aios-core 4.2.15 → 4.4.0

package/LICENSE

@@ -1,33 +1,33 @@
-MIT License
-
-Copyright (c) 2025 BMad Code, LLC (BMad Method - original work)
-Copyright (c) 2025 SynkraAI Inc. (AIOS Framework - derivative work)
-
-This project was originally derived from the BMad Method
-(https://github.com/bmad-code-org/BMAD-METHOD), created by Brian Madison.
-Synkra AIOS is NOT affiliated with, endorsed by, or sanctioned by the
-BMad Method or BMad Code, LLC.
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-TRADEMARK NOTICE:
-BMad, BMad Method, and BMad Core are trademarks of BMad Code, LLC.
-These trademarks are NOT licensed under the MIT License. See the BMad Method
-TRADEMARK.md (https://github.com/bmad-code-org/BMAD-METHOD/blob/main/TRADEMARK.md)
-for detailed guidelines on trademark usage.
+MIT License
+
+Copyright (c) 2025 BMad Code, LLC (BMad Method - original work)
+Copyright (c) 2025 SynkraAI Inc. (AIOS Framework - derivative work)
+
+This project was originally derived from the BMad Method
+(https://github.com/bmad-code-org/BMAD-METHOD), created by Brian Madison.
+Synkra AIOS is NOT affiliated with, endorsed by, or sanctioned by the
+BMad Method or BMad Code, LLC.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+TRADEMARK NOTICE:
+BMad, BMad Method, and BMad Core are trademarks of BMad Code, LLC.
+These trademarks are NOT licensed under the MIT License. See the BMad Method
+TRADEMARK.md (https://github.com/bmad-code-org/BMAD-METHOD/blob/main/TRADEMARK.md)
+for detailed guidelines on trademark usage.

package/bin/aios-graph.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+'use strict';
+
+const { run } = require('../.aios-core/core/graph-dashboard/cli');
+
+run(process.argv.slice(2)).catch((err) => {
+  console.error(`Error: ${err.message}`);
+  process.exit(1);
+});

package/bin/aios-init.js

@@ -85,7 +85,7 @@ function resolveAiosCoreModule(modulePath) {
     throw new Error(
       `Cannot find AIOS Core module: ${modulePath}\n` +
         `Searched: ${aiosCoreModule}\n` +
-        'Please ensure @synkra/aios-core is installed correctly.'
+        'Please ensure aios-core is installed correctly.'
     );
   }
 
@@ -766,7 +766,7 @@ See .aios-core/user-guide.md for complete documentation.
     // Secondary: context-based framework location - squads/
     path.join(context.frameworkLocation, 'squads'),
     // Tertiary: installed in project's node_modules - squads/
-    path.join(context.projectRoot, 'node_modules', '@synkra/aios-core', 'squads'),
+    path.join(context.projectRoot, 'node_modules', 'aios-core', 'squads'),
     path.join(context.projectRoot, 'node_modules', '@aios', 'fullstack', 'squads'),
   ];
 

package/bin/aios.js

@@ -206,6 +206,7 @@ function showInfo() {
     console.log(`  - Tasks: ${countFiles(path.join(componentBase, 'tasks'))}`);
     console.log(`  - Templates: ${countFiles(path.join(componentBase, 'templates'))}`);
     console.log(`  - Workflows: ${countFiles(path.join(componentBase, 'workflows'))}`);
+
   } else {
     console.log('\n⚠️  AIOS Core not found');
   }
@@ -350,230 +351,23 @@ async function runUpdate() {
   }
 }
 
