@connexum/ai-governance 1.0.0-beta.11

package/dist/cli/agent-dir-scanner.js

@@ -0,0 +1,269 @@
+"use strict";
+/**
+ * agent-dir-scanner.ts
+ *
+ * Scan a directory for AI agent source files and classify them by provider
+ * and framework. Pure function — no disk writes, only reads + directory walk.
+ *
+ * F-NEW-PRODUCT-AGENT-DIR-WRAPPER slice 1
+ * @connexum/ai-governance
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scanAgentDirectory = scanAgentDirectory;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const crypto = __importStar(require("crypto"));
+const agent_signatures_1 = require("./agent-signatures");
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const SKIPPED_DIRS = new Set([
+    'node_modules',
+    '__pycache__',
+    '.git',
+    'dist',
+    'build',
+    '.venv',
+    'venv',
+]);
+const PYTHON_EXTS = new Set(['.py']);
+const TS_EXTS = new Set(['.ts', '.tsx', '.js', '.mjs', '.jsx']);
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function languageOf(ext) {
+    if (ext === '.py')
+        return 'python';
+    if (ext === '.ts' || ext === '.tsx')
+        return 'typescript';
+    if (ext === '.js' || ext === '.mjs' || ext === '.jsx')
+        return 'javascript';
+    return null;
+}
+/**
+ * Strip triple-quoted Python blocks (both """ and ''') from a line array so
+ * that signature matches inside docstrings are not counted. Returns a copy of
+ * lines where the interior of any triple-quoted block is replaced with blank
+ * strings. Lines that START a triple-quote block and immediately END it on the
+ * same line (e.g. """value""") are also neutralised.
+ */
+function stripPythonTripleQuotes(lines) {
+    const result = [];
+    let inTriple = false;
+    let tripleChar = '';
+    for (const line of lines) {
+        if (!inTriple) {
+            // Look for the start of a triple-quote block
+            const dq = line.indexOf('"""');
+            const sq = line.indexOf("'''");
+            const startIdx = dq === -1 && sq === -1
+                ? -1
+                : dq === -1 ? sq : sq === -1 ? dq : Math.min(dq, sq);
+            if (startIdx !== -1) {
+                const delim = line[startIdx] === '"' ? '"""' : "'''";
+                const afterStart = line.indexOf(delim, startIdx + 3);
+                if (afterStart !== -1) {
+                    // Opened and closed on the same line — blank the interior
+                    result.push(line.slice(0, startIdx));
+                }
+                else {
+                    // Started but not closed on this line — blank rest of line and enter block
+                    result.push(line.slice(0, startIdx));
+                    inTriple = true;
+                    tripleChar = delim;
+                }
+            }
+            else {
+                result.push(line);
+            }
+        }
+        else {
+            // Inside a triple-quoted block — push blank until closing delimiter
+            const closeIdx = line.indexOf(tripleChar);
+            if (closeIdx !== -1) {
+                result.push(''); // blank; closing delimiter line consumed
+                inTriple = false;
+                tripleChar = '';
+            }
+            else {
+                result.push('');
+            }
+        }
+    }
+    return result;
+}
+/**
+ * Strip single-line comments before regex matching.
+ * Python: # ...
+ * JS/TS: // ...
