solveos-cli 0.1.0

package/dist/lib/runtime-adapters/cursor.js

@@ -0,0 +1,113 @@
+/**
+ * Cursor runtime adapter for solveos-cli.
+ *
+ * Handles detection and installation of commands, agents, and hooks
+ * into Cursor's directory structure.
+ *
+ * Cursor conventions:
+ * - Skills (commands): .cursor/skills/<name>/SKILL.md -> /name
+ * - Agents:           .cursor/agents/<name>.md -> auto-delegation
+ * - Hooks:            .cursor/hooks.json -> event-based config
+ * - Rules:            .cursor/rules/<name>.mdc -> contextual instructions
+ *
+ * Cursor also reads from .claude/ and .codex/ for cross-tool compatibility,
+ * but we install to .cursor/ for clarity and priority.
+ */
+import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
+import { join, basename } from "node:path";
+import { detectRuntime } from "../runtime-detect.js";
+/**
+ * Transform OpenCode-style command frontmatter to Cursor skill frontmatter.
+ *
+ * Cursor uses the same SKILL.md format as Claude Code skills.
+ * We set disable-model-invocation: true so skills are explicit-only.
+ */
+function transformCommandToSkill(content, commandName) {
+    const skillName = `solveos-${commandName}`;
+    const frontmatterMatch = content.match(/^---\n([\s\S]*?)\n---\n/);
+    if (!frontmatterMatch) {
+        return `---\nname: ${skillName}\ndescription: solveOS ${commandName} command\ndisable-model-invocation: true\n---\n\n${content}`;
+    }
+    const frontmatter = frontmatterMatch[1];
+    const body = content.slice(frontmatterMatch[0].length);
+    const descMatch = frontmatter.match(/^description:\s*(.+)$/m);
+    const description = descMatch ? descMatch[1].trim() : `solveOS ${commandName} command`;
+    return `---\nname: ${skillName}\ndescription: ${description}\ndisable-model-invocation: true\n---\n\n${body}`;
+}
+/**
+ * Transform OpenCode-style agent frontmatter to Cursor agent frontmatter.
+ *
+ * Cursor agents use: name, description, model, readonly, is_background
+ */
+function transformAgentForCursor(content, agentName) {
+    const frontmatterMatch = content.match(/^---\n([\s\S]*?)\n---\n/);
+    if (!frontmatterMatch) {
+        return `---\nname: ${agentName}\ndescription: solveOS ${agentName} agent\n---\n\n${content}`;
+    }
+    const frontmatter = frontmatterMatch[1];
+    const body = content.slice(frontmatterMatch[0].length);
+    const descMatch = frontmatter.match(/^description:\s*(.+)$/m);
+    const description = descMatch ? descMatch[1].trim() : `solveOS ${agentName} agent`;
+    return `---\nname: ${agentName}\ndescription: ${description}\n---\n\n${body}`;
+}
+export const cursor = {
+    async detect() {
+        const cwd = process.cwd();
+        const result = await detectRuntime(cwd);
+        if (result && result.runtime === "cursor") {
+            return {
+                detected: true,
+                name: "Cursor",
+                configPath: result.configPath,
+            };
+        }
+        return {
+            detected: false,
+            name: "Cursor",
+        };
+    },
+    async installCommands(sourceDir) {
+        const cwd = process.cwd();
+        const skillsBase = join(cwd, ".cursor", "skills");
+        const files = await readdir(sourceDir);
+        for (const file of files) {
+            if (!file.endsWith(".md"))
+                continue;
+            const commandName = basename(file, ".md");
+            const sourcePath = join(sourceDir, file);
+            // Cursor skills live in directories: .cursor/skills/solveos-{name}/SKILL.md
+            const skillDir = join(skillsBase, `solveos-${commandName}`);
+            await mkdir(skillDir, { recursive: true });
+            const content = await readFile(sourcePath, "utf-8");
+            const transformed = transformCommandToSkill(content, commandName);
+            await writeFile(join(skillDir, "SKILL.md"), transformed, "utf-8");
+        }
+    },
+    async installAgents(sourceDir) {
+        const cwd = process.cwd();
+        const targetDir = join(cwd, ".cursor", "agents");
+        await mkdir(targetDir, { recursive: true });
+        const files = await readdir(sourceDir);
+        for (const file of files) {
+            if (!file.endsWith(".md"))
+                continue;
+            const agentName = basename(file, ".md");
+            const sourcePath = join(sourceDir, file);
+            const content = await readFile(sourcePath, "utf-8");
+            const transformed = transformAgentForCursor(content, agentName);
+            await writeFile(join(targetDir, file), transformed, "utf-8");
+        }
+    },
+    async installHooks(_sourceDir) {
+        // Cursor hooks are configured in .cursor/hooks.json with event-based
+        // handlers (shell commands). Similar to Claude Code, the mechanism is
+        // different from OpenCode's TypeScript plugins.
+        //
+        // The solveOS state files (.solveos/STATE.md, BRIEF.md) remain readable
+        // by any hook script the user configures.
+        //
+        // Future: generate .cursor/hooks.json with shell-based context monitor
+        // and brief anchor hooks.
+    },
+};
+//# sourceMappingURL=cursor.js.map

