      `bootstrap module-format error. stderr=${r.stderr}`,
+    );
+  });
+
+  it('bizar memory status does not crash with ERR_AMBIGUOUS_MODULE_SYNTAX', () => {
+    const r = runBizarWithoutSkip(['memory', 'status'], projectRoot, { HOME: homeDir });
+    assert.ok(
+      !r.stderr.includes('ERR_AMBIGUOUS_MODULE_SYNTAX'),
+      `bootstrap crashed with ERR_AMBIGUOUS_MODULE_SYNTAX. stderr=${r.stderr}`,
+    );
+    assert.ok(
+      !r.stderr.includes('Cannot determine intended module format'),
+      `bootstrap module-format error. stderr=${r.stderr}`,
+    );
+  });
+
+  it('bizar memory doctor does not crash with ERR_AMBIGUOUS_MODULE_SYNTAX', () => {
+    const r = runBizarWithoutSkip(['memory', 'doctor'], projectRoot, { HOME: homeDir });
+    assert.ok(
+      !r.stderr.includes('ERR_AMBIGUOUS_MODULE_SYNTAX'),
+      `bootstrap crashed with ERR_AMBIGUOUS_MODULE_SYNTAX. stderr=${r.stderr}`,
+    );
+  });
+
+  it('install.mjs source defines __dirname at module scope (regression guard)', () => {
+    // Read the source of cli/install.mjs and check that __dirname is
+    // defined at module scope (not only inside runInstaller).
+    const installSrc = execFileSync('node', ['-e', `
+      const fs = require('fs');
+      const src = fs.readFileSync(${JSON.stringify(join(dirname(CLI_BIN), 'install.mjs'))}, 'utf8');
+      // Find first __dirname definition (should be at module scope, not inside a function)
+      const lines = src.split('\\n');
+      let firstDefine = -1;
+      for (let i = 0; i < lines.length; i++) {
+        if (lines[i].includes('__dirname = dirname(fileURLToPath')) {
+          firstDefine = i;
+          break;
+        }
+      }
+      // The first definition must be BEFORE any function definition that uses __dirname
+      // Simple heuristic: it must be within the first 20 lines
+      process.stdout.write(JSON.stringify({ firstDefine, totalLines: lines.length }));
+    `], { encoding: 'utf8' });
+    const { firstDefine, totalLines } = JSON.parse(installSrc);
+    assert.ok(
+      firstDefine >= 0 && firstDefine < 20,
+      `__dirname polyfill should be at module scope (first 20 lines). Found at line ${firstDefine + 1} of ${totalLines}.`,
+    );
+  });
+});

package/cli/bin.mjs

@@ -775,20 +775,20 @@ function parseDashOpts(dashArgs) {
  * A legacy npm-global fallback is kept for the transitional period.
  */
 async function loadDashCli() {
-  // v4.0.0 — primary: relative import inside the same package
   const { pathToFileURL } = await import('node:url');
-  const candidates = [
-    join(import.meta.dirname, '..', 'bizar-dash', 'src', 'cli.mjs'),
-    // Legacy fallbacks for users with @polderlabs/bizar-dash still installed:
-    ...(async () => {
-      const { execFileSync } = await import('node:child_process');
-      try {
-        const npmRoot = execFileSync('npm', ['root', '-g'], { encoding: 'utf8', timeout: 5000 }).trim();
-        if (npmRoot) return [join(npmRoot, '@polderlabs', 'bizar-dash', 'src', 'cli.mjs')];
-      } catch { /* ignore */ }
-      return [];
-    })(),
-  ];
+  const { join } = await import('node:path');
+
+  const primary = join(import.meta.dirname, '..', 'bizar-dash', 'src', 'cli.mjs');
+
+  // Legacy npm-global fallback (only computed if primary is missing)
+  let legacyFallbacks = [];
+  try {
+    const { execFileSync } = await import('node:child_process');
+    const npmRoot = execFileSync('npm', ['root', '-g'], { encoding: 'utf8', timeout: 5000 }).trim();
+    if (npmRoot) legacyFallbacks = [join(npmRoot, '@polderlabs', 'bizar-dash', 'src', 'cli.mjs')];
+  } catch { /* npm not available or no globals — fine */ }
+
+  const candidates = [primary, ...legacyFallbacks];
 
