@evalops/maestro 0.10.50 → 0.10.53

package/skills/incident-triage/SKILL.md

@@ -25,11 +25,30 @@ Use this skill to turn scattered incident evidence into a concise operator plan.
 ## Workflow
 
 1. Confirm the symptom, start time, affected surface, and urgency.
-2. Load `reference/triage.md` for the detailed timeline and mitigation checklist.
+2. Load learned guidelines (see below) and `reference/triage.md` for the detailed timeline and mitigation checklist.
 3. Gather only scoped evidence from granted tools and local files. Keep customer data and internal handles out of the normal answer.
 4. Build a timeline with known, inferred, and unknown entries separated.
 5. Identify the likely owner, immediate mitigation, verification signal, and follow-up issue.
 6. End with current state, blast radius, next action, and what evidence was withheld or unavailable.
+7. Record what you learned (see below) so the next incident starts from it.
+
+## Learned Guidelines
+
+This skill accumulates alert-type knowledge across runs in
+`~/.maestro/skills/incident-triage/guidelines.md`.
+
+- **At the start of a run**, read that file if it exists and treat its entries as
+  priors to verify — which tools, dashboards, owners, and mitigations a given
+  alert type needed last time. Confirm they still hold; do not trust them
+  blindly.
+- **At the end of a run**, append one concise entry mapping the alert type or
+  symptom you handled to the tools/interfaces, likely owner, and mitigation that
+  actually worked. Keep entries short and free of secrets and customer data.
+
+Programmatic callers should use ordinary UTF-8 file operations on that stable
+path: treat a missing file as an empty guideline set, normalize surrounding
+whitespace when loading, and append through an atomic temporary-file rename.
+No language-specific Maestro runtime helper is required.
 
 ## Toolbox
 

package/skills/install-code-review/SKILL.md

@@ -0,0 +1,69 @@
+---
+name: install-code-review
+description: Install automated Maestro code review in a GitHub repository's CI — add a pull_request workflow that runs `maestro exec` and posts a merge-readiness review as a PR comment. Use when the user wants to set up automated PR review, wire Maestro into CI/CD, or "install code review".
+license: Complete terms in LICENSE.txt
+compatibility: "Maestro skill packages with write/bash access to a checked-out GitHub repository."
+allowed-tools:
+  - read
+  - write
+  - bash
+builtin-tools:
+  - read
+  - write
+mode: build
+metadata:
+  version: "0.1.0"
+  category: evalops-operations
+  artifactSchema: evalops.maestro.skill.install_code_review.v1
+---
+
+# Install Code Review
+
+Wire Maestro into a repository's CI so every pull request gets an automated
+merge-readiness review. Use the published generator exports
+(`buildMaestroReviewWorkflow` / `writeMaestroReviewWorkflow`) so installs work
+in arbitrary repositories, not just in the Maestro monorepo. In this monorepo,
+the same implementation also lives at
+`packages/github-agent/src/workflows/maestro-review-workflow.ts` and is
+re-exported by `@evalops/github-agent`.
+
+## Workflow
+
+1. **Confirm the target.** Verify you are in a Git repository with a GitHub
+   remote, and that `.github/workflows/` is the right place (some repos vendor
+   workflows elsewhere). Confirm the default branch.
+2. **Choose options.** Ask only what you cannot infer: the model provider
+   (default inferred from the provider secret/env name, otherwise `anthropic`),
+   provider API key secret name (default inferred from the provider runtime env
+   var), and, if the user wants a pinned model, the model id. Pass
+   `maestroPackage` from `MAESTRO_PACKAGE_NAME` when set, otherwise use the
+   default `maestro` package, and Node to 20. For custom providers, set the runtime
+   API-key environment variable explicitly if it is not the provider id
+   uppercased with `_API_KEY` appended.
+3. **Write the workflow.** Generate `.github/workflows/maestro-review.yml` from
+   the published generator (do not hand-roll the YAML — use the generator so the
+   file is deterministic and reviews cleanly). The workflow triggers on
+   `pull_request` (opened, synchronize, reopened), runs `maestro exec` with the
+   `pr-review` skill, and posts the result with `gh pr comment`.
+4. **Document the secret.** Tell the user exactly which repository secret to add
+   (the API key), which runtime env var the workflow maps it to, and that the
+   workflow uses the built-in `GITHUB_TOKEN` for the PR comment. Do not write any
+   secret value into the repo.
+5. **Land it.** Create a branch, commit the workflow, and open a PR titled
+   "Install Maestro code review" — never commit the workflow directly to the
+   default branch. Summarize what was added and the one secret the user must
+   set for it to run.
+
+## Output
+
+Report the workflow path written, the required secret name, the trigger events,
+and the PR you opened. If the repo already has a `maestro-review.yml`, show the
+diff and ask before overwriting.
+
+## Guardrails
+
+- Request only the permissions the job needs: `contents: read` and
+  `pull-requests: write`.
+- Never embed an API key in the workflow or commit a token.
+- Keep the review step non-interactive (`maestro exec`); never assume a TTY in
+  CI.

