@agentver/cli 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Agentver
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,123 @@
+# agentver
+
+Agent skill registry — store, version, and distribute AI agent skills.
+
+Agentver is a CLI for managing reusable skills, prompts, and configurations across AI coding agents like Claude Code, Cursor, Windsurf, Copilot, and more. Install skills from Git repositories, keep them in sync, and share improvements back.
+
+## Install
+
+```bash
+# npm
+npm install -g @agentver/cli
+
+# bun
+bun install -g @agentver/cli
+
+# pnpm
+pnpm add -g @agentver/cli
+
+# or run directly without installing
+npx @agentver/cli
+bunx @agentver/cli
+pnpm dlx @agentver/cli
+```
+
+## Quick start
+
+```bash
+# Install a skill from a Git repository
+agentver install github.com/owner/repo
+
+# Install from a subdirectory
+agentver install github.com/owner/repo/path/to/skill
+
+# Scan your project for existing agent configs
+agentver scan
+
+# Adopt existing configs into agentver management
+agentver adopt
+
+# Check the status of installed skills
+agentver status
+```
+
+## Commands
+
+| Command | Description |
+| --- | --- |
+| `install <source>` | Install a skill from a Git repository or well-known domain |
+| `remove <name>` | Remove an installed package |
+| `update` | Update installed skills to their latest upstream version |
+| `list` | Show installed packages |
+| `status` | Show status of installed skills (upstream changes, local modifications) |
+| `diff <name>` | Show diff between local and upstream version of a skill |
+| `sync` | Push local installation state to platform |
+| `search <query>` | Search for skills across registries |
+| `scan` | Scan directory for agent configs and skills |
+| `adopt` | Adopt existing skills and configs into agentver management |
+| `init` | Scaffold a new package (skill, agent, plugin, script, or prompt) |
+| `save` | Commit local skill changes to the platform |
+| `publish` | Publish a skill to the registry |
+| `audit` | Run a security scan on installed skills or an arbitrary directory |
+| `verify <name>` | Verify a skill — checks publisher, integrity, and security |
+| `suggest <title>` | Create a suggestion from local modifications |
+| `suggestions` | List suggestions for a skill |
+| `draft` | Manage skill drafts (branches) |
+| `version` | Manage skill versions (tags) |
+| `log <name>` | Show commit history for a skill |
+| `login` | Authenticate with the agentver registry |
+| `logout` | Log out from the agentver registry |
+| `whoami` | Show authentication state |
+
+Use `agentver <command> --help` for detailed usage of any command.
+
+## Global options
+
+```
+--json    Output results as structured JSON
+--help    Show help
+--version Show version
+```
+
+## Supported agents
+
+Agentver automatically detects which AI coding agents are present in your project and places skills in the correct location:
+
+- Claude Code (`.claude/`)
+- Cursor (`.cursor/rules/`)
+- Windsurf (`.windsurfrules/`)
+- GitHub Copilot (`.github/copilot/`)
+- Codex (`.codex/`)
+- Aider (`.aider/`)
+- Cline (`.cline/rules/`)
+- Roo Code (`.roo/rules/`)
+- And more
+
+## Security
+
+Every skill is scanned on install using 28 built-in security rules that check for:
+
+- Credential harvesting and secret exfiltration
+- Command injection and shell escape patterns
+- Instruction override and prompt injection
+- Unsafe network access and data exfiltration
+- File system abuse and path traversal
+
+Run `agentver audit` at any time to re-scan your installed skills.
+
+## How it works
+
+1. **Install** — fetches skill files from a Git repository (via API, archive, or sparse checkout)
+2. **Place** — detects your agents and writes files to the correct config directories
+3. **Track** — records the source, version, and integrity hash in a manifest and lockfile
+4. **Sync** — keeps skills up to date with upstream and tracks local modifications
+
+The manifest (`agentver.json`) and lockfile (`agentver-lock.json`) are designed to be committed to your repository so your team stays in sync.
+
+## Well-known domains
+
+Repositories can advertise their skills via a `/.well-known/skills/index.json` endpoint, enabling `agentver install example.com` to resolve skills automatically.
+
+## Licence
+
+MIT