vectorforce 0.3.0 → 0.3.2

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Learn With Ohm
+Copyright (c) 2026 VectorForce (getvectorforce)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/bin/vf.js

@@ -276,8 +276,8 @@ function parseFlags(args) {
 }
 
 function getRemoteConfig(cwd) {
-  const defaultUrl = process.env.VF_CLOUD_URL || 'https://omprakash-pce2011--vectorforce-cloud-vectorforce-cloud-web.modal.run';
-  const defaultKey = process.env.VF_SUBSCRIPTION_KEY || 'vf_live_sub_98a7bc65f012e4d9';
+  const defaultUrl = process.env.VF_CLOUD_URL || '';
+  const defaultKey = process.env.VF_SUBSCRIPTION_KEY || '';
   const cfgPath = join(cwd, '.vectorforce', 'config.json');
   try {
     if (existsSync(cfgPath)) {
@@ -285,14 +285,14 @@ function getRemoteConfig(cwd) {
       return {
         remoteUrl: (parsed.remoteUrl || defaultUrl).replace(/\/+$/, ''),
         subscriptionKey: parsed.subscriptionKey || defaultKey,
-        remoteProjectId: parsed.remoteProjectId || 'proj-bistro-pos'
+        remoteProjectId: parsed.remoteProjectId || 'default'
       };
     }
   } catch {}
   return {
     remoteUrl: defaultUrl.replace(/\/+$/, ''),
     subscriptionKey: defaultKey,
-    remoteProjectId: 'proj-bistro-pos'
+    remoteProjectId: 'default'
   };
 }
 
@@ -940,7 +940,11 @@ VectorForce Harness Configuration:
       case 'push': {
         const remote = getRemoteConfig(cwd);
         const targetUrl = (flags.url || remote.remoteUrl).replace(/\/+$/, '');
-        const remoteProjectId = flags.project || remote.remoteProjectId || 'proj-bistro-pos';
+        if (!targetUrl) {
+          console.error('Error: Remote URL is not configured. Run "vf remote set <CLOUD_URL> --key <SUBSCRIPTION_KEY>" first.');
+          process.exit(1);
+        }
+        const remoteProjectId = flags.project || remote.remoteProjectId || 'default';
         const project = projectService.getProjectForWorkspace(cwd);
         const tasks = store.listTasks(project.project_id);
         const machineId = `${hostname()}-local`;
@@ -1008,7 +1012,11 @@ VectorForce Harness Configuration:
       case 'pull': {
         const remote = getRemoteConfig(cwd);
         const targetUrl = (flags.url || remote.remoteUrl).replace(/\/+$/, '');
-        const remoteProjectId = flags.project || remote.remoteProjectId || 'proj-bistro-pos';
+        if (!targetUrl) {
+          console.error('Error: Remote URL is not configured. Run "vf remote set <CLOUD_URL> --key <SUBSCRIPTION_KEY>" first.');
+          process.exit(1);
+        }
+        const remoteProjectId = flags.project || remote.remoteProjectId || 'default';
 
         console.log(`🔓 Pulling & Decrypting latest context from ${targetUrl} ...`);
         const res = await fetch(`${targetUrl}/api/cloud/sync/pull`, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vectorforce",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Portable engineering context platform - Git for AI context",
   "type": "module",
   "main": "src/index.js",
@@ -21,13 +21,7 @@
     "bin",
     "src",
     "studio/dist",
-    "AGENTS.md",
-    "CHANGELOG.md",
-    "commandcode.json",
-    "musecode.json",
-    "codex.json",
-    ".agents",
-    ".codex"
+    "CHANGELOG.md"
   ],
   "keywords": [
     "context",

package/src/studio/server.js

@@ -290,7 +290,7 @@ export function createStudioServer({
             authorMap.set(name, {
               id: name.toLowerCase().replace(/[^a-z0-9]/g, '-'),
               name,
-              role: name === 'omprakashprajapat' ? 'Lead Architect / Owner' : 'Collaborator',
+              role: 'Contributor',
               harness: cp.author?.harness || 'cli',
               tasks: new Set(),
               checkpointsCount: 0,

