ostacky 0.8.6 → 0.8.8

package/README.md

@@ -246,37 +246,37 @@ Tras instalar (`--scope local`), el proyecto queda así:
 
 ```json
 {
-    "version": "0.8.6",
+    "version": "0.8.8",
     "lockedAt": "2025-01-01T00:00:00.000Z",
     "repo": "JaimeHoracio/Ostacky",
-    "tag": "v0.8.6",
+    "tag": "v0.8.8",
     "agents": {
         "ostacky": {
-            "version": "0.8.6",
+            "version": "0.8.8",
             "installedAt": "2025-01-01T00:00:00.000Z",
             "sha256": "abc123..."
         }
     },
     "commands": {
         "install-stack": {
-            "version": "0.8.6",
+            "version": "0.8.8",
             "installedAt": "2025-01-01T00:00:00.000Z",
             "sha256": "def456..."
         },
         "opsx-sync": {
-            "version": "0.8.6",
+            "version": "0.8.8",
             "installedAt": "2025-01-01T00:00:00.000Z",
             "sha256": "ghi789..."
         }
     },
     "skills": {
-        "brainstorming": { "version": "0.8.6", ... },
-        "execution-mode-evaluation": { "version": "0.8.6", ... },
-        "openspec-propose": { "version": "0.8.6", ... }
+        "brainstorming": { "version": "0.8.8", ... },
+        "execution-mode-evaluation": { "version": "0.8.8", ... },
+        "openspec-propose": { "version": "0.8.8", ... }
     },
     "mcpServers": {
-        "ostacky-controller": { "version": "0.8.6", ... },
-        "openspec": { "version": "0.8.6", ... }
+        "ostacky-controller": { "version": "0.8.8", ... },
+        "openspec": { "version": "0.8.8", ... }
     }
 }
 ```
@@ -308,7 +308,7 @@ Es opcional y solo necesario si algo falló durante la instalación o si querés
 ## Seguridad
 
 - `opencode.jsonc` se versiona en el repo para compartir permisos y MCP de forma reproducible.
-- Las URLs de descarga usan **tags de GitHub** (ej. `v0.8.6`), nunca `main` — instalaciones reproducibles
+- Las URLs de descarga usan **tags de GitHub** (ej. `v0.8.8`), nunca `main` — instalaciones reproducibles
 - Cada path de archivo descargado es validado para prevenir **path traversal**
 - Los archivos incluyen **checksum SHA-256** opcional; si el manifest lo define, el contenido se verifica antes de escribir
 - El cache local (`.opencode/cache/`) también valida integridad al servir archivos cacheados
@@ -324,7 +324,7 @@ Es opcional y solo necesario si algo falló durante la instalación o si querés
 - Variable `OSTACKY_SENSITIVE_PATTERNS` overridea los patrones por defecto (`**/.env*`, `**/.secrets/**`, `**/*.pem`, `**/*.key`, `**/.aws/**`, `**/.ssh/**`, `**/credentials.json`, `**/.npmrc`).
 - Ejemplo: `OSTACKY_SENSITIVE_PATTERNS="**/.env*,**/.secrets/**" bunx ostacky doctor` — `doctor` imprime el patrón efectivo.
 - Allowlist: `.env.example`, `.env.template`, `.env.sample` nunca se bloquean.
-- Fuente única: `src/security.ts` (`SENSITIVE_DEFAULT`, `isSensitive`, `BASH_SENSITIVE_RE`) — `ostacky-plugin.ts` importa de ahí (legacy `ostacky-guard.ts` eliminado, fusionado en el plugin). Ver `doctor` para verificar.
+- Fuente única: `src/security.ts` (`SENSITIVE_DEFAULT`, `isSensitive`, `BASH_SENSITIVE_RE`) — mirrors generados en `assets/plugins/security.ts` y `assets/mcp/ostacky-controller/security.js` vía `bun run scripts/sync-controller-core.ts`; `ostacky-plugin.ts` importa de `./security.ts` (self-contained). Ver `doctor` para verificar.
 
