@zaip-ai/cli 5.6.0 → 5.8.0

package/templates/.agents/runtime/checksums.sha256

@@ -1,11 +1,11 @@
 b146bd0c7c60b1ab43c4f71e0b1d2262c6df6da6f7053a0425f834ccb77a6b48  LICENSE
 bc02cba77e8d51e5c580f43668863dc868eda66f1ff663bfaa49fcf3ca16320e  THIRD_PARTY_NOTICES.md
-e51f139763c0958d77e9454ad75fc927c601dad6512842bdf94a79a8e755374c  VERSION
-a16e656eab3d659f2234ffcfc654e45054a6b4435b6e77ef243245e9db5661eb  bin/zaip.mjs
-874a6105517333a379b58a01a79a32b579f0a9f1c1666e46849c54acac9a2e4c  manifest.json
+9de5986a86cd88a2fe559a78a5c5f3fd6856a825c52217de5e892c9015bbac86  VERSION
+e0a1498512dc8b585db8d5b3c36db485f45efc777c765df5a350728cd6511a05  bin/zaip.mjs
+56cf499ac0c627572d27e91fb78bd104a77af948448e7329dd4255c048911a36  manifest.json
 7f89219d7c567c82a51679ad136d84364bded7ac659492537e125d33b1d58a7a  migrations/001-layout-v1.json
 5f8c48b286d0b44d8fbb57a9a5d009a8a500439aa3148d750b8f193f72995c9f  migrations/002-layout-v2.json
 2bd34b2f5c253a2167d9addaf1994167308ac0bb4fec22a794c8a5b488205278  pnpm-lock.sha256
-09c428d0226f7bf35472301b3ed6202aa884e2c9e646ba87493c74e00354821a  provenance.json
-2dac3f4fc5813d91e9d3095c4ba14f67baa24fa4f80c4d6b2d0791b6a67ac42d  sbom.cdx.json
+94e932ec43eb12d4e9e1dfd625878a2cc8a62325f252b6f8712478ea5806d25e  provenance.json
+ce29b875af132dd4217bd80777146386aa7fe9cde264707ee455bdc926a8926a  sbom.cdx.json
 b3ffedf9e146be802a15b4009f33e031dec3071ca1525e12c67606fd964a3067  schemas/contracts.schema.json

package/templates/.agents/runtime/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 2,
   "name": "zaip-aios",
-  "version": "5.6.0",
+  "version": "5.8.0",
   "node": ">=22",
   "files": [
     "LICENSE",

package/templates/.agents/runtime/provenance.json

@@ -2,10 +2,10 @@
   "schema_version": 1,
   "statement_type": "self_reported_build_integrity",
   "authenticity": "unverified",
-  "version": "5.6.0",
+  "version": "5.8.0",
   "source_origin": "zaip-aios:local-build",
   "lockfile_sha256": "b5e11351951654d41aa78dc858d43990a12964ba4051a070613ac8b11bc73a27",
-  "sbom_sha256": "2dac3f4fc5813d91e9d3095c4ba14f67baa24fa4f80c4d6b2d0791b6a67ac42d",
-  "runtime_sha256": "1ed523415e3f43b456a76cd96350d08b3310fd7e115c83fc43defb59d5abd280",
-  "statement_sha256": "26fd4ec41fc8e36f2da9b9f156315e16df99643cb3b78084d29d00bc6e797ddf"
+  "sbom_sha256": "ce29b875af132dd4217bd80777146386aa7fe9cde264707ee455bdc926a8926a",
+  "runtime_sha256": "c9c9412a99ca95e60a9fee09f04f6064716fbfbf623c5f5c64afd3cb45f714d2",
+  "statement_sha256": "c5c21b617fc3ab611036450068c7fcb48a0e9a08a95fcf00b477b3bb016d30b0"
 }

package/templates/.agents/runtime/sbom.cdx.json

@@ -6,7 +6,7 @@
     "component": {
       "type": "application",
       "name": "zaip-aios",
-      "version": "5.6.0"
+      "version": "5.8.0"
     }
   },
   "components": [

package/templates/.agents/skills/zaip-skill-github-deploy/scripts/deploy-contract.mjs

