aios-core 4.4.2 → 4.4.3

package/.aios-core/development/scripts/code-quality-improver.js

@@ -1,9 +1,12 @@
 const fs = require('fs').promises;
 const path = require('path');
 const chalk = require('chalk');
-const { ESLint } = require('eslint');
-const prettier = require('prettier');
-const jscodeshift = require('jscodeshift');
+
+// INS-4.12: Optional dev-time deps — wrap in try-catch for brownfield installs
+let ESLint, prettier, jscodeshift;
+try { ({ ESLint } = require('eslint')); } catch { ESLint = null; }
+try { prettier = require('prettier'); } catch { prettier = null; }
+try { jscodeshift = require('jscodeshift'); } catch { jscodeshift = null; }
 
 /**
  * Automated code quality improvement system
@@ -119,15 +122,22 @@ class CodeQualityImprover {
    * Initialize tools
    */
   async initialize() {
-    // Initialize ESLint
-    this.eslint = new ESLint({
-      fix: true,
-      baseConfig: await this.loadESLintConfig(),
-      useEslintrc: true
-    });
+    // INS-4.12: Guard optional deps — may be null in brownfield installs
+    if (ESLint) {
+      this.eslint = new ESLint({
+        fix: true,
+        baseConfig: await this.loadESLintConfig(),
+        useEslintrc: true
+      });
+    } else {
+      console.warn('⚠️  eslint not available — linting improvements disabled');
+    }
 
-    // Load Prettier config
-    this.prettierConfig = await this.loadPrettierConfig();
+    if (prettier) {
+      this.prettierConfig = await this.loadPrettierConfig();
+    } else {
+      console.warn('⚠️  prettier not available — formatting improvements disabled');
+    }
   }
 
   /**
@@ -231,6 +241,7 @@ class CodeQualityImprover {
 
     try {
       // Linting issues
+      if (!this.eslint) return metrics;
       const lintResults = await this.eslint.lintText(content, { _filePath });
       metrics.issues = lintResults[0]?.errorCount + lintResults[0]?.warningCount || 0;
 
@@ -254,9 +265,12 @@ class CodeQualityImprover {
 
   async improveFormatting(content, _filePath, options) {
     try {
+      if (!prettier) {
+        return { improved: false, content, changes: [] };
+      }
       const formatted = await prettier.format(content, {
         ...this.prettierConfig,
-        filepath: filePath
+        filepath: _filePath
       });
 
       return {
@@ -276,6 +290,9 @@ class CodeQualityImprover {
 
   async improveLinting(content, _filePath, options) {
     try {
+      if (!this.eslint) {
+        return { improved: false, content, changes: [] };
+      }
       const results = await this.eslint.lintText(content, { _filePath });
       
       if (results[0]?.output) {

package/.aios-core/development/scripts/refactoring-suggester.js

@@ -1,10 +1,13 @@
 const fs = require('fs').promises;
 const path = require('path');
 const chalk = require('chalk');
-const { parse } = require('@babel/parser');
-const traverse = require('@babel/traverse').default;
-const generate = require('@babel/generator').default;
-const _t = require('@babel/types');
+
+// INS-4.12: Optional dev-time deps — wrap in try-catch for brownfield installs
+let parse, traverse, generate, _t;
+try { ({ parse } = require('@babel/parser')); } catch { parse = null; }
+try { traverse = require('@babel/traverse').default; } catch { traverse = null; }
+try { generate = require('@babel/generator').default; } catch { generate = null; }
+try { _t = require('@babel/types'); } catch { _t = null; }
 
