@zaip-ai/cli 5.0.0 → 5.2.0

package/templates/.agents/runtime/checksums.sha256

@@ -1,11 +1,11 @@
 b146bd0c7c60b1ab43c4f71e0b1d2262c6df6da6f7053a0425f834ccb77a6b48  LICENSE
 bc02cba77e8d51e5c580f43668863dc868eda66f1ff663bfaa49fcf3ca16320e  THIRD_PARTY_NOTICES.md
-1cc3d76ac7c21a664e79848fd481e9791016451b244e7de5feeeb9bea5fd2184  VERSION
-82403b0ced92c346777cc9c23cca3a075a8e6a128d6e380ac204e6edb19e7185  bin/zaip.mjs
-2ce5edd97bb6f95343de79f9b6fd7ab0c6aaedd6214dc63814ddbe2a6108b42f  manifest.json
+e791457c25b99d69f3d5ca028f6a7f6d88f7e2d85af5162a92a8c5f3aecf59b0  VERSION
+be4005a0523ba8b2f4472e20ca4ed802f55463893e7b981beb72c5f5c39229c7  bin/zaip.mjs
+52ecc2a4d23cb389b2106832be782c5f4792ccf2b023bbfc4fd18ef6b5a3b573  manifest.json
 7f89219d7c567c82a51679ad136d84364bded7ac659492537e125d33b1d58a7a  migrations/001-layout-v1.json
 5f8c48b286d0b44d8fbb57a9a5d009a8a500439aa3148d750b8f193f72995c9f  migrations/002-layout-v2.json
-46f22db07aa1cf319150bcde84220f1229ee151899b9c1487dd8347144ef8224  pnpm-lock.sha256
-d8e885983c3f54221498e812d4c04c90939189bf83f2e0e83beb774a45ae73cc  provenance.json
-5f723b2f41f9110ad5f40487e0591434d195b7a044c8411cd033b03ca4d59430  sbom.cdx.json
+2bd34b2f5c253a2167d9addaf1994167308ac0bb4fec22a794c8a5b488205278  pnpm-lock.sha256
+d32374697d0a26097317ea60364edb6c96ac38832e224ea8fe8249d1f2ef0eda  provenance.json
+839dff3a22ba959ce2e8de5e7708f1fd616dcb8313c38c1019a4f9f161ea94f9  sbom.cdx.json
 b3ffedf9e146be802a15b4009f33e031dec3071ca1525e12c67606fd964a3067  schemas/contracts.schema.json

package/templates/.agents/runtime/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 2,
   "name": "zaip-aios",
-  "version": "5.0.0",
+  "version": "5.2.0",
   "node": ">=22",
   "files": [
     "LICENSE",

package/templates/.agents/runtime/pnpm-lock.sha256

@@ -1 +1 @@
-05e0dbb29d49d08cd3735fdd50ab01b72772e3cea476294c5ce3db1b4bbb13db  pnpm-lock.yaml
+b5e11351951654d41aa78dc858d43990a12964ba4051a070613ac8b11bc73a27  pnpm-lock.yaml

package/templates/.agents/runtime/provenance.json

@@ -2,10 +2,10 @@
   "schema_version": 1,
   "statement_type": "self_reported_build_integrity",
   "authenticity": "unverified",
-  "version": "5.0.0",
+  "version": "5.2.0",
   "source_origin": "zaip-aios:local-build",
-  "lockfile_sha256": "05e0dbb29d49d08cd3735fdd50ab01b72772e3cea476294c5ce3db1b4bbb13db",
-  "sbom_sha256": "5f723b2f41f9110ad5f40487e0591434d195b7a044c8411cd033b03ca4d59430",
-  "runtime_sha256": "e8dcc671f1db7816a764ad56112c5dfbeadac421086e6fad1cfbe5789f7a0d11",
-  "statement_sha256": "2f68e78a59993bf3214f2390e4c9149ad83a184efc4fb95b625a55ec6a369559"
+  "lockfile_sha256": "b5e11351951654d41aa78dc858d43990a12964ba4051a070613ac8b11bc73a27",
+  "sbom_sha256": "839dff3a22ba959ce2e8de5e7708f1fd616dcb8313c38c1019a4f9f161ea94f9",
+  "runtime_sha256": "83f76b2496ee48839d5c6ff64eb11343bc097ee7e03a4b84893c1b2def616392",
+  "statement_sha256": "36a662b68a192781a67fbaa24be7425977957fa9422c0e3778036fc4616eb685"
 }

package/templates/.agents/runtime/sbom.cdx.json

@@ -6,7 +6,7 @@
     "component": {
       "type": "application",
       "name": "zaip-aios",
-      "version": "5.0.0"
+      "version": "5.2.0"
     }
   },
   "components": [

package/templates/.agents/skills/zaip-skill-github-deploy/scripts/deploy-contract-cli.test.mjs

