vibeostheog 0.23.32 → 0.23.33

package/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.23.33
+- feat: wire forensic + audit into ML pipeline — classifyTurnSimple detects security/forensic intent, autoSelectMode returns audit/forensic mode
+
+
 ## 0.23.32
 - test: 14 agent_mode integration tests — plan only for complex regimes, stress-gated
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibeostheog",
-  "version": "0.23.32",
+  "version": "0.23.33",
   "description": "Cost-aware delegation enforcer for OpenCode. Tracks model usage, routes Task subagents to cheaper tiers, surfaces cumulative savings in chat. Includes research audit, reporting framework, project memory, progressive scratchpad decadence, and trinity CLI for brain/medium/cheap slot switching.",
   "scripts": {
     "release": "node scripts/release.mjs",

package/src/index.js

@@ -25,7 +25,7 @@ import { createTrinityTool } from "./lib/trinity-tool.js";
 import { classifyAndRankModels, modelToCcAlias, discoverAvailableModels, probeModel } from "./lib/trinity-rebuild.js";
 import { _appendFooter } from "./lib/hooks/footer.js";
 import { onToolExecuteBefore, onToolExecuteAfter, setToolDirectory } from "./lib/hooks/tool-execute.js";
-import { onMessagesTransform, onSystemTransform, latestUserIntent } from "./lib/hooks/chat-transform.js";
+import { onMessagesTransform, onSystemTransform, latestUserIntent, ensureProjectSkill } from "./lib/hooks/chat-transform.js";
 import { onSessionCompacting } from "./lib/hooks/session-compact.js";
 import { onShellEnv, setShellDirectory } from "./lib/hooks/shell-env.js";
 function getVibeOSHome() {
@@ -67,6 +67,8 @@ let _mcpServerStartupPromise = null;
 let context7Seen = new Set();
 let _prevOutputText = "";
 let _deferredBootstrapDone = false;
+let _skillsEnsured = new Set();
+
 let _runDeferredStartupBootstrap = null;
 const SAVE_EST = {
     WRITE_EDIT: 0.005,
@@ -452,6 +454,13 @@ export async function DelegationEnforcer({ client, directory } = {}) {
                 setCurrentProjectName(directory ? directory.split("/").pop() : "unknown");
             }
             ensureDeferredBootstrap();
+            if (directory && hookFp && !_skillsEnsured.has(hookFp)) {
+                try {
+                    ensureProjectSkill(directory, hookFp);
+                    _skillsEnsured.add(hookFp);
+                } catch (_e) {}
+            }
+
             onToolExecuteBefore._directory = directory;
             return onToolExecuteBefore(input, output);
         },
@@ -466,6 +475,13 @@ export async function DelegationEnforcer({ client, directory } = {}) {
         },
         "experimental.chat.messages.transform": async (_input, output) => {
             ensureDeferredBootstrap();
+            if (directory && hookFp && !_skillsEnsured.has(hookFp)) {
+                try {
+                    ensureProjectSkill(directory, hookFp);
+                    _skillsEnsured.add(hookFp);
+                } catch (_e) {}
+            }
+
             return onMessagesTransform(_input, output);
         },
         "experimental.session.compacting": async (_input, output) => {
@@ -478,6 +494,13 @@ export async function DelegationEnforcer({ client, directory } = {}) {
                 setCurrentProjectName(directory ? directory.split("/").pop() : "unknown");
             }
             ensureDeferredBootstrap();
+            if (directory && hookFp && !_skillsEnsured.has(hookFp)) {
+                try {
+                    ensureProjectSkill(directory, hookFp);
+                    _skillsEnsured.add(hookFp);
+                } catch (_e) {}
+            }
+
             onSystemTransform._directory = directory;
             onSystemTransform._activeJob = activeJob;
             onSystemTransform._briefedProjects = systemBriefedProjects;
@@ -500,6 +523,13 @@ export async function DelegationEnforcer({ client, directory } = {}) {
                 setCurrentProjectName(directory ? directory.split("/").pop() : "unknown");
             }
             ensureDeferredBootstrap();
+            if (directory && hookFp && !_skillsEnsured.has(hookFp)) {
+                try {
+                    ensureProjectSkill(directory, hookFp);
+                    _skillsEnsured.add(hookFp);
+                } catch (_e) {}
+            }
+
             await _appendFooter(_input, output, directory);
         },
         "message.updated": async (_input, output) => {
@@ -509,6 +539,13 @@ export async function DelegationEnforcer({ client, directory } = {}) {
                 setCurrentProjectName(directory ? directory.split("/").pop() : "unknown");
             }
             ensureDeferredBootstrap();
+            if (directory && hookFp && !_skillsEnsured.has(hookFp)) {
+                try {
+                    ensureProjectSkill(directory, hookFp);
+                    _skillsEnsured.add(hookFp);
+                } catch (_e) {}
+            }
+
             await _appendFooter(_input, output, directory);
         },
         tool: {

package/src/lib/classifiers.js

@@ -96,6 +96,9 @@ export function classifyTurnSimple(userText) {
     const lower = String(userText || "").trim();
     if (!lower)
         return "INIT";
+    if (/(security|vulnerability|audit|owasp|inject|exploit|penetration|cve|attack|threat|compliance|gdpr|privacy|encrypt|xss|csrf|authn|authz|pentest|forensic|research|analyze dependencies|license audit|deep analysis|investigate|root cause|reverse engineer|disassemble|memory dump|core dump)/i.test(lower)) {
+        return "FORENSIC";
+    }
     // Q&A / research patterns -> EXPLORING (relaxed enforcement)
     if (/^(how|what|why|when|where|who|can you|could you|tell me|explain|describe|show|list|check|is there|are there|does|do you|summarize|elaborate|clarify|inspect|trace|find|search|look|read|show me|dump)/i.test(lower)) {
         return "EXPLORING";

package/src/lib/turn-classify.js

@@ -12,6 +12,8 @@ function getVibeOSHome() {
 function autoSelectMode(subRegime, stressMultiplier) {
     const regime = String(subRegime || "INIT").toUpperCase();
     const stress = Number(stressMultiplier ?? 0);
+    if (regime === "AUDIT" || regime === "FORENSIC")
+        return regime.toLowerCase();
     if (regime === "LOOPING")
         return "speed";
     if (regime === "CONVERGING" || regime === "CLOSED")