@ranimontagna/agent-toolkit 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ranielli Montagna
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,426 @@
+# Agent Toolkit
+
+Personal toolkit for setting up AI coding agents with the tools I use most:
+RTK, Caveman, Superpowers, Graphify, GSD, third-party frontend skills and
+bundled personal skills.
+
+The installer source is written in TypeScript and compiled to a dependency-free
+Node CLI in `dist/`. The Bash file is kept only as a compatibility wrapper, so
+existing commands still work after building the project.
+
+The repository includes CI, security gates, MIT licensing, portable agent
+instructions and tests for the installer flows.
+
+## Runtimes
+
+| Runtime | Support |
+|---|---|
+| Claude Code | Plugins and skills |
+| Codex CLI | Plugins, skills and local automation |
+| OpenCode | Skills plus package-driven tools |
+| Gemini CLI | Extensions and native Agent Skills install |
+
+## Tools
+
+| Tool | What it adds |
+|---|---|
+| RTK | Token-aware shell proxy for coding-agent sessions |
+| Caveman | Terse response mode and optional agent integrations |
+| Superpowers | Planning, TDD, debugging, review and delivery workflows |
+| Graphify | Queryable knowledge graphs for codebases, docs and project context |
+| GSD | Phase-based planning, execution, verification and project control |
+| Frontend Skills | Third-party design skills installed through Agent Skills CLI |
+| Custom Skills | Personal skills bundled in this repository |
+
+Superpowers is installed automatically for Claude Code, Codex CLI and Gemini CLI.
+OpenCode support is intentionally not automated yet for Superpowers because the
+upstream install flow is not a stable single command. Caveman, GSD, Frontend
+Skills and Custom Skills can target Claude Code, Codex CLI, OpenCode and Gemini
+CLI. Graphify is installed through the official `graphifyy` package and
+registers itself for the selected runtimes.
+
+## Repository Layout
+
+```text
+bin/
+  agent-toolkit.ts             Thin TypeScript entrypoint
+.github/
+  workflows/
+    ci.yml              Quality and security gates
+AGENTS.md              Shared project rules for coding agents
+CLAUDE.md              Pointer to AGENTS.md for Claude Code
+src/
+  main.ts               Installer orchestration
+  args.ts               CLI flag parsing
+  menu.ts               Interactive selection
+  runtimes.ts           Runtime CLI checks
+  skills.ts             Recursive skill discovery and installation
+  installers/           Tool-specific installers
+dist/
+  bin/
+    agent-toolkit.js     Compiled CLI used by npm and the wrapper
+setup-agent-toolkit.sh         Bash compatibility wrapper
+package.json            CLI metadata and test scripts
+tools.lock.json         Pinned external tool sources and RTK checksums
+LICENSE                 MIT license
+skills/
+  core/
+    agent-toolkit-maintainer/
+      SKILL.md
+  backend/
+tests/
+  unit/
+    *.test.ts
+  test-agent-toolkit.sh
+```
+
+## Prerequisites
+
+- Node.js 22+ for the full toolkit
+- `npx` for Caveman, GSD and third-party frontend skills
+- `git` for pinned third-party frontend skill sources
+- `npm` when using `--install-missing-clis`
+- `uv` for Graphify, or `pipx` when `GRAPHIFY_INSTALLER=pipx`
+- `tar` or `unzip` only when RTK needs to be downloaded
+- The runtime CLIs you want to target: `claude`, `codex`, `opencode`, and/or `gemini`
+
+The installer can install missing selected runtime CLIs through npm when run
+with `--install-missing-clis`.
+
