arkaos 4.7.0 → 4.7.1

package/VERSION

@@ -1 +1 @@
-4.7.0
+4.7.1

package/arka/SKILL.md

@@ -152,7 +152,7 @@ Example first lines (pick the right department for the ask):
 After the routing line, in order:
 
 1. State the workflow name and its phase count.
-2. Run Phase 1 (usually spec via `arka-spec` or plan via `arka-forge`) BEFORE writing any code.
+2. Run Phase 1 (usually spec via `arka-dev-spec` or plan via `arka-forge`) BEFORE writing any code.
 3. Execute sequential phases with visibility (one at a time, report status).
 4. Run the Quality Gate (Marta CQO + Eduardo Copy + Francisca Tech, model Opus) BEFORE marking done.
 
@@ -186,7 +186,7 @@ violation (squad-routing, arka-supremacy, spec-driven, mandatory-qa).
 | `/arka search <query>` | Semantic search in knowledge base |
 | `/arka keys` | Manage API keys (OpenAI, Google, fal.ai) |
 | `/arka personas` | Manage AI personas (create, clone to agent) |
-| `/arka resume <PR_URL>` | Re-enter the Claude Code session that produced a PR (GitHub / GitLab / Bitbucket). Wraps the native `/resume` from Claude Code 2.1.122+. Useful with `arka-spec` and `arka-release` archaeology. |
+| `/arka resume <PR_URL>` | Re-enter the Claude Code session that produced a PR (GitHub / GitLab / Bitbucket). Wraps the native `/resume` from Claude Code 2.1.122+. Useful with `arka-dev-spec` and `arka-release` archaeology. |
 | `/do <description>` | Universal routing — natural language to department command |
 
 ## Universal Orchestrator (/do)

package/arka/skills/flow/SKILL.md

@@ -154,7 +154,7 @@ no six-reviewer role-play. One marker per gate transition.
 ## Related skills
 
 - `/arka-forge` — complexity-aware planning for MEDIUM/HIGH Gate 2.
-- `/arka-spec` — spec gate when Gate 2 scope needs a full spec.
+- `arka-dev-spec` (`/dev spec`) — spec gate when Gate 2 scope needs a full spec.
 - `/arka-quality` — Gate 4 orchestration.
 - `/arka-checkpoint` — user-in-the-loop fragmentation for >30s dispatches.
 

package/bin/arka-py.ps1

@@ -12,9 +12,15 @@ $ErrorActionPreference = "Stop"
 
 # ─── Source the shared resolver, from the repo or the installed location ──
 $self = if ($PSScriptRoot) { $PSScriptRoot } else { Split-Path -Parent $MyInvocation.MyCommand.Path }
+# Windows PowerShell 5.1 cannot parse an inline `if`-expression passed as a
+# command argument (e.g. `Join-Path (if (...) {...} else {...}) "..."`); it is
+# a PowerShell 7-only construct, so the whole script fails to parse under 5.1
+# and every `arka-py ...` call dies. Resolve the home base into a variable
+# first — the assignment form of `if` IS valid in 5.1.
+$base = if ($env:USERPROFILE) { $env:USERPROFILE } else { $HOME }
 $libs = @(
     (Join-Path $self "..\config\hooks\_lib\arka_python.ps1"),
-    (Join-Path (if ($env:USERPROFILE) { $env:USERPROFILE } else { $HOME }) ".arkaos\config\hooks\_lib\arka_python.ps1")
+    (Join-Path $base ".arkaos\config\hooks\_lib\arka_python.ps1")
 )
 foreach ($lib in $libs) {
     if (Test-Path -LiteralPath $lib) { . $lib; break }
@@ -24,7 +30,8 @@ if (-not $env:ARKA_PY) { $env:ARKA_PY = "python" }
 # ─── Make `-m core.*` resolvable regardless of cwd ────────────────────────
 $root = $env:ARKAOS_ROOT
 if (-not $root) {
-    $rp = Join-Path (if ($env:USERPROFILE) { $env:USERPROFILE } else { $HOME }) ".arkaos\.repo-path"
+    # Reuse $base (5.1-safe) instead of an inline `if`-expression argument.
+    $rp = Join-Path $base ".arkaos\.repo-path"
     if (Test-Path -LiteralPath $rp) { $root = (Get-Content -LiteralPath $rp -Raw).Trim() }
 }
 if ($root -and (Test-Path -LiteralPath $root)) {

package/config/hooks/user-prompt-submit.sh

@@ -46,6 +46,13 @@ export ARKAOS_ROOT
 
 _ARKA_L0_FALLBACK='{"additionalContext": "[Constitution] NON-NEGOTIABLE: branch-isolation, security-gate, mandatory-qa, evidence-flow, arkaos-not-yes-man, excellence-mandate | QUALITY-GATE: marta-cqo, eduardo-copy, francisca-tech-ux | MUST (28) incl.: squad-routing, spec-driven, conventional-commits, test-coverage, subagent-discipline, persona-vs-artifact"}'
 
