@agentuity/cli 0.1.24 → 0.1.25

package/dist/cmd/build/patch/otel-llm.js

@@ -0,0 +1,374 @@
+/**
+ * Generate the OTel wrapper code for LLM chat completions.
+ * This creates a span with GenAI semantic conventions.
+ */
+function generateChatCompletionsWrapper(config) {
+    const { provider, className, inputTokensField, outputTokensField, responseIdField = 'id', finishReasonPath, responseContentPath, requestMessagesField = 'messages', streamDeltaContentPath, streamFinishReasonPath, streamUsagePath = 'usage', } = config;
+    // Generate code to extract nested field (e.g., 'choices[0].finish_reason')
+    const generateFieldAccess = (path, varName) => {
+        if (!path)
+            return 'undefined';
+        // Convert path like 'choices[0].finish_reason' to safe access
+        const parts = path.split('.');
+        let code = varName;
+        for (const part of parts) {
+            const match = part.match(/^(\w+)\[(\d+)\]$/);
+            if (match) {
+                code = `(${code}?.${match[1]}?.[${match[2]}])`;
+            }
+            else {
+                code = `(${code}?.${part})`;
+            }
+        }
+        return code;
+    };
+    const finishReasonCode = generateFieldAccess(finishReasonPath, 'response');
+    const responseContentCode = generateFieldAccess(responseContentPath, 'response');
+    const streamDeltaCode = generateFieldAccess(streamDeltaContentPath, 'chunk');
+    const streamFinishCode = generateFieldAccess(streamFinishReasonPath, 'chunk');
+    const streamUsageCode = generateFieldAccess(streamUsagePath, 'chunk');
+    return `
+import * as _otel_api from '@opentelemetry/api';
+
+const _ATTR_GEN_AI_SYSTEM = 'gen_ai.system';
+const _ATTR_GEN_AI_REQUEST_MODEL = 'gen_ai.request.model';
+const _ATTR_GEN_AI_REQUEST_MAX_TOKENS = 'gen_ai.request.max_tokens';
+const _ATTR_GEN_AI_REQUEST_TEMPERATURE = 'gen_ai.request.temperature';
+const _ATTR_GEN_AI_REQUEST_TOP_P = 'gen_ai.request.top_p';
+const _ATTR_GEN_AI_REQUEST_FREQUENCY_PENALTY = 'gen_ai.request.frequency_penalty';
+const _ATTR_GEN_AI_REQUEST_PRESENCE_PENALTY = 'gen_ai.request.presence_penalty';
+const _ATTR_GEN_AI_RESPONSE_MODEL = 'gen_ai.response.model';
+const _ATTR_GEN_AI_RESPONSE_ID = 'gen_ai.response.id';
+const _ATTR_GEN_AI_RESPONSE_FINISH_REASONS = 'gen_ai.response.finish_reasons';
+const _ATTR_GEN_AI_USAGE_INPUT_TOKENS = 'gen_ai.usage.input_tokens';
+const _ATTR_GEN_AI_USAGE_OUTPUT_TOKENS = 'gen_ai.usage.output_tokens';
+const _ATTR_GEN_AI_OPERATION_NAME = 'gen_ai.operation.name';
+const _ATTR_GEN_AI_REQUEST_MESSAGES = 'gen_ai.request.messages';
+const _ATTR_GEN_AI_RESPONSE_TEXT = 'gen_ai.response.text';
+
+const _otel_tracer = _otel_api.trace.getTracer('@agentuity/otel-llm', '1.0.0');
+
+function _wrapAsyncIterator(iterator, span, inputTokensField, outputTokensField) {
+	let contentChunks = [];
+	let finishReason = null;
+	let usage = null;
+	let model = null;
+	let responseId = null;
+
+	return {
+		[Symbol.asyncIterator]() {
