@zaip-ai/cli 6.0.0 → 6.1.0

package/templates/.agents/runtime/checksums.sha256

@@ -1,11 +1,11 @@
 b146bd0c7c60b1ab43c4f71e0b1d2262c6df6da6f7053a0425f834ccb77a6b48  LICENSE
 bc02cba77e8d51e5c580f43668863dc868eda66f1ff663bfaa49fcf3ca16320e  THIRD_PARTY_NOTICES.md
-54ef76332b31df830699e9d4138396885ab72bae260a034a81ff02bf32d8e90a  VERSION
-ddbff8be694f85ed3c7c658e81262b404512a5a7296064fd4a8cb066a00841c8  bin/zaip.mjs
-c18bacd1e71ed31c2c618f1ff61f0f9431caf08a08c37a56c32168a63d04299a  manifest.json
+0fd114b03452dc32b26bcb9f1094cb19bf4e3a477cd04cfe91f4a87e19fac5c1  VERSION
+6d1cc530a9a64953aecfd04d9da120c9c6e6d4757186ebe65ee1692d36823d0c  bin/zaip.mjs
+04a21ebb91c3d7604355c148b97493c87ab6c19d9752a3af70e955fcad1b8f68  manifest.json
 7f89219d7c567c82a51679ad136d84364bded7ac659492537e125d33b1d58a7a  migrations/001-layout-v1.json
 5f8c48b286d0b44d8fbb57a9a5d009a8a500439aa3148d750b8f193f72995c9f  migrations/002-layout-v2.json
 2bd34b2f5c253a2167d9addaf1994167308ac0bb4fec22a794c8a5b488205278  pnpm-lock.sha256
-d5b44af1e95a4824f13c352e06cc7589f61f8d6b74ec3db6cfd9a634c963da45  provenance.json
-5415a62b26f923acdb01e27c154a0149d091e2f76d9993c49dcf39523c1e1d55  sbom.cdx.json
+9aed95685574b62ef2c971e6215ce06e5d67e27529c6442ba28a2b260090a1af  provenance.json
+6484ffb88d509aae8bda716a1cf4fae2a0e930a77c2d661d6836988d260e0dc1  sbom.cdx.json
 b3ffedf9e146be802a15b4009f33e031dec3071ca1525e12c67606fd964a3067  schemas/contracts.schema.json

package/templates/.agents/runtime/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 2,
   "name": "zaip-aios",
-  "version": "6.0.0",
+  "version": "6.1.0",
   "node": ">=22",
   "files": [
     "LICENSE",

package/templates/.agents/runtime/provenance.json

@@ -2,10 +2,10 @@
   "schema_version": 1,
   "statement_type": "self_reported_build_integrity",
   "authenticity": "unverified",
-  "version": "6.0.0",
+  "version": "6.1.0",
   "source_origin": "zaip-aios:local-build",
   "lockfile_sha256": "b5e11351951654d41aa78dc858d43990a12964ba4051a070613ac8b11bc73a27",
-  "sbom_sha256": "5415a62b26f923acdb01e27c154a0149d091e2f76d9993c49dcf39523c1e1d55",
-  "runtime_sha256": "7867c2f3ccd8add72390283cd92a07f329f72130040805133c0b9884e6edad1c",
-  "statement_sha256": "27a598da5c7bf836d20a5605b47e919627930bb9b6bd3107c9d6bf9994301817"
+  "sbom_sha256": "6484ffb88d509aae8bda716a1cf4fae2a0e930a77c2d661d6836988d260e0dc1",
+  "runtime_sha256": "4e9d9571080c63e222fe6e88eadf5b453238bb698d90bf276064f143d302f5f7",
+  "statement_sha256": "d5beddbd620e2e0f20f0a3d43b4acab4790862b2c7c6f0e5b613a09779cc1461"
 }

package/templates/.agents/runtime/sbom.cdx.json

@@ -6,7 +6,7 @@
     "component": {
       "type": "application",
       "name": "zaip-aios",
-      "version": "6.0.0"
+      "version": "6.1.0"
     }
   },
   "components": [

