@envseal/cli 0.1.3 → 0.1.5

package/dist/host.js

@@ -1,6 +1,23 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
+/** Host ids `init --host` accepts. `openhands` is Layer 1 only. */
+export const KNOWN_HOST_IDS = [
+    'claude-code',
+    'cursor',
+    'continue',
+    'aider',
+    'windsurf',
+    'cline',
+    'zed',
+    'codex',
+    'jetbrains',
+    'goose',
+    'copilot',
+    'generic',
+    'unknown',
+    'openhands',
+];
 /**
  * Detect the host environment from marker files and env vars.
  * Tier A: protocol + interception hooks (Claude Code)
@@ -60,6 +77,110 @@ function envsealHooksInstalled(root) {
  */
 const TIER_B_ADVICE = 'Tier B host with protocol + advisory guardrails only. Shell-command leaks are possible; prefer the keychain sink so .env holds only references.';
 const TIER_C_ADVICE = 'Tier C host with protocol only. No interception hooks available; prefer the keychain sink so .env holds only references.';
+const AIDER_CONF_PATTERNS = ['aider', '.aider'];
+export function aiderMarkerExists(root) {
+    return AIDER_CONF_PATTERNS.some((pattern) => existsSync(join(root, `${pattern}.conf.yml`)) ||
+        existsSync(join(root, `${pattern}.conf.yaml`)) ||
+        existsSync(join(root, `${pattern}.conf.json`)));
+}
+export function copilotSettingsExist(root) {
+    const vscodeSettings = join(root, '.vscode', 'settings.json');
+    try {
+        return existsSync(vscodeSettings) && /copilot/i.test(readFileSync(vscodeSettings, 'utf8'));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Every project-local host marker in this repo. Used by `init` so a dual-host
+ * tree (`.cursor/` + `.claude/`) gets both configs. Does not include AGENTS.md
+ * (Layer 1 is always applied) and does not scan `$HOME`.
+ */
+export function collectProjectHostIds(root) {
+    const ids = [];
+    if (existsSync(join(root, '.claude')))
+        ids.push('claude-code');
+    if (existsSync(join(root, '.cursor')))
+        ids.push('cursor');
+    if (existsSync(join(root, '.continue')))
+        ids.push('continue');
+    if (aiderMarkerExists(root))
+        ids.push('aider');
+    if (existsSync(join(root, '.windsurf')))
+        ids.push('windsurf');
+    if (existsSync(join(root, '.cline')))
+        ids.push('cline');
+    if (existsSync(join(root, '.zed')))
+        ids.push('zed');
+    if (existsSync(join(root, '.codex')))
+        ids.push('codex');
+    if (existsSync(join(root, '.idea')))
+        ids.push('jetbrains');
+    if (existsSync(join(root, 'goose.config.yaml')) || existsSync(join(root, '.goose'))) {
+        ids.push('goose');
+    }
+    if (copilotSettingsExist(root))
+        ids.push('copilot');
+    return ids;
+}
+/**
+ * This-process host only. Used by `init` when the project has no markers.
+ * Never treats a global `~/.cursor` / `~/.codex` install as this project.
+ */
+export function detectProcessHostId() {
+    if (process.env.CLAUDECODE)
+        return 'claude-code';
+    if (process.env.CURSOR_WORKSPACE || process.env.CURSOR_VERSION)
+        return 'cursor';
+    if (process.env.CLINE_ROOT)
+        return 'cline';
+    if (process.env.ZED_EDITOR)
+        return 'zed';
+    if (process.env.CODEX_ROOT)
+        return 'codex';
+    if (process.env.GOOSE_ROOT)
+        return 'goose';
+    return undefined;
+}
+export function parseHostOverride(raw) {
+    const ids = raw
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+    if (ids.length === 0) {
+        return { error: `unknown --host '${raw}'. Valid values: ${KNOWN_HOST_IDS.join(', ')}.` };
+    }
+    const unknown = ids.filter((id) => !KNOWN_HOST_IDS.includes(id));
+    if (unknown.length > 0) {
+        return {
+            error: `unknown --host '${unknown.join(', ')}'. Valid values: ${KNOWN_HOST_IDS.join(', ')}.`,
+        };
+    }
+    return ids;
+}
+/**
+ * Which hosts `init` should write Layer 2 config for.