 #### Aislamiento de worktrees (harness-prod-hardening)
 
@@ -365,7 +365,7 @@ CodeGraph está instalado en `.opencode/tools/codegraph/bin/codegraph` y se conf
 | `.opencode/tools/codegraph/bin/codegraph status`                                           | Muestra estado del index y archivos pendientes              |
 | `.opencode/tools/codegraph/bin/codegraph install --target opencode --location local --yes` | Configura CodeGraph para OpenCode y genera AGENTS.md        |
 
-> **Windows:** si ves `Command failed: cmd.exe /d /c call ... codegraph.cmd init -i` durante `npx ostacky install`, es un _warning_ no fatal — el binario se instaló pero el índice no se pudo crear. Reintentá con `npx ostacky install-stack --scope local` o ejecutá manualmente `.opencode\tools\codegraph\bin\codegraph.exe init -i` (o `codegraph.cmd` si no hay `.exe`) dentro del proyecto. Desde v0.8.6 el instalador usa el patrón resiliente de Engram (strip 0 + búsqueda recursiva) y loguea `projectRoot|toolsDir` para diagnosticar scope.
+> **Windows:** si ves `Command failed: cmd.exe /d /c call ... codegraph.cmd init -i` durante `npx ostacky install`, es un _warning_ no fatal — el binario se instaló pero el índice no se pudo crear. Reintentá con `npx ostacky install-stack --scope local` o ejecutá manualmente `.opencode\tools\codegraph\bin\codegraph.exe init -i` (o `codegraph.cmd` si no hay `.exe`) dentro del proyecto. Desde v0.8.8 el instalador usa el patrón resiliente de Engram (strip 0 + búsqueda recursiva) y loguea `projectRoot|toolsDir` para diagnosticar scope.
 
 ## Licencia
 

package/assets/agents/ostacky.md

@@ -1,12 +1,12 @@
 ---
 description: Orquestador principal — rutea por nivel, orquesta CodeGraph + OpenSpec + Superpowers.
 mode: primary
-version: 0.8.6
+version: 0.8.8
 ---
 
-Sos **Ostacky v0.8.6**, orquestás, no implementás. Interpretás, clasificás (0/0+1/1+), ruteás y coordinás.
+Sos **Ostacky v0.8.8**, orquestás, no implementás. Interpretás, clasificás (0/0+1/1+), ruteás y coordinás.
 
-> **Versión:** `0.8.6` (sincronizada desde `package.json` vía `scripts/sync-version.ts`). Cuando te pregunten qué versión tenés, qué versión sos, o `¿qué versión tenés?` / `version` / `¿en qué versión estás?`, respondé exactamente: **"Ostacky v0.8.6"** (o `v0.8.6` si te piden solo el número). No inventes otra versión.
+> **Versión:** `0.8.8` (sincronizada desde `package.json` vía `scripts/sync-version.ts`). Cuando te pregunten qué versión tenés, qué versión sos, o `¿qué versión tenés?` / `version` / `¿en qué versión estás?`, respondé exactamente: **"Ostacky v0.8.8"** (o `v0.8.8` si te piden solo el número). No inventes otra versión.
 
 ## Reglas innegociables
 

package/assets/commands/install-stack.md

@@ -5,13 +5,13 @@ agent: build
 
 Instala el stack tecnológico de desarrollo para OpenCode. **IMPORTANTE:** las herramientas se instalan por separado (cada una con su propio CLI/comando). `npx ostacky install` solo instala el agente y commands de Ostacky en `.opencode/`. Este comando (`/install-stack`) es la guía de referencia para la instalación manual completa paso a paso.
 
-**Nota:** A partir de v0.8.6, `npx ostacky install` ya instala automáticamente el stack completo (CodeGraph, OpenSpec, Engram, MCPs bundleados) además del agente y skills. Este comando es útil para instalación manual, verificación, o cuando algo falló y necesita reinstalarse.
+**Nota:** A partir de v0.8.8, `npx ostacky install` ya instala automáticamente el stack completo (CodeGraph, OpenSpec, Engram, MCPs bundleados) además del agente y skills. Este comando es útil para instalación manual, verificación, o cuando algo falló y necesita reinstalarse.
 
 **RESTRICCIÓN ABSOLUTA:** instalar ÚNICAMENTE para OpenCode. Está terminantemente prohibido crear o modificar archivos en `.claude/`, `.kiro/`, `.cursor/`, `.gemini/`, `.codex/`, `.antigravity/`, `.windsurf/` o cualquier otro directorio de plataformas externas.
 
 **Origen del set curado:** el set de 15 skills referenciado en `assets/agents/ostacky.md` está bundleado en `assets/skills/` dentro del paquete npm. La definición del set y su trazabilidad viven en `manifest.json` y `.opencode/ostacky-lock.json`.
 
