@zaip-ai/cli 7.5.0 → 7.6.0

package/dist/services/install-target-windows.test.js

@@ -0,0 +1,39 @@
+import { mkdir, mkdtemp, readdir, rm, symlink } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { afterEach, expect, it, vi } from "vitest";
+import { executeInit } from "../commands/init.js";
+import { installAgentsTemplate } from "./install-agents-template.js";
+import { resolveInstallTarget } from "./install-target.js";
+const roots = [];
+afterEach(async () => {
+    vi.unstubAllEnvs();
+    await Promise.all(roots.splice(0).map((root) => rm(root, { recursive: true, force: true })));
+});
+it.skipIf(process.platform !== "win32")("rejects direct/junction/API/CLI targets before mutation even with force", async () => {
+    const parent = await mkdtemp(join(tmpdir(), "zaip-target-"));
+    roots.push(parent);
+    const sensitive = join(parent, "protected"), alias = join(parent, "alias");
+    await mkdir(sensitive);
+    await symlink(sensitive, alias, "junction");
+    vi.stubEnv("ProgramData", sensitive);
+    for (const path of [sensitive, alias]) {
+        await expect(resolveInstallTarget(path)).rejects.toThrow("unsafe_install_target");
+        for (const force of [false, true]) {
+            await expect(installAgentsTemplate({ cwd: path, force, yes: true })).rejects.toThrow("unsafe_install_target");
+            await expect(executeInit(undefined, { force, yes: true }, "7.5.0", { cwd: path })).rejects.toThrow("unsafe_install_target");
+        }
+        expect(await readdir(sensitive)).toEqual([]);
+    }
+});
+it.skipIf(process.platform !== "win32")("rejects a sensitive Git ancestor discovered from a safe-looking child", async () => {
+    const parent = await mkdtemp(join(tmpdir(), "zaip-ancestor-"));
+    roots.push(parent);
+    await mkdir(join(parent, ".git"));
+    const child = join(parent, "child");
+    await mkdir(child);
+    vi.stubEnv("USERPROFILE", parent);
+    await expect(resolveInstallTarget(child)).rejects.toThrow("unsafe_install_target");
+    expect((await readdir(parent)).sort()).toEqual([".git", "child"]);
+});
+//# sourceMappingURL=install-target-windows.test.js.map

package/dist/services/install-target-windows.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-target-windows.test.js","sourceRoot":"","sources":["../../src/services/install-target-windows.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,KAAK,GAAa,EAAE,CAAC;AAC3B,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC,CAAC,CAAC;AACH,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CACrC,yEAAyE,EACzE,KAAK,IAAI,EAAE;IACT,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7D,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EACzC,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACvB,MAAM,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5C,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAClF,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,MAAM,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAClF,uBAAuB,CACxB,CAAC;YACF,MAAM,MAAM,CACV,WAAW,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CACrE,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC,CACF,CAAC;AACF,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CACrC,uEAAuE,EACvE,KAAK,IAAI,EAAE;IACT,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;IACnB,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACnF,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AACpE,CAAC,CACF,CAAC"}

package/dist/services/install-target.d.ts

@@ -0,0 +1,6 @@
+import { type ProjectRootResult } from "./find-project-root.js";
+/** Pure policy, also used for synthetic Windows cases on other development hosts. */
+export declare function assertWindowsInstallLocation(path: string, environment?: NodeJS.ProcessEnv, home?: string, resolvedSensitiveRoots?: readonly string[]): void;
+/** Init-only boundary: check both the requested alias and the selected physical Git root. */
+export declare function resolveInstallTarget(directory: string): Promise<ProjectRootResult>;
+//# sourceMappingURL=install-target.d.ts.map

package/dist/services/install-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-target.d.ts","sourceRoot":"","sources":["../../src/services/install-target.ts"],"names":[],"mappings":"AAGA,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AASjF,qFAAqF;AACrF,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,WAAW,GAAE,MAAM,CAAC,UAAwB,EAC5C,IAAI,SAAY,EAChB,sBAAsB,GAAE,SAAS,MAAM,EAAO,GAC7C,IAAI,CAuDN;AAED,6FAA6F;AAC7F,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA4BxF"}