+ */
+function stripLineComment(line, lang) {
+    if (lang === 'python') {
+        const idx = line.indexOf('#');
+        if (idx !== -1)
+            return line.slice(0, idx);
+    }
+    else {
+        const idx = line.indexOf('//');
+        if (idx !== -1)
+            return line.slice(0, idx);
+    }
+    return line;
+}
+function stableId(filePath, pattern) {
+    const hash = crypto.createHash('sha256').update(filePath + '|' + pattern).digest('hex');
+    return 'auto-' + hash.slice(0, 12);
+}
+function analyseFile(absolutePath, relPath, lang) {
+    let raw;
+    try {
+        raw = fs.readFileSync(absolutePath, 'utf-8');
+    }
+    catch {
+        return null;
+    }
+    const rawLines = raw.split('\n');
+    // For Python: strip triple-quoted blocks first to avoid docstring false-positives
+    const lines = lang === 'python' ? stripPythonTripleQuotes(rawLines) : rawLines;
+    const lineRanges = [];
+    let provider = null;
+    let framework = null;
+    let firstPattern = '';
+    const providerSigs = lang === 'python' ? agent_signatures_1.PYTHON_SIGNATURES : agent_signatures_1.TYPESCRIPT_SIGNATURES;
+    const frameworkSigs = lang === 'python'
+        ? agent_signatures_1.PYTHON_FRAMEWORK_SIGNATURES
+        : agent_signatures_1.TYPESCRIPT_FRAMEWORK_SIGNATURES;
+    for (let i = 0; i < lines.length; i++) {
+        const stripped = stripLineComment(lines[i], lang);
+        // Check framework signatures first (they may also carry provider info)
+        for (const sig of frameworkSigs) {
+            if (sig.regex.test(stripped)) {
+                if (!framework) {
+                    framework = sig.framework;
+                    if (sig.provider && !provider)
+                        provider = sig.provider;
+                    if (!firstPattern)
+                        firstPattern = sig.regex.source;
+                }
+                lineRanges.push({ start: i + 1, end: i + 1, match: rawLines[i].trim() });
+                break;
+            }
+        }
+        // Check provider signatures
+        for (const sig of providerSigs) {
+            if (sig.regex.test(stripped)) {
+                if (!provider) {
+                    provider = sig.provider;
+                    if (!firstPattern)
+                        firstPattern = sig.regex.source;
+                }
+                lineRanges.push({ start: i + 1, end: i + 1, match: rawLines[i].trim() });
+                break;
+            }
+        }
+    }
+    if (lineRanges.length === 0)
+        return null;
+    // Deduplicate line ranges (a line may match both framework and provider sig)
+    const seen = new Set();
+    const dedupedRanges = [];
+    for (const lr of lineRanges) {
+        if (!seen.has(lr.start)) {
+            seen.add(lr.start);
+            dedupedRanges.push(lr);
+        }
+    }
+    return { provider, framework, lineRanges: dedupedRanges, kind: 'import', firstPattern };
+}
+// ---------------------------------------------------------------------------
+// Directory walker
+// ---------------------------------------------------------------------------
+function walkDir(dirPath, baseDir, results) {
+    let entries;
+    try {
+        entries = fs.readdirSync(dirPath, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const entry of entries) {
+        if (entry.isDirectory()) {
+            if (SKIPPED_DIRS.has(entry.name))
+                continue;
+            walkDir(path.join(dirPath, entry.name), baseDir, results);
+        }
+        else if (entry.isFile()) {
+            const ext = path.extname(entry.name).toLowerCase();
+            if (!PYTHON_EXTS.has(ext) && !TS_EXTS.has(ext))
+                continue;
+            const lang = languageOf(ext);
+            if (!lang)
+                continue;
+            const absPath = path.join(dirPath, entry.name);
+            const relPath = path.relative(baseDir, absPath);
+            const match = analyseFile(absPath, relPath, lang);
+            if (!match)
+                continue;
+            const agentId = stableId(relPath, match.firstPattern);
+            results.push({
+                agentId,
+                filePath: relPath,
+                language: lang,
+                provider: match.provider,
+                framework: match.framework,
+                lineRanges: match.lineRanges,
+                wrapMode: 'shim',
+                packs: [],
+            });
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Public entry point
+// ---------------------------------------------------------------------------
+/**
+ * Recursively scan `dirPath` for Python / TS / JS files that contain AI
+ * provider or framework imports. Returns one DetectedAgent per file that
+ * matches at least one signature.
+ *
+ * Pure function: no disk writes, no async I/O.
