chore(go): audit providers claudecode codex cursor gemini

Add managed_runtime.go (paths, config validation, identity, runtime file
changes, status checks) and shell_command.go (quoting, PowerShell
encoding, command parsing) and move the four providers onto them.

Claude-Session: https://claude.ai/code/session_01Agoc9bRVE9KL7mmWtey9Vq

cmd/elydora/plugins/gemini_command.go

@@ -7,83 +7,37 @@ import (
 	"strings"
 )
 
-type geminiRuntimeReference struct {
-	agentID    string
-	scriptPath string
-}
-
-func sameGeminiPath(left, right string) bool {
-	left = filepath.Clean(left)
-	right = filepath.Clean(right)
-	if absolute, err := filepath.Abs(left); err == nil {
-		left = absolute
-	}
-	if absolute, err := filepath.Abs(right); err == nil {
-		right = absolute
-	}
-	if runtime.GOOS == "windows" {
-		return strings.EqualFold(left, right)
-	}
-	return left == right
-}
-
-func sameGeminiAgentID(left, right string) bool {
-	if runtime.GOOS == "windows" {
-		return strings.EqualFold(left, right)
-	}
-	return left == right
-}
-
-func sameGeminiFileName(left, right string) bool {
-	if runtime.GOOS == "windows" {
-		return strings.EqualFold(left, right)
-	}
-	return left == right
-}
-
-func isGeminiNodeExecutable(path string) bool {
-	name := filepath.Base(path)
-	return name == "node" || strings.EqualFold(name, "node.exe")
-}
+type geminiRuntimeReference = managedScriptReference
 
 func buildGeminiCommand(runtimePath, scriptPath string) (string, error) {
 	if !filepath.IsAbs(runtimePath) || !filepath.IsAbs(scriptPath) {
-		return "", fmt.Errorf(
-			"Gemini CLI hook commands require absolute runtime and script paths",
-		)
+		return "", fmt.Errorf("Gemini CLI hook commands require absolute runtime and script paths")
 	}
 	if runtime.GOOS != "windows" {
-		return quotePOSIXArgument(runtimePath) + " " + quotePOSIXArgument(scriptPath), nil
+		return posixSource(runtimePath, scriptPath), nil
 	}
-	source := "& " + quoteCodexPowerShell(runtimePath) + " " +
-		quoteCodexPowerShell(scriptPath) + "; exit $LASTEXITCODE"
-	return "& " + quoteCodexPowerShell(codexPowerShellPath()) +
-		" -NoLogo -NoProfile -NonInteractive -EncodedCommand " +
-		encodeCodexPowerShell(source), nil
+	return "& " + quotePowerShellArgument(windowsPowerShellPath()) + powerShellEncodedFlags +
+		encodePowerShellSource(powerShellSource(runtimePath, scriptPath)), nil
 }
 
 func parseGeminiWindowsCommand(command string) (string, string, bool) {
 	if !strings.HasPrefix(command, "& ") {
 		return "", "", false
 	}
-	powerShell, next, ok := readCodexPowerShellArgument(command, 2)
-	if !ok || !isAbsoluteWindowsPath(powerShell) ||
-		!strings.EqualFold(windowsPathBase(powerShell), "powershell.exe") {
+	powerShell, next, ok := readPowerShellArgument(command, 2)
+	if !ok || !isPowerShellExecutable(powerShell) ||
+		!strings.HasPrefix(command[next:], powerShellEncodedFlags) {
 		return "", "", false
 	}
-	prefix := " -NoLogo -NoProfile -NonInteractive -EncodedCommand "
-	if !strings.HasPrefix(command[next:], prefix) {
-		return "", "", false
-	}
-	source, ok := decodeCodexPowerShell(command[next+len(prefix):])
+	source, ok := decodePowerShellSource(command[next+len(powerShellEncodedFlags):])
 	if !ok {
 		return "", "", false
 	}
-	return parseCodexPowerShellSource(source)
+	return parsePowerShellSource(source)
 }
 
 func parseGeminiCommand(command string) (string, string, bool) {
-	if runtimePath, scriptPath, ok := parseCodexPOSIXCommand(command); ok {
+	if runtimePath, scriptPath, ok := parsePOSIXCommand(command); ok {
 		return runtimePath, scriptPath, true
 	}
 	return parseGeminiWindowsCommand(command)
@@ -110,23 +64,10 @@ func geminiRuntimeReferenceForCommand(
 	if !current && includeLegacy {
 		runtimePath, scriptPath, legacy = parseLegacyGeminiCommand(command)
 	}
-	validRuntime := (current && filepath.IsAbs(runtimePath) &&
-		isGeminiNodeExecutable(runtimePath)) || (legacy && runtimePath == "node")
-	if !validRuntime || !filepath.IsAbs(scriptPath) ||
-		!sameGeminiFileName(filepath.Base(scriptPath), scriptName) {
+	validRuntime := (current && filepath.IsAbs(runtimePath) && isNodeExecutable(runtimePath)) ||
+		(legacy && runtimePath == "node")
+	if !validRuntime {
 		return nil, nil
 	}
-	agentDirectory := filepath.Dir(scriptPath)
-	runtimeRoot, err := AgentRuntimeRoot()
-	if err != nil {
-		return nil, err
-	}
-	if !sameGeminiPath(filepath.Dir(agentDirectory), runtimeRoot) {
-		return nil, nil
-	}
-	agentID := filepath.Base(agentDirectory)
-	if agentID == "" || agentID == "." || agentID == ".." {
-		return nil, nil
-	}
-	return &geminiRuntimeReference{agentID: agentID, scriptPath: scriptPath}, nil
+	return resolveManagedScript(scriptPath, scriptName)
 }