@soleri/cli 9.3.0 → 9.4.0

package/dist/hook-packs/yolo-safety/scripts/anti-deletion.sh

@@ -1,21 +1,31 @@
-#!/usr/bin/env bash
+#!/bin/sh
 # Anti-Deletion Staging Hook for Claude Code (Soleri Hook Pack: yolo-safety)
-# PreToolUse -> Bash: intercepts rm, rmdir, mv (of project dirs), git clean, reset --hard
-# Copies target files to ~/.soleri/staging/<timestamp>/ then blocks the command.
+# PreToolUse -> Bash: intercepts destructive commands, stages files, blocks execution.
+#
+# Intercepted patterns:
+#   - rm / rmdir          (files/dirs — stages first, then blocks)
+#   - git push --force    (blocks outright)
+#   - git reset --hard    (blocks outright)
+#   - git clean           (blocks outright)
+#   - git checkout -- .   (blocks outright)
+#   - git restore .       (blocks outright)
+#   - mv ~/projects/...   (blocks outright)
+#   - drop table          (SQL — blocks outright)
+#   - docker rm / rmi     (blocks outright)
 #
 # Catastrophic commands (rm -rf /, rm -rf ~) should stay in deny rules —
 # this hook handles targeted deletes only.
 #
-# Dependencies: jq (required), perl (optional, for heredoc stripping)
+# Dependencies: jq (required)
+# POSIX sh compatible — no bash-specific features.
 
-set -euo pipefail
+set -eu
 
 STAGING_ROOT="$HOME/.soleri/staging"
-PROJECTS_DIR="$HOME/projects"
 INPUT=$(cat)
 
 # Extract the command from stdin JSON
-CMD=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+CMD=$(printf '%s' "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
 
 # No command found — let it through
 if [ -z "$CMD" ]; then
@@ -26,12 +36,17 @@ fi
 # Commands like: gh issue comment --body "$(cat <<'EOF' ... rmdir ... EOF)"
 # contain destructive keywords in text, not as actual commands.
 
-# Remove heredoc blocks: <<'EOF'...EOF and <<EOF...EOF (multiline)
-STRIPPED=$(echo "$CMD" | perl -0777 -pe "s/<<'?\\w+'?.*?^\\w+$//gms" 2>/dev/null || echo "$CMD")
-# Remove double-quoted strings (greedy but good enough for this check)
-STRIPPED=$(echo "$STRIPPED" | sed -E 's/"[^"]*"//g' 2>/dev/null || echo "$STRIPPED")
+# Remove heredoc blocks (best-effort with sed)
+STRIPPED=$(printf '%s' "$CMD" | sed -e "s/<<'[A-Za-z_]*'.*//g" -e 's/<<[A-Za-z_]*.*//g' 2>/dev/null || printf '%s' "$CMD")
+# Remove double-quoted strings
+STRIPPED=$(printf '%s' "$STRIPPED" | sed 's/"[^"]*"//g' 2>/dev/null || printf '%s' "$STRIPPED")
 # Remove single-quoted strings
-STRIPPED=$(echo "$STRIPPED" | sed -E "s/'[^']*'//g" 2>/dev/null || echo "$STRIPPED")
+STRIPPED=$(printf '%s' "$STRIPPED" | sed "s/'[^']*'//g" 2>/dev/null || printf '%s' "$STRIPPED")
+
+# --- Helper: check if pattern matches stripped command ---
+matches() {
+  printf '%s' "$STRIPPED" | grep -qE "$1"
+}
 
 # --- Detect destructive commands (on stripped command only) ---
 
@@ -42,56 +57,78 @@ IS_GIT_CLEAN=false
 IS_RESET_HARD=false
 IS_GIT_CHECKOUT_DOT=false
 IS_GIT_RESTORE_DOT=false
+IS_GIT_PUSH_FORCE=false
+IS_DROP_TABLE=false
+IS_DOCKER_RM=false
 
-# Check for rm commands (but not git rm which is safe — it stages, doesn't destroy)
-if echo "$STRIPPED" | grep -qE '(^|\s|;|&&|\|\|)rm\s'; then
-  if ! echo "$STRIPPED" | grep -qE '(^|\s)git\s+rm\s'; then
+# rm (but not git rm which stages, doesn't destroy)
+if matches '(^|\s|;|&&|\|\|)rm\s'; then
+  if ! matches '(^|\s)git\s+rm\s'; then
     IS_RM=true
   fi
 fi
 