-// Helper: Run doctor diagnostics
-async function runDoctor() {
-  const doctorArgs = args.slice(1);
-  const shouldFix = doctorArgs.includes('--fix');
-  const isDryRun = doctorArgs.includes('--dry-run');
-  const showHelp = doctorArgs.includes('--help') || doctorArgs.includes('-h');
-
-  if (showHelp) {
-    console.log(`
-Usage: aios-core doctor [options]
-
-Run system diagnostics and optionally fix issues.
-
-Options:
-  --fix          Attempt to automatically fix detected issues
-  --dry-run      Show what would be fixed without making changes
-  -h, --help     Show this help message
-
-Examples:
-  $ npx aios-core doctor              # Run diagnostics
-  $ npx aios-core doctor --fix        # Fix detected issues
-  $ npx aios-core doctor --dry-run    # Preview fixes
-`);
-    return;
-  }
-
-  console.log('🏥 AIOS System Diagnostics\n');
-
-  const issues = [];
-  let hasErrors = false;
-
-  // Helper: Compare semver versions
-  const compareVersions = (a, b) => {
-    const pa = a.split('.').map((n) => parseInt(n, 10));
-    const pb = b.split('.').map((n) => parseInt(n, 10));
-    for (let i = 0; i < 3; i++) {
-      const na = pa[i] || 0;
-      const nb = pb[i] || 0;
-      if (na > nb) return 1;
-      if (na < nb) return -1;
-    }
-    return 0;
-  };
-
-  // Check 1: Node.js version
-  const nodeVersion = process.version.replace('v', '');
-  const requiredNodeVersion = '18.0.0';
-  const nodeOk = compareVersions(nodeVersion, requiredNodeVersion) >= 0;
-
-  if (!nodeOk) {
-    issues.push({
-      type: 'node_version',
-      autoFix: false,
-      message: `Node.js version: ${process.version} (requires >=18.0.0)`,
-      suggestion: 'nvm install 20 && nvm use 20',
-    });
-    hasErrors = true;
-  }
-  console.log(
-    `${nodeOk ? '✔' : '✗'} Node.js version: ${process.version} ${nodeOk ? '(meets requirement: >=18.0.0)' : '(requires >=18.0.0)'}`,
-  );
-
-  // Check 2: npm
-  try {
-    const npmVersion = execSync('npm --version', { encoding: 'utf8' }).trim();
-    console.log(`✔ npm version: ${npmVersion}`);
-  } catch {
-    issues.push({
-      type: 'npm',
-      autoFix: false,
-      message: 'npm not found',
-      suggestion: 'Install Node.js from https://nodejs.org (includes npm)',
-    });
-    console.log('✗ npm not found');
-    hasErrors = true;
-  }
-
-  // Check 3: Git
-  try {
-    const gitVersion = execSync('git --version', { encoding: 'utf8' }).trim();
-    console.log(`✔ Git installed: ${gitVersion}`);
-  } catch {
-    issues.push({
-      type: 'git',
-      autoFix: false,
-      message: 'Git not found (optional but recommended)',
-      suggestion: 'Install Git from https://git-scm.com',
-    });
-    console.log('⚠️  Git not found (optional but recommended)');
-  }
-
-  // Check 4: AIOS installation
-  const aiosCoreDir = path.join(__dirname, '..', '.aios-core');
-  if (fs.existsSync(aiosCoreDir)) {
-    console.log(`✔ Synkra AIOS: v${packageJson.version}`);
-
-    // Check for corruption using validate (if available)
-    try {
-      const validatorPath = path.join(__dirname, '..', 'packages', 'installer', 'src', 'installer', 'post-install-validator');
-      const { PostInstallValidator } = require(validatorPath);
-      const validator = new PostInstallValidator(process.cwd(), path.join(__dirname, '..'));
-      const report = await validator.validate();
-
-      if (report.stats && (report.stats.missingFiles > 0 || report.stats.corruptedFiles > 0)) {
-        issues.push({
-          type: 'aios_corrupted',
-          autoFix: true,
-          message: `AIOS Core: ${report.stats.missingFiles} missing, ${report.stats.corruptedFiles} corrupted files`,
-          fixAction: async () => {
-            console.log('  🔧 Repairing AIOS installation...');
-            await validator.repair();
-            console.log('  ✓ Repair complete');
-          },
-        });
-        hasErrors = true;
-        console.log(`⚠️  AIOS Core: ${report.stats.missingFiles} missing, ${report.stats.corruptedFiles} corrupted files`);
-      }
-    } catch {
-      // Validation not available, skip corruption check
-    }
-  } else {
-    issues.push({
-      type: 'aios_missing',
-      autoFix: true,
-      message: 'AIOS Core not installed',
-      fixAction: async () => {
-        console.log('  🔧 Installing AIOS...');
-        try {
-          execSync('npx aios-core install --force --quiet', { stdio: 'inherit', timeout: 60000 });
-          console.log('  ✓ Installation complete');
-        } catch (installError) {
-          console.error(`  ✗ Installation failed: ${installError.message}`);
-          throw installError;
-        }
-      },
-    });
-    hasErrors = true;
-    console.log('✗ AIOS Core not installed');
-    console.log('  Run: npx aios-core@latest');
-  }
+// Helper: Run doctor diagnostics (v2.0 — delegates to modular doctor)
+async function runDoctor(options = {}) {
+  const { runDoctorChecks } = require(path.join(__dirname, '..', '.aios-core', 'core', 'doctor'));
 
