ostacky 0.8.6 → 0.8.8

package/assets/plugins/security.ts

@@ -0,0 +1,118 @@
+/**
+ * security.ts — mirror de src/security.ts para plugin (self-contained, solo Sensitive guard)
+ * Generado desde src/security.ts — NO EDITAR. Ejecutá `bun run scripts/sync-controller-core.ts`.
+ */
+
+// ─── Sensitive guard — source-of-truth (hardening-v2 D1) ───────────────
+
+export const SENSITIVE_DEFAULT: string[] = [
+  "**/.env*",
+  "**/.secrets/**",
+  "**/*.pem",
+  "**/*.key",
+  "**/.aws/**",
+  "**/.ssh/**",
+  "**/credentials.json",
+  "**/.npmrc",
+];
+
+/**
+ * Regex que detecta acceso sensible en comandos bash.
+ * Cubre .env, .secrets, .pem, .key, .aws, .ssh, credentials.json, .npmrc
+ * Normalizar antes (strip quotes/backslashes) y testear con `BASH_SENSITIVE_RE.test(normalized)`.
+ */
+export const BASH_SENSITIVE_RE =
+  /(?:^|[^a-zA-Z0-9_.-])(\.env(\b|[_.-])|\.secrets\b|\.pem\b|\.key\b|credentials\.json|\.aws\b|\.ssh\b|\.npmrc\b)/i;
+
+/**
+ * Returns true if filePath is considered sensitive given patterns.
+ * - Allowlist: .env.example / .env.template / .env.sample nunca son sensibles.
+ * - Normaliza backslashes a "/" para Windows.
+ * - patterns: array de globs como SENSITIVE_DEFAULT; si no se pasa usa SENSITIVE_DEFAULT.
+ */
+export function isSensitive(filePath: string, patterns: string[] = SENSITIVE_DEFAULT): boolean {
+  if (!filePath) return false;
+  const normalized = filePath.replace(/\\/g, "/");
+  const lower = normalized.toLowerCase();
+  if (
+    lower.endsWith(".env.example") ||
+    lower.endsWith(".env.template") ||
+    lower.endsWith(".env.sample")
+  )
+    return false;
+  const base = lower.split("/").pop() || "";
+  for (const pat of patterns) {
+    if (pat.includes(".env") && base.startsWith(".env")) return true;
+    if (pat.includes(".secrets") && lower.includes(".secrets")) return true;
+    if (pat.includes("*.pem") && lower.endsWith(".pem")) return true;
+    if (pat.includes("*.key") && lower.endsWith(".key")) return true;
+    if (pat.includes(".aws") && lower.includes(".aws")) return true;
+    if (pat.includes(".ssh") && lower.includes(".ssh")) return true;
+    if (pat.includes("credentials.json") && lower.endsWith("credentials.json")) return true;
+    if (pat.includes(".npmrc") && lower.endsWith(".npmrc")) return true;
+  }
+  // fallback genérico por extensión
+  if (/\.(pem|key)$/i.test(normalized)) return true;
+  if (base.startsWith(".env")) return true;
+  return false;
+}
+
+/**
+ * Extrae paths candidatos de un comando bash para chequear sensibilidad.
+ * Tokeniza por separadores shell `| ; && || > >> <` y respeta quotes.
+ * Normaliza quitando quotes y backslashes para detectar obfuscaciones como .e""nv.
+ */
+export function extractPathsFromBash(cmd: string): string[] {
+  if (!cmd) return [];
+  // Normalizar && y || a ; para split único
+  const normalized = cmd.replace(/&&/g, ";").replace(/\|\|/g, ";");
+  // Split por separadores shell
+  const segments = normalized.split(/[|;><\n]+/);
+  const paths: string[] = [];
+  for (const seg of segments) {
+    const trimmed = seg.trim();
+    if (!trimmed) continue;
+    // Tokeniza respetando quotes — captura tokens entre quotes o sin espacios
+    const tokens = trimmed.match(/(?:[^\s"'`\\]+|"[^"]*"|'[^']*'|`[^`]*`)+/g) || [];
+    for (let token of tokens) {
+      // Normalización anti-obfuscación: quitar quotes y backslashes
+      const stripped = token.replace(/["'`]/g, "").replace(/\\/g, "");
+      if (!stripped) continue;
+      // Filtrar comandos comunes y flags
+      if (["cat", "grep", "ls", "echo", "awk", "sed", "cut", "head", "tail", "wc", "find", "xargs", "bash", "sh", "zsh", "env", "printenv", "node", "bun", "npm", "npx", "ls"].includes(stripped)) continue;
+      if (stripped.startsWith("-")) continue;
+      // Heurística de path: contiene / o . o es .env* o sensible
+      const lower = stripped.toLowerCase();
+      if (
+        stripped.includes("/") ||
+        stripped.includes(".") ||
+        lower.startsWith(".env") ||
+        lower.includes(".secrets") ||
+        lower.endsWith(".pem") ||
+        lower.endsWith(".key") ||
+        lower.includes(".aws") ||
+        lower.includes(".ssh") ||
+        lower.endsWith("credentials.json") ||
+        lower.endsWith(".npmrc")
+      ) {
+        // Limpiar trailing chars como : , )
+        const cleaned = stripped.replace(/[,:;)\]]+$/, "");
+        if (cleaned) paths.push(cleaned);
+      } else if (stripped === ".env") {
+        paths.push(stripped);
+      }
+    }
+  }
+  // También buscar paths con regex global como fallback
+  // (detecta .env en strings complejos)
+  return [...new Set(paths)];
+}
+
+/**
+ * Lee patrones sensibles desde env OSTACKY_SENSITIVE_PATTERNS o usa default.
+ */
+export function getSensitivePatterns(): string[] {
+  const raw = process.env.OSTACKY_SENSITIVE_PATTERNS;
+  if (!raw) return SENSITIVE_DEFAULT;
+  return raw.split(",").map((s) => s.trim()).filter(Boolean);
+}

