sinapse-ai 1.11.3 → 1.12.1

package/bin/commands/install.js

@@ -155,7 +155,7 @@ async function cmdInstallGlobal(opts = {}) {
   if (squads.length === 0) {
     logger.error(`${RED}Erro: nenhum diretório de squad encontrado no pacote.${NC}`);
     logger.error(`Tente reinstalar: ${CYAN}npm install -g sinapse-ai${NC}`);
-    logger.error(`Se persistir, abra um issue: https://github.com/caioimori/sinapse-ai/issues`);
+    logger.error('Se persistir, abra um issue: https://github.com/caioimori/sinapse-ai/issues');
     process.exit(1);
   }
 
@@ -275,7 +275,7 @@ async function cmdInstallGlobal(opts = {}) {
     for (const f of fs.readdirSync(CLAUDE_COMMANDS_DIR)) {
       fs.unlinkSync(path.join(CLAUDE_COMMANDS_DIR, f));
     }
-  } catch {}
+  } catch { /* dir may not exist on a fresh install */ }
 
   const sinapseBase = toForwardSlash(SINAPSE_HOME);
   const writtenAgents = new Set();
@@ -622,13 +622,13 @@ function generateCommandMd(agentId, agentName, agentIcon, squadName, squadPath,
     ? `4. Briefing-on-activation check (this agent is an ORCHESTRATOR):
    - If user provided briefing/context with the activation → proceed IMMEDIATELY: absorb → diagnose → plan with phases + agents + handoffs → execute (YOLO). NEVER ask "do you want me to plan?".
    - If bare activation only → await briefing. On receipt, apply same flow automatically.`
-    : `4. HALT and await user input`;
+    : '4. HALT and await user input';
 
   const step6 = isOrchestrator
     ? `6. Briefing-on-activation check (ORCHESTRATOR):
    - If user provided briefing → proceed IMMEDIATELY: absorb → diagnose → plan → execute
    - If bare activation → await briefing, then plan automatically. NEVER ask "do you want me to plan?".`
-    : `6. HALT and await user input`;
+    : '6. HALT and await user input';
 
   // Frontmatter (name + description) is REQUIRED so the file resolves as a Claude Code
   // subagent (@id) — without it, @id matches nothing. The same file doubles as a slash
@@ -754,7 +754,7 @@ See \`.claude/rules/squad-awareness.md\` for the full delegation map.
     try {
       const orqxFile = fs.readdirSync(sAgentsDir).find(f => f.endsWith('-orqx.md'));
       if (orqxFile) orqxName = orqxFile.replace('.md', '');
-    } catch {}
+    } catch { /* fall back to the derived orqx name */ }
     return `| ${s.name} | @${orqxName} | ${s.agents} agents, ${s.tasks} tasks |`;
   }).join('\n');
 
@@ -828,12 +828,12 @@ exec claude --add-dir "${sinapsePathForBash}" --agent sinapse-orqx "$@"
 `;
   const bashPath = path.join(BIN_DIR, 'sinapse');
   fs.writeFileSync(bashPath, bashLauncher);
-  try { fs.chmodSync(bashPath, 0o755); } catch {}
+  try { fs.chmodSync(bashPath, 0o755); } catch { /* chmod is best-effort (no-op on non-POSIX) */ }
   logger.always(`  ${GREEN}OK${NC} ~/bin/sinapse`);
 
   // Windows CMD launcher
   if (IS_WIN) {
-    const cmdLauncher = `@echo off\r\nclaude --add-dir "%USERPROFILE%\\.sinapse" --agent sinapse-orqx %*\r\n`;
+    const cmdLauncher = '@echo off\r\nclaude --add-dir "%USERPROFILE%\\.sinapse" --agent sinapse-orqx %*\r\n';
     fs.writeFileSync(path.join(BIN_DIR, 'sinapse.cmd'), cmdLauncher);
     logger.always(`  ${GREEN}OK${NC} ~/bin/sinapse.cmd`);
   }

package/bin/commands/status.js

@@ -23,9 +23,9 @@ function verifyInstall() {
   const logger = getLogger();
   const checks = [
     [fs.existsSync(SINAPSE_HOME), `${getSquads(SINAPSE_HOME).length} squads in ~/.sinapse/`],
-    [fs.existsSync(CLAUDE_COMMANDS_DIR), `Commands in ~/.claude/commands/SINAPSE/agents/`],
-    [fs.existsSync(path.join(BIN_DIR, 'sinapse')), `Launcher at ~/bin/sinapse`],
-    [fs.existsSync(path.join(SINAPSE_HOME, '.claude', 'rules', 'squad-awareness.md')), `squad-awareness.md`],
+    [fs.existsSync(CLAUDE_COMMANDS_DIR), 'Commands in ~/.claude/commands/SINAPSE/agents/'],
+    [fs.existsSync(path.join(BIN_DIR, 'sinapse')), 'Launcher at ~/bin/sinapse'],
+    [fs.existsSync(path.join(SINAPSE_HOME, '.claude', 'rules', 'squad-awareness.md')), 'squad-awareness.md'],
   ];
 
