ostacky 0.7.4 → 0.8.1

package/manifest.json

@@ -1,29 +1,29 @@
 {
-  "version": "0.7.4",
+  "version": "0.8.1",
   "repo": "JaimeHoracio/Ostacky",
-  "tag": "v0.7.4",
+  "tag": "v0.8.1",
   "agents": [
     {
       "name": "ostacky",
       "file": "assets/agents/ostacky.md",
-      "description": "Orquestador con recuperación automática (nunca se congela), ruteo por nivel de impacto, controller MCP con SDK oficial, edición segura con fallback inline, y delegación en OpenSpec + Superpowers. v0.7.4: prune de skills obsoletas, lastHandoff, getAvailableTransitions, consecutiveFailures real, mem_session_summary automático al cierre.",
-      "version": "0.7.4",
-      "sha256": "ffda231d1a9df1693f32460bdb6811077f7f53ba7902b2616d82231a3d6d43bb"
+      "description": "Orquestador con recuperación automática (nunca se congela), ruteo por nivel de impacto, controller MCP con SDK oficial, edición segura con fallback inline, y delegación en OpenSpec + Superpowers. v0.8.1: prune de skills obsoletas, lastHandoff, getAvailableTransitions, consecutiveFailures real, mem_session_summary automático al cierre.",
+      "version": "0.8.1",
+      "sha256": "1dea56ffe3866e830c5138b44ff3e7531324ddd2784b1d34a8956614a53c5ec9"
     }
   ],
   "commands": [
     {
       "name": "install-stack",
       "file": "assets/commands/install-stack.md",
-      "description": "Instala el stack tecnológico del proyecto (CodeGraph, skills, OpenSpec, Engram, Context7, controller MCP con SDK oficial). v0.7.4: Paso 1.5 controller expandido con verificación post-instalación y troubleshooting.",
-      "version": "0.7.4",
-      "sha256": "6887499074a82c3b4538e38ca501290cacd3afad676bd127662fed77e268f299"
+      "description": "Instala el stack tecnológico del proyecto (CodeGraph, skills, OpenSpec, Engram, controller plugin). v0.8.1: controller plugin como alma hard-gate, Context7 removido del stack.",
+      "version": "0.8.1",
+      "sha256": "43ad96a63ceab8730cf0459838e7fad2953333307cfc664a849ca39f7ba7d532"
     },
     {
       "name": "opsx-sync",
       "file": "assets/commands/opsx-sync.md",
       "description": "Sincroniza delta specs del change activo sin inicializar CodeGraph si ya existe índice",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "fe0158478f2ca63b315037a85fc1632b77868532e319af6c7384285441767d64"
     }
   ],
@@ -31,15 +31,15 @@
     {
       "name": "ostacky-controller",
       "file": "assets/mcp/ostacky-controller/",
-      "description": "Máquina de estados persistida con @modelcontextprotocol/server SDK. v0.7.4: 22 tools (incluye set_handoff, get_handoff, clear_handoff, get_available_transitions funcional). Bugfixes: consecutiveFailures real, lastHandoff state, defaultChoice persistido. Robustez: degraded mode automático tras 3 fallos, persistence condicional para Nivel 0, prune de skills obsoletas.",
-      "version": "0.7.4",
-      "sha256": "4f86b6829293024caeb3d09c83b61aee158c383a7bb053a49e5a33c7c55862d1"
+      "description": "Máquina de estados persistida con @modelcontextprotocol/server SDK. v0.8.1: 22 tools (incluye set_handoff, get_handoff, clear_handoff, get_available_transitions funcional). Bugfixes: consecutiveFailures real, lastHandoff state, defaultChoice persistido. Robustez: degraded mode automático tras 3 fallos, persistence condicional para Nivel 0, prune de skills obsoletas.",
+      "version": "0.8.1",
+      "sha256": "ec554bc97f9d9b1e64c0b42813547dedc923e86e326c43ae87afab88ba249b90"
     },
     {
       "name": "openspec",
       "file": "assets/mcp/openspec/",
       "description": "MCP server local para OpenSpec - proposal, apply, archive, sync de cambios",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "fa4be28bfc1e75db8f1a037e2580f04a60066c80e8e5934e90e1041020d04609"
     }
   ],
@@ -48,105 +48,105 @@
       "name": "brainstorming",