+Install development dependencies and build the CLI before running from a clone:
+
+```bash
+npm install
+npm run build
+```
+
+## Install
+
+Run the published package directly:
+
+```bash
+npx -y @ranimontagna/agent-toolkit
+```
+
+Interactive runs ask which tools, runtimes and skill scopes to install. Pressing
+Enter does not silently install the full kit; choose `all` explicitly when that
+is what you want.
+
+Run the full kit for Codex in one command:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --all --codex
+```
+
+Run the full kit for every supported runtime:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --all --all-runtimes
+```
+
+From a local clone, install development dependencies and build the CLI first:
+
+```bash
+npm install
+npm run build
+bash setup-agent-toolkit.sh
+```
+
+You can also call the compiled Node CLI directly from a built clone:
+
+```bash
+node dist/bin/agent-toolkit.js
+```
+
+Target one runtime:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --all --codex
+```
+
+Install a single tool:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --gsd-only --all-runtimes
+```
+
+Install Graphify for Codex only:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --graphify-only --codex
+```
+
+Install only third-party frontend design skills for Codex:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --frontend-skills-only --codex
+```
+
+Install only bundled skills into the current project:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --skills-only --all-runtimes --local
+```
+
+Install only React-scoped skills:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --skills-only --codex --skills-scope frontend/react
+```
+
+List available skills and their scope paths:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --skills-list
+```
+
+Install missing selected CLIs before configuring them:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --all --gemini --install-missing-clis
+```
+
+## Flags
+
+```text
+--all                  Install every tool without the menu
+--rtk-only             Install only RTK
+--caveman-only         Install only Caveman
+--superpowers-only     Install only Superpowers
+--graphify-only        Install only Graphify
+--gsd-only             Install only GSD
+--frontend-skills-only Install only third-party frontend skills
+--skills-only          Install only Custom Skills
+--no-rtk               Skip RTK
+--no-caveman           Skip Caveman
+--no-superpowers       Skip Superpowers
+--no-graphify          Skip Graphify
+--no-gsd               Skip GSD
+--no-frontend-skills   Skip third-party frontend skills
+--no-skills            Skip Custom Skills
+
+--all-runtimes         Target Claude Code, Codex CLI, OpenCode and Gemini CLI
+--claude               Target only Claude Code
+--codex                Target only Codex CLI
+--opencode             Target only OpenCode
+--gemini               Target only Gemini CLI
+--no-claude            Skip Claude Code
+--no-codex             Skip Codex CLI
+--no-opencode          Skip OpenCode
+--no-gemini            Skip Gemini CLI
+
+--global               Install runtime assets into user config directories
+--local                Install runtime assets into the current project
+--skills-dir DIR       Use another source directory for skills
+--skills-scope SCOPE   Install skills under a relative scope path, repeatable
+--skills-list          List discovered skills and exit
+--install-missing-clis Install selected runtime CLIs if missing
+--allow-mutable-sources Allow explicit mutable source overrides like @latest
+--help, -h             Show help
