pi-vault-mind 0.14.2 → 0.15.0

package/CHANGELOG.md

@@ -1,5 +1,75 @@
 # Changelog
 
+
+## 0.15.0 / 0.6.4 — 2026-07-06
+
+### Added
+
+- **`/vm setup` now scaffolds `.vault-mind/.pi/model-router.json`** with tuned
+  primary/fallback model defaults, extracted verbatim from the Obsidian
+  plugin's `scaffoldModelRouterConfig`/`defaultModelRouterChoices` into a new
+  `src/model-router.ts` — previously only the plugin's init flow produced
+  this file, so a CLI-only setup got no model-router config at all.
+- **`scripts/setup-vault-pi.sh` now installs `pi-model-discovery` and
+  `pi-model-router`** alongside `pi-vault-mind`/`pi-context`, matching the
+  plugin's install list (previously missing both, so a CLI-only setup never
+  got model discovery or routing installed).
+
+### Changed
+
+- **Vault isolation** — all pi-vault-mind config, token, and written artifacts now live under `<vault>/.vault-mind/`. The global `~/.pi/agent/vault-mind.config.json` layer is dropped; config is single-layer, vault-local. Legacy config/token is auto-migrated on first session_start (idempotent).
+- **Config consolidation** — `loadConfig` reads only `<vault>/.vault-mind/vault-mind.config.json`; `findConfig` returns a single project path. `getGlobalConfigPath`/`getGlobalConfigDir` removed.
+- **Token env** — `PVM_API_TOKEN` dotenv file moved from `~/.pi/agent/vault-mind.env` to `<vault>/.vault-mind/vault-mind.env`. `auth.ts`, `modal-config.ts`, `commands.ts`, and `settings-ui.ts` all resolve via `getTokenEnvPath(cwd)`.
+- **Framework agent dir** — launch scripts now use `<vault>/.vault-mind/.pi/agent` (relocated from `<vault>/.pi/agent`). `resolveAgentDir(cwd)` honors `PI_CODING_AGENT_DIR` via the SDK.
+- **ACM gate** — auto-ACM now fires only when `isVaultMindReady` is true (config exists + embedding configured), not on any vault with a global config.
+- **Configurable file paths** — `graph.canvasPath`, `files.queue`, `files.serverState`, `files.manualDispatch` in config; `resolveVaultFile` resolves them with defaults under `.vault-mind/`.
+- **Per-vault Modal collection prefix** — `vaults.default.collectionPrefix` (auto-derived from vault slug) isolates server-side Modal tables across vaults sharing a deployment. Local LanceDB tables stay unprefixed.
+- **`/vm setup` consolidation** — now runs `migrateLegacyState` → `setupWizard` → merge-safe scaffold → optional `runPersonalize`. `/vm init` is deprecated (still works, shows notice).
+- **`/vm doctor`** — new command reporting resolved paths, readiness, token source, model-router status, and PASS/WARN for vault isolation.
+- **`GET /vault-mind/paths`** — new auth-gated HTTP endpoint returning absolute + vault-relative paths with `exists` flags.
+- **gitignore** — `.vault-mind/*` + `!.vault-mind/vault-mind.config.json` keeps the hand-tuned config tracked while ignoring local state.
+
+### Fixed
+
+- **Config write-target bugs** — `vm_configure`, `discover_schema`, and the
+  `POST /vm/init` HTTP handler's scaffold-if-missing path all still wrote to
+  the vault-root `pi-vault-mind.config.json` (a path `loadConfig` no longer
+  reads) instead of `.vault-mind/vault-mind.config.json`. Fixed to use
+  `getConfigPath(cwd)` uniformly.
+- **Stale user/dev-facing config paths** — the "no vaults configured" notify
+  string (`commands.ts`), the `discover_schema` tool's prompt guidelines, and
+  a `server.ts` doc-comment all still told the reader to edit the retired
+  `pi-vault-mind.config.json` instead of `.vault-mind/vault-mind.config.json`.
+- **`/vm setup` CLI-mode arg parsing** — when `--vault` was the first flag
+  (exactly the form documented in `CLI_ONLY_WALKTHROUGH.md`), its leading
+  `--` was never stripped by the tokenizer, so `cliArgs.vault` was silently
+  never set and `vaults.default.path` was left empty. Fixed the split to
+  normalize the leading `--` before tokenizing.
+
+### Removed
+
+- Dead `events.ts` hidden `/acm` sendMessage path (never enabled compaction).
+- `handleVaultMindConfig` HTTP response no longer splits `.global`/`.project` (single `config` key).
+
+### Plugin (`packages/obsidian/`)
+
+- **Isolation parity with the extension** — `resolvePluginAgentDir(vaultPath)`
+  now resolves `<vault>/.vault-mind/.pi/agent`, threaded through `main.ts`
+  (init flow, config paths, hasExtensions checks, token/1Password flow),
+  `model-router-config.ts` (models.json + model-router.json paths),
+  `pi-config-reader.ts`, `chat-tab.ts`, `status-tab.ts`, and `panel.ts`.
+- **`.vault-mind/vault-mind.config.json`** — `config.ts`'s `readExtensionConfig`
+  now reads the single vault-scoped config (previously read the removed
+  global `~/.pi/agent/vault-mind.config.json` + vault-root
+  `pi-vault-mind.config.json`).
+- **`.env.1pass` relocated to `.vault-mind/.env.1pass`**, with `--op-env`
+  wired into every pi launch site (`PiConnection` in `chat-tab.ts`, the TUI
+  launcher in `status-tab.ts`, and `scripts/vault-pi.sh`/`setup-vault-pi.sh`) —
+  gated on the file existing AND `pi-1password` being installed, since
+  `--op-env` is a flag `pi-1password` registers; passing it unconditionally
+  would make `pi` reject the whole invocation with "Unknown option" when the
+  extension isn't installed.
+
 ## 0.5.1 — 2026-06-28
 
