@zaip-ai/cli 1.4.3 → 2.0.0

package/templates/.agents/runtime/checksums.sha256

@@ -1,11 +1,11 @@
 b146bd0c7c60b1ab43c4f71e0b1d2262c6df6da6f7053a0425f834ccb77a6b48  LICENSE
 bc02cba77e8d51e5c580f43668863dc868eda66f1ff663bfaa49fcf3ca16320e  THIRD_PARTY_NOTICES.md
-64d23f858ef51b0f996e4966d4e27c0371b437e2d2787890b1f7ad22d4ec5663  VERSION
-aea71cecd64324e88e90f6001d6f82f57cb616b24306cba12c04d40e733234fe  bin/zaip.mjs
-bed6ab1fda844209edc628c2a675021ad6acb9a2f7ecb7ae017b5a916712da24  manifest.json
+c28fcca53637bc88e124af1725df13cb98c69dedefd62fb3cdbe1cdb6b760624  VERSION
+2083d8d005fee02e3698284e0498472a9b61e83e5628cc21ef3dac8f45b1a661  bin/zaip.mjs
+2337bc3ff8ef045a59e7800e7961570861899adb7c9a776b61d41c1cddf45d97  manifest.json
 7f89219d7c567c82a51679ad136d84364bded7ac659492537e125d33b1d58a7a  migrations/001-layout-v1.json
 5f8c48b286d0b44d8fbb57a9a5d009a8a500439aa3148d750b8f193f72995c9f  migrations/002-layout-v2.json
 182a587dca8080f732cb387dbdeff4c12034a4a116efe35b4cd3c1c0a21ad10b  pnpm-lock.sha256
-c7c5c21465e5aaba66fe01c43bedfe930e024d0cc1e514002eff43553621afa1  provenance.json
-4669f375688be830958d45269bb0f8dfe65daf8db677f72728c15dc89d42d820  sbom.cdx.json
+76316831c86929995d0837053d09d8002cbf820ee67397b70c4e10dffe9abdb1  provenance.json
+58f1ec31e0e72ab3763209e6de1862baff948d27d1b1e92e64c8c14553a117f0  sbom.cdx.json
 b3ffedf9e146be802a15b4009f33e031dec3071ca1525e12c67606fd964a3067  schemas/contracts.schema.json

package/templates/.agents/runtime/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 2,
   "name": "zaip-aios",
-  "version": "1.3.0",
+  "version": "2.0.0",
   "node": ">=22",
   "files": [
     "LICENSE",

package/templates/.agents/runtime/provenance.json

@@ -2,10 +2,10 @@
   "schema_version": 1,
   "statement_type": "self_reported_build_integrity",
   "authenticity": "unverified",
-  "version": "1.3.0",
+  "version": "2.0.0",
   "source_origin": "zaip-aios:local-build",
   "lockfile_sha256": "382ebb27a2a951eb61280171c27116233762370d9093ab516caef216475ba4fc",
-  "sbom_sha256": "4669f375688be830958d45269bb0f8dfe65daf8db677f72728c15dc89d42d820",
-  "runtime_sha256": "fee26f86f7ca62d01e3b2dd590259a47029baa99f2241cab1fa4f27190abb7a0",
-  "statement_sha256": "15d18d3544bf682fd9df31b61d2d2cdeec84f86ee7adfa6c9fc126770fb4fbcf"
+  "sbom_sha256": "58f1ec31e0e72ab3763209e6de1862baff948d27d1b1e92e64c8c14553a117f0",
+  "runtime_sha256": "7181aca744d5fb5dd561010262d2e131c94b336c9c308917d9050af641932ecc",
+  "statement_sha256": "15707741f4c5e77e3ed15d4648bfb8aef2c3c3c209fc2e197401b89ff46ba9a4"
 }

package/templates/.agents/runtime/sbom.cdx.json

@@ -6,7 +6,7 @@
     "component": {
       "type": "application",
       "name": "zaip-aios",
-      "version": "1.3.0"
+      "version": "2.0.0"
     }
   },
   "components": [

package/templates/.agents/skills/zaip-aios/SKILL.md

@@ -1,9 +1,11 @@
 ---
-# zaip-managed generated-do-not-edit source=discovery-skill version=1.3.0 sha256=72e09e90f33f9ed2543daf8dfc09ee5b10fca74d7fa077db030b8b048301d806
+# zaip-managed generated-do-not-edit source=discovery-skill version=2.0.0 sha256=d530dbf54b4fc554a533e0ac300d6c148b598a82f1dcc0680b9d9bdaf4103696
 name: zaip-aios
 description: Discover and apply the repository-local ZAIP-AIOS framework.
 ---
 
