aios-core 4.4.2 → 4.4.4

package/.aios-core/development/scripts/code-quality-improver.js

@@ -1,9 +1,12 @@
 const fs = require('fs').promises;
 const path = require('path');
 const chalk = require('chalk');
-const { ESLint } = require('eslint');
-const prettier = require('prettier');
-const jscodeshift = require('jscodeshift');
+
+// INS-4.12: Optional dev-time deps — wrap in try-catch for brownfield installs
+let ESLint, prettier, jscodeshift;
+try { ({ ESLint } = require('eslint')); } catch { ESLint = null; }
+try { prettier = require('prettier'); } catch { prettier = null; }
+try { jscodeshift = require('jscodeshift'); } catch { jscodeshift = null; }
 
 /**
  * Automated code quality improvement system
@@ -119,15 +122,22 @@ class CodeQualityImprover {
    * Initialize tools
    */
   async initialize() {
-    // Initialize ESLint
-    this.eslint = new ESLint({
-      fix: true,
-      baseConfig: await this.loadESLintConfig(),
-      useEslintrc: true
-    });
+    // INS-4.12: Guard optional deps — may be null in brownfield installs
+    if (ESLint) {
+      this.eslint = new ESLint({
+        fix: true,
+        baseConfig: await this.loadESLintConfig(),
+        useEslintrc: true
+      });
+    } else {
+      console.warn('⚠️  eslint not available — linting improvements disabled');
+    }
 
-    // Load Prettier config
-    this.prettierConfig = await this.loadPrettierConfig();
+    if (prettier) {
+      this.prettierConfig = await this.loadPrettierConfig();
+    } else {
+      console.warn('⚠️  prettier not available — formatting improvements disabled');
+    }
   }
 
   /**
@@ -231,6 +241,7 @@ class CodeQualityImprover {
 
     try {
       // Linting issues
+      if (!this.eslint) return metrics;
       const lintResults = await this.eslint.lintText(content, { _filePath });
       metrics.issues = lintResults[0]?.errorCount + lintResults[0]?.warningCount || 0;
 
@@ -254,9 +265,12 @@ class CodeQualityImprover {
 
   async improveFormatting(content, _filePath, options) {
     try {
+      if (!prettier) {
+        return { improved: false, content, changes: [] };
+      }
       const formatted = await prettier.format(content, {
         ...this.prettierConfig,
-        filepath: filePath
+        filepath: _filePath
       });
 
       return {
@@ -276,6 +290,9 @@ class CodeQualityImprover {
 
   async improveLinting(content, _filePath, options) {
     try {
+      if (!this.eslint) {
+        return { improved: false, content, changes: [] };
+      }
       const results = await this.eslint.lintText(content, { _filePath });
       
       if (results[0]?.output) {

package/.aios-core/development/scripts/refactoring-suggester.js

@@ -1,10 +1,13 @@
 const fs = require('fs').promises;
 const path = require('path');
 const chalk = require('chalk');
-const { parse } = require('@babel/parser');
-const traverse = require('@babel/traverse').default;
-const generate = require('@babel/generator').default;
-const _t = require('@babel/types');
+
+// INS-4.12: Optional dev-time deps — wrap in try-catch for brownfield installs
+let parse, traverse, generate, _t;
+try { ({ parse } = require('@babel/parser')); } catch { parse = null; }
+try { traverse = require('@babel/traverse').default; } catch { traverse = null; }
+try { generate = require('@babel/generator').default; } catch { generate = null; }
+try { _t = require('@babel/types'); } catch { _t = null; }
 
 /**
  * Automated refactoring suggestion system
@@ -118,12 +121,18 @@ class RefactoringSuggester {
    * Analyze code and suggest refactorings
    */
   async analyzeCode(filePath, options = {}) {
+    // INS-4.12: Guard — @babel deps may not be available in brownfield installs
+    if (!parse || !traverse) {
+      console.warn(chalk.yellow('⚠️  @babel/parser or @babel/traverse not available — refactoring analysis disabled'));
+      return { filePath, suggestions: [], error: '@babel dependencies not installed' };
+    }
+
     console.log(chalk.blue(`🔍 Analyzing: ${filePath}`));
-    
+
     try {
       const _content = await fs.readFile(filePath, 'utf-8');
       const fileType = path.extname(filePath);
-      
+
       if (!['.js', '.jsx', '.ts', '.tsx'].includes(fileType)) {
         return {
           filePath,