   for (const [ok, msg] of checks) {

package/bin/modules/chrome-brain-installer.js

@@ -183,7 +183,7 @@ function removeHooks(settingsPath, matchers) {
 function sanitizeChromePath(chromePath) {
   // Validate Chrome path contains only safe characters to prevent shell injection
   const sanitized = chromePath.replace(/\\/g, '/');
-  if (!/^[a-zA-Z0-9\s/\-_.:()\[\]]+$/.test(sanitized)) {
+  if (!/^[a-zA-Z0-9\s/\-_.:()[\]]+$/.test(sanitized)) {
     throw new Error(`Unsafe Chrome path detected: ${chromePath}`);
   }
   return sanitized;
@@ -201,7 +201,7 @@ if command -v taskkill &>/dev/null; then
 elif command -v pgrep &>/dev/null; then
   pgrep -f "user-data-dir=$CHROME_DEBUG_PROFILE" 2>/dev/null | xargs kill 2>/dev/null || true
 fi`
-    : `pgrep -f "user-data-dir=$CHROME_DEBUG_PROFILE" 2>/dev/null | xargs kill 2>/dev/null || true`;
+    : 'pgrep -f "user-data-dir=$CHROME_DEBUG_PROFILE" 2>/dev/null | xargs kill 2>/dev/null || true';
 
   return `#!/bin/bash
 # Chrome Brain — chrome-ensure (auto-launch)
@@ -253,7 +253,7 @@ if command -v taskkill &>/dev/null; then
 elif command -v pgrep &>/dev/null; then
   pgrep -f "user-data-dir=$CHROME_DEBUG_PROFILE" 2>/dev/null | xargs kill 2>/dev/null || true
 fi`
-    : `pgrep -f "user-data-dir=$CHROME_DEBUG_PROFILE" 2>/dev/null | xargs kill 2>/dev/null || true`;
+    : 'pgrep -f "user-data-dir=$CHROME_DEBUG_PROFILE" 2>/dev/null | xargs kill 2>/dev/null || true';
 
   return `#!/bin/bash
 # Chrome Brain — chrome-debug (manual launch)

package/bin/postinstall.js

@@ -485,7 +485,7 @@ function renderFinalSummary(opts = {}) {
   }
   lines.push('');
   if (isGlobal) {
-    lines.push(`Próximo passo:`);
+    lines.push('Próximo passo:');
     lines.push(`  cd ${c.cyan}seu-projeto${c.reset}`);
     lines.push(`  ${c.cyan}sinapse install${c.reset}`);
   } else {

package/bin/sinapse-init.js

@@ -55,17 +55,19 @@ function spawnAsync(command, options = {}) {
   });
 }
 
-// ASCII Art Banner (Clean blocky style like reference image)
-const BANNER = chalk.cyan(`
-  █████╗ ██╗ ██████╗ ███████╗      ███████╗██╗   ██╗██╗     ██╗     ███████╗████████╗ █████╗  ██████╗██╗  ██╗
- ██╔══██╗██║██╔═══██╗██╔════╝      ██╔════╝██║   ██║██║     ██║     ██╔════╝╚══██╔══╝██╔══██╗██╔════╝██║ ██╔╝
- ███████║██║██║   ██║███████╗█████╗█████╗  ██║   ██║██║     ██║     ███████╗   ██║   ███████║██║     █████╔╝
- ██╔══██║██║██║   ██║╚════██║╚════╝██╔══╝  ██║   ██║██║     ██║     ╚════██║   ██║   ██╔══██║██║     ██╔═██╗
- ██║  ██║██║╚██████╔╝███████║      ██║     ╚██████╔╝███████╗███████╗███████║   ██║   ██║  ██║╚██████╗██║  ██╗
- ╚═╝  ╚═╝╚═╝ ╚═════╝ ╚══════╝      ╚═╝      ╚═════╝ ╚══════╝╚══════╝╚══════╝   ╚═╝   ╚═╝  ╚═╝ ╚═════╝╚═╝  ╚═╝
+// ASCII Art Banner — canonical SNPS AI wordmark in white (matches bin/lib/header.js).
+// Kept in sync with the live banner so the legacy fallback installer never shows
+// off-brand art (this banner predated the SINAPSE rebrand).
+const BANNER = chalk.white.bold(`
+ ███████╗███╗   ██╗██████╗ ███████╗     █████╗ ██╗
+ ██╔════╝████╗  ██║██╔══██╗██╔════╝    ██╔══██╗██║
+ ███████╗██╔██╗ ██║██████╔╝███████╗    ███████║██║
+ ╚════██║██║╚██╗██║██╔═══╝ ╚════██║    ██╔══██║██║
+ ███████║██║ ╚████║██║     ███████║    ██║  ██║██║
+ ╚══════╝╚═╝  ╚═══╝╚═╝     ╚══════╝    ╚═╝  ╚═╝╚═╝
 `);
 
