aios-core 4.0.2 → 4.1.0

package/.claude/hooks/pre-commit-mmos-guard.sh

@@ -0,0 +1,99 @@
+#!/bin/bash
+# MMOS Architecture Guard - Pre-commit Hook
+# Version: 1.0
+# Purpose: Prevent architectural violations in file placement
+
+set -e
+
+echo "🛡️  Running MMOS Architecture Guard..."
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m' # No Color
+
+violations=0
+
+# Get staged files
+staged_files=$(git diff --cached --name-only --diff-filter=ACM)
+
+# Rule 1: No mind-specific folders in docs/mmos/
+echo "Checking Rule 1: No mind-specific folders in docs/mmos/..."
+
+if echo "$staged_files" | grep -qE "docs/mmos/(validations|migrations)/[a-z_-]+"; then
+    echo -e "${RED}❌ VIOLATION: Mind-specific folders detected in docs/mmos/${NC}"
+    echo ""
+    echo "Found:"
+    echo "$staged_files" | grep -E "docs/mmos/(validations|migrations)/[a-z_-]+" | sed 's/^/  - /'
+    echo ""
+    echo -e "${YELLOW}Fix: Move to outputs/minds/{slug}/docs/ instead${NC}"
+    echo ""
+    echo "Examples:"
+    echo "  ❌ docs/mmos/validations/pedro-valerio-checklist.md"
+    echo "  ✅ outputs/minds/pedro_valerio/docs/validation-checklist.md"
+    echo ""
+    violations=$((violations + 1))
+fi
+
+# Rule 2: No output files in expansion pack
+echo "Checking Rule 2: No output files in expansion pack..."
+
+if echo "$staged_files" | grep -qE "expansion-packs/mmos/(benchmarks|outputs|results)/"; then
+    echo -e "${RED}❌ VIOLATION: Output files in expansion pack${NC}"
+    echo ""
+    echo "Found:"
+    echo "$staged_files" | grep -E "expansion-packs/mmos/(benchmarks|outputs|results)/" | sed 's/^/  - /'
+    echo ""
+    echo -e "${YELLOW}Fix: Move to docs/mmos/qa/benchmarks/ or appropriate output location${NC}"
+    echo ""
+    violations=$((violations + 1))
+fi
+
+# Rule 3: Check for common naming violations
+echo "Checking Rule 3: Mind-specific files should be in outputs/minds/..."
+
+# Check for files with mind names in docs/mmos/ (excluding allowed folders)
+for mind_name in $(ls outputs/minds/ 2>/dev/null | grep -v "^README" || true); do
+    if echo "$staged_files" | grep -qE "docs/mmos/.*${mind_name}"; then
+        # Exclude allowed locations (reports can mention minds)
+        if ! echo "$staged_files" | grep -qE "docs/mmos/(reports|architecture)/"; then
+            echo -e "${YELLOW}⚠️  WARNING: File containing mind name '$mind_name' in docs/mmos/${NC}"
+            echo "$staged_files" | grep -E "docs/mmos/.*${mind_name}" | sed 's/^/  - /'
+            echo ""
+            echo "Verify this is system-level documentation, not mind-specific"
+            echo ""
+        fi
+    fi
+done
+
+# Rule 4: Verify outputs/minds/{slug}/ structure
+echo "Checking Rule 4: outputs/minds/{slug}/ structure..."
+
+if echo "$staged_files" | grep -qE "outputs/minds/[^/]+/[^/]+\.(md|yaml|json)$"; then
+    echo -e "${YELLOW}⚠️  WARNING: Files in outputs/minds/{slug}/ root detected${NC}"
+    echo ""
+    echo "Found:"
+    echo "$staged_files" | grep -E "outputs/minds/[^/]+/[^/]+\.(md|yaml|json)$" | sed 's/^/  - /'
+    echo ""
+    echo "Pipeline outputs should be in subfolders:"
+    echo "  - analysis/, synthesis/, implementation/, system_prompts/, kb/"
+    echo "  - Process docs should be in docs/"
+    echo "  - Logs should be in logs/"
+    echo ""
+fi
+
+# Final verdict
+echo ""
+if [ $violations -gt 0 ]; then
+    echo -e "${RED}❌ COMMIT REJECTED: $violations architectural violation(s) found${NC}"
+    echo ""
+    echo "Review:"
+    echo "  - docs/mmos/ARCHITECTURE_RULES.md"
+    echo "  - .aios-core/checklists/mmos-architecture-guard.md"
+    echo ""
+    exit 1
+else
+    echo -e "${GREEN}✅ Architecture guard passed${NC}"
+    exit 0
+fi

package/.claude/hooks/pre-commit-version-check.sh

@@ -0,0 +1,156 @@
+#!/bin/bash
+#
+# Pre-Commit Hook: Version Metadata Validation
+#
+# Ensures all tasks and agents have version metadata in frontmatter.
