pantheon-opencode 1.5.0-beta.9 → 1.5.1

package/AGENTS.md

@@ -301,7 +301,9 @@ memory_store({
     agreements: ["point1", "point2"],
     divergences: [{"issue": "...", "resolution": "..."}],
     response_rate: "X of Y",
-    themis_audit: "approved|issues"
+    themis_audit: "approved|issues",
+    precedent_used: false,
+    timestamp: "<ISO-8601>"
   },
   metadata: {
     type: "council_decision",
@@ -310,6 +312,7 @@ memory_store({
   }
 })
 ```
+`value` is JSON-serialized before storing (the MCP `memory_store.value` argument is a string).
 
 ### Read Path (Precedent Fast-Path)
 Before dispatching a new council, Zeus runs:
@@ -320,8 +323,8 @@ memory_search(question, top_k=2, namespace="council_decisions")
 Result interpretation:
 | Score | Age | Action |
 |-------|-----|--------|
-| > 0.85 | < 30 days | Return precedent as fast-path answer. Skip council dispatch entirely. |
-| > 0.85 | >= 30 days | Return with warning "Reavaliar se contexto mudou" + proceed with council |
+| > 0.85 | < 30 days | Return precedent verbatim (note "⚠️ Decisão de [data] — reavaliar se contexto mudou") as fast-path answer. Skip council dispatch entirely. |
+| > 0.85 | >= 30 days | Return with warning "Reavaliar se contexto mudou — decisão tem mais de 30 dias" + proceed with council |
 | 0.5 - 0.85 | Any | Include as context for specialists but still dispatch council |
 | < 0.5 | Any | Ignore, proceed with fresh council |
 
@@ -371,7 +374,7 @@ You MUST self-monitor for these stall conditions:
 | Symptom | Detection Rule | Recovery Action |
 |---------|---------------|-----------------|
 | Silent loop | 3+ consecutive turns with no tool call AND no visible progress | Output `[STALL_DETECTED]` and re-read your task definition. If still stuck, escalate to user with: "I appear to be stuck on [task]. Options: (1) retry with different approach, (2) delegate to specialist, (3) simplify scope." |
-| Delegation black hole | Agent dispatched but no response after 2x the timeout from routing.yml | Log the hang, cancel via `cancel_task`, dispatch to fallback agent, report to user |
+| Delegation black hole | Agent dispatched but no response after 2x the timeout from routing.yml | Log the hang, cancel via `cancel_task`, then follow the fallback chain in `## ⏱️ Timeout & Retry Enforcement` |
 | Circular delegation | Same specialist re-dispatched for same task 2+ times without progress | Break cycle: dispatch to different specialist OR escalate to user |
 | Idle after completion | All background tasks completed but no synthesis/next step for 2+ turns | Force synthesis: summarize all completed results and propose next action |
 | Context thrash | Re-reading same files repeatedly without new action | Stop re-reading. State: "Already have context on [file]. Proceeding with [action]." |
@@ -397,9 +400,7 @@ When a delegation fails (timeout, empty response, error):
 
 2. **Retry ONCE** with rephrased prompt — add: "Previous attempt failed with: [error]. Adjusted approach: [what changed]."
 
-3. **If retry also fails** → DO NOT retry a third time blindly. Instead:
-   - Dispatch to fallback agent (from routing.yml)
-   - If no fallback, escalate to user with: "Task [X] failed after retry. Options: (a) simplify, (b) different agent, (c) manual intervention."
+3. **If retry also fails** → do NOT retry blindly; follow the fallback chain and escalation protocol in `## ⏱️ Timeout & Retry Enforcement`.
 
 ## Progress Checkpoint
 
@@ -564,10 +565,7 @@ sequenceDiagram
 ## Dispatch Sequence (9-Step Protocol)
 
 ### Step 0 — Precedent Fast-Path (Fase 1)
-Before any dispatch: `memory_search(query, top_k=2, namespace="council_decisions")`
-- Score > 0.85 AND age < 30 days → return precedent verbatim with note "⚠️ Decisão de [data] — reavaliar se contexto mudou". SKIP entire dispatch.
-- Score > 0.85 AND age > 30 days → return precedent with ⚠️ "Reavaliar se contexto mudou — decisão tem mais de 30 dias"
-- Else → proceed to Step 0b
+Run the precedent read path defined in `## Memory Protocol > Council Decisions Namespace` (`memory_search(query, top_k=2, namespace="council_decisions")`). If no precedent applies, proceed to Step 0b.
 
 ### Step 0b — Apollo Pre-Scan (Fase 2, --research flag)
 If `/pantheon --research <question>`: dispatch @apollo with 30s timeout. Inject findings as `shared_context` into ALL specialist prompts. Skip if flag absent.
