sinapse-ai 1.21.0 → 1.22.0

package/.sinapse-ai/core-config.yaml

@@ -193,6 +193,12 @@ github:
     draft_by_default: false
   semantic_release:
     enabled: true
+# ── CodeRabbit integration — SINGLE SOURCE OF TRUTH ──────────────────────────
+# This section (machine config) + .claude/rules/coderabbit-integration.md
+# (auto-loaded, human-readable) are the ONE canonical source for WSL execution
+# mechanics, self-healing thresholds, canonical review commands and report
+# location. Agents REFERENCE this — they must NOT copy the mechanics into their
+# own definitions. (Dedup: Story rodada2-m6-coderabbit-dedup.)
 coderabbit_integration:
   enabled: true
   installation_mode: wsl
@@ -213,11 +219,35 @@ coderabbit_integration:
   graceful_degradation:
     skip_if_not_installed: true
     fallback_message: 'CodeRabbit CLI not found. Skipping automated review. Install via: pip install coderabbit-cli'
+  # Canonical review commands (referenced by all agents; keyed by intent, not by agent).
   commands:
+    review_uncommitted: |
+      wsl bash -c 'cd ${PROJECT_ROOT} && ~/.local/bin/coderabbit --prompt-only -t uncommitted'
+    review_committed_base_main: |
+      wsl bash -c 'cd ${PROJECT_ROOT} && ~/.local/bin/coderabbit --prompt-only -t committed --base main'
+    review_against_main: |
+      wsl bash -c 'cd ${PROJECT_ROOT} && ~/.local/bin/coderabbit --prompt-only --base main'
+    review_committed: |
+      wsl bash -c 'cd ${PROJECT_ROOT} && ~/.local/bin/coderabbit --prompt-only -t committed'
+    # Back-compat aliases (previous key names):
     qa_pre_review_uncommitted: |
       wsl bash -c 'cd ${PROJECT_ROOT} && ~/.local/bin/coderabbit --prompt-only -t uncommitted'
     qa_story_review_committed: |
       wsl bash -c 'cd ${PROJECT_ROOT} && ~/.local/bin/coderabbit --prompt-only -t committed --base main'
+  execution_guidelines: |
+    CRITICAL: CodeRabbit CLI is installed in WSL, not Windows.
+
+    **How to Execute:**
+    1. Use 'wsl bash -c' wrapper for all commands
+    2. Navigate to project directory in WSL path format (/mnt/c/...)
+    3. Use full path to coderabbit binary (~/.local/bin/coderabbit)
+
+    **Timeout:** dev/pre-push 15 min (900000ms); full QA review 30 min (1800000ms) — reviews take 7-30 min.
+
+    **Error Handling:**
+    - If "coderabbit: command not found" → verify installation in WSL (wsl_config.installation_path)
+    - If timeout → increase timeout, review is still processing
+    - If "not authenticated" → user needs to run: wsl bash -c '~/.local/bin/coderabbit auth status'
   report_location: docs/qa/coderabbit-reports/
 squads:
   templateLocation: templates/squad

