@noclaf/cli 0.4.0

package/dist/lib/colors.js

@@ -0,0 +1,67 @@
+import chalk from 'chalk';
+import boxen from 'boxen';
+/**
+ * Camada de estilo do CLI. `chalk` cuida de cor (respeita TTY / `NO_COLOR` /
+ * `FORCE_COLOR` sozinho) e `boxen` desenha caixas. Helpers extras: links
+ * clicáveis (OSC 8), régua, símbolos e realce de comandos.
+ */
+/** Paleta — `chalk` já é um objeto com `.bold/.dim/.cyan/...`, reexpomos como `c`. */
+export const c = chalk;
+/** Símbolos usados na saída (unicode). */
+export const sym = {
+    ok: '✓',
+    err: '✗',
+    dot: '●',
+    arrow: '→',
+    chevron: '›',
+    bullet: '·',
+    warn: '⚠',
+    gear: '↻',
+};
+/** Comando destacado (ciano) — o realce padrão pra qualquer coisa executável. */
+export function cmd(s) {
+    return chalk.cyan(s);
+}
+/** Régua horizontal fina. */
+export function rule(width = 58) {
+    return chalk.dim('─'.repeat(width));
+}
+/** Realça trechos `entre crases` como comandos (ciano) e remove as crases. */
+export function highlightInlineCode(s) {
+    return s.replace(/`([^`]+)`/g, (_m, code) => chalk.cyan(code));
+}
+/**
+ * Link clicável via OSC 8 (terminais modernos). Fora de TTY, cai pra
+ * `label (url)` em texto plano. Sublinhado em ciano pra parecer link.
+ */
+export function link(url, label = url) {
+    if (!process.stdout.isTTY)
+        return label === url ? url : `${label} (${url})`;
+    const OSC = ']8;;';
+    const BEL = '';
+    return `${OSC}${url}${BEL}${chalk.cyan.underline(label)}${OSC}${BEL}`;
+}
+/** Caixa (boxen) com defaults do noclaf; opções sobrescrevíveis. */
+export function box(content, opts = {}) {
+    return boxen(content, {
+        padding: { top: 0, bottom: 0, left: 1, right: 1 },
+        borderStyle: 'round',
+        borderColor: 'gray',
+        dimBorder: true,
+        ...opts,
+    });
+}
+/** Indenta cada linha de um bloco multi-linha (ex.: pra alinhar uma caixa). */
+export function indent(block, spaces = 2) {
+    const pad = ' '.repeat(spaces);
+    return block
+        .split('\n')
+        .map((l) => (l.length ? pad + l : l))
+        .join('\n');
+}
+/** Título de seção proeminente: negrito + sublinhado, com subtítulo dim opcional. */
+export function sectionTitle(title, subtitle) {
+    const head = chalk.bold.underline(title);
+    return subtitle ? `${head}  ${chalk.dim(subtitle)}` : head;
+}
+//# sourceMappingURL=colors.js.map

package/dist/lib/colors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"colors.js","sourceRoot":"","sources":["../../src/lib/colors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAuC,MAAM,OAAO,CAAC;AAE5D;;;;GAIG;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;AAEvB,0CAA0C;AAC1C,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,EAAE,EAAE,GAAG;IACP,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,KAAK,EAAE,GAAG;IACV,OAAO,EAAE,GAAG;IACZ,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;CACV,CAAC;AAEF,iFAAiF;AACjF,MAAM,UAAU,GAAG,CAAC,CAAS;IAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,IAAI,CAAC,KAAK,GAAG,EAAE;IAC7B,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,CAAS;IAC3C,OAAO,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,IAAI,CAAC,GAAW,EAAE,KAAK,GAAG,GAAG;IAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,GAAG,GAAG,CAAC;IAC5E,MAAM,GAAG,GAAG,OAAO,CAAC;IACpB,MAAM,GAAG,GAAG,GAAG,CAAC;IAChB,OAAO,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;AACxE,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,OAAqB,EAAE;IAC1D,OAAO,KAAK,CAAC,OAAO,EAAE;QACpB,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QACjD,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,MAAM;QACnB,SAAS,EAAE,IAAI;QACf,GAAG,IAAI;KACR,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,MAAM,GAAG,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,KAAK;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACpC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,QAAiB;IAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC"}