+# Test seam: bats asserts the fallback CONTENT deterministically —
+# the shared resolver overwrites ARKA_PY, so an env flag is the only
+# reliable way to force this path (tests/constitution.bats L0 tests).
+if [ -n "${ARKA_HOOK_FORCE_FALLBACK:-}" ]; then
+  echo "$_ARKA_L0_FALLBACK"
+  exit 0
+fi
 if ! command -v "$ARKA_PY" >/dev/null 2>&1; then
   echo "$_ARKA_L0_FALLBACK"
   exit 0

package/core/governance/phantom_action_check.py

@@ -36,6 +36,19 @@ _EFFECT_OBJECT = (
     r"|commands?|builds?)\b|\.[a-z]{2,4}\b|`[^`]+`)"
 )
 
+# Analytic/mental nouns: a verb whose nearest object is one of these is
+# narrating the RESPONSE, not a tool effect ("updated my understanding of
+# the file", "adicionei contexto sobre os testes") — the effect object
+# match must not cross them (QG condition on #255 before enforcement).
+_ANALYTIC_NOUN = (
+    r"\b(?:understanding|context|summary|notes?|thinking|thoughts?"
+    r"|takeaways?|impressions?|sense|grasp|view|idea|picture"
+    r"|mental\s+model|contexto|resumo|notas?|entendimento"
+    r"|perce[çc][ãa]o|an[áa]lise|analysis|ideia|vis[ãa]o|imagem"
+    r"|no[çc][ãa]o|perspe[ct]?tiva|opini[ãa]o|conhecimento|knowledge)\b"
+)
+_GAP = r"(?:(?!" + _ANALYTIC_NOUN + r")[^.\n!?]){0,60}?"
+
 # Verbs whose completion is unambiguous on its own (git/publish/install).
 _STANDALONE_PT = (
     r"(?<!não )\b(instalei|publiquei|gravei|renomeei|implementei"
@@ -46,15 +59,17 @@ _STANDALONE_EN = (
     r"\bI(?:'ve| have)?\s+(?:just\s+)?(committed|pushed|merged|published"
     r"|released|deployed|installed)\b"
 )
-# Ambiguous verbs — only a claim when bound to an effect object nearby.
+# Ambiguous verbs — only a claim when bound to an effect object nearby,
+# without an analytic noun in between. "ran into"/"ran through" are
+# idioms, never executions.
 _BOUND_PT = (
     r"(?<!não )\b(criei|escrevi|atualizei|editei|apaguei|removi|adicionei"
-    r"|movi|apliquei|corri|executei)\b[^.\n!?]{0,60}?" + _EFFECT_OBJECT
+    r"|movi|apliquei|corri|executei)\b" + _GAP + _EFFECT_OBJECT
 )
 _BOUND_EN = (
     r"\bI(?:'ve| have)?\s+(?:just\s+)?(created|wrote|updated|deleted"
-    r"|added|moved|applied|renamed|ran|executed)\b[^.\n!?]{0,60}?"
-    + _EFFECT_OBJECT
+    r"|added|moved|applied|renamed|ran(?!\s+(?:into|through|over|across))"
+    r"|executed)\b" + _GAP + _EFFECT_OBJECT
 )
 _PASSIVE = (
     r"\b(commit|push|merge|deploy|release|PR)\s+(feito|criado|efetuado"

package/core/hooks/user_prompt_submit.py

@@ -531,8 +531,15 @@ def main(stdin_json: dict | None = None, raw: str = "") -> int:
     except OSError:
         pass
 
