ostacky 0.8.7 → 0.8.8

package/README.md

@@ -246,37 +246,37 @@ Tras instalar (`--scope local`), el proyecto queda así:
 
 ```json
 {
-    "version": "0.8.7",
+    "version": "0.8.8",
     "lockedAt": "2025-01-01T00:00:00.000Z",
     "repo": "JaimeHoracio/Ostacky",
-    "tag": "v0.8.7",
+    "tag": "v0.8.8",
     "agents": {
         "ostacky": {
-            "version": "0.8.7",
+            "version": "0.8.8",
             "installedAt": "2025-01-01T00:00:00.000Z",
             "sha256": "abc123..."
         }
     },
     "commands": {
         "install-stack": {
-            "version": "0.8.7",
+            "version": "0.8.8",
             "installedAt": "2025-01-01T00:00:00.000Z",
             "sha256": "def456..."
         },
         "opsx-sync": {
-            "version": "0.8.7",
+            "version": "0.8.8",
             "installedAt": "2025-01-01T00:00:00.000Z",
             "sha256": "ghi789..."
         }
     },
     "skills": {
-        "brainstorming": { "version": "0.8.7", ... },
-        "execution-mode-evaluation": { "version": "0.8.7", ... },
-        "openspec-propose": { "version": "0.8.7", ... }
+        "brainstorming": { "version": "0.8.8", ... },
+        "execution-mode-evaluation": { "version": "0.8.8", ... },
+        "openspec-propose": { "version": "0.8.8", ... }
     },
     "mcpServers": {
-        "ostacky-controller": { "version": "0.8.7", ... },
-        "openspec": { "version": "0.8.7", ... }
+        "ostacky-controller": { "version": "0.8.8", ... },
+        "openspec": { "version": "0.8.8", ... }
     }
 }
 ```
@@ -308,7 +308,7 @@ Es opcional y solo necesario si algo falló durante la instalación o si querés
 ## Seguridad
 
 - `opencode.jsonc` se versiona en el repo para compartir permisos y MCP de forma reproducible.
-- Las URLs de descarga usan **tags de GitHub** (ej. `v0.8.7`), nunca `main` — instalaciones reproducibles
+- Las URLs de descarga usan **tags de GitHub** (ej. `v0.8.8`), nunca `main` — instalaciones reproducibles
 - Cada path de archivo descargado es validado para prevenir **path traversal**
 - Los archivos incluyen **checksum SHA-256** opcional; si el manifest lo define, el contenido se verifica antes de escribir
 - El cache local (`.opencode/cache/`) también valida integridad al servir archivos cacheados
@@ -324,7 +324,7 @@ Es opcional y solo necesario si algo falló durante la instalación o si querés
 - Variable `OSTACKY_SENSITIVE_PATTERNS` overridea los patrones por defecto (`**/.env*`, `**/.secrets/**`, `**/*.pem`, `**/*.key`, `**/.aws/**`, `**/.ssh/**`, `**/credentials.json`, `**/.npmrc`).
 - Ejemplo: `OSTACKY_SENSITIVE_PATTERNS="**/.env*,**/.secrets/**" bunx ostacky doctor` — `doctor` imprime el patrón efectivo.
 - Allowlist: `.env.example`, `.env.template`, `.env.sample` nunca se bloquean.
-- Fuente única: `src/security.ts` (`SENSITIVE_DEFAULT`, `isSensitive`, `BASH_SENSITIVE_RE`) — `ostacky-plugin.ts` importa de ahí (legacy `ostacky-guard.ts` eliminado, fusionado en el plugin). Ver `doctor` para verificar.
+- Fuente única: `src/security.ts` (`SENSITIVE_DEFAULT`, `isSensitive`, `BASH_SENSITIVE_RE`) — mirrors generados en `assets/plugins/security.ts` y `assets/mcp/ostacky-controller/security.js` vía `bun run scripts/sync-controller-core.ts`; `ostacky-plugin.ts` importa de `./security.ts` (self-contained). Ver `doctor` para verificar.
 
 #### Aislamiento de worktrees (harness-prod-hardening)
 
@@ -365,7 +365,7 @@ CodeGraph está instalado en `.opencode/tools/codegraph/bin/codegraph` y se conf
 | `.opencode/tools/codegraph/bin/codegraph status`                                           | Muestra estado del index y archivos pendientes              |
 | `.opencode/tools/codegraph/bin/codegraph install --target opencode --location local --yes` | Configura CodeGraph para OpenCode y genera AGENTS.md        |
 
-> **Windows:** si ves `Command failed: cmd.exe /d /c call ... codegraph.cmd init -i` durante `npx ostacky install`, es un _warning_ no fatal — el binario se instaló pero el índice no se pudo crear. Reintentá con `npx ostacky install-stack --scope local` o ejecutá manualmente `.opencode\tools\codegraph\bin\codegraph.exe init -i` (o `codegraph.cmd` si no hay `.exe`) dentro del proyecto. Desde v0.8.7 el instalador usa el patrón resiliente de Engram (strip 0 + búsqueda recursiva) y loguea `projectRoot|toolsDir` para diagnosticar scope.
+> **Windows:** si ves `Command failed: cmd.exe /d /c call ... codegraph.cmd init -i` durante `npx ostacky install`, es un _warning_ no fatal — el binario se instaló pero el índice no se pudo crear. Reintentá con `npx ostacky install-stack --scope local` o ejecutá manualmente `.opencode\tools\codegraph\bin\codegraph.exe init -i` (o `codegraph.cmd` si no hay `.exe`) dentro del proyecto. Desde v0.8.8 el instalador usa el patrón resiliente de Engram (strip 0 + búsqueda recursiva) y loguea `projectRoot|toolsDir` para diagnosticar scope.
 
 ## Licencia
 

package/assets/agents/ostacky.md

@@ -1,12 +1,12 @@
 ---
 description: Orquestador principal — rutea por nivel, orquesta CodeGraph + OpenSpec + Superpowers.
 mode: primary
-version: 0.8.7
+version: 0.8.8
 ---
 
-Sos **Ostacky v0.8.7**, orquestás, no implementás. Interpretás, clasificás (0/0+1/1+), ruteás y coordinás.
+Sos **Ostacky v0.8.8**, orquestás, no implementás. Interpretás, clasificás (0/0+1/1+), ruteás y coordinás.
 
-> **Versión:** `0.8.7` (sincronizada desde `package.json` vía `scripts/sync-version.ts`). Cuando te pregunten qué versión tenés, qué versión sos, o `¿qué versión tenés?` / `version` / `¿en qué versión estás?`, respondé exactamente: **"Ostacky v0.8.7"** (o `v0.8.7` si te piden solo el número). No inventes otra versión.
+> **Versión:** `0.8.8` (sincronizada desde `package.json` vía `scripts/sync-version.ts`). Cuando te pregunten qué versión tenés, qué versión sos, o `¿qué versión tenés?` / `version` / `¿en qué versión estás?`, respondé exactamente: **"Ostacky v0.8.8"** (o `v0.8.8` si te piden solo el número). No inventes otra versión.
 
 ## Reglas innegociables
 

package/assets/commands/install-stack.md

@@ -5,13 +5,13 @@ agent: build
 
 Instala el stack tecnológico de desarrollo para OpenCode. **IMPORTANTE:** las herramientas se instalan por separado (cada una con su propio CLI/comando). `npx ostacky install` solo instala el agente y commands de Ostacky en `.opencode/`. Este comando (`/install-stack`) es la guía de referencia para la instalación manual completa paso a paso.
 
-**Nota:** A partir de v0.8.7, `npx ostacky install` ya instala automáticamente el stack completo (CodeGraph, OpenSpec, Engram, MCPs bundleados) además del agente y skills. Este comando es útil para instalación manual, verificación, o cuando algo falló y necesita reinstalarse.
+**Nota:** A partir de v0.8.8, `npx ostacky install` ya instala automáticamente el stack completo (CodeGraph, OpenSpec, Engram, MCPs bundleados) además del agente y skills. Este comando es útil para instalación manual, verificación, o cuando algo falló y necesita reinstalarse.
 