       "file": "assets/skills/brainstorming/SKILL.md",
       "description": "Skill unificado de pensamiento con dos modos: creative-design (producción de diseño → transición a implementación directa o openspec-propose) y open-exploration (exploración libre)",
-      "version": "0.7.4",
-      "sha256": "7b0020f31f346d8f2070219930cfb9341135d40941195f0ea50c3bd7f4a42990"
+      "version": "0.8.1",
+      "sha256": "87f8d6ed28205f9272792d3865d8cd3232ab5e511a604d6d63d41e3a02a5f422"
     },
     {
       "name": "execution-mode-evaluation",
       "file": "assets/skills/execution-mode-evaluation/SKILL.md",
       "description": "Skill de análisis de modo de ejecución — output reconciliado con controller snapshot contract (recommendation field)",
-      "version": "0.7.4",
-      "sha256": "e17f1e0309572841dc1fa537b1f32c7468eb70b3acf453b9ff5cc4fa8d94fd39"
+      "version": "0.8.1",
+      "sha256": "7b89dda29927c88f1eb13ffcea541a12423384c172f66c4f3d9b61efe0c7a163"
     },
     {
       "name": "tdd",
       "file": "assets/skills/tdd/SKILL.md",
       "description": "Skill de test-driven development (Superpowers)",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "aa412298980b7826165c211145c1b8e9135f68f36247bb3cb96d0a0eae274486"
     },
     {
       "name": "subagent-driven-development",
       "file": "assets/skills/subagent-driven-development/SKILL.md",
       "description": "Skill de ejecución con subagentes (Superpowers) — ejecuta solo después de confirmación del coordinador Ostacky",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "1a42d714a9a13faf05f0bf7b580e8d837c2e77a5633839542ccce603023419e8"
     },
     {
       "name": "dispatching-parallel-agents",
       "file": "assets/skills/dispatching-parallel-agents/SKILL.md",
       "description": "Skill de dispatch paralelo de agentes (Superpowers)",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "3c8a66d51ae2e719e877d02c3dac32bd804722c3bb9227c258ecae78252a20ab"
     },
     {
       "name": "review",
       "file": "assets/skills/review/SKILL.md",
       "description": "Skill de revisión de código (Superpowers)",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "b19650ed4d1d4d9857a4dd5b7e08e91328a1a1fc9c45bcc2fb600fa9d0213279"
     },
     {
       "name": "receiving-code-review",
       "file": "assets/skills/receiving-code-review/SKILL.md",
       "description": "Skill de recibir y procesar feedback de code review",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "d761e884e71d8d3476ac734d287cae403a4024506a7d12e7361a448217c0a831"
     },
     {
       "name": "openspec-propose",
       "file": "assets/skills/openspec-propose/SKILL.md",
       "description": "Skill de generación de proposal (OpenSpec)",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "bb59100b9fd3c9f9a1ec6509fa975ec55bf7fc737df4fe73bb3e9bbc217b83f7"
     },
     {
       "name": "openspec-apply-change",
       "file": "assets/skills/openspec-apply-change/SKILL.md",
       "description": "Skill de aplicación de change (OpenSpec)",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "dfc823bf89fc7505e91ab6dee9c1f004be38a410bd3d88fb67b211b1b6cbb1d0"
     },
     {
       "name": "openspec-archive-change",
       "file": "assets/skills/openspec-archive-change/SKILL.md",
       "description": "Skill de archivo de change (OpenSpec)",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "16e4b561de7747283663fed602e506abf502452c49a8d4b86d7a5539c40f0195"
     },
     {
       "name": "openspec-explore",
       "file": "assets/skills/openspec-explore/SKILL.md",
       "description": "Modo explore para OpenSpec — thinking partner para explorar ideas, investigar problemas y clarificar requisitos antes/durante un cambio",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "37ae4aaf17ea71a395bab6dc4d9d61b9a49d7910f6692535ae8553244c46880b"
     },
     {
       "name": "using-git-worktrees",
