feat(license): sync stable machine id to core [Story PRO-13.2]

Admin merge authorized by Rafael via /devops -admin. Checks were green; repository ruleset and review gate were temporarily relaxed and restored immediately after merge.

Author: rafaelscosta

.aiox-core/development/scripts/unified-activation-pipeline.js

@@ -209,7 +209,7 @@ class UnifiedActivationPipeline {
     const metrics = { loaders: {} };
 
     // --- Tier 1: Critical (AgentConfig) ---
-    const tier1Budget = LOADER_TIERS.critical.timeout;
+    const tier1Budget = this._resolveLoaderTimeout('critical', LOADER_TIERS.critical.timeout);
     const agentComplete = await this._profileLoader('agentConfig', metrics, tier1Budget, () => {
       const loader = new AgentConfigLoader(agentId);
       return loader.loadComplete(coreConfig);
@@ -231,7 +231,7 @@ class UnifiedActivationPipeline {
     }
 
     // --- Tier 2: High (PermissionMode + GitConfig) — parallel ---
-    const tier2Budget = LOADER_TIERS.high.timeout;
+    const tier2Budget = this._resolveLoaderTimeout('high', LOADER_TIERS.high.timeout);
     const elapsedAfterT1 = Date.now() - pipelineStart;
     const tier2Remaining = Math.max(tier2Budget - elapsedAfterT1, 20);
 
@@ -277,7 +277,7 @@ class UnifiedActivationPipeline {
     }
 
     // --- Tier 3: Best-effort (SessionContext + ProjectStatus) — parallel ---
-    const tier3Budget = LOADER_TIERS.bestEffort.timeout;
+    const tier3Budget = this._resolveLoaderTimeout('bestEffort', LOADER_TIERS.bestEffort.timeout);
     const elapsedAfterT2 = Date.now() - pipelineStart;
     const tier3Remaining = Math.max(tier3Budget - elapsedAfterT2, 20);
 
@@ -467,6 +467,32 @@ class UnifiedActivationPipeline {
     return DEFAULT_PIPELINE_TIMEOUT_MS;
   }
 
+  /**
+   * Resolve per-tier loader timeout.
+   *
+   * Intended mainly for constrained CI/test environments where cold filesystem
+   * reads can exceed the production performance budget without indicating a
+   * functional activation failure.
+   *
+   * @private
+   * @param {'critical'|'high'|'bestEffort'} tierName
+   * @param {number} defaultTimeout
+   * @returns {number}
+   */
+  _resolveLoaderTimeout(tierName, defaultTimeout) {
+    const envKey = `AIOX_LOADER_TIMEOUT_${tierName.replace(/([A-Z])/g, '_$1').toUpperCase()}`;
+    const envTimeout = process.env[envKey];
+
+    if (envTimeout) {
+      const parsed = parseInt(envTimeout, 10);
+      if (!isNaN(parsed) && parsed > 0) {
+        return parsed;
+      }
+    }
+
+    return defaultTimeout;
+  }
+
   /**
    * Build agent definition from loaded config data.
    * @private

.aiox-core/install-manifest.yaml

@@ -7,8 +7,8 @@
 # - SHA256 hashes for change detection
 # - File types for categorization
 #
-version: 5.0.3
-generated_at: "2026-05-05T23:14:42.150Z"
+version: 5.0.8
+generated_at: "2026-05-06T19:40:38.959Z"
 generator: scripts/generate-install-manifest.js
 file_count: 1103
 files:
@@ -1689,9 +1689,9 @@ files:
     type: script
     size: 17607
   - path: development/scripts/unified-activation-pipeline.js
-    hash: sha256:de2d4a10b01da32d31c1f810feed429804da6869bb958d5a5ebe626589d0a2f6
+    hash: sha256:6910a7f6b0cef65a0886e0b29bbcb0ee401ca4fb444eb255a7a368cb67327aa7
     type: script
-    size: 30125
+    size: 30996
   - path: development/scripts/usage-tracker.js
     hash: sha256:6057623755bf0ee1d9e0fb36740fc41914a5f8ca8ad994d40edec260e273744b
     type: script

.github/workflows/ci.yml

@@ -188,6 +188,54 @@ jobs:
           fail_ci_if_error: false
         continue-on-error: true
 
+  pro-machine-id-stability:
+    name: Pro Machine ID Stability (${{ matrix.os }})
+    needs: changes
+    if: ${{ needs.changes.outputs.tests == 'true' || needs.changes.outputs.config == 'true' }}
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 10
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+          cache-dependency-path: package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Detect Pro submodule availability
+        id: pro
+        shell: pwsh
+        run: |
+          if (Test-Path "pro/license/license-crypto.js") {
+            "available=true" >> $env:GITHUB_OUTPUT
+          } else {
+            "available=false" >> $env:GITHUB_OUTPUT
+            Write-Host "pro/ submodule is not available with the default CI token."
+            Write-Host "Cross-platform Pro runtime validation runs in the aiox-pro CI matrix."
+          }
+
+      - name: Run machine ID stability tests
+        if: steps.pro.outputs.available == 'true'
+        run: npx jest --runTestsByPath tests/license/machine-id-stability.test.js --runInBand --testPathIgnorePatterns=/node_modules/
+
+      - name: Record private submodule skip
+        if: steps.pro.outputs.available != 'true'
+        shell: pwsh
+        run: |
+          Write-Host "Skipping aiox-core Pro machine ID job because pro/ is private in default-token CI."
+          Write-Host "See https://github.com/SynkraAI/aiox-pro/pull/11 for the cross-platform Pro runtime matrix."
+
   story-validation:
     name: Story Checkbox Validation
     needs: changes

README.md

@@ -614,6 +614,12 @@ O **AIOX Pro** é o módulo premium do AIOX, oferecendo funcionalidades avançad
 npx aiox-pro install
 ```
 
+### Identificação Estável de Máquina (>= 5.0.8)
+
+O AIOX Pro agora usa o UUID nativo do sistema operacional para gerar `machineId`, preservando o hash SHA-256 e evitando consumo extra de assentos quando o macOS, VPNs ou redes Wi-Fi alteram o MAC/interface ativa.
+
+Caches locais de licença criados pelo algoritmo antigo são migrados automaticamente na próxima leitura. A janela de fallback legacy é de 90 dias; depois disso, instalações antigas precisam reativar online.
+
 ### Features Premium
 
 - **Squads Avançados** - Squads especializados com capacidades expandidas

bin/utils/validate-publish.js

@@ -23,6 +23,7 @@ const PROJECT_ROOT = path.join(__dirname, '..', '..');
 const PRO_DIR = path.join(PROJECT_ROOT, 'pro');
 const CRITICAL_FILE = path.join(PRO_DIR, 'license', 'license-api.js');
 const MIN_FILE_COUNT = 50;
+const PACK_DRY_RUN_TIMEOUT_MS = 120000;
 
 // CI environments may not have access to the private pro submodule
 const IS_CI = process.env.CI === 'true' || process.env.GITHUB_ACTIONS === 'true';
@@ -75,7 +76,7 @@ try {
   const packOutput = execSync('npm pack --dry-run 2>&1', {
     encoding: 'utf8',
     cwd: PROJECT_ROOT,
-    timeout: 30000,
+    timeout: PACK_DRY_RUN_TIMEOUT_MS,
   });
   // npm pack --dry-run outputs lines starting with "npm notice" for each file
   const fileLines = packOutput.split('\n').filter(line =>