-  // Check 5: AIOS Pro license status (Task 5.1)
-  const proDir = path.join(__dirname, '..', 'pro');
-  if (fs.existsSync(proDir)) {
-    try {
-      const { featureGate } = require(path.join(proDir, 'license', 'feature-gate'));
-      const state = featureGate.getLicenseState();
-
-      const stateEmoji = {
-        'Active': '✔',
-        'Grace': '⚠️',
-        'Expired': '✗',
-        'Not Activated': '➖',
-      };
-
-      if (state === 'Active') {
-        console.log(`${stateEmoji[state]} AIOS Pro: License active`);
-      } else if (state === 'Grace') {
-        console.log(`${stateEmoji[state]} AIOS Pro: License in grace period`);
-        console.log('  Run: aios pro validate');
-      } else if (state === 'Expired') {
-        console.log(`${stateEmoji[state]} AIOS Pro: License expired`);
-        console.log('  Run: aios pro activate --key <KEY>');
-      } else {
-        console.log(`${stateEmoji[state]} AIOS Pro: Not activated`);
-        console.log('  Run: aios pro activate --key <KEY>');
-      }
-    } catch {
-      console.log('⚠️  AIOS Pro: Unable to check license status');
-    }
-  }
-
-  // Apply fixes if --fix
-  if (shouldFix && issues.length > 0) {
-    console.log('\n🔧 Attempting fixes...\n');
+  const result = await runDoctorChecks({
+    fix: options.fix || false,
+    json: options.json || false,
+    dryRun: options.dryRun || false,
+    quiet: options.quiet || false,
+    projectRoot: process.cwd(),
+  });
 
-    let fixed = 0;
-    let manual = 0;
+  console.log(result.formatted);
 
-    for (const issue of issues) {
-      if (issue.autoFix && issue.fixAction) {
-        if (isDryRun) {
-          console.log(`  [DRY RUN] Would fix: ${issue.type}`);
-          fixed++;
-        } else {
-          try {
-            await issue.fixAction();
-            fixed++;
-          } catch (fixError) {
-            console.error(`  ✗ Failed to fix ${issue.type}: ${fixError.message}`);
-            manual++;
-          }
-        }
-      } else {
-        manual++;
-        console.log(`  ⚠️  ${issue.message}`);
-        console.log(`     💡 Fix: ${issue.suggestion}`);
-      }
-    }
-
-    console.log('');
-    if (isDryRun) {
-      console.log(`✅ Dry run completed - ${fixed} issues would be fixed`);
-      if (manual > 0) {
-        console.log(`⚠️  ${manual} issues require manual action`);
-      }
-    } else {
-      if (fixed > 0) {
-        console.log(`✅ Fixed ${fixed} issue${fixed > 1 ? 's' : ''}`);
-      }
-      if (manual > 0) {
-        console.log(`⚠️  ${manual} issue${manual > 1 ? 's' : ''} require manual action`);
-        process.exit(1);
-      }
-    }
-  } else {
-    // Summary (no --fix)
-    console.log('');
-    if (hasErrors) {
-      console.log('⚠️  Some issues were detected. Run with --fix to auto-repair.');
-      process.exit(1);
-    } else {
-      console.log('✅ All checks passed! Your installation is healthy.');
-    }
+  // Exit with code 1 if any FAIL results
+  if (result.data && result.data.summary && result.data.summary.fail > 0) {
+    process.exit(1);
   }
 }
 