       "file": "assets/skills/using-git-worktrees/SKILL.md",
       "description": "Skill de uso de git worktrees para aislamiento de trabajo",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "93341bc1b7c053618a8b6dc07e3615b77990d7b549a0201f5835d95fef67ce13"
     },
     {
       "name": "using-superpowers",
       "file": "assets/skills/using-superpowers/SKILL.md",
       "description": "Skill de orquestación de Superpowers skills",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "7e54536f96d2a379185a10bfc1e970850caa2561b6d8aca7080f0defea0381a4"
     },
     {
       "name": "writing-skills",
       "file": "assets/skills/writing-skills/SKILL.md",
       "description": "Skill de creación y edición de skills",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "3d76b906cee518a2b809febb70db95697a35b9f368986bb504b4120c3bfb437a"
     },
     {
       "name": "graceful-degradation",
       "file": "assets/skills/graceful-degradation/SKILL.md",
       "description": "Skill de degradación graceful cuando múltiples tools están indisponibles",
-      "version": "0.7.4",
+      "version": "0.8.1",
       "sha256": "40f929e8032b70d51b3548bddcc383b931d6044fd9d4acce8a5b9f7acd014f59"
     }
   ]

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "ostacky",
-    "version": "0.7.4",
+    "version": "0.8.1",
     "description": "Instalador interactivo de agentes y comandos para OpenCode",
     "type": "module",
     "bin": {

package/assets/plugins/ostacky-guard.ts

@@ -1,212 +0,0 @@
-/**
- * Ostacky Guard — plugin hermano de Engram
- *
- * Bloquea lecturas sensibles sin autorización previa y bloquea cualquier tool
- * cuando el controller está en estado PENDING.
- *
- * Hard gate incluso en degraded: nunca uses bash para .env sin check_file_access → consume ALLOW con razón auditada.
- *
- * Se registra en `tool.execute.before` y lanza Error si la operación no está
- * permitida. OpenCode aborta el tool antes de tocar disco.
- */
-
-import type { Plugin } from "@opencode-ai/plugin"
-import { readFileSync, existsSync } from "node:fs"
-import { join, dirname, basename, resolve, relative } from "node:path"
-
-const SENSITIVE_DEFAULT = [
-  "**/.env*",
-  "**/.secrets/**",
-  "**/*.pem",
-  "**/*.key",
-  "**/.aws/**",
-  "**/.ssh/**",
-  "**/credentials.json",
-  "**/.npmrc",
-]
-
-const BASH_SENSITIVE_RE =
-  /(?:^|[^a-zA-Z0-9_.-])(\.env(\b|[_.-])|\.secrets\b|\.pem\b|\.key\b|credentials\.json|\.aws\b|\.ssh\b|\.npmrc\b)/i
-
-function getEnvPatterns(): string[] {
-  const raw = process.env.OSTACKY_SENSITIVE_PATTERNS
-  if (!raw) return SENSITIVE_DEFAULT
-  return raw.split(",").map((s) => s.trim()).filter(Boolean)
-}
-
-function isSensitive(filePath: string, patterns: string[]): boolean {
-  if (!filePath) return false
-  const normalized = filePath.replace(/\\/g, "/")
-  const lower = normalized.toLowerCase()
-  if (lower.endsWith(".env.example") || lower.endsWith(".env.template") || lower.endsWith(".env.sample")) return false
-  const base = lower.split("/").pop() || ""
-  for (const pat of patterns) {
-    if (pat.includes(".env") && base.startsWith(".env")) return true
-    if (pat.includes(".secrets") && lower.includes(".secrets")) return true
-    if (pat.includes("*.pem") && lower.endsWith(".pem")) return true
-    if (pat.includes("*.key") && lower.endsWith(".key")) return true
-    if (pat.includes(".aws") && lower.includes(".aws")) return true
-    if (pat.includes(".ssh") && lower.includes(".ssh")) return true
-    if (pat.includes("credentials.json") && lower.endsWith("credentials.json")) return true
-    if (pat.includes(".npmrc") && lower.endsWith(".npmrc")) return true
-  }
-  if (/\.(pem|key)$/i.test(normalized)) return true
-  if (base.startsWith(".env")) return true
-  return false
-}
-
-function extractPathsFromBash(cmd: string): string[] {
-  if (!cmd) return []
