@cluesmith/codev 1.1.0

package/dist/commands/update.js

@@ -0,0 +1,137 @@
+/**
+ * codev update - Update codev templates and protocols
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import chalk from 'chalk';
+import { getTemplatesDir, getTemplateFiles, hashFile, loadHashStore, saveHashStore, isUserDataPath, isUpdatableFile, } from '../lib/templates.js';
+/**
+ * Update codev templates in current project
+ */
+export async function update(options = {}) {
+    const { dryRun = false, force = false } = options;
+    const targetDir = process.cwd();
+    const codevDir = path.join(targetDir, 'codev');
+    // Check if codev exists
+    if (!fs.existsSync(codevDir)) {
+        throw new Error("No codev/ directory found. Use 'codev init' or 'codev adopt' first.");
+    }
+    console.log('');
+    console.log(chalk.bold('Updating codev templates'));
+    if (dryRun) {
+        console.log(chalk.yellow('(dry run - no files will be changed)'));
+    }
+    console.log('');
+    const templatesDir = getTemplatesDir();
+    const templateFiles = getTemplateFiles(templatesDir);
+    const currentHashes = loadHashStore(targetDir);
+    const newHashes = { ...currentHashes };
+    const result = {
+        updated: [],
+        skipped: [],
+        conflicts: [],
+        newFiles: [],
+    };
+    for (const relativePath of templateFiles) {
+        // Skip user data files
+        if (isUserDataPath(relativePath)) {
+            continue;
+        }
+        // Only update updatable files (protocols, roles, agents, etc.)
+        if (!isUpdatableFile(relativePath)) {
+            continue;
+        }
+        const srcPath = path.join(templatesDir, relativePath);
+        const destPath = path.join(codevDir, relativePath);
+        // New file - copy it
+        if (!fs.existsSync(destPath)) {
+            if (!dryRun) {
+                const destDir = path.dirname(destPath);
+                if (!fs.existsSync(destDir)) {
+                    fs.mkdirSync(destDir, { recursive: true });
+                }
+                fs.copyFileSync(srcPath, destPath);
+                newHashes[relativePath] = hashFile(destPath);
+            }
+            result.newFiles.push(relativePath);
+            console.log(chalk.green('  + (new)'), `codev/${relativePath}`);
+            continue;
+        }
+        // File exists - check if it was modified by user
+        const currentHash = hashFile(destPath);
+        const storedHash = currentHashes[relativePath];
+        const newHash = hashFile(srcPath);
+        // If the template hasn't changed, skip
+        if (currentHash === newHash) {
+            result.skipped.push(relativePath);
+            continue;
+        }
+        // If force mode, overwrite everything
+        if (force) {
+            if (!dryRun) {
+                fs.copyFileSync(srcPath, destPath);
+                newHashes[relativePath] = hashFile(destPath);
+            }
+            result.updated.push(relativePath);
+            console.log(chalk.blue('  ~ (force)'), `codev/${relativePath}`);
+            continue;
+        }
+        // Check if user modified the file
+        const userModified = storedHash && currentHash !== storedHash;
+        if (userModified) {
+            // User modified the file - write as .codev-new and mark as conflict
+            if (!dryRun) {
+                fs.copyFileSync(srcPath, destPath + '.codev-new');
+            }
+            result.conflicts.push(relativePath);
+            console.log(chalk.yellow('  ! (conflict)'), `codev/${relativePath}`);
+            console.log(chalk.dim('    New version saved as:'), `codev/${relativePath}.codev-new`);
+        }
+        else {
+            // File unchanged by user - safe to overwrite
+            if (!dryRun) {
+                fs.copyFileSync(srcPath, destPath);
+                newHashes[relativePath] = hashFile(destPath);
+            }
+            result.updated.push(relativePath);
+            console.log(chalk.blue('  ~'), `codev/${relativePath}`);
+        }
+    }
+    // Save updated hash store
+    if (!dryRun) {
+        saveHashStore(targetDir, newHashes);
+    }
+    // Summary
+    console.log('');
+    console.log(chalk.bold('Summary:'));
+    if (result.newFiles.length > 0) {
+        console.log(chalk.green(`  + ${result.newFiles.length} new files`));
+    }
+    if (result.updated.length > 0) {
+        console.log(chalk.blue(`  ~ ${result.updated.length} updated`));
+    }
+    if (result.skipped.length > 0) {
+        console.log(chalk.dim(`  - ${result.skipped.length} unchanged (skipped)`));
+    }
+    if (result.conflicts.length > 0) {
+        console.log(chalk.yellow(`  ! ${result.conflicts.length} conflicts`));
+        console.log('');
+        console.log(chalk.yellow('Conflicts detected!'));
+        console.log('The following files were modified locally and have new versions available:');
+        console.log('');
+        for (const file of result.conflicts) {
+            console.log(chalk.dim(`  codev/${file}`));
+            console.log(chalk.dim(`    → New version: codev/${file}.codev-new`));
+        }
+        console.log('');
+        console.log('Please review and merge manually, then delete the .codev-new files.');
+    }
+    if (result.newFiles.length === 0 && result.updated.length === 0 && result.conflicts.length === 0) {
+        console.log(chalk.dim('  No updates available - already up to date!'));
+    }
+    if (dryRun) {
+        console.log('');
+        console.log(chalk.yellow('Dry run complete. Run without --dry-run to apply changes.'));
+    }
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,aAAa,EACb,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAc7B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,UAAyB,EAAE;IACtD,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE/C,wBAAwB;IACxB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACpD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,aAAa,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,SAAS,GAA2B,EAAE,GAAG,aAAa,EAAE,CAAC;IAE/D,MAAM,MAAM,GAAiB;QAC3B,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,uBAAuB;QACvB,IAAI,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,SAAS;QACX,CAAC;QAED,+DAA+D;QAC/D,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAEnD,qBAAqB;QACrB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7C,CAAC;gBACD,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACnC,SAAS,CAAC,YAAY,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC,CAAC;YAC/D,SAAS;QACX,CAAC;QAED,iDAAiD;QACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAElC,uCAAuC;QACvC,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QAED,sCAAsC;QACtC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACnC,SAAS,CAAC,YAAY,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QAED,kCAAkC;QAClC,MAAM,YAAY,GAAG,UAAU,IAAI,WAAW,KAAK,UAAU,CAAC;QAE9D,IAAI,YAAY,EAAE,CAAC;YACjB,oEAAoE;YACpE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,GAAG,YAAY,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,SAAS,YAAY,YAAY,CAAC,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,6CAA6C;YAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACnC,SAAS,CAAC,YAAY,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,UAAU;IACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAEpC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,sBAAsB,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;QAC1F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4BAA4B,IAAI,YAAY,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,2DAA2D,CAAC,CAAC,CAAC;IACzF,CAAC;AACH,CAAC"}