 ### Fixed

package/README.md

@@ -375,6 +375,7 @@ Edit `pi-vault-mind.config.json` to match your domain:
 | [docs/getting-started/NEW_VAULT_WALKTHROUGH.md](docs/getting-started/NEW_VAULT_WALKTHROUGH.md) | **Fresh Mac → new vault → Modal → sync → verified**, one linear path (incl. multi-vault storage isolation) |
 | [docs/getting-started/INSTALL.md](docs/getting-started/INSTALL.md) | **Canonical install playbook** — all 5 layers (pi ext, skills, Obsidian, config, external CLIs) |
 | [docs/getting-started/GETTING_STARTED.md](docs/getting-started/GETTING_STARTED.md) | End-to-end workflow + daily "drop & forget" usage |
+| [docs/getting-started/CLI_ONLY_WALKTHROUGH.md](docs/getting-started/CLI_ONLY_WALKTHROUGH.md) | Same setup + daily commands, entirely CLI — no Obsidian plugin required |
 | [docs/getting-started/WALKTHROUGH_PROMPT.md](docs/getting-started/WALKTHROUGH_PROMPT.md) | Paste-into-pi guided setup with checkpoints between phases |
 
 ### Architecture & design

package/dist/src/agent-queue.js

@@ -12,6 +12,7 @@
  */
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { loadConfig, resolveVaultFile } from "./utils.js";
 const queueSubscribers = new Set();
 /** Subscribe to queue events. Returns an unsubscribe function. */
 export const subscribeQueue = (cb) => {
@@ -35,8 +36,16 @@ const eventTypeFor = (status, prev) => {
         return "job-completed";
     return "job-updated";
 };
-const queueFileName = ".vault-mind/agent-queue.jsonl";
-const queuePath = (vaultPath) => path.join(vaultPath, queueFileName);
+/** Per-vault queue path, resolved from config once and memoized. */
+const queuePathCache = new Map();
+const queuePath = (vaultPath) => {
+    const cached = queuePathCache.get(vaultPath);
+    if (cached)
+        return cached;
+    const resolved = path.join(vaultPath, resolveVaultFile(loadConfig(vaultPath).vaultMind, "queue"));
+    queuePathCache.set(vaultPath, resolved);
+    return resolved;
+};
 const ensureQueueDir = (vaultPath) => {
     const dir = path.dirname(queuePath(vaultPath));
     if (!fs.existsSync(dir)) {

