aios-core 4.0.1 → 4.0.2

package/.aios-core/install-manifest.yaml

@@ -7,8 +7,8 @@
 # - SHA256 hashes for change detection
 # - File types for categorization
 #
-version: 4.0.1
-generated_at: "2026-02-13T01:17:14.079Z"
+version: 4.0.2
+generated_at: "2026-02-13T01:40:56.998Z"
 generator: scripts/generate-install-manifest.js
 file_count: 971
 files:

package/.claude/hooks/README.md

@@ -0,0 +1,169 @@
+# Claude Code Hooks
+
+Sistema de governança automática para regras do CLAUDE.md.
+
+## Arquitetura
+
+```
+PreToolUse Hooks
+├── Read          → read-protection.py
+├── Write|Edit    → enforce-architecture-first.py
+│                 → write-path-validation.py
+│                 → mind-clone-governance.py
+└── Bash          → sql-governance.py
+                  → slug-validation.py
+```
+
+## Hooks Disponíveis
+
+### 1. read-protection.py
+**Trigger:** `Read`
+**Comportamento:** BLOQUEIA (exit 2)
+
+Impede leitura parcial (`limit`/`offset`) em arquivos protegidos:
+- `.claude/CLAUDE.md`
+- `.claude/rules/*.md`
+- `.aios-core/development/agents/*.md`
+- `supabase/docs/SCHEMA.md`
+- `package.json`, `tsconfig.json`
+- `app/components/ui/icons/icon-map.ts`
+
+### 2. enforce-architecture-first.py
+**Trigger:** `Write|Edit`
+**Comportamento:** BLOQUEIA (exit 2)
+
+Exige documentação aprovada antes de criar código em paths protegidos:
+- `supabase/functions/` → requer doc em `docs/architecture/` ou `docs/approved-plans/`
+- `supabase/migrations/` → requer doc ou permite edição de arquivo existente
+
+### 3. write-path-validation.py
+**Trigger:** `Write|Edit`
+**Comportamento:** AVISA (exit 0 + stderr)
+
+Avisa quando documentos parecem estar no path errado:
+- Sessions/handoffs → `docs/sessions/YYYY-MM/`
+- Architecture → `docs/architecture/`
+- Guides → `docs/guides/`
+
+### 4. sql-governance.py
+**Trigger:** `Bash`
+**Comportamento:** BLOQUEIA (exit 2)
+
+Intercepta comandos SQL perigosos:
+- `CREATE TABLE/VIEW/FUNCTION/TRIGGER`
+- `ALTER TABLE`
+- `DROP TABLE/VIEW/FUNCTION`
+- `CREATE TABLE AS SELECT` (backup proibido)
+
+**Exceções permitidas:**
+- `supabase migration` (CLI oficial)
+- `pg_dump` (backup/export)
+
+### 5. slug-validation.py
+**Trigger:** `Bash`
+**Comportamento:** BLOQUEIA (exit 2)
+
+Valida formato snake_case em slugs:
+- Pattern: `^[a-z0-9]+(_[a-z0-9]+)*$`
+- ✅ `jose_carlos_amorim`
+- ❌ `jose-carlos-amorim` (hyphen)
+- ❌ `JoseAmorim` (camelCase)
+
+### 6. mind-clone-governance.py
+**Trigger:** `Write|Edit`
+**Comportamento:** BLOQUEIA (exit 2)
+
+Impede criação de mind clones sem DNA extraído previamente.
+
+**O que é bloqueado:**
+- Criar novo arquivo `squads/*/agents/*.md` que pareça ser um mind clone
+- Mind clones = agents baseados em pessoas reais (não funcionais)
+
+**O que NÃO é bloqueado:**
+- Editar arquivos existentes (permite updates)
+- Agents funcionais (identificados por sufixo):
+  - `-chief`, `-orchestrator`, `-chair`
+  - `-validator`, `-calculator`, `-generator`, `-extractor`, `-analyzer`
+  - `-architect`, `-mapper`, `-designer`, `-engineer`
+  - `tools-*`, `process-*`, `workflow-*`
+
+**Locais de DNA verificados:**
+- `squads/{pack}/data/minds/{agent_id}_dna.yaml`
+- `squads/{pack}/data/minds/{agent_id}_dna.md`
+- `squads/{pack}/data/{agent_id}-dna.yaml`
+- `outputs/minds/{agent_id}/`
+
+**Solução quando bloqueado:**
+1. Execute o pipeline de extração de DNA: `/squad-creator` → `*collect-sources` → `*extract-voice-dna` → `*extract-thinking-dna`
+2. OU se é agent funcional, renomeie com sufixo apropriado
+
+## Exit Codes
+
+| Code | Significado |
+|------|-------------|
+| 0 | Permitido (operação continua) |
+| 2 | Bloqueado (operação cancelada, mostra stderr) |
+| Outro | Erro não-bloqueante |
+
+## Input Format
+
+Hooks recebem JSON via stdin:
+
+```json
+{
+  "session_id": "abc123",
+  "hook_event_name": "PreToolUse",
+  "tool_name": "Read",
+  "tool_input": {
+    "file_path": "/path/to/file",
+    "limit": 100
+  },
+  "cwd": "/Users/alan/Code/mmos"
+}
+```
+
+## Debugging
+
+Para testar um hook manualmente:
+
+```bash
+echo '{"tool_name": "Read", "tool_input": {"file_path": ".claude/CLAUDE.md", "limit": 100}}' | python3 .claude/hooks/read-protection.py
+echo $?  # Deve retornar 2 (bloqueado)
+```
+
+## Configuração
+
+Hooks são configurados em `.claude/settings.local.json`:
+
+```json
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Read",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 \"$CLAUDE_PROJECT_DIR/.claude/hooks/read-protection.py\"",
+            "timeout": 5
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+## Manutenção
+
+Para adicionar novo hook:
+
+1. Criar arquivo `.claude/hooks/novo-hook.py`
+2. Adicionar entrada em `.claude/settings.local.json`
+3. Documentar neste README
+4. Testar com casos reais
+
+---
+
+*Criado: 2026-01-24*
+*Arquitetura: docs/architecture/claude-md-governance-system.md*

