@nepopsx/cli 0.0.1

package/dist/security/integrity.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Integrity manifest — generates and verifies SHA-256 hashes
+ * for all OPSX-generated files. Detects post-generation tampering.
+ */
+export interface ManifestEntry {
+    path: string;
+    sha256: string;
+}
+export interface IntegrityResult {
+    valid: boolean;
+    entries: ManifestEntry[];
+    tampered: string[];
+    missing: string[];
+}
+/**
+ * Generate a manifest of SHA-256 hashes for all generated files.
+ * Call after writeGeneratedFiles() completes.
+ */
+export declare function generateManifest(rootDir: string, generatedFiles: Array<{
+    path: string;
+    content: string;
+}>): ManifestEntry[];
+/**
+ * Verify the integrity of generated files against the manifest.
+ * Returns which files have been tampered with or are missing.
+ */
+export declare function verifyManifest(rootDir: string): IntegrityResult;
+//# sourceMappingURL=integrity.d.ts.map

package/dist/security/integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity.d.ts","sourceRoot":"","sources":["../../src/security/integrity.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AASD;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GACvD,aAAa,EAAE,CA2BjB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CA6C/D"}

package/dist/security/integrity.js

@@ -0,0 +1,87 @@
+/**
+ * Integrity manifest — generates and verifies SHA-256 hashes
+ * for all OPSX-generated files. Detects post-generation tampering.
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+const MANIFEST_DIR = '.opsx';
+const MANIFEST_FILE = 'manifest.sha256';
+/**
+ * Compute SHA-256 hash of a string.
+ */
+function sha256(content) {
+    return createHash('sha256').update(content, 'utf-8').digest('hex');
+}
+/**
+ * Generate a manifest of SHA-256 hashes for all generated files.
+ * Call after writeGeneratedFiles() completes.
+ */
+export function generateManifest(rootDir, generatedFiles) {
+    const entries = [];
+    for (const file of generatedFiles) {
+        entries.push({
+            path: file.path,
+            sha256: sha256(file.content),
+        });
+    }
+    // Sort for deterministic output
+    entries.sort((a, b) => a.path.localeCompare(b.path));
+    // Write manifest
+    const manifestPath = join(rootDir, MANIFEST_DIR, MANIFEST_FILE);
+    const manifestDir = dirname(manifestPath);
+    if (!existsSync(manifestDir)) {
+        mkdirSync(manifestDir, { recursive: true });
+    }
+    const manifestContent = entries
+        .map((e) => `${e.sha256}  ${e.path}`)
+        .join('\n') + '\n';
+    writeFileSync(manifestPath, manifestContent, 'utf-8');
+    return entries;
+}
+/**
+ * Verify the integrity of generated files against the manifest.
+ * Returns which files have been tampered with or are missing.
+ */
+export function verifyManifest(rootDir) {
+    const manifestPath = join(rootDir, MANIFEST_DIR, MANIFEST_FILE);
+    if (!existsSync(manifestPath)) {
+        return {
+            valid: false,
+            entries: [],
+            tampered: [],
+            missing: ['(manifest file not found — run opsx sync first)'],
+        };
+    }
+    const manifestContent = readFileSync(manifestPath, 'utf-8');
+    const entries = [];
+    const tampered = [];
+    const missing = [];
+    for (const line of manifestContent.trim().split('\n')) {
+        if (!line.trim())
+            continue;
+        // Format: "sha256hash  relative/path"
+        const match = line.match(/^([a-f0-9]{64})\s{2}(.+)$/);
+        if (!match)
+            continue;
+        const [, expectedHash, filePath] = match;
+        entries.push({ path: filePath, sha256: expectedHash });
+        const fullPath = join(rootDir, filePath);
+        if (!existsSync(fullPath)) {
+            missing.push(filePath);
+            continue;
+        }
+        const actualContent = readFileSync(fullPath, 'utf-8');
+        const actualHash = sha256(actualContent);
+        if (actualHash !== expectedHash) {
+            tampered.push(filePath);
+        }
+    }
+    return {
+        valid: tampered.length === 0 && missing.length === 0,
+        entries,
+        tampered,
+        missing,
+    };
+}
+//# sourceMappingURL=integrity.js.map

package/dist/security/integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity.js","sourceRoot":"","sources":["../../src/security/integrity.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAY,MAAM,WAAW,CAAC;AAEpD,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAcxC;;GAEG;AACH,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,cAAwD;IAExD,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,gCAAgC;IAChC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAErD,iBAAiB;IACjB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,eAAe,GAAG,OAAO;SAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;SACpC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAErB,aAAa,CAAC,YAAY,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IAEtD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IAEhE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,CAAC,iDAAiD,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,sCAAsC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QAEvD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QACzC,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QACpD,OAAO;QACP,QAAQ;QACR,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/security/scanner.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Content scanner — detects prompt injection and manipulation patterns
+ * in custom instructions, philosophy.custom[], and user-supplied text
+ * before it gets injected into agent templates.