package/dist/lib/cowork-extension.js

@@ -0,0 +1,131 @@
+import AdmZip from "adm-zip";
+import { fileURLToPath } from "node:url";
+import { dirname, join } from "node:path";
+import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { spawn } from "node:child_process";
+import { VERSION } from "../version.js";
+import { toolDefinitions } from "../tools/index.js";
+/**
+ * Raiz do pacote instalado (onde ficam `dist/` e `node_modules/`).
+ * Este módulo compila para dist/lib/cowork-extension.js, então sobe dois níveis.
+ */
+function packageRoot() {
+    const here = dirname(fileURLToPath(import.meta.url)); // .../dist/lib
+    return join(here, "..", "..");
+}
+/** Gera o objeto manifest.json (spec MCPB) para a versão atual. */
+export function buildCoworkManifest() {
+    const tools = toolDefinitions.map((t) => ({
+        name: t.name,
+        description: (t.description ?? "")
+            .replace(/\s+/g, " ")
+            .trim()
+            .slice(0, 160),
+    }));
+    return {
+        manifest_version: "0.2",
+        name: "noclaf-cli",
+        display_name: "Noclaf (NOS)",
+        version: VERSION,
+        description: "MCP server pra controlar o NOS (Noclaf Operation System) — tarefas, kanban e ponto/cronometragem — a partir do Claude Desktop / Cowork.",
+        long_description: "Servidor MCP do NOS (Noclaf Operation System). Permite ao assistente ler o contexto do projeto, listar/criar/atualizar/mover/comentar tarefas e gerenciar alocações (bater ponto e cronometrar tempo por task). A autenticação usa um PAT do NOS, fornecido via configuração da extensão (NOCLAF_PAT).",
+        author: { name: "Noclaf Tech", url: "https://github.com/Falcao-Tech" },
+        homepage: "https://github.com/Falcao-Tech/noclaf-cli#readme",
+        documentation: "https://github.com/Falcao-Tech/noclaf-cli#readme",
+        support: "https://github.com/Falcao-Tech/noclaf-cli/issues",
+        keywords: ["mcp", "noclaf", "nos", "tasks", "kanban", "time-tracking"],
+        server: {
+            type: "node",
+            entry_point: "dist/mcp-server.js",
+            mcp_config: {
+                command: "node",
+                args: ["${__dirname}/dist/mcp-server.js"],
+                env: {
+                    NOCLAF_PAT: '${user_config.pat}',
+                    NOCLAF_PROJECT_ID: '${user_config.project_id}',
+                    NOCLAF_REPOSITORY_ID: '${user_config.repository_id}',
+                    // Cowork ignora ~/.claude → o servidor pula o auto-pull e entrega as skills
+                    // por resources + prompts.
+                    NOCLAF_CLIENT: 'cowork',
+                },
+            },
+        },
+        user_config: {
+            pat: {
+                type: "string",
+                title: "NOS Personal Access Token (PAT)",
+                description: "PAT do NOS (formato noc_…), gerado em https://nos.noclaf.com.br/profile#mcp. O projeto é escolhido por sessão com as tools nos_list_projects / nos_set_project — não há nada de projeto para configurar aqui.",
+                sensitive: true,
+                required: true,
+            },
+        },
+        tools,
+        compatibility: {
+            platforms: ["darwin", "win32", "linux"],
+            runtimes: { node: ">=20.0.0" },
+        },
+    };
+}
+/**
+ * Adiciona recursivamente os arquivos de `localDir` ao zip sob `zipPrefix`,
+ * usando separadores POSIX e sem criar entradas de diretório. Pula source maps.
+ */
+function addFilesRecursively(zip, localDir, zipPrefix) {
+    for (const entry of readdirSync(localDir, { withFileTypes: true })) {
+        const localPath = join(localDir, entry.name);
+        const zipPath = `${zipPrefix}/${entry.name}`;
+        if (entry.isDirectory()) {
+            addFilesRecursively(zip, localPath, zipPath);
+        }
+        else if (entry.isFile() && !entry.name.endsWith(".map")) {
+            zip.addFile(zipPath, readFileSync(localPath));
+        }
+    }
+}
+/** Pasta de destino do .mcpb: ~/Downloads se existir, senão o home. */
+function defaultOutputDir() {
+    const downloads = join(homedir(), "Downloads");
+    return existsSync(downloads) ? downloads : homedir();
+}
+/**
+ * Gera o pacote .mcpb (manifest + dist + node_modules) a partir da instalação atual.
+ * Source maps são omitidos pra reduzir o tamanho.
+ */
+export function generateCoworkExtension(outputDir = defaultOutputDir()) {
+    const root = packageRoot();
+    const distDir = join(root, "dist");
+    const nodeModulesDir = join(root, "node_modules");
+    if (!existsSync(distDir)) {
+        throw new Error(`Não encontrei dist/ em ${root}. Reinstale o pacote (npm i -g @noclaf/cli).`);
+    }
+    const manifest = buildCoworkManifest();
+    const zip = new AdmZip();
+    zip.addFile("manifest.json", Buffer.from(JSON.stringify(manifest, null, 2) + "\n", "utf8"));
+    // Adiciona só arquivos (sem entradas de diretório), como o `mcpb pack` faz —
+    // entradas de pasta quebram o instalador do MCPB. Source maps são omitidos.
+    addFilesRecursively(zip, distDir, "dist");
+    if (existsSync(nodeModulesDir)) {
+        addFilesRecursively(zip, nodeModulesDir, "node_modules");
+    }
+    const outputPath = join(outputDir, `noclaf-cli-${VERSION}.mcpb`);
+    zip.writeZip(outputPath);
+    return { outputPath };
+}
+/** Abre a pasta no explorador de arquivos do SO (best-effort, ignora falhas). */
+export function revealInFileManager(target) {
+    const cmd = process.platform === "darwin"
+        ? "open"
+        : process.platform === "win32"
+            ? "explorer"
+            : "xdg-open";
+    try {
+        const child = spawn(cmd, [target], { stdio: "ignore", detached: true });
+        child.on("error", () => { });
+        child.unref();
+    }
+    catch {
+        // sem file manager disponível — ignora
+    }
+}
+//# sourceMappingURL=cowork-extension.js.map

