create-agentfs 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 AgentFS Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,238 @@
+# AgentFS: The OS for AI Agents in Your Vault
+
+**AgentFS is a CLI tool that turns your Obsidian vault into a standardized "Operating System" for AI agents.** It provides a single source of truth for your identity, memory, and security, allowing multiple AI agents (Claude, Cursor, OpenClaw) to work in perfect harmony in the same space.
+
+## 🔴 The Problem: Agent Fragmentation
+Currently, every AI tool is a silo. 
+- **Claude Code** needs `CLAUDE.md`. 
+- **Cursor** needs `.cursorrules`. 
+- **OpenClaw** needs `.omc/project-memory.json`. 
+
+When you use multiple agents, you have to maintain your rules, identity, and context in three different places. They don't share memory. They don't respect the same security rules. They are strangers in your vault every time you start a new session.
+
+## 🟢 The Solution: A Unified Kernel
+AgentFS introduces a **Kernel Space** (`.agentos/`) to your vault. You define who you are and what you remember once, and AgentFS **compiles** that state into native configurations for every agent you use.
+
+- **One Source of Truth**: Edit your identity in one place; update all agents with one command.
+- **Persistent Memory**: A standardized memory system (Tulving's taxonomy) that agents actually use and update.
+- **AppArmor-Style Security**: Real enforcement that prevents agents from reading your secrets or core system files.
+- **Linux-Style FHS**: A predictable directory structure that agents understand immediately.
+
+```
+┌─────────────────────────────────────────────────┐
+│               USER SPACE (vault/)               │
+│   Human-readable folders, notes, content        │
+│   Obsidian sees and renders everything           │
+├─────────────────────────────────────────────────┤
+│          NATIVE RUNTIMES (per-agent)            │
+│   .claude/  .omc/  .cursor/  .obsidian/         │
+│   Native configs — each agent reads its own      │
+├─────────────────────────────────────────────────┤
+│         KERNEL SPACE (.agentos/)                │
+│   Source of truth → compiles to native formats   │
+│   manifest.yaml, init.d/, memory/, cron.d/      │
+└─────────────────────────────────────────────────┘
+```
+
+Five rules, stolen from Unix:
+
+1. **Everything is a file.** Memory, tasks, skills, configs — markdown. The agent doesn't query a database. It reads files.
+2. **Do one thing well.** Each file is responsible for one thing. `stack.md` = stack. `brief.md` = vision. Don't mix.
+3. **Programs work together.** Frontmatter is the API contract between human, agent, and Obsidian. Wikilinks are pipes.
+4. **Text is the universal interface.** Markdown is human-readable, agent-parseable, Obsidian-renderable.
+5. **No captive UI.** The vault works without Obsidian, without any agent, without cloud. `cat` and `grep` are enough.
+
+## How It Works
+
+### Kernel Space: `.agentos/`
+
+```
+.agentos/
+├── manifest.yaml              ← what is this vault (name, profile, paths, agents)
+├── init.d/                    ← boot sequence (agent-agnostic)
+│   ├── 00-identity.md         ← who am I, whose vault, roles
+│   ├── 10-memory.md           ← load memory (semantic on boot, rest lazy)
+│   ├── 20-today.md            ← load daily note + tasks
+│   └── 30-projects.md         ← load active projects
+├── compile.d/                 ← per-agent "drivers"
+│   ├── claude/                ← manifest → CLAUDE.md + .claude/settings.json
+│   ├── openclaw/              ← manifest → SOUL.md + .omc/
+│   └── cursor/                ← manifest → .cursorrules
+├── security/                  ← AppArmor-style profiles + secrets vault
+│   ├── policy.yaml            ← Mandatory Access Control rules
+│   ├── modules/               ← domain-specific security (crypto, web, infra)
+│   └── secrets/               ← SOPS/age encrypted values (agent CANNOT read)
+├── cron.d/                    ← scheduled jobs
+│   ├── heartbeat.md           ← status updates
+│   ├── memory-consolidation.md ← end-of-session memory snapshot
+│   ├── distillation.md        ← deep cross-session pattern analysis (every 2 days)
+│   └── inbox-triage.md        ← classify new files