+ */
+function scanAgentDirectory(dirPath) {
+    const results = [];
+    walkDir(dirPath, dirPath, results);
+    return results;
+}
+//# sourceMappingURL=agent-dir-scanner.js.map

package/dist/cli/agent-dir-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-dir-scanner.js","sourceRoot":"","sources":["../../src/cli/agent-dir-scanner.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsRH,gDAIC;AAxRD,uCAAyB;AACzB,2CAA6B;AAC7B,+CAAiC;AACjC,yDAK4B;AAyB5B,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,cAAc;IACd,aAAa;IACb,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACrC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEhE,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IACnC,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;IACzD,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,KAAe;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAAU,GAAG,EAAE,CAAC;IAEpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,6CAA6C;YAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACrC,CAAC,CAAC,CAAC,CAAC;gBACJ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAEvD,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;gBACrD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;gBACrD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;oBACtB,0DAA0D;oBAC1D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACvC,CAAC;qBAAM,CAAC;oBACN,2EAA2E;oBAC3E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;oBACrC,QAAQ,GAAG,IAAI,CAAC;oBAChB,UAAU,GAAG,KAAK,CAAC;gBACrB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,oEAAoE;YACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,yCAAyC;gBAC1D,QAAQ,GAAG,KAAK,CAAC;gBACjB,UAAU,GAAG,EAAE,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,IAA4C;IAClF,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB,EAAE,OAAe;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,GAAG,GAAG,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxF,OAAO,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAcD,SAAS,WAAW,CAClB,YAAoB,EACpB,OAAe,EACf,IAA4C;IAE5C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEjC,kFAAkF;IAClF,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE/E,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,YAAY,GAAG,EAAE,CAAC;IAEtB,MAAM,YAAY,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,oCAAiB,CAAC,CAAC,CAAC,wCAAqB,CAAC;IACnF,MAAM,aAAa,GAAG,IAAI,KAAK,QAAQ;QACrC,CAAC,CAAC,8CAA2B;QAC7B,CAAC,CAAC,kDAA+B,CAAC;IAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAElD,uEAAuE;QACvE,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;oBAC1B,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,QAAQ;wBAAE,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;oBACvD,IAAI,CAAC,YAAY;wBAAE,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;gBACrD,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACzE,MAAM;YACR,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;oBACxB,IAAI,CAAC,YAAY;wBAAE,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;gBACrD,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACzE,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,6EAA6E;IAC7E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,aAAa,GAAgB,EAAE,CAAC;IACtC,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACnB,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AAC1F,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,OAAO,CACd,OAAe,EACf,OAAe,EACf,OAAwB;IAExB,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5D,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACnD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAEzD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YAEtD,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO;gBACP,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,EAAE;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,OAAe;IAChD,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli/agent-signatures.d.ts

@@ -0,0 +1,28 @@
+/**
+ * agent-signatures.ts
+ *
+ * Provider and framework detection signatures for the agent-dir scanner.
+ * Each signature carries a regex (applied line-by-line after stripping
+ * comments and triple-quoted blocks), a provider/framework tag, and a kind.
+ *
+ * F-NEW-PRODUCT-AGENT-DIR-WRAPPER slice 1
+ * @connexum/ai-governance
+ */
+export type SignatureKind = 'import' | 'http' | 'subprocess';
+export interface ProviderSignature {
+    provider: string;
+    framework: string | null;
+    regex: RegExp;
+    kind: SignatureKind;
+}
+export interface FrameworkSignature {
+    framework: string;
+    provider: string | null;
+    regex: RegExp;
+    kind: SignatureKind;
+}
+export declare const PYTHON_SIGNATURES: ProviderSignature[];
+export declare const PYTHON_FRAMEWORK_SIGNATURES: FrameworkSignature[];
+export declare const TYPESCRIPT_SIGNATURES: ProviderSignature[];
+export declare const TYPESCRIPT_FRAMEWORK_SIGNATURES: FrameworkSignature[];
+//# sourceMappingURL=agent-signatures.d.ts.map

package/dist/cli/agent-signatures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-signatures.d.ts","sourceRoot":"","sources":["../../src/cli/agent-signatures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,GAAG,YAAY,CAAC;AAE7D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;CACrB;AAMD,eAAO,MAAM,iBAAiB,EAAE,iBAAiB,EAmEhD,CAAC;AAMF,eAAO,MAAM,2BAA2B,EAAE,kBAAkB,EAwD3D,CAAC;AAMF,eAAO,MAAM,qBAAqB,EAAE,iBAAiB,EA+DpD,CAAC;AAMF,eAAO,MAAM,+BAA+B,EAAE,kBAAkB,EAyB/D,CAAC"}

package/dist/cli/agent-signatures.js

@@ -0,0 +1,241 @@
+"use strict";
+/**
+ * agent-signatures.ts
+ *
+ * Provider and framework detection signatures for the agent-dir scanner.