   for (const p of candidates) {
     try {

package/cli/install.mjs

@@ -1,7 +1,17 @@
 import chalk from 'chalk';
 import boxen from 'boxen';
 import { existsSync, lstatSync, rmSync } from 'node:fs';
-import { join } from 'node:path';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+// ── ESM `__dirname` polyfill ────────────────────────────────────────────────
+// `__dirname` is a CommonJS global. ESM modules don't have it. We define it
+// at module scope so all functions in this file can use it without each
+// having to recreate the polyfill. (v4.2.3 — previously only `runInstaller`
+// had it, which caused `promptAndInstallOptional` to crash with
+// `ERR_AMBIGUOUS_MODULE_SYNTAX` when the bootstrap path fired on a fresh
+// install.)
+const __dirname = dirname(fileURLToPath(import.meta.url));
 
 import { showBanner, showPantheon, sectionHeading } from './banner.mjs';
 import { promptComponents, promptInstallMode, promptAgents, promptSkillPacks, promptApiKeys, promptConfirmInstall, promptRestartOpenCode } from './prompts.mjs';
@@ -232,11 +242,10 @@ export async function installPluginFromGlobal(opts = {}) {
  */
 export async function runInstaller() {
   const { existsSync } = await import('node:fs');
-  const { join, dirname } = await import('node:path');
-  const { fileURLToPath } = await import('node:url');
+  const { join } = await import('node:path');
   const { spawnSync } = await import('node:child_process');
 
-  const __dirname = dirname(fileURLToPath(import.meta.url));
+  // __dirname is defined at module scope (see top of file)
   // cli/install.mjs → ../install.sh
   const installSh = join(__dirname, '..', 'install.sh');
 

