@brunobracaioli/aibrain 0.3.0-beta.7 → 0.4.0-beta.2

package/dist/claude-observation.mjs

@@ -16,10 +16,11 @@ export const MAX_LOG_FILES = 3;
 const LOCK_WAIT_MS = 250;
 const LOCK_STALE_MS = 30_000;
 const ADMISSION_MS = 60 * 60 * 1000;
-export const ADAPTER_VERSION = '0.3.0-beta.7';
+export const ADAPTER_VERSION = '0.4.0-beta.2';
 const MAX_DIAGNOSTIC_COUNT = 10_000_000;
 const MAX_DIAGNOSTIC_BYTES = 128 * 1024 * 1024;
 const CHECKPOINT_BACKENDS = new Set(['native_store', 'private_file']);
+const PROVIDER_RESPONSE_FORMATS = new Set(['structured', 'text', 'both', 'missing']);
 const DIAGNOSTIC_REASONS = new Set([
   'all_recent',
   'goal_missing',
@@ -38,6 +39,27 @@ const DIAGNOSTIC_REASONS = new Set([
   'proof_expired',
   'proof_mismatch',
   'native_fallback_unconfirmed',
+  'native_summary_proof_expired',
+  'native_summary_host_view_mismatch',
+  'native_summary_host_view_ambiguous',
+  'native_summary_host_view_unavailable',
+  'native_summary_note_read_failed',
+  'native_summary_attachment_uncertain',
+  'plan_session_mismatch',
+  'plan_revision_mismatch',
+  'plan_projection_mismatch',
+  'plan_options_mismatch',
+  'plan_expired',
+  'plan_parse_envelope_invalid',
+  'plan_parse_metadata_invalid',
+  'plan_parse_decisions_invalid',
+  'plan_parse_fitting_invalid',
+  'plan_parse_stats_invalid',
+  'plan_parse_response_too_large',
+  'plan_parse_failed',
+  'session_changed_during_planning',
+  'snapshot_changed_during_planning',
+  'historical_notes_changed_during_planning',
 ]);
 const ADMISSION_DETAILS = new Set(['state_budget_exceeded', 'shared_admission_denied']);
 const ADMISSION_REASONS = new Set([
@@ -80,6 +102,7 @@ const CHECKPOINT_ERRORS = new Set([
 const COMPACT_ERROR_CODES = new Set([
   'state_budget_exceeded',
   'shared_admission_exceeded',
+  'budget_response_invalid',
   'provider_budget_exceeded',
   'provider_unavailable',
   'provider_auth_denied',
@@ -113,6 +136,8 @@ const DIAGNOSTIC_STAGES = new Set([
   'fallback',
   'compact_entry',
   'compact_exit',
+  'native_summary_proof',
+  'native_fallback_proof',
   'native_error',
 ]);
 const DIAGNOSTIC_CATEGORIES = new Set([
@@ -370,9 +395,19 @@ function isSafeLogRecord(record) {
     'request_id',
     'correlation_id',
     'retry_after_ms',
+    'proof_expected_count',
+    'proof_actual_count',
+    'proof_match',
+    'proof_match_offset',
+    'proof_view_source',
+    'proof_api_view_match',
+    'proof_api_count',
+    'proof_delivery_source',
+    'proof_delivery_match_count',
     'byte_count',
     'char_count',
     'rpc_status',
+    'provider_response_format',
     'would_keep',
     'applied',
     'provider_confirmed',
@@ -422,10 +457,26 @@ function isSafeLogRecord(record) {
         !Number.isSafeInteger(record.retry_after_ms) ||
         record.retry_after_ms < 0 ||
         record.retry_after_ms > 3_600_000)) ||
+    (record.proof_match !== undefined &&
+      (typeof record.proof_match !== 'string' ||
+        !['exact', 'active_suffix', 'mismatch', 'ambiguous'].includes(record.proof_match))) ||
+    (record.proof_view_source !== undefined &&
+      (typeof record.proof_view_source !== 'string' ||
+        !['default', 'api'].includes(record.proof_view_source))) ||
+    (record.proof_api_view_match !== undefined &&
+      (typeof record.proof_api_view_match !== 'string' ||
+        !['exact', 'mismatch', 'unavailable', 'not_checked'].includes(
+          record.proof_api_view_match,
+        ))) ||
+    (record.proof_delivery_source !== undefined &&
+      (typeof record.proof_delivery_source !== 'string' ||
+        !['atomic_result', 'legacy_append'].includes(record.proof_delivery_source))) ||
     (record.hook_version !== undefined && !validVersion(record.hook_version)) ||
     (record.checkpoint_backend !== undefined &&
       (typeof record.checkpoint_backend !== 'string' ||
-        !CHECKPOINT_BACKENDS.has(record.checkpoint_backend)))
+        !CHECKPOINT_BACKENDS.has(record.checkpoint_backend))) ||
+    (record.provider_response_format !== undefined &&
+      !PROVIDER_RESPONSE_FORMATS.has(String(record.provider_response_format)))
   )
     return false;
   for (const key of [
@@ -441,6 +492,11 @@ function isSafeLogRecord(record) {
