MultiModel Dev OS v4.2.0

MultiModel Dev OS v4.2.0

What This Release Delivers

multimodel-dev-os@4.2.0 ships the Localhost Gateway Foundation alongside the established workspace governance and Skill OS standard. It adds a local mock gateway runtime, deterministic provider/model metadata loading, dry-run route planning, resilience simulation, preview-only client configuration, and local in-memory observability while preserving a strict zero-runtime-dependency posture.

Installation & Upgrade

Install or upgrade to v4.2.0 via npm:

npm install -g multimodel-dev-os@4.2.0
multimodel-dev-os status
multimodel-dev-os verify

Or run via npx:

npx multimodel-dev-os@latest init
npx multimodel-dev-os@latest verify

Gateway Foundation

• Localhost Mock Gateway Runtime: Runs on 127.0.0.1 with GET /health, GET /v1/models, and POST /v1/chat/completions.
• Deterministic Responses: Mock non-streaming JSON and SSE streaming chunk responses.
• Provider & Model Registries: Runtime-readable snapshots for providers, models, local-models, and routing presets.
• Dry-Run Route Planning: Scoring and route explanations without sending traffic to external services.
• Resilience Simulation: Dry-run simulation for fallbacks, retries, timeouts, circuit breakers, quotas, and rate limits.
• Client Configuration Previews: Dry-run configuration generator for AI coding clients and IDE extensions.
• Local In-Memory Observability: Bounded request events, traces, metrics, usage accounting, cost estimation, and redacted audit logs.

The mock provider is the only executable provider in v4.2.0. External providers remain metadata-only.

Skill OS & Workspace Governance

• Workspace Instructions: Centralized instructions in AGENTS.md with synced adapters for Antigravity, Claude Code, Cursor, Codex, Gemini, and VS Code.
• Declarative Skill OS: Skill, prompt, workflow, permission, and guardrail registries with Ed25519 signatures and automated policy checks.
• RACE+ Framework: Structured prompt templates and public operator templates.

Security & Privacy Model

• Zero Runtime Dependencies: Published package relies strictly on Node.js 20+ standard library modules.
• Approval-Gated Writes: File updates and adapter synchronization require explicit approval.
• Loopback Defaults: Gateway server binds to 127.0.0.1 loopback by default.
• Redacted Local Observability: No prompt or completion payload is logged; zero external telemetry.

Compatibility Boundaries

• Mock-Only Execution: The gateway executes only bundled mock models.
• Metadata-Only Providers: External API credentials are not loaded and no external HTTP calls are made.
• Disabled Live Retries: Fallback execution and retry probing are disabled.
• Preview-Only Configs: Client configuration plans are preview-only.

See v4.2 Known Limitations.

Verification Pipeline

The v4.2.0 release is validated by strict cross-platform checks:

npm run build           # Compiles src/ to bin/multimodel-dev-os.js
npm run check:build     # Verifies CLI binary freshness
npm test                # Executes Vitest test suite
npm run verify          # Runs strict audit & docs checks
npm run docs:build      # Compiles VitePress documentation portal
npm pack --dry-run      # Validates package tarball structure

Release & Publication Matrix

• npm Release: multimodel-dev-os@4.2.0 (Public / Latest)
• GitHub Release: v4.2.0 (Public / Latest)
• License: MIT
• Node.js Requirement: >= 20.0.0

v4.1.0 - Skill OS Foundation

v4.1.0 - Skill OS Foundation

Summary

v4.1.0 introduces the Skill OS foundation for MultiModel Dev OS: a declarative, validation-first layer for structured prompts, reusable skills, tool permission metadata, advisory guardrails, workflow metadata, and draft-only business operator templates.

This release provides metadata, validation, documentation, and read-only inspection foundations. It does not execute automation from Skill OS metadata, enforce permissions at runtime, or make advisory guardrails block live commands.