@@ -669,33 +667,11 @@ task(subagent_type: "themis", prompt: "Audit this council synthesis for fidelity
 - If issues → fix each issue before delivering to user
 
 ### Step 9 — Persist & Reconcile (Fase 1)
-```
-memory_store({
-  namespace: "council_decisions",
-  key: "council:<yyyy-mm-dd>:<slug>",
-  value: JSON.stringify({
-    question, specialists, recommendation, confidence,
-    agreements, divergences, precedent_used, timestamp
-  }),
-  metadata: {type: "council_decision", specialist_count: N}
-})
-board.markReconciled("<task-id>")
-```
+Persist the decision using the write path in `## Memory Protocol > Council Decisions Namespace`, then `board.markReconciled("<task-id>")`.
 
 ## Specialist Output Format (Fase 1 — machine-parseable structured fields)
 
-Specialists MUST return these structured fields in their response:
-
-```
-## specialist_response
-**position:** <clear one-sentence position>
-**reasoning:** <2-4 sentences>
-**trade_offs:** <what's gained vs lost>
-**risks:** <what could go wrong>
-**confidence:** High | Medium | Low
-**agreement_signals:** agree: @agent1, @agent2 on [issue] | disagree: @agent3 on [issue]
-**specific_claims:** <count of specific factual claims in response>
-```
+Specialists MUST return the structured `## specialist_response` format (position, reasoning, trade_offs, risks, confidence, agreement_signals, specific_claims) defined in `## Agent Return Format > Council Specialist Response Format`.
 
 ## Domain-to-Specialist Mapping
 
@@ -928,39 +904,14 @@ ANY NO  → full task (IMPL artifact + Themis review mandatory)
 3. **No Themis dependency** — output doesn't feed into a phase that requires review
 
 ## Subtask Return Format
-Expect a `subtask_summary` response with:
-```
-## subtask_summary
-**files_changed:** [paths]
-**summary:** What was done
-**tests:** ✅ or N/A
-**status:** complete | partial | escalated
-```
+Return the standard `## subtask_summary` defined in `## Agent Return Format` (files_changed, summary, tests, coverage, tokens, status, blockers).
 
 ## Timeout Parcial (Partial Results)
 
-Timeout parcial is ONLY for read-only, independent agents:
-- ✅ @apollo — can return partial file list ("found 7 of 12 files before timeout")
-- ✅ @gaia — can return partial literature findings
-
-- ✅ @talos — can confirm progress if hotfix times out
-- ❌ Never for implementers or reviewers — must complete or fail
-
-When dispatching with partial-OK, set expectation:
-```
-@apollo Search for auth files. Timeout parcial OK — return whatever you have.
-```
+Only agents marked ✅ in the Timeout Behavior table above may return partial results: @apollo (partial file list, e.g. "found 7 of 12 files before timeout"), @gaia (partial literature findings) and @talos (confirm progress if a hotfix times out). Never for implementers or reviewers — they must complete or fail. When dispatching with partial-OK, set the expectation: `@apollo Search for auth files. Timeout parcial OK — return whatever you have.`
 
 ---
 
 # 📊 TIMEOUT TRACKING
 
-Maintain awareness of in-flight delegations:
-
-| Agent | Timeout | Status | Partial OK? |
-|-------|---------|--------|-------------|
-| @apollo | 60s | ✅ complete | ✅ |
-| @hermes | 180s | ⏳ in progress | ❌ |
-| @themis | 120s | ⏳ in progress | ❌ |
-
-Log timeouts to `/memories/session/timeout-log.md` for later analysis.
+Track in-flight delegations against the Timeout Behavior table above. Log timeouts to `/memories/session/timeout-log.md` for later analysis.

package/CHANGELOG.md

@@ -18,6 +18,332 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## ✅ Closed Issues
 
+## [v1.5.1] - 2026-09-22
+
+## 🐞 Fixed
+- **agents** — declare explicit read: allow for zeus
+- **ci** — drop fastembed from CI, keep pytest collection green (#163)
+- **plugin** — detect registered-plugin version drift after pantheon_delegate removal (#169)
+- **config** — correct node floor and warn on unsupported runtime (#168)
+- **mcp** — degrade gracefully when fastembed import fails (#165)
+- **mcp** — drop dead toon_codec module from published package (#167)
+- **tui** — remove dead pantheon_delegate refs after v1.5.0 V1 removal (#166)
+- **mnemosyne** — grant scoped write to memory-bank and deepwork paths (#164)
+
+## ✅ Closed Issues
+- #94 - drop fastembed from CI, keep pytest collection green (#163)
+- #158 - detect registered-plugin version drift after pantheon_delegate removal (#169)
+- #114 - correct node floor and warn on unsupported runtime (#168)
+- #160 - correct node floor and warn on unsupported runtime (#168)
+- #159 - degrade gracefully when fastembed import fails (#165)
+- #162 - drop dead toon_codec module from published package (#167)
+- #161 - remove dead pantheon_delegate refs after v1.5.0 V1 removal (#166)
+- #111 - grant scoped write to memory-bank and deepwork paths (#164)
+
+## [v1.5.0] - 2026-09-16
+
+### 🆕 What's New
+
+- **Delegação nativa**: `task()` é agora o único canal de delegação — motor legado
+  de dispatch removido por completo, simplificando o fluxo de subagents.