 **RESTRICCIÓN ABSOLUTA:** instalar ÚNICAMENTE para OpenCode. Está terminantemente prohibido crear o modificar archivos en `.claude/`, `.kiro/`, `.cursor/`, `.gemini/`, `.codex/`, `.antigravity/`, `.windsurf/` o cualquier otro directorio de plataformas externas.
 
 **Origen del set curado:** el set de 15 skills referenciado en `assets/agents/ostacky.md` está bundleado en `assets/skills/` dentro del paquete npm. La definición del set y su trazabilidad viven en `manifest.json` y `.opencode/ostacky-lock.json`.
 
-## Scope de instalación — local vs global (desde v0.8.7)
+## Scope de instalación — local vs global (desde v0.8.8)
 
 `npx ostacky install` soporta `--scope local|global|auto` (también `--scope=...`):
 

package/assets/docs/ostacky-reference.md

@@ -64,14 +64,22 @@ Principio: **eficacia > recorte** — si recorte rompiera caché y saliera más
 
 ## Security single-source
 
-`src/security.ts` único origen de `SENSITIVE_DEFAULT`/`BASH_SENSITIVE_RE`/`isSensitive`/`extractPathsFromBash`; plugin y guard importan, no copian. `BASH_SENSITIVE_RE` arriba. `OSTACKY_SENSITIVE_PATTERNS` override.
+`src/security.ts` único origen de `SENSITIVE_DEFAULT`/`BASH_SENSITIVE_RE`/`isSensitive`/`extractPathsFromBash` (import `node:crypto`); mirrors generados en `assets/plugins/security.ts` (solo Sensitive guard, sin crypto) y `assets/mcp/ostacky-controller/security.js` vía `bun run scripts/sync-controller-core.ts`. `ostacky-plugin.ts` importa de `./security.ts` self-contained (no `../../src`). `BASH_SENSITIVE_RE` arriba. `OSTACKY_SENSITIVE_PATTERNS` override.
 
 ## Tiered single-source
 
-`src/tiered.ts` único origen de `isTrivial(msg,state)` + `getControllerState(dir)`. Ambos plugins importan lógica idéntica, no duplican regex. Ver `assets/plugins/ostacky-plugin.ts` y `assets/plugins/engram.ts`.
+`src/tiered.ts` único origen de `isTrivial(msg,state)` + `getControllerState(dir)`. `ostacky-plugin.ts` importa de `./tiered.ts` mirror (generado vía `sync-controller-core.ts`), `engram.ts` inlined (misma regex, evita import dinámico). No duplicar regex. Ver `assets/plugins/ostacky-plugin.ts` y `assets/plugins/engram.ts`.
+
+## Controller single-source
+
+`src/controller-core.ts` CANÓNICO para `STATES/TRANSITIONS/DEFAULT_STATE`; mirrors generados en `assets/plugins/controller-core.ts` (TS) y `assets/mcp/ostacky-controller/controller-core.js` (JS strippado) vía `bun run scripts/sync-controller-core.ts` (prebuild). No editar mirrors. `ostacky-plugin.ts` importa de `./controller-core.ts` self-contained.
 
 ## Prompt-efficiency
 
 - `ostacky.md` 109→72 líneas (diet estable cacheable). Tiered vía suffix, no reemplazo `system[0]`.
 - `controller` descriptions <150 chars
 - `MEMORY_INSTRUCTIONS` lazy: siempre pointer (~1 línea) en `system.transform`; full vive en `assets/docs/engram-protocol.md` on-demand via `Read` (ahorro ~1.2k en FULL, trivial ya era pointer)
+
+## Propose Flow (1+)
+
+`openspec-propose` SHALL Paso 0: `getDiscoverySnapshot(query)` + `getEngramDedup` → si miss `codegraph_codegraph_explore` + `engram_mem_search` + `putDiscoverySnapshot` **antes** de `openspec new`. Cita símbolos existentes en `proposal/design`; sin esto dispara `WARN:codegraphBypass` y `design.md` alucina API. Ver `assets/skills/openspec-propose/SKILL.md: Paso 0` y `brainstorming` (router por nivel: `brainstorming` decide 0/0+1/1+, `openspec-explore` es stance sin nivel).

package/assets/mcp/ostacky-controller/controller-core.js

@@ -1,7 +1,6 @@
 /**
  * controller-core — Single source of truth para TRANSITIONS, STATES, DEFAULT_STATE y helpers.
- * Extraído de assets/mcp/ostacky-controller/index.js y assets/plugins/ostacky-plugin.ts
- * para eliminar duplicación (D1). Ambos importan de acá.
+ * Generado desde src/controller-core.ts — NO EDITAR. Ejecutá `bun run scripts/sync-controller-core.ts`.
  */
 
 import { SENSITIVE_DEFAULT } from "./security.js";
@@ -142,6 +141,7 @@ export const DEFAULT_STATE = {
   watchdogEnabled: true,
   ts: Date.now(),
   specNotInSync: false,
+  engramBypassCount: 0,
 };
 
 export function safeJsonStringify(obj, pretty = false) {

package/assets/mcp/ostacky-controller/index.js

@@ -2576,7 +2576,7 @@ function safeHandler(fn, options = {}) {
 
 const server = new McpServer({
     name: 'ostacky-controller',
-    version: '0.8.7',
+    version: '0.8.8',
 });
 
 server.registerTool(
@@ -3176,7 +3176,7 @@ function setupGracefulShutdown(ctrl) {
 }
 
 async function main() {
-    log('Starting ostacky-controller MCP v0.8.7...');
+    log('Starting ostacky-controller MCP v0.8.8...');
     log('State path:', { path: statePath });
     // Clean up stale tmp/lock files from previous runs
     cleanupTmpFiles(statePath);

package/assets/mcp/ostacky-controller/package.json

@@ -1,6 +1,6 @@
 {
     "name": "ostacky-controller",
-    "version": "0.8.7",
+    "version": "0.8.8",
     "private": true,
     "type": "module",
     "dependencies": {

package/assets/mcp/ostacky-controller/security.js

@@ -1,8 +1,10 @@
 /**
  * security.js — source-of-truth mirror of src/security.ts for controller (Node)
- * Generado desde src/security.ts — mantener sincronizado via `bun run hash:check` y test controller-source
+ * Generado desde src/security.ts — NO EDITAR. Ejecutá `bun run scripts/sync-controller-core.ts`.
  */
 
+// ─── Sensitive guard — source-of-truth (hardening-v2 D1) ───────────────
+
 export const SENSITIVE_DEFAULT = [
   "**/.env*",
   "**/.secrets/**",
@@ -14,9 +16,20 @@ export const SENSITIVE_DEFAULT = [
   "**/.npmrc",
 ];
 
+/**
+ * Regex que detecta acceso sensible en comandos bash.
+ * Cubre .env, .secrets, .pem, .key, .aws, .ssh, credentials.json, .npmrc
+ * Normalizar antes (strip quotes/backslashes) y testear con `BASH_SENSITIVE_RE.test(normalized)`.
+ */
 export const BASH_SENSITIVE_RE =
   /(?:^|[^a-zA-Z0-9_.-])(\.env(\b|[_.-])|\.secrets\b|\.pem\b|\.key\b|credentials\.json|\.aws\b|\.ssh\b|\.npmrc\b)/i;
 
