aios-core 4.0.2 → 4.1.0

package/bin/aios-minimal.js

@@ -4,7 +4,7 @@
  * AIOS-FullStack Minimal Installation
  *
  * DEPRECATED (since v3.11.1, scheduled for removal in v5.0.0):
- * The --minimal mode was designed for expansion-packs which have been
+ * The --minimal mode was designed for squads which have been
  * replaced by the Squads system (OSR-8). This command now runs the
  * standard wizard through the main router.
  */
@@ -14,7 +14,7 @@ const path = require('path');
 
 // Show deprecation warning
 console.log('\n⚠️  DEPRECATION WARNING: aios-minimal is deprecated.');
-console.log('   The --minimal mode (expansion-packs) was replaced by Squads.');
+console.log('   The --minimal mode (squads) was replaced by Squads.');
 console.log('   Running standard installation wizard instead.\n');
 
 // Get the path to the main router (aios.js)

package/bin/aios.js

@@ -20,7 +20,7 @@ const command = args[0];
 
 // Helper: Run initialization wizard
 async function runWizard(options = {}) {
-  // Use the new v2.1 wizard from packages/installer/src/wizard/index.js
+  // Use the v4 wizard from packages/installer/src/wizard/index.js
   const wizardPath = path.join(__dirname, '..', 'packages', 'installer', 'src', 'wizard', 'index.js');
 
   if (!fs.existsSync(wizardPath)) {
@@ -43,7 +43,7 @@ async function runWizard(options = {}) {
   }
 
   try {
-    // Run the new v2.1 wizard with options
+    // Run the v4 wizard with options
     const { runWizard: executeWizard } = require(wizardPath);
     await executeWizard(options);
   } catch (error) {
@@ -59,16 +59,16 @@ AIOS-FullStack v${packageJson.version}
 AI-Orchestrated System for Full Stack Development
 
 USAGE:
-  npx @synkra/aios-core@latest              # Run installation wizard
-  npx @synkra/aios-core@latest install      # Install in current project
-  npx @synkra/aios-core@latest init <name>  # Create new project
-  npx @synkra/aios-core@latest update       # Update to latest version
-  npx @synkra/aios-core@latest validate     # Validate installation integrity
-  npx @synkra/aios-core@latest info         # Show system info
-  npx @synkra/aios-core@latest doctor       # Run diagnostics
-  npx @synkra/aios-core@latest --version    # Show version
-  npx @synkra/aios-core@latest --version -d # Show detailed version info
-  npx @synkra/aios-core@latest --help       # Show this help
+  npx aios-core@latest              # Run installation wizard
+  npx aios-core@latest install      # Install in current project
+  npx aios-core@latest init <name>  # Create new project
+  npx aios-core@latest update       # Update to latest version
+  npx aios-core@latest validate     # Validate installation integrity
+  npx aios-core@latest info         # Show system info
+  npx aios-core@latest doctor       # Run diagnostics
+  npx aios-core@latest --version    # Show version
+  npx aios-core@latest --version -d # Show detailed version info
+  npx aios-core@latest --help       # Show this help
 
 UPDATE:
   aios update                    # Update to latest version
@@ -99,13 +99,13 @@ SERVICE DISCOVERY:
 
 EXAMPLES:
   # Install in current directory
-  npx @synkra/aios-core@latest
+  npx aios-core@latest
 
   # Install with minimal mode (only expansion-creator)
-  npx @synkra/aios-core-minimal@latest
+  npx aios-core-minimal@latest
 
   # Create new project
-  npx @synkra/aios-core@latest init my-project
+  npx aios-core@latest init my-project
 
   # Search for workers
   aios workers search "json csv"
@@ -126,7 +126,7 @@ async function showVersion() {
 
   // Detailed version output (Story 7.2: Version Tracking)
   console.log(`AIOS-FullStack v${packageJson.version}`);
-  console.log('Package: @synkra/aios-core');
+  console.log('Package: aios-core');
 
   // Check for local installation
   const localVersionPath = path.join(process.cwd(), '.aios-core', 'version.json');
@@ -485,7 +485,7 @@ Examples:
     });
     hasErrors = true;
     console.log('✗ AIOS Core not installed');
-    console.log('  Run: npx @synkra/aios-core@latest');
+    console.log('  Run: npx aios-core@latest');
   }
 
   // Check 5: AIOS Pro license status (Task 5.1)
@@ -633,7 +633,7 @@ Options:
 What gets removed:
   - .aios-core/     Framework core files
   - docs/stories/   Story files (if created by AIOS)
-  - squads/         Squad expansion packs
+  - squads/         Squad definitions
   - .gitignore      AIOS-added entries only
 
