@agent-native/core 0.131.7 → 0.132.0

package/dist/audit/redact.js

@@ -10,13 +10,18 @@
  * This mirrors the framework's standing rule that credential-looking literals
  * never land in source, logs, or fixtures.
  */
-const SENSITIVE_KEY = /(pass(word|phrase)?|secret|token|api[_-]?key|apikey|authorization|bearer|credential|cookie|session[_-]?(id|token)|private[_-]?key|client[_-]?secret|signing[_-]?secret|access[_-]?key|refresh[_-]?token|webhook[_-]?(url|secret))/i;
+const SENSITIVE_KEY = /(?:pass(?:word|phrase)?|secret|token|api[_-]?key|apikey|authorization|bearer|credential|cookie|session[_-]?(?:id|token)|private[_-]?key|client[_-]?secret|signing[_-]?secret|access[_-]?key|refresh[_-]?token|webhook[_-]?(?:url|secret))/i;
 const REDACTED = "[redacted]";
 const MAX_STRING = 2000;
 const MAX_DEPTH = 6;
 const MAX_KEYS = 100;
 const MAX_ARRAY = 100;
 const MAX_JSON = 8000;
+/**
+ * Head room reserved for the `…(N more chars)` marker so a truncated summary
+ * still fits its caller's cap. Callers below this cannot carry a marker at all.
+ */
+const MARKER_SLACK = 32;
 /** Heuristic: does a bare string value look like a secret? */
 function looksSecret(value) {
     if (/^bearer\s+\S/i.test(value))
@@ -35,25 +40,32 @@ function looksSecret(value) {
     }
     return false;
 }
-function redactString(value) {
+function redactString(value, maxString) {
     if (looksSecret(value))
         return REDACTED;
-    if (value.length > MAX_STRING) {
-        return `${value.slice(0, MAX_STRING)}…(${value.length - MAX_STRING} more chars)`;
+    if (value.length > maxString) {
+        return `${value.slice(0, maxString)}…(${value.length - maxString} more chars)`;
     }
     return value;
 }
-function redact(value, depth) {
+function redactEmbeddedSecrets(value) {
+    const bearer = value.replace(/\b(bearer\s+)([^\s"',}]+)/gi, `$1${REDACTED}`);
+    const credentialField = new RegExp(`(["']?\\b${SENSITIVE_KEY.source}\\b["']?\\s*[:=]\\s*)(["']?)(?!bearer\\b)([^"'\\s,}]+)\\2`, "gi");
+    return bearer.replace(credentialField, `$1$2${REDACTED}$2`);
+}
+function redact(value, depth, maxString) {
     if (value == null)
         return value;
     if (typeof value === "string")
-        return redactString(value);
+        return redactString(value, maxString);
     if (typeof value === "number" || typeof value === "boolean")
         return value;
     if (depth >= MAX_DEPTH)
         return "[…]";
     if (Array.isArray(value)) {
-        const out = value.slice(0, MAX_ARRAY).map((v) => redact(v, depth + 1));
+        const out = value
+            .slice(0, MAX_ARRAY)
+            .map((v) => redact(v, depth + 1, maxString));
         if (value.length > MAX_ARRAY)
             out.push(`…(${value.length - MAX_ARRAY} more)`);
         return out;
@@ -67,7 +79,9 @@ function redact(value, depth) {
                 break;
             }
             n += 1;
-            out[k] = SENSITIVE_KEY.test(k) ? REDACTED : redact(v, depth + 1);
+            out[k] = SENSITIVE_KEY.test(k)
+                ? REDACTED
+                : redact(v, depth + 1, maxString);
         }
         return out;
     }
@@ -78,32 +92,82 @@ function redact(value, depth) {
  * Redact and serialize call arguments to a capped JSON string, or `null` when
  * there is nothing to record. Never throws.
  */
-export function redactArgsToJson(args) {
+export function redactArgsToJson(args, limits) {
+    const maxJson = Math.max(MARKER_SLACK * 4, limits?.maxJson ?? MAX_JSON);
+    const maxString = limits?.maxString ?? MAX_STRING;
     try {
         if (args == null)
             return null;
-        const redacted = redact(args, 0);
+        const redacted = redact(args, 0, maxString);
         if (redacted === undefined)
             return null;
         const json = JSON.stringify(redacted);
         if (json == null)
             return null;
-        if (json.length > MAX_JSON) {
-            // Slicing the serialized JSON would yield an unparseable string. Wrap a
-            // preview in a valid envelope so `get-audit-event` can always JSON.parse
-            // the stored `input`.
-            return JSON.stringify({
-                _auditTruncated: true,
-                originalBytes: json.length,
-                preview: json.slice(0, MAX_JSON),
-            });
+        if (json.length <= maxJson)
+            return json;
+        // Slicing the serialized JSON would yield an unparseable string. Wrap a
+        // preview in a valid envelope so `get-audit-event` can always JSON.parse
+        // the stored `input`. JSON escaping makes the envelope overhead
+        // content-dependent, so shrink the preview until the whole thing measures
+        // under the cap rather than guessing at the overhead.
+        const envelope = (preview) => JSON.stringify({
+            _auditTruncated: true,
+            originalBytes: json.length,
+            preview,
+        });
+        let take = maxJson;
+        let out = envelope(json.slice(0, take));
+        while (out.length > maxJson && take > 0) {
+            take = Math.max(0, take - Math.max(1, out.length - maxJson));
+            out = envelope(json.slice(0, take));
         }
-        return json;
+        return out;
     }
     catch {
         return null;
     }
 }
+/**
+ * Same bounds as `redactArgsToJson`, returned as a structural value for
+ * surfaces whose consumers expect an object (transcript `metadata.input`).
+ */
+export function redactArgsToValue(args, limits) {
+    const json = redactArgsToJson(args, limits);
+    if (json == null)
+        return null;
+    try {
+        return JSON.parse(json);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Bounded, redacted plain-text summary of a tool result. Oversized text keeps
+ * its head and gains an explicit `…(N more chars)` marker, so a reader can
+ * always tell a short result from a clipped one.
+ */
+export function redactTextToSummary(text, maxChars = MAX_STRING) {
+    if (!text)
+        return null;
+    // Only ever walk a bounded head: a multi-megabyte tool result must not be
+    // scanned in full just to produce a preview of it.