-## Scope de instalación — local vs global (desde v0.8.6)
+## Scope de instalación — local vs global (desde v0.8.8)
 
 `npx ostacky install` soporta `--scope local|global|auto` (también `--scope=...`):
 

package/assets/docs/ostacky-reference.md

@@ -64,14 +64,22 @@ Principio: **eficacia > recorte** — si recorte rompiera caché y saliera más
 
 ## Security single-source
 
-`src/security.ts` único origen de `SENSITIVE_DEFAULT`/`BASH_SENSITIVE_RE`/`isSensitive`/`extractPathsFromBash`; plugin y guard importan, no copian. `BASH_SENSITIVE_RE` arriba. `OSTACKY_SENSITIVE_PATTERNS` override.
+`src/security.ts` único origen de `SENSITIVE_DEFAULT`/`BASH_SENSITIVE_RE`/`isSensitive`/`extractPathsFromBash` (import `node:crypto`); mirrors generados en `assets/plugins/security.ts` (solo Sensitive guard, sin crypto) y `assets/mcp/ostacky-controller/security.js` vía `bun run scripts/sync-controller-core.ts`. `ostacky-plugin.ts` importa de `./security.ts` self-contained (no `../../src`). `BASH_SENSITIVE_RE` arriba. `OSTACKY_SENSITIVE_PATTERNS` override.
 
 ## Tiered single-source
 
-`src/tiered.ts` único origen de `isTrivial(msg,state)` + `getControllerState(dir)`. Ambos plugins importan lógica idéntica, no duplican regex. Ver `assets/plugins/ostacky-plugin.ts` y `assets/plugins/engram.ts`.
+`src/tiered.ts` único origen de `isTrivial(msg,state)` + `getControllerState(dir)`. `ostacky-plugin.ts` importa de `./tiered.ts` mirror (generado vía `sync-controller-core.ts`), `engram.ts` inlined (misma regex, evita import dinámico). No duplicar regex. Ver `assets/plugins/ostacky-plugin.ts` y `assets/plugins/engram.ts`.
+
+## Controller single-source
+
+`src/controller-core.ts` CANÓNICO para `STATES/TRANSITIONS/DEFAULT_STATE`; mirrors generados en `assets/plugins/controller-core.ts` (TS) y `assets/mcp/ostacky-controller/controller-core.js` (JS strippado) vía `bun run scripts/sync-controller-core.ts` (prebuild). No editar mirrors. `ostacky-plugin.ts` importa de `./controller-core.ts` self-contained.
 
 ## Prompt-efficiency
 
 - `ostacky.md` 109→72 líneas (diet estable cacheable). Tiered vía suffix, no reemplazo `system[0]`.
 - `controller` descriptions <150 chars
 - `MEMORY_INSTRUCTIONS` lazy: siempre pointer (~1 línea) en `system.transform`; full vive en `assets/docs/engram-protocol.md` on-demand via `Read` (ahorro ~1.2k en FULL, trivial ya era pointer)
+
+## Propose Flow (1+)
+
+`openspec-propose` SHALL Paso 0: `getDiscoverySnapshot(query)` + `getEngramDedup` → si miss `codegraph_codegraph_explore` + `engram_mem_search` + `putDiscoverySnapshot` **antes** de `openspec new`. Cita símbolos existentes en `proposal/design`; sin esto dispara `WARN:codegraphBypass` y `design.md` alucina API. Ver `assets/skills/openspec-propose/SKILL.md: Paso 0` y `brainstorming` (router por nivel: `brainstorming` decide 0/0+1/1+, `openspec-explore` es stance sin nivel).

package/assets/mcp/ostacky-controller/controller-core.js

@@ -1,7 +1,6 @@
 /**
  * controller-core — Single source of truth para TRANSITIONS, STATES, DEFAULT_STATE y helpers.
- * Extraído de assets/mcp/ostacky-controller/index.js y assets/plugins/ostacky-plugin.ts
- * para eliminar duplicación (D1). Ambos importan de acá.
+ * Generado desde src/controller-core.ts — NO EDITAR. Ejecutá `bun run scripts/sync-controller-core.ts`.
  */
 
 import { SENSITIVE_DEFAULT } from "./security.js";
@@ -142,6 +141,7 @@ export const DEFAULT_STATE = {
   watchdogEnabled: true,
   ts: Date.now(),
   specNotInSync: false,
+  engramBypassCount: 0,
 };
 