-    user_input = get_str(stdin_json, "userInput") or get_str(
-        stdin_json, "message"
+    # Claude Code sends the user's text under "prompt" (UserPromptSubmit
+    # hook schema); "userInput"/"message" cover other runtimes. Missing
+    # "prompt" here meant the raw JSON line fell through as user_input,
+    # so L1/L5/L2.5 computed on JSON garbage every turn (found 2026-07-09
+    # by the un-swallowed orchestrator bats test).
+    user_input = (
+        get_str(stdin_json, "prompt")
+        or get_str(stdin_json, "userInput")
+        or get_str(stdin_json, "message")
     )
     session_id = get_str(stdin_json, "session_id")
     effort_level = get_str(stdin_json, "effort", "level") or os.environ.get(

package/core/runtime/claude_code.py

@@ -152,7 +152,8 @@ def _run_claude_cli(cmd: list[str]) -> subprocess.CompletedProcess:
 
     try:
         return subprocess.run(
-            cmd, capture_output=True, text=True, timeout=60, check=False
+            cmd, capture_output=True, text=True, encoding="utf-8",
+            errors="replace", timeout=60, check=False
         )
     except subprocess.TimeoutExpired as exc:
         raise LLMUnavailable("claude CLI timed out after 60s") from exc

package/core/runtime/codex_cli.py

@@ -170,6 +170,8 @@ def _run_codex_cli(cmd: list[str]) -> subprocess.CompletedProcess:
             cmd,
             capture_output=True,
             text=True,
+            encoding="utf-8",
+            errors="replace",
             timeout=_TIMEOUT_SECONDS,
             check=False,
             # CRITICAL: with a prompt arg AND piped stdin, codex exec

package/core/runtime/gemini_cli.py

@@ -147,6 +147,8 @@ def _run_gemini_cli(cmd: list[str]) -> subprocess.CompletedProcess:
             cmd,
             capture_output=True,
             text=True,
+            encoding="utf-8",
+            errors="replace",
             timeout=_TIMEOUT_SECONDS,
             check=False,
         )

package/core/synapse/agent_experiences_layer.py

@@ -46,6 +46,10 @@ class AgentExperiencesLayer(Layer):
     def name(self) -> str:
         return "AgentExperiences"
 
+    @property
+    def input_sensitive(self) -> bool:
+        return True
+
     @property
     def cache_ttl(self) -> int:
         return 30

package/core/synapse/engine.py

@@ -8,6 +8,7 @@ Design goals:
 - Relevance filtering (skip irrelevant layers)
 """
 
+import hashlib
 import time
 from dataclasses import dataclass, field
 from typing import Any
@@ -109,6 +110,14 @@ class SynapseEngine:
     def _compute_layer(self, layer: Layer, ctx: PromptContext) -> LayerResult:
         """Compute a single layer with caching."""
         cache_key = f"{layer.id}:{ctx.cwd}:{ctx.active_agent}"
+        if layer.input_sensitive:
+            # Input-dependent layers (hints, department, KB retrieval)
+            # must not serve one prompt's result to a different prompt
+            # within the TTL window.
+            digest = hashlib.sha1(
+                (ctx.user_input or "").encode("utf-8", "replace")
+            ).hexdigest()[:12]
+            cache_key += f":{digest}"
 
         # Check cache
         if layer.cache_ttl > 0:

package/core/synapse/graph_context_layer.py

@@ -141,6 +141,10 @@ class GraphContextLayer(Layer):
     def name(self) -> str:
         return "GraphContext"
 
+    @property
+    def input_sensitive(self) -> bool:
+        return True
+
     @property
     def cache_ttl(self) -> int:
         return 30

package/core/synapse/layers.py

@@ -74,6 +74,18 @@ class Layer(ABC):
         """Cache TTL in seconds. 0 = no caching."""
         return 0
 
+    @property
+    def input_sensitive(self) -> bool:
+        """True when compute() depends on ctx.user_input.
+
+        Input-sensitive layers get the prompt hashed into their cache
+        key — without it, a cached result from one prompt is served for
+        a DIFFERENT prompt within the TTL window (found 2026-07-09: L5
+        served 'hello' hints for an explicit '/dev feature' command,
+        defeating its own slash-suppression rule).
+        """
+        return False
+
     @property
     def priority(self) -> int:
         """Layer priority (lower = computed first)."""
@@ -166,6 +178,10 @@ class DepartmentLayer(Layer):
     def name(self) -> str:
         return "Department"
 
+    @property
+    def input_sensitive(self) -> bool:
+        return True
+
     @property
     def priority(self) -> int:
         return 10
@@ -392,6 +408,10 @@ class CommandHintsLayer(Layer):
     def name(self) -> str:
         return "CommandHints"
 