package/skills/security-review/SKILL.md

@@ -0,0 +1,68 @@
+---
+name: security-review
+description: Correctness-first, depth-first security audit of a single repository using STRIDE, OWASP Top 10, the OWASP LLM Top 10, and supply-chain analysis. Use when the user asks for a security review, a vulnerability audit, a threat model, or a pre-release security pass.
+license: Complete terms in LICENSE.txt
+compatibility: "Maestro skill packages with read/search/bash access to a single checked-out repository."
+allowed-tools:
+  - read
+  - search
+  - bash
+builtin-tools:
+  - read
+  - search
+mode: review
+isolatedContext: true
+metadata:
+  version: "0.1.0"
+  category: evalops-operations
+  artifactSchema: evalops.maestro.skill.security_review.v1
+---
+
+# Security Review
+
+Produce a depth-first security audit of one repository. Depth beats breadth: a
+small number of substantiated, exploitable findings is worth more than a long
+list of pattern matches. Every finding must trace a concrete path from an
+untrusted input to a dangerous sink, with `file:line` evidence. Do not report a
+finding you cannot substantiate by reading the code.
+
+## Workflow
+
+1. **Scope.** Identify the languages, frameworks, entry points (HTTP routes,
+   CLI, queue consumers, webhooks), trust boundaries, and where untrusted input
+   enters. Note authentication and authorization surfaces.
+2. **Threat model (STRIDE).** Enumerate threats per trust boundary using the
+   STRIDE categories in `reference/rubric.md`. This drives where you look; it is
+   not itself a finding list.
+3. **Trace data flow.** For each candidate issue, follow the data from source
+   (untrusted input) to sink (query, exec, deserialization, file path, template,
+   model prompt, response). Confirm there is no effective sanitization on the
+   path before recording a finding.
+4. **Apply the catalogs.** Check against OWASP Top 10, the OWASP LLM Top 10 (for
+   any LLM/agent surface), and supply-chain risks — all detailed in
+   `reference/rubric.md`. Load that file when you need the full checklists. If a
+   catalog check surfaces a new candidate, send it back through step 3 and report
+   it only after the source→sink trace is substantiated.
+5. **Rate and write up.** Assign severity with the rubric. Each finding gets:
+   title, severity, location (`file:line`), the source→sink path, impact, and a
+   concrete, minimal fix.
+6. **Report.** Lead with findings ordered by severity. If you find nothing
+   exploitable, say so plainly and name the residual risk you could not rule out
+   (e.g. dependencies you did not audit, code paths you could not reach).
+
+## Findings Artifact
+
+Emit findings as `evalops.maestro.skill.security_review.v1`: a list of findings,
+each with `id`, `title`, `severity` (critical | high | medium | low | info),
+`category` (stride/owasp/owasp-llm/supply-chain), `location`, `path`, `impact`,
+and `fix`. Include a short `summary` with counts by severity and the scope you
+actually covered.
+
+## Discipline
+
+- No speculative findings. If you cannot show the vulnerable path, it is not a
+  finding — at most a note in residual risk.
+- Prefer reading the real code over running scanners; if you run a scanner (e.g.
+  `semgrep`, `npm audit`), treat its output as leads to verify, not findings.
+- Never exfiltrate secrets you discover. Report the location and the exposure,
+  redact the value.

package/skills/security-review/reference/rubric.md

@@ -0,0 +1,85 @@
+# Security Review Rubric
+
+Load this file when you need the full checklists and the severity rubric. It is
+intentionally kept out of the main skill body so the agent only pays for it when
+a review is actually underway.
+
+## Severity
+
+| Severity | Meaning |
+| --- | --- |
+| critical | Remotely exploitable with no auth, or trivial privilege escalation / RCE / full data exfiltration. Fix before release. |
+| high | Exploitable with some precondition (auth, specific input, race). Real impact on confidentiality, integrity, or availability. |
+| medium | Exploitable only with significant preconditions, or limited blast radius. Defense-in-depth gap. |
+| low | Hardening issue, weak default, or risk that requires an unlikely chain. |
+| info | Observation worth recording; not exploitable on its own. |
+
+Rate by realistic impact and exploitability of the **traced path**, not by the
+category. A SQL string concatenation behind three layers of validation is not a
+critical.
+
+## STRIDE (threat model)
+
+Walk each trust boundary and ask what each category enables:
+
+- **Spoofing** — can an actor claim another identity? (auth, session, tokens,
+  signature verification, TLS validation)
+- **Tampering** — can data or code be modified in transit or at rest? (integrity
+  checks, signed artifacts, mass-assignment, mutable shared state)
+- **Repudiation** — can an action be denied? (audit logging, tamper-evident
+  logs)
+- **Information disclosure** — can secrets or data leak? (error messages, debug
+  endpoints, directory listing, verbose logs, IDOR)
+- **Denial of service** — can an actor exhaust resources? (unbounded input,
+  regex catastrophic backtracking, zip bombs, missing rate limits)
+- **Elevation of privilege** — can an actor gain capabilities? (authorization
+  gaps, path traversal, deserialization, command injection)
+
+## OWASP Top 10 (2021)
+
+1. Broken access control (IDOR, missing authz on object/function, path
+   traversal, forced browsing).
+2. Cryptographic failures (plaintext secrets, weak/legacy algorithms, missing
+   TLS verification, predictable randomness).
+3. Injection (SQL/NoSQL, OS command, LDAP, XPath, template injection, XSS).
+4. Insecure design (missing threat model, unsafe-by-default flows).
+5. Security misconfiguration (debug on, default creds, permissive CORS, open S3,
+   verbose errors).
+6. Vulnerable and outdated components (see Supply Chain below).
+7. Identification and authentication failures (weak session handling, credential
+   stuffing exposure, missing MFA on sensitive flows).
+8. Software and data integrity failures (unsigned updates, insecure
+   deserialization, CI/CD trust).
+9. Security logging and monitoring failures (no audit trail on sensitive
+   actions).
+10. Server-side request forgery (unvalidated outbound URLs / fetchers).
+
+## OWASP LLM Top 10
+
+Apply to any prompt, agent, tool-calling, or RAG surface:
+
+1. Prompt injection (direct and indirect, including via retrieved/tool content).
+2. Sensitive information disclosure (secrets or PII leaking into prompts,
+   completions, or logs).
+3. Supply chain (untrusted models, plugins, datasets).
+4. Data and model poisoning.
+5. Improper output handling (model output flowing unsanitized into a sink — SQL,
+   shell, HTML, downstream tool calls).
+6. Excessive agency (tools with more authority than the task needs; missing
+   human approval on destructive actions).
+7. System prompt leakage (secrets or trust-bearing instructions in the system
+   prompt).
+8. Vector and embedding weaknesses (injection or poisoning via the retrieval
+   store).
+9. Misinformation / overreliance (acting on unverified model claims).
+10. Unbounded consumption (token/cost exhaustion, denial of wallet).
+
+## Supply Chain
+
+- Pinned, integrity-checked dependencies (lockfiles, hashes) vs. floating
+  ranges.
+- Known-vulnerable versions (`npm audit`, `pip-audit`, `osv-scanner` as leads).
+- Install/build scripts that execute on `install` (postinstall hooks).
+- Typosquat / dependency-confusion risk on internal package names.
+- CI/CD: secrets in workflow logs, unpinned actions, write tokens on PRs from
+  forks.

