vibeostheog 0.25.32 → 0.25.34

package/CHANGELOG.md

@@ -1,47 +1,18 @@
-## 0.25.32
-- feat: anti-lie enforcement — verify-claims + claim gauge + cascade cross-ref
-- feat: anti-lie enforcement - verify-claims tool, claim gauge in footer
-- feat: anti-loop cost guard with per-turn memoization
-- feat: remove auto-lock on slot/mode change, README/skills use vibe, lock regression tests
-- feat: store API-predicted optimization_mode from blackboxAnalyze + regression test
-- feat: add vibe as primary tool name, trinity remains as alias
-- feat: delegation guide — explicit Task subagent syntax in system prompt + enforcement note
-- feat: add plan update/close/completion directives to system prompt + cascade tests
-- feat: add cascade icon (▸▸▸) to footer when VibeUltraX cascade is active (#223)
-- fix: PCRE (?i) regex syntax not valid in JS - use /pattern/i flag instead
-- fix: add runtime claim verifier and strengthen anti-lie directive
-- fix: skip 5 pre-existing flaky tests to green CI
-- fix: add VIBEOS_API_DISABLED to quality_pipeline test sandbox
-- fix: taskModel ReferenceError, remove _warnCounts check from enforcement path
-- fix: reset warn counts on each test invocation (_resetWarnCountsForTest)
-- fix: add srv.unref() to MCP server so child processes can exit
-- fix: move orchestratorDirective inside try/catch (prevents loadSelection throw from breaking onSystemTransform)
-- fix: wire orchestratorDirective to system prompt (was dead code)
-- fix: add process.exit(0) to delegation test child scripts to prevent MCP server hang
-- fix: _cachedPct returns null when total is 0 (avoids stale 0-credit cache)
-- fix: set VIBEOS_HOME in recordFlowTodo test to use correct sandbox path
-- fix: store cascade data in blackbox history, tune loop detection threshold to 3 (#226)
-- fix: keep VIBEOS_HOME set to sandbox (don't delete in beforeEach) to prevent stale credit cache collisions
-- fix: reset session ID in beforeEach to prevent warn key collision across tests
-- fix: delegation test assertions for new enforcement note format
-- fix: delegation test assertions match new format + VIBEOS_API_DISABLED
-- fix: always record savings from enforcement, cap UI notes only
-- fix: re-add credit nudge for all tools, cap at 5 per tool per session
-- fix: cap repetitive warnings (max 3 per tool per session), remove credit nudge from bash/read
-- fix: compression notice wording — 'has been compressed' → 'will be compressed next' (accurate)
-- fix: readConfig falls back to bare model, fix 3 pre-existing test failures (#225)
-- fix: readConfig falls back to bare model, fix 3 pre-existing test failures
-- fix: cascade icon uses requested_optimization_mode (not loadOptimizationMode which recovers to budget)
-- fix: pass latestUserIntent to computeControlVector for real cascade decision
-- fix: cascade icon uses live computeControlVector (not undefined _controlVector) (#224)
-- docs: update all .md files to use vibe as primary command name
-- docs: footer README, real cascade tests, execFileSync timeouts
-- test: add 3 delegation tests (orchestrator guide, enforcement note, syncControlSettings)
-- test: add 7 regression tests (classify, readConfig, metrics, status payload, classification patterns, turn counter, autoSelectMode)
-- test: add compact memory cascade tests (scratchpad, turn 7+ notice, counter consistency)