package/.sinapse-ai/data/entity-registry.yaml

@@ -1,7 +1,7 @@
 metadata:
   version: 1.0.0
-  lastUpdated: '2026-07-03T09:35:03.324Z'
-  entityCount: 814
+  lastUpdated: '2026-07-06T05:44:51.322Z'
+  entityCount: 815
   checksumAlgorithm: sha256
   resolutionRate: 100
 entities:
@@ -649,8 +649,8 @@ entities:
         score: 0.7
         constraints: []
         extensionPoints: []
-      checksum: sha256:bf8fe3e86235e6971c44d2a3e9e1036f21c2d6653ac878af441097e8c3e8bd48
-      lastVerified: '2026-06-15T01:36:42.621Z'
+      checksum: sha256:14606597c434fdf064bd78d5eb904ef2d28ce0523e5431521fcdd9ea0753da56
+      lastVerified: '2026-07-05T02:51:22.240Z'
     sinapse:
       path: bin/sinapse.js
       layer: L1
@@ -5033,8 +5033,8 @@ entities:
         score: 0.8
         constraints: []
         extensionPoints: []
-      checksum: sha256:e4773924e8452f0d55712eca51ed1168c916f1864e1d2791830c926bfe9ae167
-      lastVerified: '2026-06-15T00:26:26.290Z'
+      checksum: sha256:288ab27dfcc8337e4502bfc4e713b03f39635bc3bdd25a78ff1c3953ac02e0a1
+      lastVerified: '2026-07-05T02:51:22.310Z'
     review-contributor-pr:
       path: .sinapse-ai/development/tasks/review-contributor-pr.md
       layer: L2
@@ -7328,8 +7328,8 @@ entities:
         score: 0.5
         constraints: []
         extensionPoints: []
-      checksum: sha256:43a050de5ef51f53f890fd20f77ac567b297a40597f467b3bc6d00c8193c7fa6
-      lastVerified: '2026-06-15T00:26:26.326Z'
+      checksum: sha256:af24bf39ed706db9fca15dcc1bd3a0170c74e9956e3c2de58b221d4b28f14b9e
+      lastVerified: '2026-07-05T02:51:22.342Z'
     task-execution-report:
       path: .sinapse-ai/product/templates/task-execution-report.md
       layer: L2
@@ -9795,8 +9795,8 @@ entities:
         score: 0.4
         constraints: []
         extensionPoints: []
-      checksum: sha256:56bbde48aaa4eb0de3ea7c95d5d1584a9ec8b753931097102fa696fb72d11848
-      lastVerified: '2026-07-02T22:41:00.573Z'
+      checksum: sha256:d115167d203651b7288c1ee2f2a3b2d1bc0b09d624d8e7bd0123c27574890b53
+      lastVerified: '2026-07-06T05:44:51.104Z'
     build-state-manager:
       path: .sinapse-ai/core/execution/build-state-manager.js
       layer: L1
@@ -9886,8 +9886,8 @@ entities:
         score: 0.4
         constraints: []
         extensionPoints: []
-      checksum: sha256:c291a8d9dea32273577b5c726626f4bc7a94b6aa67a52c9f312d6448ca6ab910
-      lastVerified: '2026-06-18T04:29:34.042Z'
+      checksum: sha256:d7c440006585bd750d88da6926a766055e4b5bcb01974f30b4fc1fe8812c91a5
+      lastVerified: '2026-07-06T05:44:51.106Z'
     delegate-cli:
       path: .sinapse-ai/core/external-executors/delegate-cli.js
       layer: L1
@@ -10974,8 +10974,8 @@ entities:
         score: 0.4
         constraints: []
         extensionPoints: []
-      checksum: sha256:e4973a25c61101d278f102e4ed449421e50d876a274b2c4c2b150d00df97cb39
-      lastVerified: '2026-06-28T23:34:42.375Z'
+      checksum: sha256:9fbbd66ea38bc08696e42abca30810ae55e3c80aca703ec2ab0f7657eb3566be
+      lastVerified: '2026-07-05T02:51:22.407Z'
     circuit-breaker:
       path: .sinapse-ai/core/ids/circuit-breaker.js
       layer: L1
@@ -11663,8 +11663,8 @@ entities:
         score: 0.4
         constraints: []
         extensionPoints: []
-      checksum: sha256:a3fc11597f2dd2098ffa0b30acbe283506c4e64132c198ddf5c233c9791ab2b0
-      lastVerified: '2026-07-02T22:41:00.588Z'
+      checksum: sha256:55fe402101964487a8ad91c99a3cf1f2af3832a58bda294244cf5abb46fd8654
+      lastVerified: '2026-07-06T05:44:51.134Z'
     condition-evaluator:
       path: .sinapse-ai/core/orchestration/condition-evaluator.js
       layer: L1
@@ -11753,7 +11753,7 @@ entities:
       path: .sinapse-ai/core/orchestration/doc-first-resolver.js
       layer: L1
       type: module
-      purpose: Entity at .sinapse-ai\core\orchestration\doc-first-resolver.js
+      purpose: /^#{1,4}\s*(description|descri[cç][aã]o)/im,
       keywords:
         - doc
         - first
@@ -11772,8 +11772,8 @@ entities:
         score: 0.4
         constraints: []
         extensionPoints: []
-      checksum: sha256:e309338d1ca98d70953563a2cf92bae261264fac8001f389afdb7fbf968be353
-      lastVerified: '2026-07-03T08:39:26.307Z'
+      checksum: sha256:70ed2b0522825e74cdd229ee2e5c9a3908a026f229a7803edfee9aa7c8a69ec5
+      lastVerified: '2026-07-06T05:44:51.137Z'
     epic-context-accumulator:
       path: .sinapse-ai/core/orchestration/epic-context-accumulator.js
       layer: L1
@@ -11848,6 +11848,7 @@ entities:
       usedBy: []
       dependencies:
         - epic-executor
+        - spec-complexity
       externalDeps: []
       plannedDeps: []
       lifecycle: experimental
@@ -11855,8 +11856,8 @@ entities:
         score: 0.4
         constraints: []
         extensionPoints: []
-      checksum: sha256:da06c2b492104e453a8b18b1333bd2fd24123efb4933ab623045bff657b6d1d2
-      lastVerified: '2026-06-15T00:26:26.405Z'
+      checksum: sha256:adbf4790f4381727be0a5e6842d05471f92bbf6475495a1241f8799a95559add
+      lastVerified: '2026-07-06T05:44:51.138Z'
     epic-4-executor:
       path: .sinapse-ai/core/orchestration/executors/epic-4-executor.js
       layer: L1
@@ -11878,8 +11879,8 @@ entities:
         score: 0.4
         constraints: []
         extensionPoints: []
-      checksum: sha256:ffb124ce4751d3b6189cf03210eac9ee93be3754b760cfdb0188880f03ed928f
-      lastVerified: '2026-07-02T22:41:00.590Z'
+      checksum: sha256:9cf89dad552b9ea369fd9274fe1d14d3860f5150154c73d30a7883c18ce89931
+      lastVerified: '2026-07-06T05:44:51.139Z'
     epic-5-executor:
       path: .sinapse-ai/core/orchestration/executors/epic-5-executor.js
       layer: L1
@@ -12168,6 +12169,26 @@ entities:
         extensionPoints: []
       checksum: sha256:321eee21d44c8c2548a4a989b4fd9bd13782dc95f917098d67c514e0886000f5
       lastVerified: '2026-06-15T00:26:26.411Z'
+    spec-complexity:
+      path: .sinapse-ai/core/orchestration/spec-complexity.js
+      layer: L1
+      type: module
+      purpose: Entity at .sinapse-ai\core\orchestration\spec-complexity.js
+      keywords:
+        - spec
+        - complexity
+      usedBy:
+        - epic-3-executor
+      dependencies: []
+      externalDeps: []
+      plannedDeps: []
+      lifecycle: production
+      adaptability:
+        score: 0.4
+        constraints: []
+        extensionPoints: []
+      checksum: sha256:98263efa7189b42e8747929886eddb84b047083369d5636a401141de5b13385a
+      lastVerified: '2026-07-06T05:44:51.145Z'
     subagent-prompt-builder:
       path: .sinapse-ai/core/orchestration/subagent-prompt-builder.js
       layer: L1
@@ -14227,8 +14248,8 @@ entities:
         score: 0.3
         constraints: []
         extensionPoints: []
-      checksum: sha256:9c566f77c11e95edc5537e13c5f5fda65949c4cef6a1f142f81d7b35347b808b
-      lastVerified: '2026-07-03T06:55:48.571Z'
+      checksum: sha256:c0aa3c0b60809ef2fbbe4d7b27ae44e48817d5a7266b6c5d7d5f1d313329a2a0
+      lastVerified: '2026-07-05T02:51:22.469Z'
     product-lead:
       path: .sinapse-ai/development/agents/product-lead.md
       layer: L2