+/**
+ * Returns true if filePath is considered sensitive given patterns.
+ * - Allowlist: .env.example / .env.template / .env.sample nunca son sensibles.
+ * - Normaliza backslashes a "/" para Windows.
+ * - patterns: array de globs como SENSITIVE_DEFAULT; si no se pasa usa SENSITIVE_DEFAULT.
+ */
 export function isSensitive(filePath, patterns = SENSITIVE_DEFAULT) {
   if (!filePath) return false;
   const normalized = filePath.replace(/\\/g, "/");
@@ -38,25 +51,37 @@ export function isSensitive(filePath, patterns = SENSITIVE_DEFAULT) {
     if (pat.includes("credentials.json") && lower.endsWith("credentials.json")) return true;
     if (pat.includes(".npmrc") && lower.endsWith(".npmrc")) return true;
   }
+  // fallback genérico por extensión
   if (/\.(pem|key)$/i.test(normalized)) return true;
   if (base.startsWith(".env")) return true;
   return false;
 }
 
+/**
+ * Extrae paths candidatos de un comando bash para chequear sensibilidad.
+ * Tokeniza por separadores shell `| ; && || > >> <` y respeta quotes.
+ * Normaliza quitando quotes y backslashes para detectar obfuscaciones como .e""nv.
+ */
 export function extractPathsFromBash(cmd) {
   if (!cmd) return [];
+  // Normalizar && y || a ; para split único
   const normalized = cmd.replace(/&&/g, ";").replace(/\|\|/g, ";");
+  // Split por separadores shell
   const segments = normalized.split(/[|;><\n]+/);
   const paths = [];
   for (const seg of segments) {
     const trimmed = seg.trim();
     if (!trimmed) continue;
+    // Tokeniza respetando quotes — captura tokens entre quotes o sin espacios
     const tokens = trimmed.match(/(?:[^\s"'`\\]+|"[^"]*"|'[^']*'|`[^`]*`)+/g) || [];
     for (let token of tokens) {
+      // Normalización anti-obfuscación: quitar quotes y backslashes
       const stripped = token.replace(/["'`]/g, "").replace(/\\/g, "");
       if (!stripped) continue;
-      if (["cat","grep","ls","echo","awk","sed","cut","head","tail","wc","find","xargs","bash","sh","zsh","env","printenv","node","bun","npm","npx","ls"].includes(stripped)) continue;
+      // Filtrar comandos comunes y flags
+      if (["cat", "grep", "ls", "echo", "awk", "sed", "cut", "head", "tail", "wc", "find", "xargs", "bash", "sh", "zsh", "env", "printenv", "node", "bun", "npm", "npx", "ls"].includes(stripped)) continue;
       if (stripped.startsWith("-")) continue;
+      // Heurística de path: contiene / o . o es .env* o sensible
       const lower = stripped.toLowerCase();
       if (
         stripped.includes("/") ||
@@ -70,6 +95,7 @@ export function extractPathsFromBash(cmd) {
         lower.endsWith("credentials.json") ||
         lower.endsWith(".npmrc")
       ) {
+        // Limpiar trailing chars como : , )
         const cleaned = stripped.replace(/[,:;)\]]+$/, "");
         if (cleaned) paths.push(cleaned);
       } else if (stripped === ".env") {
@@ -77,9 +103,14 @@ export function extractPathsFromBash(cmd) {
       }
     }
   }
+  // También buscar paths con regex global como fallback
+  // (detecta .env en strings complejos)
   return [...new Set(paths)];
 }
 
+/**
+ * Lee patrones sensibles desde env OSTACKY_SENSITIVE_PATTERNS o usa default.
+ */
 export function getSensitivePatterns() {
   const raw = process.env.OSTACKY_SENSITIVE_PATTERNS;
   if (!raw) return SENSITIVE_DEFAULT;

package/assets/plugins/controller-core.ts

@@ -1,7 +1,6 @@
 /**
  * controller-core — Single source of truth para TRANSITIONS, STATES, DEFAULT_STATE y helpers.
- * Extraído de assets/mcp/ostacky-controller/index.js y assets/plugins/ostacky-plugin.ts
- * para eliminar duplicación (D1). Ambos importan de acá.
+ * Generado desde src/controller-core.ts — NO EDITAR. Ejecutá `bun run scripts/sync-controller-core.ts`.
  */
 
 import { SENSITIVE_DEFAULT } from "./security.js";
@@ -142,6 +141,7 @@ export const DEFAULT_STATE: any = {
   watchdogEnabled: true,
   ts: Date.now(),
   specNotInSync: false,
+  engramBypassCount: 0,
 };
 
 export function safeJsonStringify(obj: any, pretty = false): string {

package/assets/plugins/ostacky-plugin.ts

@@ -5,7 +5,7 @@
  * Mantiene máquina de 13 estados en-process y aplica hard gates en tool.execute.before.
  * MCP queda thin solo para observabilidad (get_*).
  *
- * Single source security: importa desde src/security.ts (no copia regex).
+ * Single source security: mirrors generados desde src/security.ts via scripts/sync-controller-core.ts
  * Cache único: getDiscoverySnapshot es único entrypoint.
  * Tiered cache-friendly: isTrivial sin reemplazar system[0], suffix hint + SKIP.
  * CodeGraph preventivo: bloquea Read/Grep masivo sin Discovery hit.
@@ -14,8 +14,8 @@
 import type { Plugin } from "@opencode-ai/plugin"
 import { readFileSync, writeFileSync, renameSync, mkdirSync, existsSync, statSync, readdirSync, unlinkSync } from "node:fs"
 import { join, dirname, basename, resolve, relative } from "node:path"
-import { SENSITIVE_DEFAULT, BASH_SENSITIVE_RE, isSensitive, extractPathsFromBash } from "../../src/security.ts"
-import { isTrivial } from "../../src/tiered.ts"
+import { SENSITIVE_DEFAULT, BASH_SENSITIVE_RE, isSensitive, extractPathsFromBash } from "./security.ts"
+import { isTrivial } from "./tiered.ts"
 import { STATES, TRANSITIONS, DEFAULT_STATE } from "./controller-core.ts"
 
 // ─── Constants ───────────────────────────────────────────────────────────────
@@ -139,6 +139,8 @@ function isCodegraphAvailable(directory: string): boolean {
 const trivialBySession = new Map<string, boolean>()
 // Track discovery hit per requestId to avoid blocking after hit
 const discoveryHitByRequest = new Map<string, boolean>()
+// Track Engram hit per session to audit bypass (soft, no BLOCK)
+const engramHitBySession = new Map<string, boolean>()
 // ─── Heartbeat ping — evita sensación de trancado en tareas largas ──
 let lastPingTs = 0
 let pingInterval: ReturnType<typeof setInterval> | null = null
@@ -279,6 +281,26 @@ export const OstackyController: Plugin = async (ctx) => {
         lastCheck = { revision: freshState.revision, result: "ALLOW" }
       }
 