+ * `--host` is an escape hatch (comma-separated ok). Never crawls `$HOME`.
+ */
+export function resolveInitHostIds(root, hostOverride) {
+    if (hostOverride !== undefined) {
+        const parsed = parseHostOverride(hostOverride);
+        if ('error' in parsed) {
+            return { ids: [], source: 'flag', error: parsed.error };
+        }
+        return { ids: parsed, source: 'flag' };
+    }
+    const project = collectProjectHostIds(root);
+    if (project.length > 0) {
+        return { ids: project, source: 'project' };
+    }
+    const processId = detectProcessHostId();
+    if (processId !== undefined) {
+        return { ids: [processId], source: 'process' };
+    }
+    return { ids: [], source: 'none' };
+}
 export function detectHost(root) {
     /* ---------------- Pass 1: project-local evidence ---------------- */
     // Claude Code. Detecting the HOST is not the same as detecting the PROTECTION:
@@ -105,11 +226,7 @@ export function detectHost(root) {
         };
     }
     // Tier C: Aider (project-local config forms).
-    const aiderConfPatterns = ['aider', '.aider'];
-    const aiderMarkerExists = aiderConfPatterns.some((pattern) => existsSync(join(root, `${pattern}.conf.yml`)) ||
-        existsSync(join(root, `${pattern}.conf.yaml`)) ||
-        existsSync(join(root, `${pattern}.conf.json`)));
-    if (aiderMarkerExists) {
+    if (aiderMarkerExists(root)) {
         return {
             id: 'aider',
             name: 'Aider',
@@ -178,16 +295,7 @@ export function detectHost(root) {
     // directory, so the honest marker is Copilot settings inside
     // .vscode/settings.json — a bare .vscode/ proves nothing, every VS Code
     // project has one.
-    const vscodeSettings = join(root, '.vscode', 'settings.json');
-    let copilotSettings = false;
-    try {
-        copilotSettings =
-            existsSync(vscodeSettings) && /copilot/i.test(readFileSync(vscodeSettings, 'utf8'));
-    }
-    catch {
-        // Unreadable settings are not evidence of Copilot.
-    }
-    if (copilotSettings) {
+    if (copilotSettingsExist(root)) {
         return {
             id: 'copilot',
             name: 'GitHub Copilot',
@@ -207,7 +315,14 @@ export function detectHost(root) {
         };
     }
     /* ------------- Pass 2: environment / global-home evidence -------------
-     * Reached ONLY when the project carries no marker of its own.             */
+     * Reached ONLY when the project carries no marker of its own.
+     *
+     * Process env (CLAUDECODE, CURSOR_*, …) names the host running *this*
+     * command. `$HOME` markers are labeling only — never a reason for `init`
+     * to write files. `~/.codex/` is intentionally not treated as Codex (see
+     * tests): a global install is not this project. `~/.codeium/windsurf`,
+     * `~/.cline`, `~/.config/zed` lump to Generic Agent, not a named host.
+     * `~/.continue/config.yaml` alone is Unknown, matching Continue docs. */
     if (process.env.CLAUDECODE) {
         return {
             id: 'claude-code',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@envseal/cli",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "type": "module",
   "license": "Apache-2.0",
   "main": "./dist/index.js",
@@ -23,13 +23,13 @@
     "provenance": true
   },
   "dependencies": {
-    "@envseal/core": "0.1.3",
-    "@envseal/prompters": "0.1.3",
-    "@envseal/protocol": "0.1.3",
-    "@envseal/registry": "0.1.3",
-    "@envseal/detector": "0.1.3",
-    "@envseal/mcp-server": "0.1.3",
-    "@envseal/http-server": "0.1.3"
+    "@envseal/protocol": "0.1.5",
+    "@envseal/core": "0.1.5",
+    "@envseal/registry": "0.1.5",
+    "@envseal/detector": "0.1.5",
+    "@envseal/mcp-server": "0.1.5",
+    "@envseal/http-server": "0.1.5",
+    "@envseal/prompters": "0.1.5"
   },
   "repository": {
     "type": "git",