package/.aios-core/install-manifest.yaml

@@ -7,8 +7,8 @@
 # - SHA256 hashes for change detection
 # - File types for categorization
 #
-version: 4.4.2
-generated_at: "2026-02-24T16:53:34.099Z"
+version: 4.4.4
+generated_at: "2026-02-25T01:37:46.325Z"
 generator: scripts/generate-install-manifest.js
 file_count: 1084
 files:
@@ -333,9 +333,9 @@ files:
     type: core
     size: 674
   - path: core/doctor/checks/npm-packages.js
-    hash: sha256:16f747d25d3185050c3b149d235dce707555038b51c0659e416a4d33a3672032
+    hash: sha256:09e03cd3558acbdd6b2f4103c156c76a3c07fa2f0b8996739bec7a865d781922
     type: core
-    size: 702
+    size: 2265
   - path: core/doctor/checks/rules-files.js
     hash: sha256:6fe670f3759520f0d4b0abdad14f5f8b0eaa12cc9b15252c6de7e4cfa099d337
     type: core
@@ -1221,9 +1221,9 @@ files:
     type: data
     size: 9575
   - path: data/entity-registry.yaml
-    hash: sha256:1a3ebc7fb0c09631e18192e376903db69ef9e40ffc2a661ca87a100e6996051f
+    hash: sha256:fb17c8d978fd7bb483a2752ba285718d86af234f0412ecdc6d123ec0d0634032
     type: data
-    size: 517912
+    size: 519735
   - path: data/learned-patterns.yaml
     hash: sha256:24ac0b160615583a0ff783d3da8af80b7f94191575d6db2054ec8e10a3f945dc
     type: data
@@ -1465,9 +1465,9 @@ files:
     type: script
     size: 11536
   - path: development/scripts/code-quality-improver.js
-    hash: sha256:acdfea90590a2d0d566e720540a8aad4a360cd531c58ad4e67cc4126522b7455
+    hash: sha256:d0c844089e53dcd6c06755d4cb432a60fbebcedcf5a86ed635650573549a1941
     type: script
-    size: 39827
+    size: 40545
   - path: development/scripts/commit-message-generator.js
     hash: sha256:2e75d22307d0e3823b7762a6aff18c4c3842a632f876069215a221bc053336dc
     type: script
@@ -1565,9 +1565,9 @@ files:
     type: script
     size: 22558
   - path: development/scripts/refactoring-suggester.js
-    hash: sha256:d5183f79fae9dc4bf4d3c9136b3622e43a63643a7df622742c350931e45f18f4
+    hash: sha256:d50ea6b609c9cf8385979386fee4b4385d11ebcde15460260f66d04c705f6cd9
     type: script
-    size: 34675
+    size: 35227
   - path: development/scripts/rollback-handler.js
     hash: sha256:b18a9451fa3f8919733251857dbad2bc4b7ecbf782e6c114b88bc867358421a9
     type: script
@@ -3525,9 +3525,9 @@ files:
     type: monitor
     size: 818
   - path: package.json
-    hash: sha256:dff580c83cc1554c75162c9cabb711b5cd85e679c9c8f4968ee74499e99de0c0
+    hash: sha256:ac6d72a82cecd2a98a443dc195e87cf815c2df58fb743737177670999a816b5f
     type: other
-    size: 2401
+    size: 2495
   - path: product/checklists/accessibility-wcag-checklist.md
     hash: sha256:56126182b25e9b7bdde43f75315e33167eb49b1f9a9cb0e9a37bc068af40aeab
     type: checklist

package/.aios-core/package.json

@@ -31,16 +31,20 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
+    "ajv": "^8.17.1",
     "chalk": "^4.1.2",
     "commander": "^12.1.0",
+    "diff": "^5.2.0",
+    "execa": "^5.1.1",
+    "fast-glob": "^3.3.3",
     "fs-extra": "^11.3.0",
     "glob": "^10.4.4",
-    "js-yaml": "^4.1.0",
+    "highlight.js": "^11.9.0",
     "inquirer": "^8.2.6",
-    "validator": "^13.15.15",
-    "diff": "^5.2.0",
-    "execa": "^5.1.1",
-    "highlight.js": "^11.9.0"
+    "js-yaml": "^4.1.0",
+    "semver": "^7.7.2",
+    "tar": "^7.5.7",
+    "validator": "^13.15.15"
   },
   "peerDependencies": {
     "@aios-fullstack/memory": "^4.31.0",