+ */
+export interface ScanThreat {
+    pattern: string;
+    match: string;
+    source: string;
+    severity: 'critical' | 'high' | 'medium';
+}
+export interface ScanResult {
+    safe: boolean;
+    threats: ScanThreat[];
+}
+/**
+ * Scan a piece of text for prompt injection patterns.
+ */
+export declare function scanForInjection(content: string, source: string): ScanThreat[];
+/**
+ * Scan text for accidentally embedded secrets.
+ */
+export declare function scanForSecrets(content: string, source: string): ScanThreat[];
+/**
+ * Scan custom instructions files for injection + secrets.
+ */
+export declare function scanCustomInstructions(customs: Array<{
+    content: string;
+    source: string;
+}>): ScanResult;
+/**
+ * Scan philosophy.custom[] entries for injection + secrets.
+ */
+export declare function scanPhilosophyCustom(customEntries: string[]): ScanResult;
+/**
+ * Scan all string values in the workspace config for secrets.
+ */
+export declare function scanConfigForSecrets(config: Record<string, unknown>, path?: string): ScanThreat[];
+/**
+ * Format threats for console output.
+ */
+export declare function formatThreats(threats: ScanThreat[]): string;
+//# sourceMappingURL=scanner.d.ts.map

package/dist/security/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/security/scanner.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;CAC1C;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAyDD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE,CAgB9E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE,CAkB5E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAClD,UAAU,CASZ;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,MAAM,EAAE,GACtB,UAAU,CAUZ;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,SAAW,GAAG,UAAU,EAAE,CAsBnG;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CAkC3D"}

package/dist/security/scanner.js

@@ -0,0 +1,172 @@
+/**
+ * Content scanner — detects prompt injection and manipulation patterns
+ * in custom instructions, philosophy.custom[], and user-supplied text
+ * before it gets injected into agent templates.
+ */
+// ─── Prompt injection detection patterns ────────────────────
+const INJECTION_PATTERNS = [
+    // Direct instruction override attempts
+    { regex: /ignore\s+(all\s+)?(previous|prior|above|earlier)\s+(instructions|rules|guidelines|directives)/i, description: 'Instruction override attempt', severity: 'critical' },
+    { regex: /disregard\s+(all\s+)?(previous|prior|above|earlier|your)\s+(instructions|rules|guidelines|directives)/i, description: 'Instruction disregard attempt', severity: 'critical' },
+    { regex: /override\s+(the\s+)?(constitutional|safety|security|system)\s+(rules|instructions|prompt|guidelines)/i, description: 'Constitutional override attempt', severity: 'critical' },
+    { regex: /forget\s+(all|everything|your)\s+(previous|prior|instructions|rules|training)/i, description: 'Memory wipe attempt', severity: 'critical' },
+    // Role/identity hijacking
+    { regex: /you\s+are\s+now\s+(a|an|the)\s+/i, description: 'Role hijacking attempt', severity: 'critical' },
+    { regex: /pretend\s+(you\s+are|to\s+be|you're)\s+/i, description: 'Role-play injection', severity: 'high' },
+    { regex: /act\s+as\s+(if\s+you\s+are|a|an|the)\s+/i, description: 'Role assumption injection', severity: 'high' },
+    { regex: /from\s+now\s+on,?\s+(you|your|act|behave|respond)/i, description: 'Behavioral override attempt', severity: 'high' },
+    // System prompt extraction
