@datasynx/agentic-ai-cartography 0.7.0 → 0.8.1

package/dist/cli.js

@@ -6,11 +6,22 @@ import {
   NODE_TYPES,
   SOPStepSchema,
   defaultConfig
-} from "./chunk-A7FTULDM.js";
+} from "./chunk-VZO6XBKX.js";
 import {
+  HOME,
+  IS_LINUX,
+  IS_MAC,
+  IS_WIN,
+  PLATFORM,
+  commandExists,
+  dbScanDirs,
+  findFiles,
+  run,
   scanAllBookmarks,
-  scanAllHistory
-} from "./chunk-2VIAXA5T.js";
+  scanAllHistory,
+  scanWindowsDbServices,
+  scanWindowsPrograms
+} from "./chunk-3NVQ3ND6.js";
 
 // src/cli.ts
 import { Command } from "commander";
@@ -555,8 +566,7 @@ function stripSensitive(target) {
   }
 }
 async function createCartographyTools(db, sessionId, opts = {}) {
-  const sdk = await import("@anthropic-ai/claude-code");
-  const { tool, createSdkMcpServer } = sdk;
+  const { tool, createSdkMcpServer } = await import("@anthropic-ai/claude-agent-sdk");
   const tools = [
     tool("save_node", "Save an infrastructure node to the catalog", {
       id: z.string(),
@@ -564,7 +574,7 @@ async function createCartographyTools(db, sessionId, opts = {}) {
       name: z.string(),
       discoveredVia: z.string(),
       confidence: z.number().min(0).max(1),
-      metadata: z.record(z.unknown()).optional(),
+      metadata: z.record(z.string(), z.unknown()).optional(),
       tags: z.array(z.string()).optional(),
       domain: z.string().optional().describe('Business domain, e.g. "Marketing", "Finance"'),
       subDomain: z.string().optional().describe('Sub-domain, e.g. "Forecast client orders"'),
@@ -675,33 +685,71 @@ async function createCartographyTools(db, sessionId, opts = {}) {
     tool("scan_local_databases", "Scan for local database files and running DB servers \u2014 PostgreSQL databases, MySQL, SQLite files from installed apps", {
       deep: z.boolean().default(false).optional().describe("Also search home directory recursively for SQLite/DB files (slower)")
     }, async (args) => {
-      const { execSync: execSync2 } = await import("child_process");
-      const { homedir } = await import("os");
-      const { existsSync: existsSync3 } = await import("fs");
       const deep = args["deep"] ?? false;
-      const HOME = homedir();
-      const run = (cmd) => {
-        try {
-          return execSync2(cmd, { stdio: "pipe", timeout: 1e4, shell: "/bin/sh" }).toString().trim();
-        } catch {
-          return "";
-        }
-      };
       const results = {};
-      results["POSTGRES_DATABASES"] = run(`psql -lqt 2>/dev/null | grep -v "template0\\|template1" | awk '{print $1}' | grep -v "^$\\|^|"`) || "(psql not running or not available)";
-      results["POSTGRES_CLUSTERS"] = run("pg_lsclusters 2>/dev/null") || "(pg_lsclusters not available)";
-      results["MYSQL_DATABASES"] = run('mysql --connect-timeout=3 -e "SHOW DATABASES;" 2>/dev/null') || "(mysql not running or requires auth)";
-      results["MONGODB_DATABASES"] = run(`mongosh --quiet --eval "db.adminCommand({listDatabases:1}).databases.map(d=>d.name).join('\\n')" 2>/dev/null`) || "(mongosh not available)";
-      results["REDIS_INFO"] = run("redis-cli info server 2>/dev/null | head -5") || "(redis-cli not available)";
-      const appDirs = [`${HOME}/.config`, `${HOME}/.local/share`, `${HOME}/Library/Application Support`, "/var/lib"].filter((d) => existsSync3(d));
+      results["PLATFORM"] = `${PLATFORM} (${IS_WIN ? "Windows" : IS_MAC ? "macOS" : "Linux"})`;
+      if (IS_WIN) {
+        results["DB_SERVICES"] = scanWindowsDbServices() || "(no database services found)";
+      }
+      if (commandExists("psql")) {
+        if (IS_WIN) {
+          results["POSTGRES_DATABASES"] = run("psql -lqt", { timeout: 1e4 }) || "(psql found but not running or requires auth)";
+        } else {
+          results["POSTGRES_DATABASES"] = run(`psql -lqt 2>/dev/null | grep -v "template0\\|template1" | awk '{print $1}' | grep -v "^$\\|^|"`) || "(psql not running or not available)";
+          results["POSTGRES_CLUSTERS"] = run("pg_lsclusters 2>/dev/null") || "(pg_lsclusters not available)";
+        }