+    const head = text.slice(0, maxChars + MARKER_SLACK);
+    const redactedHead = redactEmbeddedSecrets(head);
+    if (looksSecret(redactedHead.trim()))
+        return REDACTED;
+    if (text.length <= maxChars && redactedHead.length <= maxChars) {
+        return redactedHead;
+    }
+    const keep = Math.max(0, maxChars - MARKER_SLACK);
+    return `${redactedHead.slice(0, keep)}…(${text.length - keep} more chars)`;
+}
 /** Exposed for tests. */
-export const __test = { looksSecret, redact, SENSITIVE_KEY };
+export const __test = {
+    looksSecret,
+    redact,
+    redactEmbeddedSecrets,
+    SENSITIVE_KEY,
+};
 //# sourceMappingURL=redact.js.map

package/dist/audit/redact.js.map

@@ -1 +1 @@
-{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/audit/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,aAAa,GACjB,oOAAoO,CAAC;AAEvO,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,QAAQ,GAAG,IAAI,CAAC;AAEtB,8DAA8D;AAC9D,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,4EAA4E;IAC5E,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,kEAAkE;IAClE,IAAI,oDAAoD,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,IACE,8LAA8L,CAAC,IAAI,CACjM,KAAK,CACN,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAC9B,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,UAAU,cAAc,CAAC;IACnF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,KAAK,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;YAC1B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,SAAS,QAAQ,CAAC,CAAC;QAClD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;gBAClB,GAAG,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC;gBACzB,MAAM;YACR,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;YACP,GAAG,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,yEAAyE;IACzE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,IAAI,CAAC;QACH,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC3B,wEAAwE;YACxE,yEAAyE;YACzE,sBAAsB;YACtB,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,IAAI,CAAC,MAAM;gBAC1B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,yBAAyB;AACzB,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC","sourcesContent":["/**\n * Redaction for audit-captured arguments.\n *\n * The audit log must never become a secondary store of secrets. Before any\n * call arguments are persisted we:\n *  - drop values under credential-looking keys (token, secret, password, …),\n *  - redact string values that look like bearer tokens / long opaque keys,\n *  - truncate oversized strings and cap the serialized payload size.\n *\n * This mirrors the framework's standing rule that credential-looking literals\n * never land in source, logs, or fixtures.\n */\n\nconst SENSITIVE_KEY =\n  /(pass(word|phrase)?|secret|token|api[_-]?key|apikey|authorization|bearer|credential|cookie|session[_-]?(id|token)|private[_-]?key|client[_-]?secret|signing[_-]?secret|access[_-]?key|refresh[_-]?token|webhook[_-]?(url|secret))/i;\n\nconst REDACTED = \"[redacted]\";\nconst MAX_STRING = 2000;\nconst MAX_DEPTH = 6;\nconst MAX_KEYS = 100;\nconst MAX_ARRAY = 100;\nconst MAX_JSON = 8000;\n\n/** Heuristic: does a bare string value look like a secret? */\nfunction looksSecret(value: string): boolean {\n  if (/^bearer\\s+\\S/i.test(value)) return true;\n  // Long, unbroken, high-entropy-ish opaque token (hex/base64url, no spaces).\n  if (value.length >= 32 && /^[A-Za-z0-9_\\-+/=.]+$/.test(value)) return true;\n  // Common secret prefixes (Stripe, GitHub, OpenAI, Slack, AWS, …).\n  if (/^(sk|pk|rk|ghp|gho|xox[baprs]|AKIA|AIza|ya29)[-_]/i.test(value)) {\n    return true;\n  }\n  // Webhook URLs carry their secret in the path — redact regardless of the key\n  // they arrive under (e.g. a generic `value` field holding a Slack webhook).\n  if (\n    /^https?:\\/\\/(hooks\\.slack\\.com\\/|[^/]*\\.webhook\\.office\\.com\\/|(canary\\.|ptb\\.)?discord(app)?\\.com\\/api\\/webhooks\\/|hooks\\.zapier\\.com\\/|maker\\.ifttt\\.com\\/|discord\\.com\\/api\\/webhooks\\/)/i.test(\n      value,\n    )\n  ) {\n    return true;\n  }\n  return false;\n}\n\nfunction redactString(value: string): string {\n  if (looksSecret(value)) return REDACTED;\n  if (value.length > MAX_STRING) {\n    return `${value.slice(0, MAX_STRING)}…(${value.length - MAX_STRING} more chars)`;\n  }\n  return value;\n}\n\nfunction redact(value: unknown, depth: number): unknown {\n  if (value == null) return value;\n  if (typeof value === \"string\") return redactString(value);\n  if (typeof value === \"number\" || typeof value === \"boolean\") return value;\n  if (depth >= MAX_DEPTH) return \"[…]\";\n  if (Array.isArray(value)) {\n    const out = value.slice(0, MAX_ARRAY).map((v) => redact(v, depth + 1));\n    if (value.length > MAX_ARRAY)\n      out.push(`…(${value.length - MAX_ARRAY} more)`);\n    return out;\n  }\n  if (typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    let n = 0;\n    for (const [k, v] of Object.entries(value as Record<string, unknown>)) {\n      if (n >= MAX_KEYS) {\n        out[\"…\"] = \"(truncated)\";\n        break;\n      }\n      n += 1;\n      out[k] = SENSITIVE_KEY.test(k) ? REDACTED : redact(v, depth + 1);\n    }\n    return out;\n  }\n  // Functions, symbols, bigint, etc. — not serializable / not interesting.\n  return undefined;\n}\n\n/**\n * Redact and serialize call arguments to a capped JSON string, or `null` when\n * there is nothing to record. Never throws.\n */\nexport function redactArgsToJson(args: unknown): string | null {\n  try {\n    if (args == null) return null;\n    const redacted = redact(args, 0);\n    if (redacted === undefined) return null;\n    const json = JSON.stringify(redacted);\n    if (json == null) return null;\n    if (json.length > MAX_JSON) {\n      // Slicing the serialized JSON would yield an unparseable string. Wrap a\n      // preview in a valid envelope so `get-audit-event` can always JSON.parse\n      // the stored `input`.\n      return JSON.stringify({\n        _auditTruncated: true,\n        originalBytes: json.length,\n        preview: json.slice(0, MAX_JSON),\n      });\n    }\n    return json;\n  } catch {\n    return null;\n  }\n}\n\n/** Exposed for tests. */\nexport const __test = { looksSecret, redact, SENSITIVE_KEY };\n"]}