+```
+
+## Configuration
+
+The installer can be customized with environment variables:
+
+```text
+RTK_INSTALL_DIR       RTK binary install directory
+CAVEMAN_PACKAGE       Caveman package source
+CAVEMAN_MODE          minimal or all
+GRAPHIFY_PACKAGE      Python package used to install Graphify
+GRAPHIFY_INSTALLER    uv or pipx
+GSD_PACKAGE           GSD package source
+SKILLS_CLI_PACKAGE    npm package used for third-party skill installs
+GSD_SCOPE             global or local
+TOOLS_LOCK_PATH       External tool provenance lock path
+ALLOW_MUTABLE_SOURCES Set to 1 to allow mutable source overrides
+CUSTOM_SKILLS_DIR     Source directory for custom skills
+SKILLS_SCOPE          Comma-separated skill scope filters
+CLAUDE_CLI_PACKAGE    npm package used to install Claude Code CLI
+CODEX_CLI_PACKAGE     npm package used to install Codex CLI
+OPENCODE_CLI_PACKAGE  npm package used to install OpenCode CLI
+GEMINI_CLI_PACKAGE    npm package used to install Gemini CLI
+```
+
+Defaults:
+
+```text
+CAVEMAN_PACKAGE=github:JuliusBrussee/caveman#655b7d9c5431f822264b7732e9901c5578ac84cf
+GRAPHIFY_PACKAGE=graphifyy==0.8.31
+GRAPHIFY_INSTALLER=uv
+GSD_PACKAGE=get-shit-done-cc@1.42.3
+SKILLS_CLI_PACKAGE=skills@1.5.10
+CLAUDE_CLI_PACKAGE=@anthropic-ai/claude-code@2.1.162
+CODEX_CLI_PACKAGE=@openai/codex@0.137.0
+OPENCODE_CLI_PACKAGE=opencode-ai@1.15.13
+GEMINI_CLI_PACKAGE=@google/gemini-cli@0.45.0
+```
+
+These defaults come from `tools.lock.json`. Mutable overrides like `@latest`,
+unpinned npm packages, or GitHub package sources without a full commit SHA are
+blocked unless you pass `--allow-mutable-sources` or set
+`ALLOW_MUTABLE_SOURCES=1`.
+
+## External Tool Provenance
+
+The CI protects this repository's own dependency graph with `npm audit`,
+registry signature checks, dependency review and Gitleaks. The installer also
+protects tools downloaded later by reading `tools.lock.json` and rejecting
+mutable external sources by default.
+
+Current external sources:
+
+| Tool | Locked source | Runtime verification |
+|---|---|---|
+| RTK | GitHub release `rtk-ai/rtk@v0.42.1` | Verifies the selected asset SHA-256 before extraction |
+| Caveman | `JuliusBrussee/caveman` at commit `655b7d9c5431f822264b7732e9901c5578ac84cf` | Installs through an immutable GitHub npm spec |
+| Graphify | `graphifyy==0.8.31` | Blocks unpinned package overrides |
+| GSD | `get-shit-done-cc@1.42.3` | Blocks `@latest` unless explicitly allowed |
+| Frontend Skills | `skills@1.5.10`, `pbakaus/impeccable` and `Leonxlnx/taste-skill` at pinned commits | Clones pinned refs, then installs selected skills through Agent Skills CLI |
+| Runtime CLIs | Exact npm versions for Claude, Codex, OpenCode and Gemini | Used when `--install-missing-clis` is enabled |
+
+Use `TOOLS_LOCK_PATH=/path/to/tools.lock.json` to test another lock file. Keep
+that file committed if it represents the expected public installer behavior.
+
+## Adding Skills
+
+Add personal skills under a scope path:
+
+```text
+skills/<scope>/<skill-name>/SKILL.md
+```
+
+Suggested organization:
+
+```text
+skills/
+  core/
+    agent-toolkit-maintainer/
+      SKILL.md
+  frontend/
+    react/
+      react-component-architecture/
+        SKILL.md
+  backend/
+    node/
+      fastify-api-patterns/
+        SKILL.md
+    go/
+      go-service-patterns/
+        SKILL.md
+```
+
+The installer discovers `SKILL.md` files recursively. The repository path is
+used only for organization; runtime installs remain flat:
+
+```text
+~/.codex/skills/react-component-architecture/
+~/.codex/skills/fastify-api-patterns/