 export function safeJsonStringify(obj, pretty = false) {

package/assets/mcp/ostacky-controller/index.js

@@ -1349,6 +1349,22 @@ class OstackyController {
             );
         }
         // C2: strict contract — recommendation + reasons required (tiered recovery: fix-execution-analysis-validation)
+        // Normalizar aliases para no bloquear snapshot válido enviado con nombre distinto
+        if (snapshot && typeof snapshot === 'string') {
+            try {
+                snapshot = JSON.parse(snapshot);
+            } catch {}
+        }
+        if (snapshot && !snapshot.recommendation && (snapshot.mode || snapshot.executionMode)) {
+            snapshot.recommendation = snapshot.mode || snapshot.executionMode;
+        }
+        if (snapshot && !snapshot.reasons && snapshot.reason) {
+            snapshot.reasons = Array.isArray(snapshot.reason) ? snapshot.reason : [String(snapshot.reason)];
+        }
+        if (snapshot && Array.isArray(snapshot.reasons) && snapshot.reasons.length === 0) {
+            // vacío se considera missing para no dejar pasar snapshot inválido
+            snapshot.reasons = undefined;
+        }
         let _snapshotDefaulted = false;
         if (snapshot && (!snapshot.recommendation || !snapshot.reasons)) {
             const isDegradedOrEarlyExit =
@@ -1376,22 +1392,46 @@ class OstackyController {
                 };
             }
         }
-        // 1.7: exigir expectedTaskIds/taskIds/taskCount cuando taskCount>0
+        // 1.7: exigir expectedTaskIds/taskIds/taskCount cuando taskCount>0 — con retryAllowed para no dejar en BLOCKED
         if (snapshot && typeof snapshot.taskCount === 'number' && snapshot.taskCount > 0) {
             const hasExpectedIds = Array.isArray(snapshot.expectedTaskIds) && snapshot.expectedTaskIds.length > 0;
             const hasTaskIds = Array.isArray(snapshot.taskIds) && snapshot.taskIds.length > 0;
             const hasCount = typeof snapshot.taskCount === 'number' && snapshot.taskCount > 0;
             if (!hasExpectedIds && !hasTaskIds && !hasCount) {
-                return this.#makeError(
-                    'Snapshot missing expectedTaskIds/taskIds/taskCount when taskCount>0',
-                    'record_execution_analysis'
-                );
+                const available = (TRANSITIONS[this.#state.state] || []).map((t) => {
+                    let desc = t.via;
+                    if (t.choice) desc += ` (choice=${t.choice})`;
+                    if (t.mode) desc += ` (mode=${t.mode})`;
+                    return desc;
+                });
+                return {
+                    error: 'Snapshot missing expectedTaskIds/taskIds/taskCount when taskCount>0',
+                    current_state: this.#state.state,
+                    attempted_transition: 'record_execution_analysis',
+                    available_transitions: available,
+                    retryAllowed: true,
+                    suggestion:
+                        'Reintentá con {taskCount, expectedTaskIds:[...]} que matchee tasks.md — ver skill execution-mode-evaluation',
+                    timestamp: new Date().toISOString(),
+                };
             }
             if (!hasExpectedIds && !hasTaskIds) {
-                return this.#makeError(
-                    'Snapshot missing expectedTaskIds or taskIds when taskCount>0',
-                    'record_execution_analysis'
-                );
+                const available = (TRANSITIONS[this.#state.state] || []).map((t) => {
+                    let desc = t.via;
+                    if (t.choice) desc += ` (choice=${t.choice})`;
+                    if (t.mode) desc += ` (mode=${t.mode})`;
+                    return desc;
+                });
+                return {
+                    error: 'Snapshot missing expectedTaskIds or taskIds when taskCount>0',
+                    current_state: this.#state.state,
+                    attempted_transition: 'record_execution_analysis',
+                    available_transitions: available,
+                    retryAllowed: true,
+                    suggestion:
+                        'Reintentá con expectedTaskIds/taskIds que matchee tasks.md — ver skill execution-mode-evaluation',
+                    timestamp: new Date().toISOString(),
+                };
             }
         }
         // C2: capture expected tasks for gate — harden-task-integrity: tasks.md canonical
@@ -1408,7 +1448,11 @@ class OstackyController {
             const snapshotIds = Array.isArray(expectedTasks) ? expectedTasks : null;
             const snapshotSet = snapshotIds ? new Set(snapshotIds) : new Set();
             const tasksMdSet = new Set(tasksMdIds);
-            const mismatch = !snapshotIds || snapshotIds.length !== tasksMdIds.length || [...snapshotSet].some((id) => !tasksMdSet.has(id)) || [...tasksMdSet].some((id) => !snapshotSet.has(id));
