novahiz 0.5.2 → 0.7.0

package/catalog/vault-structure.json

@@ -0,0 +1,366 @@
+{
+  "version": 1,
+  "index": "INDEX.md",
+  "log": "log.md",
+  "structureFile": "STRUCTURE.md",
+  "moc": "_MOC.md",
+  "indexSection": "Categories",
+  "systemFolders": ["Inbox", "Archive", "Templates", "Excalidraw"],
+  "systemFiles": ["INDEX.md", "log.md", "STRUCTURE.md"],
+  "defaultProject": "general",
+  "domains": [
+    {
+      "id": "code",
+      "name": "Code",
+      "title": "Code",
+      "kind": "domain",
+      "keywords": ["code", "coding", "dev", "developer", "programming", "software", "logiciel", "app", "application", "api", "cli", "npm", "git", "repo", "frontend", "backend", "stack", "compilation", "build"],
+      "children": [
+        {
+          "id": "mobile",
+          "name": "Mobile",
+          "title": "Mobile",
+          "kind": "branch",
+          "keywords": ["mobile", "flutter", "expo", "react native", "android", "ios", "kotlin", "swift", "xcode", "apk", "ipa", "emulator", "emu", "device", "playstore", "app store"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        },
+        {
+          "id": "web",
+          "name": "Web",
+          "title": "Web",
+          "kind": "branch",
+          "keywords": ["web", "nextjs", "next.js", "react", "vue", "angular", "spa", "ssr", "site", "website", "frontend", "html", "css", "tailwind", "browser", "responsive"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        },
+        {
+          "id": "desktop",
+          "name": "Desktop",
+          "title": "Desktop",
+          "kind": "branch",
+          "keywords": ["desktop", "windows", "linux", "mac", "macos", "ubuntu", "electron", "tauri", "winui", "winforms", "qt", "bureau", "exe", "appimage", "deb"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "trading",
+      "name": "Trading",
+      "title": "Trading",
+      "kind": "domain",
+      "keywords": ["trading", "trader", "finance", "financial", "crypto", "bourse", "forex", "invest", "investment", "investissement", "market", "marche", "marché", "strategy", "strategie", "stratégie", "chart", "indicator", "order", "position", "portfolio"],
+      "children": [
+        {
+          "id": "markets",
+          "name": "Markets",
+          "title": "Markets",
+          "kind": "branch",
+          "keywords": ["market", "marche", "marché", "crypto", "forex", "action", "stock", "indice", "index", "volatility", "volatilite", "tendance"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        },
+        {
+          "id": "strategies",
+          "name": "Strategies",
+          "title": "Strategies",
+          "kind": "branch",
+          "keywords": ["strategy", "strategie", "stratégie", "setup", "backtest", "signal", "risk", "risque", "money management", "entry", "sortie"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "ai",
+      "name": "AI",
+      "title": "AI & Data",
+      "kind": "domain",
+      "keywords": ["ai", "ia", "artificial intelligence", "intelligence artificielle", "machine learning", "llm", "gpt", "model", "modele", "modèle", "dataset", "data", "donnee", "données", "nlp", "prompt", "neural", "deep learning", "analytics", "statistique", "rag", "embedding"],
+      "children": [
+        {
+          "id": "models",
+          "name": "Models",
+          "title": "Models",
+          "kind": "branch",
+          "keywords": ["model", "modele", "modèle", "llm", "gpt", "prompt", "fine-tune", "inference", "agent", "pipeline ia", "embedding", "rag"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        },
+        {
+          "id": "datasets",
+          "name": "Datasets",
+          "title": "Datasets",
+          "kind": "branch",
+          "keywords": ["dataset", "data", "donnee", "données", "csv", "etl", "analytics", "statistique", "dashboard", "mesure", "metric"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "design",
+      "name": "Design",
+      "title": "Design",
+      "kind": "domain",