+    { regex: /(?:show|reveal|display|output|print|repeat|echo)\s+(your|the)\s+(system|initial|original)\s+(prompt|instructions|message)/i, description: 'System prompt extraction attempt', severity: 'high' },
+    { regex: /what\s+(are|is)\s+your\s+(system|initial|original)\s+(prompt|instructions|rules)/i, description: 'System prompt probing', severity: 'medium' },
+    // Tool/permission escalation
+    { regex: /(?:run|execute|invoke)\s+(?:any|all|unlimited)\s+(?:commands?|tools?|scripts?)/i, description: 'Permission escalation attempt', severity: 'critical' },
+    { regex: /(?:disable|remove|skip|bypass)\s+(?:the\s+)?(?:safety|security|guard|check|validation|restriction)/i, description: 'Safety bypass attempt', severity: 'critical' },
+    { regex: /--no-verify/i, description: 'Git safety bypass (--no-verify)', severity: 'high' },
+    { regex: /--force\s*(?:push)?/i, description: 'Force operation pattern', severity: 'medium' },
+    // Hidden instruction embedding
+    { regex: /\[SYSTEM\]/i, description: 'Hidden system tag', severity: 'high' },
+    { regex: /\[INST\]/i, description: 'Hidden instruction tag', severity: 'high' },
+    { regex: /<\|im_start\|>system/i, description: 'ChatML injection attempt', severity: 'critical' },
+    { regex: /Human:|Assistant:/i, description: 'Conversation role injection', severity: 'medium' },
+    // Dangerous shell patterns in instruction text
+    { regex: /rm\s+-rf\s+[/~]/i, description: 'Destructive rm -rf command in instructions', severity: 'critical' },
+    { regex: /curl\s+.*\|\s*(?:bash|sh|zsh)/i, description: 'Pipe-to-shell pattern in instructions', severity: 'critical' },
+    { regex: /wget\s+.*&&\s*(?:bash|sh|chmod)/i, description: 'Download-and-execute pattern', severity: 'critical' },
+    { regex: /eval\s*\(\s*["'`]/i, description: 'Eval injection pattern', severity: 'high' },
+];
+// ─── Secrets patterns (also scanned via this module) ────────
+const SECRET_PATTERNS = [
+    { regex: /(?:^|[^a-zA-Z0-9])sk-[a-zA-Z0-9]{20,}/m, description: 'OpenAI API key' },
+    { regex: /(?:^|[^a-zA-Z0-9])ghp_[a-zA-Z0-9]{36,}/m, description: 'GitHub personal access token' },
+    { regex: /(?:^|[^a-zA-Z0-9])gho_[a-zA-Z0-9]{36,}/m, description: 'GitHub OAuth token' },
+    { regex: /(?:^|[^a-zA-Z0-9])github_pat_[a-zA-Z0-9_]{22,}/m, description: 'GitHub fine-grained PAT' },
+    { regex: /AKIA[0-9A-Z]{16}/m, description: 'AWS access key ID' },
+    { regex: /(?:^|[^a-zA-Z0-9])Bearer\s+[a-zA-Z0-9._\-]{20,}/m, description: 'Bearer token' },
+    { regex: /(?:password|passwd|secret|api_key|apikey|access_token)\s*[:=]\s*["'][^"']{6,}["']/i, description: 'Hardcoded credential' },
+    { regex: /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/m, description: 'Private key' },
+    { regex: /(?:^|[^a-zA-Z0-9])xox[bpors]-[a-zA-Z0-9\-]{10,}/m, description: 'Slack token' },
+    { regex: /(?:^|[^a-zA-Z0-9])AIza[0-9A-Za-z\-_]{35}/m, description: 'Google API key' },
+];
+// ─── Public API ─────────────────────────────────────────────
+/**
+ * Scan a piece of text for prompt injection patterns.
+ */
+export function scanForInjection(content, source) {
+    const threats = [];
+    for (const { regex, description, severity } of INJECTION_PATTERNS) {
+        const match = content.match(regex);
+        if (match) {
+            threats.push({
+                pattern: description,
+                match: match[0].substring(0, 80), // truncate long matches
+                source,
+                severity,
+            });
+        }
+    }
+    return threats;
+}
+/**
+ * Scan text for accidentally embedded secrets.