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/audit/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,aAAa,GACjB,4OAA4O,CAAC;AAE/O,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,QAAQ,GAAG,IAAI,CAAC;AACtB;;;GAGG;AACH,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,8DAA8D;AAC9D,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,4EAA4E;IAC5E,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,kEAAkE;IAClE,IAAI,oDAAoD,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,IACE,8LAA8L,CAAC,IAAI,CACjM,KAAK,CACN,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,SAAiB;IACpD,IAAI,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC7B,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,SAAS,cAAc,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,6BAA6B,EAAE,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,IAAI,MAAM,CAChC,YAAY,aAAa,CAAC,MAAM,2DAA2D,EAC3F,IAAI,CACL,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,QAAQ,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa,EAAE,SAAiB;IAC9D,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,KAAK,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,KAAK;aACd,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;aACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;YAC1B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,SAAS,QAAQ,CAAC,CAAC;QAClD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;gBAClB,GAAG,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC;gBACzB,MAAM;YACR,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;YACP,GAAG,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5B,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,yEAAyE;IACzE,OAAO,SAAS,CAAC;AACnB,CAAC;AAaD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAa,EACb,MAAqB;IAErB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,IAAI,QAAQ,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,UAAU,CAAC;IAClD,IAAI,CAAC;QACH,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;QACxC,wEAAwE;QACxE,yEAAyE;QACzE,gEAAgE;QAChE,0EAA0E;QAC1E,sDAAsD;QACtD,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAE,EAAE,CACnC,IAAI,CAAC,SAAS,CAAC;YACb,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,IAAI,CAAC,MAAM;YAC1B,OAAO;SACR,CAAC,CAAC;QACL,IAAI,IAAI,GAAG,OAAO,CAAC;QACnB,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,MAAM,GAAG,OAAO,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACxC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;YAC7D,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAa,EACb,MAAqB;IAErB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,QAAQ,GAAG,UAAU;IAErB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,0EAA0E;IAC1E,mDAAmD;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,QAAQ,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,IAAI,YAAY,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC/D,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC,CAAC;IAClD,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC;AAC7E,CAAC;AAED,yBAAyB;AACzB,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,WAAW;IACX,MAAM;IACN,qBAAqB;IACrB,aAAa;CACd,CAAC","sourcesContent":["/**\n * Redaction for audit-captured arguments.\n *\n * The audit log must never become a secondary store of secrets. Before any\n * call arguments are persisted we:\n *  - drop values under credential-looking keys (token, secret, password, …),\n *  - redact string values that look like bearer tokens / long opaque keys,\n *  - truncate oversized strings and cap the serialized payload size.\n *\n * This mirrors the framework's standing rule that credential-looking literals\n * never land in source, logs, or fixtures.\n */\n\nconst SENSITIVE_KEY =\n  /(?:pass(?:word|phrase)?|secret|token|api[_-]?key|apikey|authorization|bearer|credential|cookie|session[_-]?(?:id|token)|private[_-]?key|client[_-]?secret|signing[_-]?secret|access[_-]?key|refresh[_-]?token|webhook[_-]?(?:url|secret))/i;\n\nconst REDACTED = \"[redacted]\";\nconst MAX_STRING = 2000;\nconst MAX_DEPTH = 6;\nconst MAX_KEYS = 100;\nconst MAX_ARRAY = 100;\nconst MAX_JSON = 8000;\n/**\n * Head room reserved for the `…(N more chars)` marker so a truncated summary\n * still fits its caller's cap. Callers below this cannot carry a marker at all.\n */\nconst MARKER_SLACK = 32;\n\n/** Heuristic: does a bare string value look like a secret? */\nfunction looksSecret(value: string): boolean {\n  if (/^bearer\\s+\\S/i.test(value)) return true;\n  // Long, unbroken, high-entropy-ish opaque token (hex/base64url, no spaces).\n  if (value.length >= 32 && /^[A-Za-z0-9_\\-+/=.]+$/.test(value)) return true;\n  // Common secret prefixes (Stripe, GitHub, OpenAI, Slack, AWS, …).\n  if (/^(sk|pk|rk|ghp|gho|xox[baprs]|AKIA|AIza|ya29)[-_]/i.test(value)) {\n    return true;\n  }\n  // Webhook URLs carry their secret in the path — redact regardless of the key\n  // they arrive under (e.g. a generic `value` field holding a Slack webhook).\n  if (\n    /^https?:\\/\\/(hooks\\.slack\\.com\\/|[^/]*\\.webhook\\.office\\.com\\/|(canary\\.