+      "keywords": ["design", "ui", "ux", "figma", "maquette", "mockup", "wireframe", "couleur", "color", "typographie", "typography", "token", "branding", "logo", "icon", "icône", "interface", "charte", "responsive design"],
+      "children": [
+        {
+          "id": "systems",
+          "name": "Systems",
+          "title": "Systems",
+          "kind": "branch",
+          "keywords": ["design system", "token", "palette", "typographie", "typography", "composant", "component", "guideline", "charte", "branding", "logo", "icon", "icône"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        },
+        {
+          "id": "interface",
+          "name": "Interface",
+          "title": "Interface",
+          "kind": "branch",
+          "keywords": ["maquette", "mockup", "wireframe", "figma", "ecran", "écran", "page", "screen", "layout", "navigation", "ux", "parcours"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "devops",
+      "name": "DevOps",
+      "title": "DevOps",
+      "kind": "domain",
+      "keywords": ["devops", "ci", "cd", "docker", "kubernetes", "k8s", "terraform", "cloud", "aws", "azure", "gcp", "deploy", "deploiement", "déploiement", "pipeline", "server", "serveur", "nginx", "vm", "container", "monitoring", "observabilite", "observabilité"],
+      "children": [
+        {
+          "id": "infra",
+          "name": "Infra",
+          "title": "Infra",
+          "kind": "branch",
+          "keywords": ["infra", "server", "serveur", "cloud", "aws", "azure", "gcp", "vm", "network", "reseau", "réseau", "dns", "storage", "backup", "kubernetes", "k8s", "docker", "container"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        },
+        {
+          "id": "pipelines",
+          "name": "Pipelines",
+          "title": "Pipelines",
+          "kind": "branch",
+          "keywords": ["ci", "cd", "pipeline", "workflow", "github actions", "gitlab", "build", "release", "deploy", "deploiement", "déploiement", "monitoring", "alerte", "log"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "security",
+      "name": "Security",
+      "title": "Security",
+      "kind": "domain",
+      "keywords": ["security", "securite", "sécurité", "audit", "vulnerability", "vulnérabilité", "cve", "owasp", "pentest", "ransomware", "malware", "auth", "token", "encryption", "chiffrement", "secret", "incident", "hardening"],
+      "children": [
+        {
+          "id": "audits",
+          "name": "Audits",
+          "title": "Audits",
+          "kind": "branch",
+          "keywords": ["audit", "review", "scan", "pentest", "checklist", "compliance", "conformite", "conformité", "rapport", "hardening", "review sécurité"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        },
+        {
+          "id": "threats",
+          "name": "Threats",
+          "title": "Threats",
+          "kind": "branch",
+          "keywords": ["threat", "menace", "cve", "vulnerability", "vulnérabilité", "incident", "breach", "malware", "ransomware", "phishing", "exploit"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "business",
+      "name": "Business",
+      "title": "Business",
+      "kind": "domain",
+      "keywords": ["business", "marketing", "startup", "offer", "offre", "sales", "vente", "client", "revenue", "revenu", "growth", "croissance", "seo", "brand", "communaute", "communauté", "pricing", "prix", "funnel", "acquisition"],
+      "children": [
+        {
+          "id": "offers",
+          "name": "Offers",
+          "title": "Offers",
+          "kind": "branch",
+          "keywords": ["offer", "offre", "produit", "product", "pricing", "prix", "positionnement", "value proposition", "client", "contrat", "deal"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        },
+        {
+          "id": "growth",
+          "name": "Growth",
+          "title": "Growth",
+          "kind": "branch",
+          "keywords": ["growth", "croissance", "marketing", "seo", "ads", "publicite", "publicité", "funnel", "acquisition", "communaute", "communauté", "audience", "conversion", "retention"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "learning",
+      "name": "Learning",