+            const mismatch =
+                !snapshotIds ||
+                snapshotIds.length !== tasksMdIds.length ||
+                [...snapshotSet].some((id) => !tasksMdSet.has(id)) ||
+                [...tasksMdSet].some((id) => !snapshotSet.has(id));
             if (mismatch) taskCountMismatch = true;
             expectedTasks = [...tasksMdIds];
             expectedTaskCount = tasksMdIds.length;
@@ -1476,8 +1520,16 @@ class OstackyController {
         // harden-task-integrity: emit WARN if tasks.md mismatch
         if (taskCountMismatch) {
             const auditId = `aud-${Date.now()}-${this.#state.auditSeq}`;
-            log('warn:task_count_mismatch', { auditId, snapshotCount: snapshot?.expectedTaskIds?.length ?? 0, tasksMdCount: tasksMdIds.length });
-            await this.#audit('WARN', 'task_count_mismatch', `expectedTasks from snapshot (${snapshot?.expectedTaskIds?.length ?? 0}) differs from tasks.md (${tasksMdIds.length}) - using tasks.md`);
+            log('warn:task_count_mismatch', {
+                auditId,
+                snapshotCount: snapshot?.expectedTaskIds?.length ?? 0,
+                tasksMdCount: tasksMdIds.length,
+            });
+            await this.#audit(
+                'WARN',
+                'task_count_mismatch',
+                `expectedTasks from snapshot (${snapshot?.expectedTaskIds?.length ?? 0}) differs from tasks.md (${tasksMdIds.length}) - using tasks.md`
+            );
         }
         // 8.2: reasoning sin plan → WARN (but allow early-exit style)
         if (!execShown && snapshot && !isEarlyExitExec) {
@@ -1726,22 +1778,46 @@ class OstackyController {
             if (providedIds) {
                 const setA = new Set(providedIds);
                 const setB = new Set(tasksMdIds);
-                const mismatch = providedIds.length !== tasksMdIds.length || [...setA].some((id) => !setB.has(id)) || [...setB].some((id) => !setA.has(id));
+                const mismatch =
+                    providedIds.length !== tasksMdIds.length ||
+                    [...setA].some((id) => !setB.has(id)) ||
+                    [...setB].some((id) => !setA.has(id));
                 if (mismatch) {
                     const auditId = `aud-${Date.now()}-${this.#state.auditSeq}`;
-                    log('warn:task_count_mismatch', { auditId, provided: providedIds.length, tasksMd: tasksMdIds.length });
-                    await this.#audit('WARN', 'task_count_mismatch', `expectedTasks from caller (${providedIds.length}) differs from tasks.md (${tasksMdIds.length}) - using tasks.md`);
+                    log('warn:task_count_mismatch', {
+                        auditId,
+                        provided: providedIds.length,
+                        tasksMd: tasksMdIds.length,
+                    });
+                    await this.#audit(
+                        'WARN',
+                        'task_count_mismatch',
+                        `expectedTasks from caller (${providedIds.length}) differs from tasks.md (${tasksMdIds.length}) - using tasks.md`
+                    );
                 }
             } else if (typeof taskCount === 'number' && taskCount !== tasksMdIds.length) {
                 const auditId = `aud-${Date.now()}-${this.#state.auditSeq}`;
                 log('warn:task_count_mismatch', { auditId, provided: taskCount, tasksMd: tasksMdIds.length });
-                await this.#audit('WARN', 'task_count_mismatch', `expectedTaskCount from caller (${taskCount}) differs from tasks.md (${tasksMdIds.length}) - using tasks.md`);
+                await this.#audit(
+                    'WARN',
+                    'task_count_mismatch',
+                    `expectedTaskCount from caller (${taskCount}) differs from tasks.md (${tasksMdIds.length}) - using tasks.md`
+                );
             }
             this.#state.expectedTasks = [...tasksMdIds];
             this.#state.expectedTaskCount = tasksMdIds.length;
             await this.#persist();
-            await this.#audit('EXECUTING', 'set_expected_tasks', `expected=${this.#state.expectedTaskCount} (from tasks.md)`);
-            return { ok: true, expectedTasks: this.#state.expectedTasks, expectedTaskCount: this.#state.expectedTaskCount, source: 'tasks.md' };
+            await this.#audit(
+                'EXECUTING',
+                'set_expected_tasks',
+                `expected=${this.#state.expectedTaskCount} (from tasks.md)`
+            );
+            return {
+                ok: true,
+                expectedTasks: this.#state.expectedTasks,
+                expectedTaskCount: this.#state.expectedTaskCount,
+                source: 'tasks.md',
+            };
         }
         if (Array.isArray(taskIds) && taskIds.length > 0) {
             this.#state.expectedTasks = [...taskIds];
@@ -2500,7 +2576,7 @@ function safeHandler(fn, options = {}) {
 
