data-sentinel-forge 0.5.0__tar.gz

data_sentinel_forge-0.5.0/.gitignore

@@ -0,0 +1,38 @@
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+.eggs/
+build/
+dist/
+
+# Virtualenvs
+.venv/
+venv/
+
+# Tool caches
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.coverage
+coverage.xml
+htmlcov/
+
+# Data Sentinel local state
+.data-sentinel/
+data/sentinel.db
+
+# Editors / OS
+.idea/
+.vscode/
+.DS_Store
+
+graphify-out/
+prompt_evo*md
+prompt_inicial.md
+
+# Frontend (Angular)
+node_modules/
+frontend/dist/
+frontend/.angular/
+frontend/coverage/

data_sentinel_forge-0.5.0/CHANGELOG.md

@@ -0,0 +1,149 @@
+# Changelog
+
+All notable changes to Data Sentinel are documented here. The format
+follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+
+## [Unreleased]
+
+### Fixed
+- `install` human render now surfaces per-file `note` (e.g. "user-owned,
+  not managed — skipped") and the `repaired`/`removed`/`kept`/`skipped`
+  lists emitted by repair and uninstall receipts — previously this data
+  only existed in `--json` output.
+- `sqlglot` lower bound raised to `>=30` — `exp.Expr` (used across the
+  SQL analyzers) only exists in sqlglot 30.x; `>=25` let pip resolve
+  versions where `data_sentinel.analyzers.sql` fails at import.
+- `forge.json` / `forge.agentic.json` regenerated — `version` drifted to
+  `0.4.0` after the 0.5.0 bump, failing the manifest drift test.
+
+## [0.5.0] - 2026-11-04
+
+### Added
+- **Guided install lifecycle + wizard** — install planning, receipts and
+  host-aware guided flow on a real TTY; flags stay non-interactive.
+
+## [0.4.0] - 2026-10-26
+
+### Added
+
+- `POST /api/v1/analyze/{id}` now accepts the full tool `inputSchema` —
+  multi-input tools (`quality.detect_drift`, `lineage.impact`,
+  `doctor.correlate`) and file-free tools (`emr.estimate_cost`) are
+  callable through the API. File-like keys resolve under allowed roots
+  with the extension allowlist; v1 `{"file": "..."}` stays valid.
+- `sentinel.spark.analyze_plan` emits the parsed plan tree as a typed
+  output (`plan` key; `ExecutionPlan.to_dict()` wire shape). The Angular
+  plan explorer renders the operator tree.
+- Operational schema v2: `ingestion_checkpoints` table with
+  save/get/delete — resumable cursors for streaming ingestion.
+- `X-Request-Id` on every API response (inbound header honored);
+  `SentinelError` taxonomy mapped to `{detail, code, details,
+  request_id}` envelopes; redacted 500 catch-all.
+- Contract test `test_ts_contract_parity.py` validates
+  `frontend/.../api.models.ts` field names against the Python wire
+  shapes (8 interfaces).
+
+### Changed
+
+- **Distribution renamed to `data-sentinel-forge`** (PyPI name-policy;
+  module stays `data_sentinel`, CLI stays `data-sentinel`). Install:
+  `pip install data-sentinel-forge`.
+- `PRAGMA busy_timeout=5000` on all SQLite stores (WAL concurrency).
+- `ApiService.analyze` accepts a full inputs object; `AnalyzeRequest`
+  generalized to the tool inputSchema shape.
+- Phase-0 baseline audit: `docs/audits/pre-cycle-09-baseline.md`;
+  cycle report: `docs/cycles/cycle-09-report.md`.
+
+## [0.3.0] - 2026-10-23
+
+### Fixed
+
+- Changelog: PyPI publish for 0.2.2 recorded as blocked (approval-gated
+  `pypi` environment).
+
+## [0.2.2] - 2026-10-23
+
+### Security
+
+- Vendored `_installkit` backported 1.0.0 -> 1.0.4: stale-lock ownership tokens
+  and reclaim race fix, credential redaction covering URL userinfo, unsafe-path
+  refusals (`FORGE-INSTALL-UNSAFE-PATH`) in plan/apply/repair/uninstall/prune,
+  atomic-write mode preservation, and unsafe ledger entries surfaced in
+  `status()`/`doctor` as non-repairable.
