aios-core 4.0.0 → 4.0.2

package/.claude/hooks/README.md

@@ -0,0 +1,169 @@
+# Claude Code Hooks
+
+Sistema de governança automática para regras do CLAUDE.md.
+
+## Arquitetura
+
+```
+PreToolUse Hooks
+├── Read          → read-protection.py
+├── Write|Edit    → enforce-architecture-first.py
+│                 → write-path-validation.py
+│                 → mind-clone-governance.py
+└── Bash          → sql-governance.py
+                  → slug-validation.py
+```
+
+## Hooks Disponíveis
+
+### 1. read-protection.py
+**Trigger:** `Read`
+**Comportamento:** BLOQUEIA (exit 2)
+
+Impede leitura parcial (`limit`/`offset`) em arquivos protegidos:
+- `.claude/CLAUDE.md`
+- `.claude/rules/*.md`
+- `.aios-core/development/agents/*.md`
+- `supabase/docs/SCHEMA.md`
+- `package.json`, `tsconfig.json`
+- `app/components/ui/icons/icon-map.ts`
+
+### 2. enforce-architecture-first.py
+**Trigger:** `Write|Edit`
+**Comportamento:** BLOQUEIA (exit 2)
+
+Exige documentação aprovada antes de criar código em paths protegidos:
+- `supabase/functions/` → requer doc em `docs/architecture/` ou `docs/approved-plans/`
+- `supabase/migrations/` → requer doc ou permite edição de arquivo existente
+
+### 3. write-path-validation.py
+**Trigger:** `Write|Edit`
+**Comportamento:** AVISA (exit 0 + stderr)
+
+Avisa quando documentos parecem estar no path errado:
+- Sessions/handoffs → `docs/sessions/YYYY-MM/`
+- Architecture → `docs/architecture/`
+- Guides → `docs/guides/`
+
+### 4. sql-governance.py
+**Trigger:** `Bash`
+**Comportamento:** BLOQUEIA (exit 2)
+
+Intercepta comandos SQL perigosos:
+- `CREATE TABLE/VIEW/FUNCTION/TRIGGER`
+- `ALTER TABLE`
+- `DROP TABLE/VIEW/FUNCTION`
+- `CREATE TABLE AS SELECT` (backup proibido)
+
+**Exceções permitidas:**
+- `supabase migration` (CLI oficial)
+- `pg_dump` (backup/export)
+
+### 5. slug-validation.py
+**Trigger:** `Bash`
+**Comportamento:** BLOQUEIA (exit 2)
+
+Valida formato snake_case em slugs:
+- Pattern: `^[a-z0-9]+(_[a-z0-9]+)*$`
+- ✅ `jose_carlos_amorim`
+- ❌ `jose-carlos-amorim` (hyphen)
+- ❌ `JoseAmorim` (camelCase)
+
+### 6. mind-clone-governance.py
+**Trigger:** `Write|Edit`
+**Comportamento:** BLOQUEIA (exit 2)
+
+Impede criação de mind clones sem DNA extraído previamente.
+
+**O que é bloqueado:**
+- Criar novo arquivo `squads/*/agents/*.md` que pareça ser um mind clone
+- Mind clones = agents baseados em pessoas reais (não funcionais)
+
+**O que NÃO é bloqueado:**
+- Editar arquivos existentes (permite updates)
+- Agents funcionais (identificados por sufixo):
+  - `-chief`, `-orchestrator`, `-chair`
+  - `-validator`, `-calculator`, `-generator`, `-extractor`, `-analyzer`
+  - `-architect`, `-mapper`, `-designer`, `-engineer`
+  - `tools-*`, `process-*`, `workflow-*`
+
+**Locais de DNA verificados:**
+- `squads/{pack}/data/minds/{agent_id}_dna.yaml`
+- `squads/{pack}/data/minds/{agent_id}_dna.md`
+- `squads/{pack}/data/{agent_id}-dna.yaml`
+- `outputs/minds/{agent_id}/`
+
+**Solução quando bloqueado:**
+1. Execute o pipeline de extração de DNA: `/squad-creator` → `*collect-sources` → `*extract-voice-dna` → `*extract-thinking-dna`
+2. OU se é agent funcional, renomeie com sufixo apropriado
+
+## Exit Codes
+
+| Code | Significado |
+|------|-------------|
+| 0 | Permitido (operação continua) |
+| 2 | Bloqueado (operação cancelada, mostra stderr) |
+| Outro | Erro não-bloqueante |
+
+## Input Format
+
+Hooks recebem JSON via stdin:
+
+```json
+{
+  "session_id": "abc123",
+  "hook_event_name": "PreToolUse",
+  "tool_name": "Read",
+  "tool_input": {
+    "file_path": "/path/to/file",
+    "limit": 100
+  },
+  "cwd": "/Users/alan/Code/mmos"
+}
+```
+
+## Debugging
+
+Para testar um hook manualmente:
+
+```bash
+echo '{"tool_name": "Read", "tool_input": {"file_path": ".claude/CLAUDE.md", "limit": 100}}' | python3 .claude/hooks/read-protection.py
+echo $?  # Deve retornar 2 (bloqueado)
+```
+
+## Configuração
+
+Hooks são configurados em `.claude/settings.local.json`:
+
+```json
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Read",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 \"$CLAUDE_PROJECT_DIR/.claude/hooks/read-protection.py\"",
+            "timeout": 5
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+## Manutenção
+
+Para adicionar novo hook:
+
+1. Criar arquivo `.claude/hooks/novo-hook.py`
+2. Adicionar entrada em `.claude/settings.local.json`
+3. Documentar neste README
+4. Testar com casos reais
+
+---
+
+*Criado: 2026-01-24*
+*Arquitetura: docs/architecture/claude-md-governance-system.md*