     'projection_total',
     'selected_count',
     'deferred_count',
+    'proof_expected_count',
+    'proof_actual_count',
+    'proof_match_offset',
+    'proof_api_count',
+    'proof_delivery_match_count',
   ]) {
     const value = record[key];
     const lowerBound = key === 'rpc_status' ? -100_000 : 0;
@@ -733,8 +789,18 @@ function diagnosticRecord(record) {
     'request_id',
     'correlation_id',
     'retry_after_ms',
+    'proof_expected_count',
+    'proof_actual_count',
+    'proof_match',
+    'proof_match_offset',
+    'proof_view_source',
+    'proof_api_view_match',
+    'proof_api_count',
+    'proof_delivery_source',
+    'proof_delivery_match_count',
     'byte_count',
     'rpc_status',
+    'provider_response_format',
     'reason',
   ]);
   if (
@@ -745,7 +811,23 @@ function diagnosticRecord(record) {
     !MODES.has(String(record.mode)) ||
     !validVersion(record.client_version) ||
     !ISO.test(String(record.observed_at)) ||
-    !Number.isFinite(Date.parse(String(record.observed_at)))
+    !Number.isFinite(Date.parse(String(record.observed_at))) ||
+    (record.proof_match !== undefined &&
+      (typeof record.proof_match !== 'string' ||
+        !['exact', 'active_suffix', 'mismatch', 'ambiguous'].includes(record.proof_match))) ||
+    (record.proof_view_source !== undefined &&
+      (typeof record.proof_view_source !== 'string' ||
+        !['default', 'api'].includes(record.proof_view_source))) ||
+    (record.proof_api_view_match !== undefined &&
+      (typeof record.proof_api_view_match !== 'string' ||
+        !['exact', 'mismatch', 'unavailable', 'not_checked'].includes(
+          record.proof_api_view_match,
+        ))) ||
+    (record.proof_delivery_source !== undefined &&
+      (typeof record.proof_delivery_source !== 'string' ||
+        !['atomic_result', 'legacy_append'].includes(record.proof_delivery_source))) ||
+    (record.provider_response_format !== undefined &&
+      !PROVIDER_RESPONSE_FORMATS.has(String(record.provider_response_format)))
   )
     throw new Error('invalid_input');
   /** @type {Record<string, unknown>} */
@@ -824,6 +906,25 @@ function diagnosticRecord(record) {
       throw new Error('invalid_input');
     output.retry_after_ms = record.retry_after_ms;
   }
+  for (const key of ['proof_expected_count', 'proof_actual_count', 'proof_match_offset']) {
+    const value = record[key];
+    if (
+      value !== undefined &&
+      (typeof value !== 'number' ||
+        !Number.isSafeInteger(value) ||
+        value < 0 ||
+        value > MAX_DIAGNOSTIC_COUNT)
+    )
+      throw new Error('invalid_input');
+    if (value !== undefined) output[key] = value;
+  }
+  if (record.proof_match !== undefined) output.proof_match = String(record.proof_match);
+  if (record.proof_view_source !== undefined)
+    output.proof_view_source = String(record.proof_view_source);
+  if (record.proof_api_view_match !== undefined)
+    output.proof_api_view_match = String(record.proof_api_view_match);
+  if (record.proof_delivery_source !== undefined)
+    output.proof_delivery_source = String(record.proof_delivery_source);
   if (record.hook_version !== undefined) {
     if (!validVersion(record.hook_version)) throw new Error('invalid_input');
     output.hook_version = record.hook_version;
@@ -836,6 +937,14 @@ function diagnosticRecord(record) {
       throw new Error('invalid_input');
     output.checkpoint_backend = record.checkpoint_backend;
   }
+  if (record.provider_response_format !== undefined) {
+    if (
+      typeof record.provider_response_format !== 'string' ||
+      !PROVIDER_RESPONSE_FORMATS.has(record.provider_response_format)
+    )
+      throw new Error('invalid_input');
+    output.provider_response_format = record.provider_response_format;
+  }
   for (const key of [
     'duration_ms',
     'item_count',
@@ -847,6 +956,11 @@ function diagnosticRecord(record) {
     'projection_total',
     'selected_count',
     'deferred_count',
+    'proof_expected_count',
+    'proof_actual_count',
+    'proof_match_offset',
+    'proof_api_count',
+    'proof_delivery_match_count',
   ]) {
     const numeric = record[key];
     if (numeric !== undefined) {