+
+## [0.2.1] - 2026-10-21
+
+### Fixed
+
+- CLI stdout/stderr reconfigured to UTF-8 at startup — report glyphs (e.g. `⋈`)
+  no longer crash on Windows consoles defaulting to cp1252
+  (`UnicodeEncodeError` in release smoke).
+- Release workflow: `test_version` reads `__version__` dynamically;
+  `install manifest` regenerated for 0.2.x; wheel test builds its own wheel
+  when `dist/` is absent (verify-before-build ordering).
+
+## [0.2.0] - 2026-10-21
+
+### Added
+
+- Integrations cycle (lf-0030): deterministic doctor x sentinel cross-correlation — `data-sentinel import doctor-bundle --correlate` and `import correlate` merge doctor findings into sentinel diagnostics anchored on declared evidence only (no confidence promotion, no causality claims); `sentinel.doctor.correlate` registry tool.
+
+## [0.1.0] — 2026-10-21
+
+First tagged release. Data Sentinel is an independent, offline-first,
+deterministic diagnostics platform for data-engineering workloads —
+Spark, AWS Glue, SQL, lakehouse and EMR — where every finding cites its
+evidence and declares an honest confidence level.
+
+### Added
+
+- **Diagnostic core**: `analyze`, `sql analyze`, `spark
+  explain|optimize`, `glue inspect|runs|diagnose`, `lakehouse
+  metadata|access|policy|operation|compat`, `emr analyze|compare|cost`,
+  `quality validate|import`, `lineage ingest|impact`, `investigate run`,
+  `capabilities`, `agents`, `tools`, `report show|export`.
+- **Evidence contract**: findings carry `evidence_ids` and statuses
+  `CONFIRMED | PROBABLE | POSSIBLE | UNKNOWN`; missing evidence surfaces
+  in `limitations` rather than false "healthy" conclusions.
+- **Portable installer** (`data-sentinel install`): interactive and
+  `--yes` flows; scopes project/workspace/user; profiles
+  minimal/recommended/full; host adapters for Claude, Devin, Codex and
+  Copilot (Cursor: partial, no catalog adapter); ownership-aware writes,
+  ledger, rollback, drift detection, `status|doctor|repair|uninstall`,
+  `install env` environment report.
+- **Agentic surfaces**: 5 host skills (`data-sentinel-investigate`,
+  `-spark-plan`, `-sql-review`, `-quality-drift`, `-report`) and 3 agent
+  profiles (`sentinel-investigator`, `-reviewer`, `-spark-specialist`)
+  shipped in the wheel; `forge.json`/`forge.agentic.json` manifests for
+  Forge ecosystem discovery.
+- **MCP server** (`mcp serve`): 20 tools over stdio, read-only roots,
+  real handshake validation by the installer.
+- **Optional AWS path**: `glue *` verbs behind the `aws` extra and
+  credentials; read-only, with `--dry-run` collection preview.
+- **Angular Control Center** (`frontend/`): investigations, reports,
+  evidence explorer and observability UI.
+- **API surface** behind the `api` extra.
+
+### Security
+
+- Asset integrity fail-closed via `MANIFEST.sha256` (LF-pinned for
+  cross-platform checkout).
+- No remote script execution, no writes outside the authorized scope,
+  no silent overwrite of user-owned files, secrets redacted before
+  persistence, environment reports emit set/unset only.
+- CI matrix: Linux, macOS, Windows × Python 3.11/3.12.
+
+### Known restrictions
+
+- PyPI publication not yet performed; install from source or
+  `pip install git+https://github.com/EdgarSocrates98/data-sentinel-forge`.
+- Cursor host is partially supported (no full catalog adapter).
+- Codex does not read project-scope `.mcp.json`; MCP needs user scope
+  or `codex mcp add`.
+- The Forge / forge-cli integration is manifest- and docs-level only.
+
+[0.1.0]: https://github.com/EdgarSocrates98/data-sentinel-forge/releases/tag/v0.1.0
+
+> **PyPI**: `v0.2.2` não publicado — workflow `Release` gated no
+> environment `pypi` (trusted publisher + aprovação humana). Jobs de
+> verify/smoke verdes; publish falhou por design até aprovação do dono.