+      // ── 1.6) Engram soft gate (auditable, no BLOCK) — refuerza SHALL 1 de ostacky.md ──
+      // Si propone/cambia nivel sin haber consultado Engram, cuenta bypass (exime trivial+DONE)
+      const isEngramRelevantTool = tool.includes("record_discovery") || (tool.includes("openspec") && (tool.includes("propose") || (typeof args?.filePath === "string" && args.filePath.includes("openspec/changes")) || (typeof args?.path === "string" && args.path.includes("openspec/changes"))))
+      if (isEngramRelevantTool) {
+        const hasEngramHit = engramHitBySession.get(sessionId) ?? false
+        const isTrivialForEngram = trivialBySession.get(sessionId) ?? false
+        const stateForEngram = freshState
+        const shouldAudit = !hasEngramHit && !isTrivialForEngram && stateForEngram && ["DISCOVERY", "ROUTE_DECISION_PENDING", "SPECIFICATION", "INTERPRETATION_PENDING"].includes(stateForEngram.state)
+        if (shouldAudit) {
+          try {
+            const st = readState(ctx.directory)
+            if (st) {
+              st.engramBypassCount = (st.engramBypassCount || 0) + 1
+              // no persist cada vez si es muy frecuente: single-writer ya persiste en after, pero acá persistimos directo para auditoría
+              persistState(ctx.directory, st)
+            }
+          } catch {}
+        }
+      }
+
       // ── 1.5) Router determinista: openspec-propose bloquea si 1+ no-downgradeable sin Alternatives ──
       const isOpenspecPropose = tool.includes("openspec") && (tool.includes("propose") || args?.filePath?.includes("openspec/changes") || args?.path?.includes("openspec/changes"))
       if (isOpenspecPropose) {
@@ -487,8 +509,16 @@ export const OstackyController: Plugin = async (ctx) => {
           if (text && !text.includes("null") && text.length > 10) {
             discoveryHitByRequest.set(sessionId, true)
           }
+          // Engram hit via discovery snapshot (contiene engramHits)
+          if (text && text.includes("engramHits")) {
+            engramHitBySession.set(sessionId, true)
+          }
         } catch {}
       }
+      // Track Engram hit (mem_search / mem_context / dedup) para soft gate 1.6
+      if (tool.includes("engram_mem_search") || tool.includes("engram_mem_context") || tool.includes("mem_search") || tool.includes("mem_context") || tool.includes("getEngramDedup") || tool.includes("engram_mem_")) {
+        engramHitBySession.set(sessionId, true)
+      }
       // Update state metrics for cache hit (best-effort)
       if (tool.includes("getDiscoverySnapshot") && output) {
         try {
@@ -549,6 +579,7 @@ export const OstackyController: Plugin = async (ctx) => {
             tokenSavingEstimate: state?.tokenSavingEstimate ?? 0,
             stateCheckCount: state?.stateCheckCount ?? 0,
             codegraphBypassCount: state?.codegraphBypassCount ?? 0,
+            engramBypassCount: state?.engramBypassCount ?? 0,
             revision: state?.revision ?? 0,
           }
         },
@@ -605,6 +636,7 @@ export const OstackyController: Plugin = async (ctx) => {
         if (sid) {
           trivialBySession.delete(sid)
           discoveryHitByRequest.delete(sid)
+          engramHitBySession.delete(sid)
         }
       }
     },

package/assets/plugins/security.ts

@@ -0,0 +1,118 @@
+/**
+ * security.ts — mirror de src/security.ts para plugin (self-contained, solo Sensitive guard)
+ * Generado desde src/security.ts — NO EDITAR. Ejecutá `bun run scripts/sync-controller-core.ts`.
+ */
+
+// ─── Sensitive guard — source-of-truth (hardening-v2 D1) ───────────────
+
+export const SENSITIVE_DEFAULT: string[] = [
+  "**/.env*",
+  "**/.secrets/**",
+  "**/*.pem",
+  "**/*.key",
+  "**/.aws/**",
+  "**/.ssh/**",
+  "**/credentials.json",
+  "**/.npmrc",
+];
+
+/**
+ * Regex que detecta acceso sensible en comandos bash.
+ * Cubre .env, .secrets, .pem, .key, .aws, .ssh, credentials.json, .npmrc
+ * Normalizar antes (strip quotes/backslashes) y testear con `BASH_SENSITIVE_RE.test(normalized)`.
+ */
+export const BASH_SENSITIVE_RE =
+  /(?:^|[^a-zA-Z0-9_.-])(\.env(\b|[_.-])|\.secrets\b|\.pem\b|\.key\b|credentials\.json|\.aws\b|\.ssh\b|\.npmrc\b)/i;
+
+/**
+ * Returns true if filePath is considered sensitive given patterns.
+ * - Allowlist: .env.example / .env.template / .env.sample nunca son sensibles.
+ * - Normaliza backslashes a "/" para Windows.
+ * - patterns: array de globs como SENSITIVE_DEFAULT; si no se pasa usa SENSITIVE_DEFAULT.
+ */
+export function isSensitive(filePath: string, patterns: string[] = SENSITIVE_DEFAULT): boolean {
+  if (!filePath) return false;
+  const normalized = filePath.replace(/\\/g, "/");
+  const lower = normalized.toLowerCase();
+  if (
+    lower.endsWith(".env.example") ||
+    lower.endsWith(".env.template") ||
+    lower.endsWith(".env.sample")
+  )
+    return false;
+  const base = lower.split("/").pop() || "";
+  for (const pat of patterns) {
+    if (pat.includes(".env") && base.startsWith(".env")) return true;
+    if (pat.includes(".secrets") && lower.includes(".secrets")) return true;
+    if (pat.includes("*.pem") && lower.endsWith(".pem")) return true;
+    if (pat.includes("*.key") && lower.endsWith(".key")) return true;
+    if (pat.includes(".aws") && lower.includes(".aws")) return true;
+    if (pat.includes(".ssh") && lower.includes(".ssh")) return true;
+    if (pat.includes("credentials.json") && lower.endsWith("credentials.json")) return true;
+    if (pat.includes(".npmrc") && lower.endsWith(".npmrc")) return true;
+  }
+  // fallback genérico por extensión
+  if (/\.(pem|key)$/i.test(normalized)) return true;
+  if (base.startsWith(".env")) return true;
+  return false;
+}
+
+/**
+ * Extrae paths candidatos de un comando bash para chequear sensibilidad.
+ * Tokeniza por separadores shell `| ; && || > >> <` y respeta quotes.
+ * Normaliza quitando quotes y backslashes para detectar obfuscaciones como .e""nv.
+ */
+export function extractPathsFromBash(cmd: string): string[] {
+  if (!cmd) return [];
+  // Normalizar && y || a ; para split único
+  const normalized = cmd.replace(/&&/g, ";").replace(/\|\|/g, ";");
+  // Split por separadores shell
+  const segments = normalized.split(/[|;><\n]+/);
+  const paths: string[] = [];
+  for (const seg of segments) {
+    const trimmed = seg.trim();
+    if (!trimmed) continue;
+    // Tokeniza respetando quotes — captura tokens entre quotes o sin espacios
+    const tokens = trimmed.match(/(?:[^\s"'`\\]+|"[^"]*"|'[^']*'|`[^`]*`)+/g) || [];
+    for (let token of tokens) {
+      // Normalización anti-obfuscación: quitar quotes y backslashes
+      const stripped = token.replace(/["'`]/g, "").replace(/\\/g, "");
+      if (!stripped) continue;
+      // Filtrar comandos comunes y flags
+      if (["cat", "grep", "ls", "echo", "awk", "sed", "cut", "head", "tail", "wc", "find", "xargs", "bash", "sh", "zsh", "env", "printenv", "node", "bun", "npm", "npx", "ls"].includes(stripped)) continue;
+      if (stripped.startsWith("-")) continue;
+      // Heurística de path: contiene / o . o es .env* o sensible
+      const lower = stripped.toLowerCase();
+      if (
+        stripped.includes("/") ||
+        stripped.includes(".") ||
+        lower.startsWith(".env") ||
+        lower.includes(".secrets") ||
+        lower.endsWith(".pem") ||
+        lower.endsWith(".key") ||
+        lower.includes(".aws") ||
+        lower.includes(".ssh") ||
+        lower.endsWith("credentials.json") ||
+        lower.endsWith(".npmrc")
+      ) {
+        // Limpiar trailing chars como : , )
+        const cleaned = stripped.replace(/[,:;)\]]+$/, "");
+        if (cleaned) paths.push(cleaned);
+      } else if (stripped === ".env") {
+        paths.push(stripped);
+      }
+    }
+  }
+  // También buscar paths con regex global como fallback
+  // (detecta .env en strings complejos)
+  return [...new Set(paths)];
+}
+
+/**
+ * Lee patrones sensibles desde env OSTACKY_SENSITIVE_PATTERNS o usa default.
+ */
+export function getSensitivePatterns(): string[] {
+  const raw = process.env.OSTACKY_SENSITIVE_PATTERNS;
+  if (!raw) return SENSITIVE_DEFAULT;
+  return raw.split(",").map((s) => s.trim()).filter(Boolean);
+}