package/.sinapse-ai/development/agents/architect.md

@@ -276,6 +276,9 @@ dependencies:
 
   coderabbit_integration:
     enabled: true
+    # CodeRabbit mechanics (WSL execution, timeout, commands, report location) are
+    # single-sourced in .sinapse-ai/core-config.yaml + .claude/rules/coderabbit-integration.md.
+    # Only this agent's review focus/policy lives here — see Story rodada2-m6.
     focus: Architectural patterns, security, anti-patterns, cross-stack consistency
 
     when_to_use:
@@ -334,21 +337,6 @@ dependencies:
       6. Recommend patterns from technical-preferences.md
       7. Document decisions in architecture docs
 
-    execution_guidelines: |
-      CRITICAL: CodeRabbit CLI is installed in WSL, not Windows.
-
-      **How to Execute:**
-      1. Use 'wsl bash -c' wrapper for all commands
-      2. Navigate to project directory in WSL path format (/mnt/c/...)
-      3. Use full path to coderabbit binary (~/.local/bin/coderabbit)
-
-      **Timeout:** 15 minutes (900000ms) - CodeRabbit reviews take 7-30 min
-
-      **Error Handling:**
-      - If "coderabbit: command not found" → verify installation in WSL
-      - If timeout → increase timeout, review is still processing
-      - If "not authenticated" → user needs to run: wsl bash -c '~/.local/bin/coderabbit auth status'
-
     architectural_patterns_to_check:
       - API consistency (REST conventions, error handling, pagination)
       - Authentication/Authorization patterns (JWT, sessions, RLS)

package/.sinapse-ai/development/agents/data-engineer.md

@@ -255,6 +255,9 @@ usage_tips:
 
 coderabbit_integration:
   enabled: true
+  # CodeRabbit mechanics (WSL execution, timeout, commands, report location) are
+  # single-sourced in .sinapse-ai/core-config.yaml + .claude/rules/coderabbit-integration.md.
+  # Only this agent's review focus/policy lives here — see Story rodada2-m6.
   focus: SQL quality, schema design, query performance, RLS security, migration safety
 
   when_to_use:
@@ -317,21 +320,6 @@ coderabbit_integration:
     5. Document all MEDIUM/HIGH issues in migration notes
     6. Update database-best-practices.md with patterns found
 
-  execution_guidelines: |
-    CRITICAL: CodeRabbit CLI is installed in WSL, not Windows.
-
-    **How to Execute:**
-    1. Use 'wsl bash -c' wrapper for all commands
-    2. Navigate to project directory in WSL path format (/mnt/c/...)
-    3. Use full path to coderabbit binary (~/.local/bin/coderabbit)
-
-    **Timeout:** 15 minutes (900000ms) - CodeRabbit reviews take 7-30 min
-
-    **Error Handling:**
-    - If "coderabbit: command not found" → verify installation in WSL
-    - If timeout → increase timeout, review is still processing
-    - If "not authenticated" → user needs to run: wsl bash -c '~/.local/bin/coderabbit auth status'
-
   database_patterns_to_check:
     security:
       - SQL injection vulnerabilities (dynamic SQL, string concat)

package/.sinapse-ai/development/agents/developer.md

@@ -279,11 +279,9 @@ dependencies:
 
   coderabbit_integration:
     enabled: true
-    installation_mode: wsl
-    wsl_config:
-      distribution: Ubuntu
-      installation_path: ~/.local/bin/coderabbit
-      working_directory: ${PROJECT_ROOT}
+    # CodeRabbit mechanics (WSL execution, timeout, commands, report location) are
+    # single-sourced in .sinapse-ai/core-config.yaml + .claude/rules/coderabbit-integration.md.
+    # Only this agent's review focus/policy lives here — see Story rodada2-m6.
     usage:
       - Pre-commit quality check - run before marking story complete
       - Catch issues early - find bugs, security issues, code smells during development
@@ -330,25 +328,6 @@ dependencies:
         - HALT and report to user
         - DO NOT mark story complete
 
-    commands:
-      dev_pre_commit_uncommitted: "wsl bash -c 'cd ${PROJECT_ROOT} && ~/.local/bin/coderabbit --prompt-only -t uncommitted'"
-    execution_guidelines: |
-      CRITICAL: CodeRabbit CLI is installed in WSL, not Windows.
-
-      **How to Execute:**
-      1. Use 'wsl bash -c' wrapper for all commands
-      2. Navigate to project directory in WSL path format (/mnt/c/...)
-      3. Use full path to coderabbit binary (~/.local/bin/coderabbit)
-
-      **Timeout:** 15 minutes (900000ms) - CodeRabbit reviews take 7-30 min
-
-      **Self-Healing:** Max 2 iterations for CRITICAL issues only
-
-      **Error Handling:**
-      - If "coderabbit: command not found" → verify wsl_config.installation_path
-      - If timeout → increase timeout, review is still processing
-      - If "not authenticated" → user needs to run: wsl bash -c '~/.local/bin/coderabbit auth status'
-    report_location: docs/qa/coderabbit-reports/
     integration_point: 'Part of story completion workflow in develop-story.md'
 
