invos 1.0.0

package/kit/scripts/validar.sh

@@ -0,0 +1,206 @@
+#!/bin/bash
+# Valida se o starter kit está configurado corretamente
+#
+# Modos:
+#   bash scripts/validar.sh              → só estrutura (1–4). OK pro template de ship.
+#   bash scripts/validar.sh --pos-onboard → estrutura + FAIL se placeholders restarem
+#                                          (use depois do onboard / na máquina do comprador).
+
+set -euo pipefail
+
+POS_ONBOARD=0
+for arg in "$@"; do
+  case "$arg" in
+    --pos-onboard) POS_ONBOARD=1 ;;
+    -h|--help)
+      echo "Uso: bash scripts/validar.sh [--pos-onboard]"
+      echo "  (default)     estrutura do kit — template de ship deve passar"
+      echo "  --pos-onboard estrutura + sem placeholders em memoria/"
+      exit 0
+      ;;
+  esac
+done
+
+ERROS=0
+echo "=== Validando INVOS Starter Kit ==="
+if [ "$POS_ONBOARD" -eq 1 ]; then
+  echo "Modo: estrutura + pós-onboard (sem placeholders)"
+else
+  echo "Modo: estrutura apenas (template de ship OK com placeholders)"
+fi
+echo ""
+
+# 1. Arquivos essenciais
+echo "1/5 — Arquivos essenciais:"
+for f in AGENTS.md MEMORY.md README.md SECURITY.md .env.example COMECE-AQUI.md; do
+  if [ -f "$f" ]; then
+    echo "  ✅ $f"
+  else
+    echo "  ❌ $f — FALTA"
+    ERROS=$((ERROS+1))
+  fi
+done
+
+# 2. .gitignore bloqueia .env
+echo ""
+echo "2/5 — Segurança:"
+if grep -q "^\.env$" .gitignore 2>/dev/null; then
+  echo "  ✅ .gitignore bloqueia .env"
+else
+  echo "  ❌ .gitignore NÃO bloqueia .env"
+  ERROS=$((ERROS+1))
+fi
+if grep -q "^\.env\.\*" .gitignore 2>/dev/null; then
+  echo "  ✅ .gitignore bloqueia .env.*"
+else
+  echo "  ❌ .gitignore NÃO bloqueia .env.*"
+  ERROS=$((ERROS+1))
+fi
+
+# 3. Memoria completa
+echo ""
+echo "3/5 — Sistema de memória:"
+for f in memoria/perfil.md memoria/empresa.md memoria/projetos.md memoria/decisoes.md memoria/insights.md memoria/ativo.md clientes/_index.md marca/marca.md; do
+  if [ -f "$f" ]; then
+    echo "  ✅ $f"
+  else
+    echo "  ❌ $f — FALTA"
+    ERROS=$((ERROS+1))
+  fi
+done
+if [ -d "clientes/_template" ] && [ -f "clientes/_template/perfil.md" ]; then
+  echo "  ✅ clientes/_template/"
+else
+  echo "  ❌ clientes/_template/ — FALTA"
+  ERROS=$((ERROS+1))
+fi
+if [ -d "marca/assets" ]; then
+  echo "  ✅ marca/assets/"
+else
+  echo "  ❌ marca/assets/ — FALTA"
+  ERROS=$((ERROS+1))
+fi
+
+# 4. Skills
+echo ""
+echo "4/5 — Skills:"
+for f in session-start session-end session-checkpoint onboard proposta design-marca social-content instagram-carrossel; do
+  if [ -f ".agents/skills/$f/SKILL.md" ]; then
+    echo "  ✅ $f"
+  else
+    echo "  ❌ $f — FALTA"
+    ERROS=$((ERROS+1))
+  fi
+done
+if [ -f "integracoes/composio/README.md" ]; then
+  echo "  ✅ integracoes/composio/"
+else
+  echo "  ❌ integracoes/composio/ — FALTA"
+  ERROS=$((ERROS+1))
+fi
+if [ -f ".agents/squads/instagram-carrossel/RUN.md" ] && [ -f ".agents/squads/instagram-carrossel/squad.yaml" ]; then
+  echo "  ✅ squad instagram-carrossel"
+else
+  echo "  ❌ squad instagram-carrossel — FALTA"
+  ERROS=$((ERROS+1))
+fi
+# Pacote único: skill instagram-carrossel + references (render/fetch/publish)
+if [ -f ".agents/skills/instagram-carrossel/SKILL.md" ] \
+  && [ -f ".agents/skills/instagram-carrossel/references/render-png.md" ] \
+  && [ -f ".agents/skills/instagram-carrossel/references/fetch-assets.md" ] \
+  && [ -f ".agents/skills/instagram-carrossel/references/publish.md" ] \
+  && [ -f ".agents/skills/instagram-carrossel/scripts/publish.js" ]; then
