@datasynx/agentic-ai-cartography 0.1.9 → 0.2.1

package/dist/index.js

@@ -385,6 +385,24 @@ var CartographyDB = class {
       confidence: r["confidence"]
     }));
   }
+  markTaskAsSOPCandidate(taskId) {
+    this.db.prepare("UPDATE tasks SET is_sop_candidate = 1 WHERE id = ?").run(taskId);
+  }
+  getAllSOPs() {
+    const rows = this.db.prepare("SELECT * FROM sops ORDER BY generated_at DESC").all();
+    return rows.map((r) => ({
+      id: r["id"],
+      workflowId: r["workflow_id"],
+      title: r["title"],
+      description: r["description"],
+      steps: JSON.parse(r["steps"]),
+      involvedSystems: JSON.parse(r["involved_systems"]),
+      estimatedDuration: r["estimated_duration"],
+      frequency: r["frequency"],
+      confidence: r["confidence"],
+      generatedAt: r["generated_at"]
+    }));
+  }
   // ── Approvals ───────────────────────────
   setApproval(pattern, action) {
     this.db.prepare(`
@@ -735,6 +753,292 @@ async function createCartographyTools(db, sessionId, opts = {}) {
         }]
       };
     }),
+    tool("scan_k8s_resources", "Kubernetes-Cluster via kubectl scannen \u2014 100% readonly (get, describe)", {
+      namespace: z2.string().optional().describe("Namespace filtern \u2014 leer = alle Namespaces")
+    }, async (args) => {
+      const { execSync: execSync2 } = await import("child_process");
+      const ns = args["namespace"];
+      const nsFlag = ns ? `-n ${ns}` : "--all-namespaces";
+      const run = (cmd) => {
+        try {
+          return execSync2(cmd, { stdio: "pipe", timeout: 15e3, shell: "/bin/sh" }).toString().trim();
+        } catch (e) {
+          return `(error: ${e instanceof Error ? e.message.split("\n")[0] : String(e)})`;
+        }
+      };
+      const sections = [
+        ["CONTEXT", 'kubectl config current-context 2>/dev/null || echo "(kein Context gesetzt)"'],
+        ["NODES", "kubectl get nodes -o wide"],
+        ["NAMESPACES", "kubectl get namespaces"],
+        ["SERVICES", `kubectl get services ${nsFlag}`],
+        ["DEPLOYMENTS", `kubectl get deployments ${nsFlag}`],
+        ["STATEFULSETS", `kubectl get statefulsets ${nsFlag}`],
+        ["INGRESSES", `kubectl get ingress ${nsFlag} 2>/dev/null || echo "(keine)"`],
+        ["PODS_RUNNING", `kubectl get pods ${nsFlag} --field-selector=status.phase=Running 2>/dev/null | head -60`],
+        ["CONFIGMAPS_SYSTEM", "kubectl get configmaps -n kube-system 2>/dev/null | head -30"]
+      ];
+      const out = sections.map(([l, c]) => `=== ${l} ===
+${run(c)}`).join("\n\n");
+      return { content: [{ type: "text", text: out }] };
+    }),
+    tool("scan_aws_resources", "AWS-Infrastruktur via AWS CLI scannen \u2014 100% readonly (describe, list)", {
+      region: z2.string().optional().describe("AWS Region \u2014 default: AWS_DEFAULT_REGION oder Profil"),
+      profile: z2.string().optional().describe("AWS CLI Profil")
+    }, async (args) => {
+      const { execSync: execSync2 } = await import("child_process");
+      const region = args["region"];
+      const profile = args["profile"];
+      const env = { ...process.env };
+      if (region) env["AWS_DEFAULT_REGION"] = region;
+      const pf = profile ? `--profile ${profile}` : "";
+      const run = (cmd) => {
+        try {
+          return execSync2(cmd, { stdio: "pipe", timeout: 2e4, shell: "/bin/sh", env }).toString().trim();
+        } catch (e) {
+          return `(error: ${e instanceof Error ? e.message.split("\n")[0] : String(e)})`;
+        }
+      };
+      const sections = [
+        ["IDENTITY", `aws sts get-caller-identity ${pf} --output json`],
+        ["EC2", `aws ec2 describe-instances ${pf} --query 'Reservations[*].Instances[*].[InstanceId,InstanceType,State.Name,PublicIpAddress,PrivateIpAddress,Tags[?Key==\`Name\`].Value|[0]]' --output table`],