package/.agents/agents/AGENTS.md

@@ -1,12 +0,0 @@
-# Workspace Agents Directory (`.agents/agents/`)
-
-This directory defines workspace-scoped agents for **VectorForce** (alongside the project-root [`AGENTS.md`](../../AGENTS.md)).
-
-## Registered Workspace Agents
-
-| Agent Name | File | Role & Responsibility |
-| :--- | :--- | :--- |
-| **`vectorforce-architect`** | [`vectorforce-architect.md`](vectorforce-architect.md) | Upgrades core VectorForce services (`src/operations/*`), SQLite WAL store (`src/storage/sqlite-store.js`), MCP tools (`src/mcp/mcp-server.js`), AI providers (`src/providers/llm-provider.js`), CLI (`bin/vf.js`), and Studio UI (`studio/`) while enforcing zero runtime dependencies. |
-| **`vectorforce-samples-builder`** | [`vectorforce-samples-builder.md`](vectorforce-samples-builder.md) | Builds runnable multi-agent workflows, cross-harness reference architectures, and integration demos inside [`samples/`](../../samples/README.md). |
-| **`vectorforce-auditor`** | [`vectorforce-auditor.md`](vectorforce-auditor.md) | Verifies security boundaries, allowlist limits (`AGENTS.md < 8192` bytes), HMAC-SHA256 handoff integrity, and runs `npm test` + `npm run test:practical`. |
-

package/.agents/agents/vectorforce-architect.md

@@ -1,35 +0,0 @@
----
-name: vectorforce-architect
-description: >-
-  Specialized production architect for upgrading VectorForce core services, SQLite WAL storage, MCP tools, AI reasoning providers, and VectorForce Studio while enforcing zero runtime dependencies.
-tools:
-  - read_file
-  - write_file
-  - edit_file
-  - run_command
----
-
-# VectorForce Production Architect (`vectorforce-architect`)
-
-You are the **VectorForce Production Architect**, responsible for designing and implementing production-grade upgrades across the VectorForce engine (`src/`), CLI (`bin/vf.js`), MCP server (`src/mcp/mcp-server.js`), and Studio UI (`src/studio/server.js`, `studio/`).
-
-## Non-Negotiable Architectural Invariants
-
-1. **Zero External Runtime Dependencies**:
-   - All backend code (`bin/`, `src/`) must use **only** Node.js built-in modules (`node:sqlite`, `node:http`, `node:crypto`, `node:fs`, `node:path`, `node:child_process`).
-   - Never add runtime dependencies to the root `package.json`.
-2. **Strict Separation of `claims` vs `evidence`**:
-   - Human/AI assertions (`goals`, `constraints`, `decisions`, `next_steps`) live in `checkpoint.claims`.
-   - Verifiable observations (Git commit SHA, branch, dirty status, SHA-256 document digests) live in `checkpoint.evidence`.
-3. **Workspace Containment & Allowlist Enforcement**:
-   - Every file operation must pass through `Authorizer` (`src/policy/authorizer.js`).
-   - Reject symlinks, absolute paths, and `..` traversal sequences.
-4. **Full-Stack Tool Registration Checklist**:
-   When adding or upgrading a VectorForce capability:
-   - **Storage**: Add/update SQLite tables or queries in `src/storage/sqlite-store.js`.
-   - **Operations**: Add service method in `src/operations/*-service.js`.
-   - **MCP Bridge**: Register JSON-RPC tool schema and handler in `src/mcp/mcp-server.js`.
-   - **CLI**: Add command flag handling and help text in `bin/vf.js`.
-   - **SDK Export**: Export any new classes/types in `src/index.js`.
-   - **Tests**: Add unit tests in `test/` and verify `npm test` + `npm run test:practical`.
-

package/.agents/agents/vectorforce-auditor.md

@@ -1,25 +0,0 @@
----
-name: vectorforce-auditor
-description: >-
-  Specialized security, workspace drift, and cross-OS verification auditor for VectorForce checkpoints, HMAC-SHA256 handoff packages, and test suites.
-tools:
-  - read_file
-  - run_command
----
-
-# VectorForce Security & Continuity Auditor (`vectorforce-auditor`)
-
-You are the **VectorForce Security & Continuity Auditor**, responsible for verifying security invariants, cross-OS compatibility, and checkpoint/handoff integrity across the workspace.
-
-## Verification Checklist
-
-1. **Automated Unit & Security Suite**:
-   - Run `npm test` and ensure all tests pass with `fail 0`.
-2. **Practical 7-Stage E2E Simulation**:
-   - Run `npm run test:practical` (`node scripts/practical-test-env.js`) to validate Git + CLI + live MCP stdio + HMAC-SHA256 handoff + tamper rejection + drift detection.
-3. **Workspace Health & Policy Check**:
-   - Run `node bin/vf.js status` and `node bin/vf.js policy list`.
-   - Ensure `AGENTS.md` at the repository root remains `< 8192` bytes (`wc -c AGENTS.md`) so it can always be collected as allowlisted document evidence.
-4. **Checkpoint Continuity**:
-   - Verify that every completed phase ends with a committed VectorForce checkpoint (`node bin/vf.js checkpoint --task <id> ... --doc "AGENTS.md"`).
-

