@zaip-ai/cli 4.6.0 → 4.8.0

package/templates/.agents/dashboard/packages/local-runtime/src/sqlite-spec-root-elapsed.test.ts

@@ -0,0 +1,210 @@
+import { mkdir, mkdtemp, writeFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { DatabaseSync } from "node:sqlite";
+import { afterEach, expect, it } from "vitest";
+import { rebuildSqliteReadModel, SqliteReadModelFileSystem } from "./sqlite-read-model.js";
+
+const roots: string[] = [];
+afterEach(async () => {
+  await Promise.all(
+    roots
+      .splice(0)
+      .map((root) =>
+        import("node:fs/promises").then(({ rm }) => rm(root, { recursive: true, force: true })),
+      ),
+  );
+});
+
+it("shows a 21-hour source-observed SPEC root and splits Cost elapsed without child double counting", async () => {
+  const temp = resolve(import.meta.dirname, "../../../../../..", ".tmp", "sqlite-read-model-tests");
+  await mkdir(temp, { recursive: true });
+  const root = await mkdtemp(join(temp, "spec-elapsed-"));
+  roots.push(root);
+  const records = join(root, ".agents", "records");
+  await mkdir(join(records, "runs", "2026", "09"), { recursive: true });
+  await mkdir(join(records, "specs", "2026", "09"), { recursive: true });
+  await mkdir(join(root, ".agents", "config"), { recursive: true });
+  await writeFile(join(root, ".agents", "config", "project.yaml"), "zaip:\n  enabled: true\n");
+  for (const id of ["SPEC-ROOT", "SPEC-CHILD"])
+    await writeFile(
+      join(records, "specs", "2026", "09", `${id}.md`),
+      `---\nid: ${id}\ntitle: ${id}\nstatus: active\nrisk: standard\ncreated_at: 2026-09-30T22:00:00.000Z\n---\n# ${id}\n`,
+    );
+
+  const sourceStart = "2026-09-30T22:41:41.072Z";
+  const sourceEnd = "2026-10-01T19:55:46.569Z";
+  const run = (id: string, specId: string, start: string, end: string, parent: string | null) => {
+    const invocation = `AINV-${id}`;
+    return [
+      {
+        schema_version: 2,
+        event_id: `${id}:1`,
+        run_id: id,
+        sequence: 1,
+        occurred_at: start,
+        type: "run.started",
+        attribution_status: "attributed",
+        phase: "execution",
+        run_role: parent === null ? "orchestrator" : "subagent",
+        run_purpose: "execution",
+        requires_finalizer: false,
+        execution_kind: "delivery",
+        execution_eligibility: ["delivery"],
+        entrypoint: "spec",
+        work_type: "new",
+        storage_mode: "tracked_sanitized",
+        client: "codex",
+        agent: "agent",
+        agent_name: "agent",
+        provider: "openai",
+        model: "gpt-6-sol",
+        reasoning_effort: null,
+        client_thread_id: `thread-${id}`,
+        client_turn_id: `turn-${id}`,
+        conversation_id: "CONV-SPEC",
+        execution_id: "EXEC-SPEC",
+        task_id: null,
+        spec_id: specId,
+        prd_id: null,
+        change_id: null,
+        parent_run_id: parent,
+        continuation_of_run_id: null,
+        retry_of_run_id: null,
+        agent_invocation_id: invocation,
+        root_agent_invocation_id: parent === null ? invocation : "AINV-RUN-ROOT",
+        parent_agent_invocation_id: parent === null ? null : "AINV-RUN-ROOT",
+        invocation_kind: parent === null ? "orchestrator" : "delegated",
+        delegation_depth: parent === null ? 0 : 1,
+      },
+      {
+        schema_version: 2,
+        event_id: `${id}:2`,
+        run_id: id,
+        sequence: 2,
+        occurred_at: end,
+        type: "usage.recorded",
+        phase: "execution",
+        activity_kind: "model_usage",
+        classification_source: "explicit",
+        tokens: {
+          input: 100,
+          cached_input: 0,
+          output: 20,
+          reasoning: 0,
+          total: 120,
+          source: "provider_reported",
+        },
+        cost: { usd: 1, brl: 5, fx_rate: 5 },
+        provider: "openai",
+        model: "gpt-6-sol",
+        source_segment_key: id,
+        model_call_id: `MCALL-${id}`,
+        runtime: { reasoning_effort: null, service_tier: null },
+        supersedes_event_id: null,
+        source_occurred_at: end,
+        source_started_at: start,
+        source_finished_at: end,
+        duration_ms: null,
+        duration_provenance: null,
+      },
+    ];
+  };