package/dist/lib/runtime-adapters/cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../../src/lib/runtime-adapters/cursor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,OAAe,EAAE,WAAmB;IACnE,MAAM,SAAS,GAAG,WAAW,WAAW,EAAE,CAAC;IAE3C,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAClE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,cAAc,SAAS,0BAA0B,WAAW,oDAAoD,OAAO,EAAE,CAAC;IACnI,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,WAAW,UAAU,CAAC;IAEvF,OAAO,cAAc,SAAS,kBAAkB,WAAW,4CAA4C,IAAI,EAAE,CAAC;AAChH,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,OAAe,EAAE,SAAiB;IACjE,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAClE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,cAAc,SAAS,0BAA0B,SAAS,kBAAkB,OAAO,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,SAAS,QAAQ,CAAC;IAEnF,OAAO,cAAc,SAAS,kBAAkB,WAAW,YAAY,IAAI,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAmB;IACpC,KAAK,CAAC,MAAM;QACV,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,QAAQ;SACf,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAElD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACpC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAEzC,4EAA4E;YAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,WAAW,EAAE,CAAC,CAAC;YAC5D,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE3C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAClE,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACpC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAEzC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAChE,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,qEAAqE;QACrE,sEAAsE;QACtE,gDAAgD;QAChD,EAAE;QACF,wEAAwE;QACxE,0CAA0C;QAC1C,EAAE;QACF,uEAAuE;QACvE,0BAA0B;IAC5B,CAAC;CACF,CAAC"}

package/dist/lib/runtime-adapters/gemini-cli.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Gemini CLI runtime adapter for solveos-cli.
+ *
+ * Handles detection and installation of commands, agents, and hooks
+ * into Gemini CLI's directory structure.
+ *
+ * Gemini CLI conventions:
+ * - Commands: .gemini/commands/<name>.toml -> /<name>
+ *   Subdirectories create namespaced commands: .gemini/commands/solveos/<name>.toml -> /solveos:<name>
+ * - Agents:  .gemini/agents/<name>.md -> @name / auto-delegation
+ * - Hooks:   .gemini/settings.json -> hooks object
+ *
+ * Key difference: Gemini CLI uses TOML for commands (not Markdown).
+ * We wrap our markdown prompt content in TOML's `prompt` field.
+ */
+import type { RuntimeAdapter } from "../../types.js";
+export declare const gemini: RuntimeAdapter;
+//# sourceMappingURL=gemini-cli.d.ts.map

package/dist/lib/runtime-adapters/gemini-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-cli.d.ts","sourceRoot":"","sources":["../../../src/lib/runtime-adapters/gemini-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAgB,MAAM,gBAAgB,CAAC;AA8DnE,eAAO,MAAM,MAAM,EAAE,cA8DpB,CAAC"}