 /**
  * Automated refactoring suggestion system
@@ -118,12 +121,18 @@ class RefactoringSuggester {
    * Analyze code and suggest refactorings
    */
   async analyzeCode(filePath, options = {}) {
+    // INS-4.12: Guard — @babel deps may not be available in brownfield installs
+    if (!parse || !traverse) {
+      console.warn(chalk.yellow('⚠️  @babel/parser or @babel/traverse not available — refactoring analysis disabled'));
+      return { filePath, suggestions: [], error: '@babel dependencies not installed' };
+    }
+
     console.log(chalk.blue(`🔍 Analyzing: ${filePath}`));
-    
+
     try {
       const _content = await fs.readFile(filePath, 'utf-8');
       const fileType = path.extname(filePath);
-      
+
       if (!['.js', '.jsx', '.ts', '.tsx'].includes(fileType)) {
         return {
           filePath,

package/.aios-core/install-manifest.yaml

@@ -7,8 +7,8 @@
 # - SHA256 hashes for change detection
 # - File types for categorization
 #
-version: 4.4.2
-generated_at: "2026-02-24T16:53:34.099Z"
+version: 4.4.3
+generated_at: "2026-02-25T00:54:57.457Z"
 generator: scripts/generate-install-manifest.js
 file_count: 1084
 files:
@@ -333,9 +333,9 @@ files:
     type: core
     size: 674
   - path: core/doctor/checks/npm-packages.js
-    hash: sha256:16f747d25d3185050c3b149d235dce707555038b51c0659e416a4d33a3672032
+    hash: sha256:09e03cd3558acbdd6b2f4103c156c76a3c07fa2f0b8996739bec7a865d781922
     type: core
-    size: 702
+    size: 2265
   - path: core/doctor/checks/rules-files.js
     hash: sha256:6fe670f3759520f0d4b0abdad14f5f8b0eaa12cc9b15252c6de7e4cfa099d337
     type: core
@@ -1221,9 +1221,9 @@ files:
     type: data
     size: 9575
   - path: data/entity-registry.yaml
-    hash: sha256:1a3ebc7fb0c09631e18192e376903db69ef9e40ffc2a661ca87a100e6996051f
+    hash: sha256:fb17c8d978fd7bb483a2752ba285718d86af234f0412ecdc6d123ec0d0634032
     type: data
-    size: 517912
+    size: 519735
   - path: data/learned-patterns.yaml
     hash: sha256:24ac0b160615583a0ff783d3da8af80b7f94191575d6db2054ec8e10a3f945dc
     type: data
@@ -1465,9 +1465,9 @@ files:
     type: script
     size: 11536
   - path: development/scripts/code-quality-improver.js
-    hash: sha256:acdfea90590a2d0d566e720540a8aad4a360cd531c58ad4e67cc4126522b7455
+    hash: sha256:d0c844089e53dcd6c06755d4cb432a60fbebcedcf5a86ed635650573549a1941
     type: script
-    size: 39827
+    size: 40545
   - path: development/scripts/commit-message-generator.js
     hash: sha256:2e75d22307d0e3823b7762a6aff18c4c3842a632f876069215a221bc053336dc
     type: script
@@ -1565,9 +1565,9 @@ files:
     type: script
     size: 22558
   - path: development/scripts/refactoring-suggester.js
-    hash: sha256:d5183f79fae9dc4bf4d3c9136b3622e43a63643a7df622742c350931e45f18f4
+    hash: sha256:d50ea6b609c9cf8385979386fee4b4385d11ebcde15460260f66d04c705f6cd9
     type: script
-    size: 34675
+    size: 35227
   - path: development/scripts/rollback-handler.js
     hash: sha256:b18a9451fa3f8919733251857dbad2bc4b7ecbf782e6c114b88bc867358421a9
     type: script
@@ -3525,9 +3525,9 @@ files:
     type: monitor
     size: 818
   - path: package.json
-    hash: sha256:dff580c83cc1554c75162c9cabb711b5cd85e679c9c8f4968ee74499e99de0c0
+    hash: sha256:ac6d72a82cecd2a98a443dc195e87cf815c2df58fb743737177670999a816b5f
     type: other
-    size: 2401
+    size: 2495
   - path: product/checklists/accessibility-wcag-checklist.md
     hash: sha256:56126182b25e9b7bdde43f75315e33167eb49b1f9a9cb0e9a37bc068af40aeab
     type: checklist