package/assets/plugins/tiered.ts

@@ -0,0 +1,46 @@
+/**
+ * tiered.ts — mirror de src/tiered.ts para plugin (self-contained)
+ * Generado desde src/tiered.ts — NO EDITAR. Ejecutá `bun run scripts/sync-controller-core.ts`.
+ */
+
+/**
+ * Tiered helpers — single source of truth for trivial detection y niveles.
+ *
+ * Ambos plugins (ostacky-plugin.ts y engram.ts) importan de acá.
+ * No duplicar regex. Cache-friendly: isTrivial no muta system[0], solo decide hint.
+ * LEVEL_THRESHOLDS es la única definición de niveles (D6).
+ */
+
+export const LEVEL_THRESHOLDS = {
+  "0": { maxFiles: 1, maxLines: 15, hasAPI: false, desc: "1 archivo, sin API, <15 líneas" },
+  "0+1": { maxFiles: 2, maxLines: 30, hasAPI: false, desc: "1-2 archivos, sin API, <30 líneas" },
+  "1+": { maxFiles: Infinity, maxLines: Infinity, hasAPI: true, desc: "API, deps, >30 líneas, cross-module" },
+} as const;
+
+export function classifyLevel({ fileCount, estLines, hasAPI }: { fileCount: number; estLines: number; hasAPI: boolean }): "0" | "0+1" | "1+" {
+  if (hasAPI || estLines > 30 || fileCount > 2) return "1+";
+  if (estLines > 15 || fileCount > 1) return "0+1";
+  return "0";
+}
+
+export function isTrivial(msg: string, state: string): boolean {
+  if (!msg || state !== "DONE") return false
+  if (msg.trim().length >= 30) return false
+  if (!/^(hola|hey|gracias|buenas|hi|hello)\b/i.test(msg.trim())) return false
+  if (/(necesito|quiero|agregá|fix|bug|feature|auth|spec|implementar)/i.test(msg)) return false
+  return true
+}
+
+export function getControllerState(directory: string): string {
+  try {
+    const { readFileSync } = require("node:fs") as typeof import("node:fs")
+    const { join } = require("node:path") as typeof import("node:path")
+    const statePath =
+      process.env.OSTACKY_STATE_PATH || join(directory, ".opencode", "ostacky-state.json")
+    const raw = readFileSync(statePath, "utf-8")
+    const j = JSON.parse(raw)
+    return j.state ?? "DONE"
+  } catch {
+    return "DONE"
+  }
+}

package/assets/skills/dispatching-parallel-agents/SKILL.md

@@ -129,6 +129,7 @@ Return: Summary of what you found and what you fixed.
 **Need full context:** Understanding requires seeing entire system
 **Exploratory debugging:** You don't know what's broken yet
 **Shared state:** Agents would interfere (editing same files, using same resources)
+**Ostacky execution:** If `execution-mode-evaluation` already produced `fileClusters/sharedFiles` — **DO NOT use this skill**; use `subagent-driven-development` dispatch por clusters (respeta `sharedFiles` y `sequentialDeps` del Controller, evita pisar mismo archivo desde 2 agentes).
 
 ## Real Example from Session
 

package/assets/skills/openspec-explore/SKILL.md

@@ -39,10 +39,11 @@ Depending on what the user brings, you might:
 - Find analogies
 
 **Investigate the codebase**
-- Map existing architecture relevant to the discussion
+- Map existing architecture relevant to the discussion (ground with `codegraph_codegraph_explore` + `engram_mem_search` if pre-1+ or without active change)
 - Find integration points
 - Identify patterns already in use
 - Surface hidden complexity
+- **Level note:** Si necesitás ruteo por nivel Ostacky (0/0+1/1+) usa `brainstorming` en vez de este stance; este skill asume ya estás en flujo OpenSpec (1+).
 
 **Compare options**
 - Brainstorm multiple approaches

package/assets/skills/openspec-propose/SKILL.md

@@ -26,7 +26,9 @@ When ready to implement, run /opsx-apply
 
 **Steps**
 
-1. **Check Engram for similar changes** — `engram_mem_search` with keywords from the user's description. If a similar change was proposed or implemented before, surface it to the user. They may want to extend the existing work instead of starting fresh.
+0. **Ground with CodeGraph + Engram (SHALL — Ostacky)** — Antes de `openspec new`, verifica `getDiscoverySnapshot(query)` + `getEngramDedup`. Si miss → `codegraph_codegraph_explore` + `engram_mem_search` + `putDiscoverySnapshot`. Cita símbolos existentes en `proposal/design`; sin esto el `design.md` puede alucinar API inexistente y dispara `WARN:codegraphBypass` en `doctor`.
+
+1. **Check Engram for similar changes** — `engram_mem_search` con keywords del *paso 0* (reusar si ya fue hit; no duplicar `mem_search` mismo `requestId`). Si hay change similar previo, surfacealo. Pueden extender trabajo existente en vez de empezar de cero.
 
 2. **If no clear input provided, ask what they want to build**
 

package/assets/skills/tdd/SKILL.md

@@ -28,6 +28,8 @@ Write the test first. Watch it fail. Write minimal code to pass.
 
 Thinking "skip TDD just this once"? Stop. That's rationalization.
 