package/.claude/hooks/precompact-session-digest.js

@@ -0,0 +1,46 @@
+#!/usr/bin/env node
+/**
+ * Claude Code Hook: PreCompact Session Digest
+ *
+ * This hook is registered with Claude Code to trigger before context compact.
+ * It delegates to the unified hook runner in aios-core.
+ *
+ * Installation:
+ * - Claude Code automatically discovers hooks in .claude/hooks/
+ * - Hook naming: {event}-{name}.js (e.g., precompact-session-digest.js)
+ *
+ * @see .aios-core/hooks/unified/runners/precompact-runner.js
+ * @see Story MIS-3 - Session Digest (PreCompact Hook)
+ */
+
+'use strict';
+
+const path = require('path');
+
+// Resolve path to the unified hook runner
+const PROJECT_ROOT = path.resolve(__dirname, '..', '..');
+const runnerPath = path.join(
+  PROJECT_ROOT,
+  '.aios-core',
+  'hooks',
+  'unified',
+  'runners',
+  'precompact-runner.js',
+);
+
+// Load and execute the hook runner
+try {
+  const { onPreCompact } = require(runnerPath);
+
+  // Export the hook handler for Claude Code
+  module.exports = async (context) => {
+    return await onPreCompact(context);
+  };
+} catch (error) {
+  console.error('[PreCompact Hook] Failed to load hook runner:', error.message);
+
+  // Graceful degradation - export no-op function
+  module.exports = async () => {
+    console.log('[PreCompact Hook] Hook runner not available, skipping');
+  };
+}