package/README.md

@@ -12,6 +12,8 @@
 [![Contributions Welcome](https://img.shields.io/badge/contributions-welcome-brightgreen.svg)](CONTRIBUTING.md)
 [![Code of Conduct](https://img.shields.io/badge/code%20of%20conduct-Contributor%20Covenant-blue.svg)](CODE_OF_CONDUCT.md)
 
+> 🌐 README por idioma: [EN](docs/README.md) | [PT](docs/pt/README.md) | [ES](docs/es/README.md) | [ZH](docs/zh/README.md)
+
 Framework de Desenvolvimento Auto-Modificável Alimentado por IA. Fundado em Desenvolvimento Ágil Dirigido por Agentes, oferecendo capacidades revolucionárias para desenvolvimento dirigido por IA e muito mais. Transforme qualquer domínio com expertise especializada de IA: desenvolvimento de software, entretenimento, escrita criativa, estratégia de negócios, bem-estar pessoal e muito mais.
 
 ## Comece Aqui (10 Min)
@@ -112,7 +114,7 @@ Esta abordagem de duas fases elimina tanto a **inconsistência de planejamento**
 - 📖 [Guia de Instalação para Windows](docs/installation/windows.md)
 - 📖 [Guia de Instalação para Linux](docs/installation/linux.md)
 
-**Documentação multilíngue disponível:** [Português](docs/pt/installation/) | [Español](docs/es/installation/)
+**Documentação multilíngue disponível:** [English](docs/README.md) | [Português](docs/pt/README.md) | [Español](docs/es/README.md) | [中文](docs/zh/README.md)
 
 ## Navegação Rápida
 

package/bin/utils/validate-publish.js

@@ -2,13 +2,14 @@
 'use strict';
 
 /**
- * Publish Safety Gate — Submodule + File Count Validation
- * Story INS-4.10
+ * Publish Safety Gate — Submodule + File Count + Dependency Validation
+ * Story INS-4.10, INS-4.12
  *
  * Prevents publishing incomplete packages by validating:
  * 1. pro/ submodule is populated (not empty or uninitialized)
  * 2. Critical file pro/license/license-api.js exists
  * 3. Package file count meets minimum threshold (>= 50)
+ * 4. (INS-4.12) .aios-core/package.json dependency completeness
  *
  * Exit codes: 0 = PASS, 1 = FAIL
  * Usage: node bin/utils/validate-publish.js
@@ -81,7 +82,7 @@ try {
     line.includes('npm notice') && !line.includes('Tarball') && !line.includes('name:') &&
     !line.includes('version:') && !line.includes('filename:') && !line.includes('package size:') &&
     !line.includes('unpacked size:') && !line.includes('shasum:') && !line.includes('integrity:') &&
-    !line.includes('total files:')
+    !line.includes('total files:'),
   );
   fileCount = fileLines.length;
 
@@ -97,6 +98,28 @@ try {
   passed = false;
 }
 
+// Check 4 (INS-4.12): .aios-core dependency completeness
+console.log('');
+console.log('--- Dependency Completeness (INS-4.12) ---\n');
+try {
+  const depValidatorPath = path.join(PROJECT_ROOT, 'scripts', 'validate-aios-core-deps.js');
+  if (fs.existsSync(depValidatorPath)) {
+    execSync(`node "${depValidatorPath}"`, {
+      encoding: 'utf8',
+      cwd: PROJECT_ROOT,
+      timeout: 30000,
+      stdio: 'inherit',
+    });
+    console.log('PASS: .aios-core dependency completeness validated');
+  } else {
+    console.log('SKIP: scripts/validate-aios-core-deps.js not found');
+  }
+} catch (_depErr) {
+  console.error('FAIL: .aios-core dependency completeness check failed');
+  console.error('  Fix: Run "node scripts/validate-aios-core-deps.js" to see details');
+  passed = false;
+}
+
 // Summary
 console.log('');
 if (passed) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aios-core",
-  "version": "4.4.2",
+  "version": "4.4.4",
   "description": "Synkra AIOS: AI-Orchestrated System for Full Stack Development - Core Framework",
   "bin": {
     "aios": "bin/aios.js",

