vgxness 1.17.0 → 1.17.2

package/README.md

@@ -8,7 +8,7 @@ This package is proprietary software. The npm package ships inspectable JavaScri
 
 OpenCode is the primary supported provider. Claude setup support is secondary. VGX-managed OpenCode and Claude provider configuration is user-global only; provider config writes require explicit CLI confirmation.
 
-VGXNESS is currently versioned from `package.json` (`1.16.0`). The latest full project health audit is the historical [v1.14.x snapshot](./docs/project-health-audit-v1.14.x.md), which documents the implemented CLI/MCP/SDD control plane, OpenCode-first workflow, release-readiness checks, and the remaining execution/recovery gaps at that point in time. [v1.10.x](./docs/project-health-audit-v1.10.x.md) and [v1.9.1](./docs/project-health-audit-v1.9.1.md) remain historical validation evidence for those releases.
+VGXNESS is currently versioned from `package.json` (`1.17.2`). The latest full project health audit is the historical [v1.14.x snapshot](./docs/project-health-audit-v1.14.x.md), which documents the implemented CLI/MCP/SDD control plane, OpenCode-first workflow, release-readiness checks, and the remaining execution/recovery gaps at that point in time. [v1.10.x](./docs/project-health-audit-v1.10.x.md) and [v1.9.1](./docs/project-health-audit-v1.9.1.md) remain historical validation evidence for those releases.
 
 ## Requirements
 
@@ -165,6 +165,15 @@ vgxness setup apply --yes
 
 The daily SDD happy path is OpenCode conversation with the installed VGXNESS MCP server and hidden SDD subagents. Use CLI commands for bootstrap, setup, diagnostics, recovery, fallback, and scripting: `status`, `next`, and `sdd continue` inspect state and print read-only continuation guidance; `resume` helps inspect interrupted work. After a draft is ready, `sdd accept-artifact` records explicit human acceptance, and `sdd reopen-artifact` returns rejected artifacts to draft.
 
+Copy this prompt into OpenCode for normal daily SDD work:
+
+```text
+Continue VGXNESS SDD for project <project> and change <change>.
+Use the VGXNESS MCP tools to inspect status/readiness/artifacts, then delegate phase work to the exact hidden SDD subagent when needed.
+Save draft artifacts when appropriate and report evidence, tests, blockers, and the next human decision.
+Do not accept or reopen artifacts for me; ask me before any human-only, provider-config, git, destructive, external, install, or secret-sensitive action.
+```
+
 ## Code runtime status
 
 The experimental `vgxness code` runtime and principal OpenTUI code surface have been removed temporarily because they were copied OpenCode-like runtime work. Continue SDD work in OpenCode through VGXNESS MCP, and use the safe CLI commands above for diagnostics and recovery.
@@ -179,7 +188,7 @@ The experimental `vgxness code` runtime and principal OpenTUI code surface have
 - `vgxness sdd accept-artifact` records explicit human-only acceptance; saving a draft never implies acceptance.
 - `vgxness sdd reopen-artifact` is the explicit path from a rejected artifact back to draft before revision.
 - OpenCode is the primary supported provider; other providers are preview/manual extension points.
-- VGXNESS exposes 41 typed MCP tools across SDD, memory, sessions, agents, skills, runs, providers, and verification. See [MCP tools](./docs/mcp.md).
+- VGXNESS exposes 42 typed MCP tools across SDD, memory, sessions, agents, skills, runs, providers, and verification. See [MCP tools](./docs/mcp.md).
 
 ## Principal entrypoint
 

package/dist/cli/home-tui-app.js

@@ -165,7 +165,8 @@ function focusedRunDetailLines(plan, databasePath, run) {
         ...(run.userIntent === undefined ? [] : ['', `Intent: ${run.userIntent}`]),
         '',
         `Inspect JSON: vgxness runs get --id ${run.id}`,
-        'Safety: read-only/no writes/no retry/approval/execution from this TUI detail.',
+        'Safety: read-only/no writes/no retry/approval/execution.',
+        'No retry, approval, or execution is performed from this TUI detail.',
     ];
 }
 function runSummarySection(title, runs, details = []) {

package/dist/skills/personal-skills.js

@@ -0,0 +1,41 @@
+export const GLOBAL_PERSONAL_SKILLS_PROJECT = '__personal__';
+export const GLOBAL_VGXNESS_SKILLS_PROJECT = '__vgxness__';
+export const skillLookupContexts = (project, scope) => {
+    const contexts = [{ project, scope }];
+    if (scope !== 'personal')
+        contexts.push({ project, scope: 'personal' });
+    if (project !== GLOBAL_PERSONAL_SKILLS_PROJECT)
+        contexts.push({
+            project: GLOBAL_PERSONAL_SKILLS_PROJECT,
+            scope: 'personal',
+        });
+    if (project !== GLOBAL_VGXNESS_SKILLS_PROJECT)
+        contexts.push({ project: GLOBAL_VGXNESS_SKILLS_PROJECT, scope: 'project' });
+    return dedupeContexts(contexts);
+};
+export const skillIndexContexts = (project, scope) => {
+    if (scope === 'personal')
+        return skillLookupContexts(project, 'personal');
+    return skillLookupContexts(project, scope);
+};
+export const dedupeSkillSummariesByName = (skills) => {
+    const seen = new Set();
+    const deduped = [];
+    for (const skill of skills) {
+        if (seen.has(skill.name))
+            continue;
+        seen.add(skill.name);
+        deduped.push(skill);
+    }
+    return deduped;
+};
+export const dedupeContexts = (contexts) => {
+    const seen = new Set();
+    return contexts.filter((context) => {
+        const key = `${context.project}:${context.scope}`;
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    });
+};

