jorgex-stack 1.9.51 → 1.9.53

package/dist/cli.js

@@ -5235,6 +5235,45 @@ async function querySkillHeads(skillNames, upstreams) {
     return { name, repo, info, head: heads.get(repo) ?? null };
   });
 }
+function complementsToScan(upstreams) {
+  return Object.keys(upstreams.complements ?? {}).filter((name) => !name.startsWith("$"));
+}
+function resolveComplementUpdateCheck(name, info, upstream) {
+  const pinned = info.version ?? null;
+  if (!pinned)
+    return {
+      level: "warn",
+      message: `${name}: sin pin en upstreams.json \u2014 fija la versi\xF3n revisada antes de instalar.`
+    };
+  if (upstream === null)
+    return { level: "info", message: `${name}: pin ${pinned} (no se pudo consultar el upstream).` };
+  if (upstream === pinned)
+    return { level: "success", message: `${name}: al d\xEDa con el pin ${pinned}.` };
+  return {
+    level: "warn",
+    message: `${name}: difiere del upstream (pin ${pinned}, upstream ${upstream}). Revisa el cambio y, si lo aceptas, re-pinea en upstreams.json \u2014 nunca auto-update.`
+  };
+}
+async function queryComplementUpstreams(names, upstreams) {
+  const requests = /* @__PURE__ */ new Map();
+  const keyOf = (source) => {
+    if (source.startsWith("npm:")) return `npm:${source.slice(4)}`;
+    if (source.startsWith("github:")) return `github:${source.slice("github:".length).split("#")[0]}`;
+    return null;
+  };
+  for (const name of names) {
+    const key = keyOf(upstreams.complements[name].source);
+    if (key && !requests.has(key)) {
+      requests.set(key, key.startsWith("npm:") ? latestNpmVersion(key.slice("npm:".length)) : latestGithubRelease(key.slice("github:".length)));
+    }
+  }
+  const observed = /* @__PURE__ */ new Map();
+  await Promise.all([...requests.entries()].map(async ([key, request]) => observed.set(key, await request)));
+  return names.map((name) => {
+    const key = keyOf(upstreams.complements[name].source);
+    return { name, upstream: key ? observed.get(key) ?? null : null };
+  });
+}
 async function latestNpmVersion(pkg) {
   try {
     const res = await fetch(`https://registry.npmjs.org/${pkg}/latest`, {
@@ -5331,6 +5370,21 @@ async function runUpdateCheck(localVersion, includeBrowserState = true) {
       p4.log.info("Skills de terceros: ning\xFAn upstream se ha movido respecto a su pin.");
     }
   }
+  const complementNames = complementsToScan(upstreams);
+  if (complementNames.length > 0) {
+    const complementQueries = await queryComplementUpstreams(complementNames, upstreams);
+    let movedComplement = false;
+    let unknownComplement = false;
+    for (const { name, upstream } of complementQueries) {
+      const report = resolveComplementUpdateCheck(name, upstreams.complements[name], upstream);
+      p4.log[report.level](report.message);
+      if (report.level === "warn") movedComplement = true;
+      if (report.level === "info") unknownComplement = true;
+    }
+    if (!movedComplement && !unknownComplement) {
+      p4.log.success("Complementos oficiales: al d\xEDa con sus pins.");
+    }
+  }
   if (githubRateLimited()) {
     p4.log.warn(rateLimitHint("GitHub limit\xF3 algunas consultas (rate limit sin token)."));
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jorgex-stack",
-  "version": "1.9.51",
+  "version": "1.9.53",
   "description": "Harness multi-agente portable: instala la config JorgeX (agentes, skills, hooks, Engram, MCPs) en Claude Code, Codex CLI, OpenCode y Pi",
   "type": "module",
   "license": "MIT",

package/stack/config/defaults.json

@@ -1,8 +1,7 @@
 {