package/packages/installer/src/installer/aios-core-installer.js

@@ -324,9 +324,11 @@ async function installAiosCore(options = {}) {
     // BUG-2 fix (INS-1): Install .aios-core dependencies after copy
     // The copied .aios-core/package.json has dependencies (js-yaml, execa, etc.)
     // that must be installed for the activation pipeline to work
+    // INS-4.12: Track dep install success for bootstrap guard
     const aiosCorePackageJson = path.join(targetAiosCore, 'package.json');
+    result.aiosCoreDepsInstalled = false;
     if (await fs.pathExists(aiosCorePackageJson)) {
-      spinner.text = 'Installing .aios-core dependencies (js-yaml, etc.)...';
+      spinner.text = 'Installing .aios-core dependencies (js-yaml, fast-glob, etc.)...';
       try {
         const { exec } = require('child_process');
         const { promisify } = require('util');
@@ -335,6 +337,7 @@ async function installAiosCore(options = {}) {
           cwd: targetAiosCore,
           timeout: 60000,
         });
+        result.aiosCoreDepsInstalled = true;
         spinner.succeed('Installed .aios-core dependencies');
         spinner.start('Finishing installation...');
       } catch (depError) {

package/packages/installer/src/wizard/i18n.js

@@ -122,6 +122,7 @@ const TRANSLATIONS = {
     proKeyInvalid: 'Invalid format. Expected: PRO-XXXX-XXXX-XXXX-XXXX',
     proKeyValidated: 'License validated: {key}',
     proModuleNotAvailable: 'Pro license module not available. Ensure @aios-fullstack/pro is installed.',
+    proModuleBootstrap: 'Pro license module not found locally. Installing @aios-fullstack/pro to bootstrap...',
     proServerUnreachable: 'License server is unreachable. Check your internet connection and try again.',
     proVerifyingAccessShort: 'Verifying access...',
     proAccessConfirmed: 'Pro access confirmed.',
@@ -279,6 +280,7 @@ const TRANSLATIONS = {
     proKeyInvalid: 'Formato inválido. Esperado: PRO-XXXX-XXXX-XXXX-XXXX',
     proKeyValidated: 'Licença validada: {key}',
     proModuleNotAvailable: 'Módulo de licença Pro não disponível. Certifique-se de que @aios-fullstack/pro está instalado.',
+    proModuleBootstrap: 'Módulo de licença Pro não encontrado localmente. Instalando @aios-fullstack/pro...',
     proServerUnreachable: 'Servidor de licenças inacessível. Verifique sua conexão com a internet e tente novamente.',
     proVerifyingAccessShort: 'Verificando acesso...',
     proAccessConfirmed: 'Acesso Pro confirmado.',
@@ -435,6 +437,7 @@ const TRANSLATIONS = {
     proKeyInvalid: 'Formato inválido. Esperado: PRO-XXXX-XXXX-XXXX-XXXX',
     proKeyValidated: 'Licencia validada: {key}',
     proModuleNotAvailable: 'Módulo de licencia Pro no disponible. Asegúrese de que @aios-fullstack/pro esté instalado.',
+    proModuleBootstrap: 'Módulo de licencia Pro no encontrado localmente. Instalando @aios-fullstack/pro...',
     proServerUnreachable: 'Servidor de licencias inaccesible. Verifique su conexión a internet e intente nuevamente.',
     proVerifyingAccessShort: 'Verificando acceso...',
     proAccessConfirmed: 'Acceso Pro confirmado.',