package/dist/lib/templates.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Template handling utilities for codev init/adopt/update
+ */
+/**
+ * Get the path to the embedded templates directory
+ */
+export declare function getTemplatesDir(): string;
+/**
+ * Get SHA256 hash of a file
+ */
+export declare function hashFile(filePath: string): string;
+/**
+ * Get the path to the hash store file
+ */
+export declare function getHashStorePath(targetDir: string): string;
+/**
+ * Load stored hashes for update tracking
+ */
+export declare function loadHashStore(targetDir: string): Record<string, string>;
+/**
+ * Save hash store
+ */
+export declare function saveHashStore(targetDir: string, hashes: Record<string, string>): void;
+/**
+ * List of files that should never be copied/updated (user data)
+ */
+export declare const USER_DATA_PATTERNS: string[];
+/**
+ * Check if a file path matches user data patterns
+ */
+export declare function isUserDataPath(relativePath: string): boolean;
+/**
+ * Validate that a relative path is safe (no directory traversal)
+ * Returns true if path is safe, false if it contains traversal attempts
+ */
+export declare function isValidRelativePath(relativePath: string): boolean;
+/**
+ * Recursively copy template files to target directory
+ */
+export declare function copyTemplateDir(srcDir: string, targetDir: string, options?: {
+    skipExisting?: boolean;
+    hashes?: Record<string, string>;
+    onFile?: (relativePath: string, action: 'copy' | 'skip' | 'conflict') => void;
+}): void;
+/**
+ * Get list of all template files (relative paths)
+ */
+export declare function getTemplateFiles(templatesDir: string): string[];
+/**
+ * Files that should be updatable (protocols, roles, agents)
+ */
+export declare const UPDATABLE_PREFIXES: string[];
+/**
+ * Check if a file is updatable (not user data)
+ */
+export declare function isUpdatableFile(relativePath: string): boolean;
+//# sourceMappingURL=templates.d.ts.map

