coding-os 0.3.2__tar.gz → 0.3.4__tar.gz

{coding_os-0.3.2 → coding_os-0.3.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: coding-os
-Version: 0.3.2
+Version: 0.3.4
 Summary: The cognitive operating system that gives AI agents memory, structure, and discipline
 Author-email: Kourosh Ebrahimzadeh <info@coding-os.dev>
 License-Expression: Apache-2.0
@@ -66,16 +66,18 @@ Dynamic: license-file
 
 # coding-os
 
-[![release](https://img.shields.io/badge/release-v0.3.2)](https://github.com/kouroshez/coding-os/releases) <!-- x-release-please-version -->
+[![release](https://img.shields.io/github/v/release/kouroshez/coding-os?color=blue)](https://github.com/kouroshez/coding-os/releases)
 [![license](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](./LICENSE)
 [![python](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12-blue)](./pyproject.toml)
-[![tests](https://img.shields.io/badge/tests-passing-green)](./tests/)
+[![CI](https://github.com/kouroshez/coding-os/actions/workflows/ci.yml/badge.svg)](https://github.com/kouroshez/coding-os/actions/workflows/ci.yml)
 [![cli](https://img.shields.io/badge/cli-cos-informational)](./docs/architecture/meta-project.md)
 
 > **Coding OS — the cognitive operating system that gives AI agents memory, structure, and discipline.**
 > Teaches AI agents *how to think* (thinking_os) and *how to code*
 > (workflow, hooks, skills, rules) — agent-agnostic so the same kernel
-> serves Claude Code and OpenAI Codex without rewriting.
+> serves Claude Code and OpenAI Codex without rewriting. **Modular by
+> design**: take only what you need — even just the knowledge graph
+> (`--profile lite --enable-module graph`).
 >
 > Website: <https://coding-os.dev> · Community: <https://community.coding-os.dev>
 
@@ -113,7 +115,7 @@ clicks. ([ADR-0007](docs/architecture/adr/0007-gui-first-install-path.md))
 ## 60-second quickstart (native `uv`)
 
 ```bash
-# 1. Install the `cos` CLI globally
+# 1. Install the cos CLI globally
 git clone https://github.com/kouroshez/coding-os.git
 cd coding-os
 uv tool install --editable .
@@ -124,12 +126,12 @@ cos doctor --bootstrap                 # preflight: python/bash/git/uv/sed prere
 cos doctor                             # full health sweep (must be all-green)
 
 # 3. Spawn a new project, scaffolded with an agent + a stack
-#    (--agent takes several: --agent claude,codex)
+#    --agent takes several at once: --agent claude,codex
 cos init --agent claude --template django --name my-shop --yes
 cd my-shop                             # adapter installer ran for you and wrote
                                        # .claude/, .mcp.json, .coding-os/
 
-# 4. Boot the multi-project Web Hub (graph + board + cognition + search)
+# 4. Boot the multi-project Web Hub: graph + board + cognition + search
 cos hub start                          # → http://127.0.0.1:9188
 ```
 
@@ -137,32 +139,43 @@ Open `http://127.0.0.1:9188` in your browser. You will see the
 knowledge graph of `my-shop`, the Scrumban board, the cognition
 trace timeline, and unified search across all retrieval layers.
 
+**The Hub is optional.** The CLI-only loop is complete on its own: `cd
+my-shop`, open your agent (e.g. `claude` — MCP + hooks are already
+wired), then `cos daily` / `cos task-create` / `cos task-start` — `cos init`
+prints the exact first commands for your project. Every project ships its own
+guide at `docs/workflow/workflow-guide.md`. For an existing repo, use
+`cos adopt` instead of `init`.
+
 For Codex, swap `--agent claude` for `--agent codex` (or pass
 both — `--agent claude,codex`) — everything else is identical. Each agent's
 installer is `src/adapters/<agent>/install.sh`; `cos init` runs it
 for you and re-runs it on `cos update`.
 