package/dist/services/install-target.js

@@ -0,0 +1,89 @@
+import { realpath } from "node:fs/promises";
+import { homedir } from "node:os";
+import { resolve, win32 } from "node:path";
+import { findProjectRoot } from "./find-project-root.js";
+function windowsPath(path) {
+    return win32
+        .resolve(path.replace(/^\\\\\?\\UNC\\/i, "\\\\").replace(/^\\\\\?\\/, ""))
+        .replace(/[\\/]+$/, "")
+        .toLowerCase();
+}
+/** Pure policy, also used for synthetic Windows cases on other development hosts. */
+export function assertWindowsInstallLocation(path, environment = process.env, home = homedir(), resolvedSensitiveRoots = []) {
+    const spelling = path.replaceAll("/", "\\");
+    if (/^(?:\\\\[?.]\\|\\\?\?\\|\\(?:Device|GLOBALROOT|SystemRoot)(?:\\|$))/i.test(spelling) ||
+        /^\\\\[^\\]+\\[^\\]*\$(?:\\|$)/.test(spelling))
+        throw new Error(`unsafe_install_target: namespace de dispositivo ou compartilhamento administrativo não permitido: ${path}`);
+    const target = windowsPath(path);
+    const drive = win32.parse(win32.resolve(path)).root;
+    const profile = windowsPath(environment.USERPROFILE ?? home);
+    const exact = [
+        drive,
+        profile,
+        home,
+        win32.dirname(profile),
+        win32.dirname(home),
+        environment.PUBLIC,
+    ]
+        .filter((value) => Boolean(value))
+        .map(windowsPath);
+    const trees = [
+        win32.join(drive, "Windows"),
+        win32.join(drive, "Program Files"),
+        win32.join(drive, "Program Files (x86)"),
+        win32.join(drive, "ProgramData"),
+        win32.join(drive, "$Recycle.Bin"),
+        win32.join(drive, "System Volume Information"),
+        win32.join(profile, "AppData"),
+        win32.join(profile, ".ssh"),
+        win32.join(profile, ".codex"),
+        win32.join(profile, ".aws"),
+        environment.SystemRoot,
+        environment.windir,
+        environment.ProgramFiles,
+        environment["ProgramFiles(x86)"],
+        environment.ProgramW6432,
+        environment.ProgramData,
+        environment.APPDATA,
+        environment.LOCALAPPDATA,
+        environment.CODEX_HOME,
+        ...resolvedSensitiveRoots,
+    ]
+        .filter((value) => Boolean(value))
+        .map(windowsPath);
+    if (/^[a-z]:\\users\\[^\\]+$/i.test(target) ||
+        /^[a-z]:\\users\\[^\\]+\\(?:AppData|\.codex|\.aws|\.ssh)(?:\\|$)/i.test(target) ||
+        exact.includes(target) ||
+        trees.some((root) => target === root || target.startsWith(`${root}\\`)))
+        throw new Error(`unsafe_install_target: escolha uma pasta de projeto fora de diretórios sensíveis do Windows: ${path}`);
+}
+/** Init-only boundary: check both the requested alias and the selected physical Git root. */
+export async function resolveInstallTarget(directory) {
+    const requested = resolve(directory);
+    const physical = await realpath(requested);
+    const physicalHome = process.platform === "win32" ? await realpath(homedir()) : homedir();
+    if (process.platform === "win32") {
+        const resolvedRoots = await Promise.all([
+            process.env.SystemRoot,
+            process.env.ProgramFiles,
+            process.env["ProgramFiles(x86)"],
+            process.env.ProgramW6432,
+            process.env.ProgramData,
+            process.env.APPDATA,
+            process.env.LOCALAPPDATA,
+            process.env.CODEX_HOME,
+            win32.join(homedir(), ".ssh"),
+            win32.join(homedir(), ".aws"),
+        ]
+            .filter((value) => Boolean(value))
+            .map((path) => realpath(path).catch(() => path)));
+        assertWindowsInstallLocation(requested, process.env, physicalHome, resolvedRoots);
+        assertWindowsInstallLocation(physical, process.env, physicalHome, resolvedRoots);
+    }
+    const project = await findProjectRoot(physical);
+    const root = await realpath(project.root);
+    if (process.platform === "win32")
+        assertWindowsInstallLocation(root, process.env, physicalHome);
+    return { ...project, root };
+}
+//# sourceMappingURL=install-target.js.map

package/dist/services/install-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-target.js","sourceRoot":"","sources":["../../src/services/install-target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,eAAe,EAA0B,MAAM,wBAAwB,CAAC;AAEjF,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;SACzE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,4BAA4B,CAC1C,IAAY,EACZ,WAAW,GAAsB,OAAO,CAAC,GAAG,EAC5C,IAAI,GAAG,OAAO,EAAE,EAChB,sBAAsB,GAAsB,EAAE;IAE9C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5C,IACE,sEAAsE,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrF,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAE9C,MAAM,IAAI,KAAK,CACb,qGAAqG,IAAI,EAAE,CAC5G,CAAC;IACJ,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG;QACZ,KAAK;QACL,OAAO;QACP,IAAI;QACJ,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACtB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,WAAW,CAAC,MAAM;KACnB;SACE,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;SAClD,GAAG,CAAC,WAAW,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG;QACZ,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,qBAAqB,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,2BAA2B,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QAC3B,WAAW,CAAC,UAAU;QACtB,WAAW,CAAC,MAAM;QAClB,WAAW,CAAC,YAAY;QACxB,WAAW,CAAC,mBAAmB,CAAC;QAChC,WAAW,CAAC,YAAY;QACxB,WAAW,CAAC,WAAW;QACvB,WAAW,CAAC,OAAO;QACnB,WAAW,CAAC,YAAY;QACxB,WAAW,CAAC,UAAU;QACtB,GAAG,sBAAsB;KAC1B;SACE,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;SAClD,GAAG,CAAC,WAAW,CAAC,CAAC;IACpB,IACE,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC;QACvC,kEAAkE,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/E,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QAEvE,MAAM,IAAI,KAAK,CACb,gGAAgG,IAAI,EAAE,CACvG,CAAC;AACN,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1F,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC;YACE,OAAO,CAAC,GAAG,CAAC,UAAU;YACtB,OAAO,CAAC,GAAG,CAAC,YAAY;YACxB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,YAAY;YACxB,OAAO,CAAC,GAAG,CAAC,WAAW;YACvB,OAAO,CAAC,GAAG,CAAC,OAAO;YACnB,OAAO,CAAC,GAAG,CAAC,YAAY;YACxB,OAAO,CAAC,GAAG,CAAC,UAAU;YACtB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC;SAC9B;aACE,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CACnD,CAAC;QACF,4BAA4B,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;QAClF,4BAA4B,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAChG,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC"}

package/dist/services/install-target.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=install-target.test.d.ts.map

package/dist/services/install-target.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-target.test.d.ts","sourceRoot":"","sources":["../../src/services/install-target.test.ts"],"names":[],"mappings":""}