package/assets/plugins/tiered.ts

@@ -0,0 +1,46 @@
+/**
+ * tiered.ts — mirror de src/tiered.ts para plugin (self-contained)
+ * Generado desde src/tiered.ts — NO EDITAR. Ejecutá `bun run scripts/sync-controller-core.ts`.
+ */
+
+/**
+ * Tiered helpers — single source of truth for trivial detection y niveles.
+ *
+ * Ambos plugins (ostacky-plugin.ts y engram.ts) importan de acá.
+ * No duplicar regex. Cache-friendly: isTrivial no muta system[0], solo decide hint.
+ * LEVEL_THRESHOLDS es la única definición de niveles (D6).
+ */
+
+export const LEVEL_THRESHOLDS = {
+  "0": { maxFiles: 1, maxLines: 15, hasAPI: false, desc: "1 archivo, sin API, <15 líneas" },
+  "0+1": { maxFiles: 2, maxLines: 30, hasAPI: false, desc: "1-2 archivos, sin API, <30 líneas" },
+  "1+": { maxFiles: Infinity, maxLines: Infinity, hasAPI: true, desc: "API, deps, >30 líneas, cross-module" },
+} as const;
+
+export function classifyLevel({ fileCount, estLines, hasAPI }: { fileCount: number; estLines: number; hasAPI: boolean }): "0" | "0+1" | "1+" {
+  if (hasAPI || estLines > 30 || fileCount > 2) return "1+";
+  if (estLines > 15 || fileCount > 1) return "0+1";
+  return "0";
+}
+
+export function isTrivial(msg: string, state: string): boolean {
+  if (!msg || state !== "DONE") return false
+  if (msg.trim().length >= 30) return false
+  if (!/^(hola|hey|gracias|buenas|hi|hello)\b/i.test(msg.trim())) return false
+  if (/(necesito|quiero|agregá|fix|bug|feature|auth|spec|implementar)/i.test(msg)) return false
+  return true
+}
+
+export function getControllerState(directory: string): string {
+  try {
+    const { readFileSync } = require("node:fs") as typeof import("node:fs")
+    const { join } = require("node:path") as typeof import("node:path")
+    const statePath =
+      process.env.OSTACKY_STATE_PATH || join(directory, ".opencode", "ostacky-state.json")
+    const raw = readFileSync(statePath, "utf-8")
+    const j = JSON.parse(raw)
+    return j.state ?? "DONE"
+  } catch {
+    return "DONE"
+  }
+}

package/assets/skills/dispatching-parallel-agents/SKILL.md

@@ -129,6 +129,7 @@ Return: Summary of what you found and what you fixed.
 **Need full context:** Understanding requires seeing entire system
 **Exploratory debugging:** You don't know what's broken yet
 **Shared state:** Agents would interfere (editing same files, using same resources)
+**Ostacky execution:** If `execution-mode-evaluation` already produced `fileClusters/sharedFiles` — **DO NOT use this skill**; use `subagent-driven-development` dispatch por clusters (respeta `sharedFiles` y `sequentialDeps` del Controller, evita pisar mismo archivo desde 2 agentes).
 