|ptb\\.)?discord(app)?\\.com\\/api\\/webhooks\\/|hooks\\.zapier\\.com\\/|maker\\.ifttt\\.com\\/|discord\\.com\\/api\\/webhooks\\/)/i.test(\n      value,\n    )\n  ) {\n    return true;\n  }\n  return false;\n}\n\nfunction redactString(value: string, maxString: number): string {\n  if (looksSecret(value)) return REDACTED;\n  if (value.length > maxString) {\n    return `${value.slice(0, maxString)}…(${value.length - maxString} more chars)`;\n  }\n  return value;\n}\n\nfunction redactEmbeddedSecrets(value: string): string {\n  const bearer = value.replace(/\\b(bearer\\s+)([^\\s\"',}]+)/gi, `$1${REDACTED}`);\n  const credentialField = new RegExp(\n    `([\"']?\\\\b${SENSITIVE_KEY.source}\\\\b[\"']?\\\\s*[:=]\\\\s*)([\"']?)(?!bearer\\\\b)([^\"'\\\\s,}]+)\\\\2`,\n    \"gi\",\n  );\n  return bearer.replace(credentialField, `$1$2${REDACTED}$2`);\n}\n\nfunction redact(value: unknown, depth: number, maxString: number): unknown {\n  if (value == null) return value;\n  if (typeof value === \"string\") return redactString(value, maxString);\n  if (typeof value === \"number\" || typeof value === \"boolean\") return value;\n  if (depth >= MAX_DEPTH) return \"[…]\";\n  if (Array.isArray(value)) {\n    const out = value\n      .slice(0, MAX_ARRAY)\n      .map((v) => redact(v, depth + 1, maxString));\n    if (value.length > MAX_ARRAY)\n      out.push(`…(${value.length - MAX_ARRAY} more)`);\n    return out;\n  }\n  if (typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    let n = 0;\n    for (const [k, v] of Object.entries(value as Record<string, unknown>)) {\n      if (n >= MAX_KEYS) {\n        out[\"…\"] = \"(truncated)\";\n        break;\n      }\n      n += 1;\n      out[k] = SENSITIVE_KEY.test(k)\n        ? REDACTED\n        : redact(v, depth + 1, maxString);\n    }\n    return out;\n  }\n  // Functions, symbols, bigint, etc. — not serializable / not interesting.\n  return undefined;\n}\n\nexport interface RedactLimits {\n  /**\n   * Hard cap on the serialized output, INCLUDING the truncation envelope.\n   * Surfaces with their own wire budget (the A2A activity snapshot) pass a\n   * tighter cap than the audit-log default.\n   */\n  maxJson?: number;\n  /** Cap on any single string value before it gets a truncation marker. */\n  maxString?: number;\n}\n\n/**\n * Redact and serialize call arguments to a capped JSON string, or `null` when\n * there is nothing to record. Never throws.\n */\nexport function redactArgsToJson(\n  args: unknown,\n  limits?: RedactLimits,\n): string | null {\n  const maxJson = Math.max(MARKER_SLACK * 4, limits?.maxJson ?? MAX_JSON);\n  const maxString = limits?.maxString ?? MAX_STRING;\n  try {\n    if (args == null) return null;\n    const redacted = redact(args, 0, maxString);\n    if (redacted === undefined) return null;\n    const json = JSON.stringify(redacted);\n    if (json == null) return null;\n    if (json.length <= maxJson) return json;\n    // Slicing the serialized JSON would yield an unparseable string. Wrap a\n    // preview in a valid envelope so `get-audit-event` can always JSON.parse\n    // the stored `input`. JSON escaping makes the envelope overhead\n    // content-dependent, so shrink the preview until the whole thing measures\n    // under the cap rather than guessing at the overhead.\n    const envelope = (preview: string) =>\n      JSON.stringify({\n        _auditTruncated: true,\n        originalBytes: json.length,\n        preview,\n      });\n    let take = maxJson;\n    let out = envelope(json.slice(0, take));\n    while (out.length > maxJson && take > 0) {\n      take = Math.max(0, take - Math.max(1, out.length - maxJson));\n      out = envelope(json.slice(0, take));\n    }\n    return out;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Same bounds as `redactArgsToJson`, returned as a structural value for\n * surfaces whose consumers expect an object (transcript `metadata.input`).\n */\nexport function redactArgsToValue(\n  args: unknown,\n  limits?: RedactLimits,\n): unknown {\n  const json = redactArgsToJson(args, limits);\n  if (json == null) return null;\n  try {\n    return JSON.parse(json);\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Bounded, redacted plain-text summary of a tool result. Oversized text keeps\n * its head and gains an explicit `…(N more chars)` marker, so a reader can\n * always tell a short result from a clipped one.\n */\nexport function redactTextToSummary(\n  text: string,\n  maxChars = MAX_STRING,\n): string | null {\n  if (!text) return null;\n  // Only ever walk a bounded head: a multi-megabyte tool result must not be\n  // scanned in full just to produce a preview of it.\n  const head = text.slice(0, maxChars + MARKER_SLACK);\n  const redactedHead = redactEmbeddedSecrets(head);\n  if (looksSecret(redactedHead.trim())) return REDACTED;\n  if (text.length <= maxChars && redactedHead.length <= maxChars) {\n    return redactedHead;\n  }\n  const keep = Math.max(0, maxChars - MARKER_SLACK);\n  return `${redactedHead.slice(0, keep)}…(${text.length - keep} more chars)`;\n}\n\n/** Exposed for tests. */\nexport const __test = {\n  looksSecret,\n  redact,\n  redactEmbeddedSecrets,\n  SENSITIVE_KEY,\n};\n"]}

package/dist/cli/create.d.ts

@@ -23,6 +23,11 @@ export interface CreateAppOptions {
      * unconditional workspace scaffold.
      */
     forceWorkspace?: boolean;
+    /**
+     * Internal: scaffold into the current directory instead of a new subfolder.
+     * Set when the name argument is `.`/`./` (see `createApp`).
+     */
+    inPlace?: boolean;
 }
 /**
  * Main entry for `agent-native create [name]`.