+      "title": "Learning",
+      "kind": "domain",
+      "keywords": ["learning", "cours", "course", "formation", "tutorial", "tutoriel", "etude", "étude", "study", "ecole", "école", "school", "universite", "université", "livre", "book", "certification", "apprendre", "revision", "révision"],
+      "children": [
+        {
+          "id": "courses",
+          "name": "Courses",
+          "title": "Courses",
+          "kind": "branch",
+          "keywords": ["cours", "course", "formation", "tutorial", "tutoriel", "mooc", "certification", "module", "lesson", "leçon", "exercice"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        },
+        {
+          "id": "notes",
+          "name": "Study-Notes",
+          "title": "Study Notes",
+          "kind": "branch",
+          "keywords": ["note", "fiche", "synthese", "synthèse", "revision", "révision", "flashcard", "ancret", "mémoire", "dissertation", "resume", "résumé"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "wiki",
+      "name": "Wiki",
+      "title": "Wiki",
+      "kind": "domain",
+      "keywords": ["wiki", "doc", "docs", "documentation", "guide", "reference", "référence", "manuel", "howto", "how-to", "faq", "glossary", "glossaire", "spec", "specification", "spécification", "convention", "best practice"],
+      "children": [
+        {
+          "id": "guides",
+          "name": "Guides",
+          "title": "Guides",
+          "kind": "branch",
+          "keywords": ["guide", "howto", "how-to", "tutoriel", "recipe", "recette", "procedure", "procédure", "checklist", "bonne pratique", "best practice"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        },
+        {
+          "id": "reference",
+          "name": "Reference",
+          "title": "Reference",
+          "kind": "branch",
+          "keywords": ["reference", "référence", "manuel", "faq", "glossary", "glossaire", "spec", "specification", "spécification", "convention", "definition", "définition", "api"],
+          "children": [
+            { "id": "memory", "name": "memory", "title": "Memory", "kind": "memory" },
+            { "id": "docs", "name": "docs", "title": "Docs", "kind": "docs" }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "journal",
+      "name": "Journal",
+      "title": "Journal",
+      "kind": "domain",
+      "keywords": ["journal", "daily", "quotidien", "diary", "journal intime", "note rapide", "braindump", "weekly review", "review hebdo", "retour", "reflection", "réflexion"],
+      "children": [
+        {
+          "id": "daily",
+          "name": "Daily",
+          "title": "Daily",
+          "kind": "notes",
+          "keywords": ["daily", "quotidien", "jour", "matin", "soir", "aujourd'hui", "date"],
+          "children": []
+        },
+        {
+          "id": "weekly",
+          "name": "Weekly",
+          "title": "Weekly",
+          "kind": "notes",
+          "keywords": ["weekly", "hebdo", "semaine", "review", "bilan"],
+          "children": []
+        }
+      ]
+    },
+    {
+      "id": "projects",
+      "name": "Projects",
+      "title": "Projects",
+      "kind": "domain",
+      "keywords": ["project", "projet", "roadmap", "milestone", "jalon", "sprint", "todo", "tache", "tâche", "objective", "objectif", "release", "livraison"],
+      "children": [
+        {
+          "id": "active",
+          "name": "Active",
+          "title": "Active",
+          "kind": "notes",
+          "keywords": ["active", "en cours", "encours", "wip", "sprint", "todo", "tache", "tâche"],
+          "children": []
+        },
+        {
+          "id": "archived",
+          "name": "Archived",
+          "title": "Archived",
+          "kind": "notes",
+          "keywords": ["archived", "archive", "termine", "terminé", "done", "clos", "livre", "shipped"],
+          "children": []
+        }
+      ]
+    }
+  ],
+  "docsKeywords": ["doc", "docs", "documentation", "guide", "reference", "référence", "manuel", "spec", "specification", "spécification", "readme", "api", "tutorial", "tutoriel", "howto", "how-to", "convention", "architecture", "glossaire", "glossary", "faq"],