+ */
+export function scanForSecrets(content, source) {
+    const threats = [];
+    for (const { regex, description } of SECRET_PATTERNS) {
+        const match = content.match(regex);
+        if (match) {
+            // Redact the match — never show secrets in output
+            const redacted = match[0].substring(0, 8) + '***REDACTED***';
+            threats.push({
+                pattern: description,
+                match: redacted,
+                source,
+                severity: 'high',
+            });
+        }
+    }
+    return threats;
+}
+/**
+ * Scan custom instructions files for injection + secrets.
+ */
+export function scanCustomInstructions(customs) {
+    const threats = [];
+    for (const ci of customs) {
+        threats.push(...scanForInjection(ci.content, `customs/${ci.source}`));
+        threats.push(...scanForSecrets(ci.content, `customs/${ci.source}`));
+    }
+    return { safe: threats.length === 0, threats };
+}
+/**
+ * Scan philosophy.custom[] entries for injection + secrets.
+ */
+export function scanPhilosophyCustom(customEntries) {
+    const threats = [];
+    for (let i = 0; i < customEntries.length; i++) {
+        const source = `philosophy.custom[${i}]`;
+        threats.push(...scanForInjection(customEntries[i], source));
+        threats.push(...scanForSecrets(customEntries[i], source));
+    }
+    return { safe: threats.length === 0, threats };
+}
+/**
+ * Scan all string values in the workspace config for secrets.
+ */
+export function scanConfigForSecrets(config, path = 'config') {
+    const threats = [];
+    for (const [key, value] of Object.entries(config)) {
+        const currentPath = `${path}.${key}`;
+        if (typeof value === 'string') {
+            threats.push(...scanForSecrets(value, currentPath));
+        }
+        else if (Array.isArray(value)) {
+            for (let i = 0; i < value.length; i++) {
+                if (typeof value[i] === 'string') {
+                    threats.push(...scanForSecrets(value[i], `${currentPath}[${i}]`));
+                }
+                else if (typeof value[i] === 'object' && value[i] !== null) {
+                    threats.push(...scanConfigForSecrets(value[i], `${currentPath}[${i}]`));
+                }
+            }
+        }
+        else if (typeof value === 'object' && value !== null) {
+            threats.push(...scanConfigForSecrets(value, currentPath));
+        }
+    }
+    return threats;
+}
+/**
+ * Format threats for console output.
+ */
+export function formatThreats(threats) {
+    if (threats.length === 0)
+        return '';
+    const lines = [];
+    const bySeverity = {
+        critical: threats.filter((t) => t.severity === 'critical'),
+        high: threats.filter((t) => t.severity === 'high'),
+        medium: threats.filter((t) => t.severity === 'medium'),
+    };
+    if (bySeverity.critical.length > 0) {
+        lines.push('  🔴 CRITICAL:');
+        for (const t of bySeverity.critical) {
+            lines.push(`     ${t.pattern} in ${t.source}`);
+            lines.push(`     → "${t.match}"`);
+        }
+    }
+    if (bySeverity.high.length > 0) {
+        lines.push('  🟠 HIGH:');
+        for (const t of bySeverity.high) {
+            lines.push(`     ${t.pattern} in ${t.source}`);
+            lines.push(`     → "${t.match}"`);
+        }
+    }
+    if (bySeverity.medium.length > 0) {
+        lines.push('  🟡 MEDIUM:');
+        for (const t of bySeverity.medium) {
+            lines.push(`     ${t.pattern} in ${t.source}`);
+        }
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=scanner.js.map

package/dist/security/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/security/scanner.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH,+DAA+D;AAE/D,MAAM,kBAAkB,GAAoF;IAC1G,uCAAuC;IACvC,EAAE,KAAK,EAAE,gGAAgG,EAAE,WAAW,EAAE,8BAA8B,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC9K,EAAE,KAAK,EAAE,wGAAwG,EAAE,WAAW,EAAE,+BAA+B,EAAE,QAAQ,EAAE,UAAU,EAAE;IACvL,EAAE,KAAK,EAAE,uGAAuG,EAAE,WAAW,EAAE,iCAAiC,EAAE,QAAQ,EAAE,UAAU,EAAE;IACxL,EAAE,KAAK,EAAE,gFAAgF,EAAE,WAAW,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAErJ,0BAA0B;IAC1B,EAAE,KAAK,EAAE,kCAAkC,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC1G,EAAE,KAAK,EAAE,0CAA0C,EAAE,WAAW,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC3G,EAAE,KAAK,EAAE,0CAA0C,EAAE,WAAW,EAAE,2BAA2B,EAAE,QAAQ,EAAE,MAAM,EAAE;IACjH,EAAE,KAAK,EAAE,oDAAoD,EAAE,WAAW,EAAE,6BAA6B,EAAE,QAAQ,EAAE,MAAM,EAAE;IAE7H,2BAA2B;IAC3B,EAAE,KAAK,EAAE,4HAA4H,EAAE,WAAW,EAAE,kCAAkC,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC1M,EAAE,KAAK,EAAE,mFAAmF,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAExJ,6BAA6B;IAC7B,EAAE,KAAK,EAAE,iFAAiF,EAAE,WAAW,EAAE,+BAA+B,EAAE,QAAQ,EAAE,UAAU,EAAE;IAChK,EAAE,KAAK,EAAE,qGAAqG,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC5K,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,iCAAiC,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC3F,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAE7F,+BAA+B;IAC/B,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC5E,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC/E,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,UAAU,EAAE;IACjG,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,6BAA6B,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAE/F,+CAA+C;IAC/C,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,4CAA4C,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC9G,EAAE,KAAK,EAAE,gCAAgC,EAAE,WAAW,EAAE,uCAAuC,EAAE,QAAQ,EAAE,UAAU,EAAE;IACvH,EAAE,KAAK,EAAE,kCAAkC,EAAE,WAAW,EAAE,8BAA8B,EAAE,QAAQ,EAAE,UAAU,EAAE;IAChH,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE;CACzF,CAAC;AAEF,+DAA+D;AAE/D,MAAM,eAAe,GAAkD;IACrE,EAAE,KAAK,EAAE,wCAAwC,EAAE,WAAW,EAAE,gBAAgB,EAAE;IAClF,EAAE,KAAK,EAAE,yCAAyC,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACjG,EAAE,KAAK,EAAE,yCAAyC,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACvF,EAAE,KAAK,EAAE,iDAAiD,EAAE,WAAW,EAAE,yBAAyB,EAAE;IACpG,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,mBAAmB,EAAE;IAChE,EAAE,KAAK,EAAE,kDAAkD,EAAE,WAAW,EAAE,cAAc,EAAE;IAC1F,EAAE,KAAK,EAAE,oFAAoF,EAAE,WAAW,EAAE,sBAAsB,EAAE;IACpI,EAAE,KAAK,EAAE,oDAAoD,EAAE,WAAW,EAAE,aAAa,EAAE;IAC3F,EAAE,KAAK,EAAE,kDAAkD,EAAE,WAAW,EAAE,aAAa,EAAE;IACzF,EAAE,KAAK,EAAE,2CAA2C,EAAE,WAAW,EAAE,gBAAgB,EAAE;CACtF,CAAC;AAEF,+DAA+D;AAE/D;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,MAAc;IAC9D,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,kBAAkB,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO,EAAE,WAAW;gBACpB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,wBAAwB;gBAC1D,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,MAAc;IAC5D,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,eAAe,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,kDAAkD;YAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,gBAAgB,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO,EAAE,WAAW;gBACpB,KAAK,EAAE,QAAQ;gBACf,MAAM;gBACN,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAmD;IAEnD,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,aAAuB;IAEvB,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA+B,EAAE,IAAI,GAAG,QAAQ;IACnF,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,WAAW,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;QAErC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACjC,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACpE,CAAC;qBAAM,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;oBAC7D,OAAO,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAA4B,EAAE,GAAG,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrG,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,KAAgC,EAAE,WAAW,CAAC,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAqB;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG;QACjB,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC;QAC1D,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;QAClD,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;KACvD,CAAC;IAEF,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/utils/detect.d.ts

@@ -0,0 +1,7 @@
+import type { Service } from '@nepopsx/core';
+/**
+ * Auto-detect services in a repository by scanning for known project markers.
+ * Scans up to 2 levels deep.
+ */
+export declare function detectServices(rootDir: string): Service[];
+//# sourceMappingURL=detect.d.ts.map

package/dist/utils/detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../src/utils/detect.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAA4B,MAAM,eAAe,CAAC;AAYvE;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,EAAE,CAqCzD"}

package/dist/utils/detect.js

@@ -0,0 +1,227 @@
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { join, relative } from 'node:path';
+/**
+ * Auto-detect services in a repository by scanning for known project markers.
