mega-brain-ai 1.2.5 → 1.2.7

package/.github/layer2-manifest.txt

@@ -23,9 +23,6 @@ agents/persons/
 # Processed content
 processing/
 
-# BILHON company module
-.bilhon/
-
 # === LAYER 3 EXCLUSIONS (never in Layer 2) ===
 # These are stripped from Layer 2 pushes:
 #   - inbox/          (raw user uploads)
@@ -38,3 +35,4 @@ processing/
 #   - .claude/monitoring/    (runtime state)
 #   - system/backups/        (personal backups)
 #   - system/jarvis-voice/audiobooks/  (personal audio)
+#   - .bilhon/        (company data - Layer 3)

package/bin/lib/installer.js

@@ -13,7 +13,7 @@
  *   6. Post-install summary
  */
 
-import { existsSync, mkdirSync, cpSync, writeFileSync, readFileSync, readdirSync } from 'fs';
+import { existsSync, mkdirSync, cpSync, writeFileSync, readFileSync, readdirSync, rmSync } from 'fs';
 import { resolve, dirname, join } from 'path';
 import { fileURLToPath } from 'url';
 import { execSync } from 'child_process';
@@ -195,7 +195,6 @@ export async function runInstaller(version) {
 
     try {
       await fetchPremiumContent(targetDir, premiumToken, premiumSpinner);
-      premiumSpinner.succeed(chalk.green('Conteúdo PREMIUM instalado!'));
     } catch (err) {
       premiumSpinner.warn(chalk.yellow(`Não foi possível baixar conteúdo premium: ${err.message}`));
       console.log(chalk.dim('  Tente novamente depois com: mega-brain upgrade'));
@@ -253,12 +252,12 @@ async function selectEdition() {
 /**
  * Fetch premium content from private repo using token
  *
- * SECURITY DESIGN:
- *   - Token is passed via git http.extraheader, NEVER embedded in the clone URL.
- *     This means .git/config inside the temp clone does NOT contain the token.
- *   - ZERO recursive delete operations (rm -rf / rmSync recursive).
- *     The .layer-sync/ directory is left in place and listed in .gitignore.
- *     This installer runs on other people's machines — we never risk data loss.
+ * LAYER 2 DESIGN:
+ *   Layer 1 (npm) installs the empty shell.
+ *   Layer 2 (this function) fills ONLY the premium paths defined
+ *   in .github/layer2-manifest.txt — nothing else.
+ *
+ *   After copying, the temporary clone is deleted to save disk space.
  */
 async function fetchPremiumContent(targetDir, token, spinner) {
   const tempDir = join(targetDir, '.layer-sync', 'premium-fetch');
@@ -270,13 +269,13 @@ async function fetchPremiumContent(targetDir, token, spinner) {
     throw new Error('Erro interno: caminho de download fora do diretório de instalação.');
   }
 
-  mkdirSync(dirname(tempDir), { recursive: true });
+  mkdirSync(join(targetDir, '.layer-sync'), { recursive: true });
 
-  // Clone with token in URL — .layer-sync/ is in .gitignore so token stays local
   const authUrl = `https://x-access-token:${token}@github.com/thiagofinch/mega-brain-premium.git`;
 
+  // --- CLONE ---
   if (!existsSync(join(tempDir, '.git'))) {
-    spinner.succeed(chalk.cyan('Iniciando download do conteúdo premium (~300 MB)...'));
+    spinner.succeed(chalk.cyan('Baixando conteúdo premium...'));
     console.log(chalk.dim('  Isso pode levar alguns minutos dependendo da sua conexão.\n'));
 
     try {
@@ -285,7 +284,7 @@ async function fetchPremiumContent(targetDir, token, spinner) {
         timeout: 600000,
       });
     } catch (cloneErr) {
-      throw new Error(`Git clone falhou. Verifique sua conexão e tente novamente.`);
+      throw new Error('Git clone falhou. Verifique sua conexão e tente novamente.');
     }
 
     console.log();
@@ -294,35 +293,81 @@ async function fetchPremiumContent(targetDir, token, spinner) {
     spinner.text = 'Download anterior encontrado, reutilizando...';
   }
 