package/dist/lib/runtime-adapters/gemini-cli.js

@@ -0,0 +1,127 @@
+/**
+ * Gemini CLI runtime adapter for solveos-cli.
+ *
+ * Handles detection and installation of commands, agents, and hooks
+ * into Gemini CLI's directory structure.
+ *
+ * Gemini CLI conventions:
+ * - Commands: .gemini/commands/<name>.toml -> /<name>
+ *   Subdirectories create namespaced commands: .gemini/commands/solveos/<name>.toml -> /solveos:<name>
+ * - Agents:  .gemini/agents/<name>.md -> @name / auto-delegation
+ * - Hooks:   .gemini/settings.json -> hooks object
+ *
+ * Key difference: Gemini CLI uses TOML for commands (not Markdown).
+ * We wrap our markdown prompt content in TOML's `prompt` field.
+ */
+import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
+import { join, basename } from "node:path";
+import { detectRuntime } from "../runtime-detect.js";
+/**
+ * Convert a markdown command file to Gemini CLI's TOML format.
+ *
+ * Extracts the description from frontmatter for the TOML `description` field,
+ * and wraps the full markdown body in a multi-line TOML `prompt` string.
+ */
+function markdownToToml(content, commandName) {
+    let description = `solveOS ${commandName} command`;
+    let body = content;
+    // Extract and strip frontmatter
+    const frontmatterMatch = content.match(/^---\n([\s\S]*?)\n---\n/);
+    if (frontmatterMatch) {
+        const frontmatter = frontmatterMatch[1];
+        const descMatch = frontmatter.match(/^description:\s*(.+)$/m);
+        if (descMatch) {
+            description = descMatch[1].trim();
+        }
+        body = content.slice(frontmatterMatch[0].length);
+    }
+    // Escape triple quotes in the body (extremely unlikely but safe)
+    const escapedBody = body.replace(/"""/g, '"\\"\\""');
+    return `description = "${escapeTomlString(description)}"\nprompt = """\n${escapedBody}"""\n`;
+}
+/**
+ * Escape a string for use in a TOML double-quoted string.
+ */
+function escapeTomlString(s) {
+    return s
+        .replace(/\\/g, "\\\\")
+        .replace(/"/g, '\\"')
+        .replace(/\n/g, "\\n")
+        .replace(/\t/g, "\\t");
+}
+/**
+ * Transform OpenCode-style agent frontmatter to Gemini CLI agent frontmatter.
+ *
+ * Gemini CLI agents use: name, description, kind, tools, model, temperature,
+ * max_turns, timeout_mins.
+ */
+function transformAgentForGemini(content, agentName) {
+    const frontmatterMatch = content.match(/^---\n([\s\S]*?)\n---\n/);
+    if (!frontmatterMatch) {
+        return `---\nname: ${agentName}\ndescription: solveOS ${agentName} agent\nkind: local\n---\n\n${content}`;
+    }
+    const frontmatter = frontmatterMatch[1];
+    const body = content.slice(frontmatterMatch[0].length);
+    const descMatch = frontmatter.match(/^description:\s*(.+)$/m);
+    const description = descMatch ? descMatch[1].trim() : `solveOS ${agentName} agent`;
+    return `---\nname: ${agentName}\ndescription: ${description}\nkind: local\n---\n\n${body}`;
+}
+export const gemini = {
+    async detect() {
+        const cwd = process.cwd();
+        const result = await detectRuntime(cwd);
+        if (result && result.runtime === "gemini") {
+            return {
+                detected: true,
+                name: "Gemini CLI",
+                configPath: result.configPath,
+            };
+        }
+        return {
+            detected: false,
+            name: "Gemini CLI",
+        };
+    },
+    async installCommands(sourceDir) {
+        const cwd = process.cwd();
+        // Use subdirectory for namespacing: .gemini/commands/solveos/<name>.toml -> /solveos:<name>
+        const targetDir = join(cwd, ".gemini", "commands", "solveos");
+        await mkdir(targetDir, { recursive: true });
+        const files = await readdir(sourceDir);
+        for (const file of files) {
+            if (!file.endsWith(".md"))
+                continue;
+            const commandName = basename(file, ".md");
+            const sourcePath = join(sourceDir, file);
+            const content = await readFile(sourcePath, "utf-8");
+            const tomlContent = markdownToToml(content, commandName);
+            await writeFile(join(targetDir, `${commandName}.toml`), tomlContent, "utf-8");
+        }
+    },
+    async installAgents(sourceDir) {
+        const cwd = process.cwd();
+        const targetDir = join(cwd, ".gemini", "agents");
+        await mkdir(targetDir, { recursive: true });
+        const files = await readdir(sourceDir);
+        for (const file of files) {
+            if (!file.endsWith(".md"))
+                continue;
+            const agentName = basename(file, ".md");
+            const sourcePath = join(sourceDir, file);
+            const content = await readFile(sourcePath, "utf-8");
+            const transformed = transformAgentForGemini(content, agentName);
+            await writeFile(join(targetDir, file), transformed, "utf-8");
+        }
+    },
+    async installHooks(_sourceDir) {
+        // Gemini CLI hooks are configured in .gemini/settings.json with
+        // event-based handlers (shell commands). The mechanism is different
+        // from OpenCode's TypeScript plugins.
+        //
+        // The solveOS state files (.solveos/STATE.md, BRIEF.md) remain readable
+        // by any hook script the user configures.
+        //
+        // Future: generate shell-based hooks for context monitor and brief anchor.
+    },
+};
+//# sourceMappingURL=gemini-cli.js.map