 ## Real Example from Session
 

package/assets/skills/execution-mode-evaluation/SKILL.md

@@ -176,7 +176,7 @@ Para cada fase de `tasks.md`, evaluar intra-fase:
 
 **⚠️ Este skill provee ANÁLISIS, no autorización. Gate ANTES de persistir:** SHALL correr **en memoria primero**, derivar snapshot y **mostrar al usuario** `"Recomendación: INLINE/SUBAGENT por [razón], ~X líneas, clusters [...] ¿Procedo con este plan?"` y esperar. Solo si responde sí → `record_execution_analysis({snapshot, reuseDiscovery:true})` → `EXECUTION_DECISION_PENDING` → `consume_execution_decision`. Si responde no → `block({reason:"usuario rechazó plan"})` sin persistir. Si re-llamó `codegraph_explore` pudiendo reusar → `WARN:redundant_codegraph_call`.
 
-**Recovery de snapshot incompleto (fix-execution-analysis-validation):** Si `record_execution_analysis` retorna `{error:"Snapshot missing recommendation/reasons", retryAllowed:true, suggestion}`, NO hacer `block`. Corregir snapshot añadiendo `recommendation`/`reasons` y **reintentar el mismo `executionDecisionId`** — permanece en `EXECUTION_ANALYSIS` y el retry avanza. Si `state.degraded==true` o `taskCount<=2` el controller defaultea a `INLINE` con `WARN:snapshot_defaulted` y ya transiciona; no reintentar. Verificar con `grep "retryAllowed" assets/mcp/ostacky-controller/index.js`.
+**Recovery de snapshot incompleto (fix-execution-analysis-validation + bugfix 2026-09-18):** Si `record_execution_analysis` retorna `{error:"Snapshot missing ...", retryAllowed:true, suggestion}` (ya sea por `recommendation/reasons` **o** por `expectedTaskIds/taskIds` cuando `taskCount>0`), NO hacer `block` ni `abandon`. Corregir snapshot añadiendo el campo faltante y **reintentar el mismo `executionDecisionId`** — permanece en `EXECUTION_ANALYSIS` y el retry avanza. El controller también normaliza aliases (`mode`→`recommendation`, `reason`→`reasons`, JSON string) y considera `reasons:[]` como missing. Si `state.degraded==true` o `taskCount<=2` el controller defaultea a `INLINE` con `WARN:snapshot_defaulted` y ya transiciona; no reintentar. Verificar con `grep "retryAllowed" assets/mcp/ostacky-controller/index.js`. Snapshot válido (con `recommendation`, `reasons` y `expectedTaskIds`) **nunca** debe disparar `BLOCKED` ni requerir degraded.
 
 ## Ejemplo compacto
 

package/assets/skills/openspec-explore/SKILL.md

@@ -39,10 +39,11 @@ Depending on what the user brings, you might:
 - Find analogies
 
 **Investigate the codebase**
-- Map existing architecture relevant to the discussion
+- Map existing architecture relevant to the discussion (ground with `codegraph_codegraph_explore` + `engram_mem_search` if pre-1+ or without active change)
 - Find integration points
 - Identify patterns already in use
 - Surface hidden complexity
+- **Level note:** Si necesitás ruteo por nivel Ostacky (0/0+1/1+) usa `brainstorming` en vez de este stance; este skill asume ya estás en flujo OpenSpec (1+).
 