+~/.codex/skills/go-service-patterns/
+```
+
+Third-party frontend design skills are not bundled as personal skills. The
+`frontend-skills` tool installs them externally:
+
+| Runtime folder | Skill name | Source |
+|---|---|---|
+| `impeccable` | `impeccable` | `pbakaus/impeccable`, Apache-2.0 |
+| `design-taste-frontend` | `design-taste-frontend` | `Leonxlnx/taste-skill`, MIT |
+
+Each skill should be concise and self-contained:
+
+```markdown
+---
+name: my-skill
+description: Use when doing a specific kind of task.
+---
+
+# My Skill
+
+Follow these steps...
+```
+
+The installer validates the core Agent Skills requirements:
+
+- each skill is a directory containing `SKILL.md`;
+- `SKILL.md` starts with YAML frontmatter;
+- `name` and `description` are required;
+- `name` uses lowercase letters, numbers and hyphens only;
+- `description` is non-empty and under 1024 characters.
+
+For larger skills, put detailed supporting material in `references/`, scripts in
+`scripts/`, and reusable assets in `assets/`.
+
+Use `--skills-scope` to install only a subset:
+
+```bash
+bash setup-agent-toolkit.sh --skills-only --codex --skills-scope backend/node
+```
+
+Gemini CLI uses its native command:
+
+```bash
+gemini skills install skills/<skill-name> --scope user --consent
+```
+
+For local/project installs, the setup uses `--scope workspace`.
+
+## Verification
+
+Run the full local check:
+
+```bash
+npm run check
+```
+
+Available quality scripts:
+
+```bash
+npm run build             # Compile TypeScript into dist/
+npm run typecheck         # Type-check source and unit tests
+npm run lint              # Biome lint and format checks
+npm run lint:fix          # Apply safe Biome fixes
+npm run format            # Format with Biome
+npm run security          # npm vulnerability audit and registry signature checks
+npm run security:audit    # Fail on moderate+ vulnerable dependencies
+npm run security:signatures # Verify npm signatures and attestations
+npm run test:unit         # Vitest unit tests
+npm run test:integration  # Shell integration test
+npm test                  # Unit + integration tests
+```
+
+The shell integration test validates the wrapper, flags, fake runtime CLIs,
+installer command wiring, skill discovery and public-safe reference checks.
+
+The GitHub Actions CI runs four gates:
+
+- `Check`: lint, typecheck, unit tests, build and integration tests;
+- `Secret scan`: Gitleaks over full Git history;
+- `Dependency audit`: `npm audit` and `npm audit signatures`;
+- `Dependency review`: blocks PRs that add moderate-or-higher vulnerable dependencies.
+
+These gates cover repository code, npm dependencies and pull-request dependency
+changes. External tool version safety is handled by `tools.lock.json` plus
+runtime provenance checks in the installer.
+
+## Maintenance
+
+Keep this repository public-safe:
+
+- do not add company-specific URLs, tokens, secrets or internal project names;
+- prefer public package installers and configurable sources;
+- keep the installer idempotent;
+- cover pure module behavior with Vitest;
+- keep the shell integration test around behavior that can regress;
+- document what is automatic and what still depends on each runtime CLI.
+
+Release a new npm version by updating `package.json`, pushing the change to
+`main`, then pushing a matching tag:
+
+```bash
+git tag v0.1.1
+git push origin v0.1.1
+```
+
+The `Release` workflow runs the full check and publishes the scoped package to
+npm. Configure the repository secret `NPM_TOKEN` before pushing a release tag.