+			return this;
+		},
+		async next() {
+			try {
+				const result = await iterator.next();
+				if (result.done) {
+					// Stream complete - finalize span
+					if (contentChunks.length > 0) {
+						span.setAttribute(_ATTR_GEN_AI_RESPONSE_TEXT, contentChunks.join(''));
+					}
+					if (finishReason) {
+						span.setAttribute(_ATTR_GEN_AI_RESPONSE_FINISH_REASONS, JSON.stringify([finishReason]));
+					}
+					if (model) {
+						span.setAttribute(_ATTR_GEN_AI_RESPONSE_MODEL, model);
+					}
+					if (responseId) {
+						span.setAttribute(_ATTR_GEN_AI_RESPONSE_ID, responseId);
+					}
+					if (usage) {
+						if (usage[inputTokensField] !== undefined) {
+							span.setAttribute(_ATTR_GEN_AI_USAGE_INPUT_TOKENS, usage[inputTokensField]);
+						}
+						if (usage[outputTokensField] !== undefined) {
+							span.setAttribute(_ATTR_GEN_AI_USAGE_OUTPUT_TOKENS, usage[outputTokensField]);
+						}
+					}
+					span.setStatus({ code: _otel_api.SpanStatusCode.OK });
+					span.end();
+					return result;
+				}
+
+				const chunk = result.value;
+				
+				// Capture model and id from first chunk
+				if (chunk.model && !model) {
+					model = chunk.model;
+				}
+				if (chunk.id && !responseId) {
+					responseId = chunk.id;
+				}
+
+				// Capture delta content
+				const deltaContent = ${streamDeltaCode};
+				if (deltaContent) {
+					contentChunks.push(deltaContent);
+				}
+
+				// Capture finish reason
+				const chunkFinishReason = ${streamFinishCode};
+				if (chunkFinishReason) {
+					finishReason = chunkFinishReason;
+				}
+
+				// Capture usage (usually in final chunk with stream_options)
+				const chunkUsage = ${streamUsageCode};
+				if (chunkUsage) {
+					usage = chunkUsage;
+				}
+
+				return result;
+			} catch (error) {
+				span.setStatus({ code: _otel_api.SpanStatusCode.ERROR, message: error?.message });
+				span.recordException(error);
+				span.end();
+				throw error;
+			}
+		},
+		async return(value) {
+			span.setStatus({ code: _otel_api.SpanStatusCode.OK });
+			span.end();
+			if (iterator.return) {
+				return iterator.return(value);
+			}
+			return { done: true, value };
+		},
+		async throw(error) {
+			span.setStatus({ code: _otel_api.SpanStatusCode.ERROR, message: error?.message });
+			span.recordException(error);
+			span.end();
+			if (iterator.throw) {
+				return iterator.throw(error);
+			}
+			throw error;
+		}
+	};
+}
+
+function _wrapStream(stream, span, inputTokensField, outputTokensField) {
+	// Get the original iterator
+	const originalIterator = stream[Symbol.asyncIterator]();
+	const wrappedIterator = _wrapAsyncIterator(originalIterator, span, inputTokensField, outputTokensField);
+	
+	// Return a proxy that wraps the async iterator but preserves other properties/methods
+	return new Proxy(stream, {
+		get(target, prop) {
+			if (prop === Symbol.asyncIterator) {
+				return () => wrappedIterator;
+			}
+			// Preserve other stream methods like tee(), toReadableStream(), etc.