package/dist/lib/cowork-extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cowork-extension.js","sourceRoot":"","sources":["../../src/lib/cowork-extension.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD;;;GAGG;AACH,SAAS,WAAW;IAClB,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe;IACrE,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,mBAAmB;IACjC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;aAC/B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aACpB,IAAI,EAAE;aACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;KACjB,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,gBAAgB,EAAE,KAAK;QACvB,IAAI,EAAE,YAAY;QAClB,YAAY,EAAE,cAAc;QAC5B,OAAO,EAAE,OAAO;QAChB,WAAW,EACT,yIAAyI;QAC3I,gBAAgB,EACd,wSAAwS;QAC1S,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,gCAAgC,EAAE;QACtE,QAAQ,EAAE,kDAAkD;QAC5D,aAAa,EAAE,kDAAkD;QACjE,OAAO,EAAE,kDAAkD;QAC3D,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC;QACtE,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,WAAW,EAAE,oBAAoB;YACjC,UAAU,EAAE;gBACV,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,iCAAiC,CAAC;gBACzC,GAAG,EAAE;oBACH,UAAU,EAAE,oBAAoB;oBAChC,iBAAiB,EAAE,2BAA2B;oBAC9C,oBAAoB,EAAE,8BAA8B;oBACpD,4EAA4E;oBAC5E,2BAA2B;oBAC3B,aAAa,EAAE,QAAQ;iBACxB;aACF;SACF;QACD,WAAW,EAAE;YACX,GAAG,EAAE;gBACH,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,iCAAiC;gBACxC,WAAW,EACT,+MAA+M;gBACjN,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,IAAI;aACf;SACF;QACD,KAAK;QACL,aAAa,EAAE;YACb,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;YACvC,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;SAC/B;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAC1B,GAAW,EACX,QAAgB,EAChB,SAAiB;IAEjB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,mBAAmB,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;AACH,CAAC;AAMD,uEAAuE;AACvE,SAAS,gBAAgB;IACvB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IAC/C,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAAoB,gBAAgB,EAAE;IAEtC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAElD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,8CAA8C,CAC7E,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,MAAM,EAAE,CAAC;IAEzB,GAAG,CAAC,OAAO,CACT,eAAe,EACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAC9D,CAAC;IAEF,6EAA6E;IAC7E,4EAA4E;IAC5E,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,OAAO,OAAO,CAAC,CAAC;IACjE,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzB,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,UAAU,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;AACH,CAAC"}