package/.claude/hooks/precompact-session-digest.js

@@ -0,0 +1,46 @@
+#!/usr/bin/env node
+/**
+ * Claude Code Hook: PreCompact Session Digest
+ *
+ * This hook is registered with Claude Code to trigger before context compact.
+ * It delegates to the unified hook runner in aios-core.
+ *
+ * Installation:
+ * - Claude Code automatically discovers hooks in .claude/hooks/
+ * - Hook naming: {event}-{name}.js (e.g., precompact-session-digest.js)
+ *
+ * @see .aios-core/hooks/unified/runners/precompact-runner.js
+ * @see Story MIS-3 - Session Digest (PreCompact Hook)
+ */
+
+'use strict';
+
+const path = require('path');
+
+// Resolve path to the unified hook runner
+const PROJECT_ROOT = path.resolve(__dirname, '..', '..');
+const runnerPath = path.join(
+  PROJECT_ROOT,
+  '.aios-core',
+  'hooks',
+  'unified',
+  'runners',
+  'precompact-runner.js',
+);
+
+// Load and execute the hook runner
+try {
+  const { onPreCompact } = require(runnerPath);
+
+  // Export the hook handler for Claude Code
+  module.exports = async (context) => {
+    return await onPreCompact(context);
+  };
+} catch (error) {
+  console.error('[PreCompact Hook] Failed to load hook runner:', error.message);
+
+  // Graceful degradation - export no-op function
+  module.exports = async () => {
+    console.log('[PreCompact Hook] Hook runner not available, skipping');
+  };
+}