package/dist/cli.mjs

@@ -15,21 +15,38 @@ import {
   stateRoot,
   tokenDigest,
 } from './state.mjs';
-import { isTestedNativeVersion, nativeVersion, platformCheck, resolveNative } from './platform.mjs';
+import {
+  captureLockPlatformCheck,
+  nativeVersion,
+  platformCheck,
+  resolveNative,
+} from './platform.mjs';
 import { launchClaude, launchCodex } from './launch.mjs';
+import { claudeCompatibilityError, resolveClaudeCompatibility } from './claude-compatibility.mjs';
+import { codexCompatibilityError, resolveCodexCompatibility } from './codex-compatibility.mjs';
 import { providerFreeProbe } from './mcp.mjs';
 import { codexPolicyJson, makePolicy, publicPolicy, isProfile } from './policy.mjs';
 import { readDiagnostics } from './claude-observation.mjs';
 import { readCodexDiagnostics } from './codex-diagnostics.mjs';
+import { checkEngineeringLicense, licenseLine, unavailableLicense } from './engineering.mjs';
+import {
+  isPackLocale,
+  readLastLaunch,
+  readStoredLocale,
+  resolvePackLocale,
+  writeStoredLocale,
+} from './engineering-pack.mjs';
 
-const VERSION = '0.3.0-beta.7';
+const VERSION = '0.4.0-beta.2';
+// The command is `aisac`; `aibrain` is an alias installed from the same entry.
+const COMMAND = 'aisac';
 const ENDPOINT = 'https://mcp.ai-brain.aisac.cloud/mcp';
 const PACKAGE_ROOT = dirname(fileURLToPath(import.meta.url));
 const LEGACY_DISCLOSURE_VERSION = 'aibrain-paid-context-v1-2026-10-09';
 
 function usage() {
   console.log(
-    `aibrain ${VERSION}\n\nUsage:\n  aibrain setup [--client claude|codex|both] [--context-profile upstream|conservative]\n    [--compact-at 1..95] [--keep-threshold 0..1] [--preserve-recent 1..100]\n    [--min-reduction 0..1] [--truncate-head-chars 0..4096]\n    [--max-state-tokens 1000..25000] [--max-request-tokens 1000..30000]\n    [--tool-policy compatible|read_only] [--goal TEXT]\n  aibrain doctor [--json]\n  aibrain status [--json]\n  aibrain disable\n  aibrain setup --undo\n  aibrain claude [-- native-args...]\n  aibrain codex [-- native-args...]\n\nPolicy notes:\n  Automatic monitoring asks for compaction at compact-at percent; state/request\n  limits are estimated upper bounds and do not override server quotas.\n  min-reduction, truncate-head-chars and tool-policy apply only to Claude;\n  Codex keeps native compaction and same-session recovery.`,
+    `${COMMAND} ${VERSION}\n\nUsage:\n  ${COMMAND} setup [--client claude|codex|both] [--context-profile upstream|conservative]\n    [--compact-at 1..95] [--keep-threshold 0..1] [--preserve-recent 1..100]\n    [--min-reduction 0..1] [--truncate-head-chars 0..4096]\n    [--max-state-tokens 1000..25000] [--max-request-tokens 1000..30000]\n    [--tool-policy compatible|read_only] [--goal TEXT]\n  ${COMMAND} doctor [--json]\n  ${COMMAND} status [--json]\n  ${COMMAND} disable\n  ${COMMAND} setup --undo\n  ${COMMAND} claude [-- native-args...]\n  ${COMMAND} codex [-- native-args...]\n\nPolicy notes:\n  Automatic monitoring asks for compaction at compact-at percent; state/request\n  limits are estimated upper bounds and do not override server quotas.\n  min-reduction, truncate-head-chars and tool-policy apply only to Claude;\n  Codex keeps native compaction and same-session recovery.`,
   );
   console.log(
     'Telemetry: setup --telemetry on|off (omitted preserves the stored choice; fresh defaults off).',
@@ -37,11 +54,14 @@ function usage() {
   console.log(
     'Claude shadow: setup --claude-shadow on|off and --claude-diagnostics on|off (preview stays applied=false).',
   );
+  console.log(
+    'AISAC Engineering: `aisac claude` loads the licensed method; setup --lang pt-BR|en picks its language; setup and doctor report the license; status stays offline. `aibrain` is an alias of `aisac`.',
+  );
 }
 