-# Check for rmdir commands
-if echo "$STRIPPED" | grep -qE '(^|\s|;|&&|\|\|)rmdir\s'; then
+# rmdir
+if matches '(^|\s|;|&&|\|\|)rmdir\s'; then
   IS_RMDIR=true
 fi
 
-# Check for mv commands that move project directories or git repos
-if echo "$STRIPPED" | grep -qE '(^|\s|;|&&|\|\|)mv\s'; then
-  MV_SOURCES=$(echo "$STRIPPED" | sed -E 's/^.*\bmv\s+//' | sed -E 's/-(f|i|n|v)\s+//g')
-  if echo "$MV_SOURCES" | grep -qE "(~/projects|$HOME/projects|\\\$HOME/projects|\\.git)"; then
+# mv of project directories or git repos
+if matches '(^|\s|;|&&|\|\|)mv\s'; then
+  MV_TAIL=$(printf '%s' "$STRIPPED" | sed 's/^.*\bmv //' | sed 's/-[finv] //g')
+  if printf '%s' "$MV_TAIL" | grep -qE '(~/projects|\.git)'; then
     IS_MV_PROJECT=true
   fi
 fi
 
-# Check for git clean
-if echo "$STRIPPED" | grep -qE '(^|\s|;|&&|\|\|)git\s+clean\b'; then
+# git clean
+if matches '(^|\s|;|&&|\|\|)git\s+clean\b'; then
   IS_GIT_CLEAN=true
 fi
 
-# Check for git reset --hard
-if echo "$STRIPPED" | grep -qE '(^|\s|;|&&|\|\|)git\s+reset\s+--hard'; then
+# git reset --hard
+if matches '(^|\s|;|&&|\|\|)git\s+reset\s+--hard'; then
   IS_RESET_HARD=true
 fi
 
-# Check for git checkout -- . (restores all files, discards changes)
-if echo "$STRIPPED" | grep -qE '(^|\s|;|&&|\|\|)git\s+checkout\s+--\s+\.'; then
+# git checkout -- .
+if matches '(^|\s|;|&&|\|\|)git\s+checkout\s+--\s+\.'; then
   IS_GIT_CHECKOUT_DOT=true
 fi
 
-# Check for git restore . (restores all files, discards changes)
-if echo "$STRIPPED" | grep -qE '(^|\s|;|&&|\|\|)git\s+restore\s+\.'; then
+# git restore .
+if matches '(^|\s|;|&&|\|\|)git\s+restore\s+\.'; then
   IS_GIT_RESTORE_DOT=true
 fi
 
-# Not a destructive command — let it through
+# git push --force / -f (but not --force-with-lease which is safer)
+if matches '(^|\s|;|&&|\|\|)git\s+push\s'; then
+  if matches 'git\s+push\s.*--force([^-]|$)' || matches 'git\s+push\s+-f(\s|$)' || matches 'git\s+push\s.*\s-f(\s|$)'; then
+    IS_GIT_PUSH_FORCE=true
+  fi
+fi
+
+# SQL drop table (case-insensitive)
+if printf '%s' "$STRIPPED" | grep -qiE '(^|\s|;)drop\s+table'; then
+  IS_DROP_TABLE=true
+fi
+
+# docker rm / docker rmi
+if matches '(^|\s|;|&&|\|\|)docker\s+(rm|rmi)\b'; then
+  IS_DOCKER_RM=true
+fi
+
+# --- Not a destructive command — let it through ---
+
 if [ "$IS_RM" = false ] && [ "$IS_RMDIR" = false ] && [ "$IS_MV_PROJECT" = false ] && \
    [ "$IS_GIT_CLEAN" = false ] && [ "$IS_RESET_HARD" = false ] && \
-   [ "$IS_GIT_CHECKOUT_DOT" = false ] && [ "$IS_GIT_RESTORE_DOT" = false ]; then
+   [ "$IS_GIT_CHECKOUT_DOT" = false ] && [ "$IS_GIT_RESTORE_DOT" = false ] && \
+   [ "$IS_GIT_PUSH_FORCE" = false ] && [ "$IS_DROP_TABLE" = false ] && \
+   [ "$IS_DOCKER_RM" = false ]; then
   exit 0
 fi
 