   decision_logging:

package/.sinapse-ai/development/agents/devops.md

@@ -306,11 +306,9 @@ dependencies:
 
   coderabbit_integration:
     enabled: true
-    installation_mode: wsl
-    wsl_config:
-      distribution: Ubuntu
-      installation_path: ~/.local/bin/coderabbit
-      working_directory: ${PROJECT_ROOT}
+    # CodeRabbit mechanics (WSL execution, timeout, commands, report location) are
+    # single-sourced in .sinapse-ai/core-config.yaml + .claude/rules/coderabbit-integration.md.
+    # Only this agent's review focus/policy lives here — see Story rodada2-m6.
     usage:
       - Pre-PR quality gate - run before creating pull requests
       - Pre-push validation - verify code quality before push
@@ -321,25 +319,6 @@ dependencies:
       HIGH: Warn user, recommend fix before merge
       MEDIUM: Document in PR description, create follow-up issue
       LOW: Optional improvements, note in comments
-    commands:
-      pre_push_uncommitted: "wsl bash -c 'cd ${PROJECT_ROOT} && ~/.local/bin/coderabbit --prompt-only -t uncommitted'"
-      pre_pr_against_main: "wsl bash -c 'cd ${PROJECT_ROOT} && ~/.local/bin/coderabbit --prompt-only --base main'"
-      pre_commit_committed: "wsl bash -c 'cd ${PROJECT_ROOT} && ~/.local/bin/coderabbit --prompt-only -t committed'"
-    execution_guidelines: |
-      CRITICAL: CodeRabbit CLI is installed in WSL, not Windows.
-
-      **How to Execute:**
-      1. Use 'wsl bash -c' wrapper for all commands
-      2. Navigate to project directory in WSL path format (/mnt/c/...)
-      3. Use full path to coderabbit binary (~/.local/bin/coderabbit)
-
-      **Timeout:** 15 minutes (900000ms) - CodeRabbit reviews take 7-30 min
-
-      **Error Handling:**
-      - If "coderabbit: command not found" → verify wsl_config.installation_path
-      - If timeout → increase timeout, review is still processing
-      - If "not authenticated" → user needs to run: wsl bash -c '~/.local/bin/coderabbit auth status'
-    report_location: docs/qa/coderabbit-reports/
     integration_point: 'Runs automatically in *pre-push and *create-pr workflows'
 
   pr_automation:
@@ -582,7 +561,7 @@ gt stack sync    # Keeps stack synced with main
 
 - `*pre-push` - Run all quality gates
 - `*push` - Push changes after quality gates
-- `*health-check` - Run health diagnostic (15 checks + governance)
+- `*health-check` - Run health diagnostic (16 checks + governance)
 - `*sync-registry` - Sync entity registry (incremental, --full, --heal)
 
 **GitHub Operations:**

package/.sinapse-ai/development/agents/quality-gate.md

@@ -227,11 +227,9 @@ dependencies:
 
   coderabbit_integration:
     enabled: true
-    installation_mode: wsl
-    wsl_config:
-      distribution: Ubuntu
-      installation_path: ~/.local/bin/coderabbit
-      working_directory: ${PROJECT_ROOT}
+    # CodeRabbit mechanics (WSL execution, timeout, commands, report location) are
+    # single-sourced in .sinapse-ai/core-config.yaml + .claude/rules/coderabbit-integration.md.
+    # Only this agent's review focus/policy lives here — see Story rodada2-m6.
     usage:
       - Pre-review automated scanning before human QA analysis
       - Security vulnerability detection (SQL injection, XSS, hardcoded secrets)
@@ -292,26 +290,6 @@ dependencies:
         - Set gate decision: FAIL
         - HALT and require human intervention
 