+├── memory/                    ← persistent agent state (Tulving's taxonomy)
+│   ├── semantic.md            ← facts, preferences (always loaded at boot)
+│   ├── episodic/              ← timestamped events (lazy-loaded by date)
+│   ├── procedural/            ← learned skills (lazy-loaded by name)
+│   └── corrections.md         ← past mistakes
+└── proc/                      ← runtime state (ephemeral, gitignored)
+```
+
+### Compile Pipeline
+
+Write once in `.agentos/`, compile to all native formats:
+
+```
+              .agentos/
+              manifest.yaml
+              init.d/ + memory/
+                    │
+              agentfs compile
+                    │
+         ┌──────────┼──────────┐
+         ▼          ▼          ▼
+    claude/     openclaw/    cursor/
+         │          │          │
+         ▼          ▼          ▼
+   CLAUDE.md    SOUL.md    .cursorrules
+   .claude/     .omc/      .cursor/
+   settings     project-
+               memory.json
+
+         + AGENTS.md (vault router)
+```
+
+```bash
+agentfs compile              # manifest → all native formats
+agentfs compile claude       # only Claude configs
+agentfs compile --dry-run    # preview changes
+agentfs import memory        # sync memory from native → canonical
+```
+
+### Linux FHS Mapping
+
+Vault directories map to Linux filesystem hierarchy:
+
+| Linux FHS | Vault Path | Purpose |
+|-----------|-----------|---------|
+| `/tmp` | `Inbox/` | Entry point for new notes |
+| `/var/log` | `Daily/` | Daily journals |
+| `/var/spool` | `Tasks/` | Task queues |
+| `/home` | `Projects/` | Active projects |
+| `/srv` | `Content/` | Content for publishing |
+| `/usr/share` | `Knowledge/` | Shared knowledge base |
+| `/etc` | `.agentos/` | System configuration |
+| `/var/lib` | `.agentos/memory/` | Persistent agent state |
+| `/etc/init.d` | `.agentos/init.d/` | Boot scripts |
+| `/etc/cron.d` | `.agentos/cron.d/` | Scheduled jobs |
+| `/proc` | `.agentos/proc/` | Runtime state (ephemeral) |
+
+### Memory System (Tulving's Taxonomy)
+
+Agent memory is split into three types based on cognitive science:
+
+**Semantic** (`semantic.md`) — context-free facts. Always loaded at boot. ~10x token savings vs loading everything.
+```
+PREF: no emoji in headings
+FACT: [active] primary stack is Kubernetes + ArgoCD
+PATTERN: [confidence:0.85] more productive in the morning
+AVOID: don't suggest LangChain
+```
+
+**Episodic** (`episodic/YYYY-MM-DD.md`) — timestamped events. Lazy-loaded when needed.
+
+**Procedural** (`procedural/{skill}.md`) — learned skills and workflows. Lazy-loaded by name.
+
+Confidence scoring with decay: new patterns start at 0.3, confirmed +0.2, denied -0.3, inactive 30 days -0.1. Below 0.1 = superseded. Facts use immutable append — never deleted, marked as `[superseded:{date}]`.
+
+### Security Model (5-Level Defense in Depth)
+
+```
+Level 5: ENCRYPTION AT REST    — SOPS/age for secrets, git-crypt for PII
+Level 4: SECRETS VAULT          — agent NEVER sees raw values, only references
+Level 3: APPARMOR PROFILES      — policy.yaml → .claude/settings.json deny rules
+Level 2: AGENT POLICY           — .agentignore + Security Policy in CLAUDE.md
+Level 1: GIT HYGIENE            — .gitignore for runtime state
+```
+
+`policy.yaml` defines what the agent can read, write, and execute. It compiles into real enforcement — Claude Code's `permissions.deny[]` actually blocks file access. For agents without enforcement (OpenClaw), it falls back to advisory text.
+
+Composable security modules: base policy + domain-specific extensions (crypto, web, infra, cloud, ci-cd).
+
+### Boot Sequence (SysVinit Runlevels)
+
+```
+Runlevel 0: HALT        — agent off
+Runlevel 1: IDENTITY    — load who I am, whose vault
+Runlevel 2: MEMORY      — load semantic memory (episodic + procedural lazy)
+Runlevel 3: CONTEXT     — load today's daily note + tasks
+Runlevel 4: PROJECTS    — load active projects
+Runlevel 5: FULL        — interactive mode (all systems go)
+Runlevel 6: SHUTDOWN    — memory consolidation, save state
+```
+
+Progressive disclosure: only semantic memory loaded at boot. Episodic and procedural memory loaded on demand. Reduces boot context by ~10x.
