@vantagesec/socc 0.1.15 → 0.1.17

package/dist/cli.mjs

@@ -112869,7 +112869,7 @@ function printStartupScreen() {
   const sLen = ` ● ${sL}    Ready — type /help to begin`.length;
   out.push(boxRow(sRow, W2, sLen));
   out.push(`${rgb(...BORDER)}╚${"═".repeat(W2 - 2)}╝${RESET}`);
-  out.push(`  ${DIM}${rgb(...DIMCOL)}socc ${RESET}${rgb(...ACCENT)}v${"0.1.15"}${RESET}`);
+  out.push(`  ${DIM}${rgb(...DIMCOL)}socc ${RESET}${rgb(...ACCENT)}v${"0.1.17"}${RESET}`);
   out.push("");
   process.stdout.write(out.join(`
 `) + `
@@ -373638,7 +373638,7 @@ function getAnthropicEnvMetadata() {
 function getBuildAgeMinutes() {
   if (false)
     ;
-  const buildTime = new Date("2026-04-13T17:17:55.615Z").getTime();
+  const buildTime = new Date("2026-04-13T20:35:20.206Z").getTime();
   if (isNaN(buildTime))
     return;
   return Math.floor((Date.now() - buildTime) / 60000);
@@ -400082,7 +400082,7 @@ function buildPrimarySection() {
   }, undefined, false, undefined, this);
   return [{
     label: "Version",
-    value: "0.1.15"
+    value: "0.1.17"
   }, {
     label: "Session name",
     value: nameValue
@@ -466429,7 +466429,7 @@ var init_bridge_kick = __esm(() => {
 var call58 = async () => {
   return {
     type: "text",
-    value: `${"99.0.0"} (built ${"2026-04-13T17:17:55.615Z"})`
+    value: `${"99.0.0"} (built ${"2026-04-13T20:35:20.206Z"})`
   };
 }, version2, version_default;
 var init_version = __esm(() => {
@@ -541037,7 +541037,7 @@ function WelcomeV2() {
           " ",
           /* @__PURE__ */ jsx_dev_runtime468.jsxDEV(ThemedText, {
             dimColor: true,
-            children: `v${"0.1.15"}`
+            children: `v${"0.1.17"}`
           }, undefined, false, undefined, this)
         ]
       }, undefined, true, undefined, this),
@@ -557838,19 +557838,57 @@ var init_plugins = __esm(() => {
   init_stringUtils();
 });
 