+ * Each signature carries a regex (applied line-by-line after stripping
+ * comments and triple-quoted blocks), a provider/framework tag, and a kind.
+ *
+ * F-NEW-PRODUCT-AGENT-DIR-WRAPPER slice 1
+ * @connexum/ai-governance
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TYPESCRIPT_FRAMEWORK_SIGNATURES = exports.TYPESCRIPT_SIGNATURES = exports.PYTHON_FRAMEWORK_SIGNATURES = exports.PYTHON_SIGNATURES = void 0;
+// ---------------------------------------------------------------------------
+// Python — 8 provider signatures
+// ---------------------------------------------------------------------------
+exports.PYTHON_SIGNATURES = [
+    {
+        provider: 'openai',
+        framework: null,
+        // matches: `from openai import OpenAI`, `from openai import AsyncOpenAI`,
+        //          `import openai` — but NOT `import openai_telemetry` (word boundary)
+        regex: /^\s*(from\s+openai\s+import\s+\w+|import\s+openai\b)/,
+        kind: 'import',
+    },
+    {
+        provider: 'anthropic',
+        framework: null,
+        regex: /^\s*(from\s+anthropic\s+import\s+\w+|import\s+anthropic\b)/,
+        kind: 'import',
+    },
+    {
+        provider: 'google',
+        framework: null,
+        // google.generativeai SDK (Gemini)
+        regex: /^\s*(import\s+google\.generativeai|from\s+google\.generativeai\s+import\s+\w+|from\s+google\s+import\s+generativeai)/,
+        kind: 'import',
+    },
+    {
+        provider: 'bedrock',
+        framework: null,
+        // boto3 / botocore access to Bedrock
+        regex: /^\s*(import\s+boto3\b|from\s+boto3\s+import|from\s+botocore\s+import).*bedrock/i,
+        kind: 'import',
+    },
+    {
+        provider: 'ollama',
+        framework: null,
+        // subprocess invocation: subprocess.run(['ollama', ...]) or subprocess.Popen(['ollama', ...])
+        regex: /subprocess\.(run|Popen|call)\s*\(\s*\[['"]ollama['"]/,
+        kind: 'subprocess',
+    },
+    {
+        provider: 'replicate',
+        framework: null,
+        regex: /^\s*(import\s+replicate\b|from\s+replicate\s+import\s+\w+)/,
+        kind: 'import',
+    },
+    {
+        provider: 'huggingface',
+        framework: null,
+        regex: /^\s*(from\s+huggingface_hub\s+import\s+\w+|from\s+transformers\s+import\s+\w+|import\s+huggingface_hub\b|import\s+transformers\b)/,
+        kind: 'import',
+    },
+    {
+        // Raw HTTP to known LLM APIs — provider resolved by URL host
+        provider: 'openai',
+        framework: null,
+        regex: /(httpx|requests|urllib)\.(post|get|request)\s*\(\s*['"]https:\/\/api\.openai\.com/,
+        kind: 'http',
+    },
+    {
+        provider: 'anthropic',
+        framework: null,
+        regex: /(httpx|requests|urllib)\.(post|get|request)\s*\(\s*['"]https:\/\/api\.anthropic\.com/,
+        kind: 'http',
+    },
+    {
+        provider: 'google',
+        framework: null,
+        regex: /(httpx|requests|urllib)\.(post|get|request)\s*\(\s*['"]https:\/\/generativelanguage\.googleapis\.com/,
+        kind: 'http',
+    },
+];
+// ---------------------------------------------------------------------------
+// Python — 9 framework adapter signatures
+// ---------------------------------------------------------------------------
+exports.PYTHON_FRAMEWORK_SIGNATURES = [
+    {
+        framework: 'langchain',
+        provider: null, // provider detected separately via provider sigs
+        regex: /^\s*from\s+langchain[\w.]*\s+import\s+\w+/,
+        kind: 'import',
+    },
+    {
+        framework: 'crewai',
+        provider: null,