-- chore: v0.25.31
-- chore: remove 8 toy test files, remove dead code (PRIORITY, VIBEMAX_CFG, modeCapitalized)
-- chore: remove 8 pure toy test files (zero assertions)
+## 0.25.34
+- fix: remove hardcoded model names from fallback
+- fix: restore apiRoute gate for cascade (#239)
+- fix: cascade triggered only by ML_ENABLED, not apiRoute (#238)
+- fix: cascade router must run regardless of remote API route (#237)
+- fix: cascade fallback only when ML API route is unavailable
+- fix: race condition in token refresh with concurrent session renewal (#235)
+- fix: cascade applySlot fires for all tools regardless of delegation_enforce
+- fix: rename pipeline tier 'local' to 'cheap' (#232)
+- docs: add TDD template + branch-first workflow to AGENTS.md
+- build: strip sync-ts-build from pipeline, esbuild-only bundle (#242)
+Reapply "fix: remove hardcoded model names from fallback" (#244)
+Revert "fix: remove hardcoded model names from fallback"
+Fix fail-open delegation and remove hardcoded fallback (#243)
+Remove hardcoded task fallback model (#241)
 
 
 ## 0.25.31

package/dist/assets/dashboard/vibeos-dashboard-config.js

@@ -1 +1 @@
-window.__VIBEOS_DASHBOARD_BASE__ = "http://127.0.0.1:35533";
+window.__VIBEOS_DASHBOARD_BASE__ = "http://127.0.0.1:42977";

package/dist/vibeOS.js

@@ -4200,16 +4200,16 @@ function learnedRouteFromGraph(text) {
 }
 function profileFromCascade(decision, learned = null) {
   if (learned?.learnedTier === "cheap")
-    return { profile: "direct", cascade_depth: 1, pipeline_root: ["local"], tier_bias: "cheap" };
+    return { profile: "direct", cascade_depth: 1, pipeline_root: ["cheap"], tier_bias: "cheap" };
   if (learned?.learnedTier === "medium")
     return { profile: "standard", cascade_depth: 2, pipeline_root: ["medium", "brain"], tier_bias: "medium" };
   if (learned?.learnedTier === "brain")
-    return { profile: "deep", cascade_depth: 3, pipeline_root: ["local", "medium", "brain"], tier_bias: "brain" };
+    return { profile: "deep", cascade_depth: 3, pipeline_root: ["cheap", "medium", "brain"], tier_bias: "brain" };
   if (decision.useCheap && decision.escalate)
-    return { profile: "deep", cascade_depth: 3, pipeline_root: ["local", "medium", "brain"], tier_bias: "brain" };
+    return { profile: "deep", cascade_depth: 3, pipeline_root: ["cheap", "medium", "brain"], tier_bias: "brain" };
   if (decision.escalate)
     return { profile: "standard", cascade_depth: 2, pipeline_root: ["medium", "brain"], tier_bias: "brain" };
-  return { profile: "direct", cascade_depth: 1, pipeline_root: ["local"], tier_bias: "cheap" };
+  return { profile: "direct", cascade_depth: 1, pipeline_root: ["cheap"], tier_bias: "cheap" };
 }
 function getPivotCache2() {
   if (!globalThis.__vibeultraxPivotCache)
@@ -5378,7 +5378,8 @@ function setApiToken(newToken) {
     VIBEOS_API_TOKEN = normalizeDirectApiToken(newToken);
     VIBEOS_API_BOOTSTRAP_TOKEN = readBootstrapTokenFromDisk() || VIBEOS_API_BOOTSTRAP_TOKEN;
     syncApiEnabledState(process.env.VIBEOS_API_ENABLED !== "false" && (!!VIBEOS_API_TOKEN || !!VIBEOS_API_BOOTSTRAP_TOKEN));
-    _apiClient = null;
+    _apiClientGen++;
+    _apiClientHolder = { client: null, gen: _apiClientGen, tokenSnapshot: VIBEOS_API_TOKEN };
     _apiFallbackMode = false;
     _apiFallbackSince = null;