data_sentinel_forge-0.5.0/LICENSE

@@ -0,0 +1,182 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work are terminated
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works that
+          You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that are for attribution only; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that are for
+          attribution only. You may place your notices with your own
+          Derivative Works that You distribute to identify the source of
+          the Derivative Works, provided that You do not include a copy of
+          the NOTICE itself within that Derivative Work.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be deemed to be a Contribution licensed
+      under the same terms and conditions as this License, notwithstanding
+      any provision in this section or section 9 that requires a separate
+      license agreement granting You additional permissions for the
+      Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the Work.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides the Work) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, will You be liable to any
+      Contributor for damages, whether direct, indirect, incidental,
+      special, exemplary, or consequential damages (including, but not
+      limited to, attorneys' fees, costs of lost profits, or other
+      indirect damages) arising out of or relating to this License, even
+      if You are advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations. However, in accepting such
+      obligations, You may act only on Your own behalf and on Your sole
+      responsibility, not on behalf of any Contributor, not on behalf of
+      any Contributor's ability to enforce this License, and on Your own
+      choice of law. Any liability accepted by You under this License
+      shall be indicated at the beginning of any reproduction of this
+      License.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 EdgarSocrates98
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

data_sentinel_forge-0.5.0/PKG-INFO

@@ -0,0 +1,236 @@
+Metadata-Version: 2.5
+Name: data-sentinel-forge
+Version: 0.5.0
+Summary: Data Sentinel — Intelligent Data Engineering & Agentic Diagnostics Platform
+Project-URL: Repository, https://github.com/EdgarSocrates98/data-sentinel-forge
+Project-URL: Issues, https://github.com/EdgarSocrates98/data-sentinel-forge/issues
+Author: EdgarSocrates98
+License-Expression: Apache-2.0
+License-File: LICENSE
+Keywords: data-engineering,diagnostics,glue,spark,sql
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Database
+Classifier: Topic :: Software Development :: Quality Assurance
+Requires-Python: >=3.11
+Requires-Dist: pydantic<3,>=2.7
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: sqlglot>=30
+Requires-Dist: typer>=0.12
+Provides-Extra: api
+Requires-Dist: fastapi>=0.110; extra == 'api'
+Requires-Dist: uvicorn>=0.29; extra == 'api'
+Provides-Extra: aws
+Requires-Dist: boto3>=1.34; extra == 'aws'
+Provides-Extra: dev
+Requires-Dist: jsonschema>=4.21; extra == 'dev'
+Requires-Dist: mypy>=1.10; extra == 'dev'
+Requires-Dist: pytest-cov>=5.0; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: ruff>=0.5; extra == 'dev'
+Provides-Extra: mcp
+Requires-Dist: mcp>=1.9; extra == 'mcp'
+Provides-Extra: stats
+Requires-Dist: numpy>=1.26; extra == 'stats'
+Requires-Dist: scipy>=1.11; extra == 'stats'
+Description-Content-Type: text/markdown
+
+# Data Sentinel
+
+<p align="center">
+  <img src="docs/assets/logo.png" alt="Data Sentinel logo" width="420" />
+</p>
+
+**Intelligent Data Engineering & Agentic Diagnostics Platform.**
+
+Ferramenta open source (Apache-2.0) para investigar, analisar e explicar
+problemas em workloads de engenharia de dados — logs Spark/Glue, queries SQL,
+jobs e ambientes lakehouse — com diagnósticos **apoiados em evidência
+auditável**. Nada de causa-raiz inventada: todo achado cita a evidência que o
+sustenta e declara seu nível de confiança.
+
+## O que é
+
+- **Análise determinística primeiro**: analyzers executam regras curadas sobre
+  artefatos locais; resultados fracos ficam `PROBABLE`/`POSSIBLE`/`UNKNOWN` em
+  vez de virar diagnóstico fabricado.
+- **Offline por padrão**: analisa logs e SQL locais sem nenhuma chamada de
+  rede ou credencial cloud.
+- **Read-only**: nunca altera recursos de produção; guardas de caminho,
+  tamanho e sanitização protegem a entrada.