+        regex: /^\s*(from\s+crewai\s+import\s+\w+|import\s+crewai\b)/,
+        kind: 'import',
+    },
+    {
+        framework: 'autogen',
+        provider: null,
+        regex: /^\s*(from\s+autogen\s+import\s+\w+|import\s+autogen\b)/,
+        kind: 'import',
+    },
+    {
+        framework: 'langgraph',
+        provider: null,
+        regex: /^\s*(from\s+langgraph[\w.]*\s+import\s+\w+|import\s+langgraph\b)/,
+        kind: 'import',
+    },
+    {
+        framework: 'pydantic-ai',
+        provider: null,
+        regex: /^\s*(from\s+pydantic_ai\s+import\s+\w+|import\s+pydantic_ai\b)/,
+        kind: 'import',
+    },
+    {
+        framework: 'haystack',
+        provider: null,
+        regex: /^\s*(from\s+haystack[\w.]*\s+import\s+\w+|import\s+haystack\b)/,
+        kind: 'import',
+    },
+    {
+        framework: 'llama-index',
+        provider: null,
+        regex: /^\s*(from\s+llama_index[\w.]*\s+import\s+\w+|import\s+llama_index\b)/,
+        kind: 'import',
+    },
+    {
+        framework: 'semantic-kernel',
+        provider: null,
+        regex: /^\s*(from\s+semantic_kernel[\w.]*\s+import\s+\w+|import\s+semantic_kernel\b)/,
+        kind: 'import',
+    },
+    {
+        framework: 'langchain',
+        provider: 'openai',
+        // `from langchain.llms import OpenAI` — treated as langchain AND openai
+        regex: /^\s*from\s+langchain[\w.]*\s+import\s+.*OpenAI/,
+        kind: 'import',
+    },
+];
+// ---------------------------------------------------------------------------
+// TypeScript / JavaScript — 8 provider signatures
+// ---------------------------------------------------------------------------
+exports.TYPESCRIPT_SIGNATURES = [
+    {
+        provider: 'openai',
+        framework: null,
+        // import OpenAI from 'openai' / import { OpenAI } from 'openai'
+        regex: /^\s*import\s+.*\bfrom\s+['"]openai['"]/,
+        kind: 'import',
+    },
+    {
+        provider: 'anthropic',
+        framework: null,
+        regex: /^\s*import\s+.*\bfrom\s+['"]@anthropic-ai\/sdk['"]/,
+        kind: 'import',
+    },
+    {
+        provider: 'google',
+        framework: null,
+        regex: /^\s*import\s+.*\bfrom\s+['"]@google\/(generative-ai|genai)['"]/,
+        kind: 'import',
+    },
+    {
+        provider: 'bedrock',
+        framework: null,
+        regex: /^\s*import\s+.*BedrockRuntimeClient.*\bfrom\s+['"]@aws-sdk\/client-bedrock-runtime['"]/,
+        kind: 'import',
+    },
+    {
+        provider: 'azure',
+        framework: null,
+        regex: /^\s*import\s+.*\bfrom\s+['"]@azure\/openai['"]/,
+        kind: 'import',
+    },
+    {
+        provider: 'replicate',
+        framework: null,
+        regex: /^\s*import\s+.*\bfrom\s+['"]replicate['"]/,
+        kind: 'import',
+    },
+    {
+        provider: 'huggingface',
+        framework: null,
+        regex: /^\s*import\s+.*\bfrom\s+['"]@huggingface\/(inference|hub)['"]/,
+        kind: 'import',
+    },
+    {
+        provider: 'ollama',
+        framework: null,
+        regex: /^\s*import\s+.*\bfrom\s+['"]ollama['"]/,
+        kind: 'import',
+    },
+    {
+        provider: 'openai',
+        framework: null,
+        // Raw fetch to OpenAI API
+        regex: /fetch\s*\(\s*['"]https:\/\/api\.openai\.com/,
+        kind: 'http',
+    },
+    {
+        provider: 'anthropic',
+        framework: null,
+        regex: /fetch\s*\(\s*['"]https:\/\/api\.anthropic\.com/,
+        kind: 'http',
+    },
+];
+// ---------------------------------------------------------------------------