     persistPrimaryApiEnvState({ token: VIBEOS_API_TOKEN, disabled: false });
@@ -5396,7 +5397,8 @@ function invalidateApiToken() {
     VIBEOS_API_TOKEN = "";
     VIBEOS_API_BOOTSTRAP_TOKEN = "";
     syncApiEnabledState(false);
-    _apiClient = null;
+    _apiClientGen++;
+    _apiClientHolder = { client: null, gen: _apiClientGen, tokenSnapshot: "" };
     _apiFallbackMode = false;
     _apiFallbackSince = null;
     if (_anomalyDetector)
@@ -5422,7 +5424,8 @@ function setApiBootstrapToken(newToken) {
     console.error("[vibeOS] Failed to update alpha bootstrap token:", e.message);
   }
 }
-var _apiClient = null;
+var _apiClientHolder = { client: null, gen: 0, tokenSnapshot: "" };
+var _apiClientGen = 0;
 var _apiFallbackMode = false;
 var _apiFallbackSince = null;
 var _bootstrapExchangeInFlight = null;
@@ -5499,7 +5502,8 @@ function syncApiTokenFromDisk() {
       VIBEOS_API_TOKEN = "";
       VIBEOS_API_BOOTSTRAP_TOKEN = "";
       syncApiEnabledState(false);
-      _apiClient = null;
+      _apiClientGen++;
+      _apiClientHolder = { client: null, gen: _apiClientGen, tokenSnapshot: "" };
       _apiFallbackMode = false;
       _apiFallbackSince = null;
       resetApiConnection();
@@ -5511,7 +5515,8 @@ function syncApiTokenFromDisk() {
     VIBEOS_API_DISABLED = false;
     VIBEOS_API_TOKEN = diskToken;
     syncApiEnabledState(process.env.VIBEOS_API_ENABLED !== "false" && (!!VIBEOS_API_TOKEN || !!VIBEOS_API_BOOTSTRAP_TOKEN));
-    _apiClient = null;
+    _apiClientGen++;
+    _apiClientHolder = { client: null, gen: _apiClientGen, tokenSnapshot: VIBEOS_API_TOKEN };
     _apiFallbackMode = false;
     _apiFallbackSince = null;
     markApiConnected();
@@ -5547,14 +5552,21 @@ function syncApiTokenFromDisk() {
 }
 function getApiClient2() {
   syncApiTokenFromDisk();
-  if (!_apiClient && isApiEnabled() && VIBEOS_API_TOKEN) {
-    _apiClient = new VibeOSApiClient({
+  if (_apiClientHolder.client && _apiClientHolder.gen === _apiClientGen) {
+    return _apiClientHolder.client;
+  }
+  if (isApiEnabled() && VIBEOS_API_TOKEN) {
+    _apiClientHolder.client = new VibeOSApiClient({
       baseUrl: VIBEOS_API_URL,
       apiToken: VIBEOS_API_TOKEN,
       timeout: 5e3
     });
+    _apiClientHolder.gen = _apiClientGen;
+    _apiClientHolder.tokenSnapshot = VIBEOS_API_TOKEN;
+  } else {
+    _apiClientHolder.client = null;
   }
-  return _apiClient;
+  return _apiClientHolder.client;
 }
 function isApiFallback() {
   return _apiFallbackMode || isApiFallbackMode() || !isApiEnabled();
@@ -5570,7 +5582,6 @@ async function remoteCall(method, args, fallbackFn) {
   syncApiTokenFromDisk();
   if (!VIBEOS_API_TOKEN && VIBEOS_API_BOOTSTRAP_TOKEN) {
     await ensureBootstrapExchange();
-    syncApiTokenFromDisk();
   }
   if (tryResetFallbackCooldown()) {
     if (process.env.VIBEOS_DEBUG)
@@ -9273,14 +9284,14 @@ var BRANDED_MODES = [
     index: 1,
     name: "VibeUltraX",
     icon: "\u{1F3C6}",
-    pipeline: ["local", "medium", "brain"],
+    pipeline: ["cheap", "medium", "brain"],
     thinking: "full",
     tdd: "quality",
     enforcement: "strict",
     flow: "strict",
     qualityVsBrain: 107,
     costVsBrain: 58,
-    desc: "3-model debate: local proposes, medium reviews, brain refines."
+    desc: "3-model debate: cheap proposes, medium reviews, brain refines."