 **Compare options**
 - Brainstorm multiple approaches

package/assets/skills/openspec-propose/SKILL.md

@@ -26,7 +26,9 @@ When ready to implement, run /opsx-apply
 
 **Steps**
 
-1. **Check Engram for similar changes** — `engram_mem_search` with keywords from the user's description. If a similar change was proposed or implemented before, surface it to the user. They may want to extend the existing work instead of starting fresh.
+0. **Ground with CodeGraph + Engram (SHALL — Ostacky)** — Antes de `openspec new`, verifica `getDiscoverySnapshot(query)` + `getEngramDedup`. Si miss → `codegraph_codegraph_explore` + `engram_mem_search` + `putDiscoverySnapshot`. Cita símbolos existentes en `proposal/design`; sin esto el `design.md` puede alucinar API inexistente y dispara `WARN:codegraphBypass` en `doctor`.
+
+1. **Check Engram for similar changes** — `engram_mem_search` con keywords del *paso 0* (reusar si ya fue hit; no duplicar `mem_search` mismo `requestId`). Si hay change similar previo, surfacealo. Pueden extender trabajo existente en vez de empezar de cero.
 
 2. **If no clear input provided, ask what they want to build**
 

package/assets/skills/tdd/SKILL.md

@@ -28,6 +28,8 @@ Write the test first. Watch it fail. Write minimal code to pass.
 
 Thinking "skip TDD just this once"? Stop. That's rationalization.
 