@@ -671,6 +465,7 @@ Run health checks on your AIOS installation.
 Options:
   --fix        Automatically fix detected issues
   --dry-run    Show what --fix would do without making changes
+  --json       Output results as structured JSON
   --quiet      Minimal output (exit code only)
   -h, --help   Show this help message
 
@@ -1096,6 +891,7 @@ async function main() {
       }
       const doctorOptions = {
         fix: doctorArgs.includes('--fix'),
+        json: doctorArgs.includes('--json'),
         dryRun: doctorArgs.includes('--dry-run'),
         quiet: doctorArgs.includes('--quiet'),
       };

package/bin/utils/detect-fsmonitor.js

@@ -0,0 +1,70 @@
+/**
+ * Git fsmonitor detection utility.
+ * Shared between bin/aios.js (runDoctor) and tests.
+ * Story: NOG-13
+ */
+
+const { execSync } = require('child_process');
+
+/**
+ * Compare semver versions: returns 1 if a > b, -1 if a < b, 0 if equal.
+ * @param {string} a
+ * @param {string} b
+ * @returns {number}
+ */
+function compareVersions(a, b) {
+  const pa = a.split('.').map((n) => parseInt(n, 10));
+  const pb = b.split('.').map((n) => parseInt(n, 10));
+  for (let i = 0; i < 3; i++) {
+    const na = pa[i] || 0;
+    const nb = pb[i] || 0;
+    if (na > nb) return 1;
+    if (na < nb) return -1;
+  }
+  return 0;
+}
+
+/**
+ * Detect git fsmonitor status based on git version string.
+ *
+ * @param {string|null} gitVersionStr - Output of `git --version` (e.g. "git version 2.43.0.windows.1")
+ * @returns {{ status: string, message: string, suggestion?: string }}
+ */
+function detectFsmonitor(gitVersionStr) {
+  if (!gitVersionStr) {
+    return { status: 'unavailable', message: 'Git not installed' };
+  }
+
+  const versionMatch = gitVersionStr.match(/(\d+\.\d+\.\d+)/);
+  const gitVer = versionMatch ? versionMatch[1] : '0.0.0';
+  const gitSupportsFsmonitor = compareVersions(gitVer, '2.37.0') >= 0;
+
+  let fsmonitorValue = '';
+  try {
+    fsmonitorValue = execSync('git config core.fsmonitor', { encoding: 'utf8' }).trim();
+  } catch {
+    // Not set
+  }
+
+  const isEnabled = fsmonitorValue === 'true';
+
+  if (isEnabled) {
+    return {
+      status: 'enabled',
+      message: 'Git fsmonitor: enabled (git status acceleration active)',
+    };
+  } else if (gitSupportsFsmonitor) {
+    return {
+      status: 'available',
+      message: 'Git fsmonitor: not enabled (opt-in optimization available)',
+      suggestion: 'git config core.fsmonitor true',
+    };
+  } else {
+    return {
+      status: 'unavailable',
+      message: `Git fsmonitor: not available (Git 2.37+ required, found ${gitVer})`,
+    };
+  }
+}
+
+module.exports = { detectFsmonitor, compareVersions };