-    commands:
-      qa_pre_review_uncommitted: "wsl bash -c 'cd ${PROJECT_ROOT} && ~/.local/bin/coderabbit --prompt-only -t uncommitted'"
-      qa_story_review_committed: "wsl bash -c 'cd ${PROJECT_ROOT} && ~/.local/bin/coderabbit --prompt-only -t committed --base main'"
-    execution_guidelines: |
-      CRITICAL: CodeRabbit CLI is installed in WSL, not Windows.
-
-      **How to Execute:**
-      1. Use 'wsl bash -c' wrapper for all commands
-      2. Navigate to project directory in WSL path format (/mnt/c/...)
-      3. Use full path to coderabbit binary (~/.local/bin/coderabbit)
-
-      **Timeout:** 30 minutes (1800000ms) - Full review may take longer
-
-      **Self-Healing:** Max 3 iterations for CRITICAL and HIGH issues
-
-      **Error Handling:**
-      - If "coderabbit: command not found" → verify wsl_config.installation_path
-      - If timeout → increase timeout, review is still processing
-      - If "not authenticated" → user needs to run: wsl bash -c '~/.local/bin/coderabbit auth status'
-    report_location: docs/qa/coderabbit-reports/
     integration_point: 'Runs automatically in *review and *gate workflows'
 
   git_restrictions:

package/.sinapse-ai/development/knowledge-base/token-economy-guide.md

@@ -185,7 +185,7 @@ Grep(pattern="TODO", head_limit=10)
 
 ## Quick Reference: Context Budget
 
-For a 200K token context window:
+For a 200K token context window (example — current frontier windows reach 1M; see token-economy rule):
 
 | Allocation | Tokens | % |
 |-----------|--------|---|

package/.sinapse-ai/development/tasks/resolve-github-issue.md

@@ -340,7 +340,7 @@ steps:
 
       {body - what was changed and why}
 
-      Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
+      Co-Authored-By: Claude <noreply@anthropic.com>
     type_map:
       BUG: fix
       FEATURE: feat

package/.sinapse-ai/docs/standards/SINAPSE-LIVRO-DE-OURO-V2.1-COMPLETE.md

@@ -1,5 +1,9 @@
 # SINAPSE Framework - Livro de Ouro v4.2 (Complete)
 
+> **Nota histórica (2026-07-04):** este é um documento de VISÃO da era V2.x. A arquitetura de
+> pacotes com escopo `@sinapse/*` descrita aqui NUNCA foi publicada — o pacote real e único é
+> **`sinapse-ai`** no npm (`npx sinapse-ai install`). Mantido como registro de decisão/visão.
+
 ## O Sistema Operacional Definitivo para Orquestração de Agentes IA
 
 **Versão:** 2.1.0
@@ -606,10 +610,10 @@ npm install @sinapse/mcp-presets
 
 ```bash
 # New project (Greenfield)
-$ npx @caioimori/sinapse@latest init
+$ npx sinapse-ai install
 
 # Existing project (Brownfield)
-$ npx @caioimori/sinapse migrate v2.0-to-v4.0.4
+$ npx sinapse-ai update
 ```
 
 ### First Steps

package/.sinapse-ai/docs/standards/SINAPSE-LIVRO-DE-OURO-V2.2-SUMMARY.md

@@ -1,5 +1,8 @@
 # 📘 SINAPSE v2.2 - Livro de Ouro (Future Vision)
 
+> **Nota histórica (2026-07-04):** documento de VISÃO da era V2.x — o escopo `@sinapse/*` nunca
+> foi publicado; o pacote real é **`sinapse-ai`** (`npx sinapse-ai install`).
+
 **Version:** 2.2.0-with-memory-layer  
 **Date:** June 2026 (as-if-implemented)  
 **Status:** Production Release  
@@ -761,7 +764,7 @@ Features:
 1. ✅ Read this summary (done!)
 2. → Review [Memory Layer Architecture](#memory-layer)
 3. → Review [Agent Lightning Details](#agent-lightning)
-4. → Upgrade: `npx @caioimori/sinapse upgrade v2.2`
+4. → Upgrade: `npx sinapse-ai update`
 5. → Configure: `sinapse memory setup`
 6. → Enable: `sinapse lightning enable`