package/dist/lib/runtime-adapters/gemini-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-cli.js","sourceRoot":"","sources":["../../../src/lib/runtime-adapters/gemini-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD;;;;;GAKG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,WAAmB;IAC1D,IAAI,WAAW,GAAG,WAAW,WAAW,UAAU,CAAC;IACnD,IAAI,IAAI,GAAG,OAAO,CAAC;IAEnB,gCAAgC;IAChC,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAClE,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9D,IAAI,SAAS,EAAE,CAAC;YACd,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAED,iEAAiE;IACjE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAErD,OAAO,kBAAkB,gBAAgB,CAAC,WAAW,CAAC,oBAAoB,WAAW,OAAO,CAAC;AAC/F,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,CAAS;IACjC,OAAO,CAAC;SACL,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,OAAe,EAAE,SAAiB;IACjE,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAClE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,cAAc,SAAS,0BAA0B,SAAS,+BAA+B,OAAO,EAAE,CAAC;IAC5G,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,SAAS,QAAQ,CAAC;IAEnF,OAAO,cAAc,SAAS,kBAAkB,WAAW,yBAAyB,IAAI,EAAE,CAAC;AAC7F,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAmB;IACpC,KAAK,CAAC,MAAM;QACV,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,YAAY;gBAClB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,YAAY;SACnB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,4FAA4F;QAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACpC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAEzC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACzD,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,WAAW,OAAO,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACpC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAEzC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAChE,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,gEAAgE;QAChE,oEAAoE;QACpE,sCAAsC;QACtC,EAAE;QACF,wEAAwE;QACxE,0CAA0C;QAC1C,EAAE;QACF,2EAA2E;IAC7E,CAAC;CACF,CAAC"}

package/dist/lib/runtime-adapters/opencode.d.ts

@@ -0,0 +1,14 @@
+/**
+ * OpenCode runtime adapter for solveos-cli.
+ *
+ * Handles detection and installation of commands, agents, and hooks
+ * into OpenCode's directory structure.
+ *
+ * OpenCode conventions (from docs):
+ * - Commands: .opencode/commands/{name}.md -> /name
+ * - Agents:  .opencode/agents/{name}.md   -> @name
+ * - Plugins: .opencode/plugins/{name}.ts  -> loaded at startup
+ */
+import type { RuntimeAdapter } from "../../types.js";
+export declare const opencode: RuntimeAdapter;
+//# sourceMappingURL=opencode.d.ts.map

package/dist/lib/runtime-adapters/opencode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode.d.ts","sourceRoot":"","sources":["../../../src/lib/runtime-adapters/opencode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAgB,MAAM,gBAAgB,CAAC;AAmCnE,eAAO,MAAM,QAAQ,EAAE,cAmEtB,CAAC"}