+- **Painel Delegations (TUI)**: painel funcional com status em tempo real, cores
+  por estado (running/completed/failed), janela de recência 24h, ordenação
+  newest-first e spinner fluido com timer independente (80ms/frame).
+- **Read-only enforcement**: sessões read-only bloqueiam `write`, `edit`,
+  `pantheon_delegate` e qualquer mutação — garantindo sandboxing efetivo.
+- **CI/CD**: Dependabot alerts, CodeQL analysis, SHA pins em actions, gitleaks
+  v3 para detecção de secrets, e workflow de release dispatch-only.
+
+### 🐞 Fixed
+
+- **Painel Delegations vazio (crítico)**: canal `session.children` da TUI
+  chamava API com shape v1 num cliente v2 — placeholder `{sessionID}` não era
+  substituído, causando ~181k erros/s e painel vazio. Corrigido
+  `safeSessionPath`/`buildChildrenPath`.
+- **Stale busy**: children com status `busy` stale (>30min sem atualização)
+  agora são classificadas como `completed` (não `running`).
+- **Board corruption**: testes que importam o plugin sem isolamento agora fazem
+  `chdir` para projeto temporário — sem mais entradas fantasma no board real.
+- **Signal leak**: timer independente do spinner separado do poll de dados,
+  evitando bloqueio visual durante operações longas.
+
+### ✅ Closed Issues
+
+- 38% dos testes consolidados (de ~1200 para ~744) com cobertura mantida.
+- 17 módulos mortos removidos, reduzindo superfície de manutenção.
+- OWASP Top 10 audit e input validation em todos os endpoints.
+
+## [v1.5.0-beta.20] - 2026-09-16
+
+<!-- Add new changes here. Running `node scripts/versioning.mjs apply` will
+     move this section to a versioned entry and reset the template below. -->
+
+## 🐞 Fixed
+
+- **Fixed — painel Delegations**: children com status `busy` stale (>30min sem
+  atualização) agora são classificadas como `completed` (não `running`). O
+  opencode mantém entradas `busy` no mapa de status para sessões já concluídas;
+  o TUI agora detecta e marca como done.
+## [v1.5.0-beta.19] - 2026-09-16
+
+<!-- Add new changes here. Running `node scripts/versioning.mjs apply` will
+     move this section to a versioned entry and reset the template below. -->
+
+## 🆕 What's New
+
+- **Improved — painel Delegations**: status ausente de children antigas agora é
+  `done` (não `running`); grace 60s para sessões recém-criadas; janela de
+  recência 24h (filtra histórico); ordenação newest-first; ceiling esconde
+  antigos.
+- **Improved — animação**: spinner ⠋⠙⠹⠸⠼⠴⠦⠧⠇⠏ agora tem timer
+  independente (80ms/frame), separado do poll de dados — fluido, não mais
+  "travado".
+## [v1.5.0-beta.18] - 2026-09-16
+
+<!-- Add new changes here. Running `node scripts/versioning.mjs apply` will
+     move this section to a versioned entry and reset the template below. -->
+
+## 🐞 Fixed
+
+- **Painel Delegations voltou a funcionar (crítico):** o canal
+  `session.children` da TUI chamava a API com a shape v1 (`{ path: { id } }`)
+  num cliente **v2** que espera `{ sessionID }`; o placeholder não era
+  substituído (`/session/%7BsessionID%7D/children`), o host rejeitava cada
+  poll (~181k erros/s) e o painel ficava vazio ("No delegations"). Corrigido
+  `safeSessionPath`/`buildChildrenPath` para `{ sessionID }`, removidos os
+  `as any` que escondiam o mismatch, + teste de regressão exato. Auditoria
+  confirmou que só a TUI (v2) estava errada (o `plugin.ts` usa SDK v1 de
+  propósito).
+- **Higiene de testes:** testes que importam o plugin sem isolamento agora
+  fazem `chdir` para um projeto temporário antes do import — não criam mais
+  entradas no board real (fim dos estados fantasma em desenvolvimento).