+> **Ostacky ground (SHALL):** Antes de RED, verifica `getDiscoverySnapshot(query)` + `getEngramDedup`. Si hit → reusar símbolos/decisiones; si miss → `codegraph_codegraph_explore` + `engram_mem_search` + `putDiscoverySnapshot`. Evita testear API inexistente y respeta `discovery-cache (único)` de `ostacky.md §1`. Ver `execution-mode-evaluation` para cache TTL.
+
 ## The Iron Law
 
 ```

package/dist/cli.js

@@ -186,7 +186,7 @@ var require_picocolors = __commonJS(function(exports, module) {
 });
 
 // src/security.ts
-import { createHash } from "crypto";
+import { createHash } from "node:crypto";
 function validateFilePath(filePath) {
   if (filePath.includes("..") || filePath.startsWith("/") || filePath.startsWith("\\") || /^[a-zA-Z]:/.test(filePath)) {
     throw new Error(`Ruta de archivo inválida: "${filePath}"`);
@@ -621,31 +621,31 @@ var init_fs = __esm(() => {
 var manifest_default;
 var init_manifest = __esm(() => {
   manifest_default = {
-    version: "0.8.7",
+    version: "0.8.8",
     repo: "JaimeHoracio/Ostacky",
-    tag: "v0.8.7",
+    tag: "v0.8.8",
     agents: [
       {
         name: "ostacky",
         file: "assets/agents/ostacky.md",
-        description: "Orquestador con recuperación automática (nunca se congela), ruteo por nivel de impacto, controller MCP con SDK oficial, edición segura con fallback inline, y delegación en OpenSpec + Superpowers. v0.8.7: prune de skills obsoletas, lastHandoff, getAvailableTransitions, consecutiveFailures real, mem_session_summary automático al cierre.",
-        version: "0.8.7",
-        sha256: "191a317be68bde517f6d3877ec3a016720617d7382944fff0d08d31b985a6644"
+        description: "Orquestador con recuperación automática (nunca se congela), ruteo por nivel de impacto, controller MCP con SDK oficial, edición segura con fallback inline, y delegación en OpenSpec + Superpowers. v0.8.8: prune de skills obsoletas, lastHandoff, getAvailableTransitions, consecutiveFailures real, mem_session_summary automático al cierre.",
+        version: "0.8.8",
+        sha256: "bac9b7bc91d9d958bee8c6b2e094b1e1124bcc7f3e23cd13769ebbc5766f4747"
       }
     ],
     commands: [
       {
         name: "install-stack",
         file: "assets/commands/install-stack.md",
-        description: "Instala el stack tecnológico del proyecto (CodeGraph, skills, OpenSpec, Engram, controller plugin). v0.8.7: controller plugin como alma hard-gate, Context7 removido del stack.",
-        version: "0.8.7",
-        sha256: "315d8fcdf2a945cef863bb4576838f95d7eb4a0acca38c12575dc80ecc4724dc"
+        description: "Instala el stack tecnológico del proyecto (CodeGraph, skills, OpenSpec, Engram, controller plugin). v0.8.8: controller plugin como alma hard-gate, Context7 removido del stack.",
+        version: "0.8.8",
+        sha256: "28ddf7ac8a2472faa1a5dbd14e22bc11e0b8715971907b3fab739b9933aa7dad"
       },
       {
         name: "opsx-sync",
         file: "assets/commands/opsx-sync.md",
         description: "Sincroniza delta specs del change activo sin inicializar CodeGraph si ya existe índice",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "fe0158478f2ca63b315037a85fc1632b77868532e319af6c7384285441767d64"
       }
     ],
@@ -653,15 +653,15 @@ var init_manifest = __esm(() => {
       {
         name: "ostacky-controller",
         file: "assets/mcp/ostacky-controller/",
-        description: "Máquina de estados persistida con @modelcontextprotocol/server SDK. v0.8.7: 22 tools (incluye set_handoff, get_handoff, clear_handoff, get_available_transitions funcional). Bugfixes: consecutiveFailures real, lastHandoff state, defaultChoice persistido. Robustez: degraded mode automático tras 3 fallos, persistence condicional para Nivel 0, prune de skills obsoletas.",
-        version: "0.8.7",
-        sha256: "9de463763ea6538c03b9307e7e36dcd2ae854dcc460bd25981e75f4f70df0e66"
+        description: "Máquina de estados persistida con @modelcontextprotocol/server SDK. v0.8.8: 22 tools (incluye set_handoff, get_handoff, clear_handoff, get_available_transitions funcional). Bugfixes: consecutiveFailures real, lastHandoff state, defaultChoice persistido. Robustez: degraded mode automático tras 3 fallos, persistence condicional para Nivel 0, prune de skills obsoletas.",
+        version: "0.8.8",
+        sha256: "a1d9744ffe70e976c7c96343bf101c1dedf615b27058559a376c0e559a341328"
       },
       {
         name: "openspec",
         file: "assets/mcp/openspec/",
         description: "MCP server local para OpenSpec - proposal, apply, archive, sync de cambios",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "fa4be28bfc1e75db8f1a037e2580f04a60066c80e8e5934e90e1041020d04609"
       }
     ],
@@ -670,105 +670,105 @@ var init_manifest = __esm(() => {
         name: "brainstorming",
         file: "assets/skills/brainstorming/SKILL.md",
         description: "Skill unificado de pensamiento con dos modos: creative-design (producción de diseño → transición a implementación directa o openspec-propose) y open-exploration (exploración libre)",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "f1013a86a8f27914d85a716e23c7fd32db1786d93615e8b0834b13d184308549"
       },
       {
         name: "execution-mode-evaluation",
         file: "assets/skills/execution-mode-evaluation/SKILL.md",
         description: "Skill de análisis de modo de ejecución — output reconciliado con controller snapshot contract (recommendation field)",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "2158a6864c0912e868a9d720db7fd79441e6cc298e3320833d2527c9727c852e"
       },
       {
         name: "tdd",
         file: "assets/skills/tdd/SKILL.md",
         description: "Skill de test-driven development (Superpowers)",
-        version: "0.8.7",
-        sha256: "aa412298980b7826165c211145c1b8e9135f68f36247bb3cb96d0a0eae274486"
+        version: "0.8.8",
+        sha256: "f0ebfbbc43a8868d31a3fd2df37ae7f60fe8add09c6475862395a68269e5ff7f"
       },
       {
         name: "subagent-driven-development",
         file: "assets/skills/subagent-driven-development/SKILL.md",
         description: "Skill de ejecución con subagentes (Superpowers) — ejecuta solo después de confirmación del coordinador Ostacky",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "1a42d714a9a13faf05f0bf7b580e8d837c2e77a5633839542ccce603023419e8"
       },
       {
         name: "dispatching-parallel-agents",
         file: "assets/skills/dispatching-parallel-agents/SKILL.md",
         description: "Skill de dispatch paralelo de agentes (Superpowers)",
-        version: "0.8.7",
-        sha256: "3c8a66d51ae2e719e877d02c3dac32bd804722c3bb9227c258ecae78252a20ab"
+        version: "0.8.8",
+        sha256: "7e7b712ef742d5631e302e6a71583e2bbbd33094da9281abfb84b43505fc3ef1"
       },
       {
         name: "review",
         file: "assets/skills/review/SKILL.md",
         description: "Skill de revisión de código (Superpowers)",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "b19650ed4d1d4d9857a4dd5b7e08e91328a1a1fc9c45bcc2fb600fa9d0213279"
       },
       {
         name: "receiving-code-review",
         file: "assets/skills/receiving-code-review/SKILL.md",
         description: "Skill de recibir y procesar feedback de code review",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "d761e884e71d8d3476ac734d287cae403a4024506a7d12e7361a448217c0a831"
       },
       {
         name: "openspec-propose",
         file: "assets/skills/openspec-propose/SKILL.md",
         description: "Skill de generación de proposal (OpenSpec)",
-        version: "0.8.7",
-        sha256: "bb59100b9fd3c9f9a1ec6509fa975ec55bf7fc737df4fe73bb3e9bbc217b83f7"
+        version: "0.8.8",
+        sha256: "6a517f750f24c008208156a2d653e97ed30b1e53878aeac5ce394e573db0678f"
       },
       {
         name: "openspec-apply-change",
         file: "assets/skills/openspec-apply-change/SKILL.md",
         description: "Skill de aplicación de change (OpenSpec)",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "dfc823bf89fc7505e91ab6dee9c1f004be38a410bd3d88fb67b211b1b6cbb1d0"
       },
       {
         name: "openspec-archive-change",