package/.agents/agents/vectorforce-samples-builder.md

@@ -1,30 +0,0 @@
----
-name: vectorforce-samples-builder
-description: >-
-  Specialized builder for runnable multi-agent workflows, cross-harness reference architectures, and AI provider integrations inside the VectorForce samples/ directory.
-tools:
-  - read_file
-  - write_file
-  - edit_file
-  - run_command
----
-
-# VectorForce Samples & Architecture Builder (`vectorforce-samples-builder`)
-
-You are the **VectorForce Samples & Multi-Agent Workflow Builder**, responsible for translating user architecture diagrams, multi-agent patterns, and integration scenarios into clean, runnable examples inside `samples/`.
-
-## Guidelines for Building Samples (`samples/`)
-
-1. **Self-Contained & Runnable**:
-   - Every sample in `samples/` must be runnable directly via `node samples/<sample-name>.js` (or `node samples/<folder>/index.js`).
-   - Use isolated temporary workspaces (`mkdtempSync(join(tmpdir(), 'vf-sample-...'))`) and clean them up in a `finally` block so running a sample never pollutes the main repo.
-2. **SDK & MCP Coverage**:
-   - Import core classes directly from `../src/index.js` (`SqliteStore`, `ProjectService`, `CheckpointService`, `BriefingService`, `ReasoningService`, `HandoffService`, `LlmProvider`, `McpServer`).
-   - Demonstrate realistic multi-harness transitions across:
-     - **Google Antigravity** (`antigravity`)
-     - **Meta Muse / Fireworks AI (`Muse Spark Open`)** (`muse-code`)
-     - **Claude Code / Command Code** (`command-code`)
-     - **OpenAI Codex CLI** (`codex`)
-3. **Update Index**:
-   - Whenever you create a new sample, add it to the table in `samples/README.md` with its run command and architectural summary.
-

package/.agents/mcp_config.json

@@ -1,11 +0,0 @@
-{
-  "mcpServers": {
-    "vectorforce": {
-      "command": "node",
-      "args": [
-        "/Users/omprakashprajapat/AgentAI/VectorForce/bin/vf.js",
-        "mcp"
-      ]
-    }
-  }
-}

package/.codex/config.toml

@@ -1,5 +0,0 @@
-[mcp_servers.vectorforce]
-command = "node"
-args = ["/Users/omprakashprajapat/AgentAI/VectorForce/bin/vf.js", "mcp"]
-[mcp_servers.vectorforce.env]
-VF_HARNESS = "codex"

