novahiz 0.3.7 → 0.4.0

package/CHANGELOG.md

@@ -0,0 +1,111 @@
+# Changelog
+
+All notable changes to Novahiz are documented in this file.
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+
+## [Unreleased]
+
+## [0.4.0] - 2026-10-05
+
+### Added
+
+- **Zero-friction install for the community** - `providers.autoInstall` now
+  defaults to `true` (the official skill packs impeccable, flutter, dart and
+  expo install with `novahiz-install`, so gate rule R14 never blocks a fresh
+  setup); Playwright MCP installs globally using the catalog pin instead of an
+  on-demand npx download; the postinstall dry-run prints the exact next step;
+  `files` ships `CHANGELOG.md` and `scripts/` so `npm run ci:local` works from
+  the published package. Version 0.4.0 (breaking renames: plugin
+  `novahiz-plugin.ts`, MCP `novahiz-<function>` ids).
+- **clepsydre** - a local scheduling MCP server (`mcp/clepsydre`) written in
+  this repository with zero npm dependency: 5-field cron expressions plus
+  macros, `every Ns/Nm` intervals, one-shot ISO dates, IANA timezones, an
+  atomic JSON store with a JSONL execution journal, and 14 `clepsydre_*` tools
+  (CRUD, enable/disable, detached manual runs, history, schedule validation).
+  Both MCP protocol eras are supported (`initialize` legacy and the 2026-07-28
+  `server/discover` era). The stdio transport, protocol layer, parser,
+  scheduler, and executors are original code — no third-party scheduler code
+  is used or vendored.
+- `clepsydre-mcp` bin entry in `package.json`; `mcp-clepsydre-probe` check in
+  `novahiz doctor --deep`.
+- `novahiz-gate` — the rule gate extracted from the core server into its own
+  stdio MCP server (`mcp/novahiz-gate`, tool `novahiz_gate`, same `src/gate.ts`
+  core as the CLI), with `mcp-gate` and `mcp-gate-probe` checks in
+  `novahiz doctor` (the probe runs with `--deep`).
+
+### Changed
+
+- Plugin file renamed to the same `novahiz-<function>` convention:
+  `adapters/opencode/novahiz.ts` → `novahiz-plugin.ts`, in the source tree and
+  in `~/.config/opencode/plugins/` (installer scripts, doctor `adapter` check,
+  tests, and docs follow).
+- MCP server ids renamed to the `novahiz-<function>` convention:
+  `lodestone` → `novahiz-search`, `clepsydre` → `novahiz-scheduler`, `argus` →
+  `novahiz-scan`, `novahiz` → `novahiz-core`. Updated in
+  `catalog/providers.json`, `opencode.jsonc`, the installer templates, the
+  plugin fallback and the docs; tool names (`lodestone_*`, `clepsydre_*`,
+  `novahiz_*`) and file paths are unchanged.
+
+- The external scheduler providers are replaced by the local `clepsydre`
+  server: `opencode.jsonc` now launches `node mcp/clepsydre/index.mjs`
+  instead of the former `mcp-cron` command, `catalog/providers.json` lists
+  `clepsydre` (local, Apache-2.0) in place of the `cron` venv-clone entry,
+  and the `cron_*` gate tools were renamed to their `clepsydre_*`
+  equivalents across `src/spec.ts`, `install/lib.mjs`, the adapter, the
+  configs, and `docs/CONFIGURATION.md`.
+- `providers.disabled` defaults to `[]`: every bundled server now runs
+  locally with no setup step.
+
+### Removed
+
+- The `cron` provider entry (third-party scheduler clone) and its
+  documentation. Replaced by `clepsydre`; no third-party scheduler
+  dependency remains. See `NOTICE.md` for provenance.
+- The `security` provider (`security-mcp`) and every installation vector for
+  it: the entry is gone from `catalog/providers.json`, and `install.mjs` /
+  `bootstrap.mjs` keep an empty MCP install list while purging any trace of
+  `security-mcp` or `mcp-cron` (shim and global package) on every run — never
+  reinstall, per explicit user decision. `providers.disabled` in
+  `novahiz.config.json` keeps the id out of the registry; the `audit` category
+  stays served by `novahiz-scan`.
+
+### Fixed
+
+- **Default-path skill packs installed again** - `providers.autoInstall` runs
+  `deps --install` on every fresh setup, which exposed a latent guard refusal:
+  `refused unsafe token: *` on the `--skill *` commands of flutter-skills and
+  dart-skills (expo and impeccable listed their skills explicitly and passed).
+  `SAFE_TOKEN` in `src/exec.ts` now admits `*` with the rationale on the spot:
+  cmd.exe does not glob and the POSIX branch spawns without a shell, so the
+  glob reaches the skills CLI, which expands it. Verified 4/4 `ok`.
+- **Audit 2026-09-25 follow-up — every P0→P3 finding resolved in one batch.**
+  - **P0 (secret exposure)** — the Stitch API key left `opencode.jsonc`: the
+    header now references `{env:NOVAHIZ_STITCH_API_KEY}` and the value lives in
+    the user environment (never logged, never printed). Rotating the key in the
+    Google Cloud console is the one manual step remaining.
+  - **P1 (gate hardening)** — the CLI accepts `--tools` (the plugin passes its
+    frozen snapshot, so a live `gate.tools` edit cannot weaken enforcement
+    before the required restart) and `--prompt` (the last prompt seeds the
+    tier); it classifies the seed itself when `--categories` is empty instead
+    of evaluating unscoped, failing closed only when classification breaks.
+    The MCP gate follows: tool case normalized, DB-recorded skills unioned
+    like the CLI, warn/audit mode reports `wouldBlock` instead of blocking
+    silently, and only block mode fails closed on DB errors.
+  - **P2 (robustness)** — the plugin runner is async: a CLI/MCP call can no
+    longer freeze OpenCode's event loop for up to 30 s, and a deterministic
+    timeout flag replaced the status/signal heuristic. `novahiz-scan` joined
+    the hard-coded MCP fallbacks and every catalog server registers with a
+    structured 120 s timeout. `snap_restore` and `clepsydre_enable_task` joined
+    `gate.tools` across all six copies; R8 covers the docs tree,
+    README/CHANGELOG and docs-writing prompts; R13/R14 skip sub-200-char
+    touch-ups (`minChange: 200`; the doctor's operational probe now carries a
+    real CSS payload and asserts the trivial case stays allowed); classify's
+    lite tier only advertises skills the gate enforces; the inline gate-repair
+    text gained its step 3; `writeState` writes through a temp file + rename;
+    the dirty-path marker rejects cross-drive absolute paths; prompt text is
+    no longer logged (language + size only); doctor flags missing script
+    arguments (R1) and version-drifted installed copies (R6).
+  - **P3 (hygiene)** — purged 63 `*.novahiz-bak`/`*.pre-v2` files, the stale
+    `opencode.jsonc.bak`, and the dead `mcp-cron`/`security-mcp` global shims
+    (with two orphaned `mcp-cron` processes); repaired three memory slots
+    (addendum heading, duplicated review block, comma-split tags).