+        ["RDS", `aws rds describe-db-instances ${pf} --query 'DBInstances[*].[DBInstanceIdentifier,Engine,DBInstanceStatus,Endpoint.Address,Endpoint.Port]' --output table`],
+        ["ELB_V2", `aws elbv2 describe-load-balancers ${pf} --query 'LoadBalancers[*].[LoadBalancerName,DNSName,Type,State.Code]' --output table`],
+        ["EKS", `aws eks list-clusters ${pf} --output json`],
+        ["ELASTICACHE", `aws elasticache describe-cache-clusters ${pf} --query 'CacheClusters[*].[CacheClusterId,Engine,CacheClusterStatus]' --output table 2>/dev/null || echo "(nicht verf\xFCgbar)"`],
+        ["S3", `aws s3 ls ${pf} 2>/dev/null || echo "(nicht verf\xFCgbar)"`],
+        ["VPC", `aws ec2 describe-vpcs ${pf} --query 'Vpcs[*].[VpcId,CidrBlock,IsDefault,Tags[?Key==\`Name\`].Value|[0]]' --output table`]
+      ];
+      const out = sections.map(([l, c]) => `=== ${l} ===
+${run(c)}`).join("\n\n");
+      return { content: [{ type: "text", text: out }] };
+    }),
+    tool("scan_gcp_resources", "Google Cloud Platform via gcloud CLI scannen \u2014 100% readonly (list, describe)", {
+      project: z2.string().optional().describe("GCP Project ID \u2014 default: aktuelles gcloud-Projekt")
+    }, async (args) => {
+      const { execSync: execSync2 } = await import("child_process");
+      const project = args["project"];
+      const pf = project ? `--project ${project}` : "";
+      const run = (cmd) => {
+        try {
+          return execSync2(cmd, { stdio: "pipe", timeout: 2e4, shell: "/bin/sh" }).toString().trim();
+        } catch (e) {
+          return `(error: ${e instanceof Error ? e.message.split("\n")[0] : String(e)})`;
+        }
+      };
+      const sections = [
+        ["IDENTITY", `gcloud config list account --format='value(core.account)' 2>/dev/null; gcloud config get-value project 2>/dev/null`],
+        ["COMPUTE_INSTANCES", `gcloud compute instances list ${pf} 2>/dev/null || echo "(error)"`],
+        ["SQL_INSTANCES", `gcloud sql instances list ${pf} 2>/dev/null || echo "(error)"`],
+        ["GKE_CLUSTERS", `gcloud container clusters list ${pf} 2>/dev/null || echo "(error)"`],
+        ["CLOUD_RUN", `gcloud run services list ${pf} --platform managed 2>/dev/null || echo "(error)"`],
+        ["CLOUD_FUNCTIONS", `gcloud functions list ${pf} 2>/dev/null || echo "(error)"`],
+        ["REDIS", `gcloud redis instances list ${pf} --regions=- 2>/dev/null || echo "(error)"`],
+        ["PUBSUB", `gcloud pubsub topics list ${pf} 2>/dev/null || echo "(error)"`],
+        ["SPANNER", `gcloud spanner instances list ${pf} 2>/dev/null || echo "(error)"`]
+      ];
+      const out = sections.map(([l, c]) => `=== ${l} ===
+${run(c)}`).join("\n\n");
+      return { content: [{ type: "text", text: out }] };
+    }),
+    tool("scan_azure_resources", "Azure-Infrastruktur via az CLI scannen \u2014 100% readonly (list, show)", {
+      subscription: z2.string().optional().describe("Azure Subscription ID"),
+      resourceGroup: z2.string().optional().describe("Resource Group filtern")
+    }, async (args) => {
+      const { execSync: execSync2 } = await import("child_process");
+      const sub = args["subscription"];
+      const rg = args["resourceGroup"];
+      const sf = sub ? `--subscription ${sub}` : "";
+      const rf = rg ? `--resource-group ${rg}` : "";
+      const run = (cmd) => {
+        try {
+          return execSync2(cmd, { stdio: "pipe", timeout: 2e4, shell: "/bin/sh" }).toString().trim();
+        } catch (e) {
+          return `(error: ${e instanceof Error ? e.message.split("\n")[0] : String(e)})`;
+        }
+      };
+      const sections = [
+        ["IDENTITY", `az account show --output json ${sf} 2>/dev/null || echo "(nicht eingeloggt \u2014 az login)"`],
+        ["VMS", `az vm list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