package/.claude/hooks/synapse-engine.js

@@ -0,0 +1,87 @@
+#!/usr/bin/env node
+'use strict';
+
+/**
+ * SYNAPSE Hook Entry Point — UserPromptSubmit
+ *
+ * Thin wrapper that reads JSON from stdin, delegates to SynapseEngine,
+ * and writes <synapse-rules> context to stdout.
+ *
+ * - Silent exit on missing .synapse/ directory
+ * - Silent exit on any error (never blocks the user prompt)
+ * - All errors logged to stderr with [synapse-hook] prefix
+ * - 5s safety timeout as defense-in-depth
+ *
+ * @module synapse-engine-hook
+ */
+
+const path = require('path');
+const fs = require('fs');
+
+/** Safety timeout (ms) — defense-in-depth; Claude Code also manages hook timeout. */
+const HOOK_TIMEOUT_MS = 5000;
+
+/**
+ * Read all data from stdin as a JSON object.
+ * @returns {Promise<object>} Parsed JSON input
+ */
+function readStdin() {
+  return new Promise((resolve, reject) => {
+    let data = '';
+    process.stdin.setEncoding('utf8');
+    process.stdin.on('error', (e) => reject(e));
+    process.stdin.on('data', (chunk) => { data += chunk; });
+    process.stdin.on('end', () => {
+      try { resolve(JSON.parse(data)); }
+      catch (e) { reject(e); }
+    });
+  });
+}
+
+/** Main hook execution pipeline. */
+async function main() {
+  const input = await readStdin();
+  const { sessionId, cwd, prompt } = input;
+  if (!cwd) return;
+  const synapsePath = path.join(cwd, '.synapse');
+  if (!fs.existsSync(synapsePath)) return;
+
+  const { loadSession } = require(
+    path.join(cwd, '.aios-core', 'core', 'synapse', 'session', 'session-manager.js')
+  );
+  const { SynapseEngine } = require(
+    path.join(cwd, '.aios-core', 'core', 'synapse', 'engine.js')
+  );
+
+  const sessionsDir = path.join(synapsePath, 'sessions');
+  const session = loadSession(sessionId, sessionsDir) || { prompt_count: 0 };
+  const engine = new SynapseEngine(synapsePath);
+  const result = await engine.process(prompt, session);
+
+  process.stdout.write(JSON.stringify({
+    hookSpecificOutput: { additionalContext: result.xml || '' },
+  }));
+}
+
+/**
+ * Safely exit the process — no-op inside Jest workers to prevent worker crashes.
+ * @param {number} code - Exit code
+ */
+function safeExit(code) {
+  if (process.env.JEST_WORKER_ID) return;
+  process.exit(code);
+}
+
+/** Entry point runner — sets safety timeout and executes main(). */
+function run() {
+  const timer = setTimeout(() => safeExit(0), HOOK_TIMEOUT_MS);
+  timer.unref();
+  main().catch((err) => {
+    console.error(`[synapse-hook] ${err.message}`);
+    safeExit(0);
+  });
+}
+
+if (require.main === module) run();
+
+module.exports = { readStdin, main, run, HOOK_TIMEOUT_MS };

package/bin/aios-init.js

@@ -5,8 +5,8 @@
  * Based on the original beautiful visual design with ASCII art
  * Version: 2.1.0
  *
- * ⚠️ DEPRECATION NOTICE (v3.11.3):
- * This file is the LEGACY installer and will be removed in v4.0.0.
+ * ⚠️ DEPRECATED (since v3.11.3, scheduled for removal in v5.0.0):
+ * This file is the LEGACY installer.
  * The new modular wizard is located at: packages/installer/src/wizard/index.js
  *
  * This file is kept as a fallback for edge cases where the new wizard
@@ -16,8 +16,8 @@
  * - Use `npx aios-core` which routes through bin/aios.js to the new wizard
  * - Do NOT call this file directly
  *
- * Supported IDEs (8 total):
- * - Claude Code, Cursor, Windsurf, Trae, Roo Code, Cline, Gemini CLI, GitHub Copilot
+ * Supported IDEs (7 total):
+ * - Claude Code, Cursor, Windsurf, Roo Code, Cline, Gemini CLI, GitHub Copilot
  */
 
 const path = require('path');

package/bin/aios-minimal.js

@@ -3,13 +3,10 @@
 /**
  * AIOS-FullStack Minimal Installation
  *
- * DEPRECATION NOTICE (v3.11.1):
+ * DEPRECATED (since v3.11.1, scheduled for removal in v5.0.0):
  * The --minimal mode was designed for expansion-packs which have been
  * replaced by the Squads system (OSR-8). This command now runs the
  * standard wizard through the main router.
- *
- * This file is kept for backwards compatibility but will be removed
- * in a future major version.
  */
 
 const { spawn } = require('child_process');