@@ -0,0 +1,53 @@
+import assert from "node:assert/strict";
+import { execFileSync } from "node:child_process";
+import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import test from "node:test";
+import { DEFAULT_POLICY, readDeploymentInput, resolveDeployment } from "./deploy-contract.mjs";
+
+const _builder = {
+  origin: "git@github.com:zaip-ai/zaip-aios.git",
+  rootName: "@zaip-ai/aios",
+  cliName: "@zaip-ai/cli",
+  rootVersion: "4.5.0",
+  cliVersion: "4.5.0",
+  workspaceVersion: "4.5.0",
+};
+const consumer = { origin: "git@github.com:example/app.git", rootName: "app" };
+const _input = (request, identity = consumer, policy = DEFAULT_POLICY) => ({
+  request,
+  identity,
+  policy,
+});
+
+test("portable resolver CLI uses actual Git identity and preserves existing preferences", async (context) => {
+  const root = await mkdtemp(join(tmpdir(), "zaip-deploy-contract-"));
+  context.after(() => rm(root, { recursive: true, force: true }));
+  execFileSync("git", ["init", "--quiet"], { cwd: root });
+  execFileSync("git", ["remote", "add", "origin", consumer.origin], { cwd: root });
+  await mkdir(join(root, ".agents", "config"), { recursive: true });
+  const config = join(root, ".agents", "config", "deploy-policy.json");
+  const custom = `${JSON.stringify({ ...DEFAULT_POLICY, default_mode: "release" }, null, 2)}\n`;
+  await writeFile(config, custom);
+  await writeFile(join(root, "package.json"), JSON.stringify({ name: "consumer" }));
+  await writeFile(join(root, "request.txt"), "faça deploy apenas commits");
+  const plan = JSON.parse(
+    execFileSync(
+      process.execPath,
+      [
+        join(import.meta.dirname, "deploy-contract.mjs"),
+        "--repository",
+        root,
+        "--request-file",
+        join(root, "request.txt"),
+      ],
+      { encoding: "utf8" },
+    ),
+  );
+  assert.equal(plan.mode, "commits");
+  assert.equal(plan.kind, "consumer");
+  assert.equal(await readFile(config, "utf8"), custom);
+  await rm(config);
+  assert.equal(resolveDeployment(await readDeploymentInput(root, "faça deploy")).mode, "commits");
+});

package/templates/.agents/skills/zaip-skill-github-deploy/scripts/deploy-contract.test.mjs

@@ -1,13 +1,12 @@
 import assert from "node:assert/strict";
 import { execFileSync } from "node:child_process";
-import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import test from "node:test";
 import {
   DEFAULT_POLICY,
   nextRelease,
-  readDeploymentInput,
   repositoryKind,
   resolveDeployment,
   verifyContract,
@@ -389,33 +388,3 @@ test("wrong route, branch, changed preference and preparation stop before extern
   );
   assert.equal(writes, 0);
 });
-test("portable resolver CLI uses actual Git identity and preserves existing preferences", async (context) => {
-  const root = await mkdtemp(join(tmpdir(), "zaip-deploy-contract-"));
-  context.after(() => rm(root, { recursive: true, force: true }));
-  execFileSync("git", ["init", "--quiet"], { cwd: root });
-  execFileSync("git", ["remote", "add", "origin", consumer.origin], { cwd: root });
-  await mkdir(join(root, ".agents", "config"), { recursive: true });
-  const config = join(root, ".agents", "config", "deploy-policy.json");
-  const custom = `${JSON.stringify({ ...DEFAULT_POLICY, default_mode: "release" }, null, 2)}\n`;
-  await writeFile(config, custom);
-  await writeFile(join(root, "package.json"), JSON.stringify({ name: "consumer" }));
-  await writeFile(join(root, "request.txt"), "faça deploy apenas commits");
-  const plan = JSON.parse(
-    execFileSync(
-      process.execPath,
-      [
-        join(import.meta.dirname, "deploy-contract.mjs"),
-        "--repository",
-        root,
-        "--request-file",
-        join(root, "request.txt"),
-      ],
-      { encoding: "utf8" },
-    ),
-  );
-  assert.equal(plan.mode, "commits");
-  assert.equal(plan.kind, "consumer");
-  assert.equal(await readFile(config, "utf8"), custom);
-  await rm(config);
-  assert.equal(resolveDeployment(await readDeploymentInput(root, "faça deploy")).mode, "commits");
-});

package/templates/.agents/zaip-aios/VERSION

@@ -1 +1 @@
-5.0
+5.2

package/templates/.agents/zaip-aios/guides/10-seguranca.md

@@ -17,7 +17,7 @@ sistema operacional.
 execução de comandos dentro do perfil. Isso não é uma autorização de negócio ou
 de escopo: deploy, push/publicação, ações remotas, gastos, exclusões relevantes
 e mudanças fora do objetivo continuam exigindo pedido explícito do usuário no
-turno atual. Apps e MCPs podem manter seu próprio
+contexto vigente da sessão; a autorização continua válida enquanto seu escopo não mudar. Apps e MCPs podem manter seu próprio
 `default_tools_approval_mode = "approve"`; esse ajuste é independente da
 política de aprovação de comandos.
 
@@ -141,7 +141,7 @@ O acesso completo é mitigado por defesa em profundidade, mas nenhuma camada tor
 `zaip-aios-full-access` equivalente ao perfil restrito:
 
 1. **Autorização explícita do usuário:** mudanças externas, destrutivas, publicação, deploy,
-   gasto e mutações remotas exigem pedido explícito no turno atual.
+   gasto e mutações remotas exigem pedido explícito válido no contexto da sessão.
 2. **Escopo do repositório:** `AGENTS.md`, Rules e skills limitam o trabalho ao objetivo e
    proíbem inferir autoridade adicional a partir do acesso técnico.
 3. **Hook `PreToolUse` ativo nos dois perfis:** valida comandos e patches antes da execução; bloqueia escapes do