package/dist/lib/runtime-adapters/opencode.js

@@ -0,0 +1,109 @@
+/**
+ * OpenCode runtime adapter for solveos-cli.
+ *
+ * Handles detection and installation of commands, agents, and hooks
+ * into OpenCode's directory structure.
+ *
+ * OpenCode conventions (from docs):
+ * - Commands: .opencode/commands/{name}.md -> /name
+ * - Agents:  .opencode/agents/{name}.md   -> @name
+ * - Plugins: .opencode/plugins/{name}.ts  -> loaded at startup
+ */
+import { mkdir, readdir, copyFile } from "node:fs/promises";
+import { join, basename } from "node:path";
+import { detectRuntime } from "../runtime-detect.js";
+/**
+ * Maps our command directory structure (commands/solveos/*.md)
+ * to OpenCode's flat convention (.opencode/commands/solveos-{name}.md).
+ *
+ * e.g., commands/solveos/new.md -> .opencode/commands/solveos-new.md
+ *       This becomes /solveos-new in OpenCode.
+ */
+function toOpencodeCommandName(filename) {
+    // Remove .md extension, prepend solveos- namespace
+    const name = basename(filename, ".md");
+    return `solveos-${name}.md`;
+}
+/**
+ * Maps our agent files (agents/solveos-*.md)
+ * to OpenCode's convention (.opencode/agents/solveos-{name}.md).
+ */
+function toOpencodeAgentName(filename) {
+    return basename(filename);
+}
+/**
+ * Maps our hook files (src/hooks/*.ts compiled to dist/hooks/*.js)
+ * to OpenCode's plugin convention (.opencode/plugins/solveos-{name}.ts).
+ *
+ * Note: We copy the TypeScript source directly — OpenCode's plugin loader
+ * supports TypeScript files natively.
+ */
+function toOpencodePluginName(filename) {
+    return basename(filename);
+}
+export const opencode = {
+    async detect() {
+        // We detect OpenCode by checking for .opencode/ dir or opencode.json
+        // in the current working directory
+        const cwd = process.cwd();
+        const result = await detectRuntime(cwd);
+        if (result && result.runtime === "opencode") {
+            return {
+                detected: true,
+                name: "OpenCode",
+                configPath: result.configPath,
+            };
+        }
+        return {
+            detected: false,
+            name: "OpenCode",
+        };
+    },
+    async installCommands(sourceDir) {
+        const cwd = process.cwd();
+        const targetDir = join(cwd, ".opencode", "commands");
+        await mkdir(targetDir, { recursive: true });
+        // sourceDir is the commands/solveos/ directory
+        const files = await readdir(sourceDir);
+        for (const file of files) {
+            if (!file.endsWith(".md"))
+                continue;
+            const sourcePath = join(sourceDir, file);
+            const targetName = toOpencodeCommandName(file);
+            const targetPath = join(targetDir, targetName);
+            await copyFile(sourcePath, targetPath);
+        }
+    },
+    async installAgents(sourceDir) {
+        const cwd = process.cwd();
+        const targetDir = join(cwd, ".opencode", "agents");
+        await mkdir(targetDir, { recursive: true });
+        const files = await readdir(sourceDir);
+        for (const file of files) {
+            if (!file.endsWith(".md"))
+                continue;
+            const sourcePath = join(sourceDir, file);
+            const targetName = toOpencodeAgentName(file);
+            const targetPath = join(targetDir, targetName);
+            await copyFile(sourcePath, targetPath);
+        }
+    },
+    async installHooks(sourceDir) {
+        const cwd = process.cwd();
+        const targetDir = join(cwd, ".opencode", "plugins");
+        await mkdir(targetDir, { recursive: true });
+        // sourceDir is src/hooks/ — contains TypeScript plugin files.
+        // OpenCode's plugin loader supports TypeScript natively.
+        const files = await readdir(sourceDir);
+        for (const file of files) {
+            if (!file.endsWith(".ts"))
+                continue;
+            const sourcePath = join(sourceDir, file);
+            const targetName = toOpencodePluginName(file);
+            // Prefix with solveos- to namespace our plugins
+            const targetPath = join(targetDir, `solveos-${targetName}`);
+            await copyFile(sourcePath, targetPath);
+        }
+    },
+};
+//# sourceMappingURL=opencode.js.map