package/bin/aios.js

@@ -3,7 +3,7 @@
 /**
  * AIOS-FullStack CLI
  * Main entry point - Standalone (no external dependencies for npx compatibility)
- * Version: 1.2.0
+ * Version: 4.0.0
  */
 
 const path = require('path');

package/bin/modules/env-config.js

@@ -354,7 +354,6 @@ function getIDEConfigFile(ideKey) {
   const ideConfigMap = {
     cursor: '.cursorrules',
     windsurf: '.windsurfrules',
-    trae: '.trae/config.json',
     zed: '.zed/settings.json',
     antigravity: '.antigravity.yaml',
     continue: '.continue/config.json',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aios-core",
-  "version": "4.0.0",
+  "version": "4.0.2",
   "description": "Synkra AIOS: AI-Orchestrated System for Full Stack Development - Core Framework",
   "bin": {
     "aios": "bin/aios.js",
@@ -18,6 +18,9 @@
     ".aios-core/",
     ".claude/CLAUDE.md",
     ".claude/rules/",
+    ".claude/hooks/synapse-engine.js",
+    ".claude/hooks/precompact-session-digest.js",
+    ".claude/hooks/README.md",
     "README.md",
     "LICENSE"
   ],

package/packages/aios-pro-cli/bin/aios-pro.js

@@ -0,0 +1,158 @@
+#!/usr/bin/env node
+
+/**
+ * aios-pro CLI
+ *
+ * Thin CLI wrapper for @aios-fullstack/pro.
+ * Provides a clean npx interface: npx aios-pro install
+ *
+ * Commands:
+ *   install             Install @aios-fullstack/pro in the current project
+ *   activate --key X    Activate a license key
+ *   deactivate          Deactivate the current license
+ *   status              Show license status
+ *   features            List available pro features
+ *   validate            Force online license revalidation
+ *   help                Show help
+ */
+
+const { execSync, spawnSync } = require('child_process');
+const path = require('path');
+const fs = require('fs');
+
+const PRO_PACKAGE = '@aios-fullstack/pro';
+const VERSION = require('../package.json').version;
+
+const args = process.argv.slice(2);
+const command = args[0];
+
+// ─── Helpers ────────────────────────────────────────────────────────────────
+
+function run(cmd, options = {}) {
+  const result = spawnSync(cmd, {
+    shell: true,
+    stdio: 'inherit',
+    cwd: process.cwd(),
+    ...options,
+  });
+  return result.status;
+}
+
+function isProInstalled() {
+  try {
+    const pkgPath = path.join(process.cwd(), 'node_modules', '@aios-fullstack', 'pro', 'package.json');
+    return fs.existsSync(pkgPath);
+  } catch {
+    return false;
+  }
+}
+
+function findAiosCli() {
+  // Check local node_modules first
+  const localBin = path.join(process.cwd(), 'node_modules', '.bin', 'aios');
+  if (fs.existsSync(localBin) || fs.existsSync(localBin + '.cmd')) {
+    return 'npx aios';
+  }
+
+  // Check global
+  try {
+    execSync('aios --version', { stdio: 'pipe' });
+    return 'aios';
+  } catch {
+    return null;
+  }
+}
+
+function delegateToAios(subcommand) {
+  const aios = findAiosCli();
+  if (!aios) {
+    console.error('aios-core CLI not found.');
+    console.error('Install it first: npm install aios-core');
+    process.exit(1);
+  }
+
+  const spawnArgs = ['pro', subcommand, ...args.slice(1)];
+  const result = spawnSync(aios, spawnArgs, { stdio: 'inherit' });
+  process.exit(result.status ?? 0);
+}
+
+// ─── Commands ───────────────────────────────────────────────────────────────
+
+function showHelp() {
+  console.log(`
+aios-pro v${VERSION} — AIOS Pro CLI
+
+Usage:
+  npx aios-pro <command> [options]
+
+Commands:
+  install              Install ${PRO_PACKAGE} in the current project
+  activate --key KEY   Activate a license key
+  deactivate           Deactivate the current license
+  status               Show license status
+  features             List available pro features
+  validate             Force online license revalidation
+  help                 Show this help message
+
+Examples:
+  npx aios-pro install
+  npx aios-pro activate --key PRO-XXXX-XXXX-XXXX-XXXX
+  npx aios-pro status
+
+Documentation: https://synkra.ai/pro/docs
+`);
+}
+
+function installPro() {
+  console.log(`\nInstalling ${PRO_PACKAGE}...\n`);
+
+  const exitCode = run(`npm install ${PRO_PACKAGE}`);
+
+  if (exitCode !== 0) {
+    console.error(`\nFailed to install ${PRO_PACKAGE}`);
+    process.exit(1);
+  }
+
+  console.log(`\n✅ ${PRO_PACKAGE} installed successfully!\n`);
+  console.log('Next steps:');
+  console.log('  npx aios-pro activate --key PRO-XXXX-XXXX-XXXX-XXXX');
+  console.log('  npx aios-pro status');
+  console.log('');
+}
+
+// ─── Main ───────────────────────────────────────────────────────────────────
+
+if (!command || command === 'help' || command === '--help' || command === '-h') {
+  showHelp();
+  process.exit(0);
+}
+
+if (command === '--version' || command === '-v') {
+  console.log(`aios-pro v${VERSION}`);
+  process.exit(0);
+}
+
+switch (command) {
+  case 'install':
+  case 'setup':
+    installPro();
+    break;
+
+  case 'activate':
+  case 'deactivate':
+  case 'status':
+  case 'features':
+  case 'validate':
+    if (!isProInstalled()) {
+      console.error(`${PRO_PACKAGE} is not installed.`);
+      console.error('Run first: npx aios-pro install\n');
+      process.exit(1);
+    }
+    delegateToAios(command);
+    break;
+
+  default:
+    console.error(`Unknown command: ${command}\n`);
+    showHelp();
+    process.exit(1);
+}