+# This prevents silent version mismatches (e.g., v1.0 agent + v2.0 task).
+#
+# Usage:
+#   Run manually: .aios-core/hooks/pre-commit-version-check.sh
+#   Install: .aios-core/hooks/install-hooks.sh
+#
+# Story: STORY-3.10 (Version Alignment & Compatibility Checks)
+
+set -e
+
+echo "🔍 Validating task and agent version metadata..."
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m' # No Color
+
+# Track validation status
+ERRORS=0
+
+# Function to check if file has required version fields
+check_task_version() {
+    local file="$1"
+    local missing_fields=()
+
+    if ! grep -q "^task_name:" "$file"; then
+        missing_fields+=("task_name")
+    fi
+
+    if ! grep -q "^task_version:" "$file"; then
+        missing_fields+=("task_version")
+    fi
+
+    if ! grep -q "^required_agent_version:" "$file"; then
+        missing_fields+=("required_agent_version")
+    fi
+
+    if ! grep -q "^description:" "$file"; then
+        missing_fields+=("description")
+    fi
+
+    if ! grep -q "^last_updated:" "$file"; then
+        missing_fields+=("last_updated")
+    fi
+
+    if [ ${#missing_fields[@]} -gt 0 ]; then
+        echo -e "${RED}❌ ERROR: $file missing version metadata${NC}"
+        for field in "${missing_fields[@]}"; do
+            echo -e "${RED}   - Missing field: '$field'${NC}"
+        done
+        echo ""
+        ERRORS=$((ERRORS + 1))
+        return 1
+    fi
+
+    return 0
+}
+
+check_agent_version() {
+    local file="$1"
+    local missing_fields=()
+
+    if ! grep -q "^agent_name:" "$file"; then
+        missing_fields+=("agent_name")
+    fi
+
+    if ! grep -q "^agent_version:" "$file"; then
+        missing_fields+=("agent_version")
+    fi
+
+    if ! grep -q "^compatible_task_versions:" "$file"; then
+        missing_fields+=("compatible_task_versions")
+    fi
+
+    if ! grep -q "^description:" "$file"; then
+        missing_fields+=("description")
+    fi
+
+    if ! grep -q "^last_updated:" "$file"; then
+        missing_fields+=("last_updated")
+    fi
+
+    if [ ${#missing_fields[@]} -gt 0 ]; then
+        echo -e "${RED}❌ ERROR: $file missing version metadata${NC}"
+        for field in "${missing_fields[@]}"; do
+            echo -e "${RED}   - Missing field: '$field'${NC}"
+        done
+        echo ""
+        ERRORS=$((ERRORS + 1))
+        return 1
+    fi
+
+    return 0
+}
+
+# Check all tasks in expansion-packs/creator-os/tasks/
+echo "Checking CreatorOS tasks..."
+TASK_COUNT=0
+for task in expansion-packs/creator-os/tasks/*.md; do
+    # Skip backup files
+    if [[ "$task" == *"-backup.md" ]]; then
+        echo -e "${YELLOW}⏭️  Skipping backup: $task${NC}"
+        continue
+    fi
+
+    if [ -f "$task" ]; then
+        if check_task_version "$task"; then
+            echo -e "${GREEN}✅ $task${NC}"
+        fi
+        TASK_COUNT=$((TASK_COUNT + 1))
+    fi
+done
+
+# Check all agents in expansion-packs/creator-os/agents/
+echo ""
+echo "Checking CreatorOS agents..."