+        ["AKS", `az aks list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
+        ["SQL_SERVERS", `az sql server list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
+        ["POSTGRES", `az postgres server list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
+        ["REDIS", `az redis list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
+        ["WEBAPPS", `az webapp list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
+        ["CONTAINER_APPS", `az containerapp list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
+        ["FUNCTIONS", `az functionapp list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`]
+      ];
+      const out = sections.map(([l, c]) => `=== ${l} ===
+${run(c)}`).join("\n\n");
+      return { content: [{ type: "text", text: out }] };
+    }),
+    tool("scan_installed_apps", "Alle installierten Apps und Tools auf dem PC scannen \u2014 IDEs, Office, Dev-Tools, Business-Apps", {
+      searchHint: z2.string().optional().describe('Optionaler Suchbegriff um gezielt nach bestimmten Tools zu suchen (z.B. "hubspot windsurf cursor")')
+    }, async (args) => {
+      const { execSync: execSync2 } = await import("child_process");
+      const hint = args["searchHint"];
+      const run = (cmd) => {
+        try {
+          return execSync2(cmd, { stdio: "pipe", timeout: 15e3, shell: "/bin/sh" }).toString().trim();
+        } catch {
+          return "";
+        }
+      };
+      const platform = process.platform;
+      const results = {};
+      if (platform === "darwin") {
+        results["APPLICATIONS"] = run("ls /Applications/ 2>/dev/null | head -200") || "(leer)";
+        results["USER_APPLICATIONS"] = run("ls ~/Applications/ 2>/dev/null | head -100") || "(leer)";
+        results["BREW_CASKS"] = run("brew list --cask 2>/dev/null | head -100") || "(brew nicht installiert)";
+        results["BREW_FORMULAE"] = run("brew list --formula 2>/dev/null | head -150") || "(brew nicht installiert)";
+        results["SPOTLIGHT_APPS"] = run(`mdfind "kMDItemKind == 'Application'" 2>/dev/null | grep -v "^/System" | grep -v "^/Library/Apple" | head -100`) || "(Spotlight nicht verf\xFCgbar)";
+      } else if (platform === "linux") {
+        results["DPKG"] = run("dpkg --list 2>/dev/null | awk '{print $2}' | head -200") || "(dpkg nicht verf\xFCgbar)";
+        results["SNAP"] = run("snap list 2>/dev/null | head -50") || "(snap nicht verf\xFCgbar)";
+        results["FLATPAK"] = run("flatpak list 2>/dev/null | head -50") || "(flatpak nicht verf\xFCgbar)";
+        results["DESKTOP_FILES"] = run("ls /usr/share/applications/*.desktop ~/.local/share/applications/*.desktop 2>/dev/null | xargs -I{} basename {} .desktop 2>/dev/null | head -100") || "(keine .desktop files)";
+        results["RPM"] = run("rpm -qa 2>/dev/null | head -200") || "(rpm nicht verf\xFCgbar)";
+      } else if (platform === "win32") {
+        results["WINGET"] = run("winget list 2>/dev/null | head -100") || "(winget nicht verf\xFCgbar)";
+        results["PROGRAMS_x64"] = run('reg query "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall" /s /v DisplayName 2>/dev/null | findstr DisplayName | head -100') || "(nicht verf\xFCgbar)";
+      }
+      const knownTools = [
+        // IDEs & Editors
+        "code",
+        "code-insiders",
+        "cursor",
+        "windsurf",
+        "zed",
+        "vim",
+        "nvim",
+        "emacs",
+        "nano",
+        "sublime_text",
+        "atom",
+        "idea",
+        "webstorm",
+        "pycharm",
+        "goland",
+        "datagrip",
+        "clion",
+        "rider",
+        "phpstorm",
+        "rubymine",
+        "appcode",
+        // Dev Tools
+        "git",
+        "gh",
+        "docker",
+        "docker-compose",
+        "podman",
+        "kubectl",
+        "helm",
+        "terraform",
+        "ansible",
