freddie 0.0.70 → 0.0.72

package/AGENTS.md

@@ -163,7 +163,8 @@ One `test.js` at project root. ≤200 lines. Plain assertions, real data, real s
 - **Bulk-rename: git grep is case-sensitive on literal patterns** — `git grep -lI <name>` only matches lowercase. For case-variant sweep during rename refactors, use `git grep -liI -e <lower> -e <Title> -e <UPPER>` (per-pattern `-i` requires `-e` form). Single-form check is a false-clean trap.
 - **freddie exec command Windows invocation** — `plugins/core-cli/plugin.js` registers the `exec` command (commit e5fb1b7) for non-interactive scripted use. Correct invocation on Windows: `bun run bin/freddie.js exec --prompt "..."`. Do NOT use `bun x freddie` — it hangs on Windows due to npm registry fetch timeouts. The command takes `--prompt` (required), `--model` (default ''), `--timeout` (default 60000ms) and is the validated entry point for CI pipelines.
 - **acptoapi-bridge max_tokens silent truncation** — `src/agent/acptoapi-bridge.js` line 20 controls max_tokens passed to the LLM. Prior to commit e5fb1b7, this was set to 1024, which silently truncated responses on generation tasks. Raised to 4096 to prevent hidden content loss. If generation output appears incomplete, verify max_tokens is 4096 or higher.
-- **Rebase regression trap** — After `git pull --rebase` following a rejected push, a CI auto-bump commit on remote (based on pre-fix tree) can silently revert local fixes. The `anentrypoint-design: file:../anentrypoint-design → ^0.0.40` fix in commit `d469d25` was reverted this way. After any rebase, verify `package.json` dep versions and `package-lock.json` resolved URLs match expected values before pushing. Sanity check: `git show HEAD:package.json | node -e "const d=JSON.parse(require('fs').readFileSync('/dev/stdin','utf8')); console.log(d.dependencies['anentrypoint-design'])"`. Tell: pages CI fails with "lock file's anentrypoint-design@0.0.40 does not satisfy anentrypoint-design@" (empty version = file: dep).
+- **GitHub Actions deploy-pages@v5 duplicate artifact rejection** — When using `actions/deploy-pages@v5` in a workflow, the action rejects if 2+ artifacts are named "github-pages" (e.g. from a previous failed run re-uploaded by `gh run rerun --failed`). Symptom: deployment step fails with "artifact with name github-pages already exists" or similar. Fix: trigger a fresh run via empty commit instead of rerunning the failed deploy step. `gh run rerun` can silently re-upload transient failures; avoid for deploy failures in particular.
+- **Rebase regression trap — ROOT FIX applied 2026-05-04** — After `git pull --rebase` following a rejected push, a CI auto-bump commit on remote (based on pre-fix tree) can silently revert local fixes. The `anentrypoint-design: file:../anentrypoint-design → ^0.0.40` fix in commit `d469d25` was reverted this way. Underlying cause: `.github/workflows/restore-package.cjs` rewrote the dep back to `file:../anentrypoint-design` after every release, and `publish.yml` ran `git checkout -- package-lock.json`, discarding lockfile re-sync. **ROOT FIX (2026-05-04)**: restore-package.cjs now does `npm view anentrypoint-design version` and pins `^<latest>` instead; publish.yml runs `npm install --package-lock-only` to keep lockfile valid. Verification: after any rebase, check `package.json` + `package-lock.json` match expected values. Sanity check: `git show HEAD:package.json | node -e "const d=JSON.parse(require('fs').readFileSync('/dev/stdin','utf8')); console.log(d.dependencies['anentrypoint-design'])"`. **Recurrence tell** — if pages CI fails with "lock file's anentrypoint-design@X.Y.Z does not satisfy anentrypoint-design@" (empty version = file: dep), do not manually re-pin in package.json forever; audit `.github/workflows/restore-package.cjs` and `publish.yml` for reversion.
 
 ## Subsystem guide
 
@@ -240,6 +241,7 @@ All 12 test.js named groups passing: home+config+skin, sessions+FTS5, tools+tool
 - 2026-05-03 (session 3): Added Website theme + YAML caveats section (3 items: structured-YAML rendering, YAML colon-space trap, SSR innerHTML injection). rs-learn store still unavailable (exec:memorize → exit 127, command not found). 0 migration audit items queried. 3 new facts added to AGENTS.md only.
 - 2026-05-03 (session 3): Ingested libsql-async-debt-class into AGENTS.md Substrate gotchas (sessions.js + cron/scheduler.js async callsites; silent TypeError class; test.js passes while CLI broken). rs-learn store still unavailable (exec:memorize/exec:recall not on PATH). 0 migration audit items queried. 1 new fact added.
 - 2026-05-03 (session 4): Plugin-architecture decomposition recorded — added "Plugin architecture" section before Layout, rewrote "Adding a tool" + "Adding a gateway platform" for plugins/<name>/{plugin,handler}.js shape. Ingested 6 facts to rs-learn (project/freddie-plugin-architecture, reference/freddie-host-contract, reference/freddie-plugin-ctx, project/freddie-migrated-subsystems, reference/freddie-thin-shims, project/freddie-plugin-witness). Audit: 5 queries fired (pi-ai env keys, profile safe paths, libsql async debt, browser inline module errors, yaml colon space trap, plus self-test on freddie-plugin-architecture) — all returned "No recall results". rs-learn ingest path live but retrieval side empty for this session (likely needs learn-build propagation). 0 items migrated; AGENTS.md items retained.
+- 2026-05-04: Recorded freddie publish workflow root fix — `.github/workflows/restore-package.cjs` now pins anentrypoint-design via `npm view` + version (`^<latest>`) instead of file: dep; `publish.yml` runs `npm install --package-lock-only` to sync lockfile. Updated "Rebase regression trap" entry with detailed causation + recurrence tell. Added new "GitHub Actions deploy-pages@v5 duplicate artifact rejection" caveat (rerun --failed silently re-uploads; trigger fresh run instead). rs-learn store still unavailable. 0 items migrated; 2 facts added/refined in AGENTS.md.
 
 ## Dashboard web UI caveats
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "freddie",
-  "version": "0.0.70",
+  "version": "0.0.72",
   "type": "module",
   "description": "Open JS agent harness built on pi-mono, floosie, xstate, and anentrypoint-design",
   "bin": {
@@ -26,7 +26,7 @@
     "plugsdk": "^1.0.15",
     "xstate": "^5.31.0",
     "zod": "^4.0.0",
-    "anentrypoint-design": "^0.0.46"
+    "anentrypoint-design": "^0.0.48"
   },
   "optionalDependencies": {
     "@libsql/darwin-arm64": "0.3.19",