-  "$comment": "Permisos por defecto del stack: cada bloque se escribe SOLO en config fresca o vacía; una config existente no se auto-expande jamás. OpenCode fresco permite trabajo ordinario; pide permiso para operaciones sensibles, deniega rutas protegidas y destrucción evidente, y conserva configuraciones existentes.",
+  "$comment": "Permisos por defecto del stack: cada bloque se escribe SOLO en config fresca o vacía; una config existente no se auto-expande jamás. OpenCode fresco es permisivo estilo gentle-ai: permite el trabajo ordinario sin prompts; solo pide git sensible y ssh, y deniega destrucción evidente y secretos.",
   "opencode": {
     "permission": {
-      "*": "ask",
       "edit": {
         "*": "allow",
         "*.env": "deny",
@@ -36,340 +35,27 @@
       },
       "glob": "allow",
       "grep": "allow",
-      "list": "allow",
       "lsp": "allow",
       "webfetch": "allow",
       "websearch": "allow",
       "task": "allow",
       "skill": "allow",
       "todowrite": "allow",
-      "todoread": "allow",
       "question": "allow",
       "bash": {
         "*": "allow",
-        "rm": "ask",
-        "rm *": "ask",
-        "*/rm": "ask",
-        "*/rm *": "ask",
-        "rmdir": "ask",
-        "rmdir *": "ask",
-        "*/rmdir": "ask",
-        "*/rmdir *": "ask",
-        "del": "ask",
-        "del *": "ask",
-        "*/del": "ask",
-        "*/del *": "ask",
-        "unlink": "ask",
-        "unlink *": "ask",
-        "*/unlink": "ask",
-        "*/unlink *": "ask",
-        "sudo": "ask",
-        "sudo *": "ask",
-        "*/sudo": "ask",
-        "*/sudo *": "ask",
-        "doas": "ask",
-        "doas *": "ask",
-        "*/doas": "ask",
-        "*/doas *": "ask",
-        "runas": "ask",
-        "runas *": "ask",
-        "*/runas": "ask",
-        "*/runas *": "ask",
-        "su": "ask",
-        "su *": "ask",
-        "*/su": "ask",
-        "*/su *": "ask",
-        "env": "ask",
-        "env *": "ask",
-        "*/env": "ask",
-        "*/env *": "ask",
-        "eval": "ask",
-        "eval *": "ask",
-        "*/eval": "ask",
-        "*/eval *": "ask",
-        "exec": "ask",
-        "exec *": "ask",
-        "*/exec": "ask",
-        "*/exec *": "ask",
-        "command": "ask",
-        "command *": "ask",
-        "*/command": "ask",
-        "*/command *": "ask",
-        "xargs": "ask",
-        "xargs *": "ask",
-        "*/xargs": "ask",
-        "*/xargs *": "ask",
-        "sh": "ask",
-        "sh *": "ask",
-        "*/sh": "ask",
-        "*/sh *": "ask",
-        "bash": "ask",
-        "bash *": "ask",
-        "*/bash": "ask",
-        "*/bash *": "ask",
-        "zsh": "ask",
-        "zsh *": "ask",
-        "*/zsh": "ask",
-        "*/zsh *": "ask",
-        "fish": "ask",
-        "fish *": "ask",
-        "*/fish": "ask",
-        "*/fish *": "ask",
-        "pwsh": "ask",
-        "pwsh *": "ask",
-        "*/pwsh": "ask",
-        "*/pwsh *": "ask",
-        "powershell": "ask",
-        "powershell *": "ask",
-        "*/powershell": "ask",
-        "*/powershell *": "ask",
-        "python": "ask",
-        "python *": "ask",
-        "*/python": "ask",
-        "*/python *": "ask",
-        "python3": "ask",
-        "python3 *": "ask",
-        "*/python3": "ask",
-        "*/python3 *": "ask",
-        "node": "ask",
-        "node *": "ask",
-        "*/node": "ask",
-        "*/node *": "ask",
-        "ruby": "ask",
-        "ruby *": "ask",
-        "*/ruby": "ask",
-        "*/ruby *": "ask",
-        "perl": "ask",