package/.aios-core/package.json

@@ -31,16 +31,20 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
+    "ajv": "^8.17.1",
     "chalk": "^4.1.2",
     "commander": "^12.1.0",
+    "diff": "^5.2.0",
+    "execa": "^5.1.1",
+    "fast-glob": "^3.3.3",
     "fs-extra": "^11.3.0",
     "glob": "^10.4.4",
-    "js-yaml": "^4.1.0",
+    "highlight.js": "^11.9.0",
     "inquirer": "^8.2.6",
-    "validator": "^13.15.15",
-    "diff": "^5.2.0",
-    "execa": "^5.1.1",
-    "highlight.js": "^11.9.0"
+    "js-yaml": "^4.1.0",
+    "semver": "^7.7.2",
+    "tar": "^7.5.7",
+    "validator": "^13.15.15"
   },
   "peerDependencies": {
     "@aios-fullstack/memory": "^4.31.0",

package/README.md

@@ -12,6 +12,8 @@
 [![Contributions Welcome](https://img.shields.io/badge/contributions-welcome-brightgreen.svg)](CONTRIBUTING.md)
 [![Code of Conduct](https://img.shields.io/badge/code%20of%20conduct-Contributor%20Covenant-blue.svg)](CODE_OF_CONDUCT.md)
 
+> 🌐 README por idioma: [EN](docs/README.md) | [PT](docs/pt/README.md) | [ES](docs/es/README.md) | [ZH](docs/zh/README.md)
+
 Framework de Desenvolvimento Auto-Modificável Alimentado por IA. Fundado em Desenvolvimento Ágil Dirigido por Agentes, oferecendo capacidades revolucionárias para desenvolvimento dirigido por IA e muito mais. Transforme qualquer domínio com expertise especializada de IA: desenvolvimento de software, entretenimento, escrita criativa, estratégia de negócios, bem-estar pessoal e muito mais.
 
 ## Comece Aqui (10 Min)
@@ -112,7 +114,7 @@ Esta abordagem de duas fases elimina tanto a **inconsistência de planejamento**
 - 📖 [Guia de Instalação para Windows](docs/installation/windows.md)
 - 📖 [Guia de Instalação para Linux](docs/installation/linux.md)
 
-**Documentação multilíngue disponível:** [Português](docs/pt/installation/) | [Español](docs/es/installation/)
+**Documentação multilíngue disponível:** [English](docs/README.md) | [Português](docs/pt/README.md) | [Español](docs/es/README.md) | [中文](docs/zh/README.md)
 
 ## Navegação Rápida
 

package/bin/utils/validate-publish.js

@@ -2,13 +2,14 @@
 'use strict';
 
 /**
- * Publish Safety Gate — Submodule + File Count Validation
- * Story INS-4.10
+ * Publish Safety Gate — Submodule + File Count + Dependency Validation
+ * Story INS-4.10, INS-4.12
  *
  * Prevents publishing incomplete packages by validating:
  * 1. pro/ submodule is populated (not empty or uninitialized)
  * 2. Critical file pro/license/license-api.js exists
  * 3. Package file count meets minimum threshold (>= 50)
+ * 4. (INS-4.12) .aios-core/package.json dependency completeness
  *
  * Exit codes: 0 = PASS, 1 = FAIL
  * Usage: node bin/utils/validate-publish.js
@@ -81,7 +82,7 @@ try {
     line.includes('npm notice') && !line.includes('Tarball') && !line.includes('name:') &&
     !line.includes('version:') && !line.includes('filename:') && !line.includes('package size:') &&
     !line.includes('unpacked size:') && !line.includes('shasum:') && !line.includes('integrity:') &&
-    !line.includes('total files:')
+    !line.includes('total files:'),
   );
   fileCount = fileLines.length;
 