@@ -211,6 +216,8 @@ declare function rewriteAgentChatAppId(appDir: string, appName: string, template
 declare function rewriteTrackingAppId(appDir: string, appName: string, templateName?: string, sourceIdentity?: ScaffoldSourceIdentity): void;
 declare function renameGitignore(dir: string): void;
 declare function replacePlaceholders(dir: string, appName: string, appTitle: string, workspaceName?: string): void;
-declare function copyDir(src: string, dest: string, root?: string): void;
+declare function copyDir(src: string, dest: string, root?: string, opts?: {
+    skipExisting?: boolean;
+}): void;
 declare function shouldSkipScaffoldEntry(name: string, srcPath?: string): boolean;
 //# sourceMappingURL=create.d.ts.map

package/dist/cli/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/cli/create.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAkB,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAKvE,QAAA,MAAM,IAAI,2BAA2B,CAAC;AACtC,QAAA,MAAM,aAAa,cAAc,CAAC;AA8BlC;;;;;GAKG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAmCD,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAC7B,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,IAAI,CAAC,CA6Ef;AAyBD,iBAAS,uBAAuB;;;;;;;;EA2B/B;AAuBD,UAAU,2BAA2B;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAqQD,iBAAS,oCAAoC,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAa1E;AAiBD,iBAAe,qBAAqB,CAClC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CA4Cf;AAiDD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,IAAI,CAAC,CAwDf;AAuLD,iBAAS,+BAA+B;;;;IAoBvC;AAsBD;6DAC6D;AAC7D,MAAM,WAAW,0BAA0B;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,gBAAgB,CAAC;IACzD,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,iBAAiB,CAAC,EAAE;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,UAAU,sBAAsB;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,0BAA0B;IAClC,KAAK,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2BAA2B,CAAC,EAAE,CAC5B,IAAI,EAAE,2BAA2B,EAAE,KAChC,OAAO,CAAC,MAAM,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,kBAAmB,SAAQ,0BAA0B;IACpE,KAAK,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,iBAAe,mBAAmB,CAChC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,0BAA0B,CAAC,CA2FrC;AAED;yDACyD;AACzD,iBAAS,uBAAuB,CAC9B,aAAa,EAAE,MAAM,GACpB,SAAS,GAAG,gBAAgB,CAM9B;AAED,iBAAS,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED;;;;;GAKG;AACH,iBAAS,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE3D;AAED,iBAAS,qBAAqB,CAC5B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAcpB;AAED,iBAAS,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQvD;AAED,UAAU,0BAA0B;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,iBAAS,+BAA+B,CACtC,SAAS,EAAE,MAAM,GAChB,0BAA0B,CAAC;AAC9B,iBAAS,+BAA+B,CACtC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,IAAI,GACb,0BAA0B,CAAC;AAC9B,iBAAS,+BAA+B,CACtC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,KAAK,GACd,0BAA0B,GAAG,SAAS,CAAC;AAgJ1C,iBAAS,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAW5E;AAuED;;;;GAIG;AACH,iBAAe,wBAAwB,CACrC,aAAa,EAAE,MAAM,EAAE,EACvB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CA6Ff;AAED;;;GAGG;AACH,iBAAS,qBAAqB,CAC5B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,MAAM,EACrB,UAAU,CAAC,EAAE,0BAA0B,GACtC,IAAI,CAmIN;AAmLD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,GACf;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAkB7D;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B,yCAAyC;AACzC,OAAO,EACL,qBAAqB,IAAI,sBAAsB,EAC/C,mBAAmB,IAAI,oBAAoB,EAC3C,wBAAwB,IAAI,yBAAyB,EACrD,qBAAqB,IAAI,sBAAsB,EAC/C,WAAW,IAAI,YAAY,EAC3B,kBAAkB,IAAI,mBAAmB,EACzC,eAAe,IAAI,gBAAgB,EACnC,kBAAkB,IAAI,mBAAmB,EACzC,wBAAwB,IAAI,yBAAyB,EACrD,4BAA4B,IAAI,6BAA6B,EAC7D,2BAA2B,IAAI,4BAA4B,EAC3D,qBAAqB,IAAI,sBAAsB,EAC/C,oBAAoB,IAAI,qBAAqB,EAC7C,8BAA8B,IAAI,+BAA+B,EACjE,gBAAgB,IAAI,iBAAiB,EACrC,qBAAqB,IAAI,sBAAsB,EAC/C,oCAAoC,IAAI,qCAAqC,EAC7E,uBAAuB,IAAI,wBAAwB,EACnD,+BAA+B,IAAI,gCAAgC,EACnE,+BAA+B,IAAI,gCAAgC,EACnE,6BAA6B,IAAI,8BAA8B,EAC/D,2BAA2B,IAAI,4BAA4B,EAC3D,2BAA2B,IAAI,4BAA4B,EAC3D,iCAAiC,IAAI,kCAAkC,EACvE,wBAAwB,IAAI,yBAAyB,EACrD,8BAA8B,IAAI,+BAA+B,EACjE,8BAA8B,IAAI,+BAA+B,EACjE,0CAA0C,IAAI,2CAA2C,EACzF,uBAAuB,IAAI,wBAAwB,EACnD,cAAc,IAAI,eAAe,EACjC,oBAAoB,IAAI,qBAAqB,EAC7C,iBAAiB,IAAI,kBAAkB,EACvC,kBAAkB,IAAI,mBAAmB,EACzC,qBAAqB,IAAI,sBAAsB,EAC/C,mBAAmB,IAAI,oBAAoB,EAC3C,mBAAmB,IAAI,oBAAoB,EAC3C,oBAAoB,IAAI,qBAAqB,EAC7C,qBAAqB,IAAI,sBAAsB,EAC/C,qBAAqB,IAAI,sBAAsB,EAC/C,kBAAkB,IAAI,mBAAmB,EACzC,OAAO,IAAI,QAAQ,EACnB,uBAAuB,IAAI,wBAAwB,EACnD,IAAI,IAAI,KAAK,EACb,aAAa,IAAI,cAAc,GAChC,CAAC;AAkBF,iBAAS,cAAc,CACrB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IACP,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,yBAAyB,CAAC,EAAE,OAAO,CAAC;CAChC,GACL,MAAM,EAAE,CAmBV;AAkED,iBAAS,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMvD;AAED,iBAAS,iCAAiC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAWhE;AAuBD,4EAA4E;AAC5E,iBAAe,oBAAoB,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,MAAM,CAAC,CAyCjB;AA8BD,iBAAS,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,iBAAS,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAkC1E;AAED,UAAU,+BAA+B;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,sBAAsB,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,iBAAe,8BAA8B,CAC3C,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