+  for (const [id, specId, start, end, parent] of [
+    ["RUN-ROOT", "SPEC-ROOT", sourceStart, sourceEnd, null],
+    ["RUN-OVERLAP", "SPEC-ROOT", "2026-10-01T04:30:00.000Z", "2026-10-01T05:30:00.000Z", null],
+    ["RUN-CHILD", "SPEC-CHILD", "2026-10-01T04:00:00.000Z", "2026-10-01T05:00:00.000Z", "RUN-ROOT"],
+    ["RUN-UNKNOWN", "SPEC-CHILD", "2026-10-02T12:00:00.000Z", "2026-10-02T12:00:00.000Z", null],
+  ] as const)
+    await writeFile(
+      join(records, "runs", "2026", "09", `${id}.jsonl`),
+      `${run(id, specId, start, end, parent)
+        .map((event) => JSON.stringify(event))
+        .join("\n")}\n`,
+    );
+
+  await rebuildSqliteReadModel(root);
+  const db = new DatabaseSync(resolve(root, ".local/sqlite/zaip-aios-dashboard.sqlite"), {
+    readOnly: true,
+  });
+  const observed = Date.parse(sourceEnd) - Date.parse(sourceStart);
+  expect(observed).toBe(76_445_497);
+  expect(
+    db.prepare("SELECT source_duration_ms FROM zaip_aios_activities WHERE run_id='RUN-ROOT'").get(),
+  ).toEqual({ source_duration_ms: observed });
+  expect(
+    db
+      .prepare("SELECT spec_id, total_duration_ms FROM zaip_vw_spec_root_elapsed ORDER BY spec_id")
+      .all(),
+  ).toEqual([{ spec_id: "SPEC-ROOT", total_duration_ms: observed }]);
+  expect(
+    db
+      .prepare(
+        "SELECT entity_id, total_duration_ms FROM zaip_vw_first_fold_top_specs_all_time ORDER BY rank LIMIT 1",
+      )
+      .get(),
+  ).toEqual({ entity_id: "SPEC-ROOT", total_duration_ms: observed });
+  expect(
+    db.prepare("SELECT total_duration_ms FROM zaip_vw_first_fold_spec_metrics_all_time").get(),
+  ).toEqual({ total_duration_ms: observed });
+  expect(
+    db
+      .prepare("SELECT period_key, total_duration FROM zaip_vw_cost_daily ORDER BY period_key")
+      .all(),
+  ).toEqual([
+    { period_key: "2026-09-30", total_duration: 15_498_928 },
+    { period_key: "2026-10-01", total_duration: 60_946_569 },
+    { period_key: "2026-10-02", total_duration: null },
+  ]);
+  db.close();
+  const filesystem = new SqliteReadModelFileSystem(root);
+  const allTimeCost = filesystem.costMonitorSummaryAggregate({ from: null, to: null });
+  expect(allTimeCost.cost_monitor_daily_duration).toMatchObject({
+    "2026-09-30": { known_sum: 15_498_928 },
+    "2026-10-01": { known_sum: 60_946_569 },
+    "2026-10-02": { known_sum: 0, known_runs: 0, eligible_runs: 1 },
+  });
+  expect(allTimeCost.daily_rows).toContainEqual(
+    expect.objectContaining({ key: "2026-10-02", total_duration: null }),
+  );
+  const unknownFiltered = filesystem.costMonitorSummaryAggregate({
+    from: "2026-10-02",
+    to: "2026-10-02",
+    specs: ["SPEC-CHILD"],
+  });
+  expect(unknownFiltered.cost_monitor_daily_duration).toMatchObject({
+    "2026-10-02": { known_sum: 0, known_runs: 0, eligible_runs: 1 },
+  });
+  expect(unknownFiltered.daily_rows).toContainEqual(
+    expect.objectContaining({ key: "2026-10-02", total_duration: null }),
+  );
+  const secondDayCost = filesystem.costMonitorSummaryAggregate({
+    from: "2026-10-01",
+    to: "2026-10-01",
+  });
+  expect(secondDayCost.cost_monitor_daily_duration).toMatchObject({
+    "2026-10-01": { known_sum: 60_946_569 },
+  });
+  expect(secondDayCost.cost_monitor_daily_duration).not.toHaveProperty("2026-09-30");
+  const filteredCost = filesystem.costMonitorSummaryAggregate({
+    from: "2026-10-01",
+    to: "2026-10-01",
+    specs: ["SPEC-ROOT"],
+  });
+  expect(filteredCost.cost_monitor_daily_duration).toMatchObject({
+    "2026-10-01": { known_sum: 60_946_569 },
+  });
+  const unknownDay = { from: "2026-10-02", to: "2026-10-02" };
+  expect(
+    filesystem.costMonitorSummaryAggregate(unknownDay).cost_monitor_daily_duration,
+  ).toMatchObject({
+    "2026-10-02": { known_sum: 0, eligible_runs: 1, known_runs: 0 },
+  });
+  expect(
+    filesystem.costMonitorSummaryAggregate({ ...unknownDay, specs: ["SPEC-CHILD"] })
+      .cost_monitor_daily_duration,
+  ).toMatchObject({ "2026-10-02": { known_sum: 0, eligible_runs: 1, known_runs: 0 } });
+  expect(filesystem.summaryPage("spec", { from: null, to: null }, 0, 10).rows).toContainEqual(
+    expect.objectContaining({ id: "SPEC-ROOT", total_duration: observed }),
+  );
+  filesystem.close();
+});