package/dist/lib/runtime-adapters/opencode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode.js","sourceRoot":"","sources":["../../../src/lib/runtime-adapters/opencode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,mDAAmD;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,WAAW,IAAI,KAAK,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAmB;IACtC,KAAK,CAAC,MAAM;QACV,qEAAqE;QACrE,mCAAmC;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAC5C,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,UAAU;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,+CAA+C;QAC/C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACpC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAC/C,MAAM,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACpC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAC/C,MAAM,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,8DAA8D;QAC9D,yDAAyD;QACzD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACpC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC9C,gDAAgD;YAChD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,UAAU,EAAE,CAAC,CAAC;YAC5D,MAAM,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/lib/runtime-detect.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Runtime detection for solveos-cli.
+ *
+ * Checks for known AI coding assistant indicators in order of priority.
+ * Returns the first detected runtime, or null if none found.
+ */
+import type { Runtime } from "../types.js";
+interface DetectionResult {
+    runtime: Runtime;
+    name: string;
+    configPath: string;
+}
+/**
+ * Attempt to detect which AI coding assistant runtime is active.
+ * Checks in priority order: OpenCode, Claude Code, Cursor, Gemini CLI.
+ *
+ * @param projectDir - The project directory to check.
+ * @returns Detection result, or null if no runtime found.
+ */
+export declare function detectRuntime(projectDir: string): Promise<DetectionResult | null>;
+export {};
+//# sourceMappingURL=runtime-detect.d.ts.map

package/dist/lib/runtime-detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-detect.d.ts","sourceRoot":"","sources":["../../src/lib/runtime-detect.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,UAAU,eAAe;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAmDvF"}

package/dist/lib/runtime-detect.js

@@ -0,0 +1,73 @@
+/**
+ * Runtime detection for solveos-cli.
+ *
+ * Checks for known AI coding assistant indicators in order of priority.
+ * Returns the first detected runtime, or null if none found.
+ */
+import { access } from "node:fs/promises";
+import { join } from "node:path";
+/**
+ * Attempt to detect which AI coding assistant runtime is active.
+ * Checks in priority order: OpenCode, Claude Code, Cursor, Gemini CLI.
+ *
+ * @param projectDir - The project directory to check.
+ * @returns Detection result, or null if no runtime found.
+ */
+export async function detectRuntime(projectDir) {
+    // OpenCode: .opencode/ directory or opencode.json
+    const opencodeDir = join(projectDir, ".opencode");
+    const opencodeJson = join(projectDir, "opencode.json");
+    for (const indicator of [opencodeDir, opencodeJson]) {
+        if (await exists(indicator)) {
+            return {
+                runtime: "opencode",
+                name: "OpenCode",
+                configPath: indicator,
+            };
+        }
+    }
+    // Claude Code: .claude/ directory or CLAUDE.md
+    const claudeDir = join(projectDir, ".claude");
+    const claudeMd = join(projectDir, "CLAUDE.md");
+    for (const indicator of [claudeDir, claudeMd]) {
+        if (await exists(indicator)) {
+            return {
+                runtime: "claude-code",
+                name: "Claude Code",
+                configPath: indicator,
+            };
+        }
+    }
+    // Cursor: .cursor/ directory or .cursorrules
+    const cursorDir = join(projectDir, ".cursor");
+    const cursorRules = join(projectDir, ".cursorrules");
+    for (const indicator of [cursorDir, cursorRules]) {
+        if (await exists(indicator)) {
+            return {
+                runtime: "cursor",
+                name: "Cursor",
+                configPath: indicator,
+            };
+        }
+    }
+    // Gemini CLI: .gemini/ directory
+    const geminiDir = join(projectDir, ".gemini");
+    if (await exists(geminiDir)) {
+        return {
+            runtime: "gemini",
+            name: "Gemini CLI",
+            configPath: geminiDir,
+        };
+    }
+    return null;
+}
+async function exists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=runtime-detect.js.map