-        "perl *": "ask",
-        "*/perl": "ask",
-        "*/perl *": "ask",
-        "deno": "ask",
-        "deno *": "ask",
-        "*/deno": "ask",
-        "*/deno *": "ask",
-        "git *reset*": "ask",
-        "*/git *reset*": "ask",
-        "git.exe *reset*": "ask",
-        "*/git.exe *reset*": "ask",
-        "*\\git.exe *reset*": "ask",
-        "git *clean*": "ask",
-        "*/git *clean*": "ask",
-        "git.exe *clean*": "ask",
-        "*/git.exe *clean*": "ask",
-        "*\\git.exe *clean*": "ask",
-        "git *push*": "ask",
-        "*/git *push*": "ask",
-        "git.exe *push*": "ask",
-        "*/git.exe *push*": "ask",
-        "*\\git.exe *push*": "ask",
-        "git *checkout*--*": "ask",
-        "*/git *checkout*--*": "ask",
-        "git.exe *checkout*--*": "ask",
-        "*/git.exe *checkout*--*": "ask",
-        "*\\git.exe *checkout*--*": "ask",
-        "git *checkout* -f*": "ask",
-        "*/git *checkout* -f*": "ask",
-        "git.exe *checkout* -f*": "ask",
-        "*/git.exe *checkout* -f*": "ask",
-        "*\\git.exe *checkout* -f*": "ask",
-        "git *restore*": "ask",
-        "*/git *restore*": "ask",
-        "git.exe *restore*": "ask",
-        "*/git.exe *restore*": "ask",
-        "*\\git.exe *restore*": "ask",
-        "git *switch*--discard-changes*": "ask",
-        "*/git *switch*--discard-changes*": "ask",
-        "git.exe *switch*--discard-changes*": "ask",
-        "*/git.exe *switch*--discard-changes*": "ask",
-        "*\\git.exe *switch*--discard-changes*": "ask",
-        "git *rebase*": "ask",
-        "*/git *rebase*": "ask",
-        "git.exe *rebase*": "ask",
-        "*/git.exe *rebase*": "ask",
-        "*\\git.exe *rebase*": "ask",
-        "* git *checkout*--*": "ask",
-        "* git.exe *checkout*--*": "ask",
-        "* git *checkout* -f*": "ask",
-        "* git.exe *checkout* -f*": "ask",
-        "* git *restore*": "ask",
-        "* git.exe *restore*": "ask",
-        "* git *switch*--discard-changes*": "ask",
-        "* git.exe *switch*--discard-changes*": "ask",
-        "* git *rebase*": "ask",
-        "* git.exe *rebase*": "ask",
-        "git -c *": "ask",
-        "*/git -c *": "ask",
-        "git.exe -c *": "ask",
-        "*/git.exe -c *": "ask",
-        "*\\git.exe -c *": "ask",
-        "git * -c *": "ask",
-        "*/git * -c *": "ask",
-        "git.exe * -c *": "ask",
-        "*/git.exe * -c *": "ask",
-        "*\\git.exe * -c *": "ask",
-        "git --config-env*": "ask",
-        "*/git --config-env*": "ask",
-        "git.exe --config-env*": "ask",
-        "*/git.exe --config-env*": "ask",
-        "*\\git.exe --config-env*": "ask",
-        "git *--output*": "ask",
-        "*/git *--output*": "ask",
-        "git.exe *--output*": "ask",
-        "*/git.exe *--output*": "ask",
-        "*\\git.exe *--output*": "ask",
-        "git *--ext-diff*": "ask",
-        "*/git *--ext-diff*": "ask",
-        "git.exe *--ext-diff*": "ask",
-        "*/git.exe *--ext-diff*": "ask",
-        "*\\git.exe *--ext-diff*": "ask",
-        "git *--textconv*": "ask",
-        "*/git *--textconv*": "ask",
-        "git.exe *--textconv*": "ask",
-        "*/git.exe *--textconv*": "ask",
-        "*\\git.exe *--textconv*": "ask",
-        "git *--show-signature*": "ask",
-        "*/git *--show-signature*": "ask",
-        "git.exe *--show-signature*": "ask",
-        "*/git.exe *--show-signature*": "ask",
-        "*\\git.exe *--show-signature*": "ask",
-        "git *%G*": "ask",
-        "*/git *%G*": "ask",