Highlights

• Skill OS foundation release
• RACE+ prompt templates
• Skill registry metadata
• Tool permission metadata
• Declarative advisory guardrails
• Read-only skill-os CLI inspection
• Workflow skill_os metadata integration
• Draft-only business operator templates
• Migration, adoption, example, and authoring documentation
• Zero runtime dependency posture
• Validation-first safety model with no automation execution and no runtime permission enforcement

Validation

• npm run build
• npm run check:build
• npm test
• npm run verify
• npm run docs:build
• npm pack --dry-run

Package

npmjs package:

npm install -g multimodel-dev-os

Published version: 4.1.0

GitHub Packages mirror: @rizvee/multimodel-dev-os via npm.pkg.github.com, with visibility and access controlled by GitHub Packages settings.

v4.0.0

v4.0.0

Highlights

• Modular CLI architecture
• Decomposed verification engine
• Registry signing and provenance hardening
• Trust store and remote key workflow improvements
• Handler-level unit test coverage
• Documentation and developer experience hardening
• Codex/VS Code-ready workflow documentation
• Optional GitHub Packages mirror support

Validation

• npm run build
• npm run check:build
• npm test
• npm run verify
• npm run docs:build
• npm pack --dry-run

Package

npmjs package:

npm install -g multimodel-dev-os

Published version:

4.0.0

GitHub Packages mirror:

Optional/manual workflow-supported mirror as @rizvee/multimodel-dev-os.

v3.5.0 — Trusted Registry Signing + Provenance

v3.5.0 adds trusted registry signing and provenance foundation to MultiModel Dev OS.

What's New

• Asymmetric Ed25519 Signatures: Cryptographic verification of remote registry manifests using publisher public keys to secure remote sync.
• Trusted Key Store: Manages active public keys, publishers, and scopes via .ai/registries/trusted-keys.yaml configuration.
• Registry Provenance Lockfile: Keeps a committed .ai/registry-lock.json containing synced hashes, timestamps, and verdicts to detect local cache tampering.
• Structured Verdicts: Deployed createTrustVerdict to generate uniform verification reporting for CLI audits, lockfiles, and diagnostics.
• Signed Registry E2E Fixtures: Comprehensive offline test suite validating valid, tampered, wrong key, revoked key, unsigned, and unsupported algorithm states.
• Registry Trust Commands: Centralized registry trust list, registry trust show, and registry trust verify CLI commands.
• Security Threat Model: Deployed docs/security-threat-model.md documenting STRIDE threat mappings and mitigations.

Safety Defaults Preserved

• Remote registries are disabled by default (allow_remote_registries = false).
• Registry sync is strictly cache-only and non-executing.
• Plugin installations are separate and approval-gated (requiring the --approved flag).
• Runtime package remains zero-dependency.

v3.2.0 — Stable Modular Build + Package

What's New in v3.2.0

We are pleased to release v3.2.0, which transitions our internal stabilization work into a stable public milestone. This release introduces automated cross-platform CI matrix testing, build freshness verification, and hardened package content governance.

Highlights

• ⚙️ Build Freshness Auditing: Integrated check-build-fresh.js to ensure the generated single-file CLI binary matches standard ES modules under src/ dynamically before execution.
• 🛡️ Hardened Package Governance: Configured the NPM manifest (package.json) to include the modular source folder (src/) and unit test suites (tests/unit/) for open-source transparency and developer auditing, while enforcing strict exclusion of sensitive credentials and local files.
• 🧪 Comprehensive CI Matrix: Added a multi-platform CI verification matrix on GitHub Actions covering Windows, Linux, and macOS across Node.js versions 20.x and 22.x.
• 🧪 Vitest Testing Expansion: Added build-output.test.js to assert compiled output shebang counts, warning headers, and URL safety. Unit tests are expanded to 45 passing tests.
• 📖 Maintainer Guidelines: Added guidelines instructing contributors to modify src/ files and compile using build steps, rather than modifying the compiled output directly.
• 🛡️ Registry Sync Protections: Retained registry security validations from the v3.0.2 baseline, ensuring remote registry sync is secure, HTTPS-only, and shell-escaped.