-# --- Handle git clean (block outright) ---
-
+# --- Block: git clean ---
 if [ "$IS_GIT_CLEAN" = true ]; then
   jq -n '{
     continue: false,
@@ -100,8 +137,7 @@ if [ "$IS_GIT_CLEAN" = true ]; then
   exit 0
 fi
 
-# --- Handle git reset --hard (block outright) ---
-
+# --- Block: git reset --hard ---
 if [ "$IS_RESET_HARD" = true ]; then
   jq -n '{
     continue: false,
@@ -110,8 +146,7 @@ if [ "$IS_RESET_HARD" = true ]; then
   exit 0
 fi
 
-# --- Handle git checkout -- . (block outright) ---
-
+# --- Block: git checkout -- . ---
 if [ "$IS_GIT_CHECKOUT_DOT" = true ]; then
   jq -n '{
     continue: false,
@@ -120,8 +155,7 @@ if [ "$IS_GIT_CHECKOUT_DOT" = true ]; then
   exit 0
 fi
 
-# --- Handle git restore . (block outright) ---
-
+# --- Block: git restore . ---
 if [ "$IS_GIT_RESTORE_DOT" = true ]; then
   jq -n '{
     continue: false,
@@ -130,8 +164,16 @@ if [ "$IS_GIT_RESTORE_DOT" = true ]; then
   exit 0
 fi
 
-# --- Handle mv of project directories (block outright) ---
+# --- Block: git push --force ---
+if [ "$IS_GIT_PUSH_FORCE" = true ]; then
+  jq -n '{
+    continue: false,
+    stopReason: "BLOCKED: git push --force can overwrite remote history and cause data loss for collaborators. Use --force-with-lease instead, or ask the user to run this manually."
+  }'
+  exit 0
+fi
 
+# --- Block: mv of project directories ---
 if [ "$IS_MV_PROJECT" = true ]; then
   jq -n '{
     continue: false,
@@ -140,8 +182,7 @@ if [ "$IS_MV_PROJECT" = true ]; then
   exit 0
 fi
 
-# --- Handle rmdir (block outright) ---
-
+# --- Block: rmdir ---
 if [ "$IS_RMDIR" = true ]; then
   jq -n '{
     continue: false,
@@ -150,6 +191,24 @@ if [ "$IS_RMDIR" = true ]; then
   exit 0
 fi
 
+# --- Block: drop table ---
+if [ "$IS_DROP_TABLE" = true ]; then
+  jq -n '{
+    continue: false,
+    stopReason: "BLOCKED: DROP TABLE detected. This would permanently destroy database data. Ask the user to run this SQL statement manually after confirming intent."
+  }'
+  exit 0
+fi
+
+# --- Block: docker rm / rmi ---
+if [ "$IS_DOCKER_RM" = true ]; then
+  jq -n '{
+    continue: false,
+    stopReason: "BLOCKED: docker rm/rmi detected. Removing containers or images can cause data loss. Ask the user to run this manually."
+  }'
+  exit 0
+fi
+
 # --- Handle rm commands — copy to staging, then block ---
 
 # Create timestamped staging directory
@@ -158,7 +217,7 @@ STAGE_DIR="$STAGING_ROOT/$TIMESTAMP"
 
 # Extract file paths from the rm command
 # Strip rm and its flags, keeping only the file arguments
-FILES=$(echo "$CMD" | sed -E 's/^.*\brm\s+//' | sed -E 's/-(r|f|rf|fr|v|i|rv|fv|rfv|frv)\s+//g' | tr ' ' '\n' | grep -v '^-' | grep -v '^$')
+FILES=$(printf '%s' "$CMD" | sed 's/^.*\brm //' | sed 's/-[rRfivd]* //g' | tr ' ' '\n' | grep -v '^-' | grep -v '^$' || true)
 
 if [ -z "$FILES" ]; then
   jq -n '{
@@ -168,14 +227,15 @@ if [ -z "$FILES" ]; then
   exit 0
 fi
 
-STAGED=()
-MISSING=()
+STAGED_COUNT=0
+STAGED_LIST=""
+MISSING_COUNT=0
 
 mkdir -p "$STAGE_DIR"
 