+// src/utils/windowsWorkspace.ts
+import { mkdir as mkdir44 } from "node:fs/promises";
+import { homedir as homedir39 } from "node:os";
+import { join as join147, resolve as resolve43 } from "node:path";
+function getWindowsWorkspaceLayout(envLike = process.env) {
+  if (env2.platform !== "win32") {
+    return null;
+  }
+  const userProfile = envLike.USERPROFILE || envLike.HOME || homedir39();
+  const configHome = envLike.SOCC_CONFIG_DIR && envLike.SOCC_CONFIG_DIR.trim().length > 0 ? resolve43(envLike.SOCC_CONFIG_DIR) : join147(userProfile, ".socc");
+  const documentsDir = join147(userProfile, "Documents");
+  return {
+    configHome,
+    documentsDir,
+    generatedAlertsDir: join147(documentsDir, "Alertas_Gerados"),
+    modelsDir: join147(documentsDir, "Modelos"),
+    generatedNotesDir: join147(documentsDir, "Notas_Geradas"),
+    trainingDir: join147(documentsDir, "Training")
+  };
+}
+async function ensureWindowsWorkspaceLayout(envLike = process.env) {
+  const layout = getWindowsWorkspaceLayout(envLike);
+  if (!layout) {
+    return null;
+  }
+  await Promise.all([
+    mkdir44(layout.configHome, { recursive: true }),
+    mkdir44(layout.generatedAlertsDir, { recursive: true }),
+    mkdir44(layout.modelsDir, { recursive: true }),
+    mkdir44(layout.generatedNotesDir, { recursive: true }),
+    mkdir44(layout.trainingDir, { recursive: true })
+  ]);
+  return layout;
+}
+var init_windowsWorkspace = __esm(() => {
+  init_env();
+});
+
 // src/commands/install.tsx
 var exports_install = {};
 __export(exports_install, {
   install: () => install,
   getInstallationPath: () => getInstallationPath2
 });
-import { homedir as homedir39 } from "node:os";
-import { join as join147 } from "node:path";
+import { homedir as homedir40 } from "node:os";
+import { join as join148 } from "node:path";
 function getInstallationPath2() {
   const isWindows2 = env2.platform === "win32";
-  const homeDir = homedir39();
+  const homeDir = homedir40();
   if (isWindows2) {
-    const windowsPath = join147(homeDir, ".local", "bin", "socc.exe");
+    const windowsPath = join148(homeDir, ".local", "bin", "socc.exe");
     return windowsPath.replace(/\//g, "\\");
   }
   return "~/.local/bin/socc";
@@ -557958,6 +557996,10 @@ function Install({
         if (setupMessages.length > 0) {
           setupMessages.forEach((msg) => logForDebugging2(`Install: Setup message: ${msg.message}`));
         }
+        const windowsWorkspace = await ensureWindowsWorkspaceLayout();
+        if (windowsWorkspace) {
+          logForDebugging2(`Install: Windows workspace ready at ${windowsWorkspace.documentsDir}`);
+        }
         logForDebugging2("Install: Cleaning up npm installations after successful install");
         const {
           removed,
@@ -558170,6 +558212,7 @@ var init_install = __esm(() => {
   init_errors();
   init_nativeInstaller();
   init_settings2();
+  init_windowsWorkspace();
   import_react_compiler_runtime373 = __toESM(require_dist3(), 1);
   import_react331 = __toESM(require_react(), 1);
   jsx_dev_runtime485 = __toESM(require_jsx_dev_runtime(), 1);
@@ -558210,7 +558253,7 @@ async function setupTokenHandler(root2) {
   const {
     ConsoleOAuthFlow: ConsoleOAuthFlow2
   } = await Promise.resolve().then(() => (init_ConsoleOAuthFlow(), exports_ConsoleOAuthFlow));
-  await new Promise((resolve43) => {
+  await new Promise((resolve44) => {
     root2.render(/* @__PURE__ */ jsx_dev_runtime486.jsxDEV(AppStateProvider, {
       onChangeAppState,
       children: /* @__PURE__ */ jsx_dev_runtime486.jsxDEV(KeybindingSetup, {
@@ -558234,7 +558277,7 @@ async function setupTokenHandler(root2) {
             }, undefined, true, undefined, this),
             /* @__PURE__ */ jsx_dev_runtime486.jsxDEV(ConsoleOAuthFlow2, {
               onDone: () => {
-                resolve43();
+                resolve44();
               },
               mode: "setup-token",
               startingMessage: "This will guide you through long-lived (1-year) auth token setup for your subscription-backed account. A subscription-backed login is required."
@@ -558270,7 +558313,7 @@ function DoctorWithPlugins(t0) {
 }
 async function doctorHandler(root2) {
   logEvent("tengu_doctor_command", {});
-  await new Promise((resolve43) => {
+  await new Promise((resolve44) => {
     root2.render(/* @__PURE__ */ jsx_dev_runtime486.jsxDEV(AppStateProvider, {
       children: /* @__PURE__ */ jsx_dev_runtime486.jsxDEV(KeybindingSetup, {
         children: /* @__PURE__ */ jsx_dev_runtime486.jsxDEV(MCPConnectionManager, {
@@ -558278,7 +558321,7 @@ async function doctorHandler(root2) {
           isStrictMcpConfig: false,
           children: /* @__PURE__ */ jsx_dev_runtime486.jsxDEV(DoctorWithPlugins, {