 const server = new McpServer({
     name: 'ostacky-controller',
-    version: '0.8.6',
+    version: '0.8.8',
 });
 
 server.registerTool(
@@ -3100,7 +3176,7 @@ function setupGracefulShutdown(ctrl) {
 }
 
 async function main() {
-    log('Starting ostacky-controller MCP v0.8.6...');
+    log('Starting ostacky-controller MCP v0.8.8...');
     log('State path:', { path: statePath });
     // Clean up stale tmp/lock files from previous runs
     cleanupTmpFiles(statePath);

package/assets/mcp/ostacky-controller/package.json

@@ -1,6 +1,6 @@
 {
     "name": "ostacky-controller",
-    "version": "0.8.6",
+    "version": "0.8.8",
     "private": true,
     "type": "module",
     "dependencies": {

package/assets/mcp/ostacky-controller/security.js

@@ -1,8 +1,10 @@
 /**
  * security.js — source-of-truth mirror of src/security.ts for controller (Node)
- * Generado desde src/security.ts — mantener sincronizado via `bun run hash:check` y test controller-source
+ * Generado desde src/security.ts — NO EDITAR. Ejecutá `bun run scripts/sync-controller-core.ts`.
  */
 
+// ─── Sensitive guard — source-of-truth (hardening-v2 D1) ───────────────
+
 export const SENSITIVE_DEFAULT = [
   "**/.env*",
   "**/.secrets/**",
@@ -14,9 +16,20 @@ export const SENSITIVE_DEFAULT = [
   "**/.npmrc",
 ];
 
+/**
+ * Regex que detecta acceso sensible en comandos bash.
+ * Cubre .env, .secrets, .pem, .key, .aws, .ssh, credentials.json, .npmrc
+ * Normalizar antes (strip quotes/backslashes) y testear con `BASH_SENSITIVE_RE.test(normalized)`.
+ */
 export const BASH_SENSITIVE_RE =
   /(?:^|[^a-zA-Z0-9_.-])(\.env(\b|[_.-])|\.secrets\b|\.pem\b|\.key\b|credentials\.json|\.aws\b|\.ssh\b|\.npmrc\b)/i;
 
+/**
+ * Returns true if filePath is considered sensitive given patterns.
+ * - Allowlist: .env.example / .env.template / .env.sample nunca son sensibles.
+ * - Normaliza backslashes a "/" para Windows.
+ * - patterns: array de globs como SENSITIVE_DEFAULT; si no se pasa usa SENSITIVE_DEFAULT.
+ */
 export function isSensitive(filePath, patterns = SENSITIVE_DEFAULT) {
   if (!filePath) return false;
   const normalized = filePath.replace(/\\/g, "/");
@@ -38,25 +51,37 @@ export function isSensitive(filePath, patterns = SENSITIVE_DEFAULT) {
     if (pat.includes("credentials.json") && lower.endsWith("credentials.json")) return true;
     if (pat.includes(".npmrc") && lower.endsWith(".npmrc")) return true;
   }
+  // fallback genérico por extensión
   if (/\.(pem|key)$/i.test(normalized)) return true;
   if (base.startsWith(".env")) return true;
   return false;
 }
 