-const SUBTITLE = chalk.magenta('Universal AI Agent Framework for Any Domain');
+const SUBTITLE = chalk.dim('Seu copiloto de inteligencia artificial');
 // Read version from package.json dynamically
 const packageJsonVersion = require(path.join(__dirname, '..', 'package.json')).version;
 const VERSION = chalk.yellow(`Installer v${packageJsonVersion}`);

package/bin/sinapse.js

@@ -548,7 +548,7 @@ function findClaudeCliPath() {
   try {
     const npmRoot = execSync('npm root -g', { encoding: 'utf8' }).trim();
     candidates.unshift(path.join(npmRoot, '@anthropic-ai/claude-code/cli.js'));
-  } catch {}
+  } catch { /* npm root -g may be unavailable; fall through to other candidates */ }
   for (const p of candidates) {
     if (fs.existsSync(p)) return p;
   }

package/bin/utils/framework-guard.js

@@ -54,6 +54,7 @@ function globToRegex(glob) {
   pattern = pattern.replace(/\*/g, '[^/]+');
 
   // 4. Restore ** placeholder to any-depth matcher
+  // eslint-disable-next-line no-control-regex -- internal placeholder char (set above), never user input
   pattern = pattern.replace(/\u0000/g, '.+');
 
   // If pattern ends with .+ (was **), match prefix

package/bin/utils/staged-protected-files-guard.js

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+'use strict';
+
+/**
+ * staged-protected-files-guard — blocks a commit that DELETES (or untracks) a
+ * protected, committed-but-critical framework file.
+ *
+ * Why: on 2026-06-20 a "snapshot migracao notebook" sweep (`git add -A`) untracked
+ * `.sinapse-ai/core/registry/service-registry.json` (the committed registry drift
+ * detector, ~12k lines), bundled it with unrelated work, and pushed it. The
+ * framework-boundary guard is a no-op in contributor mode
+ * (boundary.frameworkProtection=false), so nothing stopped the deletion. This guard
+ * is ALWAYS on and narrowly targets that class of damage — it never touches normal
+ * edits, only the removal of a curated set of protected paths.
+ *
+ * Intentional removal (done in a story) bypasses with: git commit --no-verify
+ *
+ * Self-contained: Node built-ins + `git` only (matches the other lib guards so it
+ * bundles into <hooksDir>/lib/ with no extra deps).
+ */
+
+const { spawnSync } = require('child_process');
+
+// Curated, high-signal list. Keep small to guarantee zero false positives on
+// normal work. These files are committed on purpose and must never be removed by
+// an automated sweep without an explicit story.
+const PROTECTED = ['.sinapse-ai/core/registry/service-registry.json'];
+
+function stagedDeletions() {
+  // --no-renames forces a rename-away of a protected file to surface as a real
+  // deletion (D) of the old path, so moving the file out also trips the guard.
+  const res = spawnSync('git', ['diff', '--cached', '--name-status', '--no-renames'], {
+    encoding: 'utf8',
+  });
+  if (!res || res.status !== 0 || typeof res.stdout !== 'string') return [];
+  const deleted = [];
+  for (const line of res.stdout.split('\n')) {
+    if (!line) continue;
+    const parts = line.split('\t');
+    const status = parts[0];
+    const file = (parts[parts.length - 1] || '').replace(/\\/g, '/');
+    if (status === 'D') deleted.push(file);
+  }
+  return deleted;
+}
+
+const offenders = stagedDeletions().filter((f) => PROTECTED.includes(f));
+
+if (offenders.length > 0) {
+  process.stderr.write(
+    'SINAPSE Protected Files: blocking commit — it deletes/untracks a protected file:\n',
+  );
+  for (const f of offenders) process.stderr.write('  - ' + f + '\n');
+  process.stderr.write(
+    '\nThese files are committed on purpose (e.g. service-registry.json is the registry\n' +
+      'drift detector). They must not be removed by an automated sweep (git add -A) or a\n' +
+      'machine-migration snapshot. If this removal is intentional, do it in a story and\n' +
+      'bypass once with:  git commit --no-verify\n',
+  );
+  process.exit(1);
+}
+
+process.exit(0);