-  // Verify clone has content
   if (!existsSync(tempDir) || readdirSync(tempDir).length <= 1) {
     throw new Error('Repositório premium clonado mas vazio.');
   }
 
-  spinner.text = 'Integrando conteúdo premium na estrutura...';
+  // --- READ LAYER 2 MANIFEST ---
+  // The manifest lives in the Layer 1 shell (already installed).
+  // It lists which paths are premium additions.
+  const manifestPath = join(targetDir, '.github', 'layer2-manifest.txt');
+  const layer2Paths = parseManifestPaths(manifestPath);
+
+  if (layer2Paths.length === 0) {
+    throw new Error('layer2-manifest.txt vazio ou não encontrado.');
+  }
 
-  // Copy premium content over the shell (merge, not replace)
-  const premiumExclude = ['.git', 'node_modules', 'bin', '.layer-sync'];
-  const premiumEntries = readdirSync(tempDir, { withFileTypes: true });
+  // --- SELECTIVE COPY: only Layer 2 paths ---
+  spinner.text = 'Integrando conteúdo premium (apenas Layer 2)...';
   let copied = 0;
 
-  for (const entry of premiumEntries) {
-    if (premiumExclude.includes(entry.name)) continue;
+  for (const relPath of layer2Paths) {
+    const srcPath = join(tempDir, relPath);
+    const destPath = join(targetDir, relPath);
 
-    const srcPath = join(tempDir, entry.name);
-    const destPath = join(targetDir, entry.name);
+    if (!existsSync(srcPath)) continue;
 
-    if (entry.isDirectory()) {
-      cpSync(srcPath, destPath, { recursive: true, force: true });
-    } else {
-      cpSync(srcPath, destPath, { force: true });
-    }
+    mkdirSync(dirname(destPath), { recursive: true });
+    cpSync(srcPath, destPath, { recursive: true, force: true });
     copied++;
   }
 
   if (copied === 0) {
-    throw new Error('Nenhum conteúdo premium copiado.');
+    throw new Error('Nenhum conteúdo premium encontrado no repositório.');
   }
+
+  spinner.text = 'Limpando arquivos temporários...';
+
+  // --- CLEANUP: delete the clone to save disk space ---
+  try {
+    rmSync(join(targetDir, '.layer-sync'), { recursive: true, force: true });
+  } catch {
+    // Non-fatal: warn but don't fail if cleanup fails
+    console.log(chalk.dim('  Aviso: não foi possível limpar .layer-sync/'));
+  }
+
+  spinner.succeed(chalk.green(`Conteúdo PREMIUM instalado! (${copied} módulos)`));
+}
+
+/**
+ * Parse layer2-manifest.txt and return clean directory paths.
+ * Ignores comments (#), blank lines, and LAYER 3 EXCLUSIONS section.
+ */
+function parseManifestPaths(manifestPath) {
+  if (!existsSync(manifestPath)) return [];
+
+  const content = readFileSync(manifestPath, 'utf-8');
+  const paths = [];
+  let inExclusions = false;
+
+  for (const raw of content.split('\n')) {
+    const line = raw.trim();
+
+    // Stop parsing at Layer 3 exclusions section
+    if (line.includes('LAYER 3 EXCLUSIONS')) {
+      inExclusions = true;
+      continue;
+    }
+    if (inExclusions) continue;
+
+    // Skip comments and blanks
+    if (!line || line.startsWith('#')) continue;
+
+    // Normalize: remove trailing slash
+    paths.push(line.replace(/\/+$/, ''));
+  }
+
+  return paths;
 }
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mega-brain-ai",
-  "version": "1.2.5",
+  "version": "1.2.7",
   "description": "AI Knowledge Management System - Transform expert materials into actionable playbooks",
   "type": "module",
   "bin": {