@@ -97,6 +98,28 @@ try {
   passed = false;
 }
 
+// Check 4 (INS-4.12): .aios-core dependency completeness
+console.log('');
+console.log('--- Dependency Completeness (INS-4.12) ---\n');
+try {
+  const depValidatorPath = path.join(PROJECT_ROOT, 'scripts', 'validate-aios-core-deps.js');
+  if (fs.existsSync(depValidatorPath)) {
+    execSync(`node "${depValidatorPath}"`, {
+      encoding: 'utf8',
+      cwd: PROJECT_ROOT,
+      timeout: 30000,
+      stdio: 'inherit',
+    });
+    console.log('PASS: .aios-core dependency completeness validated');
+  } else {
+    console.log('SKIP: scripts/validate-aios-core-deps.js not found');
+  }
+} catch (_depErr) {
+  console.error('FAIL: .aios-core dependency completeness check failed');
+  console.error('  Fix: Run "node scripts/validate-aios-core-deps.js" to see details');
+  passed = false;
+}
+
 // Summary
 console.log('');
 if (passed) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aios-core",
-  "version": "4.4.2",
+  "version": "4.4.3",
   "description": "Synkra AIOS: AI-Orchestrated System for Full Stack Development - Core Framework",
   "bin": {
     "aios": "bin/aios.js",

package/packages/installer/src/installer/aios-core-installer.js

@@ -324,9 +324,11 @@ async function installAiosCore(options = {}) {
     // BUG-2 fix (INS-1): Install .aios-core dependencies after copy
     // The copied .aios-core/package.json has dependencies (js-yaml, execa, etc.)
     // that must be installed for the activation pipeline to work
+    // INS-4.12: Track dep install success for bootstrap guard
     const aiosCorePackageJson = path.join(targetAiosCore, 'package.json');
+    result.aiosCoreDepsInstalled = false;
     if (await fs.pathExists(aiosCorePackageJson)) {
-      spinner.text = 'Installing .aios-core dependencies (js-yaml, etc.)...';
+      spinner.text = 'Installing .aios-core dependencies (js-yaml, fast-glob, etc.)...';
       try {
         const { exec } = require('child_process');
         const { promisify } = require('util');
@@ -335,6 +337,7 @@ async function installAiosCore(options = {}) {
           cwd: targetAiosCore,
           timeout: 60000,
         });
+        result.aiosCoreDepsInstalled = true;
         spinner.succeed('Installed .aios-core dependencies');
         spinner.start('Finishing installation...');
       } catch (depError) {

package/packages/installer/src/wizard/index.js

@@ -571,32 +571,47 @@ async function runWizard(options = {}) {
     }
 
     // Story INS-4.6: Entity Registry Bootstrap — populate entity-registry.yaml on install
+    // Story INS-4.12: Fix module resolution + bootstrap timing
+    // Bootstrap runs AFTER .aios-core deps are installed (aios-core-installer.js:324-345)
+    // NODE_PATH ensures spawned scripts can resolve packages from .aios-core/node_modules/
     console.log('\n📇 Bootstrapping entity registry...');
     try {
       const registryScript = path.join(process.cwd(), '.aios-core', 'development', 'scripts', 'populate-entity-registry.js');
       if (fse.existsSync(registryScript)) {
-        const startMs = Date.now();
-        execSync(`node "${registryScript}"`, {
-          cwd: process.cwd(),
-          encoding: 'utf8',
-          timeout: 30000,
-          stdio: 'pipe',
-        });
-        const elapsedMs = Date.now() - startMs;
-
-        // Read entity count from generated registry
-        const registryPath = path.join(process.cwd(), '.aios-core', 'data', 'entity-registry.yaml');
-        let entityCount = 0;
-        if (fse.existsSync(registryPath)) {
-          const registryContent = fse.readFileSync(registryPath, 'utf8');
-          const countMatch = registryContent.match(/entityCount:\s*(\d+)/);
-          entityCount = countMatch ? parseInt(countMatch[1], 10) : 0;
-        }
+        // INS-4.12 AC3: Guard — skip bootstrap if .aios-core deps are not installed
+        const aiosCoreNodeModules = path.join(process.cwd(), '.aios-core', 'node_modules');
+        if (!fse.existsSync(aiosCoreNodeModules)) {
+          console.warn('⚠️  .aios-core/node_modules/ not found — skipping entity registry bootstrap');
+          console.warn('   Run: cd .aios-core && npm install --production');
+          answers.entityRegistryStatus = 'skipped-no-deps';
+        } else {
+        // INS-4.12 AC2: Set NODE_PATH so spawned scripts resolve deps from .aios-core/node_modules/
+          const parentNodeModules = path.join(process.cwd(), 'node_modules');
+          const nodePath = [aiosCoreNodeModules, parentNodeModules].join(path.delimiter);
+          const startMs = Date.now();
+          execSync(`node "${registryScript}"`, {
+            cwd: process.cwd(),
+            encoding: 'utf8',
+            timeout: 30000,
+            stdio: 'pipe',
+            env: { ...process.env, NODE_PATH: nodePath },
+          });
+          const elapsedMs = Date.now() - startMs;
+
+          // Read entity count from generated registry
+          const registryPath = path.join(process.cwd(), '.aios-core', 'data', 'entity-registry.yaml');
+          let entityCount = 0;
+          if (fse.existsSync(registryPath)) {
+            const registryContent = fse.readFileSync(registryPath, 'utf8');
+            const countMatch = registryContent.match(/entityCount:\s*(\d+)/);
+            entityCount = countMatch ? parseInt(countMatch[1], 10) : 0;
+          }
 