package/package.json

@@ -1,12 +1,23 @@
 {
   "name": "sinapse-ai",
-  "version": "1.11.3",
+  "version": "1.12.1",
   "description": "SINAPSE AI: Framework de orquestracao de IA — 17 squads, 172 agentes especializados",
   "bin": {
     "sinapse": "bin/sinapse.js",
     "sinapse-ai": "bin/cli.js",
     "sinapse-delegate": "bin/sinapse-delegate.js"
   },
+  "main": ".sinapse-ai/index.js",
+  "module": ".sinapse-ai/index.esm.js",
+  "types": ".sinapse-ai/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./.sinapse-ai/index.d.ts",
+      "default": "./.sinapse-ai/index.js"
+    },
+    "./package.json": "./package.json",
+    "./*": "./*"
+  },
   "preferGlobal": false,
   "workspaces": [
     "packages/*"
@@ -16,6 +27,8 @@
     "scripts/",
     "packages/",
     ".sinapse-ai/",
+    "!.sinapse-ai/node_modules",
+    "!**/node_modules/**",
     ".claude/CLAUDE.md",
     ".claude/rules/",
     ".claude/hooks/",
@@ -139,6 +152,7 @@
     "cli-progress": "^3.12.0",
     "commander": "^12.1.0",
     "cross-spawn": "^7.0.6",
+    "diff": "^5.2.0",
     "execa": "^5.1.1",
     "fast-glob": "^3.3.3",
     "fs-extra": "^11.3.2",
@@ -178,6 +192,9 @@
     "url": "https://github.com/caioimori/sinapse-ai/issues"
   },
   "homepage": "https://github.com/caioimori/sinapse-ai#readme",
+  "publishConfig": {
+    "access": "public"
+  },
   "engines": {
     "node": ">=18.0.0",
     "npm": ">=9.0.0"
@@ -216,7 +233,7 @@
     ]
   },
   "overrides": {
-    "diff": "^8.0.3",
+    "diff": "^5.2.0",
     "serialize-javascript": "^7.0.5",
     "picomatch": "^4.0.4",
     "brace-expansion": "^5.0.6",

package/packages/installer/src/index.js

@@ -19,7 +19,7 @@ if (require.main === module) {
   Promise.resolve()
     .then(() => wizard.runWizard())
     .catch((error) => {
-      // eslint-disable-next-line no-console
+       
       console.error('Installer failed:', error && error.message ? error.message : error);
       process.exit(1);
     });

package/packages/installer/src/installer/brownfield-upgrader.js

@@ -287,7 +287,7 @@ async function applyUpgrade(report, sourceDir, targetDir, options = {}) {
             result.mergeWarnings = result.mergeWarnings || [];
             for (const conflict of conflicts) {
               result.mergeWarnings.push(
-                `core-config.yaml: ${conflict.identifier} — ${conflict.reason}`
+                `core-config.yaml: ${conflict.identifier} — ${conflict.reason}`,
               );
             }
           }

package/packages/installer/src/installer/git-hooks-installer.js

@@ -67,6 +67,9 @@ const SCANNER_SOURCES = [
   { from: path.join(BIN_UTILS, 'staged-sql-guard.js'), to: 'staged-sql-guard.js' },
   // --- framework boundary guard (FASE C; respects boundary.frameworkProtection) ---
   { from: path.join(BIN_UTILS, 'framework-guard.js'), to: 'framework-guard.js' },
+  // --- protected-files guard (always-on; blocks deletion/untrack of committed
+  // critical files like service-registry.json — anti git-add-A-sweep) ---
+  { from: path.join(BIN_UTILS, 'staged-protected-files-guard.js'), to: 'staged-protected-files-guard.js' },
 ];
 
 /**
@@ -173,13 +176,15 @@ function copyScannerLib(hooksDir) {
 /**
  * Build the content of the managed `pre-commit` Node hook.
  *
- * The hook runs THREE bundled guards in sequence (each a standalone module
+ * The hook runs FOUR bundled guards in sequence (each a standalone module
  * under ./lib that exits non-zero on a finding), then chains to a pre-existing
  * husky hook:
  *   1. staged-secret-scan.js  — secret/.env/private-key/entropy leak (fail-CLOSED)
  *   2. staged-sql-guard.js     — destructive DDL/DML (DROP/TRUNCATE/DELETE-no-WHERE)
  *   3. framework-guard.js      — L1/L2 boundary (no-op unless boundary
  *                                .frameworkProtection is true in core-config.yaml)
+ *   4. staged-protected-files-guard.js — always-on; blocks deletion/untrack of
+ *                                committed critical files (e.g. service-registry.json)
  *
  * Each guard is spawned as a child Node process (cwd = project root, where git
  * already runs hooks) so it gets the same staged index and reuses its own
@@ -209,13 +214,15 @@ const { spawnSync } = require('child_process');
 const projectRoot = process.cwd();
 const libDir = path.join(__dirname, 'lib');
 