package/dist/lib/dependencies.js

@@ -0,0 +1,159 @@
+import { spawnSync } from 'node:child_process';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+/**
+ * Instalador de dependências externas declaradas no pacote (docs `dependency`).
+ *
+ * **Segurança.** NÃO executamos a string `install:` (ela é só pra exibição). Em vez
+ * disso lemos campos **estruturados e allowlisted** (`npm:` / `skills:` / `git:`),
+ * validamos com regex estrita e montamos o comando nós mesmos — rodado via
+ * `spawnSync` com array de args e SEM shell, então não há interpolação/injeção.
+ *
+ * A decisão de *rodar* fica na CLI, com consentimento humano [y/N].
+ */
+/** Nome de pacote npm (com escopo opcional). Sem espaços/metacaracteres de shell. */
+const NPM_NAME_RE = /^(?:@[a-z0-9-][a-z0-9-._]*\/)?[a-z0-9-][a-z0-9-._]*$/i;
+/** Só clones https do GitHub. */
+const GIT_URL_RE = /^https:\/\/github\.com\/[A-Za-z0-9._-]+\/[A-Za-z0-9._-]+(?:\.git)?$/;
+/** Slug `owner/repo` pro `npx skills add`. */
+const SKILLS_REPO_RE = /^[A-Za-z0-9._-]+\/[A-Za-z0-9._-]+$/;
+/** Onde clonamos deps do tipo `git` (`~/.noclaf/deps/<id>`). */
+function depsDir() {
+    return join(homedir(), '.noclaf', 'deps');
+}
+/**
+ * Resolve um doc `dependency` num plano de instalação a partir de campos
+ * estruturados. Precedência: `npm:` > `skills:` > `git:`. Sem campo válido → `plan: null`.
+ */
+export function resolveDependency(node) {
+    const fm = node.frontmatter;
+    const base = {
+        id: node.id,
+        title: node.title,
+        description: node.description || fm.description || undefined,
+        repo: fm.repo || fm.homepage || undefined,
+        displayInstall: fm.install || undefined,
+        plan: null,
+    };
+    const npm = fm.npm?.trim();
+    if (npm) {
+        if (NPM_NAME_RE.test(npm)) {
+            return {
+                ...base,
+                plan: {
+                    kind: 'npm',
+                    pkg: npm,
+                    program: 'npm',
+                    args: ['install', '-g', npm],
+                    command: `npm install -g ${npm}`,
+                },
+            };
+        }
+        return { ...base, reason: `nome de pacote npm inválido: "${npm}"` };
+    }
+    const skills = fm.skills?.trim();
+    if (skills) {
+        if (SKILLS_REPO_RE.test(skills)) {
+            return {
+                ...base,
+                plan: {
+                    kind: 'skills',
+                    repo: skills,
+                    program: 'npx',
+                    args: ['--yes', 'skills', 'add', skills],
+                    command: `npx --yes skills add ${skills}`,
+                },
+            };
+        }
+        return { ...base, reason: `repo de skills inválido (owner/repo): "${skills}"` };
+    }
+    const git = fm.git?.trim();
+    if (git) {
+        if (GIT_URL_RE.test(git)) {
+            const dest = join(depsDir(), node.id);
+            return {
+                ...base,
+                plan: {
+                    kind: 'git',
+                    url: git,
+                    dest,
+                    program: 'git',
+                    args: ['clone', '--depth', '1', git, dest],
+                    command: `git clone --depth 1 ${git} ${dest}`,
+                },
+            };
+        }
+        return { ...base, reason: `URL git não permitida (só https://github.com/…): "${git}"` };
+    }
+    // Sem instalador automatizável: cai pra instrução manual (plugin/marketplace/UI).
+    const manual = fm.manual?.trim();
+    if (manual)
+        return { ...base, manual, reason: 'instalação manual' };
+    return { ...base, reason: 'sem instalador estruturado (npm:/skills:/git:/manual:) — instale manualmente' };
+}
+/** Registro do que o noclaf instalou: `~/.noclaf/installed-deps.json`. */
+function markerPath() {
+    return join(homedir(), '.noclaf', 'installed-deps.json');
+}
+function readMarker() {
+    try {
+        return JSON.parse(readFileSync(markerPath(), 'utf-8'));
+    }
+    catch {
+        return {};
+    }
+}
+/** Grava que instalamos esta dependência (idempotência p/ `skills`, que não tem local padrão). */
+export function recordDependencyInstalled(dep) {
+    if (!dep.plan)
+        return;
+    const ref = dep.plan.kind === 'npm' ? dep.plan.pkg : dep.plan.kind === 'skills' ? dep.plan.repo : dep.plan.url;
+    const marker = readMarker();
+    marker[dep.id] = { kind: dep.plan.kind, ref, at: new Date().toISOString() };
+    try {
+        mkdirSync(dirname(markerPath()), { recursive: true });
+        writeFileSync(markerPath(), JSON.stringify(marker, null, 2) + '\n');
+    }
+    catch {
+        // best-effort — não bloqueia se ~/.noclaf não for gravável.
+    }
+}
+/** Probe de locais conhecidos onde `npx skills add` costuma instalar. */
+function skillInstalledElsewhere(repo) {
+    const name = repo.split('/').pop() ?? repo;
+    return [
+        join(homedir(), '.claude', 'skills', name),
+        join(homedir(), '.codex', 'skills', name),
+        join(process.cwd(), '.claude', 'skills', name),
+        join(process.cwd(), 'skills', name),
+    ].some((p) => existsSync(p));
+}
+/**
+ * Já está instalado? Checagem real quando dá:
+ * - `npm`  → `npm ls -g <pkg>` (autoritativo);
+ * - `git`  → diretório de destino existe;
+ * - `skills` → sem local padrão: usa o marcador do noclaf + probe de dirs conhecidos.
+ */
+export function isDependencyInstalled(dep) {
+    const plan = dep.plan;
+    if (!plan)
+        return false;
+    if (plan.kind === 'git')
+        return existsSync(plan.dest);
+    if (plan.kind === 'npm') {
+        const res = spawnSync('npm', ['ls', '-g', plan.pkg, '--depth=0'], { stdio: 'ignore' });
+        return res.status === 0;
+    }
+    return Boolean(readMarker()[dep.id]) || skillInstalledElsewhere(plan.repo);
+}
+/** Executa o plano. `spawnSync` com args em array e SEM shell — zero injeção. */
+export function runDependencyInstall(plan) {
+    if (plan.kind === 'git')
+        mkdirSync(dirname(plan.dest), { recursive: true });
+    const res = spawnSync(plan.program, plan.args, { stdio: 'inherit' });
+    if (res.error)
+        return { ok: false, code: null, error: res.error.message };
+    return { ok: res.status === 0, code: res.status };
+}
+//# sourceMappingURL=dependencies.js.map