+  "plugins": [
+    { "id": "dataview", "repo": "blacksmithgu/obsidian-dataview", "required": true },
+    { "id": "templater-obsidian", "repo": "silentvoid13/Templater", "required": true },
+    { "id": "obsidian-linter", "repo": "platers/obsidian-linter", "required": true },
+    { "id": "omnisearch", "repo": "scambier/obsidian-omnisearch", "required": true },
+    { "id": "recent-files-obsidian", "repo": "tgrosinger/recent-files-obsidian", "required": true },
+    { "id": "tag-wrangler", "repo": "pjeby/tag-wrangler", "required": true },
+    { "id": "periodic-notes", "repo": "liamcain/obsidian-periodic-notes", "required": true },
+    { "id": "calendar", "repo": "liamcain/obsidian-calendar-plugin", "required": true },
+    { "id": "obsidian-excalidraw-plugin", "repo": "zsviczian/obsidian-excalidraw-plugin", "required": true },
+    { "id": "obsidian-style-settings", "repo": "obsidian-community/obsidian-style-settings", "required": true }
+  ]
+}

package/dist/cli.js

@@ -5,7 +5,7 @@ import { spawnSync } from "node:child_process";
 import { parse, print, flagOn } from "./commands/context.js";
 import { expandHome } from "./spec.js";
 import { commandCheck, commandSync, commandClassify, commandSkills, commandCategories, commandRules, commandSessionLoad, commandSessionState, commandCatalog, commandRoadmap, commandStep, commandProviders, commandDeps, commandDispatch } from "./commands/inspect.js";
-import { commandGate } from "./commands/gate.js";
+import { commandGate, commandGateToggle } from "./commands/gate.js";
 import { commandReport } from "./commands/report.js";
 import { commandTask } from "./commands/task.js";
 import { commandClean } from "./commands/clean.js";
@@ -17,6 +17,9 @@ import { memoryCommand } from "./commands/memory.js";
 import { secondMemoryCommand } from "./commands/second-memory.js";
 import { commandInit } from "./commands/init.js";
 import { commandAutodocs } from "./commands/autodocs.js";
+import { commandUpgrade } from "./commands/upgrade.js";
+import { commandStitch } from "./commands/stitch.js";
+import { commandDocs } from "./commands/docs.js";
 const __dirname = dirname(fileURLToPath(import.meta.url));
 // M6: HOME was a module-level const, so `--home` (which sets the env var in
 // main()) was silently ignored by the current execution. Read it lazily.
@@ -52,8 +55,11 @@ function usage() {
             "snap [save|list|show|diff|restore|export|verify|prune|status]  Ledger snapshots (ours, no external tool)",
             "graph [build|status|find|all|trace|api|map|fresh|help]  Code graph (ours, in-process)",
             "memory [status|clean|prune]  Project memory hygiene (dry-run by default, --apply)",
-            "second-memory [init|lint|fix|sync|status]  Obsidian vault management (dry-run by default, --apply)",
-            "upgrade                 Pull latest and rebuild catalog",
+            "second-memory [init|doctor|lint|fix|sync|status|search]  Obsidian vault management (dry-run by default, --apply)",
+            "upgrade [--apply]      Check for a newer release: npm (global installs) or git pull (source checkouts)",
+            "docs [status|ingest <id>|--all]  Local docs index: state, or fill it (network)",
+            "stitch [--key <k>]     Configure the Google Stitch MCP API key (interactive prompt if no --key)",
+            "gate on|off            Persistently disable/enable the gate (restart OpenCode to apply)",
             "version                 Show version",
             "",
             "",
@@ -102,40 +108,6 @@ function runInit() {
     runSync();
     process.stdout.write("\nDone! Restart opencode to activate Novahiz.\n");
 }
-function runUpgrade(parsed) {
-    const home = homeDir();
-    if (!existsSync(join(home, ".git"))) {
-        process.stderr.write("Not a git repository. Install from source first.\n");
-        process.exitCode = 1;
-        return;
-    }
-    // P2-C (LOW): `git pull` rewrote the running code (hooks included) with no
-    // preview. Default to a dry run; `--apply` is required to actually pull.