+  echo "  ✅ skill instagram-carrossel (pacote + references + publish.js)"
+else
+  echo "  ❌ skill instagram-carrossel incompleta (SKILL + references/ + scripts/publish.js)"
+  ERROS=$((ERROS+1))
+fi
+# Skills antigas separadas não devem existir (foram fundidas)
+for f in image-creator image-fetcher instagram-publisher; do
+  if [ -d ".agents/skills/$f" ]; then
+    echo "  ❌ skill $f ainda existe — deve viver em instagram-carrossel/references/"
+    ERROS=$((ERROS+1))
+  fi
+done
+# Paths legados OpenSquad (sem prefixo INVOS .agents/)
+if rg -n "_opensquad/_memory|_opensquad/core|(^|[^./])skills/image-creator|(^|[^./])skills/instagram-publisher" .agents/squads/instagram-carrossel --glob '!DEPENDENCIES.md' --glob '!RUN.md' 2>/dev/null | rg -v '\.agents/skills/' | head -1 | grep -q .; then
+  echo "  ❌ paths OpenSquad quebrados ainda no squad"
+  ERROS=$((ERROS+1))
+else
+  echo "  ✅ squad paths INVOS (sem deps OpenSquad quebradas)"
+fi
+
+echo ""
+echo "4b — Clientes (prestador):"
+if [ -f "clientes/README.md" ] && [ -f "clientes/_template/perfil.md" ]; then
+  echo "  ✅ clientes/_template + README"
+else
+  echo "  ❌ clientes/ incompleto"
+  ERROS=$((ERROS+1))
+fi
+
+# 5. Placeholders
+echo ""
+if [ "$POS_ONBOARD" -eq 1 ]; then
+  echo "5/5 — Placeholders (pós-onboard — FAIL se restar template):"
+  PH=0
+
+  if [ -f memoria/empresa.md ]; then
+    if grep -qE '\[seu nome\]|\[o que|PREENCHA' memoria/empresa.md 2>/dev/null; then
+      echo "  ❌ memoria/empresa.md ainda tem placeholder ([seu nome] / [o que / PREENCHA)"
+      PH=$((PH+1))
+    else
+      echo "  ✅ memoria/empresa.md sem placeholders bloqueantes"
+    fi
+  fi
+
+  if [ -f memoria/projetos.md ]; then
+    if grep -qE 'PREENCHA|\[descrição' memoria/projetos.md 2>/dev/null; then
+      echo "  ❌ memoria/projetos.md ainda tem placeholder (PREENCHA / [descrição)"
+      PH=$((PH+1))
+    else
+      echo "  ✅ memoria/projetos.md sem placeholders bloqueantes"
+    fi
+  fi
+
+  if [ -f memoria/perfil.md ]; then
+    if grep -qE '\[Seu Nome\]|PREENCHA|\[Escreva aqui' memoria/perfil.md 2>/dev/null; then
+      echo "  ❌ memoria/perfil.md ainda tem placeholder ([Seu Nome] / PREENCHA / [Escreva aqui)"
+      PH=$((PH+1))
+    else
+      echo "  ✅ memoria/perfil.md sem placeholders bloqueantes"
+    fi
+  fi
+
+  if [ -f memoria/ativo.md ]; then
+    if grep -q 'primeira sessão' memoria/ativo.md 2>/dev/null || grep -qF '$(date' memoria/ativo.md 2>/dev/null; then
+      echo "  ❌ memoria/ativo.md ainda marca first-run (\"primeira sessão\") ou tem literal \$(date"
+      PH=$((PH+1))
+    else
+      echo "  ✅ memoria/ativo.md sem first-run / literal date"
+    fi
+  fi
+
+  if [ "$PH" -gt 0 ]; then
+    ERROS=$((ERROS+PH))
+    echo "  → Rode o onboard e revalide com --pos-onboard"
+  fi
+else
+  echo "5/5 — Primeiro uso? (informativo — não falha no modo estrutura)"
+  if grep -qE '\[o que|\[seu nome\]|PREENCHA' memoria/empresa.md 2>/dev/null \
+    || grep -q 'primeira sessão' memoria/ativo.md 2>/dev/null; then
+    echo "  🔄 AINDA É TEMPLATE — primeiro uso vai disparar onboard"
+    echo "  ℹ️  Pra validar memória preenchida: bash scripts/validar.sh --pos-onboard"
+  else
+    echo "  ✅ Já configurado (sem placeholders óbvios em empresa/ativo)"
+  fi
+fi
+
+echo ""
+if [ $ERROS -eq 0 ]; then
+  echo "=== ✅ Kit válido! Pronto pra usar. ==="
+  exit 0
+else
+  echo "=== ❌ $ERROS erro(s) encontrado(s) ==="
+  exit 1
+fi