package/config/opencode.json

@@ -52,7 +52,7 @@
   },
   "agent": {
     "odin": {
-      "description": "Odin — Pure router that delegates all work to subagents. Routes across Frigg (DeepSeek/Q&A), Vör (DeepSeek/clarify), Mimir (DeepSeek/research), Heimdall (DeepSeek/simple), Hermod (M2.7/git), Thor (M2.7/mid), Baldr (M2.7/design), Tyr (M3/top), Vidarr (GPT-5.5/ultra), Forseti (verifier/M3).",
+      "description": "Odin — Tier 1 primary. Pure router that decomposes requests, dispatches to subagents via the task tool, and synthesizes results. Backed by MiniMax M3. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "primary",
       "model": "minimax/MiniMax-M3",
       "color": "#6366f1",
@@ -66,7 +66,7 @@
       }
     },
     "vor": {
-      "description": "Vör — The Questioning One. When a task is ambiguous, incomplete, or unclear, Vör asks the right clarifying questions before any work begins.",
+      "description": "Vör — Tier 2 clarifier. Reads project context first and asks targeted, project-specific questions when requests are ambiguous. Backed by DeepSeek V4 Flash. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "subagent",
       "model": "opencode/deepseek-v4-flash-free",
       "color": "#8b5cf6",
@@ -77,7 +77,7 @@
       }
     },
     "frigg": {
-      "description": "Frigg — All-knowing Q&A agent. Read-only codebase questions and answers. Never edits, never writes, only answers.",
+      "description": "Frigg — Tier 1 primary. Read-only Q&A agent that answers codebase questions with file:line citations, never edits. Backed by DeepSeek V4 Flash. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "primary",
       "model": "opencode/deepseek-v4-flash-free",
       "color": "#06b6d4",
@@ -93,7 +93,7 @@
       }
     },
     "quick": {
-      "description": "Quick — Fast single-shot tasks. No delegation, no parallel streams. Use for small edits, mechanical changes, one-shot questions. Routes to no one.",
+      "description": "Quick — Tier 1 primary. Fast single-shot escape hatch for small edits, mechanical changes, and one-shot questions. No delegation, no parallel streams. Backed by MiniMax M2.7. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "primary",
       "model": "minimax/MiniMax-M2.7",
       "color": "#22d3ee",
@@ -112,7 +112,7 @@
       }
     },
     "mimir": {
-      "description": "Mimir — Dedicated research and codebase exploration agent. Uses Semble as primary search tool. Deep codebase analysis, pattern discovery, and documentation research.",
+      "description": "Mimir — Tier 2 research. Dedicated codebase exploration agent who uses Semble as primary search tool for deep analysis, pattern discovery, and documentation research. Backed by DeepSeek V4 Flash. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "subagent",
       "model": "opencode/deepseek-v4-flash-free",
       "color": "#0ea5e9",
@@ -130,7 +130,7 @@
       }
     },
     "heimdall": {
-      "description": "Heimdall — Simple, routine, and deterministic tasks using DeepSeek. Quick edits, mechanical work, file operations. The ever-watchful guardian.",
+      "description": "Heimdall — Tier 2 mechanical. Handles simple, routine, deterministic engineering tasks with speed and precision using DeepSeek V4 Flash. The ever-watchful guardian. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "subagent",
       "model": "opencode/deepseek-v4-flash-free",
       "color": "#10b981",
@@ -147,7 +147,7 @@
       }
     },
     "hermod": {
-      "description": "Hermod — Git and GitHub operations specialist using MiniMax M2.7. Branching, commits, PRs, merge/rebase, conflict resolution, CI/CD, releases, gh CLI.",
+      "description": "Hermod — Tier 2 git. Git and GitHub operations specialist who handles branching, commits, PRs, merge/rebase, conflict resolution, and releases. Backed by MiniMax M2.7. The swift messenger. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "subagent",
       "model": "minimax/MiniMax-M2.7",
       "color": "#06b6d4",
@@ -163,7 +163,7 @@
       }
     },
     "thor": {
-      "description": "Thor — Handles medium-complexity tasks using MiniMax M2.7 from minimax.io. Strong and reliable, cheaper than Tyr but more capable than Heimdall.",
+      "description": "Thor — Tier 3 implementation. Mid-tier engine for moderate-complexity features, debugging, refactoring, and tests, gated by a Forseti plan-review. Runs the test-gate after parallel implementation. Backed by MiniMax M2.7. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "subagent",
       "model": "minimax/MiniMax-M2.7",
       "color": "#a855f7",
@@ -180,7 +180,7 @@
       }
     },
     "baldr": {
-      "description": "Baldr — UI/UX design system specialist. Creates DESIGN.md files using Google's design.md standard. Focuses on visual consistency, usability, accessibility, and design tokens.",
+      "description": "Baldr — Tier 2 design. UI/UX design system specialist who creates DESIGN.md files focusing on visual consistency, usability, and accessibility. Plans only — never implements. Backed by MiniMax M2.7. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "subagent",
       "model": "minimax/MiniMax-M2.7",
       "color": "#ec4899",
@@ -197,7 +197,7 @@
       }
     },
     "tyr": {
-      "description": "Tyr — Handles the most complex implementation, debugging, and architectural work using MiniMax M3 via minimax.io. Unmatched wisdom for the hardest problems.",