-### Choosing how much coding-os you install
+### Modular by design — take only what you need
+
+coding-os is not all-or-nothing. The **kernel** (session lifecycle + safety) is
+always on; everything else is a **subsystem module** you switch on or off:
+`docs` · `tasks` (Scrumban) · `graph` · `memory` · `cognition` ·
+`observability` · `hub-extras` · `cicd`. Named **profiles** curate the set, so
+the agent's MCP tool surface stays as small as you want it.
 
-The kernel ships as **subsystem modules** — docs, tasks (Scrumban), knowledge
-graph, agent memory, cognition, observability, hub extras, CI/CD — and you pick
-the set at create time. Prefer a small MCP surface, or don't want the web panel
-at all? Start lean:
+Wanted just the knowledge graph? That is the entire install:
 
 ```bash
-cos init --agent claude --name my-app --profile lite --yes   # kernel only: discipline + safety
-cos init --agent claude --name my-app --profile full --yes   # every subsystem
-cos init --agent claude --name my-app --disable-module memory --yes
+cos init --agent claude --name my-app --profile lite --enable-module graph --yes
 ```
 
-`cos init --help` lists the live profiles and module ids (both are read from
-`src/core/subsystems.yaml`, so the help never drifts). Omitting `--profile`
-applies the registry default — today `standard`, which leaves `cognition` and
-`cicd` off. The two flags are **unioned**: a profile can only remove more, so to
-re-enable something start from a wider profile. Everything stays adjustable
-later with `cos module enable|disable` or Hub **Config → Modules**, and the same
-chips appear in the Composer's *Advanced* section. Full model:
-[meta-project.md § subsystem modules](docs/architecture/meta-project.md).
+`lite` is kernel-only; `core` adds docs, tasks, graph and the Hub hooks;
+`standard` *(the recommended default)* adds memory + observability; `full` is
+everything. Start lean and change your mind later — from the project root,
+`cos module enable memory`. `--profile` and `--disable-module` are **unioned**:
+they can only remove. `--enable-module` is the escape that keeps one on and
+pulls its dependencies with it — passing the same id to both flags is an error,
+not an override. `cos init --help` lists the live ids straight from
+`src/core/subsystems.yaml`, `cos module list` shows what you ended up with, and
+Hub **Config → Modules** — or the Composer's *Advanced* section at create
+time — flips any of it later. Full model:
+[meta-project.md § subsystem modules](docs/architecture/meta-project.md#the-fourth-axis--subsystem-modules-which-kernel-surfaces-ship).
 
 ## Run with Docker (Hub layer; native for projects)
 
@@ -315,6 +328,7 @@ coding-os/
 
 ```
 Project lifecycle    init · adopt · setup · add-adapter · add-stack · update · materialize · eject
+Modules              module list · module enable · module disable   (per-project surface control)
 Diagnostics          doctor · health · list-stacks · list-adapters · hooks-dir · hooks-log
 Hub                  hub start · hub status · hub stop
 Board                board · task-create · task-start · task-move · task-done · daily · retro · wip

{coding_os-0.3.2 → coding_os-0.3.4}/README.md

@@ -1,15 +1,17 @@
 # coding-os
 
-[![release](https://img.shields.io/badge/release-v0.3.2)](https://github.com/kouroshez/coding-os/releases) <!-- x-release-please-version -->
+[![release](https://img.shields.io/github/v/release/kouroshez/coding-os?color=blue)](https://github.com/kouroshez/coding-os/releases)
 [![license](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](./LICENSE)
 [![python](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12-blue)](./pyproject.toml)
-[![tests](https://img.shields.io/badge/tests-passing-green)](./tests/)
+[![CI](https://github.com/kouroshez/coding-os/actions/workflows/ci.yml/badge.svg)](https://github.com/kouroshez/coding-os/actions/workflows/ci.yml)
 [![cli](https://img.shields.io/badge/cli-cos-informational)](./docs/architecture/meta-project.md)
 
 > **Coding OS — the cognitive operating system that gives AI agents memory, structure, and discipline.**
 > Teaches AI agents *how to think* (thinking_os) and *how to code*
 > (workflow, hooks, skills, rules) — agent-agnostic so the same kernel
-> serves Claude Code and OpenAI Codex without rewriting.
+> serves Claude Code and OpenAI Codex without rewriting. **Modular by
+> design**: take only what you need — even just the knowledge graph
+> (`--profile lite --enable-module graph`).
 >
 > Website: <https://coding-os.dev> · Community: <https://community.coding-os.dev>
 
@@ -47,7 +49,7 @@ clicks. ([ADR-0007](docs/architecture/adr/0007-gui-first-install-path.md))
 ## 60-second quickstart (native `uv`)
 