-        "git.exe *%G*": "ask",
-        "*/git.exe *%G*": "ask",
-        "*\\git.exe *%G*": "ask",
-        "pnpm exec*": "ask",
-        "pnpm dlx*": "ask",
-        "truncate": "ask",
-        "truncate *": "ask",
-        "*/truncate": "ask",
-        "*/truncate *": "ask",
-        "Remove-Item": "ask",
-        "Remove-Item *": "ask",
-        "*/Remove-Item": "ask",
-        "*/Remove-Item *": "ask",
-        "remove-item": "ask",
-        "remove-item *": "ask",
-        "*/remove-item": "ask",
-        "*/remove-item *": "ask",
-        "ri": "ask",
-        "ri *": "ask",
-        "*/ri": "ask",
-        "*/ri *": "ask",
-        "erase": "ask",
-        "erase *": "ask",
-        "*/erase": "ask",
-        "*/erase *": "ask",
-        "rd": "ask",
-        "rd *": "ask",
-        "*/rd": "ask",
-        "*/rd *": "ask",
-        "Clear-Content": "ask",
-        "Clear-Content *": "ask",
-        "*/Clear-Content": "ask",
-        "*/Clear-Content *": "ask",
-        "clear-content": "ask",
-        "clear-content *": "ask",
-        "*/clear-content": "ask",
-        "*/clear-content *": "ask",
-        "find *-delete*": "ask",
-        "find *-exec*": "ask",
-        "find *-ok*": "ask",
-        "*/find *-delete*": "ask",
-        "*/find *-exec*": "ask",
-        "*/find *-ok*": "ask",
-        "* rm": "ask",
-        "* rm *": "ask",
-        "* rmdir": "ask",
-        "* rmdir *": "ask",
-        "* del": "ask",
-        "* del *": "ask",
-        "* unlink": "ask",
-        "* unlink *": "ask",
-        "* sudo": "ask",
-        "* sudo *": "ask",
-        "* doas": "ask",
-        "* doas *": "ask",
-        "* runas": "ask",
-        "* runas *": "ask",
-        "* su": "ask",
-        "* su *": "ask",
-        "* env": "ask",
-        "* env *": "ask",
-        "* eval": "ask",
-        "* eval *": "ask",
-        "* exec": "ask",
-        "* exec *": "ask",
-        "* command": "ask",
-        "* command *": "ask",
-        "* xargs": "ask",
-        "* xargs *": "ask",
-        "* sh": "ask",
-        "* sh *": "ask",
-        "* bash": "ask",
-        "* bash *": "ask",
-        "* zsh": "ask",
-        "* zsh *": "ask",
-        "* fish": "ask",
-        "* fish *": "ask",
-        "* pwsh": "ask",
-        "* pwsh *": "ask",
-        "* powershell": "ask",
-        "* powershell *": "ask",
-        "* python": "ask",
-        "* python *": "ask",
-        "* python3": "ask",
-        "* python3 *": "ask",
-        "* node": "ask",
-        "* node *": "ask",
-        "* ruby": "ask",
-        "* ruby *": "ask",
-        "* perl": "ask",
-        "* perl *": "ask",
-        "* deno": "ask",
-        "* deno *": "ask",
-        "* git *reset*": "ask",
-        "* git.exe *reset*": "ask",
-        "* git *clean*": "ask",
-        "* git.exe *clean*": "ask",
-        "* git *push*": "ask",
-        "* git.exe *push*": "ask",
-        "* git -c *": "ask",
-        "* git.exe -c *": "ask",
-        "* git * -c *": "ask",
-        "* git.exe * -c *": "ask",
-        "* git --config-env*": "ask",
-        "* git.exe --config-env*": "ask",
-        "* git *--output*": "ask",
-        "* git.exe *--output*": "ask",
-        "* git *--ext-diff*": "ask",
-        "* git.exe *--ext-diff*": "ask",
-        "* git *--textconv*": "ask",
-        "* git.exe *--textconv*": "ask",
-        "* git *--show-signature*": "ask",
-        "* git.exe *--show-signature*": "ask",
-        "* git *%G*": "ask",
-        "* git.exe *%G*": "ask",
-        "* pnpm exec*": "ask",
-        "* pnpm dlx*": "ask",