package/dist/services/install-target.test.js

@@ -0,0 +1,47 @@
+import { expect, it } from "vitest";
+import { assertWindowsInstallLocation } from "./install-target.js";
+const env = { USERPROFILE: "C:\\Users\\Alice", SystemRoot: "D:\\OS", ProgramData: "D:\\Shared" };
+it.each([
+    "C:\\",
+    "c:/users",
+    "C:\\Users\\Alice",
+    "C:\\Users\\Other",
+    "C:\\Windows\\System32",
+    "C:\\Program Files\\tool",
+    "C:\\ProgramData\\x",
+    "D:\\OS\\x",
+    "D:\\Shared\\x",
+    "C:\\Users\\Alice\\AppData\\Local\\Temp\\x",
+    "C:\\Users\\Alice\\.ssh\\x",
+    "\\\\?\\C:\\Windows\\System32",
+    "\\\\server\\share\\",
+    "C:\\Users\\Bob\\AppData\\Local\\Temp\\repo",
+    "C:\\Users\\Bob\\.codex\\repo",
+    "C:\\Users\\Bob\\.aws\\repo",
+    "C:\\Users\\Bob\\.ssh\\repo",
+    "\\\\localhost\\ADMIN$\\System32",
+    "\\\\localhost\\C$\\Windows",
+    "\\\\server\\IPC$\\x",
+    "\\\\.\\C:\\repo",
+    "\\\\?\\C:\\repo",
+    "\\\\?\\UNC\\server\\share\\repo",
+    "\\??\\C:\\repo",
+    "\\Device\\HarddiskVolume1\\repo",
+    "\\GLOBALROOT\\Device\\repo",
+])("rejects sensitive Windows location %s", (path) => {
+    expect(() => assertWindowsInstallLocation(path, env, env.USERPROFILE)).toThrow("unsafe_install_target");
+});
+it.each([
+    "C:\\Users\\Alice\\Documents\\repo",
+    "D:\\projects\\repo",
+    "C:\\Windows-project",
+    "\\\\server\\share\\repo",
+])("allows bounded project %s", (path) => {
+    expect(() => assertWindowsInstallLocation(path, env, env.USERPROFILE)).not.toThrow();
+});
+it("checks resolved protected roots as well as their environment spelling", () => {
+    expect(() => assertWindowsInstallLocation("D:\\physical-data\\repo", env, env.USERPROFILE, [
+        "D:\\physical-data",
+    ])).toThrow("unsafe_install_target");
+});
+//# sourceMappingURL=install-target.test.js.map

package/dist/services/install-target.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-target.test.js","sourceRoot":"","sources":["../../src/services/install-target.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAEnE,MAAM,GAAG,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AACjG,EAAE,CAAC,IAAI,CAAC;IACN,MAAM;IACN,UAAU;IACV,kBAAkB;IAClB,kBAAkB;IAClB,uBAAuB;IACvB,yBAAyB;IACzB,oBAAoB;IACpB,WAAW;IACX,eAAe;IACf,2CAA2C;IAC3C,2BAA2B;IAC3B,8BAA8B;IAC9B,qBAAqB;IACrB,4CAA4C;IAC5C,8BAA8B;IAC9B,4BAA4B;IAC5B,4BAA4B;IAC5B,iCAAiC;IACjC,4BAA4B;IAC5B,qBAAqB;IACrB,iBAAiB;IACjB,iBAAiB;IACjB,iCAAiC;IACjC,gBAAgB;IAChB,iCAAiC;IACjC,4BAA4B;CAC7B,CAAC,CAAC,uCAAuC,EAAE,CAAC,IAAI,EAAE,EAAE;IACnD,MAAM,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAC5E,uBAAuB,CACxB,CAAC;AACJ,CAAC,CAAC,CAAC;AACH,EAAE,CAAC,IAAI,CAAC;IACN,mCAAmC;IACnC,oBAAoB;IACpB,qBAAqB;IACrB,yBAAyB;CAC1B,CAAC,CAAC,2BAA2B,EAAE,CAAC,IAAI,EAAE,EAAE;IACvC,MAAM,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;AACvF,CAAC,CAAC,CAAC;AACH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;IAC/E,MAAM,CAAC,GAAG,EAAE,CACV,4BAA4B,CAAC,yBAAyB,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5E,mBAAmB;KACpB,CAAC,CACH,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC"}

package/dist/services/logger.js

@@ -67,9 +67,11 @@ function printSuccessfulInstall(stream, result, version, summary) {
     const trust = result.codexHost?.projectTrust;
     write(stream, trust?.state === "trusted"
         ? `- Projeto atual confiável no Codex: confirmado por leitura${trust.changed ? "; configuração aplicada" : "; entrada preservada"}.\n`
-        : trust
-            ? `- Confiança do projeto indisponível: ${trust.reason}. Configuração preservada; resolva essa causa antes de repetir.\n`
-            : "- Confiança do projeto: não verificada nesta execução.\n");
+        : trust?.state === "untrusted"
+            ? "- Projeto explicitamente não confiável no Codex: escolha untrusted preservada; altere a confiança manualmente no Codex se desejar.\n"
+            : trust
+                ? `- Confiança do projeto indisponível: ${trust.reason}. Configuração preservada; resolva essa causa antes de repetir.\n`
+                : "- Confiança do projeto: não verificada nesta execução.\n");
     if (trust?.backupPath)
         write(stream, `- Backup da confiança: ${trust.backupPath}\n`);
     write(stream, "- Agentes carregados na sessão do Codex: não confirmados; arquivos de perfil não comprovam disponibilidade nativa.\n");