             onDone: () => {
-              resolve43();
+              resolve44();
             }
           }, undefined, false, undefined, this)
         }, undefined, false, undefined, this)
@@ -558296,14 +558339,14 @@ async function installHandler(target, options2) {
   const {
     install: install2
   } = await Promise.resolve().then(() => (init_install(), exports_install));
-  await new Promise((resolve43) => {
+  await new Promise((resolve44) => {
     const args = [];
     if (target)
       args.push(target);
     if (options2.force)
       args.push("--force");
     install2.call((result) => {
-      resolve43();
+      resolve44();
       process.exit(result.includes("failed") ? 1 : 0);
     }, {}, args);
   });
@@ -558749,7 +558792,7 @@ __export(exports_main, {
 });
 import { readFileSync as readFileSync11 } from "fs";
 import { fileURLToPath as fileURLToPath8 } from "url";
-import { dirname as dirname62, resolve as resolve43 } from "path";
+import { dirname as dirname62, resolve as resolve44 } from "path";
 function logManagedSettings() {
   try {
     const policySettings = getSettingsForSource("policySettings");
@@ -559306,12 +559349,12 @@ ${getTmuxInstallInstructions2()}
         process.exit(1);
       }
       try {
-        const filePath = resolve43(options2.systemPromptFile);
+        const filePath = resolve44(options2.systemPromptFile);
         systemPrompt = readFileSync11(filePath, "utf8");
       } catch (error42) {
         const code = getErrnoCode(error42);
         if (code === "ENOENT") {
-          process.stderr.write(source_default.red(`Error: System prompt file not found: ${resolve43(options2.systemPromptFile)}
+          process.stderr.write(source_default.red(`Error: System prompt file not found: ${resolve44(options2.systemPromptFile)}
 `));
           process.exit(1);
         }
@@ -559328,12 +559371,12 @@ ${getTmuxInstallInstructions2()}
         process.exit(1);
       }
       try {
-        const filePath = resolve43(options2.appendSystemPromptFile);
+        const filePath = resolve44(options2.appendSystemPromptFile);
         appendSystemPrompt = readFileSync11(filePath, "utf8");
       } catch (error42) {
         const code = getErrnoCode(error42);
         if (code === "ENOENT") {
-          process.stderr.write(source_default.red(`Error: Append system prompt file not found: ${resolve43(options2.appendSystemPromptFile)}
+          process.stderr.write(source_default.red(`Error: Append system prompt file not found: ${resolve44(options2.appendSystemPromptFile)}
 `));
           process.exit(1);
         }
@@ -559379,7 +559422,7 @@ ${addendum}` : addendum;
             errors4 = result.errors;
           }
         } else {
-          const configPath = resolve43(configItem);
+          const configPath = resolve44(configItem);
           const result = parseMcpConfigFromFilePath({
             filePath: configPath,
             expandVars: true,
@@ -560124,8 +560167,8 @@ ${customInstructions}` : customInstructions;
         return connectMcpBatch(dedupedRemoteConnectors, "claudeai");
       });
       let remoteConnectorTimer;
-      const remoteConnectorTimedOut = await Promise.race([remoteConnectorConnect.then(() => false), new Promise((resolve44) => {
-        remoteConnectorTimer = setTimeout((r) => r(true), REMOTE_CONNECTOR_MCP_TIMEOUT_MS, resolve44);
+      const remoteConnectorTimedOut = await Promise.race([remoteConnectorConnect.then(() => false), new Promise((resolve45) => {
+        remoteConnectorTimer = setTimeout((r) => r(true), REMOTE_CONNECTOR_MCP_TIMEOUT_MS, resolve45);
       })]);
       if (remoteConnectorTimer)
         clearTimeout(remoteConnectorTimer);
@@ -560703,7 +560746,7 @@ Usage: socc --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("0.1.15 (SOCC)", "-v, --version", "Output the version number");
+  }).version("0.1.17 (SOCC)", "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -561187,7 +561230,7 @@ var init_main3 = __esm(() => {
   profileCheckpoint("main_tsx_entry");
   startMdmRawRead();
   startKeychainPrefetch();
-  process.env.SOCC_PACKAGE_ROOT ??= resolve43(dirname62(fileURLToPath8(import.meta.url)), "..");
+  process.env.SOCC_PACKAGE_ROOT ??= resolve44(dirname62(fileURLToPath8(import.meta.url)), "..");
   profileCheckpoint("main_tsx_imports_loaded");
   if (isBeingDebugged()) {
     process.exit(1);
@@ -561334,7 +561377,7 @@ if (false) {}
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    console.log(`${"0.1.15"} (SOCC)`);
+    console.log(`${"0.1.17"} (SOCC)`);
     return;
   }
   if (args.includes("--provider")) {
@@ -561458,4 +561501,4 @@ async function main2() {
 }
 main2();
 