-        "* truncate": "ask",
-        "* truncate *": "ask",
-        "* Remove-Item": "ask",
-        "* Remove-Item *": "ask",
-        "* remove-item": "ask",
-        "* remove-item *": "ask",
-        "* ri": "ask",
-        "* ri *": "ask",
-        "* erase": "ask",
-        "* erase *": "ask",
-        "* rd": "ask",
-        "* rd *": "ask",
-        "* Clear-Content": "ask",
-        "* Clear-Content *": "ask",
-        "* clear-content": "ask",
-        "* clear-content *": "ask",
-        "* find *-delete*": "ask",
-        "* find *-exec*": "ask",
-        "* find *-ok*": "ask",
+        "git rebase": "ask",
+        "git rebase *": "ask",
+        "git reset --hard": "ask",
+        "git reset --hard *": "ask",
+        "ssh": "ask",
+        "ssh *": "ask",
+        "scp": "ask",
+        "scp *": "ask",
+        "sftp": "ask",
+        "sftp *": "ask",
+        "rsync": "ask",
+        "rsync *": "ask",
         "format": "deny",
         "format *": "deny",
         "*/format": "deny",
@@ -387,300 +73,8 @@
         "*/shred": "deny",
         "*/shred *": "deny",
         "mkfs.*": "deny",
-        "*/mkfs.*": "deny",
-        "rm /": "deny",
-        "rm * /": "deny",
-        "rm * / *": "deny",
-        "rm /etc": "deny",
-        "rm * /etc": "deny",
-        "rm * /etc *": "deny",
-        "rm /usr": "deny",
-        "rm * /usr": "deny",
-        "rm * /usr *": "deny",
-        "rm /bin": "deny",
-        "rm * /bin": "deny",
-        "rm * /bin *": "deny",
-        "rm /sbin": "deny",
-        "rm * /sbin": "deny",
-        "rm * /sbin *": "deny",
-        "rm /boot": "deny",
-        "rm * /boot": "deny",
-        "rm * /boot *": "deny",
-        "rm /dev": "deny",
-        "rm * /dev": "deny",
-        "rm * /dev *": "deny",
-        "rm /proc": "deny",
-        "rm * /proc": "deny",
-        "rm * /proc *": "deny",
-        "rm /sys": "deny",
-        "rm * /sys": "deny",
-        "rm * /sys *": "deny",
-        "*/rm /": "deny",
-        "*/rm * /": "deny",
-        "*/rm * / *": "deny",
-        "*/rm /etc": "deny",
-        "*/rm * /etc": "deny",
-        "*/rm * /etc *": "deny",
-        "*/rm /usr": "deny",
-        "*/rm * /usr": "deny",
-        "*/rm * /usr *": "deny",
-        "*/rm /bin": "deny",
-        "*/rm * /bin": "deny",
-        "*/rm * /bin *": "deny",
-        "*/rm /sbin": "deny",
-        "*/rm * /sbin": "deny",
-        "*/rm * /sbin *": "deny",
-        "*/rm /boot": "deny",
-        "*/rm * /boot": "deny",
-        "*/rm * /boot *": "deny",
-        "*/rm /dev": "deny",
-        "*/rm * /dev": "deny",
-        "*/rm * /dev *": "deny",
-        "*/rm /proc": "deny",
-        "*/rm * /proc": "deny",
-        "*/rm * /proc *": "deny",
-        "*/rm /sys": "deny",
-        "*/rm * /sys": "deny",
-        "*/rm * /sys *": "deny",
-        "rmdir /": "deny",
-        "rmdir * /": "deny",
-        "rmdir * / *": "deny",
-        "rmdir /etc": "deny",
-        "rmdir * /etc": "deny",
-        "rmdir * /etc *": "deny",
-        "rmdir /usr": "deny",
-        "rmdir * /usr": "deny",
-        "rmdir * /usr *": "deny",
-        "rmdir /bin": "deny",
-        "rmdir * /bin": "deny",
-        "rmdir * /bin *": "deny",
-        "rmdir /sbin": "deny",
-        "rmdir * /sbin": "deny",
-        "rmdir * /sbin *": "deny",
-        "rmdir /boot": "deny",
-        "rmdir * /boot": "deny",
-        "rmdir * /boot *": "deny",
-        "rmdir /dev": "deny",
-        "rmdir * /dev": "deny",
-        "rmdir * /dev *": "deny",
-        "rmdir /proc": "deny",
