agent-bios 0.7.0 → 0.9.0

package/claude/guides/tooling-gotchas.md

@@ -125,6 +125,13 @@ depends on it, pin it explicitly instead of trusting the environment.
   leaving stale, unreferenced definitions live. After updating, re-read the
   resource, check definitions and active references separately, and remove
   the orphans explicitly.
+- **A new revision is not live traffic**: on a runtime that pins traffic to a
+  named revision (e.g. Cloud Run with a fixed split), `gcloud run deploy` (or
+  the equivalent) creates the new revision but shifts no traffic to it — the
+  previous revision keeps serving until an explicit `gcloud run services
+  update-traffic`. Read the "deploy succeeded" message as "a revision exists",
+  not "the new code is serving"; verify the live traffic split before
+  concluding the deploy took effect.
 - **Perimeter controls need the enforcement point's own logs**: an agent-side
   fetch is not an independent external observer — its egress IP and caching
   path are opaque, and it may share the protected network or serve a stale

package/codex/guides/tooling-gotchas.md

@@ -125,6 +125,13 @@ depends on it, pin it explicitly instead of trusting the environment.
   leaving stale, unreferenced definitions live. After updating, re-read the
   resource, check definitions and active references separately, and remove
   the orphans explicitly.
+- **A new revision is not live traffic**: on a runtime that pins traffic to a
+  named revision (e.g. Cloud Run with a fixed split), `gcloud run deploy` (or
+  the equivalent) creates the new revision but shifts no traffic to it — the
+  previous revision keeps serving until an explicit `gcloud run services
+  update-traffic`. Read the "deploy succeeded" message as "a revision exists",
+  not "the new code is serving"; verify the live traffic split before
+  concluding the deploy took effect.
 - **Perimeter controls need the enforcement point's own logs**: an agent-side
   fetch is not an independent external observer — its egress IP and caching
   path are opaque, and it may share the protected network or serve a stale

package/config/promotions.json

@@ -1,4 +1,12 @@
 {
   "version": 1,
-  "promotions": []
+  "promotions": [
+    {
+      "learning_id": "a6feee41-2aeb-4fb6-acc6-4584c5c1336c",
+      "tier": "domain",
+      "domains": [
+        "builder-base"
+      ]
+    }
+  ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-bios",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "A thin, low-level instruction layer for LLM CLI agents: one set of principles and behavior whichever model you run. Deploys into $HOME by copy via an explicit `agent-bios install`.",
   "bin": {
     "agent-bios": "scripts/install.sh"

package/scripts/migrate-learnings.py

@@ -33,7 +33,6 @@ import time
 
 REPO = pathlib.Path(__file__).resolve().parent.parent
 MANIFEST = REPO / "config" / "promotions.json"
-DOMAINS = REPO / "config" / "domains.json"
 UNIVERSAL_TIERS = frozenset({"core", "infra"})  # == assemble.audience UNIVERSAL
 # learning_id inside a personal bullet's TRAILING comment (collect-learning
 # prose_bullet: "... <!-- learning_id: <uuid> created: <ts> -->"). Anchored to
@@ -68,23 +67,21 @@ def load_manifest(path=MANIFEST):
             if isinstance(p, dict) and isinstance(p.get("learning_id"), str)]
 
 
-def load_domain_keys(path=DOMAINS):
-    return set(json.loads(path.read_text(encoding="utf-8")).get("domains", {}))
-
-
-def make_in_bundle(full, selection, domain_keys):
-    """A promotion's placement domain -> is it in THIS user's bundle? Biased to
-    KEEP on anything not provably installed."""
+def make_in_bundle(full, selection):
+    """A promotion's placement AUDIENCE (tier + domains, derived by
+    build-promotions from where the bullet actually landed) -> is it in THIS
+    user's bundle? Mirrors assemble.py `kept`. Biased to KEEP on anything not
+    provably installed."""
     selection = set(selection or ())
 
-    def in_bundle(domain):
+    def in_bundle(tier, domains):
         if full:
             return True
-        if domain in UNIVERSAL_TIERS:
+        if tier in UNIVERSAL_TIERS:
             return True
-        if domain in domain_keys:
-            return domain in selection
-        return False  # env-personal / unclassified / unknown -> keep
+        if tier == "domain":
+            return bool(set(domains or ()) & selection)
+        return False  # env-personal / unknown tier -> keep
 
     return in_bundle
 
@@ -210,7 +207,7 @@ def migrate(home, host, promotions, in_bundle, collect, dry=False, corpus_loaded
         lid = p["learning_id"]
         if lid not in local_ids:
             continue  # not held locally (never captured here, or already migrated)
-        if in_bundle(p.get("domain")):
+        if in_bundle(p.get("tier"), p.get("domains", [])):
             remove_ids.add(lid)
         else:
             kept_not_in_bundle += 1  # promoted but not in THIS user's bundle -> keep
@@ -271,7 +268,7 @@ def main():
     corpus_loaded = True if args.host == "codex" else claude_corpus_loaded(home, args.full)
 
