vibeostheog 0.23.46 → 0.23.48

package/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 0.23.47
+- fix: harden integration tests against module-level state leakage
+- fix: revert test-suite runner to original static list
+- chore: sync release artifacts and test-suite scripts
+
+
 ## 0.23.46
 - fix: strip agent_mode from control vector to prevent ML plan-mode breakage
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibeostheog",
-  "version": "0.23.46",
+  "version": "0.23.48",
   "description": "Cost-aware delegation enforcer for OpenCode. Tracks model usage, routes Task subagents to cheaper tiers, surfaces cumulative savings in chat. Includes research audit, reporting framework, project memory, progressive scratchpad decadence, and trinity CLI for brain/medium/cheap slot switching.",
   "scripts": {
     "release": "node scripts/release.mjs",
@@ -14,6 +14,8 @@
     "checkpoint:validate": "node scripts/checkpoint-validate.mjs",
     "test:scripts": "node --test scripts/tests/checkpoint-validate.test.mjs tests/release-pack.test.mjs",
     "ts:audit": "node scripts/ts-audit.mjs",
+    "test:unit": "node scripts/run-test-suite.mjs unit",
+    "test:integration": "node scripts/run-test-suite.mjs integration",
     "test": "node scripts/run-test-suite.mjs full",
     "test:ci": "node scripts/run-test-suite.mjs ci",
     "guard": "bash plugins/vibetheog-guard/scripts/run-guard.sh",

package/src/lib/api-client.js

@@ -532,9 +532,13 @@ export function setApiToken(newToken) {
         VIBEOS_API_TOKEN = normalizeApiToken(newToken, EMBEDDED_API_TOKEN);
         VIBEOS_API_BOOTSTRAP_TOKEN = readBootstrapTokenFromDisk() || VIBEOS_API_BOOTSTRAP_TOKEN;
         VIBEOS_API_ENABLED = process.env.VIBEOS_API_ENABLED !== "false" && (!!VIBEOS_API_TOKEN || !!VIBEOS_API_BOOTSTRAP_TOKEN);
+        _apiClient = null;
+        _apiFallbackMode = false;
+        _apiFallbackSince = null;
         persistPrimaryApiEnvState({ token: VIBEOS_API_TOKEN, disabled: false });
         if (_anomalyDetector)
             _anomalyDetector.reset();
+        resetApiConnection();
         console.error("[vibeOS] API token updated via setApiToken");
     }
     catch (e) {

package/src/lib/classifiers.js

@@ -96,7 +96,10 @@ export function classifyTurnSimple(userText) {
     const lower = String(userText || "").trim();
     if (!lower)
         return "INIT";
-    if (/(security|vulnerability|audit|owasp|inject|exploit|penetration|cve|attack|threat|compliance|gdpr|privacy|encrypt|xss|csrf|authn|authz|pentest|forensic|research|analyze dependencies|license audit|deep analysis|investigate|root cause|reverse engineer|disassemble|memory dump|core dump)/i.test(lower)) {
+    if (/(security|vulnerability|audit|owasp|compliance|gdpr|privacy|analyze dependencies|license audit)/i.test(lower)) {
+        return "AUDIT";
+    }
+    if (/(inject|exploit|penetration|cve|attack|threat|encrypt|xss|csrf|authn|authz|pentest|forensic|research|deep analysis|investigate|root cause|reverse engineer|disassemble|memory dump|core dump)/i.test(lower)) {
         return "FORENSIC";
     }
     // Q&A / research patterns -> EXPLORING (relaxed enforcement)

package/src/lib/hooks/chat-transform.js

@@ -75,15 +75,12 @@ async function apiComputeControlVector(state, action, optimizationMode) {
         const res = await remoteCall("blackboxControlVector", [state, action, optimizationMode], null);
         if (res?.control_vector) {
             const local = computeControlVector(state, action, optimizationMode);
-            const cv = { agent_mode: local.agent_mode, ...res.control_vector, tier_bias: local.tier_bias, optimization_mode: local.optimization_mode };
-            delete cv.agent_mode;
+            const cv = { ...res.control_vector, agent_mode: local.agent_mode, tier_bias: local.tier_bias, optimization_mode: local.optimization_mode };
             return cv;
         }
     }
     catch { }
-    const fallbackCv = computeControlVector(state, action, optimizationMode);
-    delete fallbackCv.agent_mode;
-    return fallbackCv;
+    return computeControlVector(state, action, optimizationMode);
 }
 function observeUserCorrection(text) {
     if (!text || typeof text !== "string")

