invos 2.0.3 → 2.0.5

package/bin/invos.js

@@ -79,6 +79,6 @@ async function main() {
 }
 
 main().catch(e => {
-  console.error(e.message || e);
+  console.error(e.stack || e.message || e);
   process.exit(1);
 });

package/kit/CHANGELOG.md

@@ -0,0 +1,45 @@
+# Changelog
+
+Todas as mudanças notáveis no INVOS. Formato baseado em [Keep a Changelog](https://keepachangelog.com/).
+
+## [2.0.4] - 2026-07-29
+
+### Fixed
+- Symlinks Windows: fallback para copyFileSync quando symlinkSync falha (EPERM)
+- Symlinks stale: limpeza automática de symlinks quebrados em `.claude/skills/`
+- Dead code removido no `install.js` — loop simplificado
+- `.env` não vaza mais em subpastas do bundle (SKIP recursivo)
+- `.env.example` não é mais sobrescrito em updates
+- Doctor: threshold reduzido de 5 para 1 (só erro se zero skills)
+- Doctor `--fix` só roda quando há issues reais
+- Stack traces completas em erros CLI
+- Comparação de paths normalizada com `path.resolve()`
+- Race condition (TOCTOU) no install tratada com try/catch
+
+## [2.0.3] - 2026-07-29
+
+### Fixed
+- Templates de memória (`empresa.md`, `estrategia.md`) limpos — dados preenchidos incorretamente removidos
+
+## [2.0.2] - 2026-07-28
+
+### Fixed
+- 8 findings de segurança corrigidos
+- README atualizado
+- Manifesto open-source
+
+## [2.0.1] - 2026-07-27
+
+### Added
+- Kit INVOS v2 sincronizado do monorepo
+- ASCII art logo
+- Reenquadramento como AI co-founder
+
+## [2.0.0] - 2026-07-26
+
+### Added
+- INVOS v2: novo kit, novo README, MIT license
+- CLI: bundle kit para npm publish (`npx invos` de qualquer máquina)
+- Skills: carrossel, humanizer, SEO, ads, notion, youtube-summarizer
+- Squads: advisory-board, brand, hormozi-squad
+- Comandos: init, install, update, doctor

package/kit/INVOS.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.0.3",
+  "version": "2.0.5",
   "manifest": "OPEN_SOURCE",
   "product": {
     "name": "invos",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "invos",
-  "version": "2.0.3",
+  "version": "2.0.5",
   "description": "INVOS — OS do negócio em arquivos. Open-source. CLI: init, install, update, doctor.",
   "type": "module",
   "bin": {
@@ -11,7 +11,8 @@
   },
   "scripts": {
     "bundle-kit": "node scripts/bundle-kit.mjs",
-    "prepublishOnly": "node scripts/bundle-kit.mjs"
+    "prepublishOnly": "node scripts/bundle-kit.mjs",
+    "test": "node tests/smoke-test.mjs"
   },
   "files": [
     "bin/",

package/src/commands/doctor.js

@@ -1,5 +1,6 @@
 import { existsSync, readdirSync } from 'node:fs';
 import { resolve } from 'node:path';
+import { execSync } from 'node:child_process';
 import { loadManifest } from '../manifest.js';
 import { readLock } from '../lock.js';
 import { checkClaudeSymlinks, syncClaudeSymlinks } from '../symlinks.js';
@@ -45,7 +46,7 @@ export async function doctor(kit, kitRoot, targetDir, args) {
       existsSync(resolve(skillsDir, e, 'SKILL.md')),
     ).length;
     r.push(`  ✓ skills: ${n}`);
-    if (n < 5) ok = false;
+    if (n < 1) ok = false;
   } else {
     r.push('  ✗ .agents/skills');
     ok = false;
@@ -58,7 +59,7 @@ export async function doctor(kit, kitRoot, targetDir, args) {
     ok = false;
   }
 
-  if (fix) {
+  if (fix && !ok) {
     const confirmed = await askFix(!ok);
     if (!confirmed) {
       r.push('  --fix: skipped (not confirmed)');
@@ -76,8 +77,20 @@ export async function doctor(kit, kitRoot, targetDir, args) {
   }
 