package/AGENTS.md

@@ -1,115 +0,0 @@
-# VectorForce Workspace Architecture & Agent Continuity Guide (`AGENTS.md`)
-
-This repository is the core workspace for **VectorForce** — a local-first, zero-dependency, privacy-preserving engineering context platform ("Git for AI Context") across **Google Antigravity**, **Meta Muse**, **Claude Code**, **Command Code**, and **OpenAI Codex**.
-
----
-
-## 1. Context Protocol Workflow (Mandatory for All AI Agents)
-
-### At the Start of a Task / Resuming Work:
-1. **Discover active tasks:**
-   - MCP: `list_tasks({ status: "active" })` | CLI: `node bin/vf.js tasks active`
-2. **Check for workspace or document drift:**
-   - MCP: `check_workspace_drift({ task_id: "<task_id>" })` | CLI: `node bin/vf.js drift --task <task_id>`
-3. **Retrieve the authorized briefing:**
-   - MCP: `get_resume_briefing({ task_id: "<task_id>", destination_harness: "antigravity" })` (`"antigravity" | "muse-code" | "command-code" | "codex"`)
-   - CLI: `node bin/vf.js resume --task <task_id> --dest antigravity`
-4. **Reason over the context (AI memory):**
-   - MCP: `reason_about_task({ task_id: "<task_id>" })` | CLI: `node bin/vf.js reason --task <task_id>`
-5. **Adhere to Invariant Constraints:** Respect all rules under `# Invariant Constraints` in the briefing.
-
-### At the End of a Task Phase / Before Switching Harnesses:
-1. **Capture an immutable checkpoint:**
-   - MCP: `save_checkpoint({ task_id, summary, goals, constraints, decisions, next_steps, requested_documents })`
-   - CLI:
-     ```bash
-     node bin/vf.js checkpoint --task <id> --summary "<summary>" \
-       --goal "<goal>" --constraint "<constraint>" \
-       --decision "<ID>:<Title>:<Rationale>" \
-       --next "<next_step>" --doc "AGENTS.md"
-     ```
-2. **Verify Receipt:** Ensure the operation receipt returns `status: "committed"`.
-
----
-
-## 2. Security & Policy Invariants
-
-- **Zero External Runtime Dependencies:** Core CLI, MCP server, and Studio backend use **only** Node.js built-ins (`node:sqlite`, `node:http`, `node:crypto`, `node:fs`, `node:child_process`).
-- **Claims vs Evidence Distinction:** Human/model inputs (`goals`, `constraints`, `decisions`, `next_steps`) are stored as unverifiable **`claims`**. Git commit SHAs, dirty states, and SHA-256 document digests are recorded as verifiable **`evidence`**.
-- **Strict Document Allowlist & Size Cap:** Only `.md`/`.txt` files in `node bin/vf.js policy list` (max `8 KiB` per file, `64 KiB` total) may be collected. `AGENTS.md` must stay `< 8192` bytes. Symlinks and path traversal (`..`) are strictly rejected.
-- **Safe Receipts:** Receipts and audit logs never contain raw document bodies or API credentials.
-
----
-
-## 3. Workspace Directory & Module Map
-
-```text
-VectorForce/
-├── AGENTS.md                      # Workspace guide & agent protocol (< 8 KiB)
-├── README.md                      # Public documentation & quickstart
-├── package.json                   # Zero-dependency ESM package (Node >= 22.5.0)
-├── bin/vf.js                      # Unified CLI (init, status, checkpoint, resume, reason, studio, mcp, handoff, config)
-├── src/
-│   ├── index.js                   # Public programmatic SDK exports
-│   ├── core/                      # errors.js, hash.js (SHA-256 / HMAC), types.js (schema validators)
-│   ├── policy/authorizer.js       # Workspace containment, symlink rejection, allowlist & harness auth
-│   ├── storage/sqlite-store.js    # Local SQLite WAL engine (.vectorforce/vectorforce.db)
-│   ├── providers/
-│   │   ├── code-index-provider.js # Zero-dep AST/symbol & dependency graph indexer
-│   │   ├── document-provider.js   # Policy-enforced doc reader & SHA-256 evidence collector
-│   │   ├── git-provider.js        # Git branch, HEAD SHA, dirty status, and file diff observer
-│   │   └── llm-provider.js        # AI adapter (Fireworks, Muse, OpenRouter, Ollama, OpenAI, Anthropic, BYOK)
-│   ├── operations/
-│   │   ├── project-service.js     # Project & task lifecycle + allowlist management
-│   │   ├── checkpoint-service.js  # Immutable checkpoint creation + evidence collection
-│   │   ├── briefing-service.js    # Cross-harness resume briefing + live Git/doc drift reconciliation
-│   │   ├── reasoning-service.js   # AI reasoning synthesis over checkpoints + code index + drift
-│   │   └── handoff-service.js     # HMAC-SHA256 signed handoff export/import + lineage verification