-        console.log(`✅ Entity registry: populated (${entityCount} entities, ${(elapsedMs / 1000).toFixed(1)}s)`);
-        answers.entityRegistryStatus = 'populated';
-        answers.entityRegistryCount = entityCount;
-        answers.entityRegistryMs = elapsedMs;
+          console.log(`✅ Entity registry: populated (${entityCount} entities, ${(elapsedMs / 1000).toFixed(1)}s)`);
+          answers.entityRegistryStatus = 'populated';
+          answers.entityRegistryCount = entityCount;
+          answers.entityRegistryMs = elapsedMs;
+        } // end else (deps exist)
       } else {
         console.log('   ℹ️  Entity registry script not found (skipped)');
         answers.entityRegistryStatus = 'skipped';

package/packages/installer/tests/unit/doctor/doctor-checks.test.js

@@ -53,7 +53,7 @@ describe('npm-packages check', () => {
     fs.existsSync.mockReturnValue(true);
     const result = await npmPackagesCheck.run(mockContext);
     expect(result.status).toBe('PASS');
-    expect(result.message).toBe('node_modules present');
+    expect(result.message).toContain('node_modules present');
   });
 
   it('should FAIL when node_modules missing', async () => {

package/scripts/validate-aios-core-deps.js

@@ -0,0 +1,161 @@
+#!/usr/bin/env node
+'use strict';
+
+/**
+ * Dependency Graph Validator — .aios-core/package.json completeness
+ * Story INS-4.12 (AC1, AC4, AC6)
+ *
+ * Scans all .js files in .aios-core/development/scripts/ for require() calls,
+ * then verifies each non-builtin, non-relative package is declared in
+ * .aios-core/package.json dependencies.
+ *
+ * Exit codes: 0 = PASS, 1 = FAIL (missing deps found)
+ * Usage: node scripts/validate-aios-core-deps.js
+ */
+
+const fs = require('fs');
+const path = require('path');
+const Module = require('module');
+
+const PROJECT_ROOT = path.join(__dirname, '..');
+const AIOS_CORE_DIR = path.join(PROJECT_ROOT, '.aios-core');
+const SCRIPTS_DIR = path.join(AIOS_CORE_DIR, 'development', 'scripts');
+const PACKAGE_JSON = path.join(AIOS_CORE_DIR, 'package.json');
+
+// Node.js builtin modules
+const BUILTINS = new Set(Module.builtinModules.concat(
+  Module.builtinModules.map(m => `node:${m}`),
+));
+
+// Optional dev-time packages that should be wrapped in try-catch, not declared as deps
+const ALLOWLIST = new Set([
+  'eslint',
+  'prettier',
+  'jscodeshift',
+  '@babel/parser',
+  '@babel/traverse',
+  '@babel/generator',
+  '@babel/types',
+  '@jest/globals',
+  'jest',
+]);
+
+/**
+ * Extract require() calls from a JS file using regex.
+ * Handles: require('pkg'), require("pkg"), require(`pkg`)
+ * Skips: require('./relative'), require('fs'), dynamic require(variable)
+ */
+function extractRequires(filePath) {
+  const content = fs.readFileSync(filePath, 'utf8');
+  const requires = new Set();
+
+  // Match require('...') and require("...")
+  const pattern = /require\s*\(\s*['"`]([^'"`]+)['"`]\s*\)/g;
+  let match;
+  while ((match = pattern.exec(content)) !== null) {
+    const dep = match[1];
+    // Skip relative paths
+    if (dep.startsWith('.') || dep.startsWith('/')) continue;
+    // Skip template literal expressions (e.g., require('${dep.name}') in code generators)