-  const normalized = cmd.replace(/&&/g, ";").replace(/\|\|/g, ";")
-  const segments = normalized.split(/[|;><\n]+/)
-  const paths: string[] = []
-  for (const seg of segments) {
-    const trimmed = seg.trim()
-    if (!trimmed) continue
-    const tokens = trimmed.match(/(?:[^\s"'`\u0060\\]+|"[^"]*"|'[^']*'|`[^`]*`)+/g) || []
-    for (let token of tokens) {
-      const stripped = token.replace(/["'`]/g, "").replace(/\\/g, "")
-      if (!stripped) continue
-      if (["cat","grep","ls","echo","awk","sed","cut","head","tail","wc","find","xargs","bash","sh","zsh","env","printenv","node","bun","npm","npx","ls","cat"].includes(stripped)) continue
-      if (stripped.startsWith("-")) continue
-      const lower = stripped.toLowerCase()
-      if (
-        stripped.includes("/") ||
-        stripped.includes(".") ||
-        lower.startsWith(".env") ||
-        lower.includes(".secrets") ||
-        lower.endsWith(".pem") ||
-        lower.endsWith(".key") ||
-        lower.includes(".aws") ||
-        lower.includes(".ssh") ||
-        lower.endsWith("credentials.json") ||
-        lower.endsWith(".npmrc")
-      ) {
-        const cleaned = stripped.replace(/[,:;)\]]+$/, "")
-        if (cleaned) paths.push(cleaned)
-      } else if (stripped === ".env") {
-        paths.push(stripped)
-      }
-    }
-  }
-  return [...new Set(paths)]
-}
-
-function getStatePath(directory: string): string {
-  if (process.env.OSTACKY_STATE_PATH) return process.env.OSTACKY_STATE_PATH
-  const candidates = [join(directory, "opencode.json"), join(directory, "opencode.jsonc")]
-  for (const cand of candidates) {
-    try {
-      const raw = readFileSync(cand, "utf-8")
-      const json = JSON.parse(raw.replace(/\/\/.*$/gm, "").replace(/\/\*[\s\S]*?\*\//g, ""))
-      const envPath = (json as any)?.mcp?.["ostacky-controller"]?.environment?.OSTACKY_STATE_PATH
-      if (typeof envPath === "string" && envPath) return envPath
-    } catch {}
-  }
-  return join(directory, ".opencode", "ostacky-state.json")
-}
-
-function readState(directory: string): any | null {
-  const p = getStatePath(directory)
-  try {
-    const raw = readFileSync(p, "utf-8")
-    return JSON.parse(raw)
-  } catch {
-    return null
-  }
-}
-
-export const OstackyGuard: Plugin = async (ctx) => {
-  const patterns = getEnvPatterns()
-
-  return {
-    "tool.execute.before": async (input, output) => {
-      const tool = (input as any).tool as string
-      const args = (input as any).args as any
-
-      // 10.2: Guard genérico de PENDING — bloquear cualquier tool no-controller cuando estado es PENDING
-      const state = readState(ctx.directory)
-      const pendingStates = ["ROUTE_DECISION_PENDING", "EXECUTION_DECISION_PENDING", "CLARIFICATION_PENDING"]
-      if (state && pendingStates.includes(state.state)) {
-        const allowedTools = ["consume_route_decision", "consume_execution_decision", "record_clarification", "abandon", "check_file_access", "consume_file_access_decision", "record_user_confirmation"]
-        const isControllerTool = tool.startsWith("ostacky-controller_") || allowedTools.some((t) => tool.includes(t))
-        if (!isControllerTool) {
-          throw new Error(`BLOCKED: call consume_* first — controller is in ${state.state}. Use consume_route_decision / consume_execution_decision / record_clarification to proceed.`)
-        }
-      }
-
-      // ── Guard hard para bash/write/edit (hardening-v2 P0) ──
-      // Hard gate incluso en degraded, nunca uses bash para .env sin check_file_access → consume ALLOW con razón auditada
-      if (tool === "bash") {
-        const cmd: string = args?.command || args?.cmd || ""
-        if (typeof cmd === "string" && cmd) {
-          const normalized = cmd.replace(/["'`]/g, "").replace(/\\/g, "")
-          const hasSensitivePattern = BASH_SENSITIVE_RE.test(normalized)