+AGENT_COUNT=0
+for agent in expansion-packs/creator-os/agents/*.md; do
+    if [ -f "$agent" ]; then
+        if check_agent_version "$agent"; then
+            echo -e "${GREEN}✅ $agent${NC}"
+        fi
+        AGENT_COUNT=$((AGENT_COUNT + 1))
+    fi
+done
+
+echo ""
+echo "────────────────────────────────────────────────────────────"
+echo "Summary:"
+echo "  - Tasks checked: $TASK_COUNT"
+echo "  - Agents checked: $AGENT_COUNT"
+echo "  - Errors found: $ERRORS"
+echo "────────────────────────────────────────────────────────────"
+
+if [ $ERRORS -gt 0 ]; then
+    echo ""
+    echo -e "${RED}❌ Version validation FAILED${NC}"
+    echo ""
+    echo "How to fix:"
+    echo "1. Add YAML frontmatter to each flagged file"
+    echo "2. Include all required fields (task_name, task_version, etc.)"
+    echo "3. See Story 3.10 for examples"
+    echo ""
+    exit 1
+fi
+
+echo ""
+echo -e "${GREEN}✅ Version validation PASSED${NC}"
+echo ""
+exit 0

package/.claude/hooks/read-protection.py

@@ -0,0 +1,151 @@
+#!/usr/bin/env python3
+"""
+Hook: Read Protection
+
+REGRA: Arquivos protegidos DEVEM ser lidos completamente (sem limit/offset).
+
+Este hook intercepta chamadas Read e bloqueia leitura parcial em arquivos
+que requerem contexto completo para edição segura.
+
+Exit Codes:
+- 0: Permitido
+- 2: Bloqueado (arquivo protegido com limit/offset)
+"""
+
+import json
+import sys
+import os
+import fnmatch
+from pathlib import Path
+
+# =============================================================================
+# CONFIGURAÇÃO: Arquivos que DEVEM ser lidos completamente
+# =============================================================================
+
+PROTECTED_PATTERNS = [
+    # Configuração do Claude
+    ".claude/CLAUDE.md",
+    ".claude/rules/*.md",
+    ".claude/settings*.json",
+
+    # Definições de agentes
+    ".aios-core/development/agents/*.md",
+    ".aios-upstream/.aios-core/development/agents/*.md",
+
+    # Documentação crítica
+    "docs/mmos/ARCHITECTURE_RULES.md",
+    "supabase/docs/SCHEMA.md",
+
+    # Configuração do projeto
+    "package.json",
+    "tsconfig.json",
+    "tsconfig.*.json",
+
+    # Arquivos de código críticos
+    "app/components/ui/icons/icon-map.ts",
+
+    # Migrations (sempre ler completo antes de editar)
+    "supabase/migrations/*.sql",
+]
+
+# =============================================================================
+# LÓGICA DO HOOK
+# =============================================================================
+
+def get_project_root():
+    """Obtém o root do projeto via variável de ambiente ou cwd."""
+    return os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd())
+
+def normalize_path(file_path: str, project_root: str) -> str:
+    """Normaliza path para relativo ao projeto."""
+    if file_path.startswith(project_root):
+        return file_path[len(project_root):].lstrip("/")
+    if file_path.startswith("/"):
+        # Path absoluto fora do projeto
+        return file_path
+    return file_path
+
+def matches_protected_pattern(relative_path: str) -> bool:
+    """Verifica se o path corresponde a algum padrão protegido."""
+    for pattern in PROTECTED_PATTERNS:
+        if fnmatch.fnmatch(relative_path, pattern):
+            return True
+        # Também verificar se é substring (para paths com wildcards)
+        if "*" not in pattern and pattern in relative_path:
+            return True
+    return False
+
+def has_partial_read_params(tool_input: dict) -> tuple[bool, str]:
+    """Verifica se a chamada Read tem parâmetros de leitura parcial."""