-//# debugId=DE38E61A6917C2A564756E2164756E21
+//# debugId=D2B086382C3CA05E64756E2164756E21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vantagesec/socc",
-  "version": "0.1.15",
+  "version": "0.1.17",
   "description": "Security operations copiloto for threat intelligence, incident response, and agentic investigation",
   "type": "module",
   "bin": {

package/scripts/bootstrap-socc-soul.mjs

@@ -1,6 +1,7 @@
 import assert from 'node:assert/strict'
 import { createHash } from 'node:crypto'
 import { existsSync } from 'node:fs'
+import { homedir } from 'node:os'
 import {
   cp,
   mkdir,
@@ -10,7 +11,7 @@ import {
   stat,
   writeFile,
 } from 'node:fs/promises'
-import { dirname, join, resolve } from 'node:path'
+import { dirname, join, relative, resolve, sep } from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 const SOC_CANONICAL_ROOT = ['socc-canonical', '.agents']
@@ -32,6 +33,105 @@ const RULE_RUNTIME_FILES = [
   { source: WORKFLOWS_DIR, file: 'SOP.md', title: 'IOC Handling SOP' },
 ]
 
+function getWindowsWorkspaceLayout({
+  platform = process.platform,
+  env = process.env,
+  home = homedir(),
+} = {}) {
+  if (platform !== 'win32') {
+    return null
+  }
+
+  const userProfile = env.USERPROFILE || env.HOME || home
+  const configHome =
+    env.SOCC_CONFIG_DIR && env.SOCC_CONFIG_DIR.trim().length > 0
+      ? resolve(env.SOCC_CONFIG_DIR)
+      : join(userProfile, '.socc')
+  const documentsDir = join(userProfile, 'Documents')
+
+  return {
+    userProfile,
+    configHome,
+    documentsDir,
+    generatedAlertsDir: join(documentsDir, 'Alertas_Gerados'),
+    modelsDir: join(documentsDir, 'Modelos'),
+    generatedNotesDir: join(documentsDir, 'Notas_Geradas'),
+    trainingDir: join(documentsDir, 'Training'),
+  }
+}
+
+export async function ensureWindowsWorkspaceLayout(options = {}) {
+  const layout = getWindowsWorkspaceLayout(options)
+  if (!layout) {
+    return null
+  }
+
+  await Promise.all([
+    mkdir(layout.configHome, { recursive: true }),
+    mkdir(layout.generatedAlertsDir, { recursive: true }),
+    mkdir(layout.modelsDir, { recursive: true }),
+    mkdir(layout.generatedNotesDir, { recursive: true }),
+    mkdir(layout.trainingDir, { recursive: true }),
+  ])
+
+  return layout
+}
+
+function applyWindowsWorkspacePaths(ruleBundle, workspaceLayout) {
+  if (!workspaceLayout) {
+    return ruleBundle
+  }
+
+  const configHomePath = 'USERPROFILE\\.socc'
+  const alertsPath = 'USERPROFILE\\Documents\\Alertas_Gerados'
+  const modelsPath = 'USERPROFILE\\Documents\\Modelos'
+  const notesPath = 'USERPROFILE\\Documents\\Notas_Geradas'
+  const trainingPath = 'USERPROFILE\\Documents\\Training'
+  const trainingPattern = `${trainingPath}\\Pensamento_Ofensa_*.md`
+  const trainingFilePath = `${trainingPath}\\Pensamento_Ofensa_[ID].md`
+
+  const replacements = [
+    ['`Modelos\\`', `\`${modelsPath}\``],
+    ['`Training\\Pensamento_Ofensa_*.md`', `\`${trainingPattern}\``],
+    ['`Training\\Pensamento_Ofensa_[ID].md`', `\`${trainingFilePath}\``],
+  ]
+
+  let rewrittenBundle = ruleBundle
+  for (const [from, to] of replacements) {
+    rewrittenBundle = rewrittenBundle.split(from).join(to)
+  }
+
+  return [
+    rewrittenBundle.trimEnd(),
+    '',
+    '## Windows Workspace Paths',
+    '',
+    '---',
+    'trigger: always_on',
+    '---',
+    '',
+    '# Diretórios operacionais no Windows',
+    '',
+    'No Windows, use estes diretórios como destino oficial dos artefatos do SOCC, sempre sob `USERPROFILE\\Documents`:',
+    '',
+    `- Configuração do usuário: \`${configHomePath}\``,
+    `- Alertas gerados: \`${alertsPath}\``,
+    `- Modelos do analista: \`${modelsPath}\``,
+    `- Notas geradas: \`${notesPath}\``,
+    `- Treinamento: \`${trainingPath}\``,
+    '',
+    'Regras obrigatórias:',
+    '',
+    '1. Nunca use a pasta do repositório do SOCC como destino para alertas, notas, modelos ou arquivos de treinamento.',
+    `2. Consulte modelos somente em \`${modelsPath}\`.`,
+    `3. Salve alertas finais em \`${alertsPath}\`.`,
+    `4. Salve notas de encerramento em \`${notesPath}\`.`,
+    `5. Salve arquivos de treinamento em \`${trainingPath}\`.`,
+    '6. A pasta `.socc` do pacote é a referência final do runtime no Windows; `socc-canonical` não deve ser tratado como diretório operacional.',
+    '',
+  ].join('\n')
+}
+
 function findPackageRoot(startDir) {
   let current = resolve(startDir)
 