+			const value = target[prop];
+			if (typeof value === 'function') {
+				return value.bind(target);
+			}
+			return value;
+		}
+	});
+}
+
+// Safely patch the class if it exists
+let _original_create;
+try {
+	if (typeof ${className} === 'undefined' || !${className}.prototype || typeof ${className}.prototype.create !== 'function') {
+		console.debug('[Agentuity OTel] Skipping patch: ${className}.prototype.create not found or not a function');
+	} else {
+		_original_create = ${className}.prototype.create;
+		${className}.prototype.create = _agentuity_otel_create;
+	}
+} catch (e) {
+	console.debug('[Agentuity OTel] Failed to patch ${className}:', e?.message || e);
+}
+
+function _agentuity_otel_create(body, options) {
+	// If patching failed, _original_create won't be set - this shouldn't happen but handle gracefully
+	if (!_original_create) {
+		throw new Error('[Agentuity OTel] ${className}.prototype.create was not properly patched');
+	}
+	const attributes = {
+		[_ATTR_GEN_AI_SYSTEM]: '${provider}',
+		[_ATTR_GEN_AI_OPERATION_NAME]: 'chat',
+	};
+
+	if (body.model) {
+		attributes[_ATTR_GEN_AI_REQUEST_MODEL] = body.model;
+	}
+	if (body.max_tokens) {
+		attributes[_ATTR_GEN_AI_REQUEST_MAX_TOKENS] = body.max_tokens;
+	}
+	if (body.temperature !== undefined) {
+		attributes[_ATTR_GEN_AI_REQUEST_TEMPERATURE] = body.temperature;
+	}
+	if (body.top_p !== undefined) {
+		attributes[_ATTR_GEN_AI_REQUEST_TOP_P] = body.top_p;
+	}
+	if (body.frequency_penalty !== undefined) {
+		attributes[_ATTR_GEN_AI_REQUEST_FREQUENCY_PENALTY] = body.frequency_penalty;
+	}
+	if (body.presence_penalty !== undefined) {
+		attributes[_ATTR_GEN_AI_REQUEST_PRESENCE_PENALTY] = body.presence_penalty;
+	}
+
+	// Capture request messages
+	if (body.${requestMessagesField} && Array.isArray(body.${requestMessagesField})) {
+		try {
+			attributes[_ATTR_GEN_AI_REQUEST_MESSAGES] = JSON.stringify(body.${requestMessagesField});
+		} catch (e) {
+			// Ignore serialization errors
+		}
+	}
+
+	const spanName = body.model ? \`chat \${body.model}\` : 'chat';
+
+	return _otel_tracer.startActiveSpan(spanName, { attributes, kind: _otel_api.SpanKind.CLIENT }, (span) => {
+		let result;
+		try {
+			result = _original_create.call(this, body, options);
+		} catch (error) {
+			span.setStatus({ code: _otel_api.SpanStatusCode.ERROR, message: error?.message });
+			span.recordException(error);
+			span.end();
+			throw error;
+		}
+
+		// Handle streaming responses
+		if (body.stream) {
+			// Result is a Promise that resolves to a Stream
+			if (result && typeof result.then === 'function') {
+				return result.then((stream) => {
+					try {
+						return _wrapStream(stream, span, '${inputTokensField}', '${outputTokensField}');
+					} catch (error) {
+						span.setStatus({ code: _otel_api.SpanStatusCode.ERROR, message: error?.message });
+						span.recordException(error);
+						span.end();
+						throw error;
+					}
+				}).catch((error) => {
+					span.setStatus({ code: _otel_api.SpanStatusCode.ERROR, message: error?.message });
+					span.recordException(error);
+					span.end();
+					throw error;
+				});
+			}
+			// Result is already a Stream - wrap in try/catch for synchronous failures
+			try {
+				return _wrapStream(result, span, '${inputTokensField}', '${outputTokensField}');
+			} catch (error) {
+				span.setStatus({ code: _otel_api.SpanStatusCode.ERROR, message: error?.message });
+				span.recordException(error);
+				span.end();
+				throw error;
+			}
+		}
+
+		// Handle non-streaming responses
+		if (result && typeof result.then === 'function') {
+			return result.then((response) => {
+				if (response) {
+					if (response.model) {
+						span.setAttribute(_ATTR_GEN_AI_RESPONSE_MODEL, response.model);
+					}
+					if (response.${responseIdField}) {
+						span.setAttribute(_ATTR_GEN_AI_RESPONSE_ID, response.${responseIdField});
+					}
+					if (response.usage) {
+						if (response.usage.${inputTokensField} !== undefined) {