+    limit = tool_input.get("limit")
+    offset = tool_input.get("offset")
+
+    reasons = []
+    if limit is not None:
+        reasons.append(f"limit={limit}")
+    if offset is not None and offset != 0:
+        reasons.append(f"offset={offset}")
+
+    return len(reasons) > 0, ", ".join(reasons)
+
+def main():
+    # Ler input do stdin
+    try:
+        input_data = json.load(sys.stdin)
+    except json.JSONDecodeError:
+        # Se não conseguir parsear, permitir (fail-open)
+        sys.exit(0)
+
+    tool_name = input_data.get("tool_name", "")
+    tool_input = input_data.get("tool_input", {})
+
+    # Só processar Read
+    if tool_name != "Read":
+        sys.exit(0)
+
+    file_path = tool_input.get("file_path", "")
+    if not file_path:
+        sys.exit(0)
+
+    # Normalizar path
+    project_root = get_project_root()
+    relative_path = normalize_path(file_path, project_root)
+
+    # Verificar se é arquivo protegido
+    if not matches_protected_pattern(relative_path):
+        sys.exit(0)
+
+    # Verificar se tem parâmetros de leitura parcial
+    is_partial, partial_reason = has_partial_read_params(tool_input)
+
+    if not is_partial:
+        # Leitura completa, permitir
+        sys.exit(0)
+
+    # BLOQUEAR: Tentando ler arquivo protegido parcialmente
+    error_message = f"""
+╔══════════════════════════════════════════════════════════════════════════════╗
+║  🛑 READ PROTECTION: Arquivo protegido deve ser lido completamente           ║
+╠══════════════════════════════════════════════════════════════════════════════╣
+║                                                                              ║
+║  Arquivo: {relative_path[:58]:<58} ║
+║  Problema: {partial_reason:<57} ║
+║                                                                              ║
+║  REGRA: Este arquivo está na lista de arquivos protegidos.                   ║
+║         Arquivos protegidos DEVEM ser lidos completamente para evitar:       ║
+║         - Edições com contexto incompleto                                    ║
+║         - Duplicações acidentais                                             ║
+║         - Breaking changes não intencionais                                  ║
+║                                                                              ║
+║  SOLUÇÃO: Remova os parâmetros 'limit' e 'offset' da chamada Read.           ║
+║                                                                              ║
+║  ✅ Read(file_path="{relative_path[:40]}")
+║  ❌ Read(file_path="...", limit=100)                                         ║
+║                                                                              ║
+╚══════════════════════════════════════════════════════════════════════════════╝
+"""
+    print(error_message, file=sys.stderr)
+    sys.exit(2)
+
+if __name__ == "__main__":
+    main()

package/.claude/hooks/slug-validation.py

@@ -0,0 +1,176 @@
+#!/usr/bin/env python3
+"""
+Hook: Slug Validation
+
+REGRA: Todos os slugs DEVEM usar snake_case (underscores, não hyphens).
+
+Este hook intercepta comandos SQL que inserem/atualizam slugs e valida
+o formato antes de permitir a operação.
+
+Pattern válido: ^[a-z0-9]+(_[a-z0-9]+)*$
+Exemplos válidos: jose_carlos_amorim, alan_nicolas, elon_musk
+Exemplos inválidos: jose-carlos-amorim, JoseAmorim, ELON_MUSK
+
+Exit Codes:
+- 0: Permitido
+- 2: Bloqueado (slug com formato inválido)
+"""
+
+import json
+import sys
+import re
+
+# =============================================================================
+# CONFIGURAÇÃO
+# =============================================================================
+
+# Pattern válido para slugs
+SLUG_PATTERN = re.compile(r"^[a-z0-9]+(_[a-z0-9]+)*$")
+
+# Tabelas que têm coluna slug
+TABLES_WITH_SLUG = [
+    "minds",
+    "contents",
+    "content_projects",
+    "tools",
+    "drivers",
+    "mapping_systems",
+    "frameworks",
+]
+
+# =============================================================================
+# LÓGICA DO HOOK
+# =============================================================================
+
+def extract_slug_values(command: str) -> list[tuple[str, str]]:
+    """
+    Extrai valores de slug de comandos SQL INSERT/UPDATE.
+
+    Returns:
+        Lista de tuplas (table, slug_value)
+    """
+    found = []
+    command_upper = command.upper()
+
+    for table in TABLES_WITH_SLUG:
+        table_upper = table.upper()
+
+        # Detectar INSERT INTO table (..., slug, ...) VALUES (..., 'value', ...)