package/dist/services/logger.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/services/logger.ts"],"names":[],"mappings":"AAcA,MAAM,UAAU,WAAW,CACzB,MAAgB,EAChB,MAAkB,EAClB,OAAe,EACf,OAAO,GAAG,KAAK,EACf,iBAA4C;IAE5C,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC;IACjD,KAAK,CAAC,MAAM,EAAE,kBAAkB,OAAO,MAAM,CAAC,CAAC;IAC/C,KAAK,CACH,MAAM,EACN,MAAM,CAAC,YAAY;QACjB,CAAC,CAAC,6BAA6B,MAAM,CAAC,IAAI,IAAI;QAC9C,CAAC,CAAC,6CAA6C,MAAM,CAAC,IAAI,IAAI,CACjE,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,+CAA+C,CAAC,CAAC;IAC/D,KAAK,CACH,MAAM,EACN,uMAAuM,CACxM,CAAC;IACF,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,MAAM,EAAE,8CAA8C,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC/B,KAAK,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,KAAK,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IACjG,CAAC;IACD,KAAK,CACH,MAAM,EACN,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,sBAAsB,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAC9H,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,0CAA0C,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CACH,MAAM,EACN,KAAK,MAAM,CAAC,SAAS,CAAC,MAAM,gEAAgE,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CACH,MAAM,EACN,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,aAAa,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,iCAAiC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAC5O,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE;QAAE,KAAK,CAAC,MAAM,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS;YACjC,KAAK,CACH,MAAM,EACN,OAAO,IAAI,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAC5F,CAAC;IACN,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACxC,KAAK,CACH,MAAM,EACN,MAAM,CAAC,SAAS;YACd,CAAC,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;gBACtC,CAAC,CAAC,gJAAgJ;gBAClJ,CAAC,CAAC,iDAAiD,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,oBAAoB,yBAAyB;YACzH,CAAC,CAAC,8CAA8C,MAAM,CAAC,IAAI,2GAA2G,MAAM,CAAC,KAAK,IAAI,CACzL,CAAC;QACF,IAAI,MAAM,CAAC,UAAU;YACnB,KAAK,CAAC,MAAM,EAAE,gDAAgD,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACrE,KAAK,CACH,MAAM,EACN,MAAM,CAAC,cAAc;YACnB,CAAC,CAAC,2JAA2J;YAC7J,CAAC,CAAC,qKAAqK,CAC1K,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,KAAK,CACH,MAAM,EACN,MAAM,CAAC,SAAS,CAAC,MAAM;YACrB,CAAC,CAAC,gFAAgF;YAClF,CAAC,CAAC,qDAAqD,CAC1D,CAAC;IACJ,CAAC;SAAM,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAAgB,EAChB,MAAkB,EAClB,OAAe,EACf,OAAiC;IAEjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC/C,KAAK,CACH,MAAM,EACN,8PAA8P,CAC/P,CAAC;IACF,KAAK,CACH,MAAM,EACN,8GAA8G,CAC/G,CAAC;IACF,KAAK,CACH,MAAM,EACN,yBAAyB,OAAO,kDAAkD,UAAU,KAAK,CAClG,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,yBAAyB,CAAC,CAAC;IACnE,KAAK,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC,WAAW,CAAC,MAAM,qCAAqC,CAAC,CAAC;IACnF,KAAK,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC;IAClD,KAAK,CACH,MAAM,EACN,wBAAwB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,UAAU,IAAI,CACxF,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC;IAC7C,KAAK,CACH,MAAM,EACN,KAAK,EAAE,KAAK,KAAK,SAAS;QACxB,CAAC,CAAC,6DAA6D,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,sBAAsB,KAAK;QACtI,CAAC,CAAC,KAAK;YACL,CAAC,CAAC,wCAAwC,KAAK,CAAC,MAAM,mEAAmE;YACzH,CAAC,CAAC,0DAA0D,CACjE,CAAC;IACF,IAAI,KAAK,EAAE,UAAU;QAAE,KAAK,CAAC,MAAM,EAAE,0BAA0B,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;IACrF,KAAK,CACH,MAAM,EACN,sHAAsH,CACvH,CAAC;IACF,KAAK,CACH,MAAM,EACN,OAAO,CAAC,MAAM,CAAC,aAAa;QAC1B,CAAC,CAAC,4BAA4B,OAAO,CAAC,MAAM,CAAC,aAAa,wCAAwC;QAClG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,wBAAwB;YAClD,CAAC,CAAC,iHAAiH;YACnH,CAAC,CAAC,oDAAoD,CAC3D,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACrC,KAAK,CACH,MAAM,EACN,OAAO,CAAC,MAAM,CAAC,UAAU;YACvB,CAAC,CAAC,+EAA+E;YACjF,CAAC,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,0CAA0C,CAChG,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,+DAA+D,CAAC,CAAC;QAC/E,KAAK,CACH,MAAM,EACN,qRAAqR,CACtR,CAAC;QACF,KAAK,CACH,MAAM,EACN,uKAAuK,CACxK,CAAC;QACF,KAAK,CACH,MAAM,EACN,8JAA8J,CAC/J,CAAC;QACF,OAAO;IACT,CAAC;IACD,KAAK,CAAC,MAAM,EAAE,gEAAgE,CAAC,CAAC;IAChF,KAAK,CACH,MAAM,EACN,OAAO,CAAC,MAAM,CAAC,UAAU;QACvB,CAAC,CAAC,+EAA+E;QACjF,CAAC,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,0CAA0C,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAmC;IAChE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,iBAAiB;YACpB,OAAO,0BAA0B,CAAC;QACpC,KAAK,kBAAkB;YACrB,OAAO,8DAA8D,CAAC;QACxE,KAAK,kBAAkB;YACrB,OAAO,iDAAiD,CAAC;QAC3D,KAAK,gBAAgB;YACnB,OAAO,mDAAmD,CAAC;QAC7D,KAAK,mBAAmB;YACtB,OAAO,gDAAgD,CAAC;QAC1D,KAAK,wBAAwB;YAC3B,OAAO,4GAA4G,CAAC;QACtH;YACE,OAAO,yCAAyC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAgB,EAAE,KAAa,EAAE,KAAwB;IAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC/B,KAAK,CAAC,MAAM,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,KAAK,CAAC,MAAgB,EAAE,KAAa;IAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC"}