+
+## Three Profiles
+
+| Profile | For | Key Features |
+|---------|-----|-------------|
+| `personal` | Solo engineer, creator, builder | Career pipeline, content publishing, engineering knowledge base |
+| `company` | Team with shared knowledge | RBAC, team directories, ADR, postmortems, onboarding path |
+| `shared` | Multi-user collaborative | Per-user spaces, shared projects, user config files |
+
+## CLI
+
+```bash
+# Scaffold
+npx create-agentfs                    # interactive setup
+
+# Compile
+agentfs compile                       # all native formats
+agentfs compile claude --dry-run      # preview Claude changes
+
+# Memory
+agentfs memory show                   # show semantic memory
+agentfs memory consolidate            # manual consolidation
+
+# Security
+agentfs security mode enforce         # enforce | complain | disabled
+agentfs security add crypto           # add domain-specific module
+agentfs security test                 # dry-run policy check
+
+# Maintenance
+agentfs doctor                        # vault health check (+ agnix 385 rules)
+agentfs triage                        # classify Inbox/ files
+agentfs onboard                       # agent-led interview → identity + memory
+agentfs sync                          # bidirectional manifest ↔ compiled outputs
+```
+
+**Release v0.1.0** — Core architecture and all planned epics are fully implemented. 
+
+### Core Documentation
+- 🚀 **[Quick Start Guide](docs/quickstart.md)** — Go here if you are a human.
+- 🤖 **[AI Agent Manual](docs/ai-manual.md)** — Tell your AI to read this file first. Yes, AgentFS is 100% **AI-Native** and provides an explicit instruction manual for the AI itself.
+- 🏛️ **[Architecture Document](docs/architecture.md)** — Full design document (v3, 17 sections).
+- 🔍 **[Competitive Research](docs/competitive-research.md)** — Analysis of 12 existing repos and what we took from them.
+- 🗺️ **[AGENTS.md](AGENTS.md)** — Vault router (generated).
+
+## Roadmap
+
+All phases (1 through 11) have been successfully completed:
+- ✅ Phase 1:    Spec → review → approve
+- ✅ Phase 2:    MVP — npx create-agentfs: personal + compile.d/claude
+- ✅ Phase 2.5:  Onboard — agent-led interview
+- ✅ Phase 3:    Memory — Tulving taxonomy + confidence scoring
+- ✅ Phase 4:    Cron — consolidation + distillation + inbox-triage
+- ✅ Phase 5:    Security — policy.yaml + AppArmor + input validation
+- ✅ Phase 6:    Secrets — SOPS/age + exec --with-secrets
+- ✅ Phase 7:    Sync — bidirectional manifest ↔ CLAUDE.md
+- ✅ Phase 8:    compile.d/openclaw + memory sync
+- ✅ Phase 9:    Company + Shared profiles
+- ✅ Phase 10:   Full CLI (doctor + agnix, triage, migrate)
+- ✅ Phase 11:   Community — npm publish, contributing guide
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines on adding agent compilers and security modules.
+
+## License
+
+MIT

package/dist/cli.d.ts

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+/**
+ * AgentFS CLI entry point.
+ *
+ * Invoked as `npx create-agentfs` or `agentfs <subcommand>`.
+ *
+ * When run with no arguments (the `npx create-agentfs` case) it prints a
+ * welcome message and exits — scaffolding is not yet implemented.
+ *
+ * When run with a known subcommand it prints a "not yet implemented" stub
+ * message.  When run with an unknown subcommand it prints usage help.
+ *
+ * No external arg-parsing library is used; everything is read from
+ * `process.argv` directly.
+ *
+ * @module cli
+ */
+/** CLI version — kept in sync with package.json by convention. */
+export declare const VERSION = "0.1.0";
+/**
+ * All subcommands recognised by the CLI.