package/dist/src/auth.d.ts

@@ -3,14 +3,14 @@
  *
  * Token resolution order:
  *   1. `process.env.PVM_API_TOKEN`
- *   2. `<homedir>/.pi/agent/vault-mind.env` (key=value, # comments)
+ *   2. `<vault>/.vault-mind/vault-mind.env` (key=value, # comments)
  *   3. `vaultMind.embedding.modal.apiToken` in the loaded config
  *
  * Returns `null` if no token is configured (auth is off until set).
  *
- * Cross-platform: `os.homedir()` (never `~/`); `chmod 600` on the
- * dotenv file is the caller's responsibility and is a no-op on
- * win32 (the file system doesn't honor POSIX modes there).
+ * The token env path is resolved from the vault cwd via `getTokenEnvPath`;
+ * `chmod 600` on the dotenv file is best-effort and a no-op on win32 (the file
+ * system doesn't honor POSIX modes there).
  */
 import type { UniversalConfig } from "./types.js";
 /** Resolve the bearer token. `cfg` is optional; pass the loaded config to fall back to it. */
@@ -58,16 +58,16 @@ export declare const setToken: (value: string) => void;
 export declare const clearToken: () => void;
 /**
  * Revoke a role-specific bearer token by removing `PVM_TOKEN_<IDENTITY>`
- * from `~/.pi/agent/vault-mind.env`. Preserves all other lines and comments.
- * Returns `true` if the variable was found and removed.
+ * from `<vault>/.vault-mind/vault-mind.env`. Preserves all other lines and
+ * comments. Returns `true` if the variable was found and removed.
  */
 export declare const revokeToken: (identity: string) => boolean;
 /**
  * Generate a fresh 32-byte base64url token, persist it to
- * `<os.homedir()>/.pi/agent/vault-mind.env` (replacing any existing
- * `PVM_API_TOKEN` line while preserving all other lines and comments), create
- * the directory + file if missing, apply `chmod 600` (best-effort; no-op on
- * win32), update the in-process cache, and return the new token.
+ * `<vault>/.vault-mind/vault-mind.env` (replacing any existing `PVM_API_TOKEN`
+ * line while preserving all other lines and comments), create the directory +
+ * file if missing, apply `chmod 600` (best-effort; no-op on win32), update the
+ * in-process cache, and return the new token.
  *
  * **Env-var precedence note:** if `PVM_API_TOKEN` is exported as an environment
  * variable it takes precedence over the dotenv file at resolution time, so the