-│   ├── mcp/
-│   │   ├── mcp-server.js          # JSON-RPC 2.0 stdio MCP server exposing 9 tools + 3 resources
-│   │   └── harness-config.js      # Auto-generator for Antigravity, Claude, Command Code, Muse, Codex configs
-│   └── studio/server.js           # Local HTTP server (127.0.0.1:3210) + REST API for VectorForce Studio
-├── studio/                        # React + Vite + Tailwind + XYFlow frontend for VectorForce Studio
-├── samples/                       # Runnable sample architectures, multi-agent workflows & integrations
-├── scripts/practical-test-env.js  # 7-stage cross-OS practical E2E simulation (Git + CLI + MCP + Handoff)
-├── test/                          # 75 automated unit, security, MCP, and cross-harness tests
-└── wiki/                          # Local-only ADRs (001-014) and phase planning (gitignored)
-```
-
-### Generated Harness Configs in Workspace Root (`vf init`):
-- `.mcp.json`, `.commandcode/mcp.json`, `commandcode.json` — Claude Code & Command Code
-- `.agents/mcp_config.json`, `~/.gemini/antigravity/mcp_config.json` — Google Antigravity
-- `.muse/mcp_config.json`, `musecode.json` — Meta Muse
-- `.codex/config.toml`, `codex.json` — OpenAI Codex CLI
-
----
-
-## 4. MCP Tools & AI Provider Reference
-
-| MCP Tool (`src/mcp/mcp-server.js`) | Service Method | Purpose |
-| :--- | :--- | :--- |
-| `list_tasks` | `ProjectService.listTasks` | Discover active/completed tasks |
-| `save_checkpoint` | `CheckpointService.saveCheckpoint` | Commit claims + Git/doc evidence to SQLite |
-| `get_resume_briefing` | `BriefingService.generateBriefing` | Deterministic cross-harness briefing |
-| `check_workspace_drift` | `BriefingService.checkWorkspaceDrift` | Compare live Git & doc hashes vs checkpoint |
-| `reason_about_task` | `ReasoningService.reasonAboutTask` | AI architectural briefing + risk analysis |
-| `set_document_policy` | `ProjectService.setDocumentPolicy` | Update workspace document allowlist |
-| `export_handoff` | `HandoffService.exportHandoff` | Export HMAC-SHA256 signed `.vfhandoff.json` |
-| `import_handoff` | `HandoffService.importHandoff` | Verify signature/hashes & import handoff |
-| `get_timeline` | `SqliteStore.getAuditEvents` | Inspect chronological audit trail |
-
-### Supported AI Reasoning Providers (`src/providers/llm-provider.js`):
-1. **Fireworks AI (`Muse Spark Open`)**: `vf config fireworks <KEY>` (`accounts/fireworks/models/muse-spark-open`)
-2. **Meta Muse Direct**: `vf config muse <KEY>` (`muse-spark-1.3`)
-3. **OpenRouter (`Muse Spark Open`)**: `vf config openrouter <KEY> --model meta/muse-spark-open`
-4. **Local Ollama**: `vf config ollama --model llama3.3` (`http://127.0.0.1:11434`)
-5. **OpenAI / Anthropic / BYOK**: `vf config openai <KEY>` | `vf config anthropic <KEY>` | `vf config byok <URL> <KEY> --model <ID>`
-
----
-
-## 5. Extension Playbook (Samples & Production Upgrades)
-
-1. **Adding Samples (`samples/`)**: Place runnable workflows, reference architectures, and multi-agent demos inside `samples/` using `src/index.js` or CLI/MCP bridges.
-2. **Adding/Upgrading MCP Tools**: Add business logic in `src/operations/*`, persistence in `src/storage/sqlite-store.js`, MCP registration in `src/mcp/mcp-server.js`, SDK export in `src/index.js`, and CLI command in `bin/vf.js`.
-3. **Upgrading Studio UI**: Add REST routes in `src/studio/server.js` and React views in `studio/src/components/`, then build via `npm --prefix studio run build`.
-4. **Verification Gate**: Always run `npm test` (75 unit/security tests) and `npm run test:practical` (7-stage E2E test) before committing.

package/codex.json

@@ -1,14 +0,0 @@
-{
-  "mcpServers": {
-    "vectorforce": {
-      "command": "node",
-      "args": [
-        "/Users/omprakashprajapat/AgentAI/VectorForce/bin/vf.js",
-        "mcp"
-      ],
-      "env": {
-        "VF_HARNESS": "codex"
-      }
-    }
-  }
-}

package/commandcode.json

@@ -1,11 +0,0 @@
-{
-  "mcpServers": {
-    "vectorforce": {
-      "command": "node",
-      "args": [
-        "/Users/omprakashprajapat/AgentAI/VectorForce/bin/vf.js",
-        "mcp"
-      ]
-    }
-  }
-}

package/musecode.json

@@ -1,14 +0,0 @@
-{
-  "mcpServers": {
-    "vectorforce": {
-      "command": "node",
-      "args": [
-        "/Users/omprakashprajapat/AgentAI/VectorForce/bin/vf.js",
-        "mcp"
-      ],
-      "env": {
-        "VF_HARNESS": "muse-code"
-      }
-    }
-  }
-}