+        "node",
+        "npm",
+        "npx",
+        "yarn",
+        "pnpm",
+        "bun",
+        "deno",
+        "python",
+        "python3",
+        "pip",
+        "pip3",
+        "pipenv",
+        "poetry",
+        "conda",
+        "ruby",
+        "gem",
+        "bundler",
+        "rails",
+        "java",
+        "mvn",
+        "gradle",
+        "kotlin",
+        "go",
+        "cargo",
+        "rustc",
+        "php",
+        "composer",
+        "dotnet",
+        "dotnet-sdk",
+        // Databases
+        "psql",
+        "mysql",
+        "mysqladmin",
+        "mongo",
+        "mongosh",
+        "redis-cli",
+        "sqlite3",
+        "clickhouse-client",
+        // Cloud CLIs
+        "aws",
+        "gcloud",
+        "az",
+        "heroku",
+        "fly",
+        "vercel",
+        "netlify",
+        "wrangler",
+        // Infra
+        "vagrant",
+        "packer",
+        "consul",
+        "vault",
+        "nomad",
+        // Communication / SaaS
+        "slack",
+        "discord",
+        "zoom",
+        "teams",
+        "skype",
+        "telegram",
+        "signal",
+        // Browsers
+        "google-chrome",
+        "chromium",
+        "firefox",
+        "safari",
+        "brave",
+        "opera",
+        "edge",
+        // Monitoring / Analytics
+        "datadog-agent",
+        "newrelic-agent",
+        "prometheus",
+        "grafana-cli",
+        // Other tools
+        "ngrok",
+        "stripe",
+        "supabase",
+        "neon"
+      ];
+      const found = [];
+      const notFound = [];
+      for (const t of knownTools) {
+        const r = run(`which ${t} 2>/dev/null`);
+        if (r) found.push(`${t}: ${r}`);
+        else notFound.push(t);
+      }
+      results["WHICH_FOUND"] = found.join("\n") || "(nichts gefunden)";
+      results["WHICH_NOT_FOUND"] = notFound.join(", ");
+      if (hint) {
+        const terms = hint.split(/[\s,]+/).filter(Boolean);
+        const hintResults = [];
+        for (const term of terms) {
+          const safe = term.replace(/[^a-zA-Z0-9._-]/g, "");
+          if (!safe) continue;
+          const r = run(`which ${safe} 2>/dev/null || find /Applications ~/Applications /usr/bin /usr/local/bin /opt/homebrew/bin ~/.local/bin 2>/dev/null -iname "*${safe}*" -maxdepth 3 2>/dev/null | head -5`);
+          if (r) hintResults.push(`${term}: ${r}`);
+          else hintResults.push(`${term}: (nicht gefunden)`);
+        }
+        results["HINT_SEARCH"] = hintResults.join("\n");
+      }
+      const out = Object.entries(results).map(([k, v]) => `=== ${k} ===
+${v}`).join("\n\n");
+      return { content: [{ type: "text", text: out }] };
+    }),
     tool("save_sop", "Standard Operating Procedure speichern", {
       workflowId: z2.string(),
       title: z2.string(),
@@ -790,11 +1094,15 @@ var safetyHook = async (input) => {
 };
 
 // src/agent.ts
-async function runDiscovery(config, db, sessionId, onEvent, onAskUser) {
+async function runDiscovery(config, db, sessionId, onEvent, onAskUser, hint) {
   const { query } = await import("@anthropic-ai/claude-code");
   const tools = await createCartographyTools(db, sessionId, { onAskUser });
-  const systemPrompt = `Du bist ein Infrastruktur-Discovery-Agent. Kartographiere die gesamte Systemlandschaft \u2014 lokale Services UND SaaS-Tools des Users.
-
+  const hintSection = hint ? `
+\u26A1 USER-HINT (PRIORIT\xC4T): Der User m\xF6chte gezielt nach folgenden Tools suchen: "${hint}"
+  \u2192 scan_installed_apps(searchHint: "${hint}") SOFORT ausf\xFChren und diese Tools als saas_tool oder config_file speichern!
+` : "";
+  const systemPrompt = `Du bist ein Infrastruktur-Discovery-Agent. Kartographiere die gesamte Systemlandschaft \u2014 lokale Services, SaaS-Tools UND alle installierten Apps/Tools des Users.