package/src/lib/trinity-tool.js

@@ -36,8 +36,8 @@ export function createTrinityTool(deps) {
             "Use action='api-bootstrap-token' with token='<new_token>' to store an alpha bootstrap token and exchange it for a normal API token on alpha builds. " +
             "Call this when the user says things like 'switch to medium', 'use cheap model', 'disable plugin', 'trinity status'.",
         args: {
-            action: deps.tool.schema.enum(["status", "enable", "disable", "set", "mode", "thinking", "flow", "tdd", "setup", "project", "patterns", "rebuild", "diagnose", "help", "enforce", "repair-state", "blackbox", "report", "target", "guard", "api-token", "api-bootstrap-token", "todo", "todo-done", "todo-sync"]).optional(),
-            slot: deps.tool.schema.enum(["brain", "medium", "cheap", "budget", "quality", "speed", "longrun", "auto", "vibeultrax", "on", "off", "enforce", "strict", "preview", "apply", "clear", "savings"]).optional(),
+            action: deps.tool.schema.enum(["status", "enable", "disable", "set", "mode", "thinking", "flow", "tdd", "setup", "project", "patterns", "rebuild", "diagnose", "help", "enforce", "repair-state", "blackbox", "report", "target", "guard", "api-token", "api-bootstrap-token", "todo", "todo-done", "todo-sync", "audit", "forensic", "balanced", "vibeqmax", "vibemax"]).optional(),
+            slot: deps.tool.schema.enum(["brain", "medium", "cheap", "budget", "quality", "speed", "longrun", "auto", "balanced", "audit", "forensic", "vibeultrax", "vibeqmax", "vibemax", "on", "off", "enforce", "strict", "preview", "apply", "clear", "savings"]).optional(),
             level: deps.tool.schema.enum(["full", "brief", "off", "on"]).optional(),
             token: deps.tool.schema.string().optional(),
         },

package/src/lib/turn-classify.js

@@ -91,14 +91,14 @@ export async function selectOptimizationModeRemote(subRegime, stressMultiplier,
 }
 function computeControlVector(_state, _action, _optimizationMode) {
     const mode = resolveOptimizationMode(_state?.sub_regime, _state?.latest_stress_multiplier, _optimizationMode);
-    const isStrict = mode === "quality" || mode === "vibemax";
+    const isStrict = mode === "quality" || mode === "vibemax" || mode === "forensic" || mode === "audit";
     const isRelaxed = mode === "budget" || mode === "speed";
     const subRegime = _state?.sub_regime || "INIT";
     const stress = Number(_state?.latest_stress_multiplier ?? 0);
     const tierBias = stress > QUALITY_STRESS_THRESHOLD ? "brain"
         : subRegime === "CONVERGING" || subRegime === "CLOSED" ? "brain"
             : subRegime === "REFINING" || subRegime === "LOOPING" ? "medium"
-                : mode === "quality" || mode === "longrun" ? "brain"
+                : mode === "quality" || mode === "longrun" || mode === "forensic" || mode === "audit" ? "brain"
                     : mode === "speed" || mode === "vibemax" ? "medium"
                         : mode === "balanced" ? "auto"
                             : "cheap";

package/src/vibeOS-lib/blackbox/meta-controller.js

@@ -96,6 +96,32 @@ const REGIME_CONTROL = {
         context7_urgency: "required",
         wbp_verbosity: "minimal",
     },
+    FORENSIC: {
+        enforcement_mode: "strict",
+        enforcement_reason: "forensic analysis — full enforcement, deep investigation",
+        flow_mode: "strict",
+        flow_focus: ["write-edit-check", "no-untouched-files", "trace-audit"],
+        tdd_mode: "quality",
+        tdd_focus: ["full-coverage", "edge-cases", "property-based"],
+        tier_bias: "brain",
+        thinking_mode: "full",
+        stress_multiplier: 1.5,
+        context7_urgency: "required",
+        wbp_verbosity: "detailed",
+    },
+    AUDIT: {
+        enforcement_mode: "strict",
+        enforcement_reason: "security audit — full enforcement, OWASP validation",
+        flow_mode: "strict",
+        flow_focus: ["write-edit-check", "no-untouched-files", "security-scan"],
+        tdd_mode: "quality",
+        tdd_focus: ["full-coverage", "edge-cases", "security-test"],
+        tier_bias: "brain",
+        thinking_mode: "full",
+        stress_multiplier: 1.2,
+        context7_urgency: "required",
+        wbp_verbosity: "detailed",
+    },
 };
 const DEFAULT_CONTROL = REGIME_CONTROL.EXPLORING;
 const QUALITY_STRESS_THRESHOLD = 1.5;
@@ -206,6 +232,36 @@ const MODE_DELTAS = {
         api_enrichment: true,
         outcome_detection: true,
     },
+    forensic: {
+        tier_bias: "brain",
+        thinking_mode: "full",
+        tdd_mode: "quality",
+        tdd_focus: ["full-coverage", "edge-cases", "property-based"],
+        flow_mode: "strict",
+        flow_focus: ["write-edit-check", "no-untouched-files", "trace-audit"],
+        enforcement_mode: "strict",
+        wbp_verbosity: "detailed",
+        context7_urgency: "required",
+        stress_multiplier: 1.5,
+        loop_threshold: 0.4,
+        api_enrichment: true,
+        outcome_detection: true,
+    },
+    audit: {
+        tier_bias: "brain",
+        thinking_mode: "full",
+        tdd_mode: "quality",
+        tdd_focus: ["full-coverage", "edge-cases", "security-test"],
+        flow_mode: "strict",
+        flow_focus: ["write-edit-check", "no-untouched-files", "security-scan"],
+        enforcement_mode: "strict",
+        wbp_verbosity: "detailed",
+        context7_urgency: "required",
+        stress_multiplier: 1.2,
+        loop_threshold: 0.5,
+        api_enrichment: true,
+        outcome_detection: true,
+    },
 };
 export function autoSelectMode(subRegime, stressMultiplier) {
     const regime = String(subRegime || "INIT").toUpperCase();