+
+## [v1.5.0-beta.17] - 2026-09-15
+
+<!-- Add new changes here. Running `node scripts/versioning.mjs apply` will
+     move this section to a versioned entry and reset the template below. -->
+
+## 🆕 What's New
+
+- **Delegação nativa no host:** o motor `pantheon_delegate` foi removido
+  (~3,9k linhas) junto com as tools `pantheon_delegate`,
+  `pantheon_delegation_read` e `pantheon_delegation_list`; a delegação agora usa
+  o **`task()` nativo** do host (child sessions). 16 arquivos de teste obsoletos
+  removidos.
+- **TUI — painel Delegations lê a sessão nativa:** o painel passa a derivar de
+  `session.children` + `session.status` + md (o arquivo de board deixou de ser
+  fonte). Mantidas as cores de status, retenção, ceiling, filtro de sessão e
+  guards.
+- **Camada fina preservada:** `task-result-guard` (verified completion de child
+  vazio), `native-task-status` e guards de enforcement.
+
+## 🐞 Fixed
+
+- **Read-only enforcement re-apontado para sessões nativas:** aplicado no
+  público via hook `chat.params` e `hashline_edit` bloqueado para `apollo`/`gaia`,
+  fechando o bypass aberto após a remoção do motor de delegação.
+- **Docs/comentários limpos:** referências aos módulos removidos atualizadas,
+  incluindo nits de comentário em `tests/pantheon/tui-delegations.test.ts` e
+  `src/pantheon/session-id.ts`.
+
+## [v1.5.0-beta.16] - 2026-09-15
+
+<!-- Add new changes here. Running `node scripts/versioning.mjs apply` will
+     move this section to a versioned entry and reset the template below. -->
+
+## 🆕 What's New
+
+- **Modernização CI/supply-chain:** 22 actions SHA-pinadas; `gitleaks-action` v3
+  (fix crítico — a v2 morria com Node 20 em 2026-09-16) com CLI 8.30.1; cache
+  npm/pip; Dependabot; CodeQL `+python` e `codeql-config`; permissões reduzidas
+  no `docs.yml`; job `version-check` fundido no `validate`; `upload-artifact` v7
+  e `download-artifact` v8.
+- **Lean:** ~17 módulos mortos removidos de `src/pantheon/`, docs/scripts
+  obsoletos, `teste/`/`testes/`, `Dockerfile`/`docker-compose` (de outro projeto)
+  e caches; ~38% dos arquivos de teste removidos/consolidados; testes mínimos
+  readicionados para os módulos vivos (tool-ceiling, native-probe).
+- **Instructions:** deduplicação das instruções compartilhadas — contexto menor
+  sem perder nenhuma regra.
+
+## 🐞 Fixed
+
+- **2 flakes determinísticos eliminados:** TTL do MCP persistence
+  (`test_ttl_expiry_real_time`) e `logger.test.mjs` deixaram de depender de
+  timing/carga do host.
+- **Refs stale corrigidas:** referências de versão/ambiente atualizadas para
+  Node 22+.
+
+## [v1.5.0-beta.15] - 2026-09-15
+
+<!-- Add new changes here. Running `node scripts/versioning.mjs apply` will
+     move this section to a versioned entry and reset the template below. -->
+
+## 🆕 What's New
+
+- **Delegation `read` devolve o relatório completo:** o retorno de `read` passa a
+  ler o relatório integral do disco (com cap configurável e marker explícito de
+  truncamento) em vez do recibo resumido — o conteúdo é o mesmo tanto no caminho
+  nativo quanto no legado, com paridade garantida entre eles.
+- **`sanitizeReceiptText` UTF-8-safe:** a sanitização de recibos deixou de corromper
+  caracteres multibyte; acentuação e demais codepoints UTF-8 são preservados no
+  caminho nativo e no legado.
+- **TUI — cor de status na row inteira:** cada linha do painel Delegations passa a
+  ser pintada pelo estado — vermelho = falha, verde = concluído, amarelo = em
+  andamento — com o glyph mantido como canal redundante para acessibilidade.
+
+## 🐞 Fixed
+
+- **TUI — painel Delegations só da sessão ativa:** o painel deixa de renderizar
+  rows cross-session/órfãs que causavam "Session not found" ao clicar; a lista
+  agora cobre apenas a sessão ativa, mantendo a retenção de concluídas (2 min)
+  e falhas (10 min).
+- **Guards de estado e navegação órfã:** transições prematuras para `done` são
+  bloqueadas e a navegação defensiva ignora alvos órfãos, evitando seleção
+  inválida no painel.
+- **Isolamento do board nos testes:** testes que importam o plugin real agora
+  isolam o BackgroundJobBoard, eliminando o fantasma "preserve this running
+  delegation"; o board real foi limpo.
+- **Lean no core:** 17 módulos mortos de `src/pantheon/` removidos, ~38% dos
+  arquivos de teste removidos/consolidados e docs/scripts órfãos limpos, com
+  testes mínimos readicionados para os módulos vivos (tool-ceiling, native-probe).