+${hintSection}
 \u2501\u2501 PFLICHT-REIHENFOLGE \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
 SCHRITT 1 \u2014 Browser-Lesezeichen (IMMER ZUERST):
   scan_bookmarks() aufrufen \u2192 jede zur\xFCckgegebene Domain klassifizieren:
@@ -802,19 +1110,36 @@ SCHRITT 1 \u2014 Browser-Lesezeichen (IMMER ZUERST):
   \u2022 Interne Hosts (IPs, custom.company.com:PORT) \u2192 save_node als web_service
   \u2022 Pers\xF6nliches (Social Media, News, Streaming, Shopping) \u2192 IGNORIEREN, NICHT speichern
 
-SCHRITT 2 \u2014 Lokale Infrastruktur:
+SCHRITT 2 \u2014 Installierte Apps & Tools (SEHR WICHTIG):
+  scan_installed_apps() aufrufen \u2192 ALLE gefundenen Apps/Tools klassifizieren:
+  \u2022 IDEs (VS Code, Cursor, Windsurf, JetBrains, etc.) \u2192 save_node als saas_tool mit category="ide"
+  \u2022 Office & Produktivit\xE4t (Word, Excel, Notion, Obsidian, etc.) \u2192 save_node als saas_tool mit category="productivity"
+  \u2022 Dev-Tools (Docker, kubectl, git, Node, Python, etc.) \u2192 save_node als saas_tool mit category="dev-tool"
+  \u2022 Business-Apps (Slack, Zoom, HubSpot, Salesforce, etc.) \u2192 save_node als saas_tool mit category="business"
+  \u2022 Browser (Chrome, Firefox, Safari, etc.) \u2192 save_node als saas_tool mit category="browser"
+  \u2022 Design-Tools (Figma, Sketch, Adobe, etc.) \u2192 save_node als saas_tool mit category="design"
+  ALLE relevanten Tools speichern \u2014 auch wenn offline/lokal!
+
+SCHRITT 3 \u2014 Lokale Infrastruktur:
   ss -tlnp && ps aux \u2192 alle lauschenden Ports/Prozesse identifizieren
   Jeden Service vertiefen: DB\u2192Schemas, API\u2192Endpoints, Queue\u2192Topics
 
-SCHRITT 3 \u2014 Config-Files:
+SCHRITT 4 \u2014 Cloud & Kubernetes (falls CLI vorhanden):
+  scan_k8s_resources() \u2192 Nodes, Services, Pods, Deployments, Ingresses
+  scan_aws_resources()  \u2192 EC2, RDS, ELB, EKS, ElastiCache, S3 (falls AWS CLI + Credentials)
+  scan_gcp_resources()  \u2192 Compute, SQL, GKE, Cloud Run, Functions (falls gcloud + Auth)
+  scan_azure_resources() \u2192 VMs, AKS, SQL, Redis, WebApps (falls az CLI + Login)
+  Fehler / "nicht verf\xFCgbar" \u2192 ignorieren, weiter mit n\xE4chstem Tool
+
+SCHRITT 5 \u2014 Config-Files:
   .env, docker-compose.yml, application.yml, kubernetes/*.yml
   Nur Host:Port extrahieren \u2014 KEINE Credentials
 
-SCHRITT 4 \u2014 R\xFCckfragen bei Unklarheit:
+SCHRITT 6 \u2014 R\xFCckfragen bei Unklarheit:
   ask_user() nutzen wenn: Dienst unklar ist, Kontext fehlt, oder User Input sinnvoll w\xE4re
   Beispiele: "Welche Umgebung ist das (dev/staging/prod)?", "Ist <host> ein internes Tool?"
 
-SCHRITT 5 \u2014 Fertig wenn alle Spuren ersch\xF6pft.
+SCHRITT 7 \u2014 Fertig wenn alle Spuren ersch\xF6pft.