package/templates/.agents/skills/zaip-skill-github-deploy/SKILL.md

@@ -41,6 +41,7 @@ Commit subjects retain `[CODEX|CLAUDE] [P:XXXX] [S:XXXX] [T:XXXX] <Task title>`
 - **Commits:** use `scripts/guarded-commits.mjs` with its reviewed CLI and valid scoped checks to push the exact SHA to the configured branch. Do not enter release qualification, change a version or create a Release merely for this mode. Installer/security work still runs checks directly required by its impact.
 - **Release:** read [release identity](references/release-identity.md), then compose `$zaip-skill-release-qualification` and [local preparation](../zaip-skill-release-qualification/references/local-preparation.md) for the actual distribution surface. Verified builder uses `scripts/local-release-deploy.mjs`; consumers create only their GitHub Release under their own checks, without builder npm, signing-key or protected-policy requirements.
 - Before release versioning, verify whether the candidate SHA is already published. The same published SHA is a no-op, never an empty new Release. Resume a verified draft or retry only observed incomplete delivery with the exact same SHA and identity. A changed candidate requires new identity/evidence.
+- An explicitly authorized corrective patch uses product `N.N`, package `N.N.P` with `P > 0`, and a new immutable tag `vN.N.P`. Preserve the original tag/package and the next open cycle. Require the signed patch policy, exact base publication, observed maintenance actor, reviewed paths and all candidate/artifact/remote checks. Record verified delivery in the separate patch ledger; never use ordinary cycle advance for a patch or infer patch authority from a retry.
 - Review detailed UTF-8 notes only for the Release, following [release notes](references/release-notes.md). Observe the complete previous-Release-to-candidate Git range as source/evidence, including changes beyond the current chat. Validate the inventory and compare the published body byte-for-byte; never use generated notes alone.
 
 Dense source/template/package/TGZ gates belong to builder release qualification. Generic commits use targeted validation, without an automatic full suite, test-count cap or Task wallclock limit. Apply the frozen autonomy profile: balanced permits 10 executions total and 3 replans; tests/tool calls are not executions and resumption does not reset the budget. Do not add an independent five-cycle limit.
@@ -51,13 +52,13 @@ For post-receipt rapid reuse in the verified builder, follow `docs/quality/v49-d
 
 Compare the exact pushed SHA with the configured remote ref. If a push result is uncertain, read remote state before retrying. Observe required checks for that SHA, inspect failed steps and repair their evidenced cause within the frozen profile; do not repeat unchanged failures or bypass a gate.
 
-Commits success requires the scoped exact-SHA push and its required checks. Consumer release success additionally requires the verified tag, SHA and reviewed body. Builder release success additionally requires its verified signed assets, terminal `publish-cli.yml` success and registry version, dist-tag and integrity for `@zaip-ai/cli@N.N.0`. A Release with failed or unobserved npm is partial. An unavailable check stays unconfirmed.
+Commits success requires the scoped exact-SHA push and its required checks. Consumer release success additionally requires the verified tag, SHA and reviewed body. Builder release success additionally requires its verified signed assets, terminal `publish-cli.yml` success and registry version, dist-tag and integrity for the signed target package (`@zaip-ai/cli@N.N.0` in standard mode, `@zaip-ai/cli@N.N.P` in patch mode). A Release with failed or unobserved npm is partial. An unavailable check stays unconfirmed.
 
 Give a brief chat result with the delivered mode, branch/SHA, Release link when applicable and any actual pending gate. Keep detailed change notes in the Release and sanitized evidence in the owned lifecycle. Formal closure belongs to the responsible orchestrator/finalizer. This GitHub workflow grants no provider deploy, database production, SQL application or host power action.
 
 ## Pre-main candidate and release-cycle audit
 
-For the verified framework builder, release delivery requires `.agents/config/release-cycle.json` frozen at the version being released, a clean candidate SHA, remote `main` as its ancestor, and no stale branch/worktree. Every owner SPEC DAG predecessor must be completed. The sole open exception is the critical release-only Task coordinator delegated from the owner SPEC/Execution/macro Run; its exact lineage, predecessor states and candidate records are authenticated at freeze, audit and advance. Other current-release Task/PRD/SPEC work blocks. `scripts/local-release-deploy.mjs` runs fixed local checks at the exact SHA without creating a remote candidate branch. It then pushes only `main` and waits for the exact successful `main` push run of `pre-main-candidate.yml` before publishing a Release. A critical framework commit follows the same branch-free sequence through `guarded-commits.mjs`. Failed local checks block the push; failed or unavailable remote CI blocks Release publication and requires repair on `main`.
+In standard mode, verified framework builder release delivery requires `.agents/config/release-cycle.json` frozen at the version being released, a clean candidate SHA, remote `main` as its ancestor, and no stale branch/worktree. Every owner SPEC DAG predecessor must be completed. The sole open exception is the critical release-only Task coordinator delegated from the owner SPEC/Execution/macro Run; its exact lineage, predecessor states and candidate records are authenticated at freeze, audit and advance. Other current-release Task/PRD/SPEC work blocks. `scripts/local-release-deploy.mjs` runs fixed local checks at the exact SHA without creating a remote candidate branch. It then pushes only `main` and waits for the exact successful `main` push run of `pre-main-candidate.yml` before publishing a Release. A critical framework commit follows the same branch-free sequence through `guarded-commits.mjs`. Failed local checks block the push; failed or unavailable remote CI blocks Release publication and requires repair on `main`.
 