+- **Flake de TTL determinístico:** `test_ttl_expiry_real_time` deixou de competir
+  com a truncagem de microssegundos do SQLite — o teste agora espera o início de
+  um segundo limpo antes do store e usa margem sobre o TTL, eliminando o flake
+  dependente de carga (test-only).
+
+## [v1.5.0-beta.14] - 2026-09-14
+
+<!-- Add new changes here. Running `node scripts/versioning.mjs apply` will
+     move this section to a versioned entry and reset the template below. -->
+
+## 🆕 What's New
+
+- **Ordenação active-first:** delegações ativas aparecem antes das concluídas,
+  falhas e canceladas no painel TUI.
+- **Overflow active:** quando há mais delegações ativas que o teto visível, o
+  excedente ativo permanece representado na linha de overflow.
+
+## 🐞 Fixed
+
+- **Retenção visual:** concluídas permanecem visíveis por 2 min e falhas por
+  10 min antes de saírem do painel; canceladas seguem a retenção configurada.
+
+## ⚠️ Known Issues
+
+- **Stale running warning:** jobs em estado `running` além do limite esperado
+  recebem um aviso visual de stale no painel.
+## [v1.5.0-beta.13] - 2026-09-14
+
+<!-- Add new changes here. Running `node scripts/versioning.mjs apply` will
+     move this section to a versioned entry and reset the template below. -->
+
+## 🆕 What's New
+
+- **TUI status-only — rows simplificadas:** cada linha do painel Delegations passa
+  a ser `{glyph} {alias} {elapsed}` + `desc` muted — um glyph de status, uma única
+  identidade e o tempo decorrido, com a descrição em tom muted. São 4 glyphs
+  (running animado, completed, error, cancelled/retry), sem toggle
+  `[Sessão]`/`[Tudo]`, sem prefixos `nat:`/`pan:` e sem losango ◇/◆.
+- **Header `active`/`done`/`failed`:** o cabeçalho do painel resume apenas esses
+  três contadores sobre a lista completa (todas as sessões), sem `nat:`/`pan:`.
+- **Ceiling 8:** no máximo 8 linhas visíveis (live-first); o excedente colapsa em
+  uma única linha `… +N more`.
+- **Board read (jobs de todas as sessões):** o painel lê o BackgroundJobBoard
+  (`.pantheon/board/state.json`), então jobs `pantheon_delegate` de qualquer
+  sessão aparecem — não só os filhos nativos da sessão focada.
+- **118 testes TUI delegations:** `tests/pantheon/tui-delegations.test.ts` com
+  118/118 passando, cobrindo rows status-only, header active/done/failed, ceiling
+  e board read cross-session.
+
+## 🐞 Fixed
+
+- **Sanitização de dead code:** removidos helpers, tipos e estado órfãos do
+  painel Delegations (toggle de escopo `[Sessão]`/`[Tudo]`, prefixos curtos
+  `nat:`/`pan:`, glyphs por estado e paginação de arquivo morto) que sobraram do
+  refactor status-only.
+- **Board merge preserva sessão conhecida:** um record do board com
+  `parentSessionID` vazio não sobrescreve mais a sessão já atribuída à linha.
+## [v1.5.0-beta.12] - 2026-09-14
+
+<!-- Add new changes here. Running `node scripts/versioning.mjs apply` will
+     move this section to a versioned entry and reset the template below. -->
+
+## 🆕 What's New
+
+- **TUI lê o board (4º canal):** o painel Delegations passa a ler o
+  BackgroundJobBoard via `readBoardState()` — jobs `pantheon_delegate` de todas
+  as sessões aparecem, não só os filhos nativos da sessão focada.
+- **Toggle [Sessão]/[Tudo] + chips:** `[Sessão]` (default) mostra só a sessão
+  focada, `[Tudo]` mostra jobs de todas as sessões; chips clicáveis no header.
+- **Raw `dist/tui.tsx` removido (bundle-only):** o dist passa a carregar só o
+  bundle compilado (`tui.js`); o fonte raw sai do pacote publicado.
+- **117 testes TUI delegations:** `tests/pantheon/tui-delegations.test.ts` com
+  117/117 passando, cobrindo board-read, split ativo/recente e toggle de escopo.
+## [v1.5.0-beta.11] - 2026-09-14
+
+<!-- Add new changes here. Running `node scripts/versioning.mjs apply` will
+     move this section to a versioned entry and reset the template below. -->
+
+## 🆕 What's New
+
+- **Glyphs da FSM real no painel Delegations:** cada estado do BackgroundJobBoard
+  tem agora um glifo Unicode geométrico próprio — `⠋` running (spinner 1s),
+  `⟳` retry, `⚠` stale/startup, `✓` completed, `✕` error, `−` cancelled. Forma e
+  cor são canais independentes: as linhas seguem legíveis sem cor e sem Nerd Font.