 \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
 
 PORT-MAPPING: 5432=postgres, 3306=mysql, 27017=mongodb, 6379=redis,
@@ -824,15 +1149,20 @@ PORT-MAPPING: 5432=postgres, 3306=mysql, 27017=mongodb, 6379=redis,
 REGELN:
 \u2022 Nur read-only (ss, ps, cat, head, curl -s, docker inspect, kubectl get)
 \u2022 Node IDs: "type:host:port" oder "type:name" \u2014 keine Pfade, keine Credentials
-\u2022 saas_tool IDs: "saas_tool:github.com", "saas_tool:notion.so"
-\u2022 Confidence: 0.9 direkt gesehen, 0.7 aus Config/Bookmarks, 0.5 Vermutung
-\u2022 metadata erlaubt: { description, category, port, version } \u2014 keine Passw\xF6rter
+\u2022 saas_tool IDs: "saas_tool:github.com", "saas_tool:vscode", "saas_tool:cursor"
+\u2022 Installed-App IDs: "saas_tool:<appname>" z.B. "saas_tool:slack", "saas_tool:docker-desktop"
+\u2022 Confidence: 0.9 direkt gesehen, 0.7 aus Config/Bookmarks/Apps, 0.5 Vermutung
+\u2022 metadata erlaubt: { description, category, port, version, path } \u2014 keine Passw\xF6rter
 \u2022 get_catalog vor save_node \u2192 Duplikate vermeiden
 \u2022 Edges speichern wenn Verbindungen klar erkennbar sind
 
 Entrypoints: ${config.entryPoints.join(", ")}`;
-  const initialPrompt = `Starte Discovery jetzt.
+  const initialPrompt = hint ? `Starte Discovery mit USER-HINT: "${hint}".
+F\xFChre SOFORT scan_installed_apps(searchHint: "${hint}") aus um nach diesen Tools zu suchen.
+Dann scan_bookmarks, dann lokale Services.
+Nutze ask_user wenn du Kontext vom User brauchst.` : `Starte Discovery jetzt.
 F\xFChre SOFORT als erstes scan_bookmarks aus \u2014 noch bevor du ss oder ps verwendest.
+Danach scan_installed_apps() f\xFCr alle installierten Apps und Tools.
 Dann systematisch lokale Services, dann Config-Files.
 Nutze ask_user wenn du Kontext vom User brauchst.`;
   let turnCount = 0;
@@ -849,6 +1179,11 @@ Nutze ask_user wenn du Kontext vom User brauchst.`;
         "mcp__cartograph__save_edge",
         "mcp__cartograph__get_catalog",
         "mcp__cartograph__scan_bookmarks",
+        "mcp__cartograph__scan_installed_apps",
+        "mcp__cartograph__scan_k8s_resources",
+        "mcp__cartograph__scan_aws_resources",
+        "mcp__cartograph__scan_gcp_resources",
+        "mcp__cartograph__scan_azure_resources",
         "mcp__cartograph__ask_user"
       ],
       hooks: {
@@ -1400,6 +1735,197 @@ function exportSOPMarkdown(sop) {
   }
   return lines.join("\n");
 }
+function exportSOPDashboard(sops) {
+  const sopsJson = JSON.stringify(sops.map((s) => ({
+    id: s.id,
+    title: s.title,
+    description: s.description,
+    steps: s.steps,
+    systems: s.involvedSystems,
+    duration: s.estimatedDuration,
+    frequency: s.frequency,
+    confidence: s.confidence,
+    generatedAt: s.generatedAt ?? (/* @__PURE__ */ new Date()).toISOString()
+  })));
+  const systemCount = {};
+  for (const sop of sops) {
+    for (const sys of sop.involvedSystems) {
+      systemCount[sys] = (systemCount[sys] ?? 0) + 1;
+    }
+  }
+  const systemsJson = JSON.stringify(
+    Object.entries(systemCount).sort((a, b) => b[1] - a[1])
+  );
+  return `<!DOCTYPE html>
+<html lang="de">
+<head>
+  <meta charset="UTF-8">
+  <title>Cartography \u2014 SOP Dashboard</title>
+  <style>
+    * { box-sizing: border-box; margin: 0; padding: 0; }
+    body {
+      background: #0d1117; color: #e6edf3;
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, monospace;
+      padding: 0; line-height: 1.6;
+    }
+    .header {
+      background: linear-gradient(135deg, #161b22 0%, #1a1f2e 100%);
+      border-bottom: 1px solid #30363d; padding: 32px 40px;
+    }
+    .header h1 { font-size: 24px; color: #58a6ff; margin-bottom: 8px; }