+> **Ostacky ground (SHALL):** Antes de RED, verifica `getDiscoverySnapshot(query)` + `getEngramDedup`. Si hit → reusar símbolos/decisiones; si miss → `codegraph_codegraph_explore` + `engram_mem_search` + `putDiscoverySnapshot`. Evita testear API inexistente y respeta `discovery-cache (único)` de `ostacky.md §1`. Ver `execution-mode-evaluation` para cache TTL.
+
 ## The Iron Law
 
 ```

package/dist/cli.js

@@ -186,7 +186,7 @@ var require_picocolors = __commonJS(function(exports, module) {
 });
 
 // src/security.ts
-import { createHash } from "crypto";
+import { createHash } from "node:crypto";
 function validateFilePath(filePath) {
   if (filePath.includes("..") || filePath.startsWith("/") || filePath.startsWith("\\") || /^[a-zA-Z]:/.test(filePath)) {
     throw new Error(`Ruta de archivo inválida: "${filePath}"`);
@@ -621,31 +621,31 @@ var init_fs = __esm(() => {
 var manifest_default;
 var init_manifest = __esm(() => {
   manifest_default = {
-    version: "0.8.6",
+    version: "0.8.8",
     repo: "JaimeHoracio/Ostacky",
-    tag: "v0.8.6",
+    tag: "v0.8.8",
     agents: [
       {
         name: "ostacky",
         file: "assets/agents/ostacky.md",
-        description: "Orquestador con recuperación automática (nunca se congela), ruteo por nivel de impacto, controller MCP con SDK oficial, edición segura con fallback inline, y delegación en OpenSpec + Superpowers. v0.8.6: prune de skills obsoletas, lastHandoff, getAvailableTransitions, consecutiveFailures real, mem_session_summary automático al cierre.",
-        version: "0.8.6",
-        sha256: "51bb5f57b493791c27e8134c3eb4e8bfb61a7672c40bf648c79f15c7ec2f6319"
+        description: "Orquestador con recuperación automática (nunca se congela), ruteo por nivel de impacto, controller MCP con SDK oficial, edición segura con fallback inline, y delegación en OpenSpec + Superpowers. v0.8.8: prune de skills obsoletas, lastHandoff, getAvailableTransitions, consecutiveFailures real, mem_session_summary automático al cierre.",
+        version: "0.8.8",
+        sha256: "bac9b7bc91d9d958bee8c6b2e094b1e1124bcc7f3e23cd13769ebbc5766f4747"
       }
     ],
     commands: [
       {
         name: "install-stack",
         file: "assets/commands/install-stack.md",
-        description: "Instala el stack tecnológico del proyecto (CodeGraph, skills, OpenSpec, Engram, controller plugin). v0.8.6: controller plugin como alma hard-gate, Context7 removido del stack.",
-        version: "0.8.6",
-        sha256: "52f7af2a59fb3db19c33dccde7b284afdb3270e68696c721ad3303dcc85a645c"
+        description: "Instala el stack tecnológico del proyecto (CodeGraph, skills, OpenSpec, Engram, controller plugin). v0.8.8: controller plugin como alma hard-gate, Context7 removido del stack.",
+        version: "0.8.8",
+        sha256: "28ddf7ac8a2472faa1a5dbd14e22bc11e0b8715971907b3fab739b9933aa7dad"
       },
       {
         name: "opsx-sync",
         file: "assets/commands/opsx-sync.md",
         description: "Sincroniza delta specs del change activo sin inicializar CodeGraph si ya existe índice",
-        version: "0.8.6",
+        version: "0.8.8",
         sha256: "fe0158478f2ca63b315037a85fc1632b77868532e319af6c7384285441767d64"
       }
     ],
@@ -653,15 +653,15 @@ var init_manifest = __esm(() => {
       {
         name: "ostacky-controller",
         file: "assets/mcp/ostacky-controller/",
-        description: "Máquina de estados persistida con @modelcontextprotocol/server SDK. v0.8.6: 22 tools (incluye set_handoff, get_handoff, clear_handoff, get_available_transitions funcional). Bugfixes: consecutiveFailures real, lastHandoff state, defaultChoice persistido. Robustez: degraded mode automático tras 3 fallos, persistence condicional para Nivel 0, prune de skills obsoletas.",
-        version: "0.8.6",
-        sha256: "d832bcff83fb6b6334a494ff78029f379a977784b9a93675d1c5ea428f45cbc8"
+        description: "Máquina de estados persistida con @modelcontextprotocol/server SDK. v0.8.8: 22 tools (incluye set_handoff, get_handoff, clear_handoff, get_available_transitions funcional). Bugfixes: consecutiveFailures real, lastHandoff state, defaultChoice persistido. Robustez: degraded mode automático tras 3 fallos, persistence condicional para Nivel 0, prune de skills obsoletas.",
+        version: "0.8.8",
+        sha256: "a1d9744ffe70e976c7c96343bf101c1dedf615b27058559a376c0e559a341328"
       },
       {
         name: "openspec",
         file: "assets/mcp/openspec/",
         description: "MCP server local para OpenSpec - proposal, apply, archive, sync de cambios",
-        version: "0.8.6",
+        version: "0.8.8",
         sha256: "fa4be28bfc1e75db8f1a037e2580f04a60066c80e8e5934e90e1041020d04609"
       }
     ],
@@ -670,105 +670,105 @@ var init_manifest = __esm(() => {
         name: "brainstorming",