 ```bash
-# 1. Install the `cos` CLI globally
+# 1. Install the cos CLI globally
 git clone https://github.com/kouroshez/coding-os.git
 cd coding-os
 uv tool install --editable .
@@ -58,12 +60,12 @@ cos doctor --bootstrap                 # preflight: python/bash/git/uv/sed prere
 cos doctor                             # full health sweep (must be all-green)
 
 # 3. Spawn a new project, scaffolded with an agent + a stack
-#    (--agent takes several: --agent claude,codex)
+#    --agent takes several at once: --agent claude,codex
 cos init --agent claude --template django --name my-shop --yes
 cd my-shop                             # adapter installer ran for you and wrote
                                        # .claude/, .mcp.json, .coding-os/
 
-# 4. Boot the multi-project Web Hub (graph + board + cognition + search)
+# 4. Boot the multi-project Web Hub: graph + board + cognition + search
 cos hub start                          # → http://127.0.0.1:9188
 ```
 
@@ -71,32 +73,43 @@ Open `http://127.0.0.1:9188` in your browser. You will see the
 knowledge graph of `my-shop`, the Scrumban board, the cognition
 trace timeline, and unified search across all retrieval layers.
 
+**The Hub is optional.** The CLI-only loop is complete on its own: `cd
+my-shop`, open your agent (e.g. `claude` — MCP + hooks are already
+wired), then `cos daily` / `cos task-create` / `cos task-start` — `cos init`
+prints the exact first commands for your project. Every project ships its own
+guide at `docs/workflow/workflow-guide.md`. For an existing repo, use
+`cos adopt` instead of `init`.
+
 For Codex, swap `--agent claude` for `--agent codex` (or pass
 both — `--agent claude,codex`) — everything else is identical. Each agent's
 installer is `src/adapters/<agent>/install.sh`; `cos init` runs it
 for you and re-runs it on `cos update`.
 
-### Choosing how much coding-os you install
+### Modular by design — take only what you need
+
+coding-os is not all-or-nothing. The **kernel** (session lifecycle + safety) is
+always on; everything else is a **subsystem module** you switch on or off:
+`docs` · `tasks` (Scrumban) · `graph` · `memory` · `cognition` ·
+`observability` · `hub-extras` · `cicd`. Named **profiles** curate the set, so
+the agent's MCP tool surface stays as small as you want it.
 
-The kernel ships as **subsystem modules** — docs, tasks (Scrumban), knowledge
-graph, agent memory, cognition, observability, hub extras, CI/CD — and you pick
-the set at create time. Prefer a small MCP surface, or don't want the web panel
-at all? Start lean:
+Wanted just the knowledge graph? That is the entire install:
 
 ```bash
-cos init --agent claude --name my-app --profile lite --yes   # kernel only: discipline + safety
-cos init --agent claude --name my-app --profile full --yes   # every subsystem
-cos init --agent claude --name my-app --disable-module memory --yes
+cos init --agent claude --name my-app --profile lite --enable-module graph --yes
 ```
 
-`cos init --help` lists the live profiles and module ids (both are read from
-`src/core/subsystems.yaml`, so the help never drifts). Omitting `--profile`
-applies the registry default — today `standard`, which leaves `cognition` and
-`cicd` off. The two flags are **unioned**: a profile can only remove more, so to
-re-enable something start from a wider profile. Everything stays adjustable
-later with `cos module enable|disable` or Hub **Config → Modules**, and the same
-chips appear in the Composer's *Advanced* section. Full model:
-[meta-project.md § subsystem modules](docs/architecture/meta-project.md).
+`lite` is kernel-only; `core` adds docs, tasks, graph and the Hub hooks;
+`standard` *(the recommended default)* adds memory + observability; `full` is
+everything. Start lean and change your mind later — from the project root,
+`cos module enable memory`. `--profile` and `--disable-module` are **unioned**:
+they can only remove. `--enable-module` is the escape that keeps one on and
+pulls its dependencies with it — passing the same id to both flags is an error,
+not an override. `cos init --help` lists the live ids straight from
+`src/core/subsystems.yaml`, `cos module list` shows what you ended up with, and
+Hub **Config → Modules** — or the Composer's *Advanced* section at create
+time — flips any of it later. Full model:
+[meta-project.md § subsystem modules](docs/architecture/meta-project.md#the-fourth-axis--subsystem-modules-which-kernel-surfaces-ship).
 
 ## Run with Docker (Hub layer; native for projects)
 
@@ -249,6 +262,7 @@ coding-os/
 