   },
   {
     id: "vibeqmax",
@@ -12203,6 +12214,11 @@ function syncControlSettings(cv, options = {}) {
         writeIf("active_pipeline", JSON.stringify(modeEntry.pipeline));
       }
     }
+    if (cv?.pipeline_root && Array.isArray(cv.pipeline_root)) {
+      writeIf("active_pipeline", JSON.stringify(cv.pipeline_root));
+    } else if (cv?.cascade_depth && cv.cascade_depth >= 3) {
+      writeIf("active_pipeline", JSON.stringify(["cheap", "medium", "brain"]));
+    }
     writeIf("enabled", true);
     const compatibilityMode = currentSel.onboarding_mode === "assist";
     const flowManuallyDisabled = currentSel.flow_enabled === false && currentSel.flow_enforce === false;
@@ -12582,8 +12598,7 @@ function orchestratorDirective(cv, sel) {
   const mediumModel = TRINITY_MEDIUM || "the medium model";
   const targetModel = tierBias === "cheap" ? cheapModel : tierBias === "medium" ? mediumModel : tierBias === "brain" ? brainModel : `${cheapModel} or ${mediumModel}`;
   const compatibilityMode = sel?.onboarding_mode === "assist";
-  const cheapSlot = TRINITY_CHEAP || "deepseek/deepseek-chat";
-  const mediumSlot = TRINITY_MEDIUM || "deepseek/deepseek-v4-flash";
+  const cheapSlot = TRINITY_CHEAP || cheapModel;
   return `[AI ORCHESTRATOR AGENT] You are an AI orchestrator agent. Delegate heavy work to Task subagents (runs on ${targetModel}). Your role is to verify, fill gaps, and synthesize cleanly. ` + (compatibilityMode ? "Compatibility mode is active, so direct Write/Edit stays available until strict guardrails are enabled." : "Brain-tier focuses on orchestration \u2014 hand file writes and edits to Task subagents (cheaper, same quality). Use medium directly with `trinity medium` if the task is simple enough.") + ` [delegation guide] When a write/edit is blocked, use the \`task\` tool with: subagent_type="general" model="${cheapSlot}" prompt="write <path> with: <content>". The task subagent runs on the cheap tier and handles file operations transparently. Parallel task calls are encouraged for independent file changes.  Always display the vibeOS cost footer.` + (tierBias !== "auto" ? ` [tier routing] This turn is biased toward ${tierBias} tier.` : "");
 }
 function flowTodosDirective() {
@@ -12643,6 +12658,14 @@ var onSystemTransform = async (_input, output) => {
   if (!loadSelection().enabled)
     return;
   try {
+    const bbOnDisk = loadBlackboxState();
+    if (_latestBlackboxState3 && bbOnDisk) {
+      const diskHasSessions = Object.keys(bbOnDisk.sessions || {}).length > 0;
+      const stateHasRegime = !!_latestBlackboxState3.sub_regime;
+      if (diskHasSessions && !stateHasRegime) {
+        _latestBlackboxState3 = bbOnDisk;
+      }
+    }
     const hookDirectory = String(onSystemTransform._directory || "");
     const userText = extractLastUserText(_input) || extractLastUserText(output);
     if (typeof userText === "string" && userText.trim())
@@ -12668,6 +12691,25 @@ var onSystemTransform = async (_input, output) => {
       if (st)
         _latestBlackboxState3.latest_stress_multiplier = st;
       _controlVector = await apiComputeControlVector(_latestBlackboxState3, void 0, optimizationMode);
+      if (_controlVector) {
+        const fullState = loadBlackboxState() || { sessions: {}, enabled: true };
+        fullState.cv = _controlVector;
+        if (_latestBlackboxState3) {
+          if (_latestBlackboxState3.sub_regime)
+            fullState.sub_regime = _latestBlackboxState3.sub_regime;
+          if (_latestBlackboxState3.latest_stress_multiplier)
+            fullState.latest_stress_multiplier = _latestBlackboxState3.latest_stress_multiplier;
+          if (_latestBlackboxState3.n_interactions)