package/dist/lib/dependencies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependencies.js","sourceRoot":"","sources":["../../src/lib/dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C;;;;;;;;;GASG;AAEH,qFAAqF;AACrF,MAAM,WAAW,GAAG,uDAAuD,CAAC;AAE5E,iCAAiC;AACjC,MAAM,UAAU,GAAG,qEAAqE,CAAC;AAEzF,8CAA8C;AAC9C,MAAM,cAAc,GAAG,oCAAoC,CAAC;AA0B5D,gEAAgE;AAChE,SAAS,OAAO;IACd,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC;IAC5B,MAAM,IAAI,GAAuB;QAC/B,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,WAAW,IAAI,SAAS;QAC5D,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,QAAQ,IAAI,SAAS;QACzC,cAAc,EAAE,EAAE,CAAC,OAAO,IAAI,SAAS;QACvC,IAAI,EAAE,IAAI;KACX,CAAC;IAEF,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC3B,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,GAAG,IAAI;gBACP,IAAI,EAAE;oBACJ,IAAI,EAAE,KAAK;oBACX,GAAG,EAAE,GAAG;oBACR,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC;oBAC5B,OAAO,EAAE,kBAAkB,GAAG,EAAE;iBACjC;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,iCAAiC,GAAG,GAAG,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,GAAG,IAAI;gBACP,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC;oBACxC,OAAO,EAAE,wBAAwB,MAAM,EAAE;iBAC1C;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,0CAA0C,MAAM,GAAG,EAAE,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC3B,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACtC,OAAO;gBACL,GAAG,IAAI;gBACP,IAAI,EAAE;oBACJ,IAAI,EAAE,KAAK;oBACX,GAAG,EAAE,GAAG;oBACR,IAAI;oBACJ,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC;oBAC1C,OAAO,EAAE,uBAAuB,GAAG,IAAI,IAAI,EAAE;iBAC9C;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,qDAAqD,GAAG,GAAG,EAAE,CAAC;IAC1F,CAAC;IAED,kFAAkF;IAClF,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,MAAM;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAEpE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,8EAA8E,EAAE,CAAC;AAC7G,CAAC;AAED,0EAA0E;AAC1E,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,yBAAyB,CAAC,GAAuB;IAC/D,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO;IACtB,MAAM,GAAG,GACP,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;IACrG,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC5E,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,aAAa,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,SAAS,uBAAuB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;IAC3C,OAAO;QACL,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC;KACpC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAuB;IAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvF,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC;AAQD,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,IAAoB;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACrE,IAAI,GAAG,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC1E,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AACpD,CAAC"}