+/**
+ * Extrae paths candidatos de un comando bash para chequear sensibilidad.
+ * Tokeniza por separadores shell `| ; && || > >> <` y respeta quotes.
+ * Normaliza quitando quotes y backslashes para detectar obfuscaciones como .e""nv.
+ */
 export function extractPathsFromBash(cmd) {
   if (!cmd) return [];
+  // Normalizar && y || a ; para split único
   const normalized = cmd.replace(/&&/g, ";").replace(/\|\|/g, ";");
+  // Split por separadores shell
   const segments = normalized.split(/[|;><\n]+/);
   const paths = [];
   for (const seg of segments) {
     const trimmed = seg.trim();
     if (!trimmed) continue;
+    // Tokeniza respetando quotes — captura tokens entre quotes o sin espacios
     const tokens = trimmed.match(/(?:[^\s"'`\\]+|"[^"]*"|'[^']*'|`[^`]*`)+/g) || [];
     for (let token of tokens) {
+      // Normalización anti-obfuscación: quitar quotes y backslashes
       const stripped = token.replace(/["'`]/g, "").replace(/\\/g, "");
       if (!stripped) continue;
-      if (["cat","grep","ls","echo","awk","sed","cut","head","tail","wc","find","xargs","bash","sh","zsh","env","printenv","node","bun","npm","npx","ls"].includes(stripped)) continue;
+      // Filtrar comandos comunes y flags
+      if (["cat", "grep", "ls", "echo", "awk", "sed", "cut", "head", "tail", "wc", "find", "xargs", "bash", "sh", "zsh", "env", "printenv", "node", "bun", "npm", "npx", "ls"].includes(stripped)) continue;
       if (stripped.startsWith("-")) continue;
+      // Heurística de path: contiene / o . o es .env* o sensible
       const lower = stripped.toLowerCase();
       if (
         stripped.includes("/") ||
@@ -70,6 +95,7 @@ export function extractPathsFromBash(cmd) {
         lower.endsWith("credentials.json") ||
         lower.endsWith(".npmrc")
       ) {
+        // Limpiar trailing chars como : , )
         const cleaned = stripped.replace(/[,:;)\]]+$/, "");
         if (cleaned) paths.push(cleaned);
       } else if (stripped === ".env") {
@@ -77,9 +103,14 @@ export function extractPathsFromBash(cmd) {
       }
     }
   }
+  // También buscar paths con regex global como fallback
+  // (detecta .env en strings complejos)
   return [...new Set(paths)];
 }
 
+/**
+ * Lee patrones sensibles desde env OSTACKY_SENSITIVE_PATTERNS o usa default.
+ */
 export function getSensitivePatterns() {
   const raw = process.env.OSTACKY_SENSITIVE_PATTERNS;
   if (!raw) return SENSITIVE_DEFAULT;

package/assets/plugins/controller-core.ts

@@ -1,7 +1,6 @@
 /**
  * controller-core — Single source of truth para TRANSITIONS, STATES, DEFAULT_STATE y helpers.
- * Extraído de assets/mcp/ostacky-controller/index.js y assets/plugins/ostacky-plugin.ts
- * para eliminar duplicación (D1). Ambos importan de acá.
+ * Generado desde src/controller-core.ts — NO EDITAR. Ejecutá `bun run scripts/sync-controller-core.ts`.
  */
 
 import { SENSITIVE_DEFAULT } from "./security.js";
@@ -142,6 +141,7 @@ export const DEFAULT_STATE: any = {
   watchdogEnabled: true,
   ts: Date.now(),
   specNotInSync: false,
+  engramBypassCount: 0,
 };
 
 export function safeJsonStringify(obj: any, pretty = false): string {

package/assets/plugins/ostacky-plugin.ts

@@ -5,7 +5,7 @@
  * Mantiene máquina de 13 estados en-process y aplica hard gates en tool.execute.before.
  * MCP queda thin solo para observabilidad (get_*).
  *
- * Single source security: importa desde src/security.ts (no copia regex).
+ * Single source security: mirrors generados desde src/security.ts via scripts/sync-controller-core.ts
  * Cache único: getDiscoverySnapshot es único entrypoint.
  * Tiered cache-friendly: isTrivial sin reemplazar system[0], suffix hint + SKIP.
  * CodeGraph preventivo: bloquea Read/Grep masivo sin Discovery hit.
@@ -14,8 +14,8 @@
 import type { Plugin } from "@opencode-ai/plugin"
 import { readFileSync, writeFileSync, renameSync, mkdirSync, existsSync, statSync, readdirSync, unlinkSync } from "node:fs"
 import { join, dirname, basename, resolve, relative } from "node:path"
-import { SENSITIVE_DEFAULT, BASH_SENSITIVE_RE, isSensitive, extractPathsFromBash } from "../../src/security.ts"
-import { isTrivial } from "../../src/tiered.ts"
+import { SENSITIVE_DEFAULT, BASH_SENSITIVE_RE, isSensitive, extractPathsFromBash } from "./security.ts"
+import { isTrivial } from "./tiered.ts"
 import { STATES, TRANSITIONS, DEFAULT_STATE } from "./controller-core.ts"
 