+- **Prefixo `nat:` / `pan:` documentado:** `docs/INSTALLATION.md` passa a
+  descrever os prefixos curtos das linhas nativas (`nat:<agent>`) e do board
+  (`pan:<alias>`) e o par de glyphs ◇/◆.
+- **`scripts/dev-tui.sh` (dev local sem publish):** instala, builda e registra o
+  caminho absoluto do repo em `.opencode/tui.json` (gitignored) com hint de
+  restart — sem tocar `opencode.json` e sem publicar.
+- **104 testes TUI delegations:** `tests/pantheon/tui-delegations.test.ts` com
+  104/104 passando, cobrindo glifos/marker/tone dos estados reais da FSM.
+
+## 🐞 Fixed
+
+- **Doctor F.2 (`hasUsableScripts`):** a resolução do diretório code-mode agora
+  exige um `.py`/`.sh` regular (paridade com `_has_usable_scripts` do MCP), então
+  um overlay de projeto vazio não mascara mais uma instalação que traz scripts.
+- **`publish:next` órfão removido:** nenhum workflow usava o script (o release
+  publica via `--tag beta`); removido do `package.json` para eliminar o dist-tag
+  `next` obsoleto da linha de publicação.
+## [v1.5.0-beta.10] - 2026-09-14
+
+&lt;!-- Add new changes here. Running `node scripts/versioning.mjs apply` will
+     move this section to a versioned entry and reset the template below. --&gt;
+
+## 🆕 What's New
+
+- **TUI delegations com prefixos curtos `nat:` / `pan:`:** cada linha do painel passa
+  a usar `nat:<agent>` para child nativo do `task()` (sem report no board) ou
+  `pan:<alias>` para linha `pantheon_delegate` (ex. `pan:apo-1`) — os prefixos curtos
+  liberam largura no sidebar estreito.
+- **Glyph de 2 canais (◇/◆):** ◇ vazado (info/cyan) para child nativo e ◆ preenchido
+  (cor de estado) para linha do board — forma e cor são canais independentes, então o
+  split segue legível mesmo sem cor.
+- **Header resumido:** `(N active · M done · nat:K pan:M)` calculado sobre a lista
+  completa (active + recent + archived), no lugar do antigo `(N native + M pantheon)`.
+- **Elapsed em caixa fixa:** rótulo alinhado à direita em largura 8 e SEMPRE
+  renderizado, então um job ativo sem descrição nunca perde o timer.
+- **100 testes TUI delegations:** `tests/pantheon/tui-delegations.test.ts` com 100/100
+  passando (tsc + biome OK), acima dos 93 da beta.9.
+
+## 🐞 Fixed
+
+- **`appendFile` sem import (log do painel volta a escrever):** o log em arquivo do
+  painel parou de escrever silenciosamente porque `appendFile` era chamado sem import
+  (ReferenceError engolido pelo `catch` vazio); o import foi restaurado e o `catch`
+  agora reporta a falha (gated por echo) em vez de sumir.
+- **Truncamento grapheme-safe:** descrições truncam em fronteiras de grapheme
+  (`Intl.Segmenter` com fallback `Array.from`) em 44 graphemes, sem cortar emoji ou
+  sequências ZWJ ao meio (mojibake).
+- **Linhas stale-running ficam em Active:** um job stale ainda é um job vivo (estado do
+  backend inalterado), então não é mais arquivado — o que escondia a linha lançada.
+- **Spinner/animação de 140ms → 1000ms:** o tick rápido piscava sem adicionar informação.
+- **Dead code removido:** conectores de árvore (`isNestedDelegation` /
+  `delegationTreePrefix`) e campos `parentTaskID`/`childCount` removidos —
+  `session.children` só devolve filhos diretos, então nenhuma linha nested era
+  produzida (BACKLOG).
 ## [v1.5.0-beta.9] - 2026-09-14
 
 <!-- Add new changes here. Running `node scripts/versioning.mjs apply` will

package/README.md

@@ -30,7 +30,15 @@ way to plan work, make progress, check results, and keep useful project context.
 
 ## Start in 2 minutes
 
-Requirements: [OpenCode 1.18.4+](https://opencode.ai/docs/) and Node.js 22+.
+Requirements: [OpenCode 1.18.4+](https://opencode.ai/docs/) and Node.js
+22.22.2+ (or 24.15.0+ / 26+).
+
+Pantheon declares `engines.node` as `^22.22.2 || ^24.15.0 || >=26.0.0`. The
+floor reflects what the dependency tree actually needs — the transitive
+`ini@7` rejects earlier 22.x/24.x builds with `EBADENGINE` — and odd-numbered
+Node releases (23, 25) are out of range. The `pantheon_cost` tool also needs
+`node:sqlite`, which requires Node >= 22.5; `doctor` warns when the running
+runtime cannot load it.