         file: "assets/skills/brainstorming/SKILL.md",
         description: "Skill unificado de pensamiento con dos modos: creative-design (producción de diseño → transición a implementación directa o openspec-propose) y open-exploration (exploración libre)",
-        version: "0.8.6",
+        version: "0.8.8",
         sha256: "f1013a86a8f27914d85a716e23c7fd32db1786d93615e8b0834b13d184308549"
       },
       {
         name: "execution-mode-evaluation",
         file: "assets/skills/execution-mode-evaluation/SKILL.md",
         description: "Skill de análisis de modo de ejecución — output reconciliado con controller snapshot contract (recommendation field)",
-        version: "0.8.6",
-        sha256: "7a670f8ae9d5479840d9fc4a54fa6ae75809b2c8883414d39300fa6289b82e9a"
+        version: "0.8.8",
+        sha256: "2158a6864c0912e868a9d720db7fd79441e6cc298e3320833d2527c9727c852e"
       },
       {
         name: "tdd",
         file: "assets/skills/tdd/SKILL.md",
         description: "Skill de test-driven development (Superpowers)",
-        version: "0.8.6",
-        sha256: "aa412298980b7826165c211145c1b8e9135f68f36247bb3cb96d0a0eae274486"
+        version: "0.8.8",
+        sha256: "f0ebfbbc43a8868d31a3fd2df37ae7f60fe8add09c6475862395a68269e5ff7f"
       },
       {
         name: "subagent-driven-development",
         file: "assets/skills/subagent-driven-development/SKILL.md",
         description: "Skill de ejecución con subagentes (Superpowers) — ejecuta solo después de confirmación del coordinador Ostacky",
-        version: "0.8.6",
+        version: "0.8.8",
         sha256: "1a42d714a9a13faf05f0bf7b580e8d837c2e77a5633839542ccce603023419e8"
       },
       {
         name: "dispatching-parallel-agents",
         file: "assets/skills/dispatching-parallel-agents/SKILL.md",
         description: "Skill de dispatch paralelo de agentes (Superpowers)",
-        version: "0.8.6",
-        sha256: "3c8a66d51ae2e719e877d02c3dac32bd804722c3bb9227c258ecae78252a20ab"
+        version: "0.8.8",
+        sha256: "7e7b712ef742d5631e302e6a71583e2bbbd33094da9281abfb84b43505fc3ef1"
       },
       {
         name: "review",
         file: "assets/skills/review/SKILL.md",
         description: "Skill de revisión de código (Superpowers)",
-        version: "0.8.6",
+        version: "0.8.8",
         sha256: "b19650ed4d1d4d9857a4dd5b7e08e91328a1a1fc9c45bcc2fb600fa9d0213279"
       },
       {
         name: "receiving-code-review",
         file: "assets/skills/receiving-code-review/SKILL.md",
         description: "Skill de recibir y procesar feedback de code review",
-        version: "0.8.6",
+        version: "0.8.8",
         sha256: "d761e884e71d8d3476ac734d287cae403a4024506a7d12e7361a448217c0a831"
       },
       {
         name: "openspec-propose",
         file: "assets/skills/openspec-propose/SKILL.md",
         description: "Skill de generación de proposal (OpenSpec)",
-        version: "0.8.6",
-        sha256: "bb59100b9fd3c9f9a1ec6509fa975ec55bf7fc737df4fe73bb3e9bbc217b83f7"
+        version: "0.8.8",
+        sha256: "6a517f750f24c008208156a2d653e97ed30b1e53878aeac5ce394e573db0678f"
       },
       {
         name: "openspec-apply-change",
         file: "assets/skills/openspec-apply-change/SKILL.md",
         description: "Skill de aplicación de change (OpenSpec)",
-        version: "0.8.6",
+        version: "0.8.8",
         sha256: "dfc823bf89fc7505e91ab6dee9c1f004be38a410bd3d88fb67b211b1b6cbb1d0"
       },
       {
         name: "openspec-archive-change",
         file: "assets/skills/openspec-archive-change/SKILL.md",
         description: "Skill de archivo de change (OpenSpec)",
-        version: "0.8.6",
+        version: "0.8.8",
         sha256: "16e4b561de7747283663fed602e506abf502452c49a8d4b86d7a5539c40f0195"
       },
       {
         name: "openspec-explore",
         file: "assets/skills/openspec-explore/SKILL.md",
         description: "Modo explore para OpenSpec — thinking partner para explorar ideas, investigar problemas y clarificar requisitos antes/durante un cambio",
-        version: "0.8.6",
-        sha256: "37ae4aaf17ea71a395bab6dc4d9d61b9a49d7910f6692535ae8553244c46880b"
+        version: "0.8.8",
+        sha256: "9eafc3a8c693b8d9916867ef764d49e5222da717fde501c957bb3f6c312d2415"
       },
       {
         name: "using-git-worktrees",
         file: "assets/skills/using-git-worktrees/SKILL.md",
         description: "Skill de uso de git worktrees para aislamiento de trabajo",
-        version: "0.8.6",
+        version: "0.8.8",
         sha256: "93341bc1b7c053618a8b6dc07e3615b77990d7b549a0201f5835d95fef67ce13"
       },
       {
         name: "using-superpowers",
         file: "assets/skills/using-superpowers/SKILL.md",
         description: "Skill de orquestación de Superpowers skills",