   const man = loadManifest(resolve(targetDir, 'INVOS.json'));
-  r.push(`  kit ${man?.version || kit?.version || '?'}`);
-  r.push('  update: npm package kit (npx invos@latest update)');
+  const currentVersion = man?.version || kit?.version || '?';
+  r.push(`  kit v${currentVersion}`);
+
+  try {
+    const latest = execSync('npm view invos version --no-optional 2>/dev/null', { encoding: 'utf8', timeout: 5000 }).trim();
+    if (latest && latest !== currentVersion) {
+      r.push(`  → nova versão disponível: v${latest}`);
+      r.push('  update: npx invos@latest update');
+    } else {
+      r.push('  ✓ versão atualizada');
+    }
+  } catch {
+    r.push('  update: npx invos@latest update');
+  }
 
   console.log(r.join('\n'));
   if (!ok) {

package/src/commands/install.js

@@ -1,7 +1,7 @@
 import { existsSync } from 'node:fs';
 import { resolve } from 'node:path';
 import {
-  collectFiles, copyFileWithDirs, shouldCopyOnInstall, isDevPath,
+  collectFiles, copyFileWithDirs, isDevPath,
 } from '../utils.js';
 import { buildLock, readLock, writeLock } from '../lock.js';
 import { syncClaudeSymlinks } from '../symlinks.js';
@@ -13,16 +13,15 @@ export async function install(kit, kitRoot, targetDir) {
 
   for (const f of files) {
     const dest = resolve(targetDir, f.relPath);
-    if (shouldCopyOnInstall(dest) && !existsSync(dest)) {
-      copyFileWithDirs(f.fullPath, dest);
-      copied++;
-    } else if (existsSync(dest) && !shouldCopyOnInstall(dest)) {
-      skipped++;
-    } else if (existsSync(dest)) {
-      skipped++;
+    if (!existsSync(dest)) {
+      try {
+        copyFileWithDirs(f.fullPath, dest);
+        copied++;
+      } catch (err) {
+        console.error('install: failed to copy', f.relPath, err.message);
+      }
     } else {
-      copyFileWithDirs(f.fullPath, dest);
-      copied++;
+      skipped++;
     }
   }
 

package/src/symlinks.js

@@ -1,6 +1,6 @@
 import {
   existsSync, mkdirSync, symlinkSync, unlinkSync, readlinkSync,
-  readdirSync, statSync,
+  readdirSync, statSync, copyFileSync, cpSync,
 } from 'node:fs';
 import { resolve, dirname } from 'node:path';
 
@@ -27,15 +27,43 @@ export function syncClaudeSymlinks(_kitRoot, targetRoot) {
 
   for (const skill of listSkills(agentsDir)) {
     const linkPath = resolve(claudeDir, skill);
+    const expectedTarget = resolve(agentsDir, skill);
     if (existsSync(linkPath)) {
       try {
-        if (readlinkSync(linkPath) === `${REL}/${skill}`) continue;
+        const currentTarget = resolve(dirname(linkPath), readlinkSync(linkPath));
+        if (resolve(currentTarget) === resolve(expectedTarget)) continue;
         unlinkSync(linkPath);
       } catch (err) {
         console.error('syncClaudeSymlinks: failed to update', skill, err.message);
       }
     }
-    symlinkSync(`${REL}/${skill}`, linkPath);
+    try {
+      symlinkSync(`${REL}/${skill}`, linkPath);
+    } catch (err) {
+      if (err.code === 'EPERM') {
+        console.warn('syncClaudeSymlinks: symlink failed for', skill, '(EPERM), falling back to copy');
+        cpSync(resolve(agentsDir, skill), linkPath, { recursive: true });
+      } else {
+        throw err;
+      }
+    }
+  }
+
+  if (existsSync(claudeDir)) {
+    for (const entry of readdirSync(claudeDir)) {
+      const linkPath = resolve(claudeDir, entry);
+      try {
+        const stat = statSync(linkPath);
+        if (stat.isSymbolicLink()) {
+          const target = resolve(dirname(linkPath), readlinkSync(linkPath));
+          if (!existsSync(target)) {
+            unlinkSync(linkPath);
+          }
+        }
+      } catch {
+        // ignore read errors
+      }
+    }
   }
 }
 

package/src/utils.js

@@ -16,7 +16,7 @@ function skipDot(name) {
 export function isDenylisted(relPath) {
   const p = relPath.split('/');
   if (p[0] === '.git' || p[0] === 'node_modules' || p[0] === 'packages') return true;
-  if (p[0] === 'INVOS-LOCK.json' || p[0] === '.env' || p[0] === '.claude') return true;
+  if (p[0] === 'INVOS-LOCK.json' || p[0] === '.env' || p[0] === '.env.example' || p[0] === '.claude') return true;
   if (p[0] === '_memoria' || p[0] === 'memoria') return true;
   if (p[0] === 'clientes') return true;
   if (p[0] === 'conteudo') return true;