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/services/logger.ts"],"names":[],"mappings":"AAcA,MAAM,UAAU,WAAW,CACzB,MAAgB,EAChB,MAAkB,EAClB,OAAe,EACf,OAAO,GAAG,KAAK,EACf,iBAA4C;IAE5C,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC;IACjD,KAAK,CAAC,MAAM,EAAE,kBAAkB,OAAO,MAAM,CAAC,CAAC;IAC/C,KAAK,CACH,MAAM,EACN,MAAM,CAAC,YAAY;QACjB,CAAC,CAAC,6BAA6B,MAAM,CAAC,IAAI,IAAI;QAC9C,CAAC,CAAC,6CAA6C,MAAM,CAAC,IAAI,IAAI,CACjE,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,+CAA+C,CAAC,CAAC;IAC/D,KAAK,CACH,MAAM,EACN,uMAAuM,CACxM,CAAC;IACF,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,MAAM,EAAE,8CAA8C,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC/B,KAAK,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,KAAK,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IACjG,CAAC;IACD,KAAK,CACH,MAAM,EACN,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,sBAAsB,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAC9H,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,0CAA0C,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CACH,MAAM,EACN,KAAK,MAAM,CAAC,SAAS,CAAC,MAAM,gEAAgE,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CACH,MAAM,EACN,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,aAAa,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,iCAAiC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAC5O,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE;QAAE,KAAK,CAAC,MAAM,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS;YACjC,KAAK,CACH,MAAM,EACN,OAAO,IAAI,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAC5F,CAAC;IACN,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACxC,KAAK,CACH,MAAM,EACN,MAAM,CAAC,SAAS;YACd,CAAC,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;gBACtC,CAAC,CAAC,gJAAgJ;gBAClJ,CAAC,CAAC,iDAAiD,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,oBAAoB,yBAAyB;YACzH,CAAC,CAAC,8CAA8C,MAAM,CAAC,IAAI,2GAA2G,MAAM,CAAC,KAAK,IAAI,CACzL,CAAC;QACF,IAAI,MAAM,CAAC,UAAU;YACnB,KAAK,CAAC,MAAM,EAAE,gDAAgD,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACrE,KAAK,CACH,MAAM,EACN,MAAM,CAAC,cAAc;YACnB,CAAC,CAAC,2JAA2J;YAC7J,CAAC,CAAC,qKAAqK,CAC1K,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,KAAK,CACH,MAAM,EACN,MAAM,CAAC,SAAS,CAAC,MAAM;YACrB,CAAC,CAAC,gFAAgF;YAClF,CAAC,CAAC,qDAAqD,CAC1D,CAAC;IACJ,CAAC;SAAM,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAAgB,EAChB,MAAkB,EAClB,OAAe,EACf,OAAiC;IAEjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC/C,KAAK,CACH,MAAM,EACN,8PAA8P,CAC/P,CAAC;IACF,KAAK,CACH,MAAM,EACN,8GAA8G,CAC/G,CAAC;IACF,KAAK,CACH,MAAM,EACN,yBAAyB,OAAO,kDAAkD,UAAU,KAAK,CAClG,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,yBAAyB,CAAC,CAAC;IACnE,KAAK,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC,WAAW,CAAC,MAAM,qCAAqC,CAAC,CAAC;IACnF,KAAK,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC;IAClD,KAAK,CACH,MAAM,EACN,wBAAwB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,UAAU,IAAI,CACxF,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC;IAC7C,KAAK,CACH,MAAM,EACN,KAAK,EAAE,KAAK,KAAK,SAAS;QACxB,CAAC,CAAC,6DAA6D,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,sBAAsB,KAAK;QACtI,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,WAAW;YAC5B,CAAC,CAAC,sIAAsI;YACxI,CAAC,CAAC,KAAK;gBACL,CAAC,CAAC,wCAAwC,KAAK,CAAC,MAAM,mEAAmE;gBACzH,CAAC,CAAC,0DAA0D,CACnE,CAAC;IACF,IAAI,KAAK,EAAE,UAAU;QAAE,KAAK,CAAC,MAAM,EAAE,0BAA0B,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;IACrF,KAAK,CACH,MAAM,EACN,sHAAsH,CACvH,CAAC;IACF,KAAK,CACH,MAAM,EACN,OAAO,CAAC,MAAM,CAAC,aAAa;QAC1B,CAAC,CAAC,4BAA4B,OAAO,CAAC,MAAM,CAAC,aAAa,wCAAwC;QAClG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,wBAAwB;YAClD,CAAC,CAAC,iHAAiH;YACnH,CAAC,CAAC,oDAAoD,CAC3D,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACrC,KAAK,CACH,MAAM,EACN,OAAO,CAAC,MAAM,CAAC,UAAU;YACvB,CAAC,CAAC,+EAA+E;YACjF,CAAC,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,0CAA0C,CAChG,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,+DAA+D,CAAC,CAAC;QAC/E,KAAK,CACH,MAAM,EACN,qRAAqR,CACtR,CAAC;QACF,KAAK,CACH,MAAM,EACN,uKAAuK,CACxK,CAAC;QACF,KAAK,CACH,MAAM,EACN,8JAA8J,CAC/J,CAAC;QACF,OAAO;IACT,CAAC;IACD,KAAK,CAAC,MAAM,EAAE,gEAAgE,CAAC,CAAC;IAChF,KAAK,CACH,MAAM,EACN,OAAO,CAAC,MAAM,CAAC,UAAU;QACvB,CAAC,CAAC,+EAA+E;QACjF,CAAC,CAAC,KAAK,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,0CAA0C,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAmC;IAChE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,iBAAiB;YACpB,OAAO,0BAA0B,CAAC;QACpC,KAAK,kBAAkB;YACrB,OAAO,8DAA8D,CAAC;QACxE,KAAK,kBAAkB;YACrB,OAAO,iDAAiD,CAAC;QAC3D,KAAK,gBAAgB;YACnB,OAAO,mDAAmD,CAAC;QAC7D,KAAK,mBAAmB;YACtB,OAAO,gDAAgD,CAAC;QAC1D,KAAK,wBAAwB;YAC3B,OAAO,4GAA4G,CAAC;QACtH;YACE,OAAO,yCAAyC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAgB,EAAE,KAAa,EAAE,KAAwB;IAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC/B,KAAK,CAAC,MAAM,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,KAAK,CAAC,MAAgB,EAAE,KAAa;IAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zaip-ai/cli",
-  "version": "7.5.0",
+  "version": "7.6.0",
   "description": "CLI oficial para instalar e configurar o ZAIP-AIOS em qualquer repositório",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",