 What is preserved (with --keep-data):
@@ -702,7 +702,7 @@ async function runUninstall(options = {}) {
   // Items to remove
   const itemsToRemove = [
     { path: '.aios-core', description: 'Framework core' },
-    { path: 'squads', description: 'Squad expansion packs' },
+    { path: 'squads', description: 'Squad definitions' },
   ];
 
   // Optionally remove .aios

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aios-core",
-  "version": "4.0.2",
+  "version": "4.1.0",
   "description": "Synkra AIOS: AI-Orchestrated System for Full Stack Development - Core Framework",
   "bin": {
     "aios": "bin/aios.js",
@@ -18,9 +18,7 @@
     ".aios-core/",
     ".claude/CLAUDE.md",
     ".claude/rules/",
-    ".claude/hooks/synapse-engine.js",
-    ".claude/hooks/precompact-session-digest.js",
-    ".claude/hooks/README.md",
+    ".claude/hooks/",
     "README.md",
     "LICENSE"
   ],
@@ -41,6 +39,11 @@
     "sync:ide": "node .aios-core/infrastructure/scripts/ide-sync/index.js sync",
     "sync:ide:validate": "node .aios-core/infrastructure/scripts/ide-sync/index.js validate",
     "sync:ide:check": "node .aios-core/infrastructure/scripts/ide-sync/index.js validate --strict",
+    "sync:ide:codex": "node .aios-core/infrastructure/scripts/ide-sync/index.js sync --ide codex",
+    "sync:skills:codex": "node .aios-core/infrastructure/scripts/codex-skills-sync/index.js",
+    "sync:skills:codex:global": "node .aios-core/infrastructure/scripts/codex-skills-sync/index.js --global --global-only",
+    "validate:codex-skills": "node .aios-core/infrastructure/scripts/codex-skills-sync/validate.js --strict",
+    "validate:paths": "node .aios-core/infrastructure/scripts/validate-paths.js",
     "sync:ide:cursor": "node .aios-core/infrastructure/scripts/ide-sync/index.js sync --ide cursor",
     "sync:ide:windsurf": "node .aios-core/infrastructure/scripts/ide-sync/index.js sync --ide windsurf",
     "prepublishOnly": "npm run generate:manifest && npm run validate:manifest",

package/packages/aios-pro-cli/bin/aios-pro.js

@@ -13,12 +13,14 @@
  *   status              Show license status
  *   features            List available pro features
  *   validate            Force online license revalidation
+ *   recover             Recover lost license key via email
  *   help                Show help
  */
 
 const { execSync, spawnSync } = require('child_process');
 const path = require('path');
 const fs = require('fs');
+const { recoverLicense } = require('../src/recover');
 
 const PRO_PACKAGE = '@aios-fullstack/pro';
 const VERSION = require('../package.json').version;
@@ -76,6 +78,51 @@ function delegateToAios(subcommand) {
   process.exit(result.status ?? 0);
 }
 
+/**
+ * Get value of a CLI argument (e.g., --key VALUE).
+ *
+ * @param {string} flag - Flag name (e.g., '--key')
+ * @returns {string|null} Value or null
+ */
+function getArgValue(flag) {
+  const idx = args.indexOf(flag);
+  if (idx !== -1 && idx + 1 < args.length) {
+    return args[idx + 1];
+  }
+  return null;
+}
+
+/**
+ * Run the Pro Installation Wizard.
+ *
+ * @param {string} [key] - Pre-provided license key
+ */
+function runProWizard(key) {
+  // Lazy import to avoid requiring installer when not needed
+  let proSetup;
+  try {
+    proSetup = require('../../installer/src/wizard/pro-setup');
+  } catch {
+    console.error('Pro wizard module not found.');
+    console.error('Ensure aios-core installer is available.\n');
+    process.exit(1);
+  }
+
+  const options = {};
+  if (key) {
+    options.key = key;
+  }
+
+  proSetup.runProWizard(options).then((result) => {
+    if (!result.success) {
+      process.exit(1);
+    }
+  }).catch((err) => {
+    console.error(`\n  Wizard failed: ${err.message}\n`);
+    process.exit(1);
+  });
+}
+
 // ─── Commands ───────────────────────────────────────────────────────────────
 
 function showHelp() {
@@ -87,17 +134,23 @@ Usage:
 
 Commands:
   install              Install ${PRO_PACKAGE} in the current project
+  install --wizard     Install and run the setup wizard
+  setup, wizard        Run Pro setup wizard (license gate + scaffold + verify)
   activate --key KEY   Activate a license key
   deactivate           Deactivate the current license
   status               Show license status
   features             List available pro features
   validate             Force online license revalidation
+  recover              Recover lost license key via email
   help                 Show this help message
 