+// TypeScript / JavaScript — framework signatures
+// ---------------------------------------------------------------------------
+exports.TYPESCRIPT_FRAMEWORK_SIGNATURES = [
+    {
+        framework: 'langchain',
+        provider: 'openai',
+        regex: /^\s*import\s+.*\bfrom\s+['"]@langchain\/openai['"]/,
+        kind: 'import',
+    },
+    {
+        framework: 'langchain',
+        provider: 'anthropic',
+        regex: /^\s*import\s+.*\bfrom\s+['"]@langchain\/anthropic['"]/,
+        kind: 'import',
+    },
+    {
+        framework: 'langchain',
+        provider: null,
+        regex: /^\s*import\s+.*\bfrom\s+['"]langchain['"]/,
+        kind: 'import',
+    },
+    {
+        framework: 'langgraph',
+        provider: null,
+        regex: /^\s*import\s+.*\bfrom\s+['"]@langchain\/langgraph['"]/,
+        kind: 'import',
+    },
+];
+//# sourceMappingURL=agent-signatures.js.map

package/dist/cli/agent-signatures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-signatures.js","sourceRoot":"","sources":["../../src/cli/agent-signatures.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAkBH,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAEjE,QAAA,iBAAiB,GAAwB;IACpD;QACE,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,IAAI;QACf,0EAA0E;QAC1E,+EAA+E;QAC/E,KAAK,EAAE,sDAAsD;QAC7D,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,4DAA4D;QACnE,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,IAAI;QACf,mCAAmC;QACnC,KAAK,EAAE,sHAAsH;QAC7H,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,IAAI;QACf,qCAAqC;QACrC,KAAK,EAAE,iFAAiF;QACxF,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,IAAI;QACf,8FAA8F;QAC9F,KAAK,EAAE,sDAAsD;QAC7D,IAAI,EAAE,YAAY;KACnB;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,4DAA4D;QACnE,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,mIAAmI;QAC1I,IAAI,EAAE,QAAQ;KACf;IACD;QACE,6DAA6D;QAC7D,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,mFAAmF;QAC1F,IAAI,EAAE,MAAM;KACb;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,sFAAsF;QAC7F,IAAI,EAAE,MAAM;KACb;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,sGAAsG;QAC7G,IAAI,EAAE,MAAM;KACb;CACF,CAAC;AAEF,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAEjE,QAAA,2BAA2B,GAAyB;IAC/D;QACE,SAAS,EAAE,WAAW;QACtB,QAAQ,EAAE,IAAI,EAAE,iDAAiD;QACjE,KAAK,EAAE,2CAA2C;QAClD,IAAI,EAAE,QAAQ;KACf;IACD;QACE,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,sDAAsD;QAC7D,IAAI,EAAE,QAAQ;KACf;IACD;QACE,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,wDAAwD;QAC/D,IAAI,EAAE,QAAQ;KACf;IACD;QACE,SAAS,EAAE,WAAW;QACtB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,kEAAkE;QACzE,IAAI,EAAE,QAAQ;KACf;IACD;QACE,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,gEAAgE;QACvE,IAAI,EAAE,QAAQ;KACf;IACD;QACE,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,gEAAgE;QACvE,IAAI,EAAE,QAAQ;KACf;IACD;QACE,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,sEAAsE;QAC7E,IAAI,EAAE,QAAQ;KACf;IACD;QACE,SAAS,EAAE,iBAAiB;QAC5B,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,8EAA8E;QACrF,IAAI,EAAE,QAAQ;KACf;IACD;QACE,SAAS,EAAE,WAAW;QACtB,QAAQ,EAAE,QAAQ;QAClB,wEAAwE;QACxE,KAAK,EAAE,gDAAgD;QACvD,IAAI,EAAE,QAAQ;KACf;CACF,CAAC;AAEF,8EAA8E;AAC9E,kDAAkD;AAClD,8EAA8E;AAEjE,QAAA,qBAAqB,GAAwB;IACxD;QACE,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,IAAI;QACf,gEAAgE;QAChE,KAAK,EAAE,wCAAwC;QAC/C,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,oDAAoD;QAC3D,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,gEAAgE;QACvE,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,wFAAwF;QAC/F,