package/packages/installer/src/wizard/index.js

@@ -571,32 +571,47 @@ async function runWizard(options = {}) {
     }
 
     // Story INS-4.6: Entity Registry Bootstrap — populate entity-registry.yaml on install
+    // Story INS-4.12: Fix module resolution + bootstrap timing
+    // Bootstrap runs AFTER .aios-core deps are installed (aios-core-installer.js:324-345)
+    // NODE_PATH ensures spawned scripts can resolve packages from .aios-core/node_modules/
     console.log('\n📇 Bootstrapping entity registry...');
     try {
       const registryScript = path.join(process.cwd(), '.aios-core', 'development', 'scripts', 'populate-entity-registry.js');
       if (fse.existsSync(registryScript)) {
-        const startMs = Date.now();
-        execSync(`node "${registryScript}"`, {
-          cwd: process.cwd(),
-          encoding: 'utf8',
-          timeout: 30000,
-          stdio: 'pipe',
-        });
-        const elapsedMs = Date.now() - startMs;
-
-        // Read entity count from generated registry
-        const registryPath = path.join(process.cwd(), '.aios-core', 'data', 'entity-registry.yaml');
-        let entityCount = 0;
-        if (fse.existsSync(registryPath)) {
-          const registryContent = fse.readFileSync(registryPath, 'utf8');
-          const countMatch = registryContent.match(/entityCount:\s*(\d+)/);
-          entityCount = countMatch ? parseInt(countMatch[1], 10) : 0;
-        }
+        // INS-4.12 AC3: Guard — skip bootstrap if .aios-core deps are not installed
+        const aiosCoreNodeModules = path.join(process.cwd(), '.aios-core', 'node_modules');
+        if (!fse.existsSync(aiosCoreNodeModules)) {
+          console.warn('⚠️  .aios-core/node_modules/ not found — skipping entity registry bootstrap');
+          console.warn('   Run: cd .aios-core && npm install --production');
+          answers.entityRegistryStatus = 'skipped-no-deps';
+        } else {
+        // INS-4.12 AC2: Set NODE_PATH so spawned scripts resolve deps from .aios-core/node_modules/
+          const parentNodeModules = path.join(process.cwd(), 'node_modules');
+          const nodePath = [aiosCoreNodeModules, parentNodeModules].join(path.delimiter);
+          const startMs = Date.now();
+          execSync(`node "${registryScript}"`, {
+            cwd: process.cwd(),
+            encoding: 'utf8',
+            timeout: 30000,
+            stdio: 'pipe',
+            env: { ...process.env, NODE_PATH: nodePath },
+          });
+          const elapsedMs = Date.now() - startMs;
+
+          // Read entity count from generated registry
+          const registryPath = path.join(process.cwd(), '.aios-core', 'data', 'entity-registry.yaml');
+          let entityCount = 0;
+          if (fse.existsSync(registryPath)) {
+            const registryContent = fse.readFileSync(registryPath, 'utf8');
+            const countMatch = registryContent.match(/entityCount:\s*(\d+)/);
+            entityCount = countMatch ? parseInt(countMatch[1], 10) : 0;
+          }
 
-        console.log(`✅ Entity registry: populated (${entityCount} entities, ${(elapsedMs / 1000).toFixed(1)}s)`);
-        answers.entityRegistryStatus = 'populated';
-        answers.entityRegistryCount = entityCount;
-        answers.entityRegistryMs = elapsedMs;
+          console.log(`✅ Entity registry: populated (${entityCount} entities, ${(elapsedMs / 1000).toFixed(1)}s)`);
+          answers.entityRegistryStatus = 'populated';
+          answers.entityRegistryCount = entityCount;
+          answers.entityRegistryMs = elapsedMs;
+        } // end else (deps exist)
       } else {
         console.log('   ℹ️  Entity registry script not found (skipped)');
         answers.entityRegistryStatus = 'skipped';

package/packages/installer/src/wizard/pro-setup.js

@@ -145,30 +145,56 @@ function showStep(current, total, label) {
   console.log(colors.dim('  ' + '─'.repeat(44)));
 }
 