 When the same authorized direct Task root implements the product repair and release, the explicit integrated coordinator mode in `$zaip-skill-release-qualification` can freeze while that Task and Run are active. It keeps the clean exact-SHA, only-main, no-other-work, independent validation and publication gates. Record this selection in the frozen cycle; it does not create a second Task or client turn.
 

package/templates/.agents/skills/zaip-skill-github-deploy/references/release-identity.md

@@ -37,7 +37,9 @@ Generic consumer deploy under auto selects commits. Only release mode enters thi
 
 Recognize framework source only through approved origin `zaip-ai/zaip-aios`, root package `@zaip-ai/aios` and public CLI package `@zaip-ai/cli`. Names or installed framework files do not prove builder identity; contradictory signals block classification.
 
-Select the next allowed `N.N` from observed release history, then update canonical root `package.json#version` to `N.N.0` and align the declared public/CLI manifests through the version tooling before committing and qualifying. The root manifest is the candidate's version source. Do not allocate an independent GitHub tag or replace version strings broadly. Retries retain the already-assigned version.
+For an ordinary release, select the next allowed `N.N` from observed release history, then update canonical root `package.json#version` to `N.N.0` and align the declared public/CLI manifests through the version tooling before committing and qualifying. The root manifest is the candidate's version source. Do not allocate an independent GitHub tag or replace version strings broadly. Retries retain the already-assigned version.
+
+For an explicitly authorized corrective patch, use product `N.N`, package `N.N.P` (`P > 0`) and tag `vN.N.P`. Apply this identity with the version updater's explicit patch option. The signed patch policy binds the mapping, immutable base tag/SHA, source base and reviewed file inventory. A changed package never reuses the original tag or npm version. The next ordinary open cycle stays unchanged; patch delivery has a separate verified ledger. Local manifests describe the candidate, not publication.
 
 Protected delivery uses `scripts/local-release-deploy.mjs`. First resolve mode in the Task's local area; only release mode may run signed `local-release-preparation.mjs prepare`. After that preparation successfully creates the receipt directory, save the actual UTF-8 human request at `<output-dir>/deploy-request.txt` and resolve its final-candidate contract to `<output-dir>/deploy-contract.json`. Do not pre-create the output directory just to write these files: preparation treats an existing directory as an immutable receipt cache. The resolver retains `--repository ROOT --request-file FILE --plan-file FILE`; the release helper reads only those fixed paths before reusing preparation or using publication credentials. Do not add request/plan CLI arguments or expand the installed hook allowlist. Resolve against the final committed candidate identity; stale contracts block delivery.
 

package/templates/.agents/skills/zaip-skill-github-deploy/scripts/deploy-contract-patch.test-support.mjs

@@ -0,0 +1,25 @@
+import assert from "node:assert/strict";
+import { repositoryKind } from "./deploy-contract.mjs";
+export function assertPatchManifestVersions(builder) {
+  assert.equal(
+    repositoryKind({
+      ...builder,
+      rootVersion: "6.0.1",
+      cliVersion: "6.0.1",
+      workspaceVersion: "6.0.1",
+    }),
+    "builder",
+  );
+  for (const version of ["06.0.1", "6.0.01", "6.0.1-beta", "6.0"]) {
+    assert.throws(
+      () =>
+        repositoryKind({
+          ...builder,
+          rootVersion: version,
+          cliVersion: version,
+          workspaceVersion: version,
+        }),
+      /versions/,
+    );
+  }
+}

package/templates/.agents/skills/zaip-skill-github-deploy/scripts/deploy-contract.mjs