+							span.setAttribute(_ATTR_GEN_AI_USAGE_INPUT_TOKENS, response.usage.${inputTokensField});
+						}
+						if (response.usage.${outputTokensField} !== undefined) {
+							span.setAttribute(_ATTR_GEN_AI_USAGE_OUTPUT_TOKENS, response.usage.${outputTokensField});
+						}
+					}
+					// Extract finish reason
+					const finishReason = ${finishReasonCode};
+					if (finishReason) {
+						span.setAttribute(_ATTR_GEN_AI_RESPONSE_FINISH_REASONS, JSON.stringify([finishReason]));
+					}
+					// Extract response content
+					const responseContent = ${responseContentCode};
+					if (responseContent) {
+						span.setAttribute(_ATTR_GEN_AI_RESPONSE_TEXT, responseContent);
+					}
+				}
+				span.setStatus({ code: _otel_api.SpanStatusCode.OK });
+				span.end();
+				return response;
+			}).catch((error) => {
+				span.setStatus({ code: _otel_api.SpanStatusCode.ERROR, message: error?.message });
+				span.recordException(error);
+				span.end();
+				throw error;
+			});
+		}
+
+		span.end();
+		return result;
+	});
+}
+`;
+}
+export function generatePatches() {
+    const patches = new Map();
+    // OpenAI Chat Completions - patch resources/chat/completions/completions.mjs
+    patches.set('openai:otel', {
+        module: 'openai',
+        filename: 'resources/chat/completions/completions',
+        body: {
+            after: generateChatCompletionsWrapper({
+                provider: 'openai',
+                className: 'Completions',
+                inputTokensField: 'prompt_tokens',
+                outputTokensField: 'completion_tokens',
+                responseIdField: 'id',
+                finishReasonPath: 'choices[0].finish_reason',
+                responseContentPath: 'choices[0].message.content',
+                requestMessagesField: 'messages',
+                streamDeltaContentPath: 'choices[0].delta.content',
+                streamFinishReasonPath: 'choices[0].finish_reason',
+                streamUsagePath: 'usage',
+            }),
+        },
+    });
+    // Anthropic Messages - patch resources/messages.mjs
+    patches.set('@anthropic-ai/sdk:otel', {
+        module: '@anthropic-ai/sdk',
+        filename: 'resources/messages',
+        body: {
+            after: generateChatCompletionsWrapper({
+                provider: 'anthropic',
+                className: 'Messages',
+                inputTokensField: 'input_tokens',
+                outputTokensField: 'output_tokens',
+                responseIdField: 'id',
+                finishReasonPath: 'stop_reason',
+                responseContentPath: 'content[0].text',
+                requestMessagesField: 'messages',
+                streamDeltaContentPath: 'delta.text',
+                streamFinishReasonPath: 'delta.stop_reason',
+                streamUsagePath: 'usage',
+            }),
+        },
+    });
+    // Groq Chat Completions - patch resources/chat/completions.mjs
+    patches.set('groq-sdk:otel', {
+        module: 'groq-sdk',
+        filename: 'resources/chat/completions',
+        body: {
+            after: generateChatCompletionsWrapper({
+                provider: 'groq',
+                className: 'Completions',
+                inputTokensField: 'prompt_tokens',
+                outputTokensField: 'completion_tokens',
+                responseIdField: 'id',
+                finishReasonPath: 'choices[0].finish_reason',
+                responseContentPath: 'choices[0].message.content',
+                requestMessagesField: 'messages',
+                streamDeltaContentPath: 'choices[0].delta.content',
+                streamFinishReasonPath: 'choices[0].finish_reason',
+                streamUsagePath: 'x_groq.usage',
+            }),
+        },
+    });
+    return patches;
+}
+//# sourceMappingURL=otel-llm.js.map