package/dist/cli/commands/agents.d.ts

@@ -1,20 +0,0 @@
-export interface AgentRuleSource {
-    path: string;
-    relativePath: string;
-    label: string;
-    content: string;
-    truncated: boolean;
-}
-export interface AgentsInitOptions {
-    force?: boolean;
-}
-export interface AgentsInitResult {
-    path: string;
-    action: "created" | "updated" | "preview";
-    diff?: string;
-    sources: AgentRuleSource[];
-}
-export declare function discoverAgentRuleSources(projectRoot: string, targetPath?: string, includeTarget?: boolean): AgentRuleSource[];
-export declare function buildAgentsInitPrompt(targetPath: string, sources?: AgentRuleSource[]): string;
-export declare function handleAgentsInit(inputPath?: string, options?: AgentsInitOptions): AgentsInitResult;
-//# sourceMappingURL=agents.d.ts.map

package/dist/cli/commands/agents.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/agents.ts"],"names":[],"mappings":"AA+FA,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACnB;AAMD,MAAM,WAAW,iBAAiB;IACjC,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,eAAe,EAAE,CAAC;CAC3B;AA2FD,wBAAgB,wBAAwB,CACvC,WAAW,EAAE,MAAM,EACnB,UAAU,CAAC,EAAE,MAAM,EACnB,aAAa,UAAQ,GACnB,eAAe,EAAE,CAgDnB;AAsFD,wBAAgB,qBAAqB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,eAAe,EAIvB,GACC,MAAM,CAER;AAED,wBAAgB,gBAAgB,CAC/B,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,GAAE,iBAAsB,GAC7B,gBAAgB,CAkClB"}