package/dist/skills/skill-index-service.js

@@ -1,10 +1,11 @@
+import { dedupeSkillSummariesByName, skillIndexContexts } from './personal-skills.js';
 export class SkillIndexService {
     registry;
     constructor(registry) {
         this.registry = registry;
     }
     getIndex(input) {
-        const listed = this.registry.listSkills({ project: input.project, scope: input.scope });
+        const listed = this.listSkills(input);
         if (!listed.ok)
             return listed;
         const skills = [];
@@ -41,6 +42,16 @@ export class SkillIndexService {
             },
         };
     }
+    listSkills(input) {
+        const skills = [];
+        for (const context of skillIndexContexts(input.project, input.scope)) {
+            const listed = this.registry.listSkills({ project: context.project, scope: context.scope });
+            if (!listed.ok)
+                return listed;
+            skills.push(...listed.value);
+        }
+        return { ok: true, value: dedupeSkillSummariesByName(skills) };
+    }
 }
 function indexSkill(details) {
     const currentVersion = details.currentVersion;

package/dist/skills/skill-resolver.js

@@ -1,5 +1,6 @@
 import { resolveAgentSelector } from '../agents/agent-selector-resolver.js';
 import { normalizeSddPhaseInput } from '../sdd/schema.js';
+import { skillLookupContexts } from './personal-skills.js';
 export class SkillResolver {
     skills;
     agents;
@@ -163,7 +164,16 @@ export class SkillResolver {
             return validationFailure('Resolved skill candidate has neither skill id nor name');
         if (project === undefined)
             return validationFailure(`Skill ${candidate.name} needs a project context`);
-        return this.skills.getByName(project, scope, candidate.name);
+        let lastMissing;
+        for (const context of skillLookupContexts(project, scope)) {
+            const result = this.skills.getByName(context.project, context.scope, candidate.name);
+            if (result.ok)
+                return result;
+            if (result.error.code !== 'not_found')
+                return result;
+            lastMissing = result;
+        }
+        return lastMissing ?? this.skills.getByName(project, scope, candidate.name);
     }
     resolveVersion(skill, candidateVersionId) {
         const versionId = candidateVersionId ?? skill.currentVersionId;

package/dist/skills/skill-status-service.js

@@ -1,3 +1,4 @@
+import { dedupeSkillSummariesByName, skillIndexContexts } from './personal-skills.js';
 export class SkillStatusService {
     skills;
     agents;
@@ -81,11 +82,16 @@ export class SkillStatusService {
         });
     }
     skillRegistry(project, scope) {
-        const listed = this.skills.listSkills({ project, scope });
-        if (!listed.ok)
-            return listed;
+        const listedSkills = [];
+        for (const context of skillIndexContexts(project, scope)) {
+            const listed = this.skills.listSkills({ project: context.project, scope: context.scope });
+            if (!listed.ok)
+                return listed;
+            listedSkills.push(...listed.value);
+        }
+        const summaries = dedupeSkillSummariesByName(listedSkills);
         const items = [];
-        for (const skill of listed.value) {
+        for (const skill of summaries) {
             const details = this.skills.getSkillDetails(skill.id);
             if (!details.ok)
                 return details;

package/docs/sdd-flow.md

@@ -59,6 +59,15 @@ agent_resolve
 agent_activate
 ```
 
+Copyable OpenCode prompt for the normal daily path:
+
+```text
+Continue VGXNESS SDD for project <project> and change <change>.
+Use the VGXNESS MCP tools to inspect status/readiness/artifacts, then delegate phase work to the exact hidden SDD subagent when needed.
+Save draft artifacts when appropriate and report evidence, tests, blockers, and the next human decision.
+Do not accept or reopen artifacts for me; ask me before any human-only, provider-config, git, destructive, external, install, or secret-sensitive action.
+```
+
 The CLI equivalents are useful for setup, diagnostics, recovery, and scripting:
 
 ```bash
@@ -111,7 +120,7 @@ Only a human acceptance decision should advance governance-gated downstream work
 CLI example:
 
 ```bash
-vgxness sdd accept-artifact --project <project> --change <change> --phase explore
+vgxness sdd accept-artifact --project <project> --change <change> --phase explore --actor <human-id>
 ```
 
 ## 4. `proposal`: choose the product direction

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vgxness",
-  "version": "1.17.0",
+  "version": "1.17.2",
   "description": "CLI and MCP control plane for guided AI-agent workflows, SDD, memory, and OpenCode setup.",
   "license": "SEE LICENSE IN LICENSE",
   "repository": {

package/seeds/skills/skill-seed-v1.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "project": "vgxness",
+  "project": "__vgxness__",
   "scope": "project",
   "skills": [
     {