 ```
 Project lifecycle    init · adopt · setup · add-adapter · add-stack · update · materialize · eject
+Modules              module list · module enable · module disable   (per-project surface control)
 Diagnostics          doctor · health · list-stacks · list-adapters · hooks-dir · hooks-log
 Hub                  hub start · hub status · hub stop
 Board                board · task-create · task-start · task-move · task-done · daily · retro · wip

{coding_os-0.3.2 → coding_os-0.3.4}/coding_os.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: coding-os
-Version: 0.3.2
+Version: 0.3.4
 Summary: The cognitive operating system that gives AI agents memory, structure, and discipline
 Author-email: Kourosh Ebrahimzadeh <info@coding-os.dev>
 License-Expression: Apache-2.0
@@ -66,16 +66,18 @@ Dynamic: license-file
 
 # coding-os
 
-[![release](https://img.shields.io/badge/release-v0.3.2)](https://github.com/kouroshez/coding-os/releases) <!-- x-release-please-version -->
+[![release](https://img.shields.io/github/v/release/kouroshez/coding-os?color=blue)](https://github.com/kouroshez/coding-os/releases)
 [![license](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](./LICENSE)
 [![python](https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12-blue)](./pyproject.toml)
-[![tests](https://img.shields.io/badge/tests-passing-green)](./tests/)
+[![CI](https://github.com/kouroshez/coding-os/actions/workflows/ci.yml/badge.svg)](https://github.com/kouroshez/coding-os/actions/workflows/ci.yml)
 [![cli](https://img.shields.io/badge/cli-cos-informational)](./docs/architecture/meta-project.md)
 
 > **Coding OS — the cognitive operating system that gives AI agents memory, structure, and discipline.**
 > Teaches AI agents *how to think* (thinking_os) and *how to code*
 > (workflow, hooks, skills, rules) — agent-agnostic so the same kernel
-> serves Claude Code and OpenAI Codex without rewriting.
+> serves Claude Code and OpenAI Codex without rewriting. **Modular by
+> design**: take only what you need — even just the knowledge graph
+> (`--profile lite --enable-module graph`).
 >
 > Website: <https://coding-os.dev> · Community: <https://community.coding-os.dev>
 
@@ -113,7 +115,7 @@ clicks. ([ADR-0007](docs/architecture/adr/0007-gui-first-install-path.md))
 ## 60-second quickstart (native `uv`)
 
 ```bash
-# 1. Install the `cos` CLI globally
+# 1. Install the cos CLI globally
 git clone https://github.com/kouroshez/coding-os.git
 cd coding-os
 uv tool install --editable .
@@ -124,12 +126,12 @@ cos doctor --bootstrap                 # preflight: python/bash/git/uv/sed prere
 cos doctor                             # full health sweep (must be all-green)
 
 # 3. Spawn a new project, scaffolded with an agent + a stack
-#    (--agent takes several: --agent claude,codex)
+#    --agent takes several at once: --agent claude,codex
 cos init --agent claude --template django --name my-shop --yes
 cd my-shop                             # adapter installer ran for you and wrote
                                        # .claude/, .mcp.json, .coding-os/
 
-# 4. Boot the multi-project Web Hub (graph + board + cognition + search)
+# 4. Boot the multi-project Web Hub: graph + board + cognition + search
 cos hub start                          # → http://127.0.0.1:9188
 ```
 
@@ -137,32 +139,43 @@ Open `http://127.0.0.1:9188` in your browser. You will see the
 knowledge graph of `my-shop`, the Scrumban board, the cognition
 trace timeline, and unified search across all retrieval layers.
 