 // Telemetry is opt-in; setup omits the flag to preserve the stored choice.
 function version() {
-  console.log(`aibrain ${VERSION}`);
+  console.log(`${COMMAND} ${VERSION}`);
 }
 
 async function maskedPrompt() {
@@ -297,6 +317,26 @@ async function updateLocalOptOut(previous, args) {
   return true;
 }
 
+/** Store the AISAC Engineering pack language; local only, no network call. @param {'pt-BR' | 'en'} locale */
+async function setPackLocale(locale) {
+  const root = await ensureStateRoot();
+  await writeStoredLocale(root, locale);
+  console.log(
+    `AISAC Engineering pack language set to ${locale} for future launches; no network call was made.`,
+  );
+}
+
+/** Offline view of the pack language and the last launch (status, doctor). */
+async function engineeringPackState() {
+  const root = stateRoot();
+  const stored = await readStoredLocale(root);
+  return {
+    locale: resolvePackLocale(stored),
+    localeSource: stored === null ? 'system' : 'setup',
+    lastLaunch: await readLastLaunch(root),
+  };
+}
+
 /** @param {string} endpoint */
 function validateEndpoint(endpoint) {
   if (endpoint.length > 2048) throw new Error('endpoint_too_long');
@@ -372,6 +412,7 @@ async function setup(args) {
       '--telemetry',
       '--claude-shadow',
       '--claude-diagnostics',
+      '--lang',
     ]),
     new Set([
       '--client',
@@ -383,10 +424,14 @@ async function setup(args) {
       '--telemetry',
       '--claude-shadow',
       '--claude-diagnostics',
+      '--lang',
     ]),
   );
   if (args.includes('--undo') && args.length !== 1)
     throw new Error('setup_undo_cannot_have_options');
+  const lang = option(args, '--lang');
+  if (lang !== undefined && !isPackLocale(lang)) throw new Error('invalid_lang');
+  if (lang !== undefined && args.length === 2) return setPackLocale(lang);
   const previous = await readConfig();
   if (await updateLocalOptOut(previous, args)) return;
   const localOptOut =
@@ -437,14 +482,20 @@ async function setup(args) {
   if ((clients === 'claude' || clients === 'both') && !claude) throw new Error('claude_not_found');
   if ((clients === 'codex' || clients === 'both') && (!codex || !node))
     throw new Error('codex_or_node_not_found');
-  const claudeVersion = claude ? nativeVersion(claude) : null;
-  const codexVersion = codex ? nativeVersion(codex) : null;
-  const claudeSupported = claudeVersion !== null && isTestedNativeVersion('claude', claudeVersion);
-  const codexSupported = codexVersion !== null && isTestedNativeVersion('codex', codexVersion);
-  if ((clients === 'claude' || clients === 'both') && !claudeSupported)
-    throw new Error('claude_version_unverified');
-  if ((clients === 'codex' || clients === 'both') && !codexSupported)
-    throw new Error('codex_version_unverified');
+  const claudeCompatibility =
+    (clients === 'claude' || clients === 'both') && claude !== null
+      ? await resolveClaudeCompatibility(claude, PACKAGE_ROOT)
+      : null;
+  if (claudeCompatibility?.status === 'rejected')
+    throw new Error(claudeCompatibilityError(claudeCompatibility));
+  const claudeVersion = claudeCompatibility?.version ?? (claude ? nativeVersion(claude) : null);
+  let codexCompatibility = null;
+  if (clients === 'codex' || clients === 'both') {
+    codexCompatibility = codex ? await resolveCodexCompatibility(codex) : null;
+    if (codexCompatibility?.status === 'rejected')
+      throw new Error(codexCompatibilityError(codexCompatibility));
+  }
+  const codexVersion = codexCompatibility?.version ?? (codex ? nativeVersion(codex) : null);
   const config = {
     schemaVersion: selection.v2 ? 2 : 1,
     packageVersion: VERSION,
@@ -482,6 +533,10 @@ async function setup(args) {
   console.log(
     `Configured ${clients} in ${root}. Provider-free access verified; no provider batch was used.`,
   );
+  if (lang !== undefined) await setPackLocale(lang);
+  // Display only: the server decides again on every pack request (ADR-0047).
+  const line = licenseLine(await checkEngineeringLicense(endpoint, token));
+  if (line !== null) console.log(line);
 }
 