package/dist/lib/duration.js

@@ -0,0 +1,5 @@
+export function durationSeconds(start, end) {
+    const endMs = end ? new Date(end).getTime() : Date.now();
+    return Math.floor((endMs - new Date(start).getTime()) / 1000);
+}
+//# sourceMappingURL=duration.js.map

package/dist/lib/duration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"duration.js","sourceRoot":"","sources":["../../src/lib/duration.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,GAAkB;IAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACzD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;AAChE,CAAC"}

package/dist/lib/file-merge.js

@@ -0,0 +1,33 @@
+import { readFileSync, writeFileSync, existsSync, mkdirSync, copyFileSync, } from 'node:fs';
+import { dirname } from 'node:path';
+import { parse as parseToml, stringify as stringifyToml } from 'smol-toml';
+export function backupFile(path) {
+    const backupPath = `${path}.bak.${Date.now()}`;
+    copyFileSync(path, backupPath);
+    return backupPath;
+}
+export function readJson(path) {
+    if (!existsSync(path))
+        return null;
+    const raw = readFileSync(path, 'utf-8');
+    if (raw.trim().length === 0)
+        return null;
+    return JSON.parse(raw);
+}
+export function writeJson(path, data) {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, JSON.stringify(data, null, 2) + '\n', 'utf-8');
+}
+export function readToml(path) {
+    if (!existsSync(path))
+        return null;
+    const raw = readFileSync(path, 'utf-8');
+    if (raw.trim().length === 0)
+        return null;
+    return parseToml(raw);
+}
+export function writeToml(path, data) {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, stringifyToml(data) + '\n', 'utf-8');
+}
+//# sourceMappingURL=file-merge.js.map

package/dist/lib/file-merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-merge.js","sourceRoot":"","sources":["../../src/lib/file-merge.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,aAAa,EACb,UAAU,EACV,SAAS,EACT,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,WAAW,CAAC;AAE3E,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,UAAU,GAAG,GAAG,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC/C,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC/B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,IAAa;IACnD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,SAAS,CAAC,GAAG,CAA4B,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,IAA6B;IACnE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC"}