-// --- 1-3. SINAPSE staged guards (each fail-CLOSED) ---------------------------
-// Order: secret scan, then destructive-SQL guard, then framework-boundary guard.
+// --- 1-4. SINAPSE staged guards (each fail-CLOSED) ---------------------------
+// Order: secret scan, destructive-SQL guard, framework-boundary guard, then
+// protected-files guard (always-on anti-sweep; does NOT respect frameworkProtection).
 // framework-guard self-disables when boundary.frameworkProtection is false.
 const GUARDS = [
   { file: 'staged-secret-scan.js', label: 'Secret Scan' },
   { file: 'staged-sql-guard.js',   label: 'SQL Guard' },
   { file: 'framework-guard.js',    label: 'Framework Boundary' },
+  { file: 'staged-protected-files-guard.js', label: 'Protected Files' },
 ];
 
 for (const guard of GUARDS) {

package/packages/installer/src/pro/pro-scaffolder.js

@@ -80,7 +80,7 @@ async function scaffoldProContent(targetDir, proSourceDir, options = {}) {
   // Validate pro source exists
   if (!await fs.pathExists(proSourceDir)) {
     result.errors.push(
-      `Pro package not found at ${proSourceDir}. Run "npm install @sinapse-fullstack/pro" first.`
+      `Pro package not found at ${proSourceDir}. Run "npm install @sinapse-fullstack/pro" first.`,
     );
     return result;
   }
@@ -160,7 +160,7 @@ async function scaffoldProContent(targetDir, proSourceDir, options = {}) {
       result.errors.push(`Rollback errors: ${rollbackResult.errors.join(', ')}`);
     }
     result.warnings.push(
-      `Scaffolding failed: ${error.message}. ${rollbackResult.removed} files cleaned up.`
+      `Scaffolding failed: ${error.message}. ${rollbackResult.removed} files cleaned up.`,
     );
   }
 
@@ -425,7 +425,7 @@ async function installSquadCommands(targetDir) {
       for (const agentFile of agentFiles) {
         await fs.copy(
           path.join(agentsDir, agentFile),
-          path.join(destDir, agentFile)
+          path.join(destDir, agentFile),
         );
         files.push(path.relative(targetDir, path.join(destDir, agentFile)).replace(/\\/g, '/'));
       }

package/packages/installer/src/wizard/ide-config-generator.js

@@ -182,7 +182,7 @@ function generateTemplateVariables(wizardState) {
  * @param {Object} ideConfig - IDE configuration object (optional, for special handling)
  * @returns {Promise<string[]>} List of copied files
  */
-async function copyAgentFiles(projectRoot, agentFolder, ideConfig = null) {
+async function copyAgentFiles(projectRoot, agentFolder, _ideConfig = null) {
   // v4: Agents are in development/agents/ (not root agents/)
   const sourceDir = path.join(__dirname, '..', '..', '..', '..', '.sinapse-ai', 'development', 'agents');
   const targetDir = path.join(projectRoot, agentFolder);

package/packages/installer/src/wizard/index.js

@@ -15,14 +15,9 @@ const { execSync } = require('child_process');
 const { colors } = require('../utils/sinapse-colors');
 const {
   getLanguageQuestion,
-  getUserProfileQuestion,
   getLLMQuestion,
-  getProjectTypeQuestion,
-  getIDEQuestions,
-  getTechPresetQuestion,
 } = require('./questions');
-const { setLanguage, t, tf } = require('./i18n');
-const yaml = require('js-yaml');
+const { setLanguage, t } = require('./i18n');
 const { detectProjectTypeExtended } = require('../detection/detect-project-type');
 const { showWelcome, showCompletion, showCancellation } = require('./feedback');
 const { generateIDEConfigs, showSuccessSummary, copySkillFiles, copyExtraCommandFiles } = require('./ide-config-generator');
@@ -47,38 +42,6 @@ const {
   isLLMRoutingInstalled,
 } = require('../../../../.sinapse-ai/infrastructure/scripts/llm-routing/install-llm-routing');
 