+- **Auditoria built-in**: evidências são sanitizadas (segredos redigidos) e
+  persistidas em SQLite local junto ao relatório versionado.
+
+## Instalação
+
+Requer Python ≥ 3.11.
+
+```bash
+# via uv (recomendado para desenvolvimento)
+uv sync
+uv run data-sentinel --help
+
+# via pip
+pip install .
+data-sentinel --help
+```
+
+Detalhes: [docs/installation.md](docs/installation.md).
+
+### Instalação agentic
+
+Publica skills, agents e o servidor MCP nos hosts suportados (Claude,
+Devin, Codex, Copilot):
+
+```bash
+data-sentinel install                    # interativo
+data-sentinel install --yes --host all   # não-interativo
+data-sentinel install status|doctor|env  # lifecycle
+data-sentinel install uninstall          # remove só arquivos gerenciados
+```
+
+Guias por escopo/host/plataforma em [docs/installation/](docs/installation/).
+
+## Quickstart
+
+```bash
+# Analisar um log de Glue/Spark (saída real abaixo)
+data-sentinel analyze --file fixtures/logs/glue_oom.log
+
+# Análise estática de SQL (AST SQLGlot, dialetos spark/trino)
+data-sentinel sql analyze --file fixtures/joins/high_volume_4tables.sql --dialect spark
+
+# Plano físico Spark (EXPLAIN) → árvore + estratégias + limitações
+data-sentinel spark explain --file fixtures/plans/sort_merge_join.txt
+
+# Pipeline composto: SQL + joins/cardinalidade + config advisor
+data-sentinel spark optimize --sql query.sql --stats stats.json --config spark-defaults.conf
+
+# AWS Glue read-only (requer [aws] + credenciais)
+data-sentinel glue runs --job meu-job --limit 10 --region us-east-1
+data-sentinel glue diagnose --job meu-job --run-id jr_abc --region us-east-1
+
+# Saúde da instalação / capacidades / relatórios
+data-sentinel doctor
+data-sentinel capabilities [--descriptors]
+data-sentinel import doctor-bundle -f <arquivo>
+data-sentinel report show --id <report_id> --format markdown
+```
+
+Saída real de `analyze` sobre `fixtures/logs/glue_oom.log`:
+
+```text
+relatório 79e1efef4cd84f94882c76914aa9b760 (schema 1.0.0)
+resumo: 1 achado(s): CONFIRMED=1
+
+[HIGH/CONFIRMED] out_of_memory
+  Assinatura inequívoca de java.lang.OutOfMemoryError indica que driver ou
+  executor estourou o heap disponível. 2 ocorrência(s) no log analisado.
+  evidência: fixtures/logs/glue_oom.log:5
+    ... Lost task 0.1 ... : java.lang.OutOfMemoryError: Java heap space
+  recomendação: Aumentar spark.driver.memory ou spark.executor.memory
+  ...
+```
+
+Mais exemplos: [examples/README.md](examples/README.md) e
+[docs/evidence/](docs/evidence/) (saídas capturadas de comandos reais).
+
+## Control Center (Cycle 06)
+
+Portal web real sobre o mesmo núcleo — API FastAPI (`data-sentinel serve`,
+bind `127.0.0.1:8790`) + frontend Angular 20 (`frontend/`). Investigações
+agênticas via `/api/v1/investigations`, stream SSE, grafo de evidências,
+explorers de workloads/Spark/qualidade e registry de agentes — sem dado
+simulado.
+
+```bash
+uv run data-sentinel serve --port 8790        # API → /api/v1/*
+cd frontend && npx ng serve --port 4200       # portal → localhost:4200
+```
+
+![Control Center — visão geral](docs/assets/cycle06/homologation-dashboard-dark.png)
+
+Guia completo (endpoints, segurança, limitações):
+[docs/guides/control-center.md](docs/guides/control-center.md).
+
+## Códigos de saída
+
+`0` sucesso · `1` erro de domínio/usuário · `2` erro de uso · `3` erro interno.
+Ver [ADR 0006](docs/adr/0006-exit-code-scheme.md).