+    .header .subtitle { color: #8b949e; font-size: 14px; }
+    .stats-row {
+      display: flex; gap: 24px; margin-top: 16px; flex-wrap: wrap;
+    }
+    .stat-card {
+      background: #21262d; border: 1px solid #30363d; border-radius: 8px;
+      padding: 12px 20px; min-width: 140px;
+    }
+    .stat-card .value { font-size: 28px; font-weight: 700; color: #58a6ff; }
+    .stat-card .label { font-size: 11px; color: #8b949e; text-transform: uppercase; letter-spacing: 0.5px; }
+    .container { max-width: 1200px; margin: 0 auto; padding: 24px 40px; }
+    .section-title { font-size: 18px; color: #c9d1d9; margin: 32px 0 16px; border-bottom: 1px solid #21262d; padding-bottom: 8px; }
+    /* Systems bar chart */
+    .systems-grid { display: flex; flex-wrap: wrap; gap: 8px; margin-bottom: 24px; }
+    .sys-tag {
+      background: #21262d; border: 1px solid #30363d; border-radius: 6px;
+      padding: 6px 12px; font-size: 12px; cursor: default;
+    }
+    .sys-tag .count { color: #58a6ff; font-weight: 600; margin-left: 4px; }
+    /* SOP cards */
+    .sop-card {
+      background: #161b22; border: 1px solid #30363d; border-radius: 8px;
+      margin-bottom: 16px; overflow: hidden; transition: border-color 0.2s;
+    }
+    .sop-card:hover { border-color: #58a6ff; }
+    .sop-header {
+      padding: 16px 20px; cursor: pointer; display: flex;
+      justify-content: space-between; align-items: center;
+    }
+    .sop-header h3 { font-size: 16px; color: #e6edf3; }
+    .sop-meta { display: flex; gap: 16px; align-items: center; font-size: 12px; color: #8b949e; }
+    .sop-meta .freq { color: #3fb950; font-weight: 600; }
+    .sop-meta .dur { color: #d29922; }
+    .sop-meta .conf {
+      display: inline-flex; align-items: center; gap: 4px;
+    }
+    .conf-dot { width: 8px; height: 8px; border-radius: 50%; display: inline-block; }
+    .sop-body { display: none; padding: 0 20px 20px; border-top: 1px solid #21262d; }
+    .sop-body.open { display: block; padding-top: 16px; }
+    .sop-desc { color: #8b949e; font-size: 13px; margin-bottom: 12px; }
+    .sop-systems { margin-bottom: 12px; }
+    .sop-systems span { background: #0d419d33; color: #58a6ff; border-radius: 4px; padding: 2px 8px; font-size: 11px; margin-right: 4px; }
+    .steps-list { list-style: none; counter-reset: step; }
+    .steps-list li {
+      counter-increment: step; position: relative;
+      padding: 10px 12px 10px 44px; border-left: 2px solid #30363d;
+      margin-left: 14px; font-size: 13px;
+    }
+    .steps-list li:last-child { border-left-color: transparent; }
+    .steps-list li::before {
+      content: counter(step);
+      position: absolute; left: -14px; top: 8px;
+      width: 26px; height: 26px; border-radius: 50%;
+      background: #21262d; border: 2px solid #30363d;
+      display: flex; align-items: center; justify-content: center;
+      font-size: 12px; font-weight: 600; color: #58a6ff;
+    }
+    .step-tool { color: #d2a8ff; font-weight: 600; }
+    .step-target { color: #7ee787; font-size: 12px; }
+    .step-notes { color: #8b949e; font-style: italic; font-size: 12px; margin-top: 2px; }
+    .step-instr { color: #c9d1d9; }
+    .toggle-icon { color: #8b949e; font-size: 18px; transition: transform 0.2s; }
+    .toggle-icon.open { transform: rotate(90deg); }
+    .empty { color: #484f58; font-size: 14px; padding: 40px; text-align: center; }
+    .gen-time { color: #484f58; font-size: 11px; margin-top: 8px; }
+  </style>
+</head>
+<body>
+<div class="header">
+  <h1>SOP Dashboard</h1>
+  <div class="subtitle">Datasynx Cartography \u2014 Standard Operating Procedures</div>
+  <div class="stats-row">