 /** @param {boolean} json */
@@ -509,19 +564,36 @@ async function doctor(json) {
     codex: resolveNative('codex'),
     node: resolveNative('node'),
   };
-  const nativeVersions = {
-    claude: native.claude ? nativeVersion(native.claude) : '',
+  const claudeCompatibility =
+    native.claude !== null ? await resolveClaudeCompatibility(native.claude, PACKAGE_ROOT) : null;
+  const codexCompatibility =
+    native.codex !== null ? await resolveCodexCompatibility(native.codex) : null;
+  const rawNativeVersions = {
+    claude: claudeCompatibility?.version ?? '',
     codex: native.codex ? nativeVersion(native.codex) : '',
   };
+  const nativeVersions = {
+    ...rawNativeVersions,
+    codex: codexCompatibility?.version ?? rawNativeVersions.codex,
+  };
+  // Optional capability: its state never changes doctor's exit code.
+  const engineering = config
+    ? await checkEngineeringLicense(config.endpoint, config.token)
+    : unavailableLicense('not_configured');
   const needsClaude = config?.clientSelection === 'claude' || config?.clientSelection === 'both';
   const needsCodex = config?.clientSelection === 'codex' || config?.clientSelection === 'both';
+  const captureLockPlatform = needsCodex ? captureLockPlatformCheck() : null;
   const nativeReady =
     (!needsClaude ||
-      (native.claude !== null && isTestedNativeVersion('claude', nativeVersions.claude))) &&
+      (native.claude !== null &&
+        (claudeCompatibility?.status === 'qualified' ||
+          claudeCompatibility?.status === 'host_checked'))) &&
     (!needsCodex ||
       (native.codex !== null &&
         native.node !== null &&
-        isTestedNativeVersion('codex', nativeVersions.codex)));
+        captureLockPlatform?.ok === true &&
+        (codexCompatibility?.status === 'qualified' ||
+          codexCompatibility?.status === 'protocol_match')));
   const result = {
     version: VERSION,
     platform: platform.ok ? process.platform : platform.code,
@@ -535,6 +607,16 @@ async function doctor(json) {
       node: native.node !== null,
     },
     nativeVersions,
+    claudeCompatibility: claudeCompatibility?.status ?? 'unavailable',
+    claudeCompatibilityReason: claudeCompatibility?.reason ?? 'claude_not_found',
+    claudeCompatibilityVersion: claudeCompatibility?.version ?? null,
+    codexCompatibility: codexCompatibility?.status ?? 'unavailable',
+    codexCompatibilityReason: codexCompatibility?.reason ?? 'codex_not_found',
+    codexCompatibilityVersion: codexCompatibility?.version ?? null,
+    captureLockBackend:
+      captureLockPlatform?.ok === true
+        ? 'available'
+        : (captureLockPlatform?.code ?? 'not_required'),
     nativeReady,
     context: publicPolicy(policy),
     telemetry: {
@@ -549,6 +631,8 @@ async function doctor(json) {
         config?.claudeObservation?.disclosedAt !== null &&
         config?.claudeObservation?.disclosedAt !== undefined,
     },
+    engineering,
+    engineeringPack: await engineeringPackState(),
     paidOrPilot: probe?.ok
       ? 'provider_free_probe_ok; paid entitlement or pilot invitation remains server-enforced'
       : config
@@ -584,6 +668,7 @@ async function status(json) {
         config?.claudeObservation?.disclosedAt !== null &&
         config?.claudeObservation?.disclosedAt !== undefined,
     },
+    engineeringPack: await engineeringPackState(),
     monitoredSession: null,
     monitoringStatus: 'not_observed',
   };
@@ -643,17 +728,9 @@ async function main(argv) {
       throw new Error('disclosure_outdated');
     if (config.clientSelection !== command && config.clientSelection !== 'both')
       throw new Error('client_not_configured');
-    if (
-      command === 'claude' &&
-      (typeof config.claudeVersion !== 'string' ||
-        !isTestedNativeVersion('claude', config.claudeVersion))
-    )
-      throw new Error('claude_version_unverified');
-    if (
-      command === 'codex' &&
-      (typeof config.codexVersion !== 'string' ||
-        !isTestedNativeVersion('codex', config.codexVersion))
-    )
+    // The native executable is authoritative. The stored setup version is
+    // metadata only, so patch updates do not block a fresh compatibility check.
+    if (command === 'codex' && typeof config.codexVersion !== 'string')
       throw new Error('codex_version_unverified');
     const root = stateRoot();
     const result = await (command === 'claude'
@@ -688,7 +765,7 @@ main(cliArgs).catch((error) => {
       }),
     );
   } else {
-    console.error(`aibrain: ${errorMessage(error)}`);
+    console.error(`${COMMAND}: ${errorMessage(error)}`);
   }
   process.exitCode = 1;
 });