+**The Hub is optional.** The CLI-only loop is complete on its own: `cd
+my-shop`, open your agent (e.g. `claude` — MCP + hooks are already
+wired), then `cos daily` / `cos task-create` / `cos task-start` — `cos init`
+prints the exact first commands for your project. Every project ships its own
+guide at `docs/workflow/workflow-guide.md`. For an existing repo, use
+`cos adopt` instead of `init`.
+
 For Codex, swap `--agent claude` for `--agent codex` (or pass
 both — `--agent claude,codex`) — everything else is identical. Each agent's
 installer is `src/adapters/<agent>/install.sh`; `cos init` runs it
 for you and re-runs it on `cos update`.
 
-### Choosing how much coding-os you install
+### Modular by design — take only what you need
+
+coding-os is not all-or-nothing. The **kernel** (session lifecycle + safety) is
+always on; everything else is a **subsystem module** you switch on or off:
+`docs` · `tasks` (Scrumban) · `graph` · `memory` · `cognition` ·
+`observability` · `hub-extras` · `cicd`. Named **profiles** curate the set, so
+the agent's MCP tool surface stays as small as you want it.
 
-The kernel ships as **subsystem modules** — docs, tasks (Scrumban), knowledge
-graph, agent memory, cognition, observability, hub extras, CI/CD — and you pick
-the set at create time. Prefer a small MCP surface, or don't want the web panel
-at all? Start lean:
+Wanted just the knowledge graph? That is the entire install:
 
 ```bash
-cos init --agent claude --name my-app --profile lite --yes   # kernel only: discipline + safety
-cos init --agent claude --name my-app --profile full --yes   # every subsystem
-cos init --agent claude --name my-app --disable-module memory --yes
+cos init --agent claude --name my-app --profile lite --enable-module graph --yes
 ```
 
-`cos init --help` lists the live profiles and module ids (both are read from
-`src/core/subsystems.yaml`, so the help never drifts). Omitting `--profile`
-applies the registry default — today `standard`, which leaves `cognition` and
-`cicd` off. The two flags are **unioned**: a profile can only remove more, so to
-re-enable something start from a wider profile. Everything stays adjustable
-later with `cos module enable|disable` or Hub **Config → Modules**, and the same
-chips appear in the Composer's *Advanced* section. Full model:
-[meta-project.md § subsystem modules](docs/architecture/meta-project.md).
+`lite` is kernel-only; `core` adds docs, tasks, graph and the Hub hooks;
+`standard` *(the recommended default)* adds memory + observability; `full` is
+everything. Start lean and change your mind later — from the project root,
+`cos module enable memory`. `--profile` and `--disable-module` are **unioned**:
+they can only remove. `--enable-module` is the escape that keeps one on and
+pulls its dependencies with it — passing the same id to both flags is an error,
+not an override. `cos init --help` lists the live ids straight from
+`src/core/subsystems.yaml`, `cos module list` shows what you ended up with, and
+Hub **Config → Modules** — or the Composer's *Advanced* section at create
+time — flips any of it later. Full model:
+[meta-project.md § subsystem modules](docs/architecture/meta-project.md#the-fourth-axis--subsystem-modules-which-kernel-surfaces-ship).
 