package/NOTICE.md

@@ -24,14 +24,19 @@ If you hold rights to a skill and want a different attribution or a removal, ope
 
 Providers are referenced by install command, never vendored. Each lists its upstream package, repository, and SPDX license in `catalog/providers.json`.
 
+### novahiz-scheduler (local scheduler)
+
+`mcp/clepsydre` is written entirely in this repository: cron parser, persistence, scheduler, executors, tool layer, and MCP protocol layer are original code with zero npm dependency. No code, algorithm transcription, or copied text comes from the AGPL `mcp-cron` package (github.com/jolks/mcp-cron) or from any other third-party scheduler; both are referenced by name only, as replacements. The implementation was designed from the MCP specification and this project's own requirements, and is licensed Apache-2.0 like the rest of Novahiz.
+
 | Id | Upstream package | Repository | License |
 | --- | --- | --- | --- |
 | `playwright` | `@playwright/mcp` | https://github.com/microsoft/playwright-mcp | Apache-2.0 |
-| `security` | `security-mcp` | https://github.com/AbrahamOO/security-mcp | MIT |
-| `narsil` | `narsil-mcp` | https://github.com/postrv/narsil-mcp | MIT OR Apache-2.0 |
-| `context7` | `@upstash/context7-mcp` | https://github.com/upstash/context7 | MIT |
-| `cron` | `scheduler-mcp` (local venv clone) | https://github.com/PhialsBasement/scheduler-mcp | MIT |
-| `novahiz` | local Novahiz MCP | https://github.com/novahiz/novahiz | Apache-2.0 |
+| `novahiz-search` | local Novahiz Search MCP (house, clean-room) | https://github.com/novahiz/novahiz | Apache-2.0 |
+| `novahiz-docs` | local novahiz-docs MCP | https://github.com/novahiz/novahiz | Apache-2.0 |
+| `novahiz-scheduler` | local Novahiz scheduler MCP (house, clean-room, zero npm dependency) | https://github.com/novahiz/novahiz | Apache-2.0 |
+| `novahiz-core` | local Novahiz core MCP | https://github.com/novahiz/novahiz | Apache-2.0 |
+| `novahiz-gate` | local Novahiz gate MCP | https://github.com/novahiz/novahiz | Apache-2.0 |
+| `novahiz-scan` | local static-analysis MCP (house, clean-room) | https://github.com/novahiz/novahiz | MIT |
 | `dart` | Dart SDK (`dart mcp-server`) | https://github.com/dart-lang/ai (pkgs/dart_mcp_server) | BSD-3-Clause |
 
 ## Skill packs (upstream, not vendored)
@@ -54,8 +59,8 @@ Installed on demand with `npx skills add` (or an upstream tarball when git trans
 | `@mohak34/opencode-notifier` | https://github.com/mohak34/opencode-notifier | MIT | removed 2026-09-26 |
 | `@tarquinen/opencode-dcp` | https://github.com/Opencode-DCP/opencode-dynamic-context-pruning | AGPL-3.0-or-later | removed 2026-09-26 |
 
-The Novahiz adapter (`adapters/opencode/novahiz.ts`) is first-party under Apache-2.0.
+The Novahiz adapter (`adapters/opencode/novahiz-plugin.ts`) is first-party under Apache-2.0.
 
 ## Dependencies
 
-The core and the MCP server use Node.js built-ins only. The opencode adapter imports only Node.js built-ins and the `@opencode-ai/plugin` types, which the harness provides.
+The core and the MCP server use Node.js built-ins only. The opencode adapter imports only Node.js built-ins and the `@opencode/plugin` types, which the harness provides.