+/**
+ * Try to load a pro license module via multiple resolution paths.
+ *
+ * Resolution order:
+ * 1. Relative path (framework-dev mode: ../../../../pro/license/{name})
+ * 2. @aios-fullstack/pro package (brownfield: node_modules/@aios-fullstack/pro/license/{name})
+ * 3. Absolute path via aios-core in node_modules (brownfield upgrade)
+ *
+ * @param {string} moduleName - Module filename without extension (e.g., 'license-api')
+ * @returns {Object|null} Loaded module or null
+ */
+function loadProModule(moduleName) {
+  // 1. Framework-dev mode (cloned repo with pro/ submodule)
+  try {
+    return require(`../../../../pro/license/${moduleName}`);
+  } catch { /* not available */ }
+
+  // 2. @aios-fullstack/pro installed in user project
+  try {
+    return require(`@aios-fullstack/pro/license/${moduleName}`);
+  } catch { /* not available */ }
+
+  // 3. aios-core in node_modules (brownfield upgrade from >= v4.2.15)
+  try {
+    const path = require('path');
+    const absPath = path.join(process.cwd(), 'node_modules', 'aios-core', 'pro', 'license', moduleName);
+    return require(absPath);
+  } catch { /* not available */ }
+
+  return null;
+}
+
 /**
  * Try to load the license API client via lazy import.
+ * Attempts multiple resolution paths for framework-dev, greenfield, and brownfield.
  *
  * @returns {{ LicenseApiClient: Function, licenseApi: Object }|null} License API or null
  */
 function loadLicenseApi() {
-  try {
-    return require('../../../../pro/license/license-api');
-  } catch {
-    return null;
-  }
+  return loadProModule('license-api');
 }
 
 /**
  * Try to load the feature gate via lazy import.
+ * Attempts multiple resolution paths for framework-dev, greenfield, and brownfield.
  *
  * @returns {{ featureGate: Object }|null} Feature gate or null
  */
 function loadFeatureGate() {
-  try {
-    return require('../../../../pro/license/feature-gate');
-  } catch {
-    return null;
-  }
+  return loadProModule('feature-gate');
 }
 
 /**
@@ -1192,6 +1218,48 @@ async function runProWizard(options = {}) {
     showProHeader();
   }
 
+  // Pre-check: If license module is not available (brownfield upgrade from older version),
+  // install @aios-fullstack/pro first to get the license API, then proceed with gate.
+  if (!loadLicenseApi()) {
+    const fs = require('fs');
+    const path = require('path');
+    const { execSync } = require('child_process');
+
+    showInfo(t('proModuleBootstrap'));
+
+    // Ensure package.json exists
+    const packageJsonPath = path.join(targetDir, 'package.json');
+    if (!fs.existsSync(packageJsonPath)) {
+      execSync('npm init -y', { cwd: targetDir, stdio: 'pipe' });
+    }
+
+    // Install @aios-fullstack/pro to get license module
+    const proDir = path.join(targetDir, 'node_modules', '@aios-fullstack', 'pro');
+    if (!fs.existsSync(proDir)) {
+      const installSpinner = createSpinner(t('proInstallingPackage'));
+      installSpinner.start();
+      try {
+        execSync('npm install @aios-fullstack/pro', {
+          cwd: targetDir,
+          stdio: 'pipe',
+          timeout: 120000,
+        });
+        installSpinner.succeed(t('proPackageInstalled'));
+      } catch (err) {
+        installSpinner.fail(t('proPackageInstallFailed'));
+        result.error = tf('proNpmInstallFailed', { message: err.message });
+        return result;
+      }
+    }
+
+    // Clear require cache so loadLicenseApi() picks up newly installed module
+    Object.keys(require.cache).forEach((key) => {
+      if (key.includes('license-api') || key.includes('@aios-fullstack')) {
+        delete require.cache[key];
+      }
+    });
+  }
+
   // Step 1: License Gate
   const licenseResult = await stepLicenseGate({
     key: options.key || process.env.AIOS_PRO_KEY,
@@ -1255,6 +1323,7 @@ module.exports = {
     stepLicenseGateWithKey,
     stepLicenseGateWithKeyInteractive,
     stepLicenseGateWithEmail,
+    loadProModule,
     loadLicenseApi,
     loadFeatureGate,
     loadProScaffolder,

package/packages/installer/tests/unit/doctor/doctor-checks.test.js

@@ -53,7 +53,7 @@ describe('npm-packages check', () => {
     fs.existsSync.mockReturnValue(true);
     const result = await npmPackagesCheck.run(mockContext);
     expect(result.status).toBe('PASS');
-    expect(result.message).toBe('node_modules present');
+    expect(result.message).toContain('node_modules present');
   });
 
   it('should FAIL when node_modules missing', async () => {