-/**
- * Check for existing user_profile in core-config.yaml (Story 10.2 - Idempotency)
- * Returns the existing profile if found, null otherwise
- *
- * @param {string} targetDir - Target directory to check
- * @returns {Promise<string|null>} Existing user profile or null
- */
-async function getExistingUserProfile(targetDir = process.cwd()) {
-  const coreConfigPath = path.join(targetDir, '.sinapse-ai', 'core-config.yaml');
-
-  try {
-    if (await fse.pathExists(coreConfigPath)) {
-      const content = await fse.readFile(coreConfigPath, 'utf8');
-      const config = yaml.load(content);
-
-      if (config && config.user_profile) {
-        // Validate the value
-        const validProfiles = ['bob', 'advanced'];
-        const normalizedProfile = String(config.user_profile).toLowerCase().trim();
-
-        if (validProfiles.includes(normalizedProfile)) {
-          return normalizedProfile;
-        }
-      }
-    }
-  } catch {
-    // Config doesn't exist or is invalid - will ask for profile
-  }
-
-  return null;
-}
-
 /**
  * Map wizard language code to Claude Code settings.json language name (Story ACT-12)
  * Claude Code uses full language names, not ISO codes.
@@ -369,7 +332,7 @@ function buildAgentTemplate(agentId, squadName, homedir) {
     'ACTIVATION-NOTICE: This command activates an agent from sinapse.',
     '',
     `CRITICAL: Read the agent definition file at \`${agentDefPath}\` to understand your full operating parameters. Then:`,
-    `1. Adopt the persona defined in that file`,
+    '1. Adopt the persona defined in that file',
     `2. Load the squad manifest at \`${squadManifestPath}\` for context`,
     '3. Display a greeting showing your agent name, role, and available commands',
     '4. Briefing-on-activation check (this agent is an ORCHESTRATOR):',
@@ -781,7 +744,7 @@ async function runWizard(options = {}) {
       try {
         await commandValidate({ quiet: true });
         answers.ideSyncValidation = 'pass';
-      } catch (validateError) {
+      } catch {
         answers.ideSyncValidation = 'drift';
       } finally {
         console.log = _origLog;
@@ -879,7 +842,7 @@ async function runWizard(options = {}) {
         projectType: answers.projectType || 'greenfield',
         selectedIDEs: answers.selectedIDEs || [],
         mcpServers: answers.mcpServers || [],
-        userProfile: answers.userProfile || 'advanced', // Story 10.2: User Profile
+        userProfile: answers.userProfile || 'bob', // Assisted-by-default (open-source p/ leigos); advanced é toggle opt-in pós-install
         skipPrompts: options.quiet || false, // Skip prompts in quiet mode
         forceMerge: options.forceMerge, // Story 9.4: Smart Merge support
         noMerge: options.noMerge, // Story 9.4: Smart Merge support

package/scripts/audit-tasks.cjs

@@ -246,7 +246,7 @@ async function main() {
         `${s.avgScore}%`.padEnd(6) +
         String(s.critical).padEnd(6) +
         String(s.warning).padEnd(6) +
-        String(s.passing)
+        String(s.passing),
       );
     }
 

package/scripts/package-synapse.js

@@ -223,7 +223,7 @@ Add to \`.claude/settings.local.json\`:
     "UserPromptSubmit": [
       {
         "type": "command",
-        "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/synapse-engine.cjs\"",
+        "command": "node \\"$CLAUDE_PROJECT_DIR/.claude/hooks/synapse-engine.cjs\\"",
         "timeout": 10
       }
     ]