package/templates/.agents/dashboard/packages/ui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zaip-ai/dashboard-ui",
-  "version": "4.6.0",
+  "version": "4.8.0",
   "private": true,
   "type": "module",
   "exports": {

package/templates/.agents/dashboard/tests/e2e/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zaip-ai/dashboard-e2e",
-  "version": "4.6.0",
+  "version": "4.8.0",
   "private": true,
   "type": "module",
   "scripts": {

package/templates/.agents/design/.zaip-managed.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "version": "4.6.0",
+  "version": "4.8.0",
   "files": [
     {
       "path": "DESIGN.md",
@@ -276,7 +276,7 @@
     },
     {
       "path": "apps/catalog/package.json",
-      "sha256": "0ed200d08a2191952a59278b928e820ff26cda08eb4ecea29cfcc99f897c662e"
+      "sha256": "042f7b0a8b2fcfae031c268bfc07f41c96957ce3a6724b9ca8f0c8bd5ce4f3ab"
     },
     {
       "path": "apps/catalog/public/logo_novo_azul.png",
@@ -408,7 +408,7 @@
     },
     {
       "path": "packages/local-runtime/package.json",
-      "sha256": "1420f11696db43314383a04628d3ab3bdbe359b5b07e08ca7b71fe07f5411216"
+      "sha256": "95c9a31264d488e61280b0f3b6955a9c4c3c96aa388c8c2f9b92dc84092dd920"
     },
     {
       "path": "packages/local-runtime/runtime.mjs",

package/templates/.agents/design/apps/catalog/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zaip-ai/design-catalog",
-  "version": "4.6.0",
+  "version": "4.8.0",
   "private": true,
   "type": "module",
   "scripts": {

package/templates/.agents/design/packages/local-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zaip-ai/design-local-runtime",
-  "version": "4.6.0",
+  "version": "4.8.0",
   "private": true,
   "type": "module",
   "scripts": {

package/templates/.agents/requirements/autonomous-assurance.md

@@ -6,7 +6,7 @@ title: Garantia adaptativa e execução autônoma
 status: active
 version: 3
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Garantia adaptativa e execução autônoma

package/templates/.agents/requirements/cloud-hostinger-autonomy.md

@@ -6,7 +6,7 @@ title: Autonomia delimitada para Cloudflare e Hostinger
 status: proposed
 version: 1
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Cloudflare e Hostinger (proposta de requisito)

package/templates/.agents/requirements/comparative-audit.md

@@ -6,7 +6,7 @@ title: Auditoria comparativa e plano de evolução
 status: active
 version: 1
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Auditoria comparativa e plano de evolução

package/templates/.agents/requirements/context-engine.md

@@ -6,7 +6,7 @@ title: Contexto mínimo, seguro e navegável
 status: active
 version: 8
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Context engine

package/templates/.agents/requirements/cost-observability.md

@@ -6,7 +6,7 @@ title: Tokens, custos e cobertura
 status: active
 version: 10
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Cost observability

package/templates/.agents/requirements/dashboard-launch.md

@@ -6,7 +6,7 @@ title: Inicialização e hidratação confiável do dashboard
 status: active
 version: 1
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Inicialização e hidratação confiável do dashboard

package/templates/.agents/requirements/data-export.md

@@ -6,7 +6,7 @@ title: Exportação contextual de dados para Excel
 status: proposed
 version: 2
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Exportação contextual de dados

package/templates/.agents/requirements/design-system.md

@@ -6,7 +6,7 @@ title: Contrato visual e catálogo executável
 status: active
 version: 5
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Design system

package/templates/.agents/requirements/execution-engine.md

@@ -6,7 +6,7 @@ title: Preparação, materialização e DAG
 status: active
 version: 11
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Execution engine

package/templates/.agents/requirements/kanban-dashboard.md

@@ -6,7 +6,7 @@ title: Projeções operacionais e analíticas
 status: active
 version: 14
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Kanban and dashboard