 ## Run with Docker (Hub layer; native for projects)
 
@@ -315,6 +328,7 @@ coding-os/
 
 ```
 Project lifecycle    init · adopt · setup · add-adapter · add-stack · update · materialize · eject
+Modules              module list · module enable · module disable   (per-project surface control)
 Diagnostics          doctor · health · list-stacks · list-adapters · hooks-dir · hooks-log
 Hub                  hub start · hub status · hub stop
 Board                board · task-create · task-start · task-move · task-done · daily · retro · wip

{coding_os-0.3.2 → coding_os-0.3.4}/coding_os.egg-info/SOURCES.txt

@@ -1325,6 +1325,7 @@ tests/test_scan_rn_perf.py
 tests/test_scan_wp_smells.py
 tests/test_scheduled_route.py
 tests/test_sdk_presence.py
+tests/test_secret_fixture_policy.py
 tests/test_session_context_cadence.py
 tests/test_session_options_parity.py
 tests/test_session_recap.py

{coding_os-0.3.2 → coding_os-0.3.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "coding-os"
-version = "0.3.2"
+version = "0.3.4"
 description = "The cognitive operating system that gives AI agents memory, structure, and discipline"
 readme = "README.md"
 requires-python = ">=3.10"

{coding_os-0.3.2 → coding_os-0.3.4}/src/cli/main.py

@@ -805,6 +805,16 @@ def _dry_run_preview(
     click.echo("(dry-run — nothing written)")
 
 
+def _example_swimlane(project: Path) -> str:
+    # Swimlane ids are per-stack (angular: components…, wordpress: theme…), so a
+    # literal in the quick-start example would fail validation in most projects —
+    # read the set this project actually composed.
+    with contextlib.suppress(Exception):
+        raw = (project / STATE_DIR / "scrumban-config.yaml").read_text(encoding="utf-8")
+        return str((yaml.safe_load(raw) or {})["swimlanes"][0]["id"])
+    return "<swimlane>"
+
+
 def _registered_slug(project: Path) -> str:
     # The hub slug the Composer navigates by; "" under --no-register or a failed
     # registry write, both of which are non-fatal for init itself.
@@ -1853,10 +1863,17 @@ def init(
     click.echo(f"  Config:   {CONFIG_FILE}")
     click.echo(f"  State:    {STATE_DIR}/")
     click.echo("  Makefile: make help")
-    click.echo("\nQuick start:")
-    click.echo("  cos daily              # Project status + today's tasks")
-    click.echo("  cos task-pick          # See next recommended task")
-    click.echo("  cos task-start TASK-001   # Start working")
+    click.echo("\nQuick start (no Hub required — this all runs from the CLI):")
+    click.echo(f"  cd {project.name} && {agents[0] if agents else '<your agent>'}")
+    if "tasks" in disabled_modules:
+        click.echo("  cos module list        # Subsystems on here (the task board is off)")
+    else:
+        click.echo("  cos daily              # Project status + today's tasks")
+        click.echo(
+            f'  cos task-create --title "First task" --swimlane {_example_swimlane(project)} '
+            '--kind chore --outcome "Walk the CLI loop end to end" --ready'
+        )
+        click.echo("  cos task-start <ID>    # Guide: docs/workflow/workflow-guide.md")
 
     if not template:
         available = sorted(_get_stack_registry().keys())

{coding_os-0.3.2 → coding_os-0.3.4}/src/core/graph_os/toolchain.py

@@ -258,7 +258,7 @@ def _load_ts_base_url(root: Path) -> str:
 # ---------------------------------------------------------------------------
 
 
-_GO_MODULE_RE = re.compile(r"^module\s+(\S+)\s*$", re.MULTILINE)
+_GO_MODULE_RE = re.compile(r"^module\s+\"?([^\"\s]+)\"?\s*$", re.MULTILINE)
 
 
 def _load_go_module(root: Path) -> str:

{coding_os-0.3.2 → coding_os-0.3.4}/src/core/hooks/block-secrets.sh

@@ -106,8 +106,9 @@ if [[ "$TOOL" == "Write" || "$TOOL" == "Edit" ]]; then
     exit 2
   fi
 