package/scripts/sinapse-patch.js

@@ -159,21 +159,21 @@ r('"Run /status in Claude Code to check your account."',
 r(/future Claude Code sessions/g, 'future SINAPSE CODE sessions', 'model switch');
 r(/Claude Code will automatically update/g, 'SINAPSE CODE will automatically update', 'auto-update');
 r('"Please install git and restart Claude Code."', '"Please install git and restart SINAPSE CODE."', 'git install');
-r("Claude is up to date!\n", "SINAPSE is up to date!\n", 'up to date');
-r("Claude is managed by winget.\n", "SINAPSE is managed by winget.\n", 'winget');
-r("Claude is managed by apk.\n", "SINAPSE is managed by apk.\n", 'apk');
-r("Claude is managed by a package manager.\n", "SINAPSE is managed by a package manager.\n", 'pkg manager');
-r("This tool allows Claude Code to read images", "This tool allows SINAPSE CODE to read images", 'read tool');
-r("Claude Code is a multimodal LLM", "SINAPSE CODE is a multimodal LLM", 'multimodal');
-r("Default permission mode when Claude Code needs access", "Default permission mode when SINAPSE CODE needs access", 'settings 1');
-r("JSON Schema reference for Claude Code settings", "JSON Schema reference for SINAPSE CODE settings", 'settings 2');
-r("Environment variables to set for Claude Code sessions", "Environment variables to set for SINAPSE CODE sessions", 'settings 3');
-r("standard Claude Code attribution", "standard SINAPSE CODE attribution", 'attribution');
-r("Override the default model used by Claude Code", "Override the default model used by SINAPSE CODE", 'model desc');
-r("Claude Code auto-stash", "SINAPSE CODE auto-stash", 'git stash');
-r("Claude Code was unable to find", "SINAPSE CODE was unable to find", 'win bash');
-r("Claude Code on Windows requires git-bash", "SINAPSE CODE on Windows requires git-bash", 'win git-bash');
-r("Cost of the Claude Code session", "Cost of the SINAPSE CODE session", 'cost counter');
+r('Claude is up to date!\n', 'SINAPSE is up to date!\n', 'up to date');
+r('Claude is managed by winget.\n', 'SINAPSE is managed by winget.\n', 'winget');
+r('Claude is managed by apk.\n', 'SINAPSE is managed by apk.\n', 'apk');
+r('Claude is managed by a package manager.\n', 'SINAPSE is managed by a package manager.\n', 'pkg manager');
+r('This tool allows Claude Code to read images', 'This tool allows SINAPSE CODE to read images', 'read tool');
+r('Claude Code is a multimodal LLM', 'SINAPSE CODE is a multimodal LLM', 'multimodal');
+r('Default permission mode when Claude Code needs access', 'Default permission mode when SINAPSE CODE needs access', 'settings 1');
+r('JSON Schema reference for Claude Code settings', 'JSON Schema reference for SINAPSE CODE settings', 'settings 2');
+r('Environment variables to set for Claude Code sessions', 'Environment variables to set for SINAPSE CODE sessions', 'settings 3');
+r('standard Claude Code attribution', 'standard SINAPSE CODE attribution', 'attribution');
+r('Override the default model used by Claude Code', 'Override the default model used by SINAPSE CODE', 'model desc');
+r('Claude Code auto-stash', 'SINAPSE CODE auto-stash', 'git stash');
+r('Claude Code was unable to find', 'SINAPSE CODE was unable to find', 'win bash');
+r('Claude Code on Windows requires git-bash', 'SINAPSE CODE on Windows requires git-bash', 'win git-bash');
+r('Cost of the Claude Code session', 'Cost of the SINAPSE CODE session', 'cost counter');
 
 // ═══════════════════════════════════════════════════
 // 4. LOGO — Substitui mascot Clawd por SINAPSE ASCII
@@ -182,24 +182,24 @@ r("Cost of the Claude Code session", "Cost of the SINAPSE CODE session", 'cost c
 console.log('[Logo]');
 
 const LOGO_LINES = [
-  "███████╗██╗███╗   ██╗ █████╗ ██████╗ ███████╗███████╗",
-  "██╔════╝██║████╗  ██║██╔══██╗██╔══██╗██╔════╝██╔════╝",
-  "███████╗██║██╔██╗ ██║███████║██████╔╝███████╗█████╗  ",
-  "╚════██║██║██║╚██╗██║██╔══██║██╔═══╝ ╚════██║██╔══╝  ",
-  "███████║██║██║ ╚████║██║  ██║██║     ███████║███████╗",
-  "╚══════╝╚═╝╚═╝  ╚═══╝╚═╝  ╚═╝╚═╝     ╚══════╝╚══════╝",
+  '███████╗██╗███╗   ██╗ █████╗ ██████╗ ███████╗███████╗',
+  '██╔════╝██║████╗  ██║██╔══██╗██╔══██╗██╔════╝██╔════╝',
+  '███████╗██║██╔██╗ ██║███████║██████╔╝███████╗█████╗  ',
+  '╚════██║██║██║╚██╗██║██╔══██║██╔═══╝ ╚════██║██╔══╝  ',
+  '███████║██║██║ ╚████║██║  ██║██║     ███████║███████╗',
+  '╚══════╝╚═╝╚═╝  ╚═══╝╚═╝  ╚═╝╚═╝     ╚══════╝╚══════╝',
 ];
 