package/dist/cli/commands/agents.js

@@ -1,280 +0,0 @@
-import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, statSync, } from "node:fs";
-import { basename, dirname, isAbsolute, join, relative, resolve, } from "node:path";
-import * as Diff from "diff";
-import { writeTextFileAtomic } from "../../utils/fs.js";
-import { truncateUtf8 } from "../system-prompt.js";
-const TEMPLATE = `# Repository Guidelines
-
-Use this as the contributor quickstart for **{{PROJECT_NAME}}**.
-
-## Project Structure
-- Map the main source, test, docs, scripts, and config paths.
-- Call out generated, vendored, or build-output directories agents should not edit.
-
-## Commands
-- Install: \`npm install\` (or the repo's package manager).
-- Develop: \`npm run dev\`; Build: \`npm run build\`.
-- Quality: \`npm run lint\`, \`npm run format\`, and \`npm test\`.
-
-## Style
-- Follow the checked-in formatter and linter; keep naming consistent with nearby code.
-- Prefer small, focused changes and comments only for non-obvious behavior.
-
-## Testing
-- Add or update tests beside changed behavior.
-- Cover success, error, and boundary cases with deterministic fixtures.
-
-## Pull Requests
-- Use imperative commit subjects and keep PRs scoped.
-- Include behavior changes, linked issues, validation steps, and screenshots for UI changes.
-
-## Security
-- Do not commit secrets; document new environment variables and migrations.
-`;
-const GENERATION_PROMPT = `Generate a file named AGENTS.md that serves as a contributor guide for this repository.
-
-Your goal is to produce a clear, concise, and well-structured document with descriptive headings and actionable explanations for each section. Follow the outline below, but adapt as needed—add sections if relevant, and omit those that do not apply to this project.
-
-Document Requirements:
-- Title the document "Repository Guidelines".
-- Use Markdown headings (#, ##, etc.) for structure.
-- Keep the document concise; about 20 lines and 150-250 words is optimal.
-- Keep explanations short, direct, and specific to this repository.
-- Provide examples where helpful (commands, directory paths, naming patterns).
-- Maintain a professional, instructional tone.
-
-Recommended Sections:
-- Project Structure & Module Organization: Outline where source code, tests, docs, configs, and assets live.
-- Build, Test, and Development Commands: List key commands for installing, building, testing, and running locally with short explanations.
-- Coding Style & Naming Conventions: Indentation rules, style preferences, naming patterns, formatting/linting tools.
-- Testing Guidelines: Frameworks, coverage expectations, naming conventions, and how to run tests.
-- Commit & Pull Request Guidelines: Commit message conventions, PR requirements (descriptions, linked issues, screenshots), and pre-review checks.
-- (Optional) Security & Configuration Tips, Architecture Overview, or Agent-Specific Instructions if applicable.
-
-Instructions:
-- Use the available tools to inspect this repository as needed (e.g., list directories, read configs, inspect scripts) before writing.
-- If existing AI tool rule files are supplied below, preserve their intent in the generated AGENTS.md instead of ignoring or mechanically concatenating them.
-- If an existing AGENTS.md or AGENT.md is supplied below, update its guidance instead of discarding hand-written project specifics.
-- Add a short HTML comment near the top noting which AI rule sources contributed.
-- Overwrite the entire contents of AGENTS.md at the target path.
-- Keep output scoped to the single Markdown file; do not create extra files.
-- Write the final document directly to the AGENTS.md file and return a brief confirmation when done.`;
-const MAX_IMPORTED_RULE_BYTES = 12_000;
-const RULE_WALK_IGNORE_DIRS = new Set([
-    ".git",
-    ".hg",
-    ".svn",
-    "node_modules",
-    "dist",
-    "build",
-    "coverage",
-    ".next",
-    ".turbo",
-    ".cache",
-    "tmp",
-]);
-function buildAgentsTemplate(projectName) {
-    return TEMPLATE.replace(/{{PROJECT_NAME}}/g, projectName);
-}
-function resolveTargetPath(targetPath) {
-    if (!targetPath) {
-        return join(process.cwd(), "AGENTS.md");
-    }
-    const resolved = resolve(targetPath);
-    if (resolved.toLowerCase().endsWith(".md")) {
-        return resolved;
-    }
-    return join(resolved, "AGENTS.md");
-}
-function isMarkdownRuleFile(fileName) {
-    const lower = fileName.toLowerCase();
-    return lower.endsWith(".md") || lower.endsWith(".mdc");
-}
-function isPathInside(root, candidate) {
-    const relativePath = relative(root, candidate);
-    return (relativePath === "" ||
-        (!relativePath.startsWith("..") && !isAbsolute(relativePath)));
-}
-function readRuleSource(projectRoot, filePath, label) {
-    try {
-        const resolvedPath = resolve(filePath);
-        const linkStat = lstatSync(resolvedPath);
-        if (!linkStat.isFile()) {
-            return null;
-        }
-        const rootRealPath = realpathSync(projectRoot);
-        const fileRealPath = realpathSync(resolvedPath);
-        if (!isPathInside(rootRealPath, fileRealPath)) {
-            return null;
-        }
-        const stat = statSync(resolvedPath);
-        if (!stat.isFile()) {
-            return null;
-        }
-        const raw = readFileSync(resolvedPath);
-        const truncated = raw.byteLength > MAX_IMPORTED_RULE_BYTES;
-        const content = truncated
-            ? truncateUtf8(raw, MAX_IMPORTED_RULE_BYTES).content
-            : raw.toString("utf-8");
-        return {
-            path: resolvedPath,
-            relativePath: relative(projectRoot, resolvedPath) || basename(resolvedPath),
-            label,
-            content,
-            truncated,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-function walkRuleFiles(dir, predicate) {
-    let entries;
-    try {
-        entries = readdirSync(dir, { withFileTypes: true });
-    }
-    catch {
-        return [];
-    }
-    const files = [];
-    for (const entry of entries) {
-        const entryPath = join(dir, entry.name);
-        if (entry.isDirectory()) {
-            if (!RULE_WALK_IGNORE_DIRS.has(entry.name)) {
-                files.push(...walkRuleFiles(entryPath, predicate));
-            }
-            continue;
-        }
-        if (entry.isFile() && predicate(entry.name)) {
-            files.push(entryPath);
-        }
-    }
-    return files.sort((a, b) => a.localeCompare(b));
-}
-export function discoverAgentRuleSources(projectRoot, targetPath, includeTarget = false) {
-    const root = resolve(projectRoot);
-    const target = targetPath ? resolve(targetPath) : null;
-    const sources = new Map();
-    const addSource = (filePath, label) => {
-        const resolvedPath = resolve(filePath);
-        const source = readRuleSource(root, resolvedPath, label);
-        if (!source) {
-            return;
-        }
-        sources.set(resolvedPath, source);
-    };
-    if (target && includeTarget && existsSync(target)) {
-        addSource(target, "Existing AGENTS.md");
-    }
-    for (const candidate of ["AGENTS.md", "AGENT.md"]) {
-        const candidatePath = join(root, candidate);
-        if (!target || resolve(candidatePath) !== target) {
-            addSource(candidatePath, "Existing Maestro agent instructions");
-        }
-    }
-    for (const cursorRule of walkRuleFiles(join(root, ".cursor", "rules"), (name) => isMarkdownRuleFile(name))) {
-        addSource(cursorRule, "Cursor rule");
-    }
-    addSource(join(root, ".cursorrules"), "Cursor rules");
-    for (const claudeRule of walkRuleFiles(root, (name) => name === "CLAUDE.md")) {
-        addSource(claudeRule, "Claude instructions");
-    }
-    addSource(join(root, ".windsurfrules"), "Windsurf rules");
-    addSource(join(root, ".clinerules"), "Cline rules");
-    addSource(join(root, ".goosehints"), "Goose hints");
-    addSource(join(root, ".github", "copilot-instructions.md"), "Copilot instructions");
-    return Array.from(sources.values()).sort((a, b) => a.relativePath.localeCompare(b.relativePath));
-}
-function formatRuleSourceSummary(sources) {
-    if (sources.length === 0) {
-        return "";
-    }
-    const sourcePaths = sources.map((source) => formatRulePathForHtmlComment(source.relativePath));
-    return [
-        "## Imported AI Tooling Rules",
-        `<!-- Imported by maestro /init from: ${sourcePaths.join(", ")} -->`,
-        "",
-        "Review and fold these existing AI-tool instructions into the sections above:",
-        "",
-        ...sources.map((source) => {
-            const truncatedNote = source.truncated ? " (truncated)" : "";
-            return `- ${formatRulePathForMarkdown(source.relativePath)}: ${source.label}${truncatedNote}`;
-        }),
-        "",
-    ].join("\n");
-}
-function formatRulePathForMarkdown(relativePath) {
-    return JSON.stringify(relativePath);
-}
-function formatRulePathForHtmlComment(relativePath) {
-    return JSON.stringify(relativePath).replace(/-{2,}/g, (dashes) => dashes.split("").join(" "));
-}
-function buildAgentsInitContent(projectName, ruleSources) {
-    return `${buildAgentsTemplate(projectName).trimEnd()}\n\n${formatRuleSourceSummary(ruleSources)}`;
-}
-function buildAgentsInitDiff(targetPath, oldContent, newContent) {
-    return Diff.createTwoFilesPatch(targetPath, targetPath, oldContent, newContent, "current", "proposed");
-}
-function markdownFenceFor(content) {
-    const longestBacktickRun = Math.max(0, ...(content.match(/`+/g) ?? []).map((run) => run.length));
-    return "`".repeat(Math.max(3, longestBacktickRun + 1));
-}
-function formatRuleSourcesForPrompt(sources) {
-    if (sources.length === 0) {
-        return "";
-    }
-    const blocks = sources.map((source) => {
-        const fence = markdownFenceFor(source.content);
-        return [
-            `### ${formatRulePathForMarkdown(source.relativePath)} (${source.label})`,
-            source.truncated
-                ? `The content below was truncated to ${MAX_IMPORTED_RULE_BYTES} bytes.`
-                : "",
-            `${fence}md`,
-            source.content.trimEnd(),
-            fence,
-        ]
-            .filter(Boolean)
-            .join("\n");
-    });
-    return ["", "Existing AI tool rule files to merge:", "", ...blocks].join("\n\n");
-}
-export function buildAgentsInitPrompt(targetPath, sources = discoverAgentRuleSources(dirname(targetPath), targetPath, existsSync(targetPath))) {
-    return `${GENERATION_PROMPT}\n\nTarget path: ${targetPath}${formatRuleSourcesForPrompt(sources)}`;
-}
-export function handleAgentsInit(inputPath, options = {}) {
-    const target = resolveTargetPath(inputPath);
-    const directory = dirname(target);
-    const projectName = basename(directory);
-    const exists = existsSync(target);
-    const ruleSources = discoverAgentRuleSources(directory, target, exists);
-    const nextContent = buildAgentsInitContent(projectName, ruleSources);
-    if (exists) {
-        const previousContent = readFileSync(target, "utf-8");
-        const diff = buildAgentsInitDiff(target, previousContent, nextContent);
-        if (!options.force) {
-            return {
-                path: target,
-                action: "preview",
-                diff,
-                sources: ruleSources,
-            };
-        }
-        mkdirSync(directory, { recursive: true });
-        writeTextFileAtomic(target, nextContent, { encoding: "utf-8" });
-        return {
-            path: target,
-            action: "updated",
-            diff,
-            sources: ruleSources,
-        };
-    }
-    mkdirSync(directory, { recursive: true });
-    writeTextFileAtomic(target, nextContent, { encoding: "utf-8" });
-    return {
-        path: target,
-        action: "created",
-        sources: ruleSources,
-    };
-}
-//# sourceMappingURL=agents.js.map