 # ZAIP-AIOS adapter
 
-Read `.agents/config/project.yaml` first. Apply ZAIP only for literal boolean `zaip.enabled: true`; otherwise ignore it except maintenance or `zaip enable`. Read `.agents/rules/core.md`, then only matching `.agents/requirements/`, `.agents/rules/`, and `.agents/skills/`; discover via lifecycle manifests and explicit records only—never normal history. Root uses `zaip-agent-orchestrator`, which selects a capability-eligible executor captured with observed host metadata; after descendants and gates, `zaip-agent-finalizer` is last. Terminal outcome requires lifecycle/evidence/tests/manifest refresh; publication is Git-only.
+Keep this native client bootstrap. After reading project configuration, load the applicable `.agents/requirements/`, `.agents/rules/`, and `.agents/skills/` from their canonical locations.
+
+Read `.agents/config/project.yaml` first. Apply ZAIP only for literal boolean `zaip.enabled: true`; otherwise ignore it except maintenance or `zaip enable`. When enabled, capture once: analysis is `conversation`, continuation reuses focus, and independent edits use semantic `new-work`. Thinking about PRD/SPEC is conversation; explicit creation persists complete draft artifacts and PreparedPlan blueprints under interaction telemetry, with Tasks materialized only at ready/execute. Ask at most five critical questions per turn and stop after three turns, then record delegable AI decisions. Resolve finalize/implement/develop using target plus persisted status, and create a linked rework successor instead of reopening cancelled PRDs. Read `.agents/rules/core.md`, then only applicable context from runtime projections and explicit records—never normal history. Publication is Git-only.

package/templates/.agents/skills/zaip-skill-setup/SKILL.md

@@ -11,7 +11,7 @@ authorized automatic prerequisite installation, and create the disposable databa
 canonical `.agents/records` and `.agents/config` sources.
 
 1. Faça dry-run, descubra a versão/layout e rejeite conflitos de checksum, ownership ou arquivos divergentes do usuário.
-2. Instale/valide `config/project.yaml`, `config/framework.lock.yaml`, as cinco Rules core diretamente em `rules/`, as Rules locais fora do lock preservadas, todos os Requirements/skills gerenciados pelo manifest, as raízes V2 de `data` e o dashboard frontend-only em `.agents/dashboard` quando ele fizer parte da distribuição.
+2. Instale/valide `config/project.yaml`, `config/framework.lock.yaml`, as cinco Rules core diretamente em `rules/`, as Rules locais fora do lock preservadas, todos os Requirements/skills gerenciados pelo manifest, as raízes V3 de `records` e o dashboard frontend-only em `.agents/dashboard` quando ele fizer parte da distribuição. Em upgrade V2, promova os registros de `data` para `records` de modo idempotente e reversível, arquivando a fonte antes da remoção somente quando a cópia for validada.
 3. Nunca mantenha lista fixa da quantidade de Requirements ou skills no workflow; derive o catálogo do release/lock vigente.
 4. Preserve arquivos do projeto. Configuração específica usa `$zaip-skill-config`; Rules específicas usam `$zaip-skill-rules`.
 5. Mantenha raízes V1 somente leitura até migração explícita, planejada, idempotente e reversível.

package/templates/.agents/zaip-aios/VERSION

@@ -1 +1 @@
-1.3.0
+2.0

package/templates/infra/terraform/terraform.tfvars.example

@@ -1,4 +1,5 @@
-# Copy only non-secret values to a local ignored terraform.tfvars. Supply tokens through TF_VAR_*.
+# Copy only non-secret values to a local ignored terraform.tfvars. Supply provider
+# credentials through HOSTINGER_API_TOKEN and CLOUDFLARE_API_TOKEN; never use TF_VAR_* for tokens.
 cloudflare_account_id = "replace-with-approved-account-id"
 cloudflare_zone_id    = "replace-with-approved-zone-id"
 cloudflare_zone_name  = "example.com"