-        version: "0.8.6",
+        version: "0.8.8",
         sha256: "7e54536f96d2a379185a10bfc1e970850caa2561b6d8aca7080f0defea0381a4"
       },
       {
         name: "writing-skills",
         file: "assets/skills/writing-skills/SKILL.md",
         description: "Skill de creación y edición de skills",
-        version: "0.8.6",
+        version: "0.8.8",
         sha256: "3d76b906cee518a2b809febb70db95697a35b9f368986bb504b4120c3bfb437a"
       },
       {
         name: "graceful-degradation",
         file: "assets/skills/graceful-degradation/SKILL.md",
         description: "Skill de degradación graceful cuando múltiples tools están indisponibles",
-        version: "0.8.6",
+        version: "0.8.8",
         sha256: "363449bd9e6f800a0a3168667cf78f767fb105d86e4a4adadcc649d418139303"
       }
     ]
@@ -1155,6 +1155,8 @@ function copyEngramPlugin(projectRoot) {
 function copyOstackyControllerPlugin(projectRoot) {
   const pluginSource = join7(PACKAGE_ROOT, "assets", "plugins", "ostacky-plugin.ts");
   const coreSource = join7(PACKAGE_ROOT, "assets", "plugins", "controller-core.ts");
+  const securitySource = join7(PACKAGE_ROOT, "assets", "plugins", "security.ts");
+  const tieredSource = join7(PACKAGE_ROOT, "assets", "plugins", "tiered.ts");
   const pluginsDir = join7(projectRoot, ".opencode", "plugins");
   if (!existsSync6(pluginSource)) {
     throw new Error(`Plugin bundleado de OstackyController no encontrado: ${pluginSource}`);
@@ -1163,6 +1165,10 @@ function copyOstackyControllerPlugin(projectRoot) {
   copyFileSync3(pluginSource, join7(pluginsDir, "ostacky-plugin.ts"));
   if (existsSync6(coreSource))
     copyFileSync3(coreSource, join7(pluginsDir, "controller-core.ts"));
+  if (existsSync6(securitySource))
+    copyFileSync3(securitySource, join7(pluginsDir, "security.ts"));
+  if (existsSync6(tieredSource))
+    copyFileSync3(tieredSource, join7(pluginsDir, "tiered.ts"));
 }
 function buildEngramDownloadUrl(tag, platform = process.platform, arch = process.arch) {
   const target = getEngramReleaseTarget(platform, arch);
@@ -1492,14 +1498,14 @@ var init_stack = __esm(() => {
 // package.json
 var package_default = {
   name: "ostacky",
-  version: "0.8.6",
+  version: "0.8.8",
   description: "Instalador interactivo de agentes y comandos para OpenCode",
   type: "module",
   bin: {
     ostacky: "./dist/cli.js"
   },
   scripts: {
-    prebuild: "bun run scripts/sync-version.ts",
+    prebuild: "bun run scripts/sync-version.ts && bun run scripts/sync-controller-core.ts",
     dev: "bun run src/cli.ts",
     build: "bun build src/cli.ts --target=node --format=esm --outfile dist/cli.js && bun scripts/add-shebang.ts",
     start: "node dist/cli.js",
@@ -1510,7 +1516,7 @@ var package_default = {
     "hash:update": "bun run scripts/update-manifest-hashes.ts",
     "manifest:prepare": "bun run scripts/update-manifest-hashes.ts",
     "manifest:check": "bun run scripts/update-manifest-hashes.ts --check",
-    prepublishOnly: "bun run manifest:prepare && bun run build"
+    prepublishOnly: "bun run scripts/sync-controller-core.ts && bun run manifest:prepare && bun run build"
   },
   files: [
     "dist/",
@@ -2669,7 +2675,7 @@ async function probeMcpServer(nodeExecutable, serverPath, cwd, statePath, option
         params: {
           protocolVersion: "2025-03-26",
           capabilities: {},
-          clientInfo: { name: "ostacky-installer", version: "0.8.6" }
+          clientInfo: { name: "ostacky-installer", version: "0.8.8" }
         }
       });
     });
@@ -2978,7 +2984,15 @@ function uninstallAll(paths) {
   for (const name of Object.keys(lockfile.mcpServers ?? {})) {
     uninstallMcpServer(name, paths);
   }
-  const ostackyPlugins = ["ostacky-plugin.ts", "engram.ts", "ostacky-guard.ts", "ostacky-controller.ts"];
+  const ostackyPlugins = [
+    "ostacky-plugin.ts",
+    "engram.ts",
+    "ostacky-guard.ts",
+    "ostacky-controller.ts",
+    "controller-core.ts",
+    "security.ts",
+    "tiered.ts"
+  ];
   for (const file of ostackyPlugins) {
     const fp = join6(paths.plugins, file);
     if (existsSync5(fp)) {
@@ -4347,6 +4361,8 @@ async function runDoctorCommand() {
         console.log(`⚠️ degraded: confirmation not audited in controller (degradedEditsCount=${parsed.degradedEditsCount})`);
       if (parsed.codegraphBypassCount > 0)
         console.log(`⚠️ codegraphBypassCount=${parsed.codegraphBypassCount} (inefficient: codegraph bypass)`);
+      if (parsed.engramBypassCount > 0)
+        console.log(`⚠️ engramBypassCount=${parsed.engramBypassCount} (contradiction check bypassed — sin mem_search)`);
       if (parsed.stateOversizedCount > 0)
         console.log(`⚠️ stateOversizedCount=${parsed.stateOversizedCount} snapshots perdidos`);
       if (parsed.sensitiveAccess)