+ * Scans up to 2 levels deep.
+ */
+export function detectServices(rootDir) {
+    const services = [];
+    const scanned = new Set();
+    // Scan root and immediate subdirectories
+    const candidates = [rootDir];
+    for (const entry of safeReaddir(rootDir)) {
+        const full = join(rootDir, entry);
+        if (isDir(full) && !isIgnored(entry)) {
+            candidates.push(full);
+            // Scan one level deeper (e.g., apps/web, services/api)
+            for (const sub of safeReaddir(full)) {
+                const subFull = join(full, sub);
+                if (isDir(subFull) && !isIgnored(sub)) {
+                    candidates.push(subFull);
+                }
+            }
+        }
+    }
+    for (const dir of candidates) {
+        if (scanned.has(dir))
+            continue;
+        scanned.add(dir);
+        const detected = detectInDirectory(dir, rootDir);
+        if (detected) {
+            // Don't detect the root itself if it has subdirectories with their own projects
+            if (dir === rootDir && candidates.length > 1) {
+                // Only include root if no subdirectories were detected as services
+                continue;
+            }
+            services.push(detected);
+        }
+    }
+    return services;
+}
+function detectInDirectory(dir, rootDir) {
+    const files = new Set(safeReaddir(dir));
+    const relPath = relative(rootDir, dir) || '.';
+    // TypeScript/JavaScript (package.json)
+    if (files.has('package.json')) {
+        const pkg = readJsonSafe(join(dir, 'package.json'));
+        if (!pkg)
+            return null;
+        const isTS = files.has('tsconfig.json');
+        const language = isTS ? 'typescript' : 'javascript';
+        let framework;
+        let port;
+        let pm;
+        const commands = {};
+        const deps = { ...pkg.dependencies, ...pkg.devDependencies };
+        // Detect framework
+        if (deps['next']) {
+            framework = 'nextjs';
+            port = 3000;
+        }
+        else if (deps['@nestjs/core']) {
+            framework = 'nestjs';
+            port = 3000;
+        }
+        else if (deps['express']) {
+            framework = 'express';
+            port = 3000;
+        }
+        else if (deps['fastify']) {
+            framework = 'fastify';
+            port = 3000;
+        }
+        else if (deps['react'] && !deps['next']) {
+            framework = 'react';
+            port = 5173;
+        }
+        else if (deps['vue']) {
+            framework = 'vue';
+            port = 5173;
+        }
+        else if (deps['svelte'] || deps['@sveltejs/kit']) {
+            framework = 'sveltekit';
+            port = 5173;
+        }
+        else if (deps['nuxt']) {
+            framework = 'nuxt';
+            port = 3000;
+        }
+        // Detect package manager
+        if (files.has('pnpm-lock.yaml'))
+            pm = 'pnpm';
+        else if (files.has('yarn.lock'))
+            pm = 'yarn';
+        else if (files.has('bun.lockb') || files.has('bun.lock'))
+            pm = 'bun';
+        else
+            pm = 'npm';
+        // Extract scripts
+        if (pkg.scripts) {
+            if (pkg.scripts.dev)
+                commands.dev = `${pm} dev`;
+            else if (pkg.scripts.start)
+                commands.dev = `${pm} start`;
+            if (pkg.scripts.build)
+                commands.build = `${pm} build`;
+            if (pkg.scripts.test)
+                commands.test = `${pm} test`;
+            if (pkg.scripts.lint)
+                commands.lint = `${pm} lint`;
+        }
+        const name = deriveName(relPath, pkg.name);
+        return { name, path: relPath, language, framework, package_manager: pm, port, commands };
+    }
+    // Python
+    if (files.has('pyproject.toml') || files.has('requirements.txt') || files.has('setup.py')) {
+        let framework;
+        let pm = 'pip';
+        if (files.has('pyproject.toml')) {
+            const content = readFileSafe(join(dir, 'pyproject.toml'));
+            if (content?.includes('[tool.poetry]'))
+                pm = 'poetry';
+            if (content?.includes('fastapi'))
+                framework = 'fastapi';
+            if (content?.includes('django'))
+                framework = 'django';
+            if (content?.includes('flask'))
+                framework = 'flask';
+        }
+        if (files.has('uv.lock'))
+            pm = 'uv';
+        const name = deriveName(relPath);