package/.claude/hooks/synapse-engine.js

@@ -0,0 +1,87 @@
+#!/usr/bin/env node
+'use strict';
+
+/**
+ * SYNAPSE Hook Entry Point — UserPromptSubmit
+ *
+ * Thin wrapper that reads JSON from stdin, delegates to SynapseEngine,
+ * and writes <synapse-rules> context to stdout.
+ *
+ * - Silent exit on missing .synapse/ directory
+ * - Silent exit on any error (never blocks the user prompt)
+ * - All errors logged to stderr with [synapse-hook] prefix
+ * - 5s safety timeout as defense-in-depth
+ *
+ * @module synapse-engine-hook
+ */
+
+const path = require('path');
+const fs = require('fs');
+
+/** Safety timeout (ms) — defense-in-depth; Claude Code also manages hook timeout. */
+const HOOK_TIMEOUT_MS = 5000;
+
+/**
+ * Read all data from stdin as a JSON object.
+ * @returns {Promise<object>} Parsed JSON input
+ */
+function readStdin() {
+  return new Promise((resolve, reject) => {
+    let data = '';
+    process.stdin.setEncoding('utf8');
+    process.stdin.on('error', (e) => reject(e));
+    process.stdin.on('data', (chunk) => { data += chunk; });
+    process.stdin.on('end', () => {
+      try { resolve(JSON.parse(data)); }
+      catch (e) { reject(e); }
+    });
+  });
+}
+
+/** Main hook execution pipeline. */
+async function main() {
+  const input = await readStdin();
+  const { sessionId, cwd, prompt } = input;
+  if (!cwd) return;
+  const synapsePath = path.join(cwd, '.synapse');
+  if (!fs.existsSync(synapsePath)) return;
+
+  const { loadSession } = require(
+    path.join(cwd, '.aios-core', 'core', 'synapse', 'session', 'session-manager.js')
+  );
+  const { SynapseEngine } = require(
+    path.join(cwd, '.aios-core', 'core', 'synapse', 'engine.js')
+  );
+
+  const sessionsDir = path.join(synapsePath, 'sessions');
+  const session = loadSession(sessionId, sessionsDir) || { prompt_count: 0 };
+  const engine = new SynapseEngine(synapsePath);
+  const result = await engine.process(prompt, session);
+
+  process.stdout.write(JSON.stringify({
+    hookSpecificOutput: { additionalContext: result.xml || '' },
+  }));
+}
+
+/**
+ * Safely exit the process — no-op inside Jest workers to prevent worker crashes.
+ * @param {number} code - Exit code
+ */
+function safeExit(code) {
+  if (process.env.JEST_WORKER_ID) return;
+  process.exit(code);
+}
+
+/** Entry point runner — sets safety timeout and executes main(). */
+function run() {
+  const timer = setTimeout(() => safeExit(0), HOOK_TIMEOUT_MS);
+  timer.unref();
+  main().catch((err) => {
+    console.error(`[synapse-hook] ${err.message}`);
+    safeExit(0);
+  });
+}
+
+if (require.main === module) run();
+
+module.exports = { readStdin, main, run, HOOK_TIMEOUT_MS };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aios-core",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "description": "Synkra AIOS: AI-Orchestrated System for Full Stack Development - Core Framework",
   "bin": {
     "aios": "bin/aios.js",
@@ -18,6 +18,9 @@
     ".aios-core/",
     ".claude/CLAUDE.md",
     ".claude/rules/",
+    ".claude/hooks/synapse-engine.js",
+    ".claude/hooks/precompact-session-digest.js",
+    ".claude/hooks/README.md",
     "README.md",
     "LICENSE"
   ],

package/packages/installer/src/installer/aios-core-installer.js

@@ -324,8 +324,9 @@ async function installAiosCore(options = {}) {
     // BUG-2 fix (INS-1): Install .aios-core dependencies after copy
     // The copied .aios-core/package.json has dependencies (js-yaml, execa, etc.)
     // that must be installed for the activation pipeline to work
-    if (await fs.pathExists(path.join(targetAiosCore, 'package.json'))) {
-      spinner.text = 'Installing .aios-core dependencies...';
+    const aiosCorePackageJson = path.join(targetAiosCore, 'package.json');
+    if (await fs.pathExists(aiosCorePackageJson)) {
+      spinner.text = 'Installing .aios-core dependencies (js-yaml, etc.)...';
       try {
         const { exec } = require('child_process');
         const { promisify } = require('util');
@@ -334,8 +335,11 @@ async function installAiosCore(options = {}) {
           cwd: targetAiosCore,
           timeout: 60000,
         });
+        spinner.succeed('Installed .aios-core dependencies');
+        spinner.start('Finishing installation...');
       } catch (depError) {
-        // Non-fatal: dependencies may already exist or network unavailable
+        spinner.warn(`Could not install .aios-core dependencies: ${depError.message}`);
+        spinner.start('Continuing installation...');
         result.errors.push(`Dependencies warning: ${depError.message}`);
       }
     }