+            fullState.n_interactions = _latestBlackboxState3.n_interactions;
+          if (_latestBlackboxState3.resolution)
+            fullState.resolution = _latestBlackboxState3.resolution;
+          if (_latestBlackboxState3.momentum)
+            fullState.momentum = _latestBlackboxState3.momentum;
+          fullState.latest_control_vector_ts = Date.now();
+        }
+        fullState.sessions ??= {};
+        saveBlackboxState(fullState);
+      }
     } else if (latestUserIntent) {
       const st = scoreStress(latestUserIntent);
       _controlVector = await apiComputeControlVector({
@@ -15269,19 +15311,27 @@ ${argsJson}
       }
     }
     const activePipeline = loadSelection().active_pipeline;
-    if (activePipeline && Array.isArray(activePipeline) && activePipeline.length > 1 && TRINITY_CHEAP && TRINITY_MEDIUM) {
+    if (!apiRoute?.target && activePipeline && Array.isArray(activePipeline) && activePipeline.length > 1 && TRINITY_CHEAP && TRINITY_MEDIUM) {
       try {
         const cheapCost = 1e-3;
         const mediumCost = 5e-3;
         const brainCost = 0.02;
         const cascadeResult = cascadeDecide(_prompt, cheapCost, mediumCost, brainCost, 0.85);
-        const tierMap = { cheap: TRINITY_CHEAP, medium: TRINITY_MEDIUM, brain: TRINITY_BRAIN || TRINITY_MEDIUM, local: TRINITY_CHEAP };
+        const tierMap = { cheap: TRINITY_CHEAP, medium: TRINITY_MEDIUM, brain: TRINITY_BRAIN };
         const pipelineModels = activePipeline.map((t2) => tierMap[t2] || TRINITY_CHEAP);
         if (cascadeResult.escalate && pipelineModels.length > 1) {
-          const escalated = pipelineModels[1];
-          if (escalated && escalated !== currentModel && (!_target || escalated !== _target)) {
-            _target = escalated;
-            console.error(`[vibeOS] \u{1F500} Cascade escalate: ${cascadeResult.reason} \u2192 ${escalated}`);
+          if (pipelineModels.length > 2 && cascadeResult.confidence >= 0.8) {
+            const escalated = pipelineModels[2];
+            if (escalated && escalated !== currentModel && (!_target || escalated !== _target)) {
+              _target = escalated;
+              console.error(`[vibeOS] \u{1F500} Cascade depth-3 escalate: ${cascadeResult.reason} \u2192 ${escalated}`);
+            }
+          } else {
+            const escalated = pipelineModels[1];
+            if (escalated && escalated !== currentModel && (!_target || escalated !== _target)) {
+              _target = escalated;
+              console.error(`[vibeOS] \u{1F500} Cascade escalate: ${cascadeResult.reason} \u2192 ${escalated}`);
+            }
           }
         } else if (cascadeResult.useCheap && !_target) {
           _target = pipelineModels[0];
@@ -15309,8 +15359,8 @@ ${argsJson}
       _setModel(inArgs);
       try {
         const selNow = loadSelection();
-        const desiredSlot = _target === TRINITY_CHEAP ? "cheap" : _target === TRINITY_MEDIUM ? "medium" : null;
-        if (selNow.delegation_enforce && currentTier === "high" && desiredSlot && selNow.active_slot !== desiredSlot) {
+        const desiredSlot = _target === TRINITY_CHEAP ? "cheap" : _target === TRINITY_MEDIUM ? "medium" : _target === TRINITY_BRAIN ? "brain" : null;
+        if (desiredSlot && selNow.active_slot !== desiredSlot) {
           taskSlotRestore = selNow.active_slot || "brain";
           const switched = applySlot(desiredSlot);
           if (switched?.ok) {
@@ -15405,8 +15455,8 @@ ${argsJson}
       const originalPath = argSources.flatMap((src) => [src?.filePath, src?.file_path, src?.path]).find((v) => typeof v === "string" && v.trim()) || "";
       const basename6 = originalPath.split("/").pop() || "blocked";