+        return { name, path: relPath, language: 'python', framework, package_manager: pm };
+    }
+    // Go
+    if (files.has('go.mod')) {
+        let framework;
+        const content = readFileSafe(join(dir, 'go.mod'));
+        if (content?.includes('github.com/gin-gonic/gin'))
+            framework = 'gin';
+        if (content?.includes('github.com/gofiber/fiber'))
+            framework = 'fiber';
+        if (content?.includes('github.com/labstack/echo'))
+            framework = 'echo';
+        if (content?.includes('github.com/gorilla/mux'))
+            framework = 'gorilla';
+        const name = deriveName(relPath);
+        const commands = {};
+        if (files.has('Makefile')) {
+            commands.build = 'make build';
+            commands.test = 'make test';
+        }
+        else {
+            commands.build = 'go build ./...';
+            commands.test = 'go test ./...';
+        }
+        return { name, path: relPath, language: 'go', framework, package_manager: 'go', commands };
+    }
+    // Rust
+    if (files.has('Cargo.toml')) {
+        const name = deriveName(relPath);
+        return {
+            name,
+            path: relPath,
+            language: 'rust',
+            package_manager: 'cargo',
+            commands: { build: 'cargo build', test: 'cargo test' },
+        };
+    }
+    // Java/Kotlin (Maven)
+    if (files.has('pom.xml')) {
+        const language = files.has('src/main/kotlin') ? 'kotlin' : 'java';
+        const name = deriveName(relPath);
+        return { name, path: relPath, language, framework: 'spring-boot', package_manager: 'maven' };
+    }
+    // Java/Kotlin (Gradle)
+    if (files.has('build.gradle') || files.has('build.gradle.kts')) {
+        const language = files.has('build.gradle.kts') ? 'kotlin' : 'java';
+        const name = deriveName(relPath);
+        return { name, path: relPath, language, framework: 'spring-boot', package_manager: 'gradle' };
+    }
+    return null;
+}
+// ─── Helpers ──────────────────────────────────────────────────
+function deriveName(relPath, pkgName) {
+    if (relPath === '.') {
+        return pkgName?.replace(/^@[^/]+\//, '').replace(/[^a-z0-9-]/g, '-') ?? 'app';
+    }
+    return relPath.split('/').pop().replace(/[^a-z0-9-]/g, '-').toLowerCase();
+}
+function isDir(p) {
+    try {
+        return statSync(p).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+function isIgnored(name) {
+    return name.startsWith('.') || name === 'node_modules' || name === 'vendor' ||
+        name === 'dist' || name === 'build' || name === '__pycache__' ||
+        name === '.git' || name === 'target' || name === 'coverage';
+}
+function safeReaddir(dir) {
+    try {
+        return readdirSync(dir);
+    }
+    catch {
+        return [];
+    }
+}
+function readJsonSafe(path) {
+    try {
+        return JSON.parse(readFileSync(path, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+function readFileSafe(path) {
+    try {
+        return readFileSync(path, 'utf-8');
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=detect.js.map

package/dist/utils/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../src/utils/detect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAa3C;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,yCAAyC;IACzC,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,CAAC;IAE7B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,uDAAuD;YACvD,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAChC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEjB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,QAAQ,EAAE,CAAC;YACb,gFAAgF;YAChF,IAAI,GAAG,KAAK,OAAO,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7C,mEAAmE;gBACnE,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,OAAe;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC;IAE9C,uCAAuC;IACvC,IAAI,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAa,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;QAC9D,IAAI,SAA6B,CAAC;QAClC,IAAI,IAAwB,CAAC;QAC7B,IAAI,EAA8B,CAAC;QACnC,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAE5C,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;QAE7D,mBAAmB;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjB,SAAS,GAAG,QAAQ,CAAC;YACrB,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAChC,SAAS,GAAG,QAAQ,CAAC;YACrB,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,SAAS,GAAG,SAAS,CAAC;YACtB,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,SAAS,GAAG,SAAS,CAAC;YACtB,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