package/dist/cmd/build/patch/otel-llm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel-llm.js","sourceRoot":"","sources":["../../../../src/cmd/build/patch/otel-llm.ts"],"names":[],"mappings":"AA8BA;;;GAGG;AACH,SAAS,8BAA8B,CAAC,MAAuB;IAC9D,MAAM,EACL,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,GAAG,IAAI,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GAAG,UAAU,EACjC,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,GAAG,OAAO,GACzB,GAAG,MAAM,CAAC;IAEX,2EAA2E;IAC3E,MAAM,mBAAmB,GAAG,CAAC,IAAwB,EAAE,OAAe,EAAU,EAAE;QACjF,IAAI,CAAC,IAAI;YAAE,OAAO,WAAW,CAAC;QAC9B,8DAA8D;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,IAAI,GAAG,OAAO,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAC7C,IAAI,KAAK,EAAE,CAAC;gBACX,IAAI,GAAG,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACP,IAAI,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,CAAC;YAC7B,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;IAC3E,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;IACjF,MAAM,eAAe,GAAG,mBAAmB,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;IAC9E,MAAM,eAAe,GAAG,mBAAmB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAEtE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAyEmB,eAAe;;;;;;gCAMV,gBAAgB;;;;;;yBAMvB,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAyD1B,SAAS,wBAAwB,SAAS,wBAAwB,SAAS;oDACrC,SAAS;;uBAEtC,SAAS;IAC5B,SAAS;;;mDAGsC,SAAS;;;;;;sCAMtB,SAAS;;;4BAGnB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;YAwBxB,oBAAoB,0BAA0B,oBAAoB;;qEAET,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;0CAyB/C,gBAAgB,OAAO,iBAAiB;;;;;;;;;;;;;;;;wCAgB1C,gBAAgB,OAAO,iBAAiB;;;;;;;;;;;;;;;;oBAgB5D,eAAe;6DAC0B,eAAe;;;2BAGjD,gBAAgB;2EACgC,gBAAgB;;2BAEhE,iBAAiB;4EACgC,iBAAiB;;;;4BAIjE,gBAAgB;;;;;+BAKb,mBAAmB;;;;;;;;;;;;;;;;;;;;CAoBjD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,eAAe;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE/C,6EAA6E;IAC7E,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE;QAC1B,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,wCAAwC;QAClD,IAAI,EAAE;YACL,KAAK,EAAE,8BAA8B,CAAC;gBACrC,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,aAAa;gBACxB,gBAAgB,EAAE,eAAe;gBACjC,iBAAiB,EAAE,mBAAmB;gBACtC,eAAe,EAAE,IAAI;gBACrB,gBAAgB,EAAE,0BAA0B;gBAC5C,mBAAmB,EAAE,4BAA4B;gBACjD,oBAAoB,EAAE,UAAU;gBAChC,sBAAsB,EAAE,0BAA0B;gBAClD,sBAAsB,EAAE,0BAA0B;gBAClD,eAAe,EAAE,OAAO;aACxB,CAAC;SACF;KACD,CAAC,CAAC;IAEH,oDAAoD;IACpD,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE;QACrC,MAAM,EAAE,mBAAmB;QAC3B,QAAQ,EAAE,oBAAoB;QAC9B,IAAI,EAAE;YACL,KAAK,EAAE,8BAA8B,CAAC;gBACrC,QAAQ,EAAE,WAAW;gBACrB,SAAS,EAAE,UAAU;gBACrB,gBAAgB,EAAE,cAAc;gBAChC,iBAAiB,EAAE,eAAe;gBAClC,eAAe,EAAE,IAAI;gBACrB,gBAAgB,EAAE,aAAa;gBAC/B,mBAAmB,EAAE,iBAAiB;gBACtC,oBAAoB,EAAE,UAAU;gBAChC,sBAAsB,EAAE,YAAY;gBACpC,sBAAsB,EAAE,mBAAmB;gBAC3C,eAAe,EAAE,OAAO;aACxB,CAAC;SACF;KACD,CAAC,CAAC;IAEH,+DAA+D;IAC/D,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE;QAC5B,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,4BAA4B;QACtC,IAAI,EAAE;YACL,KAAK,EAAE,8BAA8B,CAAC;gBACrC,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,aAAa;gBACxB,gBAAgB,EAAE,eAAe;gBACjC,iBAAiB,EAAE,mBAAmB;gBACtC,eAAe,EAAE,IAAI;gBACrB,gBAAgB,EAAE,0BAA0B;gBAC5C,mBAAmB,EAAE,4BAA4B;gBACjD,oBAAoB,EAAE,UAAU;gBAChC,sBAAsB,EAAE,0BAA0B;gBAClD,sBAAsB,EAAE,0BAA0B;gBAClD,eAAe,EAAE,cAAc;aAC/B,CAAC;SACF;KACD,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/cmd/cloud/db/create.js

@@ -15,10 +15,10 @@ export const createSubcommand = defineSubcommand({
     idempotent: false,
     requires: { auth: true, org: true, region: true },
     examples: [
-        { command: getCommand('cloud db create'), description: 'Create new item' },
+        { command: getCommand('cloud db create'), description: 'Create new database' },
         { command: getCommand('cloud db new'), description: 'Run new command' },
-        { command: getCommand('cloud db create --name my-db'), description: 'Create new item' },
-        { command: getCommand('--dry-run cloud db create'), description: 'Create new item' },
+        { command: getCommand('cloud db create --name my-db'), description: 'Create new database' },