package/templates/.agents/config/agents/discovery.json

@@ -1,5 +1,5 @@
 {
-  "_zaip_managed": "zaip-managed generated-do-not-edit source=agent-discovery version=7.5.0 sha256=efeb02ada816a9c50c92747bde04b34dc1cf6305bc16b0f45d4791d4caf8a270",
+  "_zaip_managed": "zaip-managed generated-do-not-edit source=agent-discovery version=7.6.0 sha256=efeb02ada816a9c50c92747bde04b34dc1cf6305bc16b0f45d4791d4caf8a270",
   "schema_version": 1,
   "source": {
     "path": ".agents/config/agents/catalog.yaml",

package/templates/.agents/dashboard/.zaip-managed.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "version": "7.5.0",
+  "version": "7.6.0",
   "files": [
     {
       "path": "DATA-DICTIONARY.md",
@@ -27,16 +27,16 @@
       "sha256": "ef18f9519603bd58fac10dac900dbfd46e0eab4a38f14f268ee8153fcd481a2e"
     },
     {
-      "path": "apps/frontend/dist/assets/ProjectSettingsPage-BCsdQtWG.js",
-      "sha256": "d432dce9524266ac06fc83e9539a870b8e43f04fd39b7acf2446bb2fa5b7cd2b"
+      "path": "apps/frontend/dist/assets/ProjectSettingsPage-86kLUrXm.js",
+      "sha256": "b6c7f54ba91f622f1bcb0762951e5e30cbb1c317b886ebfcc2b0abebd2e7c638"
     },
     {
       "path": "apps/frontend/dist/assets/ProjectSettingsPage-CQMhvzvJ.css",
       "sha256": "10e875c4e3ab6c252983822e25a85db3d707d903c0fcf39812909fdd1d013f48"
     },
     {
-      "path": "apps/frontend/dist/assets/TraceabilityWorkspace-BN8FwP5S.js",
-      "sha256": "c85dcdee499e5b13428f401ba58cc9bad7ef26f06a8230cd65668382261d27ab"
+      "path": "apps/frontend/dist/assets/TraceabilityWorkspace-BZ1rH1vl.js",
+      "sha256": "8dd35f22b559922994986bc6ad2b205376116c5327568de7a1f8f167c96534dc"
     },
     {
       "path": "apps/frontend/dist/assets/TraceabilityWorkspace-DvvavDLY.css",
@@ -63,8 +63,8 @@
       "sha256": "24aac14062007cb1e8d0340948aa2593389c5a0c399b03550d6826f6aaeaf32d"
     },
     {
-      "path": "apps/frontend/dist/assets/index-uIVtG2ZR.js",
-      "sha256": "3d46bcb024c0a61112d8524b5be27968864a7ea0841626c0d9077faadaa370d3"
+      "path": "apps/frontend/dist/assets/index-C4uiRYHu.js",
+      "sha256": "76c2f6deff375f504a8257ac211c770692b5458535412430f2fa25e5dff6e7e9"
     },
     {
       "path": "apps/frontend/dist/assets/logo_novo_azul-BBx5pA2B.png",
@@ -79,12 +79,12 @@
       "sha256": "1b13387cb23dc39bf70e31677c21f6db5cad3377b96f286b6ee444496e5bfea7"
     },
     {
-      "path": "apps/frontend/dist/assets/traceability-Boz50W9b.js",
-      "sha256": "d84651ff7dafc95b10c6ec9d685dddc00c3902c375d371d522803950b5b1ca40"
+      "path": "apps/frontend/dist/assets/traceability-s5SzQnzt.css",
+      "sha256": "84916d2281598e14a3c6024cc488ff07a322eb13af30c840b77095a94b2f3788"
     },
     {
-      "path": "apps/frontend/dist/assets/traceability-DFY7ZDlu.css",
-      "sha256": "3134c9eb5bbbdb1e48e1001fe6c4b7fd32840db04d9782587f2c4f6eacc21a64"
+      "path": "apps/frontend/dist/assets/traceability-vQx9R6BQ.js",
+      "sha256": "c6e93eefd27167f53d595440ac9cad259040b98fbb578287d6f33ccd067832ed"
     },
     {
       "path": "apps/frontend/dist/icon_zaip.png",
@@ -92,19 +92,31 @@
     },
     {
       "path": "apps/frontend/dist/index.html",
-      "sha256": "0310c53f19531b278ac936f0d5caa370e2e1793af023a602488430f081769d55"
+      "sha256": "c9a936eec588065e1ddc21ae7fd88d8b2c9dd0b0c85e16a28ac3fbc3be588b0a"
     },
     {
       "path": "apps/frontend/dist/logo_novo_azul.png",
       "sha256": "bb6043bda9fc53a111aaea4d6a004559b9ce8a3569691c060d217a7c6aafa0ae"
     },
+    {
+      "path": "apps/frontend/e2e/release-delivery-fixture.mjs",
+      "sha256": "05df62b9724bd08cbe3387085d43a723f1091e9dcef7bc960b5765c0019bc1a5"
+    },
+    {
+      "path": "apps/frontend/e2e/release-delivery-lab.mjs",
+      "sha256": "aa6e775a276105184a6a7a0d9ee8de99c70e8fb8689e836034000e0d48d84e80"
+    },
+    {
+      "path": "apps/frontend/e2e/release-delivery-receipt.mjs",
+      "sha256": "163c011d0d827612e7f5d4b6b45a0b031ebb2fa5e51faa64c356fccb79681117"
+    },
     {
       "path": "apps/frontend/index.html",
       "sha256": "d279cf759b86aaa448dc0c3744cf9872149549db7a07e270a43683e57e572f9c"
     },
     {
       "path": "apps/frontend/package.json",
-      "sha256": "da66bc40e4e6c59bbe8976afd241b87f8592d9d0df7f02a28b5b4c009f26ef98"