-  # Block AWS credentials
-  if echo "$CONTENT" | grep -qE 'AKIA[0-9A-Z]{16}'; then
+  # Block AWS credentials, long-lived (AKIA) and temporary STS (ASIA). Ids ending
+  # in EXAMPLE are AWS's own reserved documentation values and never authenticate.
+  if echo "$CONTENT" | grep -oE '(AKIA|ASIA)[0-9A-Z]{16}' | grep -qvE 'EXAMPLE$'; then
     echo "BLOCKED: AWS access key ID detected. Use environment variables or IAM roles." >&2
     exit 2
   fi

{coding_os-0.3.2 → coding_os-0.3.4}/src/core/subsystems.yaml

@@ -36,7 +36,7 @@ version: 1
 default_profile: standard
 profiles:
   lite: { disabled: [docs, tasks, graph, memory, cognition, observability, hub-extras, cicd] }  # kernel-only: discipline + safety, ~zero MCP tools (MCP-averse adopters)
-  core: { disabled: [memory, cognition, observability, cicd] }   # kernel + docs + tasks + graph
+  core: { disabled: [memory, cognition, observability, cicd] }   # kernel + docs + tasks + graph + hub-extras
   standard: { disabled: [cognition, cicd] }                      # + memory + observability (default)
   full: { disabled: [] }                                         # everything (today's behaviour)
 

{coding_os-0.3.2 → coding_os-0.3.4}/src/scripts/dev/audit_doc_links.py

@@ -13,18 +13,19 @@ from __future__ import annotations
 import os
 import re
 import sys
+import unicodedata
 from collections import defaultdict
 from pathlib import Path
 from urllib.parse import unquote, urlparse
 
 REPO = Path(__file__).resolve().parent.parent.parent.parent
 DOCS = (REPO / "docs").resolve()
-# code-os-core-docs: external reference material (not project docs).
 # _templates: doc TEMPLATES shipped by `cos init` — their links are
 #   intentionally consumer-relative / placeholder (`relative/path`,
 #   `./<related>.md`), so auditing them as navigable docs is a
-#   category error.
-SKIP_DIRS = {"code-os-core-docs", "_templates"}
+#   category error. Nothing else is exempt: an unwatched subtree is where
+#   link rot and stale identifiers survive a public launch unnoticed.
+SKIP_DIRS = {"_templates"}
 # Repo-root markdown files (agent entrypoints + community files) —
 # scanned for links but exempt from the doc frontmatter contract.
 # Symlinks (CLAUDE.md → AGENTS.md) are skipped to avoid double-scanning.
@@ -105,19 +106,25 @@ _OPENING_NEXT = re.compile(r"^(?:Read next:|>\s*N:)\s*(.+)$", re.M)
 def _slugify(text: str) -> str:
     """Slugify a heading the way GitHub does.
 
-    GitHub's anchor algorithm (github-slugger): lowercase, drop
-    characters that are not word/space/hyphen, then replace each
-    whitespace character with a single hyphen. Crucially it does NOT
-    collapse consecutive hyphens — `## Rule 0 — Docs-first` becomes
-    `rule-0--docs-first` (the em-dash is dropped, the two spaces around
-    it become two hyphens). The previous implementation collapsed `-+`,
-    which produced `rule-0-docs-first` and false-flagged every
-    `Rule N — title` cross-reference as a broken anchor.
+    GitHub's anchor algorithm (github-slugger): lowercase, keep letters,
+    marks, numbers, `_`, `-`, whitespace and the zero-width joiners, drop
+    everything else, then replace each whitespace character with a single
+    hyphen. Crucially it does NOT collapse consecutive hyphens — `## Rule 0
+    — Docs-first` becomes `rule-0--docs-first` (the em-dash is dropped, the
+    two spaces around it become two hyphens).
+
+    Python's `\\w` is narrower than github-slugger's keep-set: it drops
+    combining marks (اصلاً) and format characters (the half-space in
+    سیستم‌ها), so a `\\w`-based strip false-flags every Persian heading.
+    Verified against GitHub's own /markdown renderer over 200 real repo
+    headings — 120 of them non-ASCII — with zero divergence.
     """