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "invos",
+  "version": "1.0.0",
+  "description": "INVOS — cérebro do negócio em arquivos para agentes de IA. CLI: init, install, update, doctor.",
+  "type": "module",
+  "bin": {
+    "invos": "bin/invos.js"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "bundle-kit": "node scripts/bundle-kit.mjs",
+    "prepublishOnly": "node scripts/bundle-kit.mjs"
+  },
+  "files": [
+    "bin/",
+    "src/",
+    "kit/",
+    "README.md"
+  ],
+  "keywords": [
+    "invos",
+    "ai-agents",
+    "memory",
+    "claude",
+    "cursor",
+    "business-os",
+    "markdown"
+  ],
+  "author": "Felipe Natanael",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/felipenalves/invos.git",
+    "directory": "packages/cli"
+  },
+  "homepage": "https://inovadigitalid.com/invos",
+  "bugs": {
+    "url": "https://github.com/felipenalves/invos/issues"
+  },
+  "dependencies": {}
+}

package/src/commands/doctor.js

@@ -0,0 +1,104 @@
+import { existsSync, readdirSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { loadManifest } from '../manifest.js';
+import { readLock } from '../lock.js';
+import { checkClaudeSymlinks } from '../symlinks.js';
+
+const ESSENTIAL_FILES = [
+  'AGENTS.md', 'MEMORY.md', 'SECURITY.md', '.env.example', 'COMECE-AQUI.md',
+  'INVOS.json',
+];
+
+const ESSENTIAL_DIRS = [
+  'memoria', 'marca', 'clientes', 'conteudo', 'scripts',
+  '.agents/skills', '.agents/squads',
+];
+
+export async function doctor(kit, kitRoot, targetDir, args) {
+  const fix = args.includes('--fix');
+  let allOk = true;
+  const report = [];
+
+  report.push('INVOS Doctor — ' + targetDir);
+
+  // 1. Essential files
+  let filesOk = 0;
+  for (const f of ESSENTIAL_FILES) {
+    const p = resolve(targetDir, f);
+    if (existsSync(p)) {
+      filesOk++;
+    } else {
+      report.push('  ✗ ' + f + ' — missing');
+      allOk = false;
+    }
+  }
+  report.push('  Files: ' + filesOk + '/' + ESSENTIAL_FILES.length);
+
+  // 2. Essential dirs
+  let dirsOk = 0;
+  for (const d of ESSENTIAL_DIRS) {
+    const p = resolve(targetDir, d);
+    if (existsSync(p)) {
+      dirsOk++;
+    } else {
+      report.push('  ✗ ' + d + '/ — missing');
+      allOk = false;
+    }
+  }
+  report.push('  Dirs: ' + dirsOk + '/' + ESSENTIAL_DIRS.length);
+
+  // 3. Skills vs manifest
+  const man = loadManifest(resolve(targetDir, 'INVOS.json'));
+  const agentsSkillsDir = resolve(targetDir, '.agents', 'skills');
+  const manifestSkills = man?.seed?.skills || [];
+
+  if (existsSync(agentsSkillsDir)) {
+    const present = readdirSync(agentsSkillsDir).filter(e => {
+      return existsSync(resolve(agentsSkillsDir, e, 'SKILL.md'));
+    });
+    const missing = manifestSkills.filter(s => {
+      if (s === 'notion') {
+        return !existsSync(resolve(targetDir, '.claude', 'skills', 'notion'));
+      }
+      return !present.includes(s);
+    });
+    if (missing.length > 0) {
+      report.push('  Skills missing: ' + missing.join(', '));
+      allOk = false;
+    } else {
+      report.push('  Skills: all ' + manifestSkills.length + ' present');
+    }
+  }
+
+  // 4. Lock file
+  const lock = readLock(targetDir);
+  if (lock) {
+    report.push('  Lock: ✓ (' + lock.version + ', installed ' + (lock.installedAt ? lock.installedAt.substring(0, 10) : '?') + ')');
+  } else {
+    report.push('  Lock: ✗ INVOS-LOCK.json missing');
+    allOk = false;
+  }
+
+  // 5. Claude symlinks
+  const symCheck = checkClaudeSymlinks(targetDir);
+  if (symCheck.ok) {
+    report.push('  Symlinks: ✓');
+  } else {
+    report.push('  Symlinks: ✗ ' + symCheck.errors.join('; '));
+    allOk = false;
+  }
+
+  // 6. Version
+  report.push('  Kit version: ' + (man?.version || 'unknown'));
+
+  console.log(report.join('\n'));
+
+  if (!allOk) {
+    console.log('  Status: ⚠️  issues found');
+    if (fix) console.log('  Run: invos install');
+    else console.log('  Run: invos doctor --fix');
+    return;
+  }
+
+  console.log('  Status: ✓ all checks passed');
+}