package/dist/lib/runtime-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-detect.js","sourceRoot":"","sources":["../../src/lib/runtime-detect.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,kDAAkD;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACvD,KAAK,MAAM,SAAS,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;QACpD,IAAI,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,SAAS;aACtB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC/C,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC9C,IAAI,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,aAAa;gBACtB,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,SAAS;aACtB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACrD,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;QACjD,IAAI,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,QAAQ;gBACjB,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,SAAS;aACtB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,SAAS;SACtB,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/lib/security.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Security module for solveos-cli.
+ *
+ * Protects against:
+ * 1. Path traversal attacks — ensures all file operations stay within .solveos/
+ * 2. Prompt injection — scans user-supplied content for injection patterns
+ *    before it's used as AI agent context
+ *
+ * Since solveos-cli generates markdown that becomes LLM system prompts,
+ * indirect prompt injection is a real attack surface.
+ */
+/**
+ * Validate that a target path resolves within a base directory.
+ * Prevents path traversal attacks (../../etc/passwd, symlinks, null bytes).
+ *
+ * @param basePath - The allowed root directory (e.g., /project/.solveos)
+ * @param targetPath - The path to validate (absolute or relative to basePath)
+ * @returns The resolved, validated absolute path
+ * @throws Error if the path escapes the base directory
+ */
+export declare function validatePath(basePath: string, targetPath: string): string;
+/**
+ * Validate path with symlink resolution.
+ * Resolves symlinks first, then validates the real path.
+ * Use this for operations where the target file already exists.
+ *
+ * @param basePath - The allowed root directory
+ * @param targetPath - The path to validate
+ * @returns The resolved, validated real path
+ * @throws Error if the real path escapes the base directory
+ */
+export declare function validatePathWithSymlinks(basePath: string, targetPath: string): Promise<string>;
+/**
+ * Custom error for path traversal attempts.
+ */
+export declare class PathTraversalError extends Error {
+    readonly attemptedPath: string;
+    readonly basePath: string;
+    constructor(message: string, attemptedPath: string, basePath: string);
+}
+/** Severity level for injection detection. */
+export type InjectionSeverity = "block" | "warn";
+/** Result of scanning content for injection patterns. */
+export interface InjectionScanResult {
+    /** Whether any patterns were detected. */
+    detected: boolean;
+    /** Highest severity of detected patterns. */
+    severity: InjectionSeverity | null;
+    /** List of matched patterns with descriptions. */
+    matches: InjectionMatch[];
+}
+/** A single injection pattern match. */
+export interface InjectionMatch {
+    /** Human-readable description of the pattern. */
+    pattern: string;
+    /** The matched text (truncated to 100 chars). */
+    matched: string;
+    /** Severity level. */
+    severity: InjectionSeverity;
+    /** Line number where the match was found (1-indexed). */
+    line: number;
+}
+/**
+ * Scan content for prompt injection patterns.
+ *
+ * @param content - The text to scan (Plan Brief content, research summaries, etc.)
+ * @returns Scan result with detected patterns, severity, and matches.
+ */
+export declare function scanForInjection(content: string): InjectionScanResult;
+/**
+ * Wrap user-supplied content with clear delimiters so the LLM can distinguish
+ * between system instructions and user content.
+ *
+ * This doesn't prevent injection but makes it harder for injected instructions
+ * to be confused with system-level prompts.
+ *
+ * @param content - The user-supplied content
+ * @param label - A label describing what this content is (e.g., "Plan Brief", "Research Summary")
+ * @returns Content wrapped with delimiters
+ */
+export declare function wrapUserContent(content: string, label: string): string;
+/**
+ * Sanitize a filename to prevent path traversal via filename manipulation.
+ * Allows: alphanumeric, hyphens, underscores, dots.
+ * Rejects: slashes, null bytes, special characters.
+ */
+export declare function sanitizeFilename(name: string): string;
+//# sourceMappingURL=security.d.ts.map

package/dist/lib/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/lib/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAkCzE;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CA0BjB;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAMrE;AAMD,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEjD,yDAAyD;AACzD,MAAM,WAAW,mBAAmB;IAClC,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,6CAA6C;IAC7C,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACnC,kDAAkD;IAClD,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,wCAAwC;AACxC,MAAM,WAAW,cAAc;IAC7B,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;CACd;AA8ED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,CAgCrE;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAMtE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAWrD"}