package/dist/cli/commands/agents.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../../src/cli/commands/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,UAAU,EACV,SAAS,EACT,SAAS,EACT,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,QAAQ,GACR,MAAM,SAAS,CAAC;AAEjB,OAAO,EACN,QAAQ,EACR,OAAO,EACP,UAAU,EACV,IAAI,EACJ,QAAQ,EACR,OAAO,GACP,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BhB,CAAC;AAEF,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;qGA2B2E,CAAC;AAEtG,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACrC,MAAM;IACN,KAAK;IACL,MAAM;IACN,cAAc;IACd,MAAM;IACN,OAAO;IACP,UAAU;IACV,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,KAAK;CACL,CAAC,CAAC;AAUH,SAAS,mBAAmB,CAAC,WAAmB;IAC/C,OAAO,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;AAC3D,CAAC;AAaD,SAAS,iBAAiB,CAAC,UAAmB;IAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,SAAiB;IACpD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/C,OAAO,CACN,YAAY,KAAK,EAAE;QACnB,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAC7D,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACtB,WAAmB,EACnB,QAAgB,EAChB,KAAa;IAEb,IAAI,CAAC;QACJ,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,YAAY,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,GAAG,uBAAuB,CAAC;QAC3D,MAAM,OAAO,GAAG,SAAS;YACxB,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,OAAO;YACpD,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzB,OAAO;YACN,IAAI,EAAE,YAAY;YAClB,YAAY,EACX,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC;YAC9D,KAAK;YACL,OAAO;YACP,SAAS;SACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CACrB,GAAW,EACX,SAAwC;IAExC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,SAAS;QACV,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,WAAmB,EACnB,UAAmB,EACnB,aAAa,GAAG,KAAK;IAErB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEnD,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAE,KAAa,EAAQ,EAAE;QAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO;QACR,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,IAAI,MAAM,IAAI,aAAa,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,SAAS,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,aAAa,CAAC,KAAK,MAAM,EAAE,CAAC;YAClD,SAAS,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;QACjE,CAAC;IACF,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,aAAa,CACrC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,EAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAClC,EAAE,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACtC,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,cAAc,CAAC,CAAC;IACtD,KAAK,MAAM,UAAU,IAAI,aAAa,CACrC,IAAI,EACJ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,WAAW,CAC9B,EAAE,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IAC9C,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC1D,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,aAAa,CAAC,CAAC;IACpD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,aAAa,CAAC,CAAC;IACpD,SAAS,CACR,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,yBAAyB,CAAC,EAChD,sBAAsB,CACtB,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACjD,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAC5C,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,OAA0B;IAC1D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC1C,4BAA4B,CAAC,MAAM,CAAC,YAAY,CAAC,CACjD,CAAC;IACF,OAAO;QACN,8BAA8B;QAC9B,wCAAwC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;QACpE,EAAE;QACF,8EAA8E;QAC9E,EAAE;QACF,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACzB,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,KAAK,yBAAyB,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,KAAK,GAAG,aAAa,EAAE,CAAC;QAC/F,CAAC,CAAC;QACF,EAAE;KACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,YAAoB;IACtD,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,4BAA4B,CAAC,YAAoB;IACzD,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAChE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAC1B,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC9B,WAAmB,EACnB,WAA8B;IAE9B,OAAO,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,SAAS,mBAAmB,CAC3B,UAAkB,EAClB,UAAkB,EAClB,UAAkB;IAElB,OAAO,IAAI,CAAC,mBAAmB,CAC9B,UAAU,EACV,UAAU,EACV,UAAU,EACV,UAAU,EACV,SAAS,EACT,UAAU,CACV,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACxC,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAClC,CAAC,EACD,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CACxD,CAAC;IACF,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,0BAA0B,CAAC,OAA0B;IAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO;YACN,OAAO,yBAAyB,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,KAAK,GAAG;YACzE,MAAM,CAAC,SAAS;gBACf,CAAC,CAAC,sCAAsC,uBAAuB,SAAS;gBACxE,CAAC,CAAC,EAAE;YACL,GAAG,KAAK,IAAI;YACZ,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;YACxB,KAAK;SACL;aACC,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,EAAE,uCAAuC,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CACvE,MAAM,CACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACpC,UAAkB,EAClB,UAA6B,wBAAwB,CACpD,OAAO,CAAC,UAAU,CAAC,EACnB,UAAU,EACV,UAAU,CAAC,UAAU,CAAC,CACtB;IAED,OAAO,GAAG,iBAAiB,oBAAoB,UAAU,GAAG,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC/B,SAAkB,EAClB,UAA6B,EAAE;IAE/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,sBAAsB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACrE,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,eAAe,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACpB,OAAO;gBACN,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,SAAS;gBACjB,IAAI;gBACJ,OAAO,EAAE,WAAW;aACpB,CAAC;QACH,CAAC;QACD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,OAAO;YACN,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,SAAS;YACjB,IAAI;YACJ,OAAO,EAAE,WAAW;SACpB,CAAC;IACH,CAAC;IACD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,OAAO;QACN,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,WAAW;KACpB,CAAC;AACH,CAAC","sourcesContent":["import {\n\texistsSync,\n\tlstatSync,\n\tmkdirSync,\n\treadFileSync,\n\treaddirSync,\n\trealpathSync,\n\tstatSync,\n} from \"node:fs\";\nimport type { Dirent } from \"node:fs\";\nimport {\n\tbasename,\n\tdirname,\n\tisAbsolute,\n\tjoin,\n\trelative,\n\tresolve,\n} from \"node:path\";\nimport * as Diff from \"diff\";\nimport { writeTextFileAtomic } from \"../../utils/fs.js\";\nimport { truncateUtf8 } from \"../system-prompt.js\";\n\nconst TEMPLATE = `# Repository Guidelines\n\nUse this as the contributor quickstart for **{{PROJECT_NAME}}**.