@@ -77,6 +77,15 @@ export function requestedDeployment(request) {
     "A bounded current human request is required",
   );
   const text = normalize(request);
+  // Provenance and explicit human holds constrain every authorization route.
+  const quotedOrReported =
+    /[`"'“”]/.test(request) || /\b(?:disse|citou|exemplo|quoted|said)\b/.test(text);
+  const approvalHold =
+    /\b(?:ate|quando|se|apos|depois|aguard\w*|esper\w*|so|somente|apenas|depend\w*|condicion\w*)\b[^.!?]*\b(?:revis\w*|autor\w*|aprov\w*|confirm\w*)\b/.test(
+      text,
+    );
+  if (quotedOrReported || approvalHold)
+    return { authorized: false, reason: "not-a-direct-deployment-request" };
   // A separate, literal imperative paragraph can authorize implementation and
   // publication together. Do not rewrite the user's request or accept reported,
   // quoted, conditional or merely mentioned publication language.
@@ -93,10 +102,10 @@ export function requestedDeployment(request) {
       text,
     ) &&
     request
-      .split(/\r?\n/)
+      .split(/\r?\n|(?<=[.!])\s+/)
       .map(normalize)
       .some((line) =>
-        /^(?:(?:faca|realize|execute)\s+(?:as mudancas necessarias|os ajustes necessarios|as melhorias|todos os testes)(?:\s+e\s+(?:todos os testes|as validacoes|os testes))?|pode implementar)\s+e\s+(?:publique|publica|publicar)\s+(?:(?:em|como)\s+)?(?:uma\s+|a\s+)?(?:nova|proxima)\s+versao[.!]?$/.test(
+        /^(?:(?:(?:faca|realize|execute)\s+(?:as mudancas necessarias|os ajustes necessarios|as melhorias|todos os testes)(?:\s+e\s+(?:todos os testes|as validacoes|os testes))?|pode implementar)\s+e\s+|depois\s+|apos\s+os\s+ajustes\s+e\s+(?:os\s+)?testes\s+)(?:publique|publica|publicar)\s+(?:(?:em|como)\s+)?(?:uma\s+|a\s+)?(?:nova|proxima)\s+versao[.!]?$/.test(
           line,
         ),
       );
@@ -119,9 +128,10 @@ export function requestedDeployment(request) {
     /^primeiro passo entao e corrigir\b[^\n?]*\bfazer merge\b[^\n?]*,\s*fazer deploy\b/.test(
       withoutCourtesy,
     ) && !/\b(?:nao|sem)\s+fazer deploy\b/.test(withoutCourtesy);
-  const releaseDirective = /\bpreciso que crie (?:uma |a )?nova versao\s+v?\d+\.\d+\b/.test(
-    withoutCourtesy,
-  );
+  const releaseDirective =
+    /^(?:resolva essas pendencias,\s*)?preciso que crie (?:uma |a )?nova versao\s+v?\d+\.\d+\b/.test(
+      withoutCourtesy,
+    );
   const proceedToVersion =
     /^(?:pode\s+)?(?:seguir|continue|avancar)\s+para\s+(?:a\s+)?v\d+\.\d+\b/.test(withoutCourtesy);
   const finalAdjustmentsToPublish =
@@ -163,7 +173,7 @@ export function requestedDeployment(request) {
     finalAdjustmentsToPublish ||
     implementAndPublish ||
     shortPublicationVersion !== null;
-  if (!direct || /\?/.test(text) || waitsForAuthorization)
+  if (!direct || (/\?/.test(text) && !implementAndPublish) || waitsForAuthorization)
     return { authorized: false, reason: "not-a-direct-deployment-request" };
   const noRelease =
     /\b(?:sem|nao)\s+(?:(?:quero|criar|fazer|publicar|publique|crie|faca)\s+)?(?:(?:um|uma|o|a|novo|nova)\s+)*(?:release|nova versao|proxima versao|versao)\b/.test(

package/templates/.agents/skills/zaip-skill-github-deploy/scripts/deploy-publication-intent.test.mjs