         file: "assets/skills/openspec-archive-change/SKILL.md",
         description: "Skill de archivo de change (OpenSpec)",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "16e4b561de7747283663fed602e506abf502452c49a8d4b86d7a5539c40f0195"
       },
       {
         name: "openspec-explore",
         file: "assets/skills/openspec-explore/SKILL.md",
         description: "Modo explore para OpenSpec — thinking partner para explorar ideas, investigar problemas y clarificar requisitos antes/durante un cambio",
-        version: "0.8.7",
-        sha256: "37ae4aaf17ea71a395bab6dc4d9d61b9a49d7910f6692535ae8553244c46880b"
+        version: "0.8.8",
+        sha256: "9eafc3a8c693b8d9916867ef764d49e5222da717fde501c957bb3f6c312d2415"
       },
       {
         name: "using-git-worktrees",
         file: "assets/skills/using-git-worktrees/SKILL.md",
         description: "Skill de uso de git worktrees para aislamiento de trabajo",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "93341bc1b7c053618a8b6dc07e3615b77990d7b549a0201f5835d95fef67ce13"
       },
       {
         name: "using-superpowers",
         file: "assets/skills/using-superpowers/SKILL.md",
         description: "Skill de orquestación de Superpowers skills",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "7e54536f96d2a379185a10bfc1e970850caa2561b6d8aca7080f0defea0381a4"
       },
       {
         name: "writing-skills",
         file: "assets/skills/writing-skills/SKILL.md",
         description: "Skill de creación y edición de skills",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "3d76b906cee518a2b809febb70db95697a35b9f368986bb504b4120c3bfb437a"
       },
       {
         name: "graceful-degradation",
         file: "assets/skills/graceful-degradation/SKILL.md",
         description: "Skill de degradación graceful cuando múltiples tools están indisponibles",
-        version: "0.8.7",
+        version: "0.8.8",
         sha256: "363449bd9e6f800a0a3168667cf78f767fb105d86e4a4adadcc649d418139303"
       }
     ]
@@ -1155,6 +1155,8 @@ function copyEngramPlugin(projectRoot) {
 function copyOstackyControllerPlugin(projectRoot) {
   const pluginSource = join7(PACKAGE_ROOT, "assets", "plugins", "ostacky-plugin.ts");
   const coreSource = join7(PACKAGE_ROOT, "assets", "plugins", "controller-core.ts");
+  const securitySource = join7(PACKAGE_ROOT, "assets", "plugins", "security.ts");
+  const tieredSource = join7(PACKAGE_ROOT, "assets", "plugins", "tiered.ts");
   const pluginsDir = join7(projectRoot, ".opencode", "plugins");
   if (!existsSync6(pluginSource)) {
     throw new Error(`Plugin bundleado de OstackyController no encontrado: ${pluginSource}`);
@@ -1163,6 +1165,10 @@ function copyOstackyControllerPlugin(projectRoot) {
   copyFileSync3(pluginSource, join7(pluginsDir, "ostacky-plugin.ts"));
   if (existsSync6(coreSource))
     copyFileSync3(coreSource, join7(pluginsDir, "controller-core.ts"));
+  if (existsSync6(securitySource))
+    copyFileSync3(securitySource, join7(pluginsDir, "security.ts"));
+  if (existsSync6(tieredSource))
+    copyFileSync3(tieredSource, join7(pluginsDir, "tiered.ts"));
 }
 function buildEngramDownloadUrl(tag, platform = process.platform, arch = process.arch) {
   const target = getEngramReleaseTarget(platform, arch);
@@ -1492,14 +1498,14 @@ var init_stack = __esm(() => {
 // package.json
 var package_default = {
   name: "ostacky",
-  version: "0.8.7",
+  version: "0.8.8",
   description: "Instalador interactivo de agentes y comandos para OpenCode",
   type: "module",
   bin: {
     ostacky: "./dist/cli.js"
   },
   scripts: {
-    prebuild: "bun run scripts/sync-version.ts",
+    prebuild: "bun run scripts/sync-version.ts && bun run scripts/sync-controller-core.ts",
     dev: "bun run src/cli.ts",
     build: "bun build src/cli.ts --target=node --format=esm --outfile dist/cli.js && bun scripts/add-shebang.ts",
     start: "node dist/cli.js",
@@ -1510,7 +1516,7 @@ var package_default = {
     "hash:update": "bun run scripts/update-manifest-hashes.ts",
     "manifest:prepare": "bun run scripts/update-manifest-hashes.ts",
     "manifest:check": "bun run scripts/update-manifest-hashes.ts --check",
-    prepublishOnly: "bun run manifest:prepare && bun run build"
+    prepublishOnly: "bun run scripts/sync-controller-core.ts && bun run manifest:prepare && bun run build"
   },
   files: [
     "dist/",
@@ -2669,7 +2675,7 @@ async function probeMcpServer(nodeExecutable, serverPath, cwd, statePath, option
         params: {
           protocolVersion: "2025-03-26",
           capabilities: {},
-          clientInfo: { name: "ostacky-installer", version: "0.8.7" }
+          clientInfo: { name: "ostacky-installer", version: "0.8.8" }
         }
       });
     });
@@ -2978,7 +2984,15 @@ function uninstallAll(paths) {
   for (const name of Object.keys(lockfile.mcpServers ?? {})) {
     uninstallMcpServer(name, paths);
   }
-  const ostackyPlugins = ["ostacky-plugin.ts", "engram.ts", "ostacky-guard.ts", "ostacky-controller.ts"];
+  const ostackyPlugins = [
+    "ostacky-plugin.ts",
+    "engram.ts",
+    "ostacky-guard.ts",
+    "ostacky-controller.ts",
+    "controller-core.ts",
+    "security.ts",
+    "tiered.ts"
+  ];
   for (const file of ostackyPlugins) {
     const fp = join6(paths.plugins, file);
     if (existsSync5(fp)) {
@@ -4347,6 +4361,8 @@ async function runDoctorCommand() {
         console.log(`⚠️ degraded: confirmation not audited in controller (degradedEditsCount=${parsed.degradedEditsCount})`);
       if (parsed.codegraphBypassCount > 0)
         console.log(`⚠️ codegraphBypassCount=${parsed.codegraphBypassCount} (inefficient: codegraph bypass)`);
+      if (parsed.engramBypassCount > 0)
+        console.log(`⚠️ engramBypassCount=${parsed.engramBypassCount} (contradiction check bypassed — sin mem_search)`);
       if (parsed.stateOversizedCount > 0)
         console.log(`⚠️ stateOversizedCount=${parsed.stateOversizedCount} snapshots perdidos`);
       if (parsed.sensitiveAccess)

package/manifest.json

@@ -1,29 +1,29 @@
 {
-  "version": "0.8.7",
+  "version": "0.8.8",
   "repo": "JaimeHoracio/Ostacky",
-  "tag": "v0.8.7",
+  "tag": "v0.8.8",
   "agents": [
     {
       "name": "ostacky",
       "file": "assets/agents/ostacky.md",
-      "description": "Orquestador con recuperación automática (nunca se congela), ruteo por nivel de impacto, controller MCP con SDK oficial, edición segura con fallback inline, y delegación en OpenSpec + Superpowers. v0.8.7: prune de skills obsoletas, lastHandoff, getAvailableTransitions, consecutiveFailures real, mem_session_summary automático al cierre.",
-      "version": "0.8.7",
-      "sha256": "191a317be68bde517f6d3877ec3a016720617d7382944fff0d08d31b985a6644"
+      "description": "Orquestador con recuperación automática (nunca se congela), ruteo por nivel de impacto, controller MCP con SDK oficial, edición segura con fallback inline, y delegación en OpenSpec + Superpowers. v0.8.8: prune de skills obsoletas, lastHandoff, getAvailableTransitions, consecutiveFailures real, mem_session_summary automático al cierre.",
+      "version": "0.8.8",
+      "sha256": "bac9b7bc91d9d958bee8c6b2e094b1e1124bcc7f3e23cd13769ebbc5766f4747"
     }
   ],
   "commands": [
     {
       "name": "install-stack",
       "file": "assets/commands/install-stack.md",
-      "description": "Instala el stack tecnológico del proyecto (CodeGraph, skills, OpenSpec, Engram, controller plugin). v0.8.7: controller plugin como alma hard-gate, Context7 removido del stack.",
-      "version": "0.8.7",
-      "sha256": "315d8fcdf2a945cef863bb4576838f95d7eb4a0acca38c12575dc80ecc4724dc"
+      "description": "Instala el stack tecnológico del proyecto (CodeGraph, skills, OpenSpec, Engram, controller plugin). v0.8.8: controller plugin como alma hard-gate, Context7 removido del stack.",
+      "version": "0.8.8",
+      "sha256": "28ddf7ac8a2472faa1a5dbd14e22bc11e0b8715971907b3fab739b9933aa7dad"
     },
     {
       "name": "opsx-sync",
       "file": "assets/commands/opsx-sync.md",