+        insert_pattern = rf"INSERT\s+INTO\s+{table}\s*\([^)]*\bslug\b[^)]*\)\s*VALUES\s*\(([^)]+)\)"
+        insert_match = re.search(insert_pattern, command, re.IGNORECASE)
+        if insert_match:
+            values_str = insert_match.group(1)
+            # Extrair valores entre aspas
+            slug_values = re.findall(r"'([^']+)'", values_str)
+            for sv in slug_values:
+                # Verificar se parece um slug (não é UUID, não é número)
+                if not re.match(r"^[0-9a-f-]{36}$", sv) and not sv.isdigit():
+                    found.append((table, sv))
+
+        # Detectar UPDATE table SET slug = 'value'
+        update_pattern = rf"UPDATE\s+{table}\s+.*SET\s+.*\bslug\s*=\s*'([^']+)'"
+        update_match = re.search(update_pattern, command, re.IGNORECASE)
+        if update_match:
+            found.append((table, update_match.group(1)))
+
+    return found
+
+def validate_slug(slug: str) -> tuple[bool, str]:
+    """
+    Valida se o slug está no formato correto.
+
+    Returns:
+        (is_valid, error_message)
+    """
+    if SLUG_PATTERN.match(slug):
+        return True, ""
+
+    errors = []
+
+    if "-" in slug:
+        errors.append("contém hyphens (use underscores)")
+    if any(c.isupper() for c in slug):
+        errors.append("contém maiúsculas (use lowercase)")
+    if slug.startswith("_") or slug.endswith("_"):
+        errors.append("começa ou termina com underscore")
+    if "__" in slug:
+        errors.append("contém underscores duplos")
+    if not errors:
+        errors.append("formato inválido")
+
+    return False, ", ".join(errors)
+
+def main():
+    # Ler input do stdin
+    try:
+        input_data = json.load(sys.stdin)
+    except json.JSONDecodeError:
+        sys.exit(0)
+
+    tool_name = input_data.get("tool_name", "")
+    tool_input = input_data.get("tool_input", {})
+
+    # Só processar Bash
+    if tool_name != "Bash":
+        sys.exit(0)
+
+    command = tool_input.get("command", "")
+    if not command:
+        sys.exit(0)
+
+    # Extrair slugs do comando
+    slug_values = extract_slug_values(command)
+
+    if not slug_values:
+        sys.exit(0)
+
+    # Validar cada slug
+    invalid_slugs = []
+    for table, slug in slug_values:
+        is_valid, error = validate_slug(slug)
+        if not is_valid:
+            invalid_slugs.append((table, slug, error))
+
+    if not invalid_slugs:
+        sys.exit(0)
+
+    # BLOQUEAR: Slug inválido detectado
+    slug_errors = "\n".join([
+        f"║    • {table}.slug = '{slug[:30]}' → {error[:30]:<30} ║"
+        for table, slug, error in invalid_slugs[:5]
+    ])
+
+    # Sugerir correção
+    suggestions = "\n".join([
+        f"║    • '{slug}' → '{slug.lower().replace('-', '_')}'{'':>30} ║"
+        for _, slug, _ in invalid_slugs[:5]
+    ])
+
+    error_message = f"""
+╔══════════════════════════════════════════════════════════════════════════════╗
+║  🛑 SLUG VALIDATION: Formato de slug inválido                                ║
+╠══════════════════════════════════════════════════════════════════════════════╣
+║                                                                              ║
+║  Slugs inválidos detectados:                                                 ║
+{slug_errors}
+║                                                                              ║
+║  REGRA: Todos os slugs DEVEM usar snake_case                                 ║
+║                                                                              ║
+║    Pattern válido: ^[a-z0-9]+(_[a-z0-9]+)*$                                  ║
+║    ✅ jose_carlos_amorim                                                     ║
+║    ✅ alan_nicolas                                                           ║
+║    ❌ jose-carlos-amorim (hyphen)                                            ║
+║    ❌ JoseAmorim (camelCase)                                                 ║
+║                                                                              ║
+║  Sugestões de correção:                                                      ║
+{suggestions}
+║                                                                              ║
+║  POR QUÊ: Slugs inconsistentes causam falhas silenciosas no frontend.        ║
+║                                                                              ║
+╚══════════════════════════════════════════════════════════════════════════════╝
+"""
+    print(error_message, file=sys.stderr)
+    sys.exit(2)
+
+if __name__ == "__main__":
+    main()