 
 From the project where you want to use Pantheon:
 
@@ -76,25 +84,14 @@ availability and configuration of OpenCode and any optional services you choose
 to use. Check the [releases](https://github.com/ils15/pantheon-opencode/releases)
 and [changelog](CHANGELOG.md) for the latest published changes.
 
-## Delegation engines (legacy default, native opt-in)
-
-Pantheon exposes two delegation engines behind one tool surface:
-
-- **Legacy (default)** — `pantheon_delegate`, the original engine registered by
-  the V1 plugin. No configuration is required.
-- **Native (opt-in, experimental)** — OpenCode's native `task()` child-session
-  engine, selected with `PANTHEON_DELEGATE_MODE=native`. Native is strict: it
-  does not use foreground fallback, model failover, or retry; it performs a
-  lazy capability probe on the first dispatch and includes the resulting
-  status in the delegation receipt.
+## Delegation (native `task()`)
 
-Legacy stays the default for v1.5.x; native is not promoted to default until
-v1.6. See [ADR-0011](.pantheon/memory-bank/adr/0011-delegation-engine-contract.md)
-(Proposed) for the engine contract, rationale, and migration prerequisites.
-
-**Kill-switch:** set `PANTHEON_DELEGATION=off` (case-insensitive) to disable
-delegation entirely. The switch covers **both** engines — the legacy
-`pantheon_delegate`/read/list tools throw, and the native manager throws too.
+Pantheon delegates exclusively through OpenCode's native `task()` child-session
+engine. The former custom `pantheon_delegate` tool and the V1 delegation engine
+(`delegation.ts`, `delegate-manager.ts` and supporting modules) were removed;
+there is no Pantheon-specific delegation tool surface to configure. See
+[ADR-0011](.pantheon/memory-bank/adr/0011-delegation-engine-contract.md) for the
+historical engine contract.
 
 ## Cost tool backend
 
@@ -172,8 +169,7 @@ script's SHA-256 without regenerating it.
   covering OpenCode V1/V2 side by side — see
   [Sandbox validation](#sandbox-validation-v1v2).
 - Beta2 agent-economy policy: direct native delegation, bounded compaction
-  carry-forward, compact context encoding, and quality floors — see
-  [Beta2 agent economy policy](docs/ws3-token-opt-measurements.md#beta2-agent-economy-policy).
+  carry-forward, compact context encoding, and quality floors.
 - A `--prompts` installer flag is planned for a future release.
 
 ## OpenCode V1/V2 — Dual Version (1.5.0-beta.2)
@@ -186,23 +182,22 @@ per installation; V1 and V2 Pantheon plugins must never be registered together.
 |---|---|---|
 | OpenCode config key | singular `plugin` | plural `plugins` |
 | Pantheon registration | `src/plugin.ts` plus `src/plugins/pantheon-hooks.ts` | `<installed>/src/plugin-v2` directory (`index.ts` re-exports `src/plugin-v2.ts`) |
-| Runtime contract | Legacy Pantheon plugin, including `pantheon_delegate`, read/list tools, event/tool hooks and V1 compaction handling | Full V2 plugin: 9 orchestration tools, 4 event subscriptions, session hooks (`prompt`, `context`), tool hooks (`execute.before`/`after`), plus configuration transforms |
+| Runtime contract | Pantheon V1 plugin: 6 tools (`hashline_edit`, the 3 goal tools, `pantheon_cost`, `pantheon_model`), event/tool hooks and V1 compaction handling | Full V2 plugin: 6 orchestration tools, 4 event subscriptions, session hooks (`prompt`, `context`), tool hooks (`execute.before`/`after`), plus configuration transforms |
 | V1 APIs | Registered | Own tool definitions via `ctx.tool.transform()` — not the V1 plugin path |
 
-The V2 plugin provides 9 orchestration tools (`pantheon_delegate`,
-`pantheon_delegation_read`, `pantheon_delegation_list`, `hashline_edit`,
+The V2 plugin provides 6 orchestration tools (`hashline_edit`,
 `pantheon_goal_create`, `pantheon_goal_get`, `pantheon_goal_update`,
 `pantheon_cost`, `pantheon_model`), 4 event subscriptions (`session.created`,
 `session.idle`, `session.error`, `session.compacted`), session hooks (`prompt`,
 `context`), and tool hooks (`execute.before`, `execute.after`). The only
-unsupported V2 feature is `legacy-hooks` (the V1-specific delegate API surface).
+unsupported V2 feature is `legacy-hooks` (the V1-specific hook surface).