package/dist/lib/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../src/lib/templates.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH;;GAEG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAexC;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGjD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUvE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAOrF;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,UAM9B,CAAC;AAEF;;GAEG;AACH,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAI5D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAqBjE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IACP,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,KAAK,IAAI,CAAC;CAC1E,GACL,IAAI,CAoEN;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAuB/D;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,UAM9B,CAAC;AAEF;;GAEG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAE7D"}

package/dist/lib/templates.js

@@ -0,0 +1,205 @@
+/**
+ * Template handling utilities for codev init/adopt/update
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { createHash } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+/**
+ * Get the path to the embedded templates directory
+ */
+export function getTemplatesDir() {
+    // In development: packages/codev/templates
+    // In installed: node_modules/@cluesmith/codev/templates
+    const templatesDir = path.resolve(__dirname, '../../templates');
+    if (fs.existsSync(templatesDir)) {
+        return templatesDir;
+    }
+    // Fallback: check dist location
+    const distTemplatesDir = path.resolve(__dirname, '../../../templates');
+    if (fs.existsSync(distTemplatesDir)) {
+        return distTemplatesDir;
+    }
+    throw new Error('Templates directory not found. Package may be corrupted.');
+}
+/**
+ * Get SHA256 hash of a file
+ */
+export function hashFile(filePath) {
+    const content = fs.readFileSync(filePath);
+    return createHash('sha256').update(content).digest('hex');
+}
+/**
+ * Get the path to the hash store file
+ */
+export function getHashStorePath(targetDir) {
+    return path.join(targetDir, 'codev', '.update-hashes.json');
+}
+/**
+ * Load stored hashes for update tracking
+ */
+export function loadHashStore(targetDir) {
+    const hashStorePath = getHashStorePath(targetDir);
+    if (fs.existsSync(hashStorePath)) {
+        try {
+            return JSON.parse(fs.readFileSync(hashStorePath, 'utf-8'));
+        }
+        catch {
+            return {};
+        }
+    }
+    return {};
+}
+/**
+ * Save hash store
+ */
+export function saveHashStore(targetDir, hashes) {
+    const hashStorePath = getHashStorePath(targetDir);
+    const dir = path.dirname(hashStorePath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    fs.writeFileSync(hashStorePath, JSON.stringify(hashes, null, 2));
+}
+/**
+ * List of files that should never be copied/updated (user data)
+ */
+export const USER_DATA_PATTERNS = [
+    'specs/',
+    'plans/',
+    'reviews/',
+    'resources/',
+    '.update-hashes.json',
+];
+/**
+ * Check if a file path matches user data patterns
+ */
+export function isUserDataPath(relativePath) {
+    return USER_DATA_PATTERNS.some(pattern => relativePath.startsWith(pattern) || relativePath.includes(`/${pattern}`));
+}
+/**
+ * Validate that a relative path is safe (no directory traversal)
+ * Returns true if path is safe, false if it contains traversal attempts
+ */
+export function isValidRelativePath(relativePath) {
+    // Normalize the path to resolve any . or .. components
+    const normalized = path.normalize(relativePath);
+    // Check for directory traversal patterns
+    if (normalized.startsWith('..') || normalized.includes('../') || normalized.includes('..\\')) {
+        return false;
+    }
+    // Check for absolute paths
+    if (path.isAbsolute(normalized)) {
+        return false;
+    }
+    // Ensure the normalized path doesn't escape the base directory
+    // by checking it doesn't start with a path separator after normalization
+    if (normalized.startsWith(path.sep) || normalized.startsWith('/')) {
+        return false;
+    }
+    return true;
+}
+/**
+ * Recursively copy template files to target directory
+ */
+export function copyTemplateDir(srcDir, targetDir, options = {}) {
+    const { skipExisting = false, hashes = {}, onFile } = options;
+    function copyRecursive(src, dest, relativeBase) {
+        const stat = fs.statSync(src);
+        if (stat.isDirectory()) {
+            if (!fs.existsSync(dest)) {
+                fs.mkdirSync(dest, { recursive: true });
+            }
+            const entries = fs.readdirSync(src);
+            for (const entry of entries) {
+                const srcPath = path.join(src, entry);
+                const destPath = path.join(dest, entry);
+                const relativePath = path.join(relativeBase, entry);
+                // Validate relative path to prevent directory traversal
+                if (!isValidRelativePath(relativePath)) {
+                    console.warn(`Skipping unsafe path: ${relativePath}`);
+                    continue;
+                }
+                copyRecursive(srcPath, destPath, relativePath);
+            }
+        }
+        else {
+            const relativePath = relativeBase;
+            // Validate relative path to prevent directory traversal
+            if (!isValidRelativePath(relativePath)) {
+                console.warn(`Skipping unsafe path: ${relativePath}`);
+                return;
+            }
+            // Skip user data files
+            if (isUserDataPath(relativePath)) {
+                onFile?.(relativePath, 'skip');
+                return;
+            }
+            // Skip .gitkeep files (they just preserve empty dirs in git)
+            if (path.basename(src) === '.gitkeep') {
+                return;
+            }
+            if (fs.existsSync(dest)) {
+                if (skipExisting) {
+                    onFile?.(relativePath, 'skip');
+                    return;
+                }
+                // File exists - this is a potential conflict
+                onFile?.(relativePath, 'conflict');
+                return;
+            }
+            // Copy the file
+            fs.copyFileSync(src, dest);
+            // Store hash for future updates
+            if (hashes) {
+                hashes[relativePath] = hashFile(dest);
+            }
+            onFile?.(relativePath, 'copy');
+        }
+    }
+    copyRecursive(srcDir, targetDir, '');
+}
+/**
+ * Get list of all template files (relative paths)
+ */
+export function getTemplateFiles(templatesDir) {
+    const files = [];
+    function walk(dir, relativeBase) {
+        const entries = fs.readdirSync(dir);
+        for (const entry of entries) {
+            const fullPath = path.join(dir, entry);
+            const relativePath = path.join(relativeBase, entry);
+            const stat = fs.statSync(fullPath);
+            if (stat.isDirectory()) {
+                walk(fullPath, relativePath);
+            }
+            else {
+                // Skip .gitkeep
+                if (entry !== '.gitkeep') {
+                    files.push(relativePath);
+                }
+            }
+        }
+    }
+    walk(templatesDir, '');
+    return files;
+}
+/**
+ * Files that should be updatable (protocols, roles, agents)
+ */
+export const UPDATABLE_PREFIXES = [
+    'protocols/',
+    'roles/',
+    'agents/',
+    'bin/',
+    'templates/',
+];
+/**
+ * Check if a file is updatable (not user data)
+ */
+export function isUpdatableFile(relativePath) {
+    return UPDATABLE_PREFIXES.some(prefix => relativePath.startsWith(prefix));
+}
+//# sourceMappingURL=templates.js.map