+      "sha256": "b235a0c69d24015bf7a417309349142de63f1d338fc5a8d1ef8c21cae4e563f3"
     },
     {
       "path": "apps/frontend/playwright.dom.config.ts",
@@ -352,7 +364,7 @@
     },
     {
       "path": "apps/frontend/src/dashboard-runtime-status.ts",
-      "sha256": "c519b1fa6d08ba1ade2d254a3136f7c9c787f9b397c4199e7ce37e3a748c1b71"
+      "sha256": "0b8884b31a760bde7c7ecbd8328f5ae06a224af5e332d9fee9bce7d8870406de"
     },
     {
       "path": "apps/frontend/src/dashboard-setup-route.ts",
@@ -470,6 +482,10 @@
       "path": "apps/frontend/src/reconciliation-feedback.css",
       "sha256": "3eab1e676bd8ed9bf11cb6525ccb36a17e3d965a4d3accba32299ce915029398"
     },
+    {
+      "path": "apps/frontend/src/release-delivery.test.tsx",
+      "sha256": "9184a4d31258ed5bd25ac5a0a749486bc2731a7e6e716c2dd5ef6df7acab0c0d"
+    },
     {
       "path": "apps/frontend/src/sao-paulo-day-rollover.test.ts",
       "sha256": "09f1055cf37befa5a3a568ba061f41ae3c2e04348e183e1434b111fa3fc0dd33"
@@ -596,11 +612,11 @@
     },
     {
       "path": "apps/frontend/src/use-runtime-status.dom.test.ts",
-      "sha256": "962f12f7c8fd26c6f5a496db59547018bdf84b86f0999b170070e1680e97b669"
+      "sha256": "947a81d77d6ed19af6409f7079b6e5c2f31cbe87b6a7dab22e19b7fd0892ea9c"
     },
     {
       "path": "apps/frontend/src/use-runtime-status.ts",
-      "sha256": "beee11c2cc9ab76e28ba0e522122b6b7f6eec618886f265a81877327d385dfd2"
+      "sha256": "47a01870cad78192225fdbe8117aeaa6ea530f84ecfa393067f0c4bbf8d06425"
     },
     {
       "path": "apps/frontend/src/use-snapshot-notice.tsx",
@@ -644,7 +660,7 @@
     },
     {
       "path": "modules/cost-monitor/package.json",
-      "sha256": "a8655d7bb75fa24ad03cb8083b75c3bec94e115a1a808eb3d3aabb0750c4accf"
+      "sha256": "51ad0639fba916d8b56a6fd41f68c83d8baacd3b4c3f9a613fe4a57f4bf0481d"
     },
     {
       "path": "modules/cost-monitor/src/agent-groups.test.ts",
@@ -1088,7 +1104,7 @@
     },
     {
       "path": "modules/operations/package.json",
-      "sha256": "be4ddbf8df0590ad25540567b0552a68bc9ec22935a9d7daab31271e048359cc"
+      "sha256": "387bb1f6f79bc549e87171e787d62e06ea465e078c05adf5720f2ea4204fe738"
     },
     {
       "path": "modules/operations/src/contracts.ts",
@@ -1840,11 +1856,15 @@
     },
     {
       "path": "modules/traceability/package.json",
-      "sha256": "222b7f061a96ac60b62703ed8c058c442c61826b7c24d7878c1893e87968f7fe"
+      "sha256": "3832f17aa4a2dad0c4c1c4327b0441dcb92c569847b23d47bba4f64fd20c5f18"
     },
     {
       "path": "modules/traceability/src/contracts.ts",
-      "sha256": "dec37b15af6d90ffe3bb52558d8928dcb53255d80854f3207c1b67af587611bd"
+      "sha256": "2c08c683c606ade1d1048771909775ac5fd7ab77268ec44636fa0ee32842f177"
+    },
+    {
+      "path": "modules/traceability/src/react/ReleaseDeliveryPanel.tsx",
+      "sha256": "11f33dc6526bc7a2888143ed6350f89af43bd11a7b6cb5e18848ff2dfd9a8ad6"
     },
     {
       "path": "modules/traceability/src/react/TaskTracePanel.test.ts",
@@ -1852,7 +1872,7 @@
     },
     {
       "path": "modules/traceability/src/react/TaskTracePanel.tsx",
-      "sha256": "11d98b30527e80d664a92a4d66b471501277732769e3ef939dd9812203a8e293"
+      "sha256": "c9c9eb14fdb5bad59a661a6cca2f04a2303b52639c81c3fc6743e4476a99e083"
     },
     {
       "path": "modules/traceability/src/react/TraceDocumentDialog.tsx",
@@ -1870,6 +1890,18 @@
       "path": "modules/traceability/src/react/index.ts",
       "sha256": "de87b4fc739b0b2e3cf018087d9a6f06ce124405fcab656c0a393752dcbd2e7e"
     },
+    {
+      "path": "modules/traceability/src/react/release-delivery-panel.css",
+      "sha256": "4e86d1d32d5d4fe49b6b974b4f7cd2ef93042978efb260d5241c879c970fbf74"
+    },
+    {
+      "path": "modules/traceability/src/react/trace-date-format.ts",
+      "sha256": "46b60935495742a638055c9ba0597ff395ea212a4d25ddec41a04c83c8c133ec"
+    },
+    {
+      "path": "modules/traceability/src/react/trace-stage-labels.ts",
+      "sha256": "84fe7978ba97b5d18d27bca667e3f8883ae74c7100e2ed3af5dc5cd013bbb785"
+    },
     {
       "path": "modules/traceability/src/react/traceability-embedded.css",
       "sha256": "20d8e111cc58ce029ddd5dde8f9f0a535bcbb9fb7b2c075bcf23fe9caba9a96e"
@@ -1912,7 +1944,7 @@
     },
     {
       "path": "packages/branding/package.json",