 
 The package exposes both contracts as importable exports: `pantheon-opencode/plugin`
 (V1), `pantheon-opencode/plugin-v2` (V2) and `pantheon-opencode/v2-bridge`
 (optional interop), so a host can load either contract explicitly.
 
 The V1→V2 bridge (`src/pantheon/v2-bridge.ts`) enables optional interop:
-V1 infrastructure singletons (BackgroundJobBoard, DelegationClient, GoalStore,
+V1 infrastructure singletons (BackgroundJobBoard, GoalStore,
 TodoEnforcer, VisionHandler) are passed through V2 `ctx.options`. The bridge is
 optional — V2 works standalone with graceful degradation.
 
@@ -259,7 +254,12 @@ Two freshness guarantees back it up:
   re-run `init` just for file copies.
 - **Drift detection** — the installer stamps the installed version in
   `.pantheon/install-state.json` and `doctor` warns when the package is newer
-  than the last sync, pointing at `update`.
+  than the last sync, pointing at `update`. `doctor` also detects **plugin
+  version drift** (issue #158): when `opencode.json` registers a plugin path
+  inside a `node_modules/pantheon-opencode` copy whose `package.json` version
+  differs from the running package, it warns that the registered tool surface
+  is stale. Re-running `init`/`update` realigns the registration onto the
+  current package.
 
 `init` also gained `--components agents,skills,...` (narrow install),
 `--clean` (alias of `--force`), `--opencode-version auto`, atomic config
@@ -269,6 +269,42 @@ the install completes but MCP entries are omitted (with a warning) instead of
 pointing at a broken interpreter. Installer messages auto-detect pt-BR via
 `LANG`/`LC_ALL`.
 
+## Migrating to 1.5.x (from 1.4.x)
+
+1.5.0 removed the custom `pantheon_delegate` tool (and the V1 delegation
+engine) in favor of OpenCode's native `task()`; see
+[Delegation (native `task()`)](#delegation-native-task). Two things change on
+an existing install:
+
+1. **The tool disappears from the plugin surface.** `pantheon_delegate` is no
+   longer registered by `src/plugin.ts` or `src/plugin-v2.ts`. Agents now
+   delegate through `task()` only — no configuration is needed.
+2. **A lockfile-pinned copy can keep the old tool alive.** `npm install` is
+   lockfile-authoritative: a `package-lock.json` pinned to `1.4.1` (which
+   satisfies `^1.4.1`) is never re-resolved, so a project's
+   `node_modules/pantheon-opencode` can stay on 1.4.x while the published
+   package moved on. The plugin path your `opencode.json` registers keeps
+   pointing at that stale copy, and you keep running the obsolete tool surface
+   — including `pantheon_delegate` — with no warning.
+
+The fix is a realignment + a detector:
+
+```bash
+# Realign the registered plugin path onto the current package (rewrites any
+# node_modules/pantheon-opencode reference in opencode.json):
+npx pantheon-opencode@latest init --yes --headless
+# or, with a global install:
+pantheon-opencode update
+
+# Then verify no drift remains:
+npx pantheon-opencode@latest doctor
+```
+
+`doctor` now reports a **Plugin Version Drift** warning (section H3) when the
+registered plugin points into an installed copy whose version differs from the
+running package, naming both versions and the removal (`pantheon_delegate` in
+1.5.0). A healthy install reports no warning.
+
 ## Releases
 
 Publication is authorized **only** by an explicit `workflow_dispatch` of the
@@ -340,8 +376,20 @@ child session returns an empty or missing result. Instead of surfacing a silent
 `completed` with no payload (which confuses the orchestrator), the guard now
 raises an explicit error. This catches the common free-tier failure mode where a
 child session exceeds the uncached-prefill token budget (`BackendAdmissionRejected`)
-and returns nothing. For large payloads, prefer `pantheon_delegate` over native
-`task()` — the delegation layer has better timeout and error handling.
+and returns nothing. Prefer `background=true` dispatches with an explicit
+`task_status(wait=true)` fan-in so large payloads are collected deterministically.
+
+
+## Configuration (environment variables)
+
+| Variable | Default | Description |
+|---|---|---|
+| `PANTHEON_MEMORY_EMBED` | `on` | `off` (also `0`, `false`, `no`) disables the `pantheon-memory` embedding/vector pipeline — search runs in FTS5-only mode with no model download and no `sqlite-vec` writes. Also forced `off` automatically when `fastembed` fails to import, so a broken embedding install never takes the server down (issue #159). |
+
+The memory MCP degrades gracefully: when `fastembed` or `sqlite-vec` are
+unavailable (network failure, incompatible wheel), the server still starts,
+answers the MCP `initialize` handshake, and serves keyword search — only the
+semantic vector ranking is unavailable.
 
 
 ## Documentation