package/dist/lib/hooks.js

@@ -0,0 +1,231 @@
+import { existsSync, readFileSync, readdirSync, mkdirSync, copyFileSync, rmSync, } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { readJson, writeJson } from './file-merge.js';
+import { skillsDir } from './skills.js';
+import { discoverRoles, resolveRoles, } from './sections.js';
+/**
+ * Provisionamento de hooks (só Claude Code). Um hook é um script + um gatilho que
+ * precisa estar registrado no `settings.json` — então, além de copiar o script pro
+ * namespace `hooks/noclaf/`, o CLI faz merge não-destrutivo do binding. Fonte:
+ * `@noclaf/skills/hooks/<role>/hooks.json`.
+ */
+/** Namespace sob o targetDir onde os scripts do noclaf vivem. Marca "nossa" entrada. */
+const HOOKS_NS = 'hooks/noclaf';
+function defaultTargetDir() {
+    return join(homedir(), '.claude');
+}
+/** Lê e valida um `hooks.json`, devolvendo as entradas bem-formadas. */
+function readManifest(path) {
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, 'utf-8'));
+    }
+    catch {
+        return [];
+    }
+    const list = parsed?.hooks;
+    if (!Array.isArray(list))
+        return [];
+    const out = [];
+    for (const raw of list) {
+        if (!raw || typeof raw !== 'object')
+            continue;
+        const e = raw;
+        if (typeof e.event !== 'string' || typeof e.script !== 'string')
+            continue;
+        out.push({
+            id: typeof e.id === 'number' ? e.id : undefined,
+            event: e.event,
+            matcher: typeof e.matcher === 'string' ? e.matcher : undefined,
+            description: typeof e.description === 'string' ? e.description : undefined,
+            script: e.script,
+            clients: Array.isArray(e.clients)
+                ? e.clients.filter((c) => typeof c === 'string')
+                : undefined,
+        });
+    }
+    return out;
+}
+/**
+ * Descobre e resolve os hooks aplicáveis: varre `hooks/<role>/hooks.json`, filtra por
+ * seção (role) e por cliente (`clients`), e devolve as entradas com o script de origem.
+ */
+function collectHooks(dir, surface, sections) {
+    const hooksRoot = join(dir, 'hooks');
+    if (!existsSync(hooksRoot))
+        return [];
+    // Roles permitidos pela seleção (perfil). Sem seleção → todos.
+    const allRoles = new Set(discoverRoles(dir));
+    for (const e of readdirSync(hooksRoot, { withFileTypes: true })) {
+        if (e.isDirectory() && !e.name.startsWith('.'))
+            allRoles.add(e.name);
+    }
+    const allowedRoles = sections
+        ? resolveRoles(sections, [...allRoles])
+        : null; // null = sem filtro
+    const out = [];
+    for (const roleEntry of readdirSync(hooksRoot, { withFileTypes: true })) {
+        if (!roleEntry.isDirectory() || roleEntry.name.startsWith('.'))
+            continue;
+        const role = roleEntry.name;
+        if (allowedRoles && !allowedRoles.has(role))
+            continue;
+        const manifestPath = join(hooksRoot, role, 'hooks.json');
+        if (!existsSync(manifestPath))
+            continue;
+        for (const entry of readManifest(manifestPath)) {
+            if (entry.clients && !entry.clients.includes(surface))
+                continue;
+            const srcAbs = join(hooksRoot, role, entry.script);
+            if (!existsSync(srcAbs))
+                continue;
+            out.push({
+                role,
+                id: entry.id ?? null,
+                event: entry.event,
+                matcher: entry.matcher,
+                description: entry.description,
+                script: entry.script,
+                srcAbs,
+            });
+        }
+    }
+    return out;
+}
+/** Uma entrada de comando é "nossa" se aponta pro namespace `hooks/noclaf/`. */
+function isOurs(hook) {
+    const cmd = hook?.command;
+    return typeof cmd === 'string' && cmd.includes(`${HOOKS_NS}/`);
+}
+/**
+ * Remove todas as entradas do noclaf de um bloco de `hooks` do settings, deixando
+ * intactas as do usuário. Devolve o bloco limpo (eventos/grupos vazios removidos).
+ */
+function stripOurs(hooksCfg) {
+    const clean = {};
+    for (const [event, groups] of Object.entries(hooksCfg)) {
+        if (!Array.isArray(groups))
+            continue;
+        const keptGroups = [];
+        for (const group of groups) {
+            const list = Array.isArray(group?.hooks) ? group.hooks : [];
+            const kept = list.filter((h) => !isOurs(h));
+            if (kept.length > 0)