,0BAA0B,EACrC,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,+BAA+B,CAAC,CAmE1C;AAED,UAAU,+BAAgC,SAAQ,2BAA2B;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,sBAAsB,CAAC;CACxC;AAED,iBAAS,8BAA8B,CACrC,aAAa,EAAE,MAAM,GACpB,+BAA+B,EAAE,CAmCnC;AA4BD,iBAAS,0CAA0C,CACjD,MAAM,EAAE,MAAM,EACd,mBAAmB,EAAE,MAAM,EAC3B,OAAO,EAAE;IACP,KAAK,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;IACnC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,cAAc,EAAE,sBAAsB,CAAC;CACxC,GACA,IAAI,CA6FN;AA+JD,iBAAS,gBAAgB,CACvB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,QAAQ,GAAG,KAAK,GACrB,MAAM,CAER;AAiED;;;;;GAKG;AACH,iBAAS,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA+B7C;AASD,iBAAS,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAyBD,iBAAS,kBAAkB,CACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,EACrB,UAAU,CAAC,EAAE,kBAAkB,GAC9B,IAAI,CA6DN;AAWD,iBAAS,kBAAkB,CACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,sBAAsB,GACtC,IAAI,CA6BN;AAuBD,iBAAS,wBAAwB,IAAI,MAAM,CAsB1C;AAED,iBAAS,4BAA4B,IAAI,MAAM,CAU9C;AAED,iBAAS,2BAA2B,IAAI,MAAM,CAO7C;AA4DD,iBAAS,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAUnD;AAED;;;;;;;;;;;;;GAaG;AACH,iBAAS,8BAA8B,IAAI,MAAM,EAAE,CAQlD;AAED;;qDAEqD;AACrD,iBAAS,oBAAoB,IAAI,MAAM,CAEtC;AAuID,iBAAS,kBAAkB,CACzB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,GAAG,WAAW,GAC/B,IAAI,CA8CN;AAED,iBAAS,qBAAqB,CAC5B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,sBAAsB,GACtC,IAAI,CAIN;AAED,iBAAS,qBAAqB,CAC5B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,sBAAsB,GACtC,IAAI,CAuCN;AAED,iBAAS,oBAAoB,CAC3B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,sBAAsB,GACtC,IAAI,CAmDN;AA8DD,iBAAS,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAI1C;AAED,iBAAS,mBAAmB,CAC1B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,aAAa,CAAC,EAAE,MAAM,GACrB,IAAI,CAgCN;AAED,iBAAS,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CA8B/D;AAED,iBAAS,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAmDxE"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/cli/create.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAkB,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAKvE,QAAA,MAAM,IAAI,2BAA2B,CAAC;AACtC,QAAA,MAAM,aAAa,cAAc,CAAC;AA0ClC;;;;;GAKG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAmCD,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAC7B,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,IAAI,CAAC,CAoFf;AAyBD,iBAAS,uBAAuB;;;;;;;;EA2B/B;AAuBD,UAAU,2BAA2B;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAySD,iBAAS,oCAAoC,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAa1E;AAiBD,iBAAe,qBAAqB,CAClC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CA4Cf;AAiDD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,IAAI,CAAC,CAwDf;AAqLD,iBAAS,+BAA+B;;;;IAoBvC;AAmDD;6DAC6D;AAC7D,MAAM,WAAW,0BAA0B;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,gBAAgB,CAAC;IACzD,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,iBAAiB,CAAC,EAAE;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,UAAU,sBAAsB;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,0BAA0B;IAClC,KAAK,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2BAA2B,CAAC,EAAE,CAC5B,IAAI,EAAE,2BAA2B,EAAE,KAChC,OAAO,CAAC,MAAM,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,kBAAmB,SAAQ,0BAA0B;IACpE,KAAK,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,iBAAe,mBAAmB,CAChC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,0BAA0B,CAAC,CA2FrC;AAED;yDACyD;AACzD,iBAAS,uBAAuB,CAC9B,aAAa,EAAE,MAAM,GACpB,SAAS,GAAG,gBAAgB,CAM9B;AAED,iBAAS,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED;;;;;GAKG;AACH,iBAAS,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE3D;AAED,iBAAS,qBAAqB,CAC5B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAcpB;AAED,iBAAS,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQvD;AAED,UAAU,0BAA0B;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,iBAAS,+BAA+B,CACtC,SAAS,EAAE,MAAM,GAChB,0BAA0B,CAAC;AAC9B,iBAAS,+BAA+B,CACtC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,IAAI,GACb,0BAA0B,CAAC;AAC9B,iBAAS,+BAA+B,CACtC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,KAAK,GACd,0BAA0B,GAAG,SAAS,CAAC;AAgJ1C,iBAAS,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAW5E;AAuED;;;;GAIG;AACH,iBAAe,wBAAwB,CACrC,aAAa,EAAE,MAAM,EAAE,EACvB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CA6Ff;AAED;;;GAGG;AACH,iBAAS,qBAAqB,CAC5B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,MAAM,EACrB,UAAU,CAAC,EAAE,0BAA0B,GACtC,IAAI,CAmIN;AAmLD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,GACf;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAkB7D;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B,yCAAyC;AACzC,OAAO,EACL,qBAAqB,IAAI,sBAAsB,EAC/C,mBAAmB,IAAI,oBAAoB,EAC3C,wBAAwB,IAAI,yBAAyB,EACrD,qBAAqB,IAAI,sBAAsB,EAC/C,WAAW,IAAI,YAAY,EAC3B,kBAAkB,IAAI,mBAAmB,EACzC,eAAe,IAAI,gBAAgB,EACnC,kBAAkB,IAAI,mBAAmB,EACzC,wBAAwB,IAAI,yBAAyB,EACrD,4BAA4B,IAAI,6BAA6B,EAC7D,2BAA2B,IAAI,4BAA4B,EAC3D,qBAAqB,IAAI,sBAAsB,EAC/C,oBAAoB,IAAI,qBAAqB,EAC7C,8BAA8B,IAAI,+BAA+B,EACjE,gBAAgB,IAAI,iBAAiB,EACrC,qBAAqB,IAAI,sBAAsB,EAC/C,oCAAoC,IAAI,qCAAqC,EAC7E,uBAAuB,IAAI,wBAAwB,EACnD,+BAA+B,IAAI,gCAAgC,EACnE,+BAA+B,IAAI,gCAAgC,EACnE,6BAA6B,IAAI,8BAA8B,EAC/D,2BAA2B,IAAI,4BAA4B,EAC3D,2BAA2B,IAAI,4BAA4B,EAC3D,iCAAiC,IAAI,kCAAkC,EACvE,wBAAwB,IAAI,yBAAyB,EACrD,8BAA8B,IAAI,+BAA+B,EACjE,8BAA8B,IAAI,+BAA+B,EACjE,0CAA0C,IAAI,2CAA2C,EACzF,uBAAuB,IAAI,wBAAwB,EACnD,cAAc,IAAI,eAAe,EACjC,oBAAoB,IAAI,qBAAqB,EAC7C,iBAAiB,IAAI,kBAAkB,EACvC,kBAAkB,IAAI,mBAAmB,EACzC,qBAAqB,IAAI,sBAAsB,EAC/C,mBAAmB,IAAI,oBAAoB,EAC3C,mBAAmB,IAAI,oBAAoB,EAC3C,oBAAoB,IAAI,qBAAqB,EAC7C,qBAAqB,IAAI,sBAAsB,EAC/C,qBAAqB,IAAI,sBAAsB,EAC/C,kBAAkB,IAAI,mBAAmB,EACzC,OAAO,IAAI,QAAQ,EACnB,uBAAuB,IAAI,wBAAwB,EACnD,IAAI,IAAI,KAAK,EACb,aAAa,IAAI,cAAc,GAChC,CAAC;AAkBF,iBAAS,cAAc,CACrB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IACP,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,yBAAyB,CAAC,EAAE,OAAO,CAAC;CAChC,GACL,MAAM,EAAE,CAmBV;AAkED,iBAAS,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMvD;AAED,iBAAS,iCAAiC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAWhE;AAuBD,4EAA4E;AAC5E,iBAAe,oBAAoB,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,MAAM,CAAC,CAyCjB;AA8BD,iBAAS,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,iBAAS,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAkC1E;AAED,UAAU,+BAA+B;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,sBAAsB,CAAC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,iBAAe,8BAA8B,CAC3C,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,0BAA0B,EACrC,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,+BAA+B,CAAC,CAmE1C;AAED,UAAU,+BAAgC,SAAQ,2BAA2B;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,sBAAsB,CAAC;CACxC;AAED,iBAAS,8BAA8B,CACrC,aAAa,EAAE,MAAM,GACpB,+BAA+B,EAAE,CAmCnC;AA4BD,iBAAS,0CAA0C,CACjD,MAAM,EAAE,MAAM,EACd,mBAAmB,EAAE,MAAM,EAC3B,OAAO,EAAE;IACP,KAAK,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;IACnC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,cAAc,EAAE,sBAAsB,CAAC;CACxC,GACA,IAAI,CA6FN;AA+JD,iBAAS,gBAAgB,CACvB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,QAAQ,GAAG,KAAK,GACrB,MAAM,CAER;AAiED;;;;;GAKG;AACH,iBAAS,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA+B7C;AASD,iBAAS,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAyBD,iBAAS,kBAAkB,CACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,EACrB,UAAU,CAAC,EAAE,kBAAkB,GAC9B,IAAI,CA6DN;AAWD,iBAAS,kBAAkB,CACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,sBAAsB,GACtC,IAAI,CA6BN;AAuBD,iBAAS,wBAAwB,IAAI,MAAM,CAsB1C;AAED,iBAAS,4BAA4B,IAAI,MAAM,CAU9C;AAED,iBAAS,2BAA2B,IAAI,MAAM,CAO7C;AA4DD,iBAAS,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAUnD;AAED;;;;;;;;;;;;;GAaG;AACH,iBAAS,8BAA8B,IAAI,MAAM,EAAE,CAQlD;AAED;;qDAEqD;AACrD,iBAAS,oBAAoB,IAAI,MAAM,CAEtC;AAuID,iBAAS,kBAAkB,CACzB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,GAAG,WAAW,GAC/B,IAAI,CA8CN;AAED,iBAAS,qBAAqB,CAC5B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,sBAAsB,GACtC,IAAI,CAIN;AAED,iBAAS,qBAAqB,CAC5B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,sBAAsB,GACtC,IAAI,CAuCN;AAED,iBAAS,oBAAoB,CAC3B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,sBAAsB,GACtC,IAAI,CAmDN;AA8DD,iBAAS,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAI1C;AAED,iBAAS,mBAAmB,CAC1B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,aAAa,CAAC,EAAE,MAAM,GACrB,IAAI,CAgCN;AAED,iBAAS,OAAO,CACd,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAChC,IAAI,CAqCN;AAED,iBAAS,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAmDxE"}

package/dist/cli/create.js

@@ -39,6 +39,18 @@ const FIRST_PARTY_TARBALL_SYMLINK_EXCLUDES = [
     "*/.claude/skills",
 ];
 const localPackageTarballs = new Map();
+/** VCS/editor files that don't count as "not empty" for an in-place scaffold. */
+const IN_PLACE_ALLOWLIST = new Set([
+    ".git",
+    ".gitignore",
+    ".gitattributes",
+    ".DS_Store",
+    ".idea",
+    ".vscode",
+    "LICENSE",
+    "README.md",
+    "Thumbs.db",
+]);
 /**
  * Tagged error for input that fails CLI-level validation (repo names, app
  * names, etc.). The Sentry `beforeSend` hook in cli/index.ts drops events
@@ -89,6 +101,12 @@ const COMMUNITY_OPTION = {
  */
 export async function createApp(name, opts) {
     const clack = await import("@clack/prompts");
+    // `create .` (or `./`) means "scaffold into the current folder" — derive the
+    // project name from the folder's basename, like create-react-app / npm init.
+    if (name === "." || name === "./") {
+        name = path.basename(process.cwd());
+        opts = { ...opts, inPlace: true };
+    }
     // Reject an invalid provided name before any interactive prompt so bad input
     // fails fast instead of blocking on the start-shape picker below.
     if (name !== undefined) {
@@ -260,6 +278,38 @@ function assertValidProjectName(name, clack) {
         process.exit(1);
     }
 }
+/**
+ * Resolve where a scaffold writes and guard the target. A named project writes
+ * to a new sibling subfolder that must not already exist; `create .` writes
+ * into the current directory, which must be empty apart from benign VCS/editor
+ * files (a pre-existing repo is allowed).
+ *
+ * For an in-place scaffold we do NOT return the current directory: we build
+ * into a private staging directory and `finalizeScaffold` copies the result
+ * in afterward. Staging keeps the whole scaffold atomic — a mid-scaffold
+ * failure's cleanup can only ever delete the staging dir, never the user's
+ * current directory (including its `.git`).