+
+## Documentação
+
+| Doc | Conteúdo |
+|---|---|
+| [docs/installation.md](docs/installation.md) | Instalação e requisitos |
+| [docs/cli.md](docs/cli.md) | Referência dos comandos |
+| [docs/configuration.md](docs/configuration.md) | Perfis, fontes, precedência |
+| [docs/architecture.md](docs/architecture.md) | Arquitetura e módulos |
+| [docs/security.md](docs/security.md) | Guardas, redação, postura read-only |
+| [docs/development.md](docs/development.md) | Setup de dev, testes, lint |
+| [docs/troubleshooting.md](docs/troubleshooting.md) | Erros comuns |
+| [docs/roadmap.md](docs/roadmap.md) | Cycles 02–08 e backlog do Cycle 02 |
+| [docs/validation-matrix.md](docs/validation-matrix.md) | Matriz de validação com evidências |
+| [docs/cycle-01-report.md](docs/cycle-01-report.md) | Relatório final do Cycle 01 |
+| [docs/cycles/cycle-02-final-report.md](docs/cycles/cycle-02-final-report.md) | Relatório final do Cycle 02 |
+| [docs/guides/](docs/guides/) | Guias por funcionalidade (Glue, CloudWatch, plano, SQL, joins, config) |
+| [docs/examples/](docs/examples/) | Exemplos executáveis com saídas reais |
+| [docs/adr/](docs/adr/) | Decisões arquiteturais |
+
+## Estrutura
+
+```text
+src/data_sentinel/
+├── core/          # contracts, configuration, security, exceptions
+├── analyzers/     # registry + spark/{log,plans,joins,config} + sql + cloudwatch
+├── connectors/    # aws/{glue,cloudwatch_logs} — extra [aws], read-only
+├── diagnostics/   # orchestrator + correlation + timeline
+├── reporting/     # renderers terminal/JSON/Markdown
+├── persistence/   # SQLite store + migrations (stdlib)
+├── api/           # FastAPI app (Cycle 06) — `data-sentinel serve`, /api/v1/*
+├── agents/ + tools/ + mcp/   # runtime agêntico + registry + MCP (Cycle 05)
+└── cli/           # Typer app
+
+frontend/          # Angular 20 Control Center (Cycle 06) — raiz do repo
+```
+
+## Estado do projeto
+
+**Cycle 08.2 implementado** — installer portátil universal: CLI
+`data-sentinel install` (interativo + `--yes`), adapters para
+Claude/Devin/Codex/Copilot (Cursor declarado sem catálogo), 5 skills +
+3 agents versionados na wheel com `MANIFEST.sha256`, MCP lifecycle
+(`mcp serve`, handshake real), `forge.json`/`forge.agentic.json` para
+descoberta Forge CLI, lifecycle auditável (ledger sha256, receipts,
+repair, uninstall preservando arquivos do usuário) e
+`install env`/`status`/`doctor`. Evidência:
+[docs/cycles/cycle-08-2-final-report.md](docs/cycles/cycle-08-2-final-report.md).
+Cycle 06: Control Center Angular + API
+([cycle-06](docs/cycles/cycle-06-final-report.md)); ciclo anterior em
+[cycle-08-1](docs/cycles/cycle-08-1-final-report.md).
+**1025 testes Python + 96 specs Angular + ~145 Playwright, ruff+mypy
+strict limpos.**
+Ciclos anteriores: [cycle-05](docs/cycles/cycle-05-final-report.md),
+[05.1](docs/cycles/cycle-05-1-final-report.md),
+[04](docs/cycles/cycle-04-final-report.md).
+
+## Licença
+
+Apache-2.0 — ver [LICENSE](LICENSE).
+
+## Cycle 03 — Lakehouse (Iceberg, Lake Formation, cross-account)
+
+```bash
+data-sentinel lakehouse metadata -f metadata.json   # Iceberg metadata
+data-sentinel lakehouse access   -f contexto.json   # cross-account
+data-sentinel lakehouse policy   -f policy.json     # IAM/S3/KMS offline
+data-sentinel lakehouse operation -f merge.sql      # MERGE/APPEND
+data-sentinel lakehouse compat --runtime glue-5.1 --operation merge \
+    --access-mode fgac                              # compatibilidade
+```
+
+Ver `docs/cycles/cycle-03-final-report.md` e guias em `docs/guides/`.