+ *
+ * - `init`     — scaffold a new AgentFS vault (same as create-agentfs)
+ * - `compile`  — compile .agentos/ kernel into native agent configs
+ * - `onboard`  — interactive first-run wizard (create-agentfs flow)
+ * - `memory`   — inspect / edit Tulving memory layers
+ * - `security` — manage AppArmor-style security policy
+ * - `doctor`   — health-check the vault and diagnose problems
+ * - `triage`   — process Inbox/ using cron triage rules
+ * - `migrate`  — migrate an existing vault to AgentFS layout
+ * - `sync`     — sync compiled outputs to all registered agents
+ * - `import`   — import external notes/files into the vault
+ * - `exec`     — run a one-off .agentos/cron.d/ job manually
+ * - `status`   — print current vault and agent runtime status
+ */
+export type Subcommand = 'compile' | 'onboard' | 'memory' | 'cron' | 'security' | 'secret' | 'doctor' | 'triage' | 'migrate' | 'sync' | 'import' | 'exec' | 'status';
+/**
+ * CLI main function.
+ *
+ * Reads `process.argv`, dispatches to the appropriate handler, and calls
+ * `process.exit` with the resolved exit code.
+ *
+ * Exported so that tests can invoke the CLI programmatically without
+ * spawning a child process.
+ *
+ * @param argv - Argument vector (defaults to `process.argv`). The first two
+ *               entries (node executable + script path) are always skipped.
+ * @returns The exit code that was (or would be) passed to `process.exit`.
+ */
+export declare function main(argv?: string[]): Promise<number>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;GAeG;AA6BH,kEAAkE;AAClE,eAAO,MAAM,OAAO,UAAU,CAAC;AAE/B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,UAAU,GAClB,SAAS,GACT,SAAS,GACT,QAAQ,GACR,MAAM,GACN,UAAU,GACV,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,MAAM,GACN,QAAQ,GACR,MAAM,GACN,QAAQ,CAAC;AAyIb;;;;;;;;;;;;GAYG;AACH,wBAAsB,IAAI,CAAC,IAAI,GAAE,MAAM,EAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkDzE"}

package/dist/cli.js

@@ -0,0 +1,246 @@
+#!/usr/bin/env node
+/**
+ * AgentFS CLI entry point.
+ *
+ * Invoked as `npx create-agentfs` or `agentfs <subcommand>`.
+ *
+ * When run with no arguments (the `npx create-agentfs` case) it prints a
+ * welcome message and exits — scaffolding is not yet implemented.
+ *
+ * When run with a known subcommand it prints a "not yet implemented" stub
+ * message.  When run with an unknown subcommand it prints usage help.
+ *
+ * No external arg-parsing library is used; everything is read from
+ * `process.argv` directly.
+ *
+ * @module cli
+ */
+// Suppress "declared but never read" errors for the imported types — they are
+// intentional forward references that document what each stub will receive.
+void 0;
+void 0;
+void 0;
+import { compileCommand } from './commands/compile.js';
+import { onboardCommand } from './commands/onboard.js';
+import { memoryCommand } from './commands/memory.js';
+import { cronCommand } from './commands/cron.js';
+import { securityCommand } from './commands/security.js';
+import { secretCommand } from './commands/secret.js';
+import { importCommand, syncCommand } from './commands/sync.js';
+import { doctorCommand, triageCommand, migrateCommand } from './commands/doctor.js';
+import { runSetupPrompts, createDefaultAnswers } from './generators/prompts.js';
+import { scaffold, formatScaffoldSummary } from './generators/scaffold.js';
+/** CLI version — kept in sync with package.json by convention. */
+export const VERSION = '0.1.0';
+/** Set used for O(1) membership checks without type widening. */
+const KNOWN_SUBCOMMANDS = new Set([
+    'compile',
+    'onboard',
+    'memory',
+    'cron',
+    'security',
+    'secret',
+    'doctor',
+    'triage',
+    'migrate',
+    'sync',
+    'import',
+    'exec',
+    'status',
+]);
+/** Returns true when `value` is a recognised subcommand. */
+function isSubcommand(value) {
+    return KNOWN_SUBCOMMANDS.has(value);
+}
+// ---------------------------------------------------------------------------
+// Output helpers
+// ---------------------------------------------------------------------------
+/** Print a line to stdout. */
+function print(line) {
+    process.stdout.write(line + '\n');
+}
+/** Print a line to stderr. */
+function printErr(line) {
+    process.stderr.write(line + '\n');
+}
+// ---------------------------------------------------------------------------
+// Message templates
+// ---------------------------------------------------------------------------