package/dist/lib/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/lib/templates.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAE3C;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,2CAA2C;IAC3C,wDAAwD;IACxD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAChE,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,gCAAgC;IAChC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACvE,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;AAC9E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,aAAa,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,MAA8B;IAC7E,MAAM,aAAa,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,YAAY;IACZ,qBAAqB;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,YAAoB;IACjD,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CACvC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,CACzE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACtD,uDAAuD;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAEhD,yCAAyC;IACzC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2BAA2B;IAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+DAA+D;IAC/D,yEAAyE;IACzE,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,SAAiB,EACjB,UAII,EAAE;IAEN,MAAM,EAAE,YAAY,GAAG,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAE9D,SAAS,aAAa,CAAC,GAAW,EAAE,IAAY,EAAE,YAAoB;QACpE,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE9B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACxC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;gBAEpD,wDAAwD;gBACxD,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,CAAC;oBACvC,OAAO,CAAC,IAAI,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;oBACtD,SAAS;gBACX,CAAC;gBAED,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,YAAY,CAAC;YAElC,wDAAwD;YACxD,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,uBAAuB;YACvB,IAAI,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjC,MAAM,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YAED,6DAA6D;YAC7D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,UAAU,EAAE,CAAC;gBACtC,OAAO;YACT,CAAC;YAED,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;oBAC/B,OAAO;gBACT,CAAC;gBACD,6CAA6C;gBAC7C,MAAM,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YAED,gBAAgB;YAChB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAE3B,gCAAgC;YAChC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YAED,MAAM,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,SAAS,IAAI,CAAC,GAAW,EAAE,YAAoB;QAC7C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEnC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,gBAAgB;gBAChB,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;oBACzB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,MAAM;IACN,YAAY;CACb,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,YAAoB;IAClD,OAAO,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5E,CAAC"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@cluesmith/codev",
+  "version": "1.1.0",
+  "description": "Codev CLI - AI-assisted software development framework",
+  "type": "module",
+  "bin": {
+    "codev": "./bin/codev.js",
+    "af": "./bin/af.js",
+    "consult": "./bin/consult.js"
+  },
+  "files": [
+    "dist",
+    "bin",
+    "templates"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/cli.ts",
+    "start": "node dist/cli.js",
+    "test": "vitest",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "better-sqlite3": "^12.5.0",
+    "chalk": "^5.3.0",
+    "commander": "^12.1.0",
+    "open": "^10.1.0",
+    "tree-kill": "^1.2.2"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^22.10.1",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.6"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "keywords": [
+    "cli",
+    "codev",
+    "ai",
+    "development",
+    "orchestration",
+    "agent-farm",
+    "multi-agent"
+  ],
+  "author": "Cluesmith",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/cluesmith/codev"
+  }
+}