package/bin/utils/framework-guard.js

@@ -0,0 +1,238 @@
+/**
+ * Framework Guard — Pre-commit hook that blocks commits to L1/L2 protected paths.
+ *
+ * Reads ALL configuration from core-config.yaml (single source of truth):
+ *   - boundary.frameworkProtection: toggle (true/false)
+ *   - boundary.protected: L1/L2 blocked glob patterns
+ *   - boundary.exceptions: L3 allowed glob patterns
+ *
+ * When frameworkProtection is true (default), blocks staged changes to protected paths.
+ * When false, acts as a no-op (contributor mode).
+ *
+ * Story: BM-3 (Epic: Boundary Mapping & Framework-Project Separation)
+ */
+
+'use strict';
+
+const { execSync } = require('child_process');
+const fs = require('fs');
+const path = require('path');
+
+// Hardcoded fallbacks — used ONLY if core-config.yaml is missing or malformed.
+// The canonical source is core-config.yaml boundary.protected/exceptions.
+const FALLBACK_PROTECTED = [
+  '.aios-core/core/**',
+  '.aios-core/development/tasks/**',
+  '.aios-core/development/templates/**',
+  '.aios-core/development/checklists/**',
+  '.aios-core/development/workflows/**',
+  '.aios-core/infrastructure/**',
+  '.aios-core/constitution.md',
+  'bin/aios.js',
+  'bin/aios-init.js',
+];
+
+const FALLBACK_EXCEPTIONS = [
+  '.aios-core/data/**',
+  '.aios-core/development/agents/*/MEMORY.md',
+];
+
+/**
+ * Convert a glob pattern to a RegExp.
+ * Supports: ** (any depth), * (single segment), literal dots.
+ * @param {string} glob
+ * @returns {RegExp}
+ */
+function globToRegex(glob) {
+  let pattern = glob
+    .replace(/\./g, '\\.')           // escape dots
+    .replace(/\*\*/g, '\u0000')      // placeholder for **
+    .replace(/\*/g, '[^/]+')         // * = single segment
+    .replace(/\u0000/g, '.+');       // ** = any depth
+
+  // If pattern ends with .+ (was **), match prefix
+  if (glob.endsWith('**')) {
+    return new RegExp('^' + pattern);
+  }
+  // Exact file match
+  return new RegExp('^' + pattern + '$');
+}
+
+/**
+ * Read the raw content of core-config.yaml.
+ * @returns {string|null}
+ */
+function readConfigContent() {
+  const configPath = path.resolve(__dirname, '../../.aios-core/core-config.yaml');
+  if (!fs.existsSync(configPath)) {
+    return null;
+  }
+  return fs.readFileSync(configPath, 'utf8');
+}
+
+/**
+ * Parse a YAML list under a given key using simple line-based parsing.
+ * Avoids js-yaml dependency for speed.
+ * @param {string} content - YAML file content
+ * @param {string} parentKey - Parent key (e.g., 'boundary')
+ * @param {string} listKey - List key (e.g., 'protected')
+ * @returns {string[]}
+ */
+function parseYamlList(content, parentKey, listKey) {
+  const lines = content.split('\n');
+  const items = [];
+  let inParent = false;
+  let inList = false;
+  let parentIndent = -1;
+  let listIndent = -1;
+
+  for (const line of lines) {
+    const trimmed = line.trimStart();
+    const indent = line.length - trimmed.length;
+
+    // Find parent key (e.g., "boundary:")
+    if (trimmed === parentKey + ':' || trimmed.startsWith(parentKey + ':')) {
+      inParent = true;
+      parentIndent = indent;
+      continue;
+    }
+
+    // If we're past the parent section (back to same or lower indent)
+    if (inParent && indent <= parentIndent && trimmed.length > 0 && !trimmed.startsWith('#')) {
+      inParent = false;
+      inList = false;
+    }
+
+    if (!inParent) continue;
+
+    // Find list key within parent (e.g., "protected:")
+    if (trimmed === listKey + ':' || trimmed.startsWith(listKey + ':')) {
+      inList = true;
+      listIndent = indent;
+      continue;
+    }
+
+    // If we're past the list (back to same or lower indent within parent)