@@ -11,6 +11,39 @@ const builder = {
   workspaceVersion: "4.5.0",
 };
 const input = (request, identity) => ({ request, identity });
+
+test("accepts publication after technical adjustments and tests, preserving human approval conditions", () => {
+  const directive = "Após os ajustes e testes publique uma nova versão";
+  const request = `A nota ficou pior? Faça os ajustes necessários. ${directive}`;
+  assert.equal(resolveDeployment(input(request, builder)).mode, "release");
+  for (const rejected of [
+    `Ele disse: ${directive}`,
+    `"${directive}"`,
+    `${directive}?`,
+    `${directive} se eu aprovar`,
+    `${directive}. Aguarde minha autorização.`,
+    `Não publique. ${directive}`,
+    directive.replace("publique", "não publique"),
+    "Após minha revisão e autorização publique uma nova versão",
+  ])
+    assert.equal(resolveDeployment(input(rejected, builder)).mode, "none", rejected);
+});
+test("recognizes a separate publication sentence and preserves approval conditions", () => {
+  const request =
+    "Pode executar tudo e dê uma atenção especial sobre eficiência e prevençao de retrabalho. Quero nota 9. Depois publique a nova versão";
+  assert.equal(resolveDeployment(input(request, builder)).mode, "release");
+  for (const rejected of [
+    `Ele disse: ${request}`,
+    `Exemplo: ${request}`,
+    `"${request}"`,
+    `${request}?`,
+    `${request}. Aguarde minha aprovação.`,
+    `${request} se eu autorizar`,
+    `Não publique. ${request}`,
+    `Quando eu confirmar. ${request}`,
+  ])
+    assert.equal(resolveDeployment(input(rejected, builder)).mode, "none", rejected);
+});
 test("recognizes the current implementation and publication request without inventing authority", () => {
   const directive = "pode implementar e publica como nova versão";
   assert.equal(resolveDeployment(input(directive, builder)).mode, "release");
@@ -54,3 +87,19 @@ test("implementation plus publication accepts a literal paragraph but not quotat
   ])
     assert.equal(resolveDeployment(input(rejected, builder)).mode, "none", rejected);
 });
+
+test("all publication routes reject human holds and quoted or reported authority", () => {
+  for (const request of [
+    "Publique a v5.8. Aguarde minha autorização.",
+    "Publique a v5.8. Espere minha aprovação.",
+    "Ele disse: preciso que crie uma nova versão v5.8",
+    '"Preciso que crie uma nova versão v5.8"',
+    "Preciso que crie uma nova versão v5.8. Só publique com minha confirmação.",
+  ])
+    assert.equal(resolveDeployment(input(request, builder)).mode, "none", request);
+  assert.equal(resolveDeployment(input("Publique a v5.8", builder)).npm_publication, true);
+  assert.equal(
+    resolveDeployment(input("Preciso que crie uma nova versão v5.8", builder)).mode,
+    "release",
+  );
+});

package/templates/.agents/skills/zaip-skill-github-deploy/scripts/framework-identity.mjs

@@ -0,0 +1,30 @@
+import { existsSync, readFileSync } from "node:fs";
+import { resolve } from "node:path";
+
+export function isFrameworkRepository(repository) {
+  const manifest = resolve(repository, "package.json");
+  if (!existsSync(manifest) || !existsSync(resolve(repository, "packages/core/src/config.ts")))
+    return false;
+  try {
+    return JSON.parse(readFileSync(manifest, "utf8")).name === "@zaip-ai/aios";
+  } catch {
+    return false;
+  }
+}
+
+export function isCanonicalMainBuilder(repository, git) {
+  if (!isFrameworkRepository(repository)) return false;
+  try {
+    const origin = git(repository, ["remote", "get-url", "origin"]).trim();
+    const cli = JSON.parse(
+      readFileSync(resolve(repository, "public-cli/packages/cli/package.json"), "utf8"),
+    );
+    return (
+      /^(?:git@github\.com:|https:\/\/github\.com\/|ssh:\/\/git@github\.com\/)zaip-ai\/zaip-aios(?:\.git)?$/.test(
+        origin,
+      ) && cli.name === "@zaip-ai/cli"
+    );
+  } catch {
+    return false;
+  }
+}

package/templates/.agents/skills/zaip-skill-github-deploy/scripts/github-deploy-contract.test.mjs

@@ -15,6 +15,7 @@ const managedDeployFiles = [
   "skills/zaip-skill-github-deploy/scripts/consumer-release-preparation.test.mjs",
   "skills/zaip-skill-github-deploy/scripts/github-deploy-contract.test.mjs",
   "skills/zaip-skill-github-deploy/scripts/preflight.mjs",
+  "skills/zaip-skill-github-deploy/scripts/framework-identity.mjs",
   "skills/zaip-skill-github-deploy/scripts/preflight.test.mjs",
   "skills/zaip-skill-github-deploy/scripts/deploy-contract.mjs",
   "skills/zaip-skill-github-deploy/scripts/deploy-contract.test.mjs",

package/templates/.agents/skills/zaip-skill-github-deploy/scripts/preflight.mjs

@@ -4,6 +4,7 @@ import { spawnSync } from "node:child_process";
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, isAbsolute, relative, resolve } from "node:path";
+import { isCanonicalMainBuilder, isFrameworkRepository } from "./framework-identity.mjs";
 import { parseDocument } from "./yaml-parser.mjs";
 
 const options = parseArguments(process.argv.slice(2));
@@ -240,7 +241,10 @@ function configuredDeployment(repository) {
     fail(`project.yaml deploy.branch is invalid: ${validationBranch}`);
   if (!isValidBranch(repository, protectedProductionBranch))
     fail(`project.yaml deploy.production_branch is invalid: ${protectedProductionBranch}`);
-  if (validationBranch === "main" || validationBranch === protectedProductionBranch)
+  if (
+    (validationBranch === "main" || validationBranch === protectedProductionBranch) &&
+    !(validationBranch === "main" && isCanonicalMainBuilder(repository, git))
+  )
     fail("project.yaml deploy.branch is framework-only and must not equal the production branch");
   return {
     framework: validationBranch,
@@ -251,17 +255,6 @@ function configuredDeployment(repository) {
   };
 }
 