-    if (!flagOn(parsed, "apply")) {
-        const dry = spawnSync("git", ["pull", "--dry-run"], { cwd: home, encoding: "utf8" });
-        const preview = `${dry.stdout ?? ""}${dry.stderr ?? ""}`.trim();
-        if (preview)
-            process.stdout.write(preview + "\n");
-        if (dry.status !== 0) {
-            process.stderr.write("Dry run failed; fix git first.\n");
-            process.exitCode = 1;
-            return;
-        }
-        process.stdout.write("Dry run only. Re-run `novahiz upgrade --apply` to pull and rebuild.\n");
-        process.exitCode = 1;
-        return;
-    }
-    process.stdout.write("Pulling latest changes...\n");
-    const pull = spawnSync("git", ["pull", "--ff-only"], { cwd: home, stdio: "inherit" });
-    if (pull.status !== 0) {
-        process.stderr.write("Pull failed; nothing rebuilt.\n");
-        process.exitCode = 1;
-        return;
-    }
-    process.stdout.write("\nRebuilding skill catalog...\n");
-    runSync();
-    process.stdout.write("\nUpgraded! Restart opencode to apply changes.\n");
-}
 // Async so `doctor --deep` can await its MCP probes; every other command
 // still returns void, which await handles transparently.
 async function main(argv) {
@@ -170,7 +142,7 @@ async function main(argv) {
             return commandClean(parsed);
         case "upgrade":
         case "update":
-            return runUpgrade(parsed);
+            return commandUpgrade(parsed);
         case "version":
         case "-v":
         case "--version":
@@ -181,8 +153,16 @@ async function main(argv) {
             return commandSync();
         case "classify":
             return commandClassify(parsed);
-        case "gate":
+        case "gate": {
+            const gateSub = (parsed.positionals[1] ?? "").toLowerCase();
+            if (gateSub === "on" || gateSub === "off")
+                return commandGateToggle(parsed);
             return commandGate(parsed);
+        }
+        case "stitch":
+            return commandStitch(parsed);
+        case "docs":
+            return commandDocs(parsed);
         case "skills":
             return commandSkills(parsed);
         case "categories":

package/dist/commands/docs.js

@@ -0,0 +1,55 @@
+// `novahiz docs` : etat et remplissage de l'index documentaire local.
+// Le travail reseau vit dans mcp/novahiz-docs (ingest) — ce fichier ne fait
+// que lui passer la main par spawn, mcp/ restant hors du typecheck racine
+// (tsconfig include = src/adapters/tests).
+import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { flagOn } from "./context.js";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+function usage() {
+    process.stderr.write([
+        "usage:",
+        "  novahiz docs status              Index state per library",
+        "  novahiz docs ingest <id>|--all   Fill the local docs index (network)",
+        "  novahiz docs ingest <id> --dry   List the targets, touch nothing",
+        ""
+    ].join("\n"));
+}
+export function commandDocs(parsed) {
+    const sub = parsed.positionals[1];
+    const script = join(__dirname, "..", "..", "mcp", "novahiz-docs", "index.mjs");
+    if (!existsSync(script)) {
+        process.stderr.write(`novahiz docs: missing ${script}\n`);
+        process.exitCode = 1;
+        return;
+    }
+    const run = (argv) => {
+        const result = spawnSync(process.execPath, [script, ...argv], { encoding: "utf8", stdio: "inherit" });
+        process.exitCode = typeof result.status === "number" ? result.status : 1;
+    };
+    if (sub === "status" || sub === undefined) {
+        run(["--status"]);
+        return;
+    }
+    if (sub === "ingest") {
+        // parse() absorbe la valeur d'un flag : `ingest --dry react` met react dans
+        // flags.dry. On recover la spec depuis les deux emplacements et on echoue
+        // TOUJOURS vers le dry-run — jamais de reseau quand --dry est ecrit.
+        const rawDry = parsed.flags.dry;
+        const dry = rawDry !== undefined;
+        const spec = parsed.positionals[2] ??
+            (typeof rawDry === "string" && rawDry !== "false" && rawDry !== "true" ? rawDry : undefined) ??