\n\n## Project Structure\n- Map the main source, test, docs, scripts, and config paths.\n- Call out generated, vendored, or build-output directories agents should not edit.\n\n## Commands\n- Install: \\`npm install\\` (or the repo's package manager).\n- Develop: \\`npm run dev\\`; Build: \\`npm run build\\`.\n- Quality: \\`npm run lint\\`, \\`npm run format\\`, and \\`npm test\\`.\n\n## Style\n- Follow the checked-in formatter and linter; keep naming consistent with nearby code.\n- Prefer small, focused changes and comments only for non-obvious behavior.\n\n## Testing\n- Add or update tests beside changed behavior.\n- Cover success, error, and boundary cases with deterministic fixtures.\n\n## Pull Requests\n- Use imperative commit subjects and keep PRs scoped.\n- Include behavior changes, linked issues, validation steps, and screenshots for UI changes.\n\n## Security\n- Do not commit secrets; document new environment variables and migrations.\n`;\n\nconst GENERATION_PROMPT = `Generate a file named AGENTS.md that serves as a contributor guide for this repository.\n\nYour goal is to produce a clear, concise, and well-structured document with descriptive headings and actionable explanations for each section. Follow the outline below, but adapt as needed—add sections if relevant, and omit those that do not apply to this project.\n\nDocument Requirements:\n- Title the document \"Repository Guidelines\".\n- Use Markdown headings (#, ##, etc.) for structure.\n- Keep the document concise; about 20 lines and 150-250 words is optimal.\n- Keep explanations short, direct, and specific to this repository.\n- Provide examples where helpful (commands, directory paths, naming patterns).\n- Maintain a professional, instructional tone.\n\nRecommended Sections:\n- Project Structure & Module Organization: Outline where source code, tests, docs, configs, and assets live.\n- Build, Test, and Development Commands: List key commands for installing, building, testing, and running locally with short explanations.\n- Coding Style & Naming Conventions: Indentation rules, style preferences, naming patterns, formatting/linting tools.\n- Testing Guidelines: Frameworks, coverage expectations, naming conventions, and how to run tests.\n- Commit & Pull Request Guidelines: Commit message conventions, PR requirements (descriptions, linked issues, screenshots), and pre-review checks.\n- (Optional) Security & Configuration Tips, Architecture Overview, or Agent-Specific Instructions if applicable.\n\nInstructions:\n- Use the available tools to inspect this repository as needed (e.g., list directories, read configs, inspect scripts) before writing.\n- If existing AI tool rule files are supplied below, preserve their intent in the generated AGENTS.md instead of ignoring or mechanically concatenating them.\n- If an existing AGENTS.md or AGENT.md is supplied below, update its guidance instead of discarding hand-written project specifics.\n- Add a short HTML comment near the top noting which AI rule sources contributed.\n- Overwrite the entire contents of AGENTS.md at the target path.\n- Keep output scoped to the single Markdown file; do not create extra files.\n- Write the final document directly to the AGENTS.md file and return a brief confirmation when done.`;\n\nconst MAX_IMPORTED_RULE_BYTES = 12_000;\nconst RULE_WALK_IGNORE_DIRS = new Set([\n\t\".git\",\n\t\".hg\",\n\t\".svn\",\n\t\"node_modules\",\n\t\"dist\",\n\t\"build\",\n\t\"coverage\",\n\t\".next\",\n\t\".turbo\",\n\t\".cache\",\n\t\"tmp\",\n]);\n\nexport interface AgentRuleSource {\n\tpath: string;\n\trelativePath: string;\n\tlabel: string;\n\tcontent: string;\n\ttruncated: boolean;\n}\n\nfunction buildAgentsTemplate(projectName: string): string {\n\treturn TEMPLATE.replace(/{{PROJECT_NAME}}/g, projectName);\n}\n\nexport interface AgentsInitOptions {\n\tforce?: boolean;\n}\n\nexport interface AgentsInitResult {\n\tpath: string;\n\taction: \"created\" | \"updated\" | \"preview\";\n\tdiff?: string;\n\tsources: AgentRuleSource[];\n}\n\nfunction resolveTargetPath(targetPath?: string): string {\n\tif (!targetPath) {\n\t\treturn join(process.cwd(), \"AGENTS.md\");\n\t}\n\tconst resolved = resolve(targetPath);\n\tif (resolved.toLowerCase().endsWith(\".md\")) {\n\t\treturn resolved;\n\t}\n\treturn join(resolved, \"AGENTS.md\");\n}\n\nfunction isMarkdownRuleFile(fileName: string): boolean {\n\tconst lower = fileName.toLowerCase();\n\treturn lower.endsWith(\".md\") || lower.endsWith(\".mdc\");\n}\n\nfunction isPathInside(root: string, candidate: string): boolean {\n\tconst relativePath = relative(root, candidate);\n\treturn (\n\t\trelativePath === \"\" ||\n\t\t(!relativePath.startsWith(\"..\") && !isAbsolute(relativePath))\n\t);\n}\n\nfunction readRuleSource(\n\tprojectRoot: string,\n\tfilePath: string,\n\tlabel: string,\n): AgentRuleSource | null {\n\ttry {\n\t\tconst resolvedPath = resolve(filePath);\n\t\tconst linkStat = lstatSync(resolvedPath);\n\t\tif (!linkStat.isFile()) {\n\t\t\treturn null;\n\t\t}\n\t\tconst rootRealPath = realpathSync(projectRoot);\n\t\tconst fileRealPath = realpathSync(resolvedPath);\n\t\tif (!isPathInside(rootRealPath, fileRealPath)) {\n\t\t\treturn null;\n\t\t}\n\t\tconst stat = statSync(resolvedPath);\n\t\tif (!stat.isFile()) {\n\t\t\treturn null;\n\t\t}\n\t\tconst raw = readFileSync(resolvedPath);\n\t\tconst truncated = raw.byteLength > MAX_IMPORTED_RULE_BYTES;\n\t\tconst content = truncated\n\t\t\t? truncateUtf8(raw, MAX_IMPORTED_RULE_BYTES).content\n\t\t\t: raw.toString(\"utf-8\");\n\t\treturn {\n\t\t\tpath: resolvedPath,\n\t\t\trelativePath:\n\t\t\t\trelative(projectRoot, resolvedPath) || basename(resolvedPath),\n\t\t\tlabel,\n\t\t\tcontent,\n\t\t\ttruncated,\n\t\t};\n\t} catch {\n\t\treturn null;\n\t}\n}\n\nfunction walkRuleFiles(\n\tdir: string,\n\tpredicate: (fileName: string) => boolean,\n): string[] {\n\tlet entries: Dirent[];\n\ttry {\n\t\tentries = readdirSync(dir, { withFileTypes: true });\n\t} catch {\n\t\treturn [];\n\t}\n\n\tconst files: string[] = [];\n\tfor (const entry of entries) {\n\t\tconst entryPath = join(dir, entry.name);\n\t\tif (entry.isDirectory()) {\n\t\t\tif (!RULE_WALK_IGNORE_DIRS.has(entry.name)) {\n\t\t\t\tfiles.push(...walkRuleFiles(entryPath, predicate));\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\t\tif (entry.isFile() && predicate(entry.name)) {\n\t\t\tfiles.push(entryPath);\n\t\t}\n\t}\n\treturn files.sort((a, b) => a.localeCompare(b));\n}\n\nexport function discoverAgentRuleSources(\n\tprojectRoot: string,\n\ttargetPath?: string,\n\tincludeTarget = false,\n): AgentRuleSource[] {\n\tconst root = resolve(projectRoot);\n\tconst target = targetPath ? resolve(targetPath) : null;\n\tconst sources = new Map<string, AgentRuleSource>();\n\n\tconst addSource = (filePath: string, label: string): void => {\n\t\tconst resolvedPath = resolve(filePath);\n\t\tconst source = readRuleSource(root, resolvedPath, label);\n\t\tif (!source) {\n\t\t\treturn;\n\t\t}\n\t\tsources.set(resolvedPath, source);\n\t};\n\n\tif (target && includeTarget && existsSync(target)) {\n\t\taddSource(target, \"Existing AGENTS.md\");\n\t}\n\tfor (const candidate of [\"AGENTS.md\", \"AGENT.md\"]) {\n\t\tconst candidatePath = join(root, candidate);\n\t\tif (!target || resolve(candidatePath) !== target) {\n\t\t\taddSource(candidatePath, \"Existing Maestro agent instructions\");\n\t\t}\n\t}\n\n\tfor (const cursorRule of walkRuleFiles(\n\t\tjoin(root, \".cursor\", \"rules\"),\n\t\t(name) => isMarkdownRuleFile(name),\n\t)) {\n\t\taddSource(cursorRule, \"Cursor rule\");\n\t}\n\taddSource(join(root, \".cursorrules\"), \"Cursor rules\");\n\tfor (const claudeRule of walkRuleFiles(\n\t\troot,\n\t\t(name) => name === \"CLAUDE.md\",\n\t)) {\n\t\taddSource(claudeRule, \"Claude instructions\");\n\t}\n\taddSource(join(root, \".windsurfrules\"), \"Windsurf rules\");\n\taddSource(join(root, \".clinerules\"), \"Cline rules\");\n\taddSource(join(root, \".goosehints\"), \"Goose hints\");\n\taddSource(\n\t\tjoin(root, \".github\", \"copilot-instructions.md\"),\n\t\t\"Copilot instructions\",\n\t);\n\n\treturn Array.from(sources.values()).sort((a, b) =>\n\t\ta.relativePath.localeCompare(b.relativePath),\n\t);\n}\n\nfunction formatRuleSourceSummary(sources: AgentRuleSource[]): string {\n\tif (sources.length === 0) {\n\t\treturn \"\";\n\t}\n\tconst sourcePaths = sources.map((source) =>\n\t\tformatRulePathForHtmlComment(source.relativePath),\n\t);\n\treturn [\n\t\t\"## Imported AI Tooling Rules\",\n\t\t`<!-- Imported by maestro /init from: ${sourcePaths.join(\", \")} -->`,\n\t\t\"\",\n\t\t\"Review and fold these existing AI-tool instructions into the sections above:\",\n\t\t\"\",\n\t\t...sources.map((source) => {\n\t\t\tconst truncatedNote = source.truncated ? \" (truncated)\" : \"\";\n\t\t\treturn `- ${formatRulePathForMarkdown(source.relativePath)}: ${source.label}${truncatedNote}`;\n\t\t}),\n\t\t\"\",\n\t].join(\"\\n\");\n}\n\nfunction formatRulePathForMarkdown(relativePath: string): string {\n\treturn JSON.stringify(relativePath);\n}\n\nfunction formatRulePathForHtmlComment(relativePath: string): string {\n\treturn JSON.stringify(relativePath).replace(/-{2,}/g, (dashes) =>\n\t\tdashes.split(\"\").join(\" \"),\n\t);\n}\n\nfunction buildAgentsInitContent(\n\tprojectName: string,\n\truleSources: AgentRuleSource[],\n): string {\n\treturn `${buildAgentsTemplate(projectName).trimEnd()}\\n\\n${formatRuleSourceSummary(ruleSources)}`;\n}\n\nfunction buildAgentsInitDiff(\n\ttargetPath: string,\n\toldContent: string,\n\tnewContent: string,\n): string {\n\treturn Diff.createTwoFilesPatch(\n\t\ttargetPath,\n\t\ttargetPath,\n\t\toldContent,\n\t\tnewContent,\n\t\t\"current\",\n\t\t\"proposed\",\n\t);\n}\n\nfunction markdownFenceFor(content: string): string {\n\tconst longestBacktickRun = Math.max(\n\t\t0,\n\t\t...(content.match(/`+/g) ?? []).map((run) => run.length),\n\t);\n\treturn \"`\".repeat(Math.max(3, longestBacktickRun + 1));\n}\n\nfunction formatRuleSourcesForPrompt(sources: AgentRuleSource[]): string {\n\tif (sources.length === 0) {\n\t\treturn \"\";\n\t}\n\tconst blocks = sources.map((source) => {\n\t\tconst fence = markdownFenceFor(source.content);\n\t\treturn [\n\t\t\t`### ${formatRulePathForMarkdown(source.relativePath)} (${source.label})`,\n\t\t\tsource.truncated\n\t\t\t\t? `The content below was truncated to ${MAX_IMPORTED_RULE_BYTES} bytes.`\n\t\t\t\t: \"\",\n\t\t\t`${fence}md`,\n\t\t\tsource.content.trimEnd(),\n\t\t\tfence,\n\t\t]\n\t\t\t.filter(Boolean)\n\t\t\t.join(\"\\n\");\n\t});\n\treturn [\"\", \"Existing AI tool rule files to merge:\", \"\", ...blocks].join(\n\t\t\"\\n\\n\",\n\t);\n}\n\nexport function buildAgentsInitPrompt(\n\ttargetPath: string,\n\tsources: AgentRuleSource[] = discoverAgentRuleSources(\n\t\tdirname(targetPath),\n\t\ttargetPath,\n\t\texistsSync(targetPath),\n\t),\n): string {\n\treturn `${GENERATION_PROMPT}\\n\\nTarget path: ${targetPath}${formatRuleSourcesForPrompt(sources)}`;\n}\n\nexport function handleAgentsInit(\n\tinputPath?: string,\n\toptions: AgentsInitOptions = {},\n): AgentsInitResult {\n\tconst target = resolveTargetPath(inputPath);\n\tconst directory = dirname(target);\n\tconst projectName = basename(directory);\n\tconst exists = existsSync(target);\n\tconst ruleSources = discoverAgentRuleSources(directory, target, exists);\n\tconst nextContent = buildAgentsInitContent(projectName, ruleSources);\n\tif (exists) {\n\t\tconst previousContent = readFileSync(target, \"utf-8\");\n\t\tconst diff = buildAgentsInitDiff(target, previousContent, nextContent);\n\t\tif (!options.force) {\n\t\t\treturn {\n\t\t\t\tpath: target,\n\t\t\t\taction: \"preview\",\n\t\t\t\tdiff,\n\t\t\t\tsources: ruleSources,\n\t\t\t};\n\t\t}\n\t\tmkdirSync(directory, { recursive: true });\n\t\twriteTextFileAtomic(target, nextContent, { encoding: \"utf-8\" });\n\t\treturn {\n\t\t\tpath: target,\n\t\t\taction: \"updated\",\n\t\t\tdiff,\n\t\t\tsources: ruleSources,\n\t\t};\n\t}\n\tmkdirSync(directory, { recursive: true });\n\twriteTextFileAtomic(target, nextContent, { encoding: \"utf-8\" });\n\treturn {\n\t\tpath: target,\n\t\taction: \"created\",\n\t\tsources: ruleSources,\n\t};\n}\n"]}