package/src/commands/init.js

@@ -0,0 +1,44 @@
+import { existsSync, mkdirSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { collectFiles, copyFileWithDirs, ensureDir } from '../utils.js';
+import { buildLock, writeLock } from '../lock.js';
+import { syncClaudeSymlinks } from '../symlinks.js';
+
+export async function init(kit, kitRoot, args) {
+  const idx = args.indexOf('--dir');
+  let targetDir;
+  if (idx !== -1 && args[idx + 1]) {
+    targetDir = resolve(process.cwd(), args[idx + 1]);
+  } else {
+    targetDir = resolve(process.cwd(), args[0] || '.');
+  }
+
+  if (targetDir === '.' || !args[0]) {
+    targetDir = process.cwd();
+  }
+
+  if (existsSync(targetDir) && targetDir !== process.cwd()) {
+    console.error(`Directory ${targetDir} already exists. Use install for existing projects.`);
+    process.exit(1);
+  }
+
+  ensureDir(targetDir);
+  const files = collectFiles(kitRoot, '', true);
+
+  let count = 0;
+  for (const f of files) {
+    const dest = resolve(targetDir, f.relPath);
+    copyFileWithDirs(f.fullPath, dest);
+    count++;
+  }
+
+  // Generate lock
+  const lock = buildLock(kitRoot, targetDir);
+  writeLock(targetDir, lock);
+
+  // Symlinks
+  syncClaudeSymlinks(kitRoot, targetDir);
+
+  console.log(`✓ invos init complete — ${count} files in ${targetDir}`);
+  console.log('  Run: cd ' + targetDir + ' && npx invos doctor');
+}

package/src/commands/install.js

@@ -0,0 +1,41 @@
+import { existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { collectFiles, copyFileWithDirs, shouldCopyOnInstall, ensureDir, isDevPath } from '../utils.js';
+import { buildLock, readLock, writeLock } from '../lock.js';
+import { syncClaudeSymlinks } from '../symlinks.js';
+
+export async function install(kit, kitRoot, targetDir, args) {
+  // Collect ALL kit files (skip user-data denylist) then filter out dev infra
+  const allFiles = collectFiles(kitRoot, '', true);
+  const files = allFiles.filter(f => !isDevPath(f.relPath));
+  let copied = 0;
+  let skipped = 0;
+
+  for (const f of files) {
+    const dest = resolve(targetDir, f.relPath);
+    if (shouldCopyOnInstall(dest)) {
+      if (!existsSync(dest)) {
+        ensureDir(dest.substring(0, dest.lastIndexOf('/')) || dest);
+      }
+      copyFileWithDirs(f.fullPath, dest);
+      copied++;
+    } else {
+      skipped++;
+    }
+  }
+
+  // Lock file (merge with existing)
+  const existingLock = readLock(targetDir);
+  const lock = buildLock(kitRoot, targetDir, existingLock?.custom || {});
+  if (existingLock) {
+    lock.installedAt = existingLock.installedAt;
+    lock.custom = existingLock.custom || {};
+  }
+  writeLock(targetDir, lock);
+
+  // Symlinks
+  syncClaudeSymlinks(kitRoot, targetDir);
+
+  console.log(`✓ invos install — ${copied} files copied, ${skipped} skipped (kept user data)`);
+  console.log('  Run: npx invos doctor');
+}