+                keptGroups.push({ ...group, hooks: kept });
+        }
+        if (keptGroups.length > 0)
+            clean[event] = keptGroups;
+    }
+    return clean;
+}
+/** Remove recursivamente arquivos órfãos sob o namespace, exceto os recém-escritos. */
+function pruneScripts(scriptsDir, keep, dryRun, pruned) {
+    if (!existsSync(scriptsDir))
+        return;
+    const walk = (abs) => {
+        for (const entry of readdirSync(abs, { withFileTypes: true })) {
+            const childAbs = join(abs, entry.name);
+            if (entry.isDirectory()) {
+                walk(childAbs);
+                try {
+                    if (readdirSync(childAbs).length === 0 && !dryRun)
+                        rmSync(childAbs, { recursive: true });
+                }
+                catch {
+                    /* ignore */
+                }
+            }
+            else if (entry.isFile()) {
+                if (!keep.has(childAbs)) {
+                    if (!dryRun)
+                        rmSync(childAbs);
+                    pruned.push(childAbs);
+                }
+            }
+        }
+    };
+    walk(scriptsDir);
+}
+/**
+ * Provisiona os hooks do noclaf no Claude Code. Idempotente e não-destrutivo.
+ * No-op (installed vazio) se o pacote não tem `hooks/` ou nada casa a seleção.
+ */
+export function provisionHooks(options = {}) {
+    const dryRun = options.dryRun ?? false;
+    const dir = options.skillsDir ?? skillsDir();
+    const targetDir = options.targetDir ?? defaultTargetDir();
+    const surface = options.surface ?? 'claude-code';
+    const settingsPath = join(targetDir, 'settings.json');
+    const scriptsDir = join(targetDir, HOOKS_NS);
+    const resolved = collectHooks(dir, surface, options.sections);
+    const writtenScripts = new Set();
+    const installed = [];
+    for (const h of resolved) {
+        const destAbs = join(scriptsDir, h.role, h.script);
+        if (!dryRun) {
+            mkdirSync(join(scriptsDir, h.role), { recursive: true });
+            copyFileSync(h.srcAbs, destAbs);
+        }
+        writtenScripts.add(destAbs);
+        installed.push({
+            event: h.event,
+            matcher: h.matcher,
+            script: `${h.role}/${h.script}`,
+            description: h.description,
+        });
+    }
+    const prunedScripts = [];
+    pruneScripts(scriptsDir, writtenScripts, dryRun, prunedScripts);
+    // Merge no settings.json: tira as nossas entradas antigas, re-adiciona as atuais.
+    const settings = readJson(settingsPath) ?? {};
+    const currentHooks = settings.hooks ?? {};
+    const merged = stripOurs(currentHooks);
+    for (const h of resolved) {
+        const commandPath = join(scriptsDir, h.role, h.script).split('\\').join('/');
+        const ourHook = { type: 'command', command: `python3 "${commandPath}"` };
+        const groups = merged[h.event] ?? (merged[h.event] = []);
+        let group = groups.find((g) => g.matcher === h.matcher);
+        if (!group) {
+            group = h.matcher !== undefined ? { matcher: h.matcher, hooks: [] } : { hooks: [] };
+            groups.push(group);
+        }
+        group.hooks.push(ourHook);
+    }
+    if (!dryRun) {
+        if (Object.keys(merged).length > 0) {
+            settings.hooks = merged;
+        }
+        else {
+            delete settings.hooks;
+        }
+        writeJson(settingsPath, settings);
+    }
+    return { settingsPath, scriptsDir, dryRun, installed, prunedScripts };
+}
+/** Remove tudo que o noclaf instalou de hooks (scripts + entradas do settings). */
+export function uninstallHooks(options = {}) {
+    const dryRun = options.dryRun ?? false;
+    const targetDir = options.targetDir ?? defaultTargetDir();
+    const settingsPath = join(targetDir, 'settings.json');
+    const scriptsDir = join(targetDir, HOOKS_NS);
+    const removedScripts = [];
+    if (existsSync(scriptsDir)) {
+        if (!dryRun)
+            rmSync(scriptsDir, { recursive: true, force: true });
+        removedScripts.push(scriptsDir);
+    }
+    const settings = readJson(settingsPath);
+    if (settings && settings.hooks) {
+        const merged = stripOurs(settings.hooks);
+        if (!dryRun) {
+            if (Object.keys(merged).length > 0)
+                settings.hooks = merged;
+            else
+                delete settings.hooks;
+            writeJson(settingsPath, settings);
+        }
+    }
+    return { settingsPath, removedScripts, dryRun };
+}
+//# sourceMappingURL=hooks.js.map