       const apiResult = await remoteCall("delegateCheck", [tLower, currentTier, currentModel, _prompt], () => ({
-        blocked: true,
-        savings: _estEdit,
+        blocked: false,
+        savings: 0,
         _fallback: true
       }));
       const remoteSavings = Number(apiResult?.savings);
@@ -15421,7 +15471,7 @@ ${argsJson}
           projectName: currentProjectName || "",
           sessionId: getCurrentSessionId()
         });
-        const taskModel = TRINITY_CHEAP || "deepseek/deepseek-chat";
+        const taskModel = TRINITY_CHEAP || TRINITY_MEDIUM || currentModel || TRINITY_BRAIN || "";
         pendingUiNote = `[delegation] ${t} blocked on brain tier. Use a task subagent instead: \`task subagent_type="general" model="${taskModel}" prompt="${t} <file> with the intended content"\`. Keeps brain focused on orchestration.`;
         enforcementBlocked = true;
         _mutateBlockedToolArgs(t, argSources, originalPath, output);
@@ -16161,10 +16211,10 @@ async function _seedOrRepairModelTiers(directory3) {
   let medium = trinity?.medium || brain;
   let cheap = trinity?.cheap || medium || brain;
   if (!brain) {
-    brain = "deepseek/deepseek-v4-pro";
-    medium = "deepseek/deepseek-v4-flash";
-    cheap = "deepseek/deepseek-chat";
-    console.error("[vibeOS] no providers detected \u2014 using default model tiers (brain=v4-pro, medium=v4-flash, cheap=v4-chat)");
+    brain = "generic/brain";
+    medium = "generic/medium";
+    cheap = "generic/cheap";
+    console.error('[vibeOS] no providers or trinity config found \u2014 run "vibe rebuild" to set model tiers');
   }
   const existingSelection = existing?.selection && typeof existing.selection === "object" ? existing.selection : {};
   const existingTrinity = existing?.trinity && typeof existing.trinity === "object" ? existing.trinity : {};

package/package.json

@@ -1,22 +1,22 @@
 {
   "name": "vibeostheog",
-  "version": "0.25.32",
+  "version": "0.25.34",
   "description": "Cost-aware delegation enforcer for OpenCode. Tracks model usage, routes Task subagents to cheaper tiers, surfaces cumulative savings in chat. Includes research audit, reporting framework, project memory, progressive scratchpad decadence, and trinity CLI for brain/medium/cheap slot switching.",
   "scripts": {
     "release": "node scripts/release.mjs",
     "release:patch": "node scripts/release.mjs patch --yes",
     "release:minor": "node scripts/release.mjs minor --yes",
     "release:major": "node scripts/release.mjs major --yes",
-    "build": "npm run build:bundle && node scripts/deploy.mjs",
-    "build:bundle": "tsc -p tsconfig.json && node scripts/sync-ts-build.mjs && node scripts/build-bundle.mjs",
+    "build": "npm run typecheck && npm run build:bundle && node scripts/deploy.mjs",
+    "build:bundle": "node scripts/build-bundle.mjs",
     "build:single": "node scripts/build-bundle.mjs",
     "deploy": "node scripts/deploy.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "checkpoint:validate": "node scripts/checkpoint-validate.mjs",
     "test:scripts": "node scripts/run-test-suite.mjs scripts",
     "ts:audit": "node scripts/ts-audit.mjs",
-    "test": "npm run build:bundle && node scripts/run-test-suite.mjs full",
-    "test:ci": "npm run build:bundle && node scripts/run-test-suite.mjs ci",
+    "test": "tsc -p tsconfig.json && node scripts/build-bundle.mjs && node scripts/run-test-suite.mjs full",
+    "test:ci": "tsc -p tsconfig.json && node scripts/build-bundle.mjs && node scripts/run-test-suite.mjs ci",
     "guard": "bash plugins/vibetheog-guard/scripts/run-guard.sh",
     "guard:full": "VIBETHEOG_GUARD_FULL=1 bash plugins/vibetheog-guard/scripts/run-guard.sh",
     "hook:precommit": "bash plugins/vibetheog-guard/hooks/pre-commit.sh",