-const newLogo = `function HV6(){let q=z6(2),P;if(q[0]===Symbol.for("react.memo_cache_sentinel")){let lines=[${LOGO_LINES.map(l => JSON.stringify(l)).join(",")}];P=i9.createElement(B,{flexDirection:"column",flexShrink:0},lines.map((l,i)=>i9.createElement(T,{key:i,color:"claude",wrap:"truncate"},l))),q[0]=P}else P=q[0];return P}`;
+const newLogo = `function HV6(){let q=z6(2),P;if(q[0]===Symbol.for("react.memo_cache_sentinel")){let lines=[${LOGO_LINES.map(l => JSON.stringify(l)).join(',')}];P=i9.createElement(B,{flexDirection:"column",flexShrink:0},lines.map((l,i)=>i9.createElement(T,{key:i,color:"claude",wrap:"truncate"},l))),q[0]=P}else P=q[0];return P}`;
 
 // Substitui HV6 (componente principal do mascot)
-const hv6Start = content.indexOf("function HV6(A){");
+const hv6Start = content.indexOf('function HV6(A){');
 if (hv6Start !== -1) {
   const hv6Area = content.substring(hv6Start);
   let depth = 0, endPos = -1;
-  for (let i = hv6Area.indexOf("{"); i < hv6Area.length; i++) {
-    if (hv6Area[i] === "{") depth++;
-    if (hv6Area[i] === "}") { depth--; if (depth === 0) { endPos = i + 1; break; } }
+  for (let i = hv6Area.indexOf('{'); i < hv6Area.length; i++) {
+    if (hv6Area[i] === '{') depth++;
+    if (hv6Area[i] === '}') { depth--; if (depth === 0) { endPos = i + 1; break; } }
   }
   if (endPos !== -1) {
     content = content.substring(0, hv6Start) + newLogo + content.substring(hv6Start + endPos);
@@ -209,16 +209,16 @@ if (hv6Start !== -1) {
 }
 
 // Substitui dKY (fallback Apple Terminal)
-const dkyStart = content.indexOf("function dKY(A){");
+const dkyStart = content.indexOf('function dKY(A){');
 if (dkyStart !== -1) {
   const dkyArea = content.substring(dkyStart);
   let depth = 0, endPos = -1;
-  for (let i = dkyArea.indexOf("{"); i < dkyArea.length; i++) {
-    if (dkyArea[i] === "{") depth++;
-    if (dkyArea[i] === "}") { depth--; if (depth === 0) { endPos = i + 1; break; } }
+  for (let i = dkyArea.indexOf('{'); i < dkyArea.length; i++) {
+    if (dkyArea[i] === '{') depth++;
+    if (dkyArea[i] === '}') { depth--; if (depth === 0) { endPos = i + 1; break; } }
   }
   if (endPos !== -1) {
-    const newDKY = newLogo.replace("HV6", "dKY");
+    const newDKY = newLogo.replace('HV6', 'dKY');
     content = content.substring(0, dkyStart) + newDKY + content.substring(dkyStart + endPos);
     changes++;
     console.log('  + dKY fallback -> SINAPSE logo');

package/scripts/sync-squad-yaml-components.js

@@ -194,9 +194,9 @@ function run() {
   for (const r of results) {
     const marker = r.status === 'updated' ? 'UPDATED'
       : r.status === 'needs-update' ? 'NEEDS UPDATE'
-      : r.status === 'drift' ? 'DRIFT'
-      : r.status === 'already-declared' ? 'ok'
-      : r.status.toUpperCase();
+        : r.status === 'drift' ? 'DRIFT'
+          : r.status === 'already-declared' ? 'ok'
+            : r.status.toUpperCase();
     console.log(`  ${marker.padEnd(14)} ${r.squadName} (${r.changes} agent(s))`);
     if (r.status === 'drift') {
       if (r.declaredOnly.length > 0) {

package/scripts/validate-agents-md.js

@@ -77,7 +77,7 @@ function main() {
   if (!fs.existsSync(AGENTS_MD)) fail('AGENTS.md not found at repo root');
 
   const stats = readStats();
-  let content = fs.readFileSync(AGENTS_MD, 'utf8');
+  const content = fs.readFileSync(AGENTS_MD, 'utf8');
 
   const mismatches = [];
   let fixed = content;

package/scripts/validate-no-external-refs.js

@@ -13,8 +13,8 @@
  * the MIT `LICENSE` file (legal attribution requirement), the historical
  * process document `docs/research-synthesis-for-upgrade.md`, and a small set
  * of pre-existing upstream-attribution files inherited from the BMAD fork
- * lineage (flagged for future per-file review — see follow-up backlog in
- * `.sinapse-ai/internal/aiox-feature-map.md`).
+ * lineage (flagged for future per-file review — see the internal
+ * upstream-attribution follow-up backlog).
  *
  * === Source of truth: `git ls-files` (QA v1.1 fix) ===
  *