-while IFS= read -r filepath; do
+printf '%s\n' "$FILES" | while IFS= read -r filepath; do
   # Expand path (handle ~, relative paths)
-  expanded=$(eval echo "$filepath" 2>/dev/null || echo "$filepath")
+  expanded=$(eval printf '%s' "$filepath" 2>/dev/null || printf '%s' "$filepath")
 
   if [ -e "$expanded" ]; then
     # Preserve directory structure in staging
@@ -183,32 +243,32 @@ while IFS= read -r filepath; do
     mkdir -p "$target_dir"
     # COPY instead of MOVE — originals stay intact, staging is a backup
     if [ -d "$expanded" ]; then
-      cp -R "$expanded" "$target_dir/" 2>/dev/null && STAGED+=("$expanded") || MISSING+=("$expanded")
+      # Use rsync if available (excludes node_modules/dist/.git), fall back to cp
+      if command -v rsync >/dev/null 2>&1; then
+        rsync -a --exclude='node_modules' --exclude='dist' --exclude='.git' "$expanded/" "$target_dir/$(basename "$expanded")/" 2>/dev/null
+      else
+        cp -R "$expanded" "$target_dir/" 2>/dev/null
+      fi
     else
-      cp "$expanded" "$target_dir/" 2>/dev/null && STAGED+=("$expanded") || MISSING+=("$expanded")
+      cp "$expanded" "$target_dir/" 2>/dev/null
     fi
-  else
-    MISSING+=("$expanded")
   fi
-done <<< "$FILES"
+done
 
-# Build response
-STAGED_COUNT=${#STAGED[@]}
-MISSING_COUNT=${#MISSING[@]}
+# Count what was staged (check if staging dir has content)
+if [ -d "$STAGE_DIR" ] && [ "$(ls -A "$STAGE_DIR" 2>/dev/null)" ]; then
+  STAGED_COUNT=$(find "$STAGE_DIR" -mindepth 1 -maxdepth 1 | wc -l | tr -d ' ')
+fi
 
-if [ "$STAGED_COUNT" -eq 0 ] && [ "$MISSING_COUNT" -gt 0 ]; then
+if [ "$STAGED_COUNT" -eq 0 ]; then
   # All files were missing — let the rm fail naturally
   rmdir "$STAGE_DIR" 2>/dev/null || true
   exit 0
 fi
 
-STAGED_LIST=$(printf '%s, ' "${STAGED[@]}" | sed 's/, $//')
-
 jq -n \
-  --arg staged "$STAGED_LIST" \
   --arg dir "$STAGE_DIR" \
-  --argjson count "$STAGED_COUNT" \
   '{
     continue: false,
-    stopReason: ("BLOCKED & BACKED UP: " + ($count | tostring) + " item(s) copied to " + $dir + " — files: " + $staged + ". The originals are untouched. To proceed with deletion, ask the user to run the rm command manually.")
+    stopReason: ("BLOCKED & BACKED UP: Files copied to " + $dir + ". The originals are untouched. To proceed with deletion, ask the user to run the rm command manually.")
   }'

package/dist/main.js

@@ -20,6 +20,7 @@ import { registerSkills } from './commands/skills.js';
 import { registerAgent } from './commands/agent.js';
 import { registerTelegram } from './commands/telegram.js';
 import { registerStaging } from './commands/staging.js';
+import { registerYolo } from './commands/yolo.js';
 const require = createRequire(import.meta.url);
 const { version } = require('../package.json');
 const RESET = '\x1b[0m';
@@ -75,5 +76,6 @@ registerSkills(program);
 registerAgent(program);
 registerTelegram(program);
 registerStaging(program);
+registerYolo(program);
 program.parse();
 //# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE/C,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,MAAM,GAAG,UAAU,CAAC;AAE1B,SAAS,WAAW;IAClB,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,IAAI,SAAS,KAAK,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,kBAAkB,KAAK,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,cAAc,KAAK,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,KAAK,8BAA8B,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,KAAK,6BAA6B,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,sBAAsB,KAAK,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,aAAa,KAAK,oCAAoC,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,cAAc,KAAK,2BAA2B,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,oBAAoB,KAAK,4BAA4B,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe,KAAK,8BAA8B,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,iBAAiB,KAAK,qCAAqC,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,mBAAmB,KAAK,oCAAoC,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,OAAO,IAAI,gBAAgB,KAAK,GAAG,GAAG,oBAAoB,KAAK,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,0DAA0D,CAAC;KACvE,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,GAAG,EAAE;IACX,WAAW,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC;AAEL,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC3B,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC1B,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE/C,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,MAAM,GAAG,UAAU,CAAC;AAE1B,SAAS,WAAW;IAClB,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,IAAI,SAAS,KAAK,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,kBAAkB,KAAK,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,cAAc,KAAK,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,KAAK,8BAA8B,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,gBAAgB,KAAK,6BAA6B,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,sBAAsB,KAAK,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,aAAa,KAAK,oCAAoC,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,cAAc,KAAK,2BAA2B,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,oBAAoB,KAAK,4BAA4B,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe,KAAK,8BAA8B,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,iBAAiB,KAAK,qCAAqC,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,mBAAmB,KAAK,oCAAoC,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,OAAO,IAAI,gBAAgB,KAAK,GAAG,GAAG,oBAAoB,KAAK,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,0DAA0D,CAAC;KACvE,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,GAAG,EAAE;IACX,WAAW,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC;AAEL,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC3B,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAClC,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC1B,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soleri/cli",
-  "version": "9.3.0",
+  "version": "9.4.0",
   "description": "Developer CLI for creating and managing Soleri AI agents.",
   "keywords": [
     "agent",