package/packages/aios-pro-cli/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "aios-pro",
+  "version": "0.1.0",
+  "description": "CLI for AIOS Pro — install, activate and manage your license",
+  "bin": {
+    "aios-pro": "bin/aios-pro.js"
+  },
+  "files": [
+    "bin/"
+  ],
+  "keywords": [
+    "aios",
+    "pro",
+    "license",
+    "cli",
+    "synkra"
+  ],
+  "author": "SynkraAI",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SynkraAI/aios-core.git",
+    "directory": "packages/aios-pro-cli"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  }
+}

package/packages/installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aios/installer",
-  "version": "3.2.0",
+  "version": "3.2.1",
   "description": "AIOS Installer - Automated setup wizard for AIOS projects (greenfield & brownfield)",
   "main": "src/index.js",
   "bin": {

package/packages/installer/src/installer/aios-core-installer.js

@@ -321,6 +321,29 @@ async function installAiosCore(options = {}) {
     });
     result.versionInfo = versionInfo;
 
+    // BUG-2 fix (INS-1): Install .aios-core dependencies after copy
+    // The copied .aios-core/package.json has dependencies (js-yaml, execa, etc.)
+    // that must be installed for the activation pipeline to work
+    const aiosCorePackageJson = path.join(targetAiosCore, 'package.json');
+    if (await fs.pathExists(aiosCorePackageJson)) {
+      spinner.text = 'Installing .aios-core dependencies (js-yaml, etc.)...';
+      try {
+        const { exec } = require('child_process');
+        const { promisify } = require('util');
+        const execAsync = promisify(exec);
+        await execAsync('npm install --production --ignore-scripts', {
+          cwd: targetAiosCore,
+          timeout: 60000,
+        });
+        spinner.succeed('Installed .aios-core dependencies');
+        spinner.start('Finishing installation...');
+      } catch (depError) {
+        spinner.warn(`Could not install .aios-core dependencies: ${depError.message}`);
+        spinner.start('Continuing installation...');
+        result.errors.push(`Dependencies warning: ${depError.message}`);
+      }
+    }
+
     result.success = true;
     spinner.succeed(`AIOS core installed (${result.installedFiles.length} files)`);