+    @property
+    def input_sensitive(self) -> bool:
+        return True
+
     @property
     def cache_ttl(self) -> int:
         return 30
@@ -522,6 +542,10 @@ class KnowledgeRetrievalLayer(Layer):
     def name(self) -> str:
         return "KnowledgeRetrieval"
 
+    @property
+    def input_sensitive(self) -> bool:
+        return True
+
     @property
     def cache_ttl(self) -> int:
         return 30
@@ -1027,6 +1051,10 @@ class KBContextLayer(Layer):
     def name(self) -> str:
         return "KBContext"
 
+    @property
+    def input_sensitive(self) -> bool:
+        return True
+
     @property
     def cache_ttl(self) -> int:
         return 0

package/core/synapse/pattern_library_layer.py

@@ -71,6 +71,10 @@ class PatternLibraryLayer(Layer):
     def name(self) -> str:
         return "PatternLibrary"
 
+    @property
+    def input_sensitive(self) -> bool:
+        return True
+
     @property
     def cache_ttl(self) -> int:
         return 60

package/departments/dev/skills/scaffold/SKILL.md

@@ -14,17 +14,21 @@ Create new projects from real git repositories with full automation: dependencie
 
 ## Commands
 
-| Command | Git Repository | Stack |
-|---------|---------------|-------|
-| `/dev scaffold laravel <name>` | `https://${GIT_HOST}/laravel/laravel.git` (override with `ARKAOS_LARAVEL_STARTER_REPO` env) | Laravel + Herd |
-| `/dev scaffold nuxt-saas <name>` | `https://github.com/nuxt-ui-templates/dashboard.git` | Nuxt 3 Dashboard |
-| `/dev scaffold nuxt-landing <name>` | `https://github.com/nuxt-ui-templates/landing.git` | Nuxt 3 Landing |
-| `/dev scaffold nuxt-docs <name>` | `https://github.com/nuxt-ui-templates/docs.git` | Nuxt 3 Docs |
-| `/dev scaffold vue-saas <name>` | `https://github.com/nuxt-ui-templates/dashboard-vue.git` | Vue 3 Dashboard |
-| `/dev scaffold vue-landing <name>` | `https://github.com/nuxt-ui-templates/starter-vue.git` | Vue 3 Landing |
-| `/dev scaffold full-stack <name>` | Laravel + Nuxt (both repos) | Full-stack |
-| `/dev scaffold react <name>` | React starter (TBD) | React SPA |
-| `/dev scaffold nextjs <name>` | Next.js starter (TBD) | Next.js App |
+<!-- Column convention: command | DESCRIPTION | repo. The registry
+     generator (bin/arka-registry-gen) reads column 2 as the user-facing
+     description — a repo URL there ships garbled command help (QG
+     blocker, 2026-07-09). -->
+| Command | Description | Git Repository |
+|---------|-------------|----------------|
+| `/dev scaffold laravel <name>` | Scaffold a Laravel app into ~/Herd from the starter repo | `https://${GIT_HOST}/laravel/laravel.git` (override with `ARKAOS_LARAVEL_STARTER_REPO` env) |
+| `/dev scaffold nuxt-saas <name>` | Scaffold a Nuxt 3 SaaS dashboard into ~/Work | `https://github.com/nuxt-ui-templates/dashboard.git` |
+| `/dev scaffold nuxt-landing <name>` | Scaffold a Nuxt 3 landing page into ~/Work | `https://github.com/nuxt-ui-templates/landing.git` |
+| `/dev scaffold nuxt-docs <name>` | Scaffold a Nuxt 3 docs site into ~/Work | `https://github.com/nuxt-ui-templates/docs.git` |
+| `/dev scaffold vue-saas <name>` | Scaffold a Vue 3 SaaS dashboard into ~/Work | `https://github.com/nuxt-ui-templates/dashboard-vue.git` |
+| `/dev scaffold vue-landing <name>` | Scaffold a Vue 3 landing page into ~/Work | `https://github.com/nuxt-ui-templates/starter-vue.git` |
+| `/dev scaffold full-stack <name>` | Scaffold Laravel (~/Herd) + Nuxt (~/Work) as a linked pair | Laravel + Nuxt starter repos above |
+| `/dev scaffold react <name>` | Scaffold a React SPA — starter repo not yet selected | (not yet selected) |
+| `/dev scaffold nextjs <name>` | Scaffold a Next.js app — starter repo not yet selected | (not yet selected) |
 
 ## Workflow: /dev scaffold <type> <name>