+        { command: getCommand('--dry-run cloud db create'), description: 'Create new database' },
     ],
     schema: {
         options: z.object({

package/dist/cmd/cloud/db/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/db/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;IAChD,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,CAAC,KAAK,CAAC;IAChB,WAAW,EAAE,gCAAgC;IAC7C,IAAI,EAAE,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE,qBAAqB,CAAC;IACtF,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IACjD,QAAQ,EAAE;QACT,EAAE,OAAO,EAAE,UAAU,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE;QAC1E,EAAE,OAAO,EAAE,UAAU,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE;QACvE,EAAE,OAAO,EAAE,UAAU,CAAC,8BAA8B,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE;QACvF,EAAE,OAAO,EAAE,UAAU,CAAC,2BAA2B,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE;KACpF;IACD,MAAM,EAAE;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;SAC5E,CAAC;QACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;SAClD,CAAC;KACF;IAED,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QAE3D,qCAAqC;QACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACvB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAM,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAC1D,CAAC;QACF,CAAC;QAED,sBAAsB;QACtB,IAAI,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI;gBACtB,CAAC,CAAC,oCAAoC,IAAI,CAAC,IAAI,eAAe,MAAM,EAAE;gBACtE,CAAC,CAAC,oCAAoC,MAAM,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACtB,OAAO,IAAI,uBAAuB,IAAI,CAAC,WAAW,GAAG,CAAC;YACvD,CAAC;YACD,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACnB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACjD,CAAC;YACD,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,YAAY;aAC/B,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAElE,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC;gBACjC,OAAO,EAAE,wBAAwB,MAAM,EAAE;gBACzC,cAAc,EAAE,IAAI;gBACpB,QAAQ,EAAE,KAAK,IAAI,EAAE;oBACpB,OAAO,MAAM,eAAe,CAAC,cAAc,EAAE,KAAK,EAAE,MAAO,EAAE;wBAC5D,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;qBAC9D,CAAC,CAAC;gBACJ,CAAC;aACD,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBAE5B,kEAAkE;gBAClE,IAAI,GAAG,CAAC,UAAU,IAAI,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5E,MAAM,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACvD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;wBACnB,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;oBACnD,CAAC;gBACF,CAAC;gBAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBACnB,GAAG,CAAC,OAAO,CAAC,qBAAqB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,OAAO;oBACN,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,QAAQ,CAAC,IAAI;iBACnB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACP,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACxC,CAAC;QACF,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACb,IAAI,EAAE,YAAY,QAAQ,EAAE,CAAC;gBAC5B,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,IAAI,gBAAgB,CAAC;oBAC7C,GAAG,CAAC,KAAK,CACR,2BAA2B,MAAM,6GAA6G,EAC9I,SAAS,CAAC,gBAAgB,CAC1B,CAAC;gBACH,CAAC;YACF,CAAC;YACD,MAAM,EAAE,CAAC;QACV,CAAC;IACF,CAAC;CACD,CAAC,CAAC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/db/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;IAChD,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,CAAC,KAAK,CAAC;IAChB,WAAW,EAAE,gCAAgC;IAC7C,IAAI,EAAE,CAAC,UAAU,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE,qBAAqB,CAAC;IACtF,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IACjD,QAAQ,EAAE;QACT,EAAE,OAAO,EAAE,UAAU,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE;QAC9E,EAAE,OAAO,EAAE,UAAU,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE;QACvE,EAAE,OAAO,EAAE,UAAU,CAAC,8BAA8B,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE;QAC3F,EAAE,OAAO,EAAE,UAAU,CAAC,2BAA2B,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE;KACxF;IACD,MAAM,EAAE;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;SAC5E,CAAC;QACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