package/src/__tests__/hook-packs.test.ts

@@ -162,7 +162,7 @@ describe('hook-packs', () => {
       const settings = JSON.parse(readFileSync(join(claudeDir, 'settings.json'), 'utf-8'));
       expect(settings.hooks).toBeDefined();
       expect(settings.hooks.PreToolUse).toHaveLength(1);
-      expect(settings.hooks.PreToolUse[0].command).toBe('bash ~/.claude/hooks/anti-deletion.sh');
+      expect(settings.hooks.PreToolUse[0].command).toBe('sh ~/.claude/hooks/anti-deletion.sh');
       expect(settings.hooks.PreToolUse[0]._soleriPack).toBe('yolo-safety');
     });
 

package/src/__tests__/wizard-e2e.mjs

@@ -2,7 +2,7 @@
 /**
  * Comprehensive E2E tests for the interactive create wizard.
  *
- * Tests all 7 archetypes, custom path, custom greeting, custom domains/principles,
+ * Tests custom path, custom greeting, custom domains/principles,
  * hook pack selection, cancel flows, and decline flows.
  *
  * Run: node packages/cli/src/__tests__/wizard-e2e.mjs

package/src/commands/agent.ts

@@ -26,6 +26,7 @@ import {
   generateInjectClaudeMd,
   generateSkills,
 } from '@soleri/forge/lib';
+import { composeClaudeMd, getEngineRulesContent } from '@soleri/forge/lib';
 import type { AgentConfig } from '@soleri/forge/lib';
 import { detectAgent } from '../utils/agent-context.js';
 import { installClaude } from './install.js';
@@ -194,7 +195,70 @@ export function registerAgent(program: Command): void {
         return;
       }
 