package/dist/src/auth.js

@@ -3,28 +3,24 @@
  *
  * Token resolution order:
  *   1. `process.env.PVM_API_TOKEN`
- *   2. `<homedir>/.pi/agent/vault-mind.env` (key=value, # comments)
+ *   2. `<vault>/.vault-mind/vault-mind.env` (key=value, # comments)
  *   3. `vaultMind.embedding.modal.apiToken` in the loaded config
  *
  * Returns `null` if no token is configured (auth is off until set).
  *
- * Cross-platform: `os.homedir()` (never `~/`); `chmod 600` on the
- * dotenv file is the caller's responsibility and is a no-op on
- * win32 (the file system doesn't honor POSIX modes there).
+ * The token env path is resolved from the vault cwd via `getTokenEnvPath`;
+ * `chmod 600` on the dotenv file is best-effort and a no-op on win32 (the file
+ * system doesn't honor POSIX modes there).
  */
 import * as crypto from "node:crypto";
 import * as fs from "node:fs";
-import * as os from "node:os";
 import * as path from "node:path";
+import { getTokenEnvPath } from "./utils.js";
 const ENV_VAR = "PVM_API_TOKEN";
-const DOTENV_REL = path.join(".pi", "agent", "vault-mind.env");
 /** Cached token resolution. The cache is invalidated by `setToken` / `clearToken`. */
 let cached = null;
 const readDotenvToken = () => {
-    const home = os.homedir();
-    if (!home)
-        return null;
-    const p = path.join(home, DOTENV_REL);
+    const p = getTokenEnvPath(process.cwd());
     try {
         const text = fs.readFileSync(p, "utf-8");
         for (const line of text.split(/\r?\n/)) {
@@ -149,12 +145,12 @@ export const clearToken = () => {
 };
 /**
  * Revoke a role-specific bearer token by removing `PVM_TOKEN_<IDENTITY>`
- * from `~/.pi/agent/vault-mind.env`. Preserves all other lines and comments.
- * Returns `true` if the variable was found and removed.
+ * from `<vault>/.vault-mind/vault-mind.env`. Preserves all other lines and
+ * comments. Returns `true` if the variable was found and removed.
  */
 export const revokeToken = (identity) => {
     const varName = `PVM_TOKEN_${identity.toUpperCase()}`;
-    const dotenvPath = path.join(os.homedir(), DOTENV_REL);
+    const dotenvPath = getTokenEnvPath(process.cwd());
     let lines = [];
     try {
         lines = fs.readFileSync(dotenvPath, "utf-8").split(/\r?\n/);
@@ -183,10 +179,10 @@ export const revokeToken = (identity) => {
 };
 /**
  * Generate a fresh 32-byte base64url token, persist it to
- * `<os.homedir()>/.pi/agent/vault-mind.env` (replacing any existing
- * `PVM_API_TOKEN` line while preserving all other lines and comments), create
- * the directory + file if missing, apply `chmod 600` (best-effort; no-op on
- * win32), update the in-process cache, and return the new token.
+ * `<vault>/.vault-mind/vault-mind.env` (replacing any existing `PVM_API_TOKEN`
+ * line while preserving all other lines and comments), create the directory +
+ * file if missing, apply `chmod 600` (best-effort; no-op on win32), update the
+ * in-process cache, and return the new token.
  *
  * **Env-var precedence note:** if `PVM_API_TOKEN` is exported as an environment
  * variable it takes precedence over the dotenv file at resolution time, so the
@@ -195,7 +191,7 @@ export const revokeToken = (identity) => {
  */
 export const rotateToken = () => {
     const newToken = crypto.randomBytes(32).toString("base64url");
-    const dotenvPath = path.join(os.homedir(), DOTENV_REL);
+    const dotenvPath = getTokenEnvPath(process.cwd());
     const dir = path.dirname(dotenvPath);
     if (!fs.existsSync(dir))
         fs.mkdirSync(dir, { recursive: true });

package/dist/src/autosync.js

@@ -27,7 +27,7 @@ export const startAutoSync = (intervalMs = 300_000) => {
                 return; // nothing to sync
             const ms = sync.autoSyncIntervalMs ?? intervalMs;
             void ms; // cadence is fixed at start; tick honors config toggle
-            await syncAll(cfg);
+            await syncAll(cfg, process.cwd());
             console.log("[pi-vault-mind] auto-sync tick complete");
         }
         catch (err) {

package/dist/src/commands.d.ts

@@ -5,8 +5,10 @@ export declare const selectActiveCollection: (ctx: ExtensionContext) => Promise<
 /**
  * Vault-root `.gitignore` entries that keep pi-vault-mind compatible with
  * `obsidian-git` (and, transitively, Obsidian Sync setups that also back up via
- * git): the LanceDB index is a large, per-device, rebuildable binary and must
- * never be committed; Obsidian's workspace UI state churns constantly. See
+ * git). The `.vault-mind/` directory holds local state (token, index, framework
+ * dir) that must never be committed, EXCEPT the hand-tuned config file, which is
+ * re-included via a `!` negation. The LanceDB index is a large, per-device,
+ * rebuildable binary; Obsidian's workspace UI state churns constantly. See
  * docs/OBSIDIAN_SETUP.md §6.
  */
 export declare const GITIGNORE_ENTRIES: string[];
@@ -15,9 +17,13 @@ export declare const GITIGNORE_ENTRIES: string[];
  * (`null` if absent). Pure — does no I/O — so it is unit-testable. Creates the
  * file when missing, appends only the entries that aren't already present
  * (line-exact match, trimmed), and skips when everything is covered.
+ *
+ * A bare `.vault-mind/` directory exclude would block the per-file config
+ * negation (git cannot re-include a file inside an ignored directory), so when
+ * one is present it is rewritten to `.vault-mind/*` and the whole file returned.
  */
 export declare const planGitignore: (existing: string | null) => {
-    action: "create" | "append" | "skip";
+    action: "create" | "append" | "rewrite" | "skip";
     content: string;
 };
 export declare const watcherState: import("./watcher.js").WatcherState;