+    if (dep.includes('${') || dep.includes('$')) continue;
+    // Skip builtins
+    if (BUILTINS.has(dep)) continue;
+
+    // Extract package name (handle scoped packages like @babel/parser)
+    const parts = dep.split('/');
+    const pkgName = dep.startsWith('@') ? parts.slice(0, 2).join('/') : parts[0];
+    requires.add(pkgName);
+  }
+
+  return requires;
+}
+
+/**
+ * Recursively find all .js files in a directory
+ */
+function findJsFiles(dir) {
+  const files = [];
+  if (!fs.existsSync(dir)) return files;
+
+  const entries = fs.readdirSync(dir, { withFileTypes: true });
+  for (const entry of entries) {
+    const fullPath = path.join(dir, entry.name);
+    if (entry.isDirectory() && entry.name !== 'node_modules') {
+      files.push(...findJsFiles(fullPath));
+    } else if (entry.isFile() && entry.name.endsWith('.js')) {
+      files.push(fullPath);
+    }
+  }
+  return files;
+}
+
+function main() {
+  console.log('--- .aios-core Dependency Validation (INS-4.12) ---\n');
+
+  // Read .aios-core/package.json
+  if (!fs.existsSync(PACKAGE_JSON)) {
+    console.error('FAIL: .aios-core/package.json not found');
+    process.exit(1);
+  }
+
+  const pkg = JSON.parse(fs.readFileSync(PACKAGE_JSON, 'utf8'));
+  const declared = new Set(Object.keys(pkg.dependencies || {}));
+
+  // Find all JS scripts
+  const scripts = findJsFiles(SCRIPTS_DIR);
+  if (scripts.length === 0) {
+    console.log('WARN: No .js files found in .aios-core/development/scripts/');
+    process.exit(0);
+  }
+
+  console.log(`Scanning ${scripts.length} scripts in .aios-core/development/scripts/\n`);
+
+  const errors = [];
+  const allRequires = new Map(); // pkg -> [files that use it]
+
+  for (const script of scripts) {
+    const requires = extractRequires(script);
+    const relPath = path.relative(PROJECT_ROOT, script);
+
+    for (const pkg of requires) {
+      if (!allRequires.has(pkg)) allRequires.set(pkg, []);
+      allRequires.get(pkg).push(relPath);
+
+      if (!declared.has(pkg) && !ALLOWLIST.has(pkg)) {
+        errors.push({ script: relPath, package: pkg });
+      }
+    }
+  }
+
+  // Report
+  console.log(`Found ${allRequires.size} unique external packages across ${scripts.length} scripts`);
+  console.log(`Declared in .aios-core/package.json: ${declared.size}`);
+  console.log(`Allowlisted (optional/dev-time): ${ALLOWLIST.size}\n`);
+
+  if (errors.length > 0) {
+    console.error(`FAIL: ${errors.length} undeclared dependencies found:\n`);
+
+    // Group by package
+    const byPkg = new Map();
+    for (const err of errors) {
+      if (!byPkg.has(err.package)) byPkg.set(err.package, []);
+      byPkg.get(err.package).push(err.script);
+    }
+
+    for (const [pkg, files] of byPkg) {
+      console.error(`  Missing: "${pkg}"`);
+      for (const f of files) {
+        console.error(`    Used in: ${f}`);
+      }
+    }
+
+    console.error('\nFix: Add missing packages to .aios-core/package.json dependencies');
+    console.error('Or add to ALLOWLIST if they are optional dev-time tools (wrap in try-catch)\n');
+    process.exit(1);
+  }
+
+  console.log('PASS: All script dependencies are declared in .aios-core/package.json\n');
+  process.exit(0);
+}
+
+main();