package/templates/.agents/requirements/model-orchestration.md

@@ -6,7 +6,7 @@ title: Seleção automática e observável de modelo e effort
 status: active
 version: 10
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Orquestração de modelos

package/templates/.agents/requirements/public-distribution.md

@@ -4,9 +4,9 @@ id: REQUIREMENTS-PUBLIC-DISTRIBUTION
 area: public-distribution
 title: Distribuição pública e ativação
 status: active
-version: 9
+version: 10
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Distribuição pública e ativação
@@ -44,15 +44,17 @@ Restrições explícitas prevalecem. No init sem force, catálogo oficial legado
 ser atualizado e passa a integrar o lock; catálogo personalizado permanece protegido. Discovery
 gerenciada é uma projeção única, regenerada a partir do catálogo da versão instalada.
 
-## REQ-DIST-003 — Configuração global portátil do Codex
+## REQ-DIST-003 — Hooks do Codex restritos ao projeto
 
-O CLI público deve descobrir o diretório inicial do usuário em execução e reconciliar a proteção
-global do Codex sem apagar preferências, integrações ou identidades canônicas do usuário e sem
-introduzir paths ou identidades locais fixas.
+O CLI público deve instalar a proteção do Codex exclusivamente no projeto em instalação,
+por meio de `.codex/config.toml` e `.codex/hooks`. A migração pode remover hooks globais
+legados comprovadamente pertencentes ao ZAIP após backup recuperável, preservando as demais
+preferências globais, identidades canônicas, integrações e hooks de terceiros. Nenhum caminho
+ou identidade do ambiente de build pode ser fixado no pacote.
 
-- `AC-DIST-003-01`: em uma instalação limpa ou existente, o CLI preserva as configurações globais e identidades canônicas, remove somente aliases `codex_name` obsoletos declarados pelo catálogo instalado e adiciona o hook portátil canônico, sem referência a nome de usuário ou path absoluto do ambiente de build.
-- `AC-DIST-003-02`: se a escrita global falhar, o CLI conclui a instalação do projeto sem ocultar a falha, informa o destino exato e o erro, e mantém na documentação os passos de reconciliação manual que preservam a configuração existente.
-- `AC-DIST-003-03`: a reconciliação substitui todo hook `PreToolUse` identificado como ZAIP por exatamente um bloco canônico e preserva hooks de terceiros; reexecuções são idempotentes.
+- `AC-DIST-003-01`: em instalação limpa ou atualização, o CLI registra exatamente o hook canônico do ZAIP no `.codex/config.toml` do projeto e instala seu script em `.codex/hooks`; não cria nem atualiza hook global como fallback, não altera preferências ou identidades globais e não embute nome de usuário ou caminho absoluto do ambiente de build.
+- `AC-DIST-003-02`: a migração identifica por assinatura/ownership os registros globais legados de hooks do ZAIP, verifica primeiro os hooks canônicos do projeto, produz e verifica backup recuperável antes de remover somente essas entradas reconhecidas da configuração global, e preserva integralmente hooks de terceiros e as demais configurações globais. Se a verificação local falhar, preserva também o hook global legado e relata a pendência; conteúdo global sem prova de ownership permanece intacto para revisão manual.
+- `AC-DIST-003-03`: a instalação e a migração são idempotentes; falha ao gravar o hook do projeto, verificar o backup ou limpar um legado reconhecido é informada com destino, erro, estado parcial e passos de recuperação, sem declarar proteção concluída nem recorrer a um hook global.
 
 ## Verificação
 

package/templates/.agents/requirements/software-architecture.md

@@ -6,7 +6,7 @@ title: Layout modular e limites de código-fonte
 status: active
 version: 5
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Software architecture

package/templates/.agents/requirements/strategic-improvements.md

@@ -6,7 +6,7 @@ title: Melhorias estratégicas de custo, qualidade e resiliência
 status: active
 version: 1
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Melhorias estratégicas de custo, qualidade e resiliência

package/templates/.agents/requirements/work-lifecycle.md

@@ -6,7 +6,7 @@ title: Ciclo de vida do trabalho
 status: active
 version: 26
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Work lifecycle

package/templates/.agents/requirements/zaip-strategic-95.md

@@ -6,7 +6,7 @@ title: Evidências, custo por Task e autonomia por SPEC
 status: active
 version: 1
 source_change: null
-source_release: "4.6.0"
+source_release: "4.8.0"
 ---
 
 # Evidências, custo por Task e autonomia por SPEC

package/templates/.agents/runtime/VERSION

@@ -1 +1 @@
-4.6.0
+4.8.0