,SAAS,GAAG,OAAO,CAAC;YACpB,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,SAAS,GAAG,KAAK,CAAC;YAClB,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACnD,SAAS,GAAG,WAAW,CAAC;YACxB,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,SAAS,GAAG,MAAM,CAAC;YACnB,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QAED,yBAAyB;QACzB,IAAI,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAAE,EAAE,GAAG,MAAM,CAAC;aACxC,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,EAAE,GAAG,MAAM,CAAC;aACxC,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,EAAE,GAAG,KAAK,CAAC;;YAChE,EAAE,GAAG,KAAK,CAAC;QAEhB,kBAAkB;QAClB,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG;gBAAE,QAAQ,CAAC,GAAG,GAAG,GAAG,EAAE,MAAM,CAAC;iBAC3C,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK;gBAAE,QAAQ,CAAC,GAAG,GAAG,GAAG,EAAE,QAAQ,CAAC;YACzD,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK;gBAAE,QAAQ,CAAC,KAAK,GAAG,GAAG,EAAE,QAAQ,CAAC;YACtD,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI;gBAAE,QAAQ,CAAC,IAAI,GAAG,GAAG,EAAE,OAAO,CAAC;YACnD,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI;gBAAE,QAAQ,CAAC,IAAI,GAAG,GAAG,EAAE,OAAO,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC3F,CAAC;IAED,SAAS;IACT,IAAI,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1F,IAAI,SAA6B,CAAC;QAClC,IAAI,EAAE,GAAmB,KAAK,CAAC;QAE/B,IAAI,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC;gBAAE,EAAE,GAAG,QAAQ,CAAC;YACtD,IAAI,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS,GAAG,SAAS,CAAC;YACxD,IAAI,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBAAE,SAAS,GAAG,QAAQ,CAAC;YACtD,IAAI,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS,GAAG,OAAO,CAAC;QACtD,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,EAAE,GAAG,IAAI,CAAC;QAEpC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IACrF,CAAC;IAED,KAAK;IACL,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,IAAI,SAA6B,CAAC;QAClC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClD,IAAI,OAAO,EAAE,QAAQ,CAAC,0BAA0B,CAAC;YAAE,SAAS,GAAG,KAAK,CAAC;QACrE,IAAI,OAAO,EAAE,QAAQ,CAAC,0BAA0B,CAAC;YAAE,SAAS,GAAG,OAAO,CAAC;QACvE,IAAI,OAAO,EAAE,QAAQ,CAAC,0BAA0B,CAAC;YAAE,SAAS,GAAG,MAAM,CAAC;QACtE,IAAI,OAAO,EAAE,QAAQ,CAAC,wBAAwB,CAAC;YAAE,SAAS,GAAG,SAAS,CAAC;QAEvE,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,KAAK,GAAG,YAAY,CAAC;YAC9B,QAAQ,CAAC,IAAI,GAAG,WAAW,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,KAAK,GAAG,gBAAgB,CAAC;YAClC,QAAQ,CAAC,IAAI,GAAG,eAAe,CAAC;QAClC,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC7F,CAAC;IAED,OAAO;IACP,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,MAAM;YAChB,eAAe,EAAE,OAAO;YACxB,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE;SACvD,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAa,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5E,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;IAC/F,CAAC;IAED,uBAAuB;IACvB,IAAI,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAa,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7E,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;IAChG,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iEAAiE;AAEjE,SAAS,UAAU,CAAC,OAAe,EAAE,OAAgB;IACnD,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC;IAChF,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,IAAI,CAAC;QAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,QAAQ;QACpE,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,aAAa;QAC7D,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,UAAU,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QAAC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QAAC,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACpE,CAAC"}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@nepopsx/cli",
+  "version": "0.0.1",
+  "description": "OPSX CLI — generate AI agent workspaces from configuration",
+  "license": "UNLICENSED",
+  "type": "module",
+  "bin": {
+    "opsx": "./bin/opsx.mjs"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "dev": "tsc --watch",
+    "lint": "tsc --noEmit",
+    "test": "node --test dist/**/*.test.js"
+  },
+  "files": [
+    "dist",
+    "bin"
+  ],
+  "dependencies": {
+    "@inquirer/prompts": "^8.4.1",
+    "@nepopsx/core": "workspace:*",
+    "chalk": "^5.4.1",
+    "commander": "^13.1.0",
+    "glob": "^11.0.1",
+    "handlebars": "^4.7.8",
+    "inquirer": "^12.3.2",
+    "ora": "^8.2.0",
+    "yaml": "^2.7.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.7.0"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}