-    s = text.lower()
-    s = re.sub(r"[^\w\s-]", "", s)
-    s = re.sub(r"\s", "-", s)
-    return s or "section"
+    kept = [
+        ch
+        for ch in text.lower()
+        if ch.isspace() or ch in "-_‌‍" or unicodedata.category(ch)[0] in "LMN"
+    ]
+    return re.sub(r"\s", "-", "".join(kept)) or "section"
 
 
 def _is_external(url: str) -> bool:

{coding_os-0.3.2 → coding_os-0.3.4}/src/templates/_base/scaffold/docs/workflow/workflow-guide.md

@@ -10,6 +10,12 @@ Read next: `../governance/agent-workflow.md`, `../governance/task-lifecycle.md`
 
 ## TL;DR
 
+> **How much of this applies to you?** coding-os is modular. This guide is
+> rendered for the subsystem modules this project enabled at create time —
+> `cos module list` shows the current set, `cos module enable|disable <id>`
+> changes it. Disabling one takes its tools, commands, and hooks with it; the
+> kernel's safety and task-hygiene gates stay on either way.
+
 This project uses **coding-os** — a documentation-driven workflow with SSOT files,
 a Scrumban task board, and AI-agent enforcement hooks. Work flows through tasks:
 `icebox → in_progress → testing → complete` (plus `blocked` / `archive`). The `cos` CLI and slash

coding_os-0.3.4/src/templates/go/scaffold/src/backend/go.mod

@@ -0,0 +1,3 @@
+module "{{PROJECT_NAME}}"
+
+go 1.25

{coding_os-0.3.2 → coding_os-0.3.4}/src/templates/go-fiber/scaffold/src/backend/go.mod

@@ -1,4 +1,4 @@
-module {{PROJECT_NAME}}
+module "{{PROJECT_NAME}}"
 
 go 1.25.0
 

coding_os-0.3.4/src/templates/go-plain/scaffold/src/backend/go.mod

@@ -0,0 +1,3 @@
+module "{{PROJECT_NAME}}"
+
+go 1.22

{coding_os-0.3.2 → coding_os-0.3.4}/src/templates/laravel/scaffold/src/backend/composer.json

@@ -3,11 +3,11 @@
   "type": "project",
   "require": {
     "php": "^8.2",
-    "laravel/framework": "^11.0"
+    "laravel/framework": "^12.61.1"
   },
   "require-dev": {
     "phpunit/phpunit": "^11.0",
-    "larastan/larastan": "^2.0"
+    "larastan/larastan": "^3.0"
   },
   "scripts": {
     "lint": "phpstan analyse app routes --level=6",

{coding_os-0.3.2 → coding_os-0.3.4}/src/templates/nestjs/scaffold/src/backend/package.json

@@ -10,19 +10,19 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@nestjs/common": "^10.3.0",
-    "@nestjs/core": "^10.3.0",
-    "@nestjs/platform-express": "^10.3.0",
+    "@nestjs/common": "^11.1.18",
+    "@nestjs/core": "^11.1.18",
+    "@nestjs/platform-express": "^11.1.18",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.1",
     "reflect-metadata": "^0.2.2",
     "rxjs": "^7.8.1"
   },
   "devDependencies": {
-    "@nestjs/cli": "^10.3.0",
-    "@nestjs/testing": "^10.3.0",
+    "@nestjs/cli": "^11.0.24",
+    "@nestjs/testing": "^11.1.18",
     "supertest": "^7.0.0",
     "typescript": "^5.4.0",
-    "vitest": "^2.0.0"
+    "vitest": "^3.2.6"
   }
 }

{coding_os-0.3.2 → coding_os-0.3.4}/src/templates/nextjs/scaffold/src/frontend/package.json

@@ -11,7 +11,7 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "next": ">=14",
+    "next": ">=15.5.21",
     "react": ">=18",
     "react-dom": ">=18"
   },
@@ -23,6 +23,6 @@
     "eslint": ">=9",
     "typescript": ">=5.4",
     "typescript-eslint": ">=8",
-    "vitest": ">=2"
+    "vitest": ">=3.2.6"
   }
 }

{coding_os-0.3.2 → coding_os-0.3.4}/src/templates/rails/scaffold/src/backend/Gemfile

@@ -3,7 +3,7 @@ source "https://rubygems.org"
 ruby "3.3.0"
 
 gem "rails", "~> 7.1"
-gem "puma", "~> 6.4"
+gem "puma", ">= 7.2.1"
 
 group :development, :test do
   gem "rspec-rails", "~> 6.1"

{coding_os-0.3.2 → coding_os-0.3.4}/src/templates/react-native/scaffold/src/mobile/package.json

@@ -18,6 +18,6 @@
     "eslint": ">=9",
     "typescript": ">=5.4",
     "typescript-eslint": ">=8",
-    "vitest": ">=2"
+    "vitest": ">=3.2.6"
   }
 }