;SAClD,CAAC;KACF;IAED,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QAE3D,qCAAqC;QACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACvB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,KAAM,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAC1D,CAAC;QACF,CAAC;QAED,sBAAsB;QACtB,IAAI,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI;gBACtB,CAAC,CAAC,oCAAoC,IAAI,CAAC,IAAI,eAAe,MAAM,EAAE;gBACtE,CAAC,CAAC,oCAAoC,MAAM,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACtB,OAAO,IAAI,uBAAuB,IAAI,CAAC,WAAW,GAAG,CAAC;YACvD,CAAC;YACD,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACnB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACjD,CAAC;YACD,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,YAAY;aAC/B,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAElE,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC;gBACjC,OAAO,EAAE,wBAAwB,MAAM,EAAE;gBACzC,cAAc,EAAE,IAAI;gBACpB,QAAQ,EAAE,KAAK,IAAI,EAAE;oBACpB,OAAO,MAAM,eAAe,CAAC,cAAc,EAAE,KAAK,EAAE,MAAO,EAAE;wBAC5D,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;qBAC9D,CAAC,CAAC;gBACJ,CAAC;aACD,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBAE5B,kEAAkE;gBAClE,IAAI,GAAG,CAAC,UAAU,IAAI,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5E,MAAM,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACvD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;wBACnB,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;oBACnD,CAAC;gBACF,CAAC;gBAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBACnB,GAAG,CAAC,OAAO,CAAC,qBAAqB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,OAAO;oBACN,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,QAAQ,CAAC,IAAI;iBACnB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACP,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACxC,CAAC;QACF,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACb,IAAI,EAAE,YAAY,QAAQ,EAAE,CAAC;gBAC5B,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,IAAI,gBAAgB,CAAC;oBAC7C,GAAG,CAAC,KAAK,CACR,2BAA2B,MAAM,6GAA6G,EAC9I,SAAS,CAAC,gBAAgB,CAC1B,CAAC;gBACH,CAAC;YACF,CAAC;YACD,MAAM,EAAE,CAAC;QACV,CAAC;IACF,CAAC;CACD,CAAC,CAAC"}

package/dist/cmd/cloud/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../../src/cmd/cloud/deploy.ts"],"names":[],"mappings":"AAgFA,eAAO,MAAM,gBAAgB,sCAm+B3B,CAAC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../../src/cmd/cloud/deploy.ts"],"names":[],"mappings":"AAmFA,eAAO,MAAM,gBAAgB,sCA4iC3B,CAAC"}

package/dist/cmd/cloud/deploy.js

@@ -14,17 +14,18 @@ import { runGitLink } from '../git/link';
 import { runSteps, stepSuccess, stepSkipped, stepError, pauseStepUI, } from '../../steps';
 import { viteBundle } from '../build/vite-bundler';
 import { loadBuildMetadata, getStreamURL } from '../../config';
-import { projectEnvUpdate, projectDeploymentCreate, projectDeploymentUpdate, projectDeploymentComplete, projectDeploymentStatus, validateResources, getAppBaseURL, } from '@agentuity/server';
+import { projectEnvUpdate, projectDeploymentCreate, projectDeploymentUpdate, projectDeploymentComplete, projectDeploymentStatus, projectDeploymentMalwareCheck, validateResources, getAppBaseURL, } from '@agentuity/server';
 import { findExistingEnvFile, readEnvFile, filterAgentuitySdkKeys, splitEnvAndSecrets, } from '../../env-util';
 import { zipDir } from '../../utils/zip';
 import { encryptFIPSKEMDEMStream } from '../../crypto/box';
 import { getCommand } from '../../command-prefix';
 import * as domain from '../../domain';
-import { ErrorCode } from '../../errors';
+import { ErrorCode, getExitCode } from '../../errors';
 import { typecheck } from '../build/typecheck';
 import { BuildReportCollector, setGlobalCollector, clearGlobalCollector } from '../../build-report';
 import { runForkedDeploy } from './deploy-fork';
 import { validateAptDependencies } from '../../utils/apt-validator';
+import { extractDependencies } from '../../utils/deps';
 const DeploymentCancelledError = StructuredError('DeploymentCancelled', 'Deployment cancelled by user');