@@ -177,7 +277,7 @@ ${parts.skill.trim()}
 `
 }
 
-async function buildRuntimeRules(packageRoot) {
+async function buildRuntimeRules(packageRoot, options = {}) {
   const sections = []
   for (const section of RULE_RUNTIME_FILES) {
     const sourcePath = join(packageRoot, ...section.source, section.file)
@@ -194,10 +294,15 @@ async function buildRuntimeRules(packageRoot) {
 
   const runtimeRulesDir = join(packageRoot, ...RUNTIME_RULES_DIR)
   const runtimeRulesPath = join(runtimeRulesDir, 'socc-business-rules.md')
+  const workspaceLayout = getWindowsWorkspaceLayout(options)
 
   await rm(runtimeRulesDir, { recursive: true, force: true })
   await mkdir(runtimeRulesDir, { recursive: true })
-  await writeFile(runtimeRulesPath, composeRuleBundle(sections), 'utf8')
+  await writeFile(
+    runtimeRulesPath,
+    applyWindowsWorkspacePaths(composeRuleBundle(sections), workspaceLayout),
+    'utf8',
+  )
 
   return {
     runtimeRulesDir,
@@ -289,6 +394,9 @@ async function buildManifest({
   runtimeReferencesDir,
   runtimeSkills,
 }) {
+  const toManifestPath = path =>
+    relative(packageRoot, path).split(sep).join('/')
+
   const canonicalRoot = join(packageRoot, ...SOC_COPILOT_DIR)
   const sourceFiles = {
     identity: join(canonicalRoot, 'identity.md'),
@@ -308,24 +416,36 @@ async function buildManifest({
   const sourceBlocks = {}
   for (const [name, path] of Object.entries(sourceFiles)) {
     if (existsSync(path)) {
-      sourceBlocks[name] = await fileMetadata(path)
+      const metadata = await fileMetadata(path)
+      sourceBlocks[name] = {
+        ...metadata,
+        path: toManifestPath(metadata.path),
+      }
     }
   }
 
   return {
     generatedAt: new Date().toISOString(),
-    sourceRoot: canonicalRoot,
+    sourceRoot: toManifestPath(canonicalRoot),
     upstreamRoot: upstreamRoot || null,
-    generatedAgentPath,
-    generatedManifestPath,
-    runtimeAgentPath,
-    runtimeRulesPath,
-    runtimeSkillsDir,
-    runtimeReferencesDir,
+    generatedAgentPath: toManifestPath(generatedAgentPath),
+    generatedManifestPath: toManifestPath(generatedManifestPath),
+    runtimeAgentPath: toManifestPath(runtimeAgentPath),
+    runtimeRulesPath: toManifestPath(runtimeRulesPath),
+    runtimeSkillsDir: toManifestPath(runtimeSkillsDir),
+    runtimeReferencesDir: toManifestPath(runtimeReferencesDir),
     runtimeSkillNames: runtimeSkills.map(skill => skill.name),
-    sourceFiles,
+    sourceFiles: Object.fromEntries(
+      Object.entries(sourceFiles).map(([name, path]) => [
+        name,
+        toManifestPath(path),
+      ]),
+    ),
     sourceBlocks,
-    runtimeSkills,
+    runtimeSkills: runtimeSkills.map(skill => ({
+      ...skill,
+      path: toManifestPath(skill.path),
+    })),
   }
 }
 
@@ -365,8 +485,12 @@ export async function syncSoccSoul(
   {
     upstreamRoot = null,
     skillNames = null,
+    platform = process.platform,
+    env = process.env,
   } = {},
 ) {
+  await ensureWindowsWorkspaceLayout({ platform, env })
+
   if (upstreamRoot) {
     await syncSoccCanonicalFromUpstream(packageRoot, upstreamRoot)
   }
@@ -416,7 +540,10 @@ export async function syncSoccSoul(
     writeFile(runtimeAgentPath, prompt, 'utf8'),
   ])
 
-  const runtimeRules = await buildRuntimeRules(packageRoot)
+  const runtimeRules = await buildRuntimeRules(packageRoot, {
+    platform,
+    env,
+  })
   const runtimeReferences = await buildRuntimeReferences(packageRoot)
   const runtimeSkills = await buildRuntimeSkills(packageRoot, skillNames)
 
@@ -471,6 +598,8 @@ async function main() {
   const packageRoot = findPackageRoot(scriptDir)
   const { upstreamRoot } = parseArgs(process.argv.slice(2))
 
+  await ensureWindowsWorkspaceLayout()
+
   if (!upstreamRoot && !hasCanonicalSource(packageRoot)) {
     if (!hasPackagedRuntime(packageRoot)) {
       throw new Error(