-        "rmdir * /proc": "deny",
-        "rmdir * /proc *": "deny",
-        "rmdir /sys": "deny",
-        "rmdir * /sys": "deny",
-        "rmdir * /sys *": "deny",
-        "*/rmdir /": "deny",
-        "*/rmdir * /": "deny",
-        "*/rmdir * / *": "deny",
-        "*/rmdir /etc": "deny",
-        "*/rmdir * /etc": "deny",
-        "*/rmdir * /etc *": "deny",
-        "*/rmdir /usr": "deny",
-        "*/rmdir * /usr": "deny",
-        "*/rmdir * /usr *": "deny",
-        "*/rmdir /bin": "deny",
-        "*/rmdir * /bin": "deny",
-        "*/rmdir * /bin *": "deny",
-        "*/rmdir /sbin": "deny",
-        "*/rmdir * /sbin": "deny",
-        "*/rmdir * /sbin *": "deny",
-        "*/rmdir /boot": "deny",
-        "*/rmdir * /boot": "deny",
-        "*/rmdir * /boot *": "deny",
-        "*/rmdir /dev": "deny",
-        "*/rmdir * /dev": "deny",
-        "*/rmdir * /dev *": "deny",
-        "*/rmdir /proc": "deny",
-        "*/rmdir * /proc": "deny",
-        "*/rmdir * /proc *": "deny",
-        "*/rmdir /sys": "deny",
-        "*/rmdir * /sys": "deny",
-        "*/rmdir * /sys *": "deny",
-        "*.env*": "deny",
-        "*/.ssh*": "deny",
-        "*/.aws/credentials*": "deny",
-        "*.npmrc*": "deny",
-        "*.git-credentials*": "deny",
-        "*id_rsa*": "deny",
-        "*id_ed25519*": "deny",
-        "*.pem*": "deny",
-        "*.key*": "deny",
-        "*rm /etc/*": "deny",
-        "*rm * /etc/*": "deny",
-        "*rm /usr/*": "deny",
-        "*rm * /usr/*": "deny",
-        "*rm /bin/*": "deny",
-        "*rm * /bin/*": "deny",
-        "*rm /sbin/*": "deny",
-        "*rm * /sbin/*": "deny",
-        "*rm /boot/*": "deny",
-        "*rm * /boot/*": "deny",
-        "*rm /dev/*": "deny",
-        "*rm * /dev/*": "deny",
-        "*rm /proc/*": "deny",
-        "*rm * /proc/*": "deny",
-        "*rm /sys/*": "deny",
-        "*rm * /sys/*": "deny",
-        "*rm /": "deny",
-        "*rm * /": "deny",
-        "*rm * / *": "deny",
-        "*rmdir /etc/*": "deny",
-        "*rmdir * /etc/*": "deny",
-        "*rmdir /usr/*": "deny",
-        "*rmdir * /usr/*": "deny",
-        "*rmdir /bin/*": "deny",
-        "*rmdir * /bin/*": "deny",
-        "*rmdir /sbin/*": "deny",
-        "*rmdir * /sbin/*": "deny",
-        "*rmdir /boot/*": "deny",
-        "*rmdir * /boot/*": "deny",
-        "*rmdir /dev/*": "deny",
-        "*rmdir * /dev/*": "deny",
-        "*rmdir /proc/*": "deny",
-        "*rmdir * /proc/*": "deny",
-        "*rmdir /sys/*": "deny",
-        "*rmdir * /sys/*": "deny",
-        "*rmdir /": "deny",
-        "*rmdir * /": "deny",
-        "*rmdir * / *": "deny",
-        "find / *-delete*": "deny",
-        "find * / *-delete*": "deny",
-        "find //* *-delete*": "deny",
-        "find * //* *-delete*": "deny",
-        "find /etc *-delete*": "deny",
-        "find * /etc *-delete*": "deny",
-        "find /etc/* *-delete*": "deny",
-        "find * /etc/* *-delete*": "deny",
-        "find /usr *-delete*": "deny",
-        "find * /usr *-delete*": "deny",
-        "find /usr/* *-delete*": "deny",
-        "find * /usr/* *-delete*": "deny",
-        "find /bin *-delete*": "deny",
-        "find * /bin *-delete*": "deny",
-        "find /bin/* *-delete*": "deny",
-        "find * /bin/* *-delete*": "deny",
-        "find /sbin *-delete*": "deny",
-        "find * /sbin *-delete*": "deny",
-        "find /sbin/* *-delete*": "deny",
-        "find * /sbin/* *-delete*": "deny",
-        "find /boot *-delete*": "deny",
-        "find * /boot *-delete*": "deny",