       "description": "Sincroniza delta specs del change activo sin inicializar CodeGraph si ya existe índice",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "fe0158478f2ca63b315037a85fc1632b77868532e319af6c7384285441767d64"
     }
   ],
@@ -31,15 +31,15 @@
     {
       "name": "ostacky-controller",
       "file": "assets/mcp/ostacky-controller/",
-      "description": "Máquina de estados persistida con @modelcontextprotocol/server SDK. v0.8.7: 22 tools (incluye set_handoff, get_handoff, clear_handoff, get_available_transitions funcional). Bugfixes: consecutiveFailures real, lastHandoff state, defaultChoice persistido. Robustez: degraded mode automático tras 3 fallos, persistence condicional para Nivel 0, prune de skills obsoletas.",
-      "version": "0.8.7",
-      "sha256": "9de463763ea6538c03b9307e7e36dcd2ae854dcc460bd25981e75f4f70df0e66"
+      "description": "Máquina de estados persistida con @modelcontextprotocol/server SDK. v0.8.8: 22 tools (incluye set_handoff, get_handoff, clear_handoff, get_available_transitions funcional). Bugfixes: consecutiveFailures real, lastHandoff state, defaultChoice persistido. Robustez: degraded mode automático tras 3 fallos, persistence condicional para Nivel 0, prune de skills obsoletas.",
+      "version": "0.8.8",
+      "sha256": "a1d9744ffe70e976c7c96343bf101c1dedf615b27058559a376c0e559a341328"
     },
     {
       "name": "openspec",
       "file": "assets/mcp/openspec/",
       "description": "MCP server local para OpenSpec - proposal, apply, archive, sync de cambios",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "fa4be28bfc1e75db8f1a037e2580f04a60066c80e8e5934e90e1041020d04609"
     }
   ],
@@ -48,105 +48,105 @@
       "name": "brainstorming",
       "file": "assets/skills/brainstorming/SKILL.md",
       "description": "Skill unificado de pensamiento con dos modos: creative-design (producción de diseño → transición a implementación directa o openspec-propose) y open-exploration (exploración libre)",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "f1013a86a8f27914d85a716e23c7fd32db1786d93615e8b0834b13d184308549"
     },
     {
       "name": "execution-mode-evaluation",
       "file": "assets/skills/execution-mode-evaluation/SKILL.md",
       "description": "Skill de análisis de modo de ejecución — output reconciliado con controller snapshot contract (recommendation field)",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "2158a6864c0912e868a9d720db7fd79441e6cc298e3320833d2527c9727c852e"
     },
     {
       "name": "tdd",
       "file": "assets/skills/tdd/SKILL.md",
       "description": "Skill de test-driven development (Superpowers)",
-      "version": "0.8.7",
-      "sha256": "aa412298980b7826165c211145c1b8e9135f68f36247bb3cb96d0a0eae274486"
+      "version": "0.8.8",
+      "sha256": "f0ebfbbc43a8868d31a3fd2df37ae7f60fe8add09c6475862395a68269e5ff7f"
     },
     {
       "name": "subagent-driven-development",
       "file": "assets/skills/subagent-driven-development/SKILL.md",
       "description": "Skill de ejecución con subagentes (Superpowers) — ejecuta solo después de confirmación del coordinador Ostacky",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "1a42d714a9a13faf05f0bf7b580e8d837c2e77a5633839542ccce603023419e8"
     },
     {
       "name": "dispatching-parallel-agents",
       "file": "assets/skills/dispatching-parallel-agents/SKILL.md",
       "description": "Skill de dispatch paralelo de agentes (Superpowers)",
-      "version": "0.8.7",
-      "sha256": "3c8a66d51ae2e719e877d02c3dac32bd804722c3bb9227c258ecae78252a20ab"
+      "version": "0.8.8",
+      "sha256": "7e7b712ef742d5631e302e6a71583e2bbbd33094da9281abfb84b43505fc3ef1"
     },
     {
       "name": "review",
       "file": "assets/skills/review/SKILL.md",
       "description": "Skill de revisión de código (Superpowers)",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "b19650ed4d1d4d9857a4dd5b7e08e91328a1a1fc9c45bcc2fb600fa9d0213279"
     },
     {
       "name": "receiving-code-review",
       "file": "assets/skills/receiving-code-review/SKILL.md",
       "description": "Skill de recibir y procesar feedback de code review",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "d761e884e71d8d3476ac734d287cae403a4024506a7d12e7361a448217c0a831"
     },
     {
       "name": "openspec-propose",
       "file": "assets/skills/openspec-propose/SKILL.md",
       "description": "Skill de generación de proposal (OpenSpec)",
-      "version": "0.8.7",
-      "sha256": "bb59100b9fd3c9f9a1ec6509fa975ec55bf7fc737df4fe73bb3e9bbc217b83f7"
+      "version": "0.8.8",
+      "sha256": "6a517f750f24c008208156a2d653e97ed30b1e53878aeac5ce394e573db0678f"
     },
     {
       "name": "openspec-apply-change",
       "file": "assets/skills/openspec-apply-change/SKILL.md",
       "description": "Skill de aplicación de change (OpenSpec)",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "dfc823bf89fc7505e91ab6dee9c1f004be38a410bd3d88fb67b211b1b6cbb1d0"
     },
     {
       "name": "openspec-archive-change",
       "file": "assets/skills/openspec-archive-change/SKILL.md",
       "description": "Skill de archivo de change (OpenSpec)",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "16e4b561de7747283663fed602e506abf502452c49a8d4b86d7a5539c40f0195"
     },
     {
       "name": "openspec-explore",
       "file": "assets/skills/openspec-explore/SKILL.md",
       "description": "Modo explore para OpenSpec — thinking partner para explorar ideas, investigar problemas y clarificar requisitos antes/durante un cambio",
-      "version": "0.8.7",
-      "sha256": "37ae4aaf17ea71a395bab6dc4d9d61b9a49d7910f6692535ae8553244c46880b"
+      "version": "0.8.8",
+      "sha256": "9eafc3a8c693b8d9916867ef764d49e5222da717fde501c957bb3f6c312d2415"
     },
     {
       "name": "using-git-worktrees",
       "file": "assets/skills/using-git-worktrees/SKILL.md",
       "description": "Skill de uso de git worktrees para aislamiento de trabajo",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "93341bc1b7c053618a8b6dc07e3615b77990d7b549a0201f5835d95fef67ce13"
     },
     {
       "name": "using-superpowers",
       "file": "assets/skills/using-superpowers/SKILL.md",
       "description": "Skill de orquestación de Superpowers skills",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "7e54536f96d2a379185a10bfc1e970850caa2561b6d8aca7080f0defea0381a4"
     },
     {
       "name": "writing-skills",
       "file": "assets/skills/writing-skills/SKILL.md",
       "description": "Skill de creación y edición de skills",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "3d76b906cee518a2b809febb70db95697a35b9f368986bb504b4120c3bfb437a"
     },
     {
       "name": "graceful-degradation",
       "file": "assets/skills/graceful-degradation/SKILL.md",
       "description": "Skill de degradación graceful cuando múltiples tools están indisponibles",
-      "version": "0.8.7",
+      "version": "0.8.8",
       "sha256": "363449bd9e6f800a0a3168667cf78f767fb105d86e4a4adadcc649d418139303"
     }
   ]

package/package.json

@@ -1,13 +1,13 @@
 {
     "name": "ostacky",
-    "version": "0.8.7",
+    "version": "0.8.8",
     "description": "Instalador interactivo de agentes y comandos para OpenCode",
     "type": "module",
     "bin": {
         "ostacky": "./dist/cli.js"
     },
     "scripts": {
-        "prebuild": "bun run scripts/sync-version.ts",
+        "prebuild": "bun run scripts/sync-version.ts && bun run scripts/sync-controller-core.ts",
         "dev": "bun run src/cli.ts",
         "build": "bun build src/cli.ts --target=node --format=esm --outfile dist/cli.js && bun scripts/add-shebang.ts",
         "start": "node dist/cli.js",
@@ -18,7 +18,7 @@
         "hash:update": "bun run scripts/update-manifest-hashes.ts",
         "manifest:prepare": "bun run scripts/update-manifest-hashes.ts",
         "manifest:check": "bun run scripts/update-manifest-hashes.ts --check",
-        "prepublishOnly": "bun run manifest:prepare && bun run build"
+        "prepublishOnly": "bun run scripts/sync-controller-core.ts && bun run manifest:prepare && bun run build"
     },
     "files": [
         "dist/",