+            (flagOn(parsed, "all") ? "--all" : undefined);
+        if (!spec) {
+            usage();
+            process.exitCode = 2;
+            return;
+        }
+        run(dry ? ["--ingest", spec, "--dry"] : ["--ingest", spec]);
+        return;
+    }
+    usage();
+    process.exitCode = 2;
+}

package/dist/commands/gate.js

@@ -1,4 +1,7 @@
 import { join } from "node:path";
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
 import { asString, dbPathFor, parse, print, readStdin, splitList } from "./context.js";
 import { loadSpec, NovahizHome } from "../spec.js";
 import { openDb } from "../db.js";
@@ -246,3 +249,54 @@ export function commandGate(parsed) {
     if (!allow && gateConfig.mode === "block")
         process.exitCode = 2;
 }
+// --- novahiz gate on|off -----------------------------------------------------
+// Persistance du kill-switch NOVAHIZ_GATE au niveau utilisateur, pour un
+// utilisateur final qui ne touche jamais au code :
+//  - Windows : registre HKCU\Environment (lu par tout nouveau process) ;
+//  - Linux/macOS : bloc marque dans ~/.profile (OpenCode lance depuis un
+//    terminal ; un lanceur GUI doit export la variable lui-meme).
+// Le changement ne prend effet qu'apres restart complet d'OpenCode : le plugin
+// lit la variable une seule fois, a l'import.
+export const GATE_PROFILE_BEGIN = "# >>> novahiz-gate >>>";
+export const GATE_PROFILE_END = "# <<< novahiz-gate <<<";
+/** Fonction pure (testee) : ajoute/remplace ou retire le bloc marque. */
+export function upsertGateProfile(profile, off) {
+    const escape = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const blockRe = new RegExp(`${escape(GATE_PROFILE_BEGIN)}[\\s\\S]*?${escape(GATE_PROFILE_END)}\\n?`);
+    const stripped = profile.replace(blockRe, "");
+    if (!off)
+        return stripped;
+    const base = stripped.length > 0 && !stripped.endsWith("\n") ? `${stripped}\n` : stripped;
+    return `${base}${GATE_PROFILE_BEGIN}\nexport NOVAHIZ_GATE=off\n${GATE_PROFILE_END}\n`;
+}
+export function commandGateToggle(parsed) {
+    const mode = (parsed.positionals[1] ?? "").toLowerCase();
+    const off = mode === "off";
+    if (process.platform === "win32") {
+        const result = off
+            ? spawnSync("reg", ["add", "HKCU\\Environment", "/v", "NOVAHIZ_GATE", "/t", "REG_SZ", "/d", "off", "/f"], { encoding: "utf8" })
+            : spawnSync("reg", ["delete", "HKCU\\Environment", "/v", "NOVAHIZ_GATE", "/f"], { encoding: "utf8" });
+        if (result.status !== 0) {
+            // `reg delete` echoue aussi quand la valeur n'existe pas : dans ce cas
+            // "on" est deja l'etat voulu, ce n'est pas une erreur.
+            if (off) {
+                process.stderr.write(`novahiz gate: registre inaccessible (${(result.stderr ?? "").trim() || `exit ${result.status}`}).\n`);
+                process.exitCode = 1;
+                return;
+            }
+            process.stdout.write("NOVAHIZ_GATE deja absente du registre : le gate est actif.\n");
+        }
+        else {
+            process.stdout.write(off ? "NOVAHIZ_GATE=off ecrite (HKCU\\Environment).\n" : "NOVAHIZ_GATE retiree du registre : gate actif.\n");
+        }
+    }
+    else {
+        const profile = join(homedir(), ".profile");
+        const current = existsSync(profile) ? readFileSync(profile, "utf8") : "";
+        const next = upsertGateProfile(current, off);
+        if (next !== current)
+            writeFileSync(profile, next, "utf8");
+        process.stdout.write(off ? `NOVAHIZ_GATE=off ecrite dans ${profile}.\n` : `Bloc NOVAHIZ_GATE retire de ${profile}.\n`);
+    }
+    process.stdout.write("Restart OpenCode completely for the change to take effect.\n");
+}