v3.1.0 — Modular Source Layout + Formal Unit

Full Changelog: v3.0.2...v3.1.0

v3.0.1 — Registry UX, Policy Safety, and Cleanup Patch

Full Changelog: v3.0.0...v3.0.1

v3.0.0 — Trusted Remote Catalog + Governance Layer

• Corrected the registry/governance release into v3.0.0 after v2.9.1 carried the new feature set.
• Added trusted registry governance foundation.
• Added registry commands for status, list, sync, verify, and policy-aware source handling.
• Added local registry source model and registry cache structure.
• Added registry policy engine for approval gates, allowed write roots, blocked paths, and remote safety controls.
• Added checksum/provenance foundation for trusted catalog sources.
• Added bundled/local/remote catalog source priority model.
• Added dashboard registry visibility in read-only/headless-safe form.
• Added documentation for registry sync, trusted registries, registry policy, registry security, and remote catalog authoring.
• Expanded verification to cover registry commands and offline safety behavior.
• Kept remote discovery opt-in only.
• Kept catalog/plugin system declarative only.
• No arbitrary code execution.
• No package installs from registries/plugins.
• No network dependency in CI verification.
• Kept npm publishing manual and protected by prepublish guard.

v2.8.1 — Dashboard / Plugin UX Safety Patch

This patch release hardens the interactive dashboard and declarative plugin hooks introduced in v2.8.0 to ensure safe, CI-compliant headless execution, robust path traversal shielding, and polished developer feedback.

📊 Dashboard & UX Refinement

• CI/Automation Safety: Added support for dashboard --list-actions and dashboard --dry-run to output aligned, styled headless previews instead of prompting for terminal keys, preventing hangs in automated script runners.
• Target-Aware Commands: Headless dashboard outputs now dynamically append target hints (e.g. --target <dir>) when executed outside of current working directories.

🔌 Hardened Declarative Plugin System

• Traversal Prevention: Enforced strict alphanumeric slug validation (/^[a-z0-9-_]+$/i) in plugin validate and plugin install to prevent directory traversal attacks.
• Boundary Validation Checks: Moved allowed-path and blocked-path structural integrity audits from installation phase into validation phase.
• Safety Aborts: Updated plugin install without --approved to fail clearly and exit with code 1 instead of 0 to halt pipeline scripts on unapproved modifications.
• Audit Transparency: Improved plugin status to audit and list exact missing file paths for plugins flagged as Incomplete.
• Path Hints: Calculates dynamic relative target paths in commands' empty-state hints for easier onboarding.

🛡️ Release Quality & Hygiene

• Verification Checks: Expanded release verification script to cover 220 assertions including plugin approval checks, dry runs, and doctor configurations.
• Manual Publish Guard: Maintained native prepublish guards blocking automatic npm publication.

v2.8.0 — Interactive TUI Dashboard + Declarative Plugin Hooks

Added

• Interactive TUI Dashboard: Added dashboard/ui command launching a zero-dependency keyboard-interactive command center built with Node's native readline module.
• Declarative Plugin Hooks: Added plugin command suite (list, show, validate, install, status) and JSON schema to securely extend workspace templates, workflows, and skills.
• Secure Plugin Installer: Supports --approved execution gate, path whitelisting to .ai/ and adapters/ directories, and automatic conflict .bak backups.
• Headless Fallback: Automatically degrades to listing CLI commands in non-TTY/CI environments.

Changed

• Improved YAML parser helper in bin/multimodel-dev-os.js to strip quotes from array items.
• Added comprehensive documentation pages: dashboard.md, plugin-hooks.md, plugin-authoring.md, tui-safety.md.
• Updated all existing documentation portals, config sidebars, sitemaps, and LLM assistant discovery files for v2.8.0 compatibility.