-      "sha256": "937ae850614ecba7c4b23c80e0e53f3bbebf813ea41ca2f2e777788da475654f"
+      "sha256": "c6af797a9fc46c22dd4f525c50dd2d122507a0ca317098636c27207acafe81bb"
     },
     {
       "path": "packages/branding/src/index.ts",
@@ -1924,7 +1956,7 @@
     },
     {
       "path": "packages/contracts/package.json",
-      "sha256": "909e704bf468e30a0a1dc7a8e16e5243d11cdae36cf3f910bc254ef9df9998d9"
+      "sha256": "02563bb0be60e515ef0127aec8067b5af0b38df68baa98c110ea1375341cae62"
     },
     {
       "path": "packages/contracts/src/export.ts",
@@ -1944,7 +1976,7 @@
     },
     {
       "path": "packages/data-export/package.json",
-      "sha256": "ce8ce032d21ec00486b424976544a754271a0279f8a8c7417a8ea246db657a68"
+      "sha256": "25139b109dc2f9ffc98f40f18435ca7390926ed841814b4ebfdbf8a539d1777e"
     },
     {
       "path": "packages/data-export/src/index.test.ts",
@@ -1992,15 +2024,15 @@
     },
     {
       "path": "packages/local-runtime/dist/server.cjs",
-      "sha256": "e67a22ae1e7e1ddb3e4573f290c66bfa5c72c07cf098adc230fa5722a39a5b91"
+      "sha256": "b61e533670c9437d9abe34ca001b67eeaa8992af3359dbe579a68b73b954cd6b"
     },
     {
       "path": "packages/local-runtime/dist/sqlite-read-model.cjs",
-      "sha256": "92d717e54c4ebb1c3185af7abc6e7a3665b2782056486cb0bf949ac808883a2b"
+      "sha256": "ce8b927d5835ae41afd8d61575001d47b5b977113a5a2eaaf1900eefa077244c"
     },
     {
       "path": "packages/local-runtime/package.json",
-      "sha256": "73ab57b20042ec488ea34f3319e824728c43c380316ee9c65cd1a5a5677b7236"
+      "sha256": "9248406c9f0641c03972f2631d061d788810a7764ef259558018cbe22bfe867b"
     },
     {
       "path": "packages/local-runtime/scripts/build-frontend.mjs",
@@ -2056,7 +2088,7 @@
     },
     {
       "path": "packages/local-runtime/server.mjs",
-      "sha256": "20d225f262ac549e4685f6160ec0c8c05389acd7d0f6dbe685d1a98fdba5a3d9"
+      "sha256": "165590e25a0dfc80c434a518c230d926d806ec8916fcece66741d8526d5a5be3"
     },
     {
       "path": "packages/local-runtime/src/active-capture-failure.test.ts",
@@ -2302,6 +2334,10 @@
       "path": "packages/local-runtime/src/server-reconciliation-route.ts",
       "sha256": "db95ab303834b553f90fde0808e3eb5915f68ed4e981e6df1b7cc784e103c788"
     },
+    {
+      "path": "packages/local-runtime/src/server-release-receipt.ts",
+      "sha256": "2b285116fa196ff0cbdff7d8d2bd06ca2437f9fd0c8f014eb8a4d3c9d43fdedc"
+    },
     {
       "path": "packages/local-runtime/src/server-request-authority.test.ts",
       "sha256": "bbe7be318c817d8da2a26a82f6f3e9cc56d2a394132ec44bcd92253d431ffe0b"
@@ -2398,9 +2434,13 @@
       "path": "packages/local-runtime/src/server-telemetry-refresh.ts",
       "sha256": "e590e511846bdf63ca1b468f6e5228d81b6cfac04b94d0fc38a5980a32a7eab4"
     },
+    {
+      "path": "packages/local-runtime/src/server-trace-release-delivery.ts",
+      "sha256": "8ec8e3db76ba9f1203b3ab28b4d559f3bcc18e24d9420b07b81b6a63f0dfd53c"
+    },
     {
       "path": "packages/local-runtime/src/server-trace-routes.ts",
-      "sha256": "b2d5ab34436e33f17ee6b77d9ff8fcd133289e8f70983120cfe588a642693cda"
+      "sha256": "3f25e4ba2b099426f8ca001d5f430f5ef0518a3a0aa631b83987ddee09b890a9"
     },
     {
       "path": "packages/local-runtime/src/server-traceability-index.test.ts",
@@ -2988,7 +3028,7 @@
     },
     {
       "path": "packages/ui/package.json",
-      "sha256": "ed7403c701d1b48e07647fca10996dcb71da9b50495c07609f3e9acf16e78d26"
+      "sha256": "dd61af29b8adb6633a956a32159b27b9c71079091f0efb263998952a52e2ea54"
     },
     {
       "path": "packages/ui/src/DashboardHeader.test.mjs",
@@ -3088,7 +3128,7 @@
     },
     {
       "path": "stack-dependencies.json",
-      "sha256": "e32728bd2efc2a8c1b5bab1cebc44071dd95c994ae570c727a6cda9509d0b72c"
+      "sha256": "fc570d2a49e192f01c7cd9f63ce898955f19e888c90c2e4d1f67fefd4727b71b"
     },
     {
       "path": "tests/e2e/lease-global-setup.ts",
@@ -3096,7 +3136,7 @@
     },
     {
       "path": "tests/e2e/package.json",
-      "sha256": "402d0f9341ee41493cd2d40548ff0ade8ca1a0ad0470aa4f0ebed8aae78e6a1f"
+      "sha256": "caa35e8f66cfdc6f79570912868290170d1129013df94d18f203dbbafbf77767"
     },
     {
       "path": "tests/e2e/playwright.config.ts",