@@ -57,7 +57,7 @@ export function repositoryKind({
     "Conflicting builder identity; repository and package manifests must agree",
   );
   assert(
-    /^\d+\.\d+\.0$/.test(rootVersion ?? "") &&
+    /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)$/.test(rootVersion ?? "") &&
       rootVersion === cliVersion &&
       rootVersion === workspaceVersion,
     "Builder manifest versions must agree",
@@ -77,6 +77,16 @@ export function requestedDeployment(request) {
     "A bounded current human request is required",
   );
   const text = normalize(request);
+  // An explicitly named numeric patch keeps its separate signed patch route.
+  // Never truncate an ordinary release suffix into a minor version.
+  const ordinaryVersions = text.replace(
+    /\bpatch\s+v(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?![\w.+-])/g,
+    "patch",
+  );
+  if (ordinaryVersions !== text && [...text.matchAll(/\bv?\d+\.\d+/g)].length !== 1)
+    return { authorized: false, reason: "conflicting-explicit-release-versions" };
+  if (/\bv\d+\.\d+(?:\.[a-z0-9_]|[-+][a-z0-9_]|[a-z_])/.test(ordinaryVersions))
+    return { authorized: false, reason: "unsupported-explicit-release-version" };
   // Provenance and explicit human holds constrain every authorization route.
   const quotedOrReported =
     /[`"'“”]/.test(request) || /\b(?:disse|citou|exemplo|quoted|said)\b/.test(text);
@@ -124,6 +134,10 @@ export function requestedDeployment(request) {
   // Only a direct publication imperative is executable. References, questions and quoted
   // historical instructions are not authority; unknown wording never upgrades the mode.
   const withoutCourtesy = text.replace(/^(?:(?:ok|por favor|agora|please)[, ]+)+/, "");
+  const finalAdjustmentsAndPublish =
+    /^(?:faca|realize|execute)\s+(?:esses|os)\s+(?:ultimos\s+)?(?:ajustes|ajuates)(?:\s+necessarios)?\s+e\s+publique\s+(?:a\s+)?(?:versao\s+)?v(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)[.!]?$/.test(
+      withoutCourtesy,
+    );
   const sequencedDirect =
     /^primeiro passo entao e corrigir\b[^\n?]*\bfazer merge\b[^\n?]*,\s*fazer deploy\b/.test(
       withoutCourtesy,
@@ -171,6 +185,7 @@ export function requestedDeployment(request) {
     releaseDirective ||
     proceedToVersion ||
     finalAdjustmentsToPublish ||
+    finalAdjustmentsAndPublish ||
     implementAndPublish ||
     shortPublicationVersion !== null;
   if (!direct || (/\?/.test(text) && !implementAndPublish) || waitsForAuthorization)
@@ -207,7 +222,7 @@ export function requestedDeployment(request) {
     /^(?:(?:pode|podemos)\s+)?(?:(?:faca|fazer|faz|realize|execute|do)\s+)?(?:push|commit)\b/.test(
       withoutCourtesy,
     );
-  const versions = [...text.matchAll(/\bv((?:0|[1-9]\d*)\.(?:0|[1-9]\d*))(?![.\d])/g)].map(
+  const versions = [...text.matchAll(/\bv((?:0|[1-9]\d*)\.(?:0|[1-9]\d*))(?!\d|\.\d)/g)].map(
     (x) => x[1],
   );
   if (releaseDirective)

package/templates/.agents/skills/zaip-skill-github-deploy/scripts/deploy-contract.test.mjs

@@ -11,6 +11,7 @@ import {
   resolveDeployment,
   verifyContract,
 } from "./deploy-contract.mjs";
+import { assertPatchManifestVersions } from "./deploy-contract-patch.test-support.mjs";
 import { criticalTaskInRange, guardedCommits } from "./guarded-commits.mjs";
 
 const builder = {
@@ -193,6 +194,7 @@ test("preferences are project-owned; one-shot overrides, scope and invalid confi
 });
 test("builder identity requires origin plus all three agreeing manifests", () => {
   assert.equal(repositoryKind(builder), "builder");
+  assertPatchManifestVersions(builder);
   assert.equal(repositoryKind(consumer), "consumer");
   for (const identity of [
     { ...builder, origin: consumer.origin },

package/templates/.agents/skills/zaip-skill-github-deploy/scripts/deploy-publication-intent.test.mjs

@@ -12,6 +12,49 @@ const builder = {
 };
 const input = (request, identity) => ({ request, identity });
 