package/src/commands/update.js

@@ -0,0 +1,113 @@
+import { existsSync, readFileSync, writeFileSync, renameSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { collectFiles, copyFileWithDirs, shouldOverwriteOnUpdate, sha256File, isDenylisted, isTemplatePlaceholder } from '../utils.js';
+import { readLock, updateLockShipped, writeLock } from '../lock.js';
+import { syncClaudeSymlinks } from '../symlinks.js';
+
+export async function update(kit, kitRoot, targetDir, args) {
+  const dryRun = args.includes('--dry-run');
+  const lock = readLock(targetDir);
+
+  if (!lock) {
+    console.error('INVOS-LOCK.json not found. Run install first.');
+    process.exit(1);
+  }
+
+  const files = collectFiles(kitRoot, '');
+  let updated = 0;
+  let skipped = 0;
+  let agentsBackedUp = false;
+
+  for (const f of files) {
+    const dest = resolve(targetDir, f.relPath);
+    const rel = f.relPath;
+
+    // USER denylist check
+    if (isDenylisted(rel)) {
+      skipped++;
+      continue;
+    }
+
+    // Special: AGENTS.md custom handling
+    if (rel === 'AGENTS.md' && existsSync(dest)) {
+      const shippedSha = sha256File(f.fullPath);
+      const localSha = sha256File(dest);
+      const customDecision = lock.custom?.['AGENTS.md'];
+
+      if (localSha !== shippedSha) {
+        if (customDecision === 'skip') {
+          if (!dryRun) {
+            const bakPath = resolve(targetDir, 'AGENTS.md.shipped.bak');
+            writeFileSync(bakPath, readFileSync(f.fullPath));
+            console.warn('⚠️  AGENTS.md custom — backup em AGENTS.md.shipped.bak (respecting skip lock)');
+            agentsBackedUp = true;
+          }
+          skipped++;
+          continue;
+        }
+        if (customDecision === 'replace' || !existsSync(dest)) {
+          // Replace: just overwrite (handled below)
+          if (!dryRun) {
+            const bakPath = resolve(targetDir, 'AGENTS.md.shipped.bak');
+            writeFileSync(bakPath, readFileSync(dest));
+            console.warn('⚠️  AGENTS.md custom — backup em AGENTS.md.shipped.bak (replacing)');
+            agentsBackedUp = true;
+          }
+        } else {
+          // First time seeing divergence — warn and skip
+          if (!dryRun) {
+            const bakPath = resolve(targetDir, 'AGENTS.md.shipped.bak');
+            writeFileSync(bakPath, readFileSync(f.fullPath));
+            console.warn('⚠️  AGENTS.md custom — backup em AGENTS.md.shipped.bak');
+            console.warn('  Next update will respect lock. Run again with --dry-run after setting:');
+            console.warn('  "invos update" → replace | "invos update --skip-agents" → skip');
+
+            // Write to lock: ask user decision
+            lock.custom = lock.custom || {};
+            lock.custom['AGENTS.md'] = 'skip'; // default skip after first backup
+          }
+          skipped++;
+          continue;
+        }
+      }
+    }
+
+    // Skip if template placeholder only (for SEED files on UPDATE — e.g., marca/marca.md)
+    if (existsSync(dest) && shouldSkipSeedPlaceholder(rel, dest)) {
+      skipped++;
+      continue;
+    }
+
+    // Overwrite PRODUCT files
+    if (!existsSync(dest) || shouldOverwriteOnUpdate(rel, dest, lock)) {
+      if (!dryRun) {
+        copyFileWithDirs(f.fullPath, dest);
+      }
+      updated++;
+    } else {
+      skipped++;
+    }
+  }
+
+  // Update lock
+  if (!dryRun) {
+    updateLockShipped(kitRoot, lock);
+    writeLock(targetDir, lock);
+    syncClaudeSymlinks(kitRoot, targetDir);
+  }
+
+  console.log(`✓ invos update${dryRun ? ' (dry-run)' : ''} — ${updated} files updated, ${skipped} skipped`);
+  if (agentsBackedUp) console.log('  AGENTS.md backup created');
+  if (dryRun) console.log('  Run without --dry-run to apply');
+}
+
+function shouldSkipSeedPlaceholder(rel, destPath) {
+  // Only skip template files that are STILL placeholders
+  const templateFiles = ['marca/marca.md', 'memoria/perfil.md', 'memoria/empresa.md'];
+  if (!templateFiles.includes(rel)) return false;
+
+  const content = readFileSync(destPath, 'utf-8');
+  const templateMarkers = ['[o que', '[seu nome]', 'PREENCHA', 'primeira sessão'];
+  const lower = content.toLowerCase();
+  return !templateMarkers.some(m => lower.includes(m));
+}