+    if (inList && indent <= listIndent && trimmed.length > 0 && !trimmed.startsWith('#') && !trimmed.startsWith('-')) {
+      inList = false;
+    }
+
+    // Collect list items
+    if (inList && trimmed.startsWith('- ')) {
+      items.push(trimmed.slice(2).trim());
+    }
+  }
+
+  return items;
+}
+
+/**
+ * Read boundary config from core-config.yaml.
+ * @returns {{ enabled: boolean, protected: string[], exceptions: string[] }}
+ */
+function readBoundaryConfig() {
+  const content = readConfigContent();
+  if (!content) {
+    return { enabled: true, protected: FALLBACK_PROTECTED, exceptions: FALLBACK_EXCEPTIONS };
+  }
+
+  // Read toggle
+  const toggleMatch = content.match(/frameworkProtection:\s*(true|false)/);
+  const enabled = toggleMatch ? toggleMatch[1] === 'true' : true;
+
+  // Read lists
+  const protectedPaths = parseYamlList(content, 'boundary', 'protected');
+  const exceptionPaths = parseYamlList(content, 'boundary', 'exceptions');
+
+  return {
+    enabled,
+    protected: protectedPaths.length > 0 ? protectedPaths : FALLBACK_PROTECTED,
+    exceptions: exceptionPaths.length > 0 ? exceptionPaths : FALLBACK_EXCEPTIONS,
+  };
+}
+
+/**
+ * Check if a file path matches any pattern in the list.
+ * @param {string} filePath
+ * @param {RegExp[]} patterns
+ * @returns {boolean}
+ */
+function matchesAny(filePath, patterns) {
+  return patterns.some((pattern) => pattern.test(filePath));
+}
+
+/**
+ * Get list of staged files from git.
+ * @returns {string[]}
+ */
+function getStagedFiles() {
+  try {
+    const output = execSync('git diff --cached --name-only', { encoding: 'utf8' });
+    return output
+      .split('\n')
+      .map((f) => f.trim())
+      .filter(Boolean);
+  } catch {
+    return [];
+  }
+}
+
+function main() {
+  // Step 1: Read config (single source of truth)
+  const config = readBoundaryConfig();
+
+  if (!config.enabled) {
+    process.exit(0);
+  }
+
+  // Step 2: Compile glob patterns to regex
+  const blockedPatterns = config.protected.map(globToRegex);
+  const allowedPatterns = config.exceptions.map(globToRegex);
+
+  // Step 3: Get staged files
+  const stagedFiles = getStagedFiles();
+  if (stagedFiles.length === 0) {
+    process.exit(0);
+  }
+
+  // Step 4: Check each staged file
+  const blockedFiles = [];
+  for (const file of stagedFiles) {
+    // Normalize to forward slashes (Windows compat)
+    const normalized = file.replace(/\\/g, '/');
+    if (matchesAny(normalized, blockedPatterns) && !matchesAny(normalized, allowedPatterns)) {
+      blockedFiles.push(normalized);
+    }
+  }
+
+  // Step 5: Report
+  if (blockedFiles.length > 0) {
+    console.error('');
+    console.error('Framework Guard: Commit blocked!');
+    console.error('');
+    console.error('The following framework files are protected (L1/L2):');
+    for (const file of blockedFiles) {
+      console.error(`  - ${file}`);
+    }
+    console.error('');
+    console.error('These files are read-only in project mode (boundary.frameworkProtection: true).');
+    console.error('');
+    console.error('To bypass (framework contributors only):');
+    console.error('  git commit --no-verify');
+    console.error('');
+    console.error('To disable permanently (contributors):');
+    console.error('  Set boundary.frameworkProtection: false in core-config.yaml');
+    console.error('');
+    process.exit(1);
+  }
+
+  process.exit(0);
+}
+
+// Export for testing
+module.exports = { readBoundaryConfig, globToRegex, matchesAny, getStagedFiles, FALLBACK_PROTECTED, FALLBACK_EXCEPTIONS };
+
+// Run when executed directly
+if (require.main === module) {
+  main();
+}