package/dist/bin/agent-toolkit.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin/agent-toolkit.js

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+import process from "node:process";
+import { err, InstallerError } from "../src/logger.js";
+import { runInstaller } from "../src/main.js";
+runInstaller().catch((error) => {
+    if (error instanceof InstallerError) {
+        err(error.message);
+        console.error("");
+        process.exit(1);
+    }
+    console.error(error);
+    process.exit(1);
+});
+//# sourceMappingURL=agent-toolkit.js.map

package/dist/bin/agent-toolkit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-toolkit.js","sourceRoot":"","sources":["../../bin/agent-toolkit.ts"],"names":[],"mappings":";AACA,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAC7B,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/args.d.ts

@@ -0,0 +1 @@
+export declare function parseArgs(argv: string[]): boolean;

package/dist/src/args.js

@@ -0,0 +1,152 @@
+import path from "node:path";
+import { die } from "./logger.js";
+import { selectOnlyRuntime, selectOnlyTool, setAllRuntimes, setAllTools, splitList, state, } from "./state.js";
+import { usage } from "./usage.js";
+export function parseArgs(argv) {
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (!arg)
+            continue;
+        switch (arg) {
+            case "--all":
+                setAllTools(true);
+                state.nonInteractive = true;
+                break;
+            case "--rtk-only":
+                selectOnlyTool("rtk");
+                state.nonInteractive = true;
+                break;
+            case "--caveman-only":
+                selectOnlyTool("caveman");
+                state.nonInteractive = true;
+                break;
+            case "--superpowers-only":
+                selectOnlyTool("superpowers");
+                state.nonInteractive = true;
+                break;
+            case "--graphify-only":
+                selectOnlyTool("graphify");
+                state.nonInteractive = true;
+                break;
+            case "--gsd-only":
+                selectOnlyTool("gsd");
+                state.nonInteractive = true;
+                break;
+            case "--frontend-skills-only":
+                selectOnlyTool("frontend-skills");
+                state.nonInteractive = true;
+                break;
+            case "--skills-only":
+                selectOnlyTool("skills");
+                state.nonInteractive = true;
+                break;
+            case "--no-rtk":
+                state.tools.rtk = false;
+                state.nonInteractive = true;
+                break;
+            case "--no-caveman":
+                state.tools.caveman = false;
+                state.nonInteractive = true;
+                break;
+            case "--no-superpowers":
+                state.tools.superpowers = false;
+                state.nonInteractive = true;
+                break;
+            case "--no-graphify":
+                state.tools.graphify = false;
+                state.nonInteractive = true;
+                break;
+            case "--no-gsd":
+                state.tools.gsd = false;
+                state.nonInteractive = true;
+                break;
+            case "--no-frontend-skills":
+                state.tools["frontend-skills"] = false;
+                state.nonInteractive = true;
+                break;
+            case "--no-skills":
+                state.tools.skills = false;
+                state.nonInteractive = true;
+                break;
+            case "--all-runtimes":
+                setAllRuntimes(true);
+                state.nonInteractive = true;
+                break;
+            case "--claude":
+                selectOnlyRuntime("claude");
+                state.nonInteractive = true;
+                break;
+            case "--codex":
+                selectOnlyRuntime("codex");
+                state.nonInteractive = true;
+                break;
+            case "--opencode":
+                selectOnlyRuntime("opencode");
+                state.nonInteractive = true;
+                break;
+            case "--gemini":
+                selectOnlyRuntime("gemini");
+                state.nonInteractive = true;
+                break;
+            case "--no-claude":
+                state.runtimes.claude = false;
+                state.nonInteractive = true;
+                break;
+            case "--no-codex":
+                state.runtimes.codex = false;
+                state.nonInteractive = true;
+                break;
+            case "--no-opencode":
+                state.runtimes.opencode = false;
+                state.nonInteractive = true;
+                break;
+            case "--no-gemini":
+                state.runtimes.gemini = false;
+                state.nonInteractive = true;
+                break;
+            case "--global":
+                state.gsdScope = "global";
+                break;
+            case "--local":
+                state.gsdScope = "local";
+                break;
+            case "--skills-dir":
+                i += 1;
+                {
+                    const skillsDir = argv[i];
+                    if (!skillsDir)
+                        die("--skills-dir requires a directory.");
+                    state.customSkillsDir = path.resolve(skillsDir);
+                }
+                break;
+            case "--skills-scope":
+                i += 1;
+                {
+                    const skillsScope = argv[i];
+                    if (!skillsScope)
+                        die("--skills-scope requires a scope path.");
+                    state.skillScopes.push(...splitList(skillsScope));
+                }
+                state.nonInteractive = true;
+                break;
+            case "--skills-list":
+                state.listSkills = true;
+                state.nonInteractive = true;
+                break;
+            case "--install-missing-clis":
+                state.installMissingClis = true;
+                break;
+            case "--allow-mutable-sources":
+                state.allowMutableSources = true;
+                break;
+            case "--help":
+            case "-h":
+                console.log(usage());
+                return false;
+            default:
+                die(`Unknown flag: ${arg}. Use --help for usage.`);
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=args.js.map