package/src/lock.js

@@ -0,0 +1,47 @@
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { sha256File, collectFiles, isDenylisted } from './utils.js';
+import { loadManifest } from './manifest.js';
+
+export function readLock(targetDir) {
+  const path = resolve(targetDir, 'INVOS-LOCK.json');
+  if (!existsSync(path)) return null;
+  try {
+    return JSON.parse(readFileSync(path, 'utf-8'));
+  } catch {
+    return null;
+  }
+}
+
+export function writeLock(targetDir, data) {
+  const path = resolve(targetDir, 'INVOS-LOCK.json');
+  writeFileSync(path, JSON.stringify(data, null, 2) + '\n');
+}
+
+export function computeShippedSha(kitRoot) {
+  const files = collectFiles(kitRoot, '', true);
+  const shipped = {};
+  // INVOS.json itself
+  shipped['INVOS.json'] = sha256File(resolve(kitRoot, 'INVOS.json'));
+  for (const f of files) {
+    shipped[f.relPath] = sha256File(f.fullPath);
+  }
+  return shipped;
+}
+
+export function buildLock(kitRoot, targetDir, custom = {}) {
+  const now = new Date().toISOString();
+  return {
+    version: '1.0.0',
+    shippedSha: computeShippedSha(kitRoot),
+    custom,
+    installedAt: now,
+    updatedAt: now,
+  };
+}
+
+export function updateLockShipped(kitRoot, lock) {
+  lock.shippedSha = computeShippedSha(kitRoot);
+  lock.updatedAt = new Date().toISOString();
+  return lock;
+}

package/src/manifest.js

@@ -0,0 +1,10 @@
+import { existsSync, readFileSync } from 'node:fs';
+
+export function loadManifest(path) {
+  if (!existsSync(path)) return null;
+  try {
+    return JSON.parse(readFileSync(path, 'utf-8'));
+  } catch {
+    return null;
+  }
+}

package/src/resolve-kit.js

@@ -0,0 +1,33 @@
+import { existsSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+
+/**
+ * Kit source resolution (first hit wins):
+ * 1. INVOS_KIT_PATH env
+ * 2. Bundled kit next to package (npm install / npx)
+ * 3. Monorepo layout: packages/cli → invos root
+ */
+export function resolveKitRoot() {
+  if (process.env.INVOS_KIT_PATH) {
+    const p = resolve(process.env.INVOS_KIT_PATH);
+    if (existsSync(resolve(p, 'INVOS.json'))) return p;
+    console.error('INVOS_KIT_PATH set but INVOS.json missing:', p);
+    process.exit(1);
+  }
+
+  const bundled = resolve(__dirname, '../kit');
+  if (existsSync(resolve(bundled, 'INVOS.json'))) return bundled;
+
+  const monorepo = resolve(__dirname, '../../..');
+  if (existsSync(resolve(monorepo, 'INVOS.json'))) return monorepo;
+
+  console.error(`
+INVOS kit not found.
+- Reinstall: npm i -g invos@latest  (or npx invos@latest)
+- Or set: export INVOS_KIT_PATH=/path/to/invos-kit
+`);
+  process.exit(1);
+}