+/** Printed when the binary is invoked with no arguments (`npx create-agentfs`). */
+function printWelcome() {
+    print('');
+    print(`AgentFS v${VERSION}`);
+    print('Scaffold your Obsidian vault as a filesystem-based OS for AI agents.');
+    print('');
+}
+/** Parses flags for the scaffold command. */
+async function runScaffold(args) {
+    printWelcome();
+    let targetDir;
+    let profile;
+    let nonInteractive = false;
+    // Simple ad-hoc parser
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === '--output' || arg === '-o') {
+            targetDir = args[++i];
+        }
+        else if (arg === '--profile' || arg === '-p') {
+            profile = args[++i];
+        }
+        else if (arg === '--non-interactive') {
+            nonInteractive = true;
+        }
+        else if (!arg.startsWith('-') && !targetDir) {
+            // Positional target directory
+            targetDir = arg;
+        }
+    }
+    let answers;
+    if (nonInteractive) {
+        answers = createDefaultAnswers({
+            targetDir: targetDir ?? process.cwd(),
+            profile: profile ?? 'personal',
+        });
+    }
+    else {
+        answers = await runSetupPrompts(targetDir);
+    }
+    try {
+        const result = await scaffold(answers);
+        print(formatScaffoldSummary(result));
+        return 0;
+    }
+    catch (err) {
+        printErr(`Scaffolding failed: ${err instanceof Error ? err.message : String(err)}`);
+        return 1;
+    }
+}
+/** Printed when an unknown subcommand is supplied. */
+function printUsage() {
+    print('');
+    print(`agentfs v${VERSION} — filesystem-based OS for AI agents`);
+    print('');
+    print('Usage:');
+    print('  npx create-agentfs [dir] [opts]  Scaffold a new AgentFS vault');
+    print('  agentfs <subcommand> [opts]      Run a post-init command');
+    print('');
+    print('Scaffold Options:');
+    print('  --output, -o <dir>         Target directory');
+    print('  --profile, -p <name>       Vault profile (personal/company/shared)');
+    print('  --non-interactive          Bypass prompts and use default values');
+    print('');
+    print('Subcommands:');
+    print('  init       Alias for npx create-agentfs');
+    print('  compile    Compile .agentos/ kernel into native agent configs');
+    print('  onboard    Interactive first-run setup wizard');
+    print('  memory     Inspect and edit Tulving memory layers');
+    print('  security   Manage AppArmor-style security policy');
+    print('  doctor     Health-check the vault and diagnose problems');
+    print('  triage     Process Inbox/ using cron triage rules');
+    print('  migrate    Migrate an existing vault to AgentFS layout');
+    print('  sync       Sync compiled outputs to all registered agents');
+    print('  import     Import external notes/files into the vault');
+    print('  exec       Run a one-off cron.d/ job manually');
+    print('  status     Print current vault and agent runtime status');
+    print('');
+    print('Examples:');
+    print('  agentfs compile --dry-run');
+    print('  agentfs status');
+    print('  agentfs doctor');
+    print('');
+}
+/** Printed when a known subcommand stub is invoked. */
+function printStub(subcommand) {
+    print(`agentfs ${subcommand}: not yet implemented`);
+}
+// ---------------------------------------------------------------------------
+// Main
+// ---------------------------------------------------------------------------
+/**
+ * CLI main function.
+ *
+ * Reads `process.argv`, dispatches to the appropriate handler, and calls
+ * `process.exit` with the resolved exit code.
+ *
+ * Exported so that tests can invoke the CLI programmatically without
+ * spawning a child process.
+ *
+ * @param argv - Argument vector (defaults to `process.argv`). The first two
+ *               entries (node executable + script path) are always skipped.
+ * @returns The exit code that was (or would be) passed to `process.exit`.
+ */
+export async function main(argv = process.argv) {
+    // argv[0] = node, argv[1] = script path, argv[2+] = user args
+    const args = argv.slice(2);
+    const subcommand = args[0];
+    // Help flags — delegate to usage first (can be used with no subcommands).
+    if (subcommand === '--help' || subcommand === '-h' || subcommand === 'help') {
+        printUsage();
+        return 0;
+    }
+    // Version flags.