 Examples:
   npx aios-pro install
+  npx aios-pro setup
+  npx aios-pro wizard --key PRO-XXXX-XXXX-XXXX-XXXX
   npx aios-pro activate --key PRO-XXXX-XXXX-XXXX-XXXX
   npx aios-pro status
+  npx aios-pro recover
 
 Documentation: https://synkra.ai/pro/docs
 `);
@@ -133,9 +186,29 @@ if (command === '--version' || command === '-v') {
 }
 
 switch (command) {
-  case 'install':
-  case 'setup':
+  case 'install': {
+    // Check for --wizard flag to run wizard after install
+    const runWizardAfter = args.includes('--wizard');
     installPro();
+    if (runWizardAfter) {
+      runProWizard();
+    }
+    break;
+  }
+
+  case 'setup':
+  case 'wizard': {
+    // Run the Pro Installation Wizard with license gate
+    const wizardKey = getArgValue('--key');
+    runProWizard(wizardKey);
+    break;
+  }
+
+  case 'recover':
+    recoverLicense().catch((err) => {
+      console.error(`\n  Recovery failed: ${err.message}\n`);
+      process.exit(1);
+    });
     break;
 
   case 'activate':

package/packages/aios-pro-cli/package.json

@@ -6,8 +6,12 @@
     "aios-pro": "bin/aios-pro.js"
   },
   "files": [
-    "bin/"
+    "bin/",
+    "src/"
   ],
+  "dependencies": {
+    "open": "^10.0.0"
+  },
   "keywords": [
     "aios",
     "pro",

package/packages/aios-pro-cli/src/recover.js

@@ -0,0 +1,100 @@
+#!/usr/bin/env node
+
+/**
+ * License Recovery Flow
+ *
+ * Implements OWASP-compliant license key recovery via portal redirect.
+ * Decision 3 (D1 Section 4): Portal-first — CLI redirects to web portal.
+ *
+ * Security:
+ *   - Anti-enumeration: identical message for any email input
+ *   - No API calls — purely local CLI + browser redirect
+ *   - Rate limiting is server-side (3/email/hour) — documented, not enforced here
+ */
+
+const readline = require('readline');
+
+const RECOVERY_URL = 'https://pro.synkra.ai/recover';
+
+const RECOVERY_MESSAGE =
+  'Se este email estiver associado a uma licenca, voce recebera instrucoes de recuperacao.';
+
+/**
+ * Mask email for display: u***@example.com
+ * @param {string} email
+ * @returns {string}
+ */
+function maskEmail(email) {
+  const atIndex = email.indexOf('@');
+  if (atIndex <= 0) {
+    return '***';
+  }
+  return email[0] + '***' + email.slice(atIndex);
+}
+
+/**
+ * Prompt user for email input via readline
+ * @returns {Promise<string>}
+ */
+function promptEmail() {
+  const rl = readline.createInterface({
+    input: process.stdin,
+    output: process.stdout,
+  });
+
+  return new Promise((resolve) => {
+    rl.question('  Enter your email: ', (answer) => {
+      rl.close();
+      resolve(answer.trim());
+    });
+  });
+}
+
+/**
+ * Open URL in default browser with offline fallback
+ * @param {string} url
+ * @param {Function} [openFn] - Optional override for testing (defaults to dynamic import of 'open')
+ * @returns {Promise<boolean>} true if browser opened, false if fallback
+ */
+async function openBrowser(url, openFn) {
+  try {
+    const open = openFn || (await import('open')).default;
+    await open(url);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Main recovery flow
+ * @returns {Promise<void>}
+ */
+async function recoverLicense() {
+  console.log('\naios-pro — License Recovery\n');
+
+  const email = await promptEmail();
+
+  if (!email) {
+    console.error('\n  Error: Email is required.\n');
+    process.exit(1);
+  }
+
+  const masked = maskEmail(email);
+
+  // Anti-enumeration: identical message regardless of email validity
+  console.log(`\n  ${RECOVERY_MESSAGE}`);
+  console.log(`  Email: ${masked}\n`);
+
+  const browserOpened = await openBrowser(RECOVERY_URL);
+
+  if (browserOpened) {
+    console.log('  Recovery portal opened in your browser.');
+  } else {
+    console.log('  Could not open browser automatically.');
+  }
+
+  console.log(`  You can also visit: ${RECOVERY_URL}\n`);
+}
+
+module.exports = { recoverLicense, maskEmail, promptEmail, openBrowser, RECOVERY_URL, RECOVERY_MESSAGE };