 // ─── Constants ───────────────────────────────────────────────────────────────
@@ -139,6 +139,8 @@ function isCodegraphAvailable(directory: string): boolean {
 const trivialBySession = new Map<string, boolean>()
 // Track discovery hit per requestId to avoid blocking after hit
 const discoveryHitByRequest = new Map<string, boolean>()
+// Track Engram hit per session to audit bypass (soft, no BLOCK)
+const engramHitBySession = new Map<string, boolean>()
 // ─── Heartbeat ping — evita sensación de trancado en tareas largas ──
 let lastPingTs = 0
 let pingInterval: ReturnType<typeof setInterval> | null = null
@@ -279,6 +281,26 @@ export const OstackyController: Plugin = async (ctx) => {
         lastCheck = { revision: freshState.revision, result: "ALLOW" }
       }
 
+      // ── 1.6) Engram soft gate (auditable, no BLOCK) — refuerza SHALL 1 de ostacky.md ──
+      // Si propone/cambia nivel sin haber consultado Engram, cuenta bypass (exime trivial+DONE)
+      const isEngramRelevantTool = tool.includes("record_discovery") || (tool.includes("openspec") && (tool.includes("propose") || (typeof args?.filePath === "string" && args.filePath.includes("openspec/changes")) || (typeof args?.path === "string" && args.path.includes("openspec/changes"))))
+      if (isEngramRelevantTool) {
+        const hasEngramHit = engramHitBySession.get(sessionId) ?? false
+        const isTrivialForEngram = trivialBySession.get(sessionId) ?? false
+        const stateForEngram = freshState
+        const shouldAudit = !hasEngramHit && !isTrivialForEngram && stateForEngram && ["DISCOVERY", "ROUTE_DECISION_PENDING", "SPECIFICATION", "INTERPRETATION_PENDING"].includes(stateForEngram.state)
+        if (shouldAudit) {
+          try {
+            const st = readState(ctx.directory)
+            if (st) {
+              st.engramBypassCount = (st.engramBypassCount || 0) + 1
+              // no persist cada vez si es muy frecuente: single-writer ya persiste en after, pero acá persistimos directo para auditoría
+              persistState(ctx.directory, st)
+            }
+          } catch {}
+        }
+      }
+
       // ── 1.5) Router determinista: openspec-propose bloquea si 1+ no-downgradeable sin Alternatives ──
       const isOpenspecPropose = tool.includes("openspec") && (tool.includes("propose") || args?.filePath?.includes("openspec/changes") || args?.path?.includes("openspec/changes"))
       if (isOpenspecPropose) {
@@ -487,8 +509,16 @@ export const OstackyController: Plugin = async (ctx) => {
           if (text && !text.includes("null") && text.length > 10) {
             discoveryHitByRequest.set(sessionId, true)
           }
+          // Engram hit via discovery snapshot (contiene engramHits)
+          if (text && text.includes("engramHits")) {
+            engramHitBySession.set(sessionId, true)
+          }
         } catch {}
       }
+      // Track Engram hit (mem_search / mem_context / dedup) para soft gate 1.6
+      if (tool.includes("engram_mem_search") || tool.includes("engram_mem_context") || tool.includes("mem_search") || tool.includes("mem_context") || tool.includes("getEngramDedup") || tool.includes("engram_mem_")) {
+        engramHitBySession.set(sessionId, true)
+      }
       // Update state metrics for cache hit (best-effort)
       if (tool.includes("getDiscoverySnapshot") && output) {
         try {
@@ -549,6 +579,7 @@ export const OstackyController: Plugin = async (ctx) => {
             tokenSavingEstimate: state?.tokenSavingEstimate ?? 0,
             stateCheckCount: state?.stateCheckCount ?? 0,
             codegraphBypassCount: state?.codegraphBypassCount ?? 0,
+            engramBypassCount: state?.engramBypassCount ?? 0,
             revision: state?.revision ?? 0,
           }
         },
@@ -605,6 +636,7 @@ export const OstackyController: Plugin = async (ctx) => {
         if (sid) {
           trivialBySession.delete(sid)
           discoveryHitByRequest.delete(sid)
+          engramHitBySession.delete(sid)
         }
       }
     },