package/dist/src/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/args.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,WAAW,EACX,SAAS,EACT,KAAK,GACN,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,OAAO;gBACV,WAAW,CAAC,IAAI,CAAC,CAAC;gBAClB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,cAAc,CAAC,KAAK,CAAC,CAAC;gBACtB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,gBAAgB;gBACnB,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC1B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,oBAAoB;gBACvB,cAAc,CAAC,aAAa,CAAC,CAAC;gBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,iBAAiB;gBACpB,cAAc,CAAC,UAAU,CAAC,CAAC;gBAC3B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,cAAc,CAAC,KAAK,CAAC,CAAC;gBACtB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,wBAAwB;gBAC3B,cAAc,CAAC,iBAAiB,CAAC,CAAC;gBAClC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACzB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC;gBACxB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,cAAc;gBACjB,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;gBAC5B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,kBAAkB;gBACrB,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC;gBAChC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC;gBAC7B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC;gBACxB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,sBAAsB;gBACzB,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC;gBACvC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;gBAC3B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,gBAAgB;gBACnB,cAAc,CAAC,IAAI,CAAC,CAAC;gBACrB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBAC5B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,SAAS;gBACZ,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAC3B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBAC5B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;gBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;gBAC7B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC;gBAChC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;gBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAC1B,MAAM;YACR,KAAK,SAAS;gBACZ,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC;gBACzB,MAAM;YACR,KAAK,cAAc;gBACjB,CAAC,IAAI,CAAC,CAAC;gBACP,CAAC;oBACC,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC1B,IAAI,CAAC,SAAS;wBAAE,GAAG,CAAC,oCAAoC,CAAC,CAAC;oBAC1D,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAClD,CAAC;gBACD,MAAM;YACR,KAAK,gBAAgB;gBACnB,CAAC,IAAI,CAAC,CAAC;gBACP,CAAC;oBACC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC5B,IAAI,CAAC,WAAW;wBAAE,GAAG,CAAC,uCAAuC,CAAC,CAAC;oBAC/D,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;gBACpD,CAAC;gBACD,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;gBACxB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,wBAAwB;gBAC3B,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBAChC,MAAM;YACR,KAAK,yBAAyB;gBAC5B,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;gBACjC,MAAM;YACR,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI;gBACP,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBACrB,OAAO,KAAK,CAAC;YACf;gBACE,GAAG,CAAC,iBAAiB,GAAG,yBAAyB,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/checksum.d.ts

@@ -0,0 +1,2 @@
+export declare function sha256File(filePath: string): string;
+export declare function verifySha256File(filePath: string, expectedSha256: string): boolean;

package/dist/src/checksum.js

@@ -0,0 +1,9 @@
+import { createHash } from "node:crypto";
+import fs from "node:fs";
+export function sha256File(filePath) {
+    return createHash("sha256").update(fs.readFileSync(filePath)).digest("hex");
+}
+export function verifySha256File(filePath, expectedSha256) {
+    return sha256File(filePath).toLowerCase() === expectedSha256.toLowerCase();
+}
+//# sourceMappingURL=checksum.js.map

package/dist/src/checksum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checksum.js","sourceRoot":"","sources":["../../src/checksum.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,cAAsB;IAEtB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,WAAW,EAAE,CAAC;AAC7E,CAAC"}

package/dist/src/context.d.ts

@@ -0,0 +1,3 @@
+export declare const SRC_DIR: string;
+export declare const REPO_ROOT: string;
+export declare const HOME: string;

package/dist/src/context.js

@@ -0,0 +1,10 @@
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+export const SRC_DIR = path.dirname(fileURLToPath(import.meta.url));
+export const REPO_ROOT = path.basename(SRC_DIR) === "src" &&
+    path.basename(path.dirname(SRC_DIR)) === "dist"
+    ? path.resolve(SRC_DIR, "..", "..")
+    : path.resolve(SRC_DIR, "..");
+export const HOME = process.env.HOME || os.homedir();
+//# sourceMappingURL=context.js.map

package/dist/src/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,SAAS,GACpB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,KAAK;IAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM;IAC7C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;IACnC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC"}

package/dist/src/installers/caveman.d.ts

@@ -0,0 +1 @@
+export declare function installCaveman(): boolean;