+test("explicit numeric patch retains its separate signed route without minor truncation", () => {
+  const plan = resolveDeployment(input("Publique o patch v6.0.1 com Release e npm", builder));
+  assert.equal(plan.mode, "release");
+  assert.equal(plan.phase, "publish");
+  assert.equal(plan.version, null);
+  for (const request of [
+    "Publique o patch v6.0.1-rc1 com Release e npm",
+    "Publique o patch v6.0.1.beta com Release e npm",
+    "Publique o patch v6.0.1 se eu aprovar",
+    '"Publique o patch v6.0.1 com Release e npm"',
+    "Publique a v6.1 e o patch v6.0.1",
+    "Publique o patch v6.0.1 e a v6.1",
+    "Publique o patch v6.0.1 e o patch v6.0.2",
+    "Publique o patch v6.0.1 e a versão 6.1",
+  ])
+    assert.equal(resolveDeployment(input(request, builder)).mode, "none", request);
+});
+
+test("final adjustments and an explicit minor publication preserve bounded authority", () => {
+  const directive = "Ok, faca esses ultimos ajuates e publique a versao v6.1";
+  for (const request of [directive, "Faça os últimos ajustes e publique a versão v6.1."]) {
+    const plan = resolveDeployment(input(request, builder));
+    assert.equal(plan.mode, "release");
+    assert.equal(plan.phase, "publish");
+    assert.equal(plan.version, "6.1");
+    assert.equal(plan.scope, "current-work");
+  }
+  for (const request of [
+    `${directive}?`,
+    `Ele disse: ${directive}`,
+    `"${directive}"`,
+    `${directive} se eu aprovar`,
+    `${directive}. Aguarde minha confirmação.`,
+    directive.replace("e publique", "e não publique"),
+    directive.replace("v6.1", "v6.1.1"),
+    `${directive} e a v6.2`,
+    "publique a versão v6.1.beta",
+    "publique a versão v6.1-rc1",
+    "publique a versão v6.1.1",
+  ])
+    assert.equal(resolveDeployment(input(request, builder)).mode, "none", request);
+});
+
 test("explicit major after adjustments preserves literal authority and refuses human holds", () => {
   const directive =
     "Faça todos os ajuates e publique a v6.0 com uma versao final pronta pra produção";

package/templates/.agents/skills/zaip-skill-release-qualification/SKILL.md

@@ -11,6 +11,8 @@ Use after `$zaip-skill-github-deploy` resolves release mode, or when local prepa
 
 Preparation, verification and dry-run do not publish. The request's resolved route supplies publication authority separately.
 
+An explicitly authorized patch uses `--mode patch --package-version N.N.P` with product `--version N.N`. Its signed policy and receipt bind both identities, the base publication, observed actor, cycle snapshot and reviewed paths. The patch audit preserves the next open cycle; it does not freeze or advance that ordinary cycle. All exact-candidate, artifact, signature, remote CI and npm checks still apply. Follow the [release identity contract](../zaip-skill-github-deploy/references/release-identity.md) and record verified patch delivery separately.
+
 For readiness grades, load `RULE-PRODUCTION-READINESS` and apply
 `technical-essential-v1` from `docs/quality/production-readiness.md`. Grade 9
 requires the six essential criteria; grade 10 adds reviewed concurrency,

package/templates/.agents/skills/zaip-skill-release-qualification/references/local-preparation.md

@@ -94,6 +94,20 @@ These commands exist only in the source repository `zaip-ai/zaip-aios`. Values i
 must be replaced with the authorized candidate and external paths. GitHub version `N.N` maps
 to tag `vN.N` and package version `N.N.0`.
 
+For an explicitly authorized corrective patch, use `--mode patch --version N.N
+--package-version N.N.P` on the patch-aware preparation, staging and deploy
+commands. The signed schema-2 policy and schema-3 receipt bind the immutable base
+publication, observed delivery actor, exact paths and unchanged open product
+cycle. The patch ledger replaces ordinary cycle advance for this route. See
+[the patch contract](../../zaip-skill-github-deploy/references/release-identity.md).
+
+If an unpublished patch candidate needs a corrected path inventory, `stage-policy`
+accepts `--recover-unpublished-from-sha256 <old-policy-sha256>`. Only
+`allowed_paths` may change. Recovery requires the unchanged remote base, absent
+tag and Release, authenticated GitHub access and a successful npm inventory
+without that version. It preserves a verified private backup and requires a new
+signed receipt; unavailable publication checks never count as absence.
+
 ```text
 node scripts/local-release-preparation.mjs keygen --output-dir <new-stable-private-key-directory>
 node scripts/local-release-preparation.mjs bootstrap --trust-store <new-stable-private-key-directory>/trust --public-key <new-stable-private-key-directory>/release-public.pem --key-id <new-key-id> --channels latest

package/templates/.agents/zaip-aios/VERSION

@@ -1 +1 @@
-6.0
+6.1