+    <div class="stat-card"><div class="value" id="sop-count">0</div><div class="label">SOPs</div></div>
+    <div class="stat-card"><div class="value" id="step-count">0</div><div class="label">Total Steps</div></div>
+    <div class="stat-card"><div class="value" id="sys-count">0</div><div class="label">Systems</div></div>
+    <div class="stat-card"><div class="value" id="avg-conf">\u2014</div><div class="label">Avg Confidence</div></div>
+  </div>
+</div>
+<div class="container">
+  <h2 class="section-title">Beteiligte Systeme</h2>
+  <div class="systems-grid" id="systems"></div>
+
+  <h2 class="section-title">SOPs</h2>
+  <div id="sop-list"></div>
+</div>
+<script>
+const sops = ${sopsJson};
+const systems = ${systemsJson};
+
+document.getElementById('sop-count').textContent = sops.length;
+document.getElementById('step-count').textContent = sops.reduce((a, s) => a + s.steps.length, 0);
+document.getElementById('sys-count').textContent = systems.length;
+const avgConf = sops.length > 0
+  ? (sops.reduce((a, s) => a + s.confidence, 0) / sops.length * 100).toFixed(0) + '%'
+  : '\u2014';
+document.getElementById('avg-conf').textContent = avgConf;
+
+const sysDiv = document.getElementById('systems');
+systems.forEach(([name, count]) => {
+  const el = document.createElement('div');
+  el.className = 'sys-tag';
+  el.innerHTML = name + '<span class="count">x' + count + '</span>';
+  sysDiv.appendChild(el);
+});
+
+const listDiv = document.getElementById('sop-list');
+if (sops.length === 0) {
+  listDiv.innerHTML = '<div class="empty">Keine SOPs vorhanden. Shadow-Daemon starten und Workflows beobachten.</div>';
+}
+
+sops.forEach((sop, i) => {
+  const confColor = sop.confidence >= 0.8 ? '#3fb950' : sop.confidence >= 0.5 ? '#d29922' : '#f85149';
+  const card = document.createElement('div');
+  card.className = 'sop-card';
+  card.innerHTML = \`
+    <div class="sop-header" onclick="toggle(\${i})">
+      <h3>\${sop.title}</h3>
+      <div class="sop-meta">
+        <span class="freq">\${sop.frequency}</span>
+        <span class="dur">\${sop.duration}</span>
+        <span class="conf"><span class="conf-dot" style="background:\${confColor}"></span>\${Math.round(sop.confidence*100)}%</span>
+        <span class="toggle-icon" id="icon-\${i}">\u25B8</span>
+      </div>
+    </div>
+    <div class="sop-body" id="body-\${i}">
+      <div class="sop-desc">\${sop.description}</div>
+      <div class="sop-systems">\${sop.systems.map(s => '<span>'+s+'</span>').join('')}</div>
+      <ol class="steps-list">
+        \${sop.steps.map(st => \`
+          <li>
+            <span class="step-tool">\${st.tool}</span>
+            \${st.target ? '<span class="step-target"> \u2192 '+st.target+'</span>' : ''}
+            <div class="step-instr">\${st.instruction}</div>
+            \${st.notes ? '<div class="step-notes">'+st.notes+'</div>' : ''}
+          </li>
+        \`).join('')}
+      </ol>
+      <div class="gen-time">Generiert: \${sop.generatedAt ? sop.generatedAt.substring(0,19).replace('T',' ') : '\u2014'}</div>
+    </div>
+  \`;
+  listDiv.appendChild(card);
+});
+
+function toggle(i) {
+  const body = document.getElementById('body-'+i);
+  const icon = document.getElementById('icon-'+i);
+  body.classList.toggle('open');
+  icon.classList.toggle('open');
+}
+</script>
+</body>
+</html>`;
+}
 function exportAll(db, sessionId, outputDir, formats = ["mermaid", "json", "yaml", "html", "sops"]) {
   mkdirSync2(outputDir, { recursive: true });
   mkdirSync2(join2(outputDir, "sops"), { recursive: true });
@@ -1496,6 +2022,7 @@ export {
   exportBackstageYAML,
   exportHTML,
   exportJSON,
+  exportSOPDashboard,
   exportSOPMarkdown,
   generateDependencyMermaid,
   generateSOPs,