package/dist/cli/commands/anthropic.d.ts

@@ -1,2 +0,0 @@
-export declare function handleAnthropicCommand(): Promise<void>;
-//# sourceMappingURL=anthropic.d.ts.map

package/dist/cli/commands/anthropic.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/anthropic.ts"],"names":[],"mappings":"AAEA,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAO5D"}

package/dist/cli/commands/anthropic.js

@@ -1,6 +0,0 @@
-import chalk from "chalk";
-export async function handleAnthropicCommand() {
-    console.error(chalk.red("Anthropic OAuth login has been removed. Set ANTHROPIC_API_KEY to use Anthropic models, or run `maestro codex login` for the default Codex flow."));
-    process.exit(1);
-}
-//# sourceMappingURL=anthropic.js.map

package/dist/cli/commands/anthropic.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../../src/cli/commands/anthropic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC3C,OAAO,CAAC,KAAK,CACZ,KAAK,CAAC,GAAG,CACR,iJAAiJ,CACjJ,CACD,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC","sourcesContent":["import chalk from \"chalk\";\n\nexport async function handleAnthropicCommand(): Promise<void> {\n\tconsole.error(\n\t\tchalk.red(\n\t\t\t\"Anthropic OAuth login has been removed. Set ANTHROPIC_API_KEY to use Anthropic models, or run `maestro codex login` for the default Codex flow.\",\n\t\t),\n\t);\n\tprocess.exit(1);\n}\n"]}

package/dist/cli/commands/cost.d.ts

@@ -1,13 +0,0 @@
-/**
- * Handle `maestro cost` command (default: today)
- */
-export declare function handleCostSummary(period?: string): Promise<void>;
-/**
- * Handle `maestro cost clear` command
- */
-export declare function handleCostClear(): Promise<void>;
-/**
- * Handle `maestro cost breakdown` command
- */
-export declare function handleCostBreakdown(): Promise<void>;
-//# sourceMappingURL=cost.d.ts.map

package/dist/cli/commands/cost.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cost.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/cost.ts"],"names":[],"mappings":"AAWA;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA0GtE;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAoBrD;AAED;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAiCzD"}