+ */
+function resolveScaffoldTarget(name, inPlace, clack) {
+    if (inPlace) {
+        const conflicting = fs
+            .readdirSync(process.cwd())
+            .filter((entry) => !IN_PLACE_ALLOWLIST.has(entry));
+        if (conflicting.length > 0) {
+            const shown = conflicting.slice(0, 3).join(", ");
+            const more = conflicting.length > 3 ? ", …" : "";
+            clack.cancel(`Current directory is not empty (${shown}${more}). Scaffold into an empty folder, or run \`create <name>\` to make a new one.`);
+            process.exit(1);
+        }
+        return fs.mkdtempSync(path.join(os.tmpdir(), "agent-native-create-"));
+    }
+    const targetDir = path.resolve(process.cwd(), name);
+    if (fs.existsSync(targetDir)) {
+        clack.cancel(`Directory "${name}" already exists.`);
+        process.exit(1);
+    }
+    return targetDir;
+}
 /* ─────────────────────────────────────────────────────────────────────────
  * Workspace creation (new default)
  * ───────────────────────────────────────────────────────────────────────── */
@@ -289,11 +339,7 @@ async function createWorkspaceInteractive(name, opts, clack) {
             excludeNames: ["dispatch"],
         });
     const templates = ["dispatch", ...optionalPicks];
-    const targetDir = path.resolve(process.cwd(), name);
-    if (fs.existsSync(targetDir)) {
-        clack.cancel(`Directory "${name}" already exists.`);
-        process.exit(1);
-    }
+    const targetDir = resolveScaffoldTarget(name, opts?.inPlace, clack);
     const s = clack.spinner();
     for (const template of templates) {
         showCommunityTemplateTrustNote(template, clack);
@@ -362,12 +408,14 @@ async function createWorkspaceInteractive(name, opts, clack) {
     catch (err) {
         s.stop("Failed to scaffold workspace.");
         // Remove the partially-scaffolded workspace so a retry of `agent-native
-        // create <name>` doesn't trip the "Directory already exists" guard.
+        // create <name>` doesn't trip the "Directory already exists" guard. For an
+        // in-place scaffold `targetDir` is the private staging dir, so this never
+        // touches the user's current directory.
         cleanupOnFailure(targetDir);
         clack.cancel(err?.message ?? String(err));
         process.exit(1);
     }
-    tryGitInit(targetDir);
+    finalizeScaffold(targetDir, opts?.inPlace);
     // Show the user the tree we just built so the workspace/app distinction is
     // visible, not just described. First-time users routinely expect their
     // workspace name to be the app — seeing apps/<template>/ subdirectories
@@ -630,11 +678,7 @@ async function scaffoldOneAppIntoWorkspace(workspace, appName, templateName, cla
 async function createStandaloneApp(name, opts, clack) {
     clack.intro("Create a new standalone agent-native app");
     name = await promptNameIfMissing(name, clack, "app", "my-app");
-    const targetDir = path.resolve(process.cwd(), name);
-    if (fs.existsSync(targetDir)) {
-        clack.cancel(`Directory "${name}" already exists.`);
-        process.exit(1);
-    }
+    const targetDir = resolveScaffoldTarget(name, opts?.inPlace, clack);
     // Standalone is single-select — pick one template.
     let template = opts?.template && !opts.template.includes(",") ? opts.template : undefined;
     if (!template) {
@@ -666,11 +710,13 @@ async function createStandaloneApp(name, opts, clack) {
     }
     catch (err) {
         s.stop("Failed to create app.");
+        // `targetDir` is the private staging dir for an in-place scaffold, so this
+        // only ever removes the staging copy, never the user's current directory.
         cleanupOnFailure(targetDir);
         clack.cancel(err?.message ?? String(err));
         process.exit(1);
     }
-    tryGitInit(targetDir);
+    finalizeScaffold(targetDir, opts?.inPlace);
     if (template === "headless") {
         clack.outro([
             "Done! Next steps:",
@@ -724,6 +770,35 @@ function cleanupOnFailure(targetDir) {
         // Ignore — original error is more useful than a cleanup failure.
     }
 }
+/**
+ * Land a finished scaffold in its final home and initialize git. A named
+ * scaffold is already in place, so this only inits git. An in-place scaffold
+ * (`create .`) was built in `scaffoldDir` (a staging dir); copy only the files
+ * that don't already exist into the current directory so pre-existing files
+ * (`.git`, `README.md`, `.gitignore`, editor configs) are preserved, then drop
+ * the staging dir. Git init/commit is skipped when the current directory is
+ * already a repo so we never write an unexpected commit into the user's
+ * history.
+ */
+function finalizeScaffold(scaffoldDir, inPlace) {
+    if (!inPlace) {
+        tryGitInitUnlessRepo(scaffoldDir);
+        return;
+    }
+    const dest = process.cwd();
+    try {
+        copyDir(scaffoldDir, dest, undefined, { skipExisting: true });
+    }
+    finally {
+        cleanupOnFailure(scaffoldDir);
+    }
+    tryGitInitUnlessRepo(dest);
+}
+function tryGitInitUnlessRepo(dir) {
+    if (fs.existsSync(path.join(dir, ".git")))
+        return;
+    tryGitInit(dir);
+}
 /**
  * Scaffold a single app template into `targetDir`. Resolves:
  *   - "headless" / legacy "blank" → bundled action-first template
@@ -2538,14 +2613,21 @@ function replacePlaceholders(dir, appName, appTitle, workspaceName) {
         fs.writeFileSync(p, next);
     }
 }
-function copyDir(src, dest, root) {
+function copyDir(src, dest, root, opts) {
     const resolvedRoot = root ?? path.resolve(src);
+    const skipExisting = opts?.skipExisting ?? false;
     fs.mkdirSync(dest, { recursive: true });
     for (const entry of fs.readdirSync(src, { withFileTypes: true })) {
         const srcPath = path.join(src, entry.name);
         if (shouldSkipScaffoldEntry(entry.name, srcPath))
             continue;
         const destPath = path.join(dest, entry.name);
+        // Preserve anything already at the destination (in-place scaffold merges
+        // into a directory the user may already own). Directories still recurse so
+        // new files land inside a pre-existing folder.
+        if (skipExisting && !entry.isDirectory() && fs.existsSync(destPath)) {
+            continue;
+        }
         if (entry.isSymbolicLink()) {
             const target = fs.readlinkSync(srcPath);
             const resolvedTarget = path.resolve(path.dirname(srcPath), target);
@@ -2556,7 +2638,7 @@ function copyDir(src, dest, root) {
                 try {
                     const stat = fs.statSync(srcPath);
                     if (stat.isDirectory()) {
-                        copyDir(srcPath, destPath, resolvedRoot);
+                        copyDir(srcPath, destPath, resolvedRoot, opts);
                     }
                     else {
                         fs.copyFileSync(srcPath, destPath);
@@ -2568,7 +2650,7 @@ function copyDir(src, dest, root) {
             }
         }
         else if (entry.isDirectory()) {
-            copyDir(srcPath, destPath, resolvedRoot);
+            copyDir(srcPath, destPath, resolvedRoot, opts);
         }
         else {
             fs.copyFileSync(srcPath, destPath);