 const DeployResponseSchema = z.object({
     success: z.boolean().describe('Whether deployment succeeded'),
@@ -114,6 +115,7 @@ export const deploySubcommand = createSubcommand({
         let instructions;
         let complete;
         let statusResult;
+        let malwareCheckPromise;
         const logs = [];
         const sdkKey = await loadProjectSDKKey(ctx.logger, ctx.projectDir);
         // Ensure SDK key is present before proceeding
@@ -248,6 +250,27 @@ export const deploySubcommand = createSubcommand({
                 logger.fatal(`Failed to parse AGENTUITY_DEPLOYMENT: ${err}`);
             }
         }
+        // Start malware check async (runs in parallel with build)
+        if (deployment) {
+            malwareCheckPromise = (async () => {
+                try {
+                    logger.debug('Starting malware dependency check');
+                    const packages = await extractDependencies(projectDir, logger);
+                    if (packages.length === 0) {
+                        logger.debug('No packages to check for malware');
+                        return null;
+                    }
+                    logger.debug('Checking %d packages for malware', packages.length);
+                    const result = await projectDeploymentMalwareCheck(apiClient, deployment.id, packages);
+                    logger.debug('Malware check complete: action=%s, flagged=%d', result.action, result.summary.flagged);
+                    return result;
+                }
+                catch (error) {
+                    logger.warn('Malware check failed: %s', error);
+                    return null;
+                }
+            })();
+        }
         try {
             await saveProjectDir(projectDir);
             // Check GitHub status and prompt for setup if not linked
@@ -415,6 +438,36 @@ export const deploySubcommand = createSubcommand({
                         }
                     },
                 },
+                {
+                    label: 'Security Scan',
+                    run: async () => {
+                        if (!malwareCheckPromise) {
+                            return stepSkipped('malware check not started');
+                        }
+                        const result = await malwareCheckPromise;
+                        if (!result) {
+                            return stepSkipped('malware check unavailable');
+                        }
+                        if (result.action === 'block' && result.findings.length > 0) {
+                            if (opts.reportFile) {
+                                for (const finding of result.findings) {
+                                    collector.addGeneralError('deploy', `Malicious package: ${finding.name}@${finding.version} (${finding.reason})`);
+                                }
+                                await collector.forceWrite();
+                            }
+                            const packageList = result.findings
+                                .map((f) => `• ${f.name}@${f.version} (${f.reason})`)
+                                .join('\n');
+                            // Pause step UI to cleanly render error box
+                            pauseStepUI(true);
+                            tui.newline();
+                            tui.errorBox('Malicious Packages Detected', `Your deployment was blocked because it contains known malicious packages:\n\n${packageList}\n\nRemove these packages from your project and try again.`);
+                            tui.newline();
+                            process.exit(getExitCode(ErrorCode.MALWARE_DETECTED));
+                        }
+                        return stepSuccess([`Scanned ${result.summary.scanned} packages`]);
+                    },
+                },
                 {
                     label: 'Encrypt and Upload Deployment',
                     run: async (stepCtx) => {