-function isFrameworkRepository(repository) {
-  const manifest = resolve(repository, "package.json");
-  if (!existsSync(manifest) || !existsSync(resolve(repository, "packages/core/src/config.ts")))
-    return false;
-  try {
-    return JSON.parse(readFileSync(manifest, "utf8")).name === "@zaip-ai/aios";
-  } catch {
-    return false;
-  }
-}
-
 function isValidBranch(repository, branch) {
   if (
     branch.length > 255 ||

package/templates/.agents/skills/zaip-skill-github-deploy/scripts/preflight.test.mjs

@@ -15,7 +15,7 @@ test("standalone consumer resolves fresh project targets without node_modules",
     const scripts = join(root, ".agents/skills/zaip-skill-github-deploy/scripts");
     mkdirSync(scripts, { recursive: true });
     mkdirSync(join(root, ".agents/config"), { recursive: true });
-    for (const file of ["preflight.mjs", "yaml-parser.mjs"])
+    for (const file of ["preflight.mjs", "yaml-parser.mjs", "framework-identity.mjs"])
       copyFileSync(join(import.meta.dirname, file), join(scripts, file));
     const run = (...args) =>
       spawnSync(process.execPath, [join(scripts, "preflight.mjs"), "--repository", root, ...args], {
@@ -83,6 +83,17 @@ test("standalone consumer resolves fresh project targets without node_modules",
     assert.match(run("--resolve-branch", "--scope", "database").stderr, /literal beta/);
     config("deploy: { branch: main, allow_production: true }\n");
     assert.match(run("--resolve-branch", "--scope", "framework").stderr, /framework-only/);
+    mkdirSync(join(root, "public-cli/packages/cli"), { recursive: true });
+    writeFileSync(join(root, "public-cli/packages/cli/package.json"), '{"name":"@zaip-ai/cli"}\n');
+    git("remote", "add", "origin", "git@github.com:zaip-ai/zaip-aios.git");
+    assert.equal(
+      JSON.parse(run("--resolve-branch", "--scope", "framework", "--branch", "main").stdout)
+        .configured_branch,
+      "main",
+    );
+    git("remote", "set-url", "origin", "git@github.com:example/consumer.git");
+    assert.match(run("--resolve-branch", "--scope", "framework").stderr, /framework-only/);
+    git("remote", "remove", "origin");
     for (const source of [
       "deploy: { branch: null, production_branch: production }\n",
       "deploy: { branch: beta, validation_branch: staging }\n",

package/templates/.agents/skills/zaip-skill-lifecycle-closure/references/post-publication-task-first.md

@@ -46,6 +46,8 @@ prova de 5.3 para 5.2, trocar SHA ou alterar a Evidence. A fronteira entre candi
 original e publicação continua limitada às alterações de registros admitidas.
 Alterações posteriores do produto não são atribuídas ao candidato antigo.
 
+Quando existe um reparo de publicador posterior à tag, a fronteira exige inventário exato de controle, todos os commits intermediários sem merge e ciclo congelado idêntico. O SHA do pacote e seu CI permanecem imutáveis. O publicador manual precisa ser workflow_dispatch em main no SHA do reparo, com CI push próprio aprovado; evento, branch, repositório ou SHA divergente continuam recusados. Assets e bytes npm são verificados independentemente. Essa compatibilidade não concede aceite retroativo nem remove a Decision humana específica do recibo histórico.
+
 ## Procedimento canônico
 
 1. Inspecione somente os IDs envolvidos, a revisão atual e as evidências originais.

package/templates/.agents/skills/zaip-skill-task/references/commit-policy.md

@@ -37,5 +37,5 @@ release-cycle advance of its tagged product, plus records. The validator checks
 the product SHA ancestry, tag, causal Task/Change/Execution identity, matching
 terminal states and frozen cycle owner. Previous history and unrelated fields
 must remain unchanged. This does not approve or complete the Task and does not
-authorize new product changes. Remote GitHub/npm proof remains the responsibility
+authorize new product changes. A publisher recovery must preserve the frozen cycle, exact package tag and ancestry, single-parent repair history, a restricted control-path inventory and a positive repair CI identity. Every intermediate commit is inspected, including reverted edits; package/manifests/signing-policy changes are rejected. The candidate and publication gates validate the same local boundary. Remote GitHub/npm proof remains the responsibility
 of the protected publication workflow.

package/templates/.agents/zaip-aios/VERSION

@@ -1 +1 @@
-5.6
+5.8