-        "find /boot/* *-delete*": "deny",
-        "find * /boot/* *-delete*": "deny",
-        "find /dev *-delete*": "deny",
-        "find * /dev *-delete*": "deny",
-        "find /dev/* *-delete*": "deny",
-        "find * /dev/* *-delete*": "deny",
-        "find /proc *-delete*": "deny",
-        "find * /proc *-delete*": "deny",
-        "find /proc/* *-delete*": "deny",
-        "find * /proc/* *-delete*": "deny",
-        "find /sys *-delete*": "deny",
-        "find * /sys *-delete*": "deny",
-        "find /sys/* *-delete*": "deny",
-        "find * /sys/* *-delete*": "deny",
-        "* format": "deny",
-        "* format *": "deny",
-        "* mkfs": "deny",
-        "* mkfs *": "deny",
-        "* dd": "deny",
-        "* dd *": "deny",
-        "* shred": "deny",
-        "* shred *": "deny",
-        "* mkfs.*": "deny",
-        "* rm /": "deny",
-        "* rm * /": "deny",
-        "* rm * / *": "deny",
-        "* rm /etc": "deny",
-        "* rm * /etc": "deny",
-        "* rm * /etc *": "deny",
-        "* rm /usr": "deny",
-        "* rm * /usr": "deny",
-        "* rm * /usr *": "deny",
-        "* rm /bin": "deny",
-        "* rm * /bin": "deny",
-        "* rm * /bin *": "deny",
-        "* rm /sbin": "deny",
-        "* rm * /sbin": "deny",
-        "* rm * /sbin *": "deny",
-        "* rm /boot": "deny",
-        "* rm * /boot": "deny",
-        "* rm * /boot *": "deny",
-        "* rm /dev": "deny",
-        "* rm * /dev": "deny",
-        "* rm * /dev *": "deny",
-        "* rm /proc": "deny",
-        "* rm * /proc": "deny",
-        "* rm * /proc *": "deny",
-        "* rm /sys": "deny",
-        "* rm * /sys": "deny",
-        "* rm * /sys *": "deny",
-        "* rmdir /": "deny",
-        "* rmdir * /": "deny",
-        "* rmdir * / *": "deny",
-        "* rmdir /etc": "deny",
-        "* rmdir * /etc": "deny",
-        "* rmdir * /etc *": "deny",
-        "* rmdir /usr": "deny",
-        "* rmdir * /usr": "deny",
-        "* rmdir * /usr *": "deny",
-        "* rmdir /bin": "deny",
-        "* rmdir * /bin": "deny",
-        "* rmdir * /bin *": "deny",
-        "* rmdir /sbin": "deny",
-        "* rmdir * /sbin": "deny",
-        "* rmdir * /sbin *": "deny",
-        "* rmdir /boot": "deny",
-        "* rmdir * /boot": "deny",
-        "* rmdir * /boot *": "deny",
-        "* rmdir /dev": "deny",
-        "* rmdir * /dev": "deny",
-        "* rmdir * /dev *": "deny",
-        "* rmdir /proc": "deny",
-        "* rmdir * /proc": "deny",
-        "* rmdir * /proc *": "deny",
-        "* rmdir /sys": "deny",
-        "* rmdir * /sys": "deny",
-        "* rmdir * /sys *": "deny",
-        "* find / *-delete*": "deny",
-        "* find * / *-delete*": "deny",
-        "* find //* *-delete*": "deny",
-        "* find * //* *-delete*": "deny",
-        "* find /etc *-delete*": "deny",
-        "* find * /etc *-delete*": "deny",
-        "* find /etc/* *-delete*": "deny",
-        "* find * /etc/* *-delete*": "deny",
-        "* find /usr *-delete*": "deny",
-        "* find * /usr *-delete*": "deny",
-        "* find /usr/* *-delete*": "deny",
-        "* find * /usr/* *-delete*": "deny",
-        "* find /bin *-delete*": "deny",
-        "* find * /bin *-delete*": "deny",
-        "* find /bin/* *-delete*": "deny",
-        "* find * /bin/* *-delete*": "deny",
-        "* find /sbin *-delete*": "deny",
-        "* find * /sbin *-delete*": "deny",
-        "* find /sbin/* *-delete*": "deny",
-        "* find * /sbin/* *-delete*": "deny",
-        "* find /boot *-delete*": "deny",