-      // Reconstruct AgentConfig from the existing agent
+      // ─── File-tree agent (v7+) ────────────────────────────────
+      if (ctx.format === 'filetree') {
+        const enginePath = join(ctx.agentPath, 'instructions', '_engine.md');
+        const claudeMdPath = join(ctx.agentPath, 'CLAUDE.md');
+
+        // Generate skills from latest forge templates
+        const skillFiles = opts.skipSkills
+          ? []
+          : generateSkills({ id: ctx.agentId } as AgentConfig);
+
+        if (opts.dryRun) {
+          p.log.info(`Would regenerate: ${enginePath}`);
+          p.log.info(`Would regenerate: ${claudeMdPath}`);
+          if (skillFiles.length > 0) {
+            const newSkills = skillFiles.filter(
+              ([relPath]) => !existsSync(join(ctx.agentPath, relPath)),
+            );
+            const updatedSkills = skillFiles.filter(([relPath]) =>
+              existsSync(join(ctx.agentPath, relPath)),
+            );
+            p.log.info(
+              `Skills: ${skillFiles.length} total (${newSkills.length} new, ${updatedSkills.length} updated)`,
+            );
+            for (const [relPath] of newSkills) {
+              p.log.info(`  + ${relPath}`);
+            }
+          }
+          p.log.info(`Agent: ${ctx.agentId} (file-tree format)`);
+          return;
+        }
+
+        // 1. Sync skills from forge templates
+        if (skillFiles.length > 0) {
+          let newCount = 0;
+          let updatedCount = 0;
+          for (const [relPath, content] of skillFiles) {
+            const fullPath = join(ctx.agentPath, relPath);
+            const dirPath = dirname(fullPath);
+            const isNew = !existsSync(fullPath);
+            mkdirSync(dirPath, { recursive: true });
+            writeFileSync(fullPath, content, 'utf-8');
+            if (isNew) newCount++;
+            else updatedCount++;
+          }
+          p.log.success(
+            `Synced ${skillFiles.length} skills (${newCount} new, ${updatedCount} updated)`,
+          );
+        }
+
+        // 2. Regenerate _engine.md from latest shared-rules
+        mkdirSync(join(ctx.agentPath, 'instructions'), { recursive: true });
+        writeFileSync(enginePath, getEngineRulesContent(), 'utf-8');
+        p.log.success(`Regenerated ${enginePath}`);
+
+        // 3. Recompose CLAUDE.md from agent.yaml + instructions + workflows + skills
+        const result = composeClaudeMd(ctx.agentPath);
+        writeFileSync(claudeMdPath, result.content, 'utf-8');
+        p.log.success(
+          `Regenerated ${claudeMdPath} (${result.sources.length} sources, ${result.content.length} bytes)`,
+        );
+        return;
+      }
+
+      // ─── Legacy TypeScript agent ──────────────────────────────
       const config = readAgentConfig(ctx.agentPath, ctx.agentId);
       if (!config) {
         p.log.error('Could not read agent config from persona.ts and entry point.');
@@ -216,7 +280,6 @@ export function registerAgent(program: Command): void {
         p.log.info(`Agent: ${config.name} (${config.domains.length} domains)`);
         p.log.info(`Domains: ${config.domains.join(', ')}`);
         if (skillFiles.length > 0) {
-          // Check which skills are new vs existing
           const newSkills = skillFiles.filter(
             ([relPath]) => !existsSync(join(ctx.agentPath, relPath)),
           );

package/src/commands/pack.ts

@@ -13,6 +13,18 @@ import type { Command } from 'commander';
 import * as p from '@clack/prompts';
 import { PackLockfile, inferPackType, resolvePack, checkNpmVersion } from '@soleri/core';
 import type { LockEntry, PackSource } from '@soleri/core';
+
+// ─── Tier display helpers ────────────────────────────────────────────
+
+const TIER_BADGES: Record<string, string> = {
+  default: '[default]',
+  community: '[community]',
+  premium: '[premium]',
+};
+
+function tierBadge(tier?: string): string {
+  return TIER_BADGES[tier ?? 'community'] ?? '[community]';
+}
 import { detectAgent } from '../utils/agent-context.js';
 
 const LOCKFILE_NAME = 'soleri.lock';
@@ -45,14 +57,18 @@ export function registerPack(program: Command): void {
   pack
     .command('list')
     .option('--type <type>', 'Filter by pack type (hooks, skills, knowledge, domain, bundle)')
+    .option('--tier <tier>', 'Filter by tier (default, community, premium)')
     .description('List installed packs')
-    .action((opts: { type?: string }) => {
+    .action((opts: { type?: string; tier?: string }) => {
       const lockfile = new PackLockfile(getLockfilePath());
       let entries = lockfile.list();
 
       if (opts.type) {
         entries = entries.filter((e) => e.type === opts.type);
       }
+      if (opts.tier) {
+        entries = entries.filter((e) => (e.tier ?? 'community') === opts.tier);
+      }
 
       if (entries.length === 0) {
         p.log.info('No packs installed.');
@@ -61,9 +77,10 @@ export function registerPack(program: Command): void {
 
       p.log.info(`${entries.length} pack(s) installed:\n`);
       for (const entry of entries) {
-        const badge =
+        const source =
           entry.source === 'built-in' ? ' [built-in]' : entry.source === 'npm' ? ' [npm]' : '';
-        console.log(`  ${entry.id}@${entry.version}  ${entry.type}${badge}`);
+        const tier = ` ${tierBadge(entry.tier)}`;
+        console.log(`  ${entry.id}@${entry.version}  ${entry.type}${tier}${source}`);
         if (entry.vaultEntries > 0) console.log(`    vault: ${entry.vaultEntries} entries`);
         if (entry.skills.length > 0) console.log(`    skills: ${entry.skills.join(', ')}`);
         if (entry.hooks.length > 0) console.log(`    hooks: ${entry.hooks.join(', ')}`);
@@ -163,6 +180,7 @@ export function registerPack(program: Command): void {
             skills,
             hooks,
             facadesRegistered: (manifest.facades?.length ?? 0) > 0,
+            tier: manifest.tier ?? 'community',
           };
 
           lockfile.set(entry);
@@ -219,9 +237,14 @@ export function registerPack(program: Command): void {
         return;
       }
 