+    if (subcommand === '--version' || subcommand === '-v') {
+        print(VERSION);
+        return 0;
+    }
+    // Detect if running as create-agentfs
+    const isCreateBin = argv[1] && (argv[1].endsWith('create-agentfs') || argv[1].endsWith('create-agentfs.js'));
+    // If no arguments or the command starts with a flag (like npx create-agentfs --non-interactive)
+    // or it is explicitly "init", run the scaffolder.
+    if (subcommand === undefined || subcommand.startsWith('-') || subcommand === 'init' || (isCreateBin && !isSubcommand(subcommand))) {
+        // If it's pure "init", slice it out so we just parse the trailing args.
+        const scaffoldArgs = subcommand === 'init' ? args.slice(1) : args;
+        return runScaffold(scaffoldArgs);
+    }
+    // Known subcommand — dispatch to implemented handlers, stub the rest.
+    if (isSubcommand(subcommand)) {
+        const subArgs = args.slice(1);
+        if (subcommand === 'compile')
+            return compileCommand(subArgs);
+        if (subcommand === 'onboard')
+            return onboardCommand(subArgs);
+        if (subcommand === 'memory')
+            return memoryCommand(subArgs);
+        if (subcommand === 'cron')
+            return cronCommand(subArgs);
+        if (subcommand === 'security')
+            return securityCommand(subArgs);
+        if (subcommand === 'secret')
+            return secretCommand(subArgs);
+        if (subcommand === 'import')
+            return importCommand(subArgs);
+        if (subcommand === 'sync')
+            return syncCommand(subArgs);
+        if (subcommand === 'doctor')
+            return doctorCommand(subArgs);
+        if (subcommand === 'triage')
+            return triageCommand(subArgs);
+        if (subcommand === 'migrate')
+            return migrateCommand(subArgs);
+        printStub(subcommand);
+        return 0;
+    }
+    // Unknown subcommand → usage + non-zero exit.
+    printErr(`agentfs: unknown subcommand '${subcommand}'`);
+    printUsage();
+    return 1;
+}
+// ---------------------------------------------------------------------------
+// Bootstrap — only run when executed directly (not imported in tests).
+// ---------------------------------------------------------------------------
+// In ESM with NodeNext module resolution the canonical way to detect the
+// main module is to compare import.meta.url against the resolved entry URL.
+// We call `process.exit` here so tests that import `main` are not affected.
+const isEntryPoint = 
+// On POSIX the argv[1] path matches the file URL when run via `node`.
+process.argv[1] !== undefined &&
+    import.meta.url.endsWith(
+    // Normalise Windows backslashes just in case.
+    process.argv[1].replace(/\\/g, '/').split('/').pop() ?? '');
+if (isEntryPoint) {
+    main().then((code) => {
+        process.exit(code);
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;GAeG;AAWH,8EAA8E;AAC9E,4EAA4E;AAC5E,KAAM,CAAyB,CAAC;AAChC,KAAM,CAA8B,CAAC;AACrC,KAAM,CAA+B,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAG3E,kEAAkE;AAClE,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAiC/B,iEAAiE;AACjE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS;IACxC,SAAS;IACT,SAAS;IACT,QAAQ;IACR,MAAM;IACN,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;CACc,CAAC,CAAC;AAE1B,4DAA4D;AAC5D,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,8BAA8B;AAC9B,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,8BAA8B;AAC9B,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,mFAAmF;AACnF,SAAS,YAAY;IACnB,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;IAC7B,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC9E,KAAK,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAED,6CAA6C;AAC7C,KAAK,UAAU,WAAW,CAAC,IAAc;IACvC,YAAY,EAAE,CAAC;IAEf,IAAI,SAA6B,CAAC;IAClC,IAAI,OAA2B,CAAC;IAChC,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,uBAAuB;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACvC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC/C,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;YACvC,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9C,8BAA8B;YAC9B,SAAS,GAAG,GAAG,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC;IACZ,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,GAAG,oBAAoB,CAAC;YAC7B,SAAS,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE;YACrC,OAAO,EAAG,OAAmB,IAAI,UAAU;SAC5C,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,sDAAsD;AACtD,SAAS,UAAU;IACjB,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,YAAY,OAAO,sCAAsC,CAAC,CAAC;IACjE,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChB,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACzE,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACpE,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC3B,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACvD,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC9E,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAC5E,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,cAAc,CAAC,CAAC;IACtB,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACnD,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACzE,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACzD,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC7D,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC5D,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACnE,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC7D,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAClE,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACrE,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACjE,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACzD,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACnE,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,WAAW,CAAC,CAAC;IACnB,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACrC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC1B,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAED,uDAAuD;AACvD,SAAS,SAAS,CAAC,UAAsB;IACvC,KAAK,CAAC,WAAW,UAAU,uBAAuB,CAAC,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAiB,OAAO,CAAC,IAAI;IACtD,8DAA8D;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAE3B,0EAA0E;IAC1E,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC5E,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,CAAC;IACX,CAAC;IAED,iBAAiB;IACjB,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,OAAO,CAAC,CAAC;IACX,CAAC;IAED,sCAAsC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAE7G,gGAAgG;IAChG,kDAAkD;IAClD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,MAAM,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAClI,wEAAwE;QACxE,MAAM,YAAY,GAAG,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClE,OAAO,WAAW,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAED,sEAAsE;IACtE,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,UAAU,KAAK,QAAQ;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,UAAU,KAAK,MAAM;YAAE,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,UAAU,KAAK,UAAU;YAAE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,UAAU,KAAK,QAAQ;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,UAAU,KAAK,QAAQ;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,UAAU,KAAK,MAAM;YAAE,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,UAAU,KAAK,QAAQ;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,UAAU,KAAK,QAAQ;YAAE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7D,SAAS,CAAC,UAAU,CAAC,CAAC;QACtB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,8CAA8C;IAC9C,QAAQ,CAAC,gCAAgC,UAAU,GAAG,CAAC,CAAC;IACxD,UAAU,EAAE,CAAC;IACb,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAE9E,yEAAyE;AACzE,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,YAAY;AAChB,sEAAsE;AACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;IAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ;IACtB,8CAA8C;IAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAC3D,CAAC;AAEJ,IAAI,YAAY,EAAE,CAAC;IACjB,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACnB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/compile.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `agentfs compile` command implementation.
+ *
+ * Reads `.agentos/manifest.yaml`, runs the appropriate compiler driver(s),
+ * always regenerates `AGENT-MAP.md`, and writes only files marked as managed
+ * (`output.managed === true`).
+ *
+ * Usage:
+ * ```
+ * agentfs compile                  # compile all agents from manifest
+ * agentfs compile claude           # compile one agent only
+ * agentfs compile --dry-run        # preview without writing
+ * agentfs compile claude --dry-run # preview for one agent
+ * ```
+ *
+ * @module commands/compile
+ */
+import type { CompileContext } from '../types/index.js';
+/**
+ * Validate the compile context and return a list of warning messages.
+ *
+ * These are advisory only — warnings do not block compilation.
+ * Callers should print warnings to stderr before proceeding.
+ *
+ * @param context - The compile context to validate
+ * @returns Array of human-readable warning strings (empty if all clear)
+ */
+export declare function validateContext(context: CompileContext): string[];
+/**
+ * Entry point for the `agentfs compile` subcommand.
+ *
+ * Orchestrates:
+ * 1. Building the compile context (reads manifest + init.d + memory).
+ * 2. Running the requested compiler driver(s).
+ * 3. Always generating AGENT-MAP.md.
+ * 4. Writing only outputs where `managed === true` (ownership protection).
+ * 5. Printing a human-readable summary.
+ *
+ * Ownership protection: this function never writes a file where
+ * `output.managed === false`. Unmanaged files are reported in the summary
+ * as skipped so callers can observe the decision.
+ *
+ * @param args - Arguments after the `compile` subcommand token
+ *               (i.e. `process.argv.slice(3)` when called from the CLI)
+ * @returns 0 on success, 1 on error
+ */
+export declare function compileCommand(args: string[]): Promise<number>;
+//# sourceMappingURL=compile.d.ts.map

package/dist/commands/compile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../src/commands/compile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAgB,cAAc,EAAgC,MAAM,mBAAmB,CAAC;AAwHpG;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,EAAE,CAmBjE;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyGpE"}