-        "* find * /boot *-delete*": "deny",
-        "* find /boot/* *-delete*": "deny",
-        "* find * /boot/* *-delete*": "deny",
-        "* find /dev *-delete*": "deny",
-        "* find * /dev *-delete*": "deny",
-        "* find /dev/* *-delete*": "deny",
-        "* find * /dev/* *-delete*": "deny",
-        "* find /proc *-delete*": "deny",
-        "* find * /proc *-delete*": "deny",
-        "* find /proc/* *-delete*": "deny",
-        "* find * /proc/* *-delete*": "deny",
-        "* find /sys *-delete*": "deny",
-        "* find * /sys *-delete*": "deny",
-        "* find /sys/* *-delete*": "deny",
-        "* find * /sys/* *-delete*": "deny"
-      },
-      "engram_*": "allow",
-      "context7_*": "allow"
+        "*/mkfs.*": "deny"
+      }
     }
   },
   "claude-code": {

package/upstreams.json

@@ -8,6 +8,53 @@
       "policy": "respect-existing — D7: si hay un Engram instalado (binario o DB), no se toca; update del binario solo con confirmación explícita y la DB jamás"
     }
   },
+  "complements": {
+    "$comment": "Complementos oficiales externos (ejecutan código en el runtime): pin exacto al instalar, nunca latest ni rangos flotantes. `reviewed` = última revisión aceptada; `update --check` es discovery-only y avisa si el upstream se movió; la adopción es re-pin deliberado con verificación, nunca auto-update.",
+    "gentle-engram": {
+      "source": "npm:gentle-engram",
+      "version": "0.1.12",
+      "reviewed": "2026-09-17",
+      "status": "pendiente-adopcion",
+      "note": "última publicada en npm (dist-tag latest); el setup oficial en main referencia 0.1.13 aún no publicada — re-pinear al salir. Incluye auto-cierre en session_shutdown. Issue: #155"
+    },
+    "pi-mcp-adapter": {
+      "source": "npm:pi-mcp-adapter",
+      "version": null,
+      "reviewed": "2026-09-17",
+      "status": "pendiente-pin",
+      "note": "upstream lo referencia sin versión (setup.go main): exigir pin exacto antes de adoptar. Issue: #155"
+    },
+    "engram-claude-plugin": {
+      "source": "github:Gentleman-Programming/engram#plugin/claude-code",
+      "version": "1.20.0",
+      "reviewed": "2026-09-17",
+      "note": "autocierre vía hook Stop (v1.20.0) / SessionEnd (main). Stack convive (detección + allowlists duales); falta instalación/verificación por Stack. Issue: #155"
+    },
+    "engram-codex-plugin": {
+      "source": "github:Gentleman-Programming/engram#plugin/codex",
+      "version": "1.20.0",
+      "reviewed": "2026-09-17",
+      "note": "autocierre vía hook Stop. Stack convive; falta instalación/verificación por Stack. Issue: #155"
+    },
+    "engram-opencode-plugin": {
+      "source": "github:Gentleman-Programming/engram#plugin/opencode",
+      "version": "1.20.0",
+      "reviewed": "2026-09-17",
+      "note": "auto-cierre (endSessionInEngram) solo en main; la copia vendorizada de Stack no lo tiene — migrar con transferencia de ownership de plugins/engram.ts. Issue: #155"
+    },
+    "chrome-devtools-mcp": {
+      "source": "npm:chrome-devtools-mcp",
+      "version": "1.6.0",
+      "reviewed": "2026-09-17",
+      "note": "opt-in, default-off; flags --isolated --redact-network-headers --no-performance-crux --no-usage-statistics"
+    },
+    "playwright-cli": {
+      "source": "npm:@playwright/cli",
+      "version": "0.1.18",
+      "reviewed": "2026-09-17",
+      "note": "CLI global compartido por la máquina; camino recomendado opt-in"
+    }
+  },
   "skills": {
     "deploy-to-vercel": {
       "source": "github:vercel-labs/agent-skills",