+      "description": "Tyr — Tier 4 implementation. Top-tier engine for complex features, deep debugging, and architectural work, gated by a Forseti plan-review. Backed by MiniMax M3. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "subagent",
       "model": "minimax/MiniMax-M3",
       "color": "#f59e0b",
@@ -214,7 +214,7 @@
       }
     },
     "vidarr": {
-      "description": "Vidarr — The ultimate fallback using MiniMax M3 via MiniMax direct provider. For the hardest problems when debugging stalls or nothing else works. Use sparingly — highest cost.",
+      "description": "Vidarr — Tier 5 fallback. The ultimate last resort when Tyr stalls or debugging is stuck and nothing else works. Backed by MiniMax M3 with reasoning enabled. Use very sparingly. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "subagent",
       "model": "minimax/MiniMax-M3",
       "color": "#dc2626",
@@ -231,7 +231,7 @@
       }
     },
     "forseti": {
-      "description": "Forseti — Audits, criticizes, and corrects implementation plans before execution using MiniMax M3. No write permissions — review only.",
+      "description": "Forseti — Tier 3 audit. Adversarial plan reviewer who audits completeness, correctness, consistency, feasibility, and security before high-tier implementation. Read-only — no edit permissions. Backed by MiniMax M3. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "subagent",
       "model": "minimax/MiniMax-M3",
       "color": "#ef4444",
@@ -249,7 +249,7 @@
       }
     },
     "semble-search": {
-      "description": "Code search agent for exploring any codebase. Use for finding code by intent, locating implementations, understanding how something works.",
+      "description": "semble-search — Tier 2 research. Code search agent for exploring any codebase using Semble's semantic search. For finding code by intent, locating implementations, and understanding how things work. Backed by DeepSeek V4 Flash. Operates inside BizarHarness alongside 13 sibling agents.",
       "mode": "subagent",
       "model": "opencode/deepseek-v4-flash-free",
       "color": "#0ea5e9",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@polderlabs/bizar",
-  "version": "4.2.2",
+  "version": "4.2.4",
   "description": "Norse-pantheon multi-agent system for opencode — 13 agents across 4 cost tiers with cost-aware routing, plans, and a configurable agent harness. v4 ships as a single npm package bundling the dashboard server, opencode plugin, and typed SDK.",
   "type": "module",
   "bin": {
@@ -19,8 +19,8 @@
   "scripts": {
     "typecheck": "tsc --noEmit",
     "build:sdk": "tsc -p packages/sdk/tsconfig.json",
-    "test:sdk": "npm test --prefix packages/sdk",
-    "test:sdk:watch": "npm run test:watch --prefix packages/sdk",
+    "test:sdk": "node_modules/.bin/vitest run --root packages/sdk",
+    "test:sdk:watch": "node_modules/.bin/vitest --root packages/sdk",
     "test": "npm run typecheck && npm run test:sdk && bun test plugins/bizar/tests/loop.test.ts plugins/bizar/tests/block.test.ts plugins/bizar/tests/stall-think.test.ts plugins/bizar/tests/tools/bg-get-comments.test.ts plugins/bizar/tests/tools/bg-spawn-delegation.test.ts plugins/bizar/tests/tools/opencode-runner.test.ts plugins/bizar/tests/settings.test.ts plugins/bizar/tests/commands.test.ts plugins/bizar/tests/commands-impl.test.ts plugins/bizar/tests/tools/plan-action.test.ts plugins/bizar/tests/tools/wait-for-feedback.test.ts plugins/bizar/tests/tools/read-glyph-feedback.test.ts plugins/bizar/tests/reasoning-clean.test.ts plugins/bizar/tests/key-rotation.test.ts && node bizar-dash/tests/smoke-v2.mjs && node --test bizar-dash/tests/path-safe.test.mjs bizar-dash/tests/tmux-wrap.test.mjs bizar-dash/tests/opencode-runner.test.mjs bizar-dash/tests/mod-instructions.node.test.mjs bizar-dash/tests/mod-upgrade.node.test.mjs bizar-dash/tests/graphify-mod-spawn.node.test.mjs bizar-dash/tests/no-agent-browser.node.test.mjs bizar-dash/tests/providers-store-backup-keys.node.test.mjs bizar-dash/tests/dashboard-ports.test.mjs bizar-dash/tests/submit-feedback.test.mjs bizar-dash/tests/yaml.test.mjs bizar-dash/tests/memory-store.test.mjs bizar-dash/tests/memory-schema.test.mjs bizar-dash/tests/memory-secrets.test.mjs bizar-dash/tests/memory-git.test.mjs bizar-dash/tests/memory-sync.test.mjs bizar-dash/tests/obsidian-back-compat.test.mjs bizar-dash/tests/memory-lightrag.test.mjs bizar-dash/tests/memory-config.test.mjs bizar-dash/tests/memory-cli.test.mjs bizar-dash/tests/memory-cli-readlistdelete.test.mjs bizar-dash/tests/memory-cli-setup.test.mjs bizar-dash/tests/memory-conflicts.test.mjs bizar-dash/tests/memory-namespace.test.mjs bizar-dash/tests/memory-path-safety.test.mjs bizar-dash/tests/memory-protocol-drift.test.mjs bizar-dash/tests/memory-roundtrip.test.mjs",
     "build": "npm run build:sdk"
   },

package/packages/sdk/tests/fixtures/fetch-mock.ts

@@ -52,7 +52,7 @@ export function makeFetchMock(): FetchMock {
   const requests: FetchMockRequest[] = [];
   let lastRequest: FetchMockRequest | null = null;
 
-  const mockFetch: typeof fetch = async (input, init) => {
+  const mockFetch = async (input: RequestInfo | URL, init?: RequestInit): Promise<Response> => {
     const req: FetchMockRequest = {
       url: typeof input === "string" ? input : input instanceof URL ? input.toString() : (input as Request).url,
       method: (init?.method ?? "GET").toUpperCase(),
@@ -100,7 +100,7 @@ export function makeFetchMock(): FetchMock {
   };
 
   return {
-    fetch: mockFetch,
+    fetch: mockFetch as typeof fetch,
     respondWith(method, match, response) {
       rules.push({ method: method.toUpperCase(), match, response });
     },