+      const tierLabel = entry.tier ?? 'community';
+      const tierNote =
+        tierLabel === 'premium' ? ' (currently unlocked — premium platform coming soon)' : '';
+
       console.log(`\n  Pack:      ${entry.id}`);
       console.log(`  Version:   ${entry.version}`);
       console.log(`  Type:      ${entry.type}`);
+      console.log(`  Tier:      ${tierLabel}${tierNote}`);
       console.log(`  Source:    ${entry.source}`);
       console.log(`  Directory: ${entry.directory}`);
       console.log(`  Installed: ${entry.installedAt}`);
@@ -378,7 +401,16 @@ export function registerPack(program: Command): void {
         return;
       }
 
-      let total = 0;
+      // Collect all packs with their tier
+      const allPacks: Array<{
+        id: string;
+        version: string;
+        description: string;
+        domains: string;
+        tier: string;
+        category: string;
+      }> = [];
+
       for (const baseDir of searchDirs) {
         const categories = readdirSync(baseDir, { withFileTypes: true })
           .filter((d) => d.isDirectory())
@@ -390,18 +422,19 @@ export function registerPack(program: Command): void {
             (d) => d.isDirectory() && existsSync(join(categoryDir, d.name, 'soleri-pack.json')),
           );
 
-          if (packs.length === 0) continue;
-
-          console.log(`\n  ${category}/`);
           for (const pk of packs) {
             try {
               const manifest = JSON.parse(
                 readFileSync(join(categoryDir, pk.name, 'soleri-pack.json'), 'utf-8'),
               );
-              const domains = (manifest.domains as string[])?.join(', ') || '—';
-              console.log(`    ${manifest.id}@${manifest.version}  ${manifest.description || ''}`);
-              console.log(`      domains: ${domains}`);
-              total++;
+              allPacks.push({
+                id: manifest.id,
+                version: manifest.version,
+                description: manifest.description || '',
+                domains: (manifest.domains as string[])?.join(', ') || '—',
+                tier: manifest.tier ?? 'community',
+                category,
+              });
             } catch {
               // skip malformed packs
             }
@@ -409,11 +442,31 @@ export function registerPack(program: Command): void {
         }
       }
 
-      if (total === 0) {
+      if (allPacks.length === 0) {
         p.log.info('No packs found.');
-      } else {
-        console.log(`\n  ${total} pack(s) available.\n`);
+        return;
       }
+
+      // Group by tier and display
+      const tierOrder: Array<{ key: string; label: string }> = [
+        { key: 'default', label: 'Default (included with Soleri)' },
+        { key: 'community', label: 'Community (free)' },
+        { key: 'premium', label: 'Premium (included — premium platform coming soon)' },
+      ];
+
+      for (const { key, label } of tierOrder) {
+        const tierPacks = allPacks.filter((pk) => pk.tier === key);
+        if (tierPacks.length === 0) continue;
+
+        console.log(`\n  ${label}`);
+        console.log(`  ${'─'.repeat(label.length)}`);
+        for (const pk of tierPacks) {
+          console.log(`    ${pk.id}@${pk.version}  ${pk.description}`);
+          console.log(`      domains: ${pk.domains}`);
+        }
+      }
+
+      console.log(`\n  ${allPacks.length} pack(s) available.\n`);
     });
 
   // ─── create ─────────────────────────────────────────────────
@@ -441,6 +494,18 @@ export function registerPack(program: Command): void {
       });
       if (p.isCancel(description)) return;
 
+      const tier = await p.select({
+        message: 'Pack tier:',
+        options: [
+          { value: 'community', label: 'Community — free, published to npm' },
+          {
+            value: 'premium',
+            label: 'Premium — requires Soleri platform account (coming soon)',
+          },
+        ],
+      });
+      if (p.isCancel(tier)) return;
+
       const author = await p.text({ message: 'Author:', placeholder: '@username' });
       if (p.isCancel(author)) return;
 
@@ -454,6 +519,7 @@ export function registerPack(program: Command): void {
         id: name,
         version: '1.0.0',
         description: description || '',
+        tier: tier || 'community',
         author: author || '',
         license: 'MIT',
         soleri: '>=2.0.0',