-          const paths = extractPathsFromBash(cmd)
-          const sensitivePaths = paths.filter((p) => isSensitive(p, patterns))
-          // Si hay match de regex o paths sensibles, validar ALLOW
-          if (hasSensitivePattern || sensitivePaths.length > 0) {
-            // Si extrajimos paths sensibles, validar cada uno
-            if (sensitivePaths.length > 0) {
-              for (const p of sensitivePaths) {
-                const s = readState(ctx.directory)
-                // Normalizar p para lookup: probar p tal cual, y resolved, y basename para casos relativos
-                const candidates = [p, resolve(ctx.directory, p), join(ctx.directory, p)]
-                const allowed = candidates.some((c) => s?.allowedFiles?.[c] || s?.allowedFiles?.[p])
-                // También chequear por basename si es .env (ej: .env vs /abs/.env)
-                const baseAllowed = s?.allowedFiles?.[p] || s?.allowedFiles?.[basename(p)] || s?.allowedFiles?.[resolve(ctx.directory, p)]
-                if (!allowed && !baseAllowed) {
-                  const denied = s?.deniedFiles?.[p] || s?.deniedFiles?.[basename(p)]
-                  if (denied) {
-                    throw new Error(`BLOCKED: bash contiene acceso sensible (${p}) (previously denied) — Llamá check_file_access con reason antes.`)
-                  }
-                  throw new Error(`BLOCKED: bash contiene acceso sensible (${p}). Llamá check_file_access con reason antes.`)
-                }
-              }
-            } else if (hasSensitivePattern) {
-              // Fallback genérico cuando regex matchea pero no extrajimos path (ej: cat .env con espacios raros)
-              const s = readState(ctx.directory)
-              // Buscar si hay algún allowed que cubra .env* genérico
-              const hasAllowed = Object.keys(s?.allowedFiles || {}).some((k) => isSensitive(k, patterns))
-              if (!hasAllowed) {
-                throw new Error(`BLOCKED: bash contiene acceso sensible (.env). Llamá check_file_access con reason antes.`)
-              }
-            }
-          }
-          // Caso especial: obfuscación .e""nv → normalized ya quitó quotes, pero paths extraído ya lo cubre
-          // Si normalized contiene .env después de strip, y no hay allowed, ya bloqueamos arriba
-        }
-      }
-
-      // Extraer filePath para read/write/edit/grep/glob/read_mcp_resource
-      let filePath: string | undefined
-      if (tool === "read" || tool === "read_mcp_resource" || tool === "grep" || tool === "glob" || tool === "write" || tool === "edit") {
-        filePath = args?.filePath || args?.path || args?.pattern || args?.uri || ""
-        if (tool === "grep" && args?.include) filePath = args.include
-        if (tool === "write" || tool === "edit") {
-          filePath = args?.filePath || args?.path || ""
-        }
-        if (tool === "read_mcp_resource" && typeof args?.uri === "string") {
-          try {
-            const u = args.uri as string
-            if (u.startsWith("file://")) filePath = u.slice(7)
-            else if (u.includes("/")) filePath = u
-          } catch {}
-        }
-      }
-
-      // 9.1: Guard de credenciales (hard gate incluso en degraded)
-      if (filePath && isSensitive(filePath, patterns)) {
-        const s = readState(ctx.directory)
-        const allowed = s?.allowedFiles?.[filePath] || s?.allowedFiles?.[resolve(ctx.directory, filePath)] || s?.allowedFiles?.[basename(filePath)]
-        if (!allowed) {
-          const denied = s?.deniedFiles?.[filePath] || s?.deniedFiles?.[basename(filePath)]
-          if (denied) {
-            throw new Error(`BLOCKED: File ${filePath} requires check_file_access (previously denied)`)
-          }
-          throw new Error(`BLOCKED: File ${filePath} requires check_file_access`)
-        }
-      }
-    },
-  }
-}