package/templates/AGENTS.md

@@ -0,0 +1,49 @@
+# {{PROJECT_NAME}} - AI Agent Instructions
+
+> **Note**: This file follows the [AGENTS.md standard](https://agents.md/) for cross-tool compatibility with Cursor, GitHub Copilot, and other AI coding assistants. A Claude Code-specific version is maintained in `CLAUDE.md`.
+
+## Project Overview
+
+This project uses **Codev** for AI-assisted development.
+
+## Available Protocols
+
+- **SPIDER**: Multi-phase development with consultation (`codev/protocols/spider/protocol.md`)
+- **TICK**: Fast autonomous implementation (`codev/protocols/tick/protocol.md`)
+- **EXPERIMENT**: Disciplined experimentation (`codev/protocols/experiment/protocol.md`)
+- **MAINTAIN**: Codebase maintenance (`codev/protocols/maintain/protocol.md`)
+
+## Key Locations
+
+- **Specs**: `codev/specs/` - Feature specifications (WHAT to build)
+- **Plans**: `codev/plans/` - Implementation plans (HOW to build)
+- **Reviews**: `codev/reviews/` - Reviews and lessons learned
+- **Protocols**: `codev/protocols/` - Development protocols
+
+## Quick Start
+
+1. For new features, start with the Specification phase
+2. Create exactly THREE documents per feature: spec, plan, and review
+3. Follow the protocol phases as defined in the protocol files
+4. Use multi-agent consultation when specified
+
+## File Naming Convention
+
+Use sequential numbering with descriptive names:
+- Specification: `codev/specs/0001-feature-name.md`
+- Plan: `codev/plans/0001-feature-name.md`
+- Review: `codev/reviews/0001-feature-name.md`
+
+## Git Workflow
+
+**NEVER use `git add -A` or `git add .`** - Always add files explicitly.
+
+Commit messages format:
+```
+[Spec 0001] Description of change
+[Spec 0001][Phase: implement] feat: Add feature
+```
+
+## For More Info
+
+Read the full protocol documentation in `codev/protocols/`.

package/templates/CLAUDE.md

@@ -0,0 +1,47 @@
+# {{PROJECT_NAME}} - Claude Code Instructions
+
+## Project Overview
+
+This project uses **Codev** for AI-assisted development.
+
+## Available Protocols
+
+- **SPIDER**: Multi-phase development with consultation (`codev/protocols/spider/protocol.md`)
+- **TICK**: Fast autonomous implementation (`codev/protocols/tick/protocol.md`)
+- **EXPERIMENT**: Disciplined experimentation (`codev/protocols/experiment/protocol.md`)
+- **MAINTAIN**: Codebase maintenance (`codev/protocols/maintain/protocol.md`)
+
+## Key Locations
+
+- **Specs**: `codev/specs/` - Feature specifications (WHAT to build)
+- **Plans**: `codev/plans/` - Implementation plans (HOW to build)
+- **Reviews**: `codev/reviews/` - Reviews and lessons learned
+- **Protocols**: `codev/protocols/` - Development protocols
+
+## Quick Start
+
+1. For new features, start with the Specification phase
+2. Create exactly THREE documents per feature: spec, plan, and review
+3. Follow the protocol phases as defined in the protocol files
+4. Use multi-agent consultation when specified
+
+## File Naming Convention
+
+Use sequential numbering with descriptive names:
+- Specification: `codev/specs/0001-feature-name.md`
+- Plan: `codev/plans/0001-feature-name.md`
+- Review: `codev/reviews/0001-feature-name.md`
+
+## Git Workflow
+
+**NEVER use `git add -A` or `git add .`** - Always add files explicitly.
+
+Commit messages format:
+```
+[Spec 0001] Description of change
+[Spec 0001][Phase: implement] feat: Add feature
+```
+
+## For More Info
+
+Read the full protocol documentation in `codev/protocols/`.