     if args.full:
-        in_bundle = make_in_bundle(True, (), set())
+        in_bundle = make_in_bundle(True, ())
     else:
         if args.domains is not None:
             selection = [d for d in args.domains.split(",") if d]
@@ -280,7 +277,7 @@ def main():
             if not sel_path.is_file():
                 die(f"selection file not found: {sel_path} (pass --full for a non-packaged install)")
             selection = json.loads(sel_path.read_text(encoding="utf-8")).get("domains", [])
-        in_bundle = make_in_bundle(False, selection, load_domain_keys())
+        in_bundle = make_in_bundle(False, selection)
 
     s = migrate(home, args.host, promotions, in_bundle, collect,
                 dry=args.dry_run, corpus_loaded=corpus_loaded)
@@ -311,9 +308,9 @@ def _self_test():
     L = {"core": "0f8c1c2a-4d1e-4abc-9def-0000000000a1",
          "bb": "0f8c1c2a-4d1e-4abc-9def-0000000000b2",
          "off": "0f8c1c2a-4d1e-4abc-9def-0000000000c3"}
-    promos = [{"learning_id": L["core"], "domain": "core"},
-              {"learning_id": L["bb"], "domain": "builder-base"},
-              {"learning_id": L["off"], "domain": "office-work"}]
+    promos = [{"learning_id": L["core"], "tier": "core", "domains": []},
+              {"learning_id": L["bb"], "tier": "domain", "domains": ["builder-base"]},
+              {"learning_id": L["off"], "tier": "domain", "domains": ["office-work"]}]
 
     def seed_claude():
         home = pathlib.Path(tempfile.mkdtemp(prefix="migrate-selftest-"))
@@ -341,7 +338,7 @@ def _self_test():
     # 1) Packaged, selection={builder-base}: core (universal) + builder-base
     #    removed; office-work KEPT (the silent-loss guard).
     home = seed_claude()
-    in_bundle = make_in_bundle(False, ["builder-base"], {"builder-base", "office-work", "llm-pipeline-dev"})
+    in_bundle = make_in_bundle(False, ["builder-base"])
     s = migrate(home, "claude", promos, in_bundle, collect)
     ids = local_ids(home)
     checks.append(("packaged: removed core+builder-base", s["removed"] == 2 and s["kept_not_in_bundle"] == 1))
@@ -355,13 +352,13 @@ def _self_test():
 
     # 2) Full (non-packaged) install: everything in bundle -> all removed.
     home = seed_claude()
-    s = migrate(home, "claude", promos, make_in_bundle(True, (), set()), collect)
+    s = migrate(home, "claude", promos, make_in_bundle(True, ()), collect)
     checks.append(("full install: all 3 removed", s["removed"] == 3 and not local_ids(home)))
 
     # 3) dry-run changes nothing on disk.
     home = seed_claude()
     before = (home / "personal" / "learnings.jsonl").read_text(encoding="utf-8")
-    migrate(home, "claude", promos, make_in_bundle(True, (), set()), collect, dry=True)
+    migrate(home, "claude", promos, make_in_bundle(True, ()), collect, dry=True)
     checks.append(("dry-run writes nothing",
                    (home / "personal" / "learnings.jsonl").read_text(encoding="utf-8") == before))
 
@@ -372,7 +369,7 @@ def _self_test():
         r = rec(L["bb"], "builder-base")
         f.write(json.dumps(r, ensure_ascii=False) + "\n")
         collect.apply_codex(chome, collect.prose_bullet(r), dry=False)
-    s = migrate(chome, "codex", promos, make_in_bundle(True, (), set()), collect)
+    s = migrate(chome, "codex", promos, make_in_bundle(True, ()), collect)
     agents_txt = (chome / "AGENTS.md").read_text(encoding="utf-8")
     checks.append(("codex: bullet removed from AGENTS.md region",
                    s["prose_removed"] == 1 and L["bb"] not in agents_txt))
@@ -382,7 +379,7 @@ def _self_test():
     home = seed_claude()  # apply_claude writes an entry WITHOUT @central/bundle.md
     checks.append(("F2: unwired packaged entry -> corpus not loaded",
                    claude_corpus_loaded(home, full=False) is False))
-    s = migrate(home, "claude", promos, make_in_bundle(False, ["builder-base"], {"builder-base"}),
+    s = migrate(home, "claude", promos, make_in_bundle(False, ["builder-base"]),
                 collect, corpus_loaded=False)
     checks.append(("F2: corpus-not-loaded keeps ALL",
                    s.get("skipped") == "corpus-not-loaded"