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,gDAAgD;QACvD,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,2CAA2C;QAClD,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,+DAA+D;QACtE,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,wCAAwC;QAC/C,IAAI,EAAE,QAAQ;KACf;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,IAAI;QACf,0BAA0B;QAC1B,KAAK,EAAE,6CAA6C;QACpD,IAAI,EAAE,MAAM;KACb;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,gDAAgD;QACvD,IAAI,EAAE,MAAM;KACb;CACF,CAAC;AAEF,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAEjE,QAAA,+BAA+B,GAAyB;IACnE;QACE,SAAS,EAAE,WAAW;QACtB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,oDAAoD;QAC3D,IAAI,EAAE,QAAQ;KACf;IACD;QACE,SAAS,EAAE,WAAW;QACtB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,uDAAuD;QAC9D,IAAI,EAAE,QAAQ;KACf;IACD;QACE,SAAS,EAAE,WAAW;QACtB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,2CAA2C;QAClD,IAAI,EAAE,QAAQ;KACf;IACD;QACE,SAAS,EAAE,WAAW;QACtB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,uDAAuD;QAC9D,IAAI,EAAE,QAAQ;KACf;CACF,CAAC"}

package/dist/cli/audit-chain-append.d.ts

@@ -0,0 +1,47 @@
+#!/usr/bin/env node
+/**
+ * audit-chain-append — Node CLI wrapping pack-evaluation + SHA-256 chain.
+ *
+ * Thomas directive 2026-05-17 evening: "It must start up and report findings
+ * to a local database on the compliance and company packs, including what
+ * they are allowed and not allowed to do. It must have SHA-256 installed."
+ *
+ * Pre-fix audit (Explore agent 2026-05-17): audit-logger.sh writes plain
+ * JSONL to .claude/governance/audit/audit-YYYY-MM-DD.jsonl with NO hash
+ * chain. A regulator reviewing the file cannot detect tampering — anyone
+ * can edit any line and the audit trail still parses cleanly. Separately,
+ * each entry lacks the pack-evaluation verdict so compliance reasoning
+ * is silent on every tool call.
+ *
+ * This bridge consolidates both fixes. A shell hook calls:
+ *
+ *   node dist/cli/audit-chain-append.js \\
+ *     --tool=Bash \\
+ *     --input='{"command":"ls"}' \\
+ *     --base-entry='{"timestamp":"...","session":"...","user":"...","outcome":{...}}' \\
+ *     --audit-file=.claude/governance/audit/audit-2026-05-17.jsonl
+ *
+ * The CLI:
+ *   1. Runs pack-enforcement-bridge logic to get verdict + triggeringPackIds.
+ *   2. Reads the last line of --audit-file to get the previousHash (or
+ *      "0".repeat(64) if the file is empty / missing).
+ *   3. Merges the base entry + verdict fields into a single record.
+ *   4. Computes currentHash = sha256(previousHash + record_json + timestamp).
+ *   5. Appends the chained record to --audit-file.
+ *   6. Prints the chained record to stdout for the caller.
+ *
+ * Exit codes:
+ *   0  ok (verdict ALLOW or LOG or WARN — record appended)
+ *   1  verdict DENY (record appended, hook should refuse the tool call)
+ *   2  verdict REQUIRE_APPROVAL (record appended, hook should pause)
+ *   3  internal error (no record appended)
+ *
+ * Invariant 2 (advisory, never authoritative): a chain-append failure or
+ * a bridge throw must NOT block the hook. The hook is expected to swallow
+ * non-zero exit codes for verdict != DENY and proceed. The DENY path is
+ * the only place the customer's tool call should be refused.
+ *
+ * @connexum/ai-governance — runtime
+ */
+export {};
+//# sourceMappingURL=audit-chain-append.d.ts.map

package/dist/cli/audit-chain-append.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-chain-append.d.ts","sourceRoot":"","sources":["../../src/cli/audit-chain-append.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG"}