+      } else {
+        results["POSTGRES_DATABASES"] = "(psql not installed)";
+      }
+      if (commandExists("mysql")) {
+        if (IS_WIN) {
+          results["MYSQL_DATABASES"] = run('mysql --connect-timeout=3 -e "SHOW DATABASES;"', { timeout: 1e4 }) || "(mysql not running or requires auth)";
+        } else {
+          results["MYSQL_DATABASES"] = run('mysql --connect-timeout=3 -e "SHOW DATABASES;" 2>/dev/null') || "(mysql not running or requires auth)";
+        }
+      } else {
+        results["MYSQL_DATABASES"] = "(mysql not installed)";
+      }
+      if (commandExists("mongosh")) {
+        if (IS_WIN) {
+          results["MONGODB_DATABASES"] = run(`mongosh --quiet --eval "db.adminCommand({listDatabases:1}).databases.map(d=>d.name).join('\\n')"`, { timeout: 1e4 }) || "(mongosh not available)";
+        } else {
+          results["MONGODB_DATABASES"] = run(`mongosh --quiet --eval "db.adminCommand({listDatabases:1}).databases.map(d=>d.name).join('\\n')" 2>/dev/null`) || "(mongosh not available)";
+        }
+      } else {
+        results["MONGODB_DATABASES"] = "(mongosh not installed)";
+      }
+      if (commandExists("redis-cli")) {
+        if (IS_WIN) {
+          results["REDIS_INFO"] = run("redis-cli info server", { timeout: 1e4 }).split("\n").slice(0, 5).join("\n") || "(redis-cli not available)";
+        } else {
+          results["REDIS_INFO"] = run("redis-cli info server 2>/dev/null | head -5") || "(redis-cli not available)";
+        }
+      } else {
+        results["REDIS_INFO"] = "(redis-cli not installed)";
+      }
+      const appDirs = dbScanDirs();
       if (appDirs.length > 0) {
-        const findCmds = appDirs.map((d) => `find "${d}" -maxdepth 4 \\( -name "*.sqlite" -o -name "*.sqlite3" -o -name "*.db" \\) 2>/dev/null`).join("; ");
-        results["SQLITE_APP_FILES"] = run(`{ ${findCmds}; } | head -80`) || "(none found)";
+        results["SQLITE_APP_FILES"] = findFiles(appDirs, ["*.sqlite", "*.sqlite3", "*.db"], 4, 80) || "(none found)";
       }
       if (deep) {
-        results["SQLITE_DEEP_SCAN"] = run(`find "${HOME}" -maxdepth 6 \\( -name "*.sqlite" -o -name "*.sqlite3" -o -name "*.db" \\) -not -path "*/node_modules/*" -not -path "*/.git/*" 2>/dev/null | head -100`) || "(none found)";
+        if (IS_WIN) {
+          results["SQLITE_DEEP_SCAN"] = run(
+            `Get-ChildItem -Path '${HOME}' -Recurse -Depth 6 -Include '*.sqlite','*.sqlite3','*.db' -ErrorAction SilentlyContinue | Where-Object { $_.FullName -notmatch 'node_modules|\\.git' } | Select-Object -First 100 -ExpandProperty FullName`,
+            { timeout: 3e4 }
+          ) || "(none found)";
+        } else {
+          results["SQLITE_DEEP_SCAN"] = run(`find "${HOME}" -maxdepth 6 \\( -name "*.sqlite" -o -name "*.sqlite3" -o -name "*.db" \\) -not -path "*/node_modules/*" -not -path "*/.git/*" 2>/dev/null | head -100`) || "(none found)";
+        }
+      }
+      if (IS_WIN) {
+        results["DB_CONFIG_FILES"] = run(
+          `Get-ChildItem -Path '${HOME}' -Recurse -Depth 4 -Include '.env','.env.local','database.yml','database.json','docker-compose.yml' -ErrorAction SilentlyContinue | Select-Object -First 20 -ExpandProperty FullName`,
+          { timeout: 15e3 }
+        ) || "(none found)";
+      } else {
+        results["DB_CONFIG_FILES"] = run(`find "${HOME}" -maxdepth 4 \\( -name ".env" -o -name ".env.local" -o -name "database.yml" -o -name "database.json" -o -name "docker-compose.yml" \\) 2>/dev/null | head -20`) || "(none found)";
       }
-      results["DB_CONFIG_FILES"] = run(`find "${HOME}" -maxdepth 4 \\( -name ".env" -o -name ".env.local" -o -name "database.yml" -o -name "database.json" -o -name "docker-compose.yml" \\) 2>/dev/null | head -20`) || "(none found)";
       const out = Object.entries(results).map(([k, v]) => `=== ${k} ===
 ${v}`).join("\n\n");
       return { content: [{ type: "text", text: out }] };
@@ -709,17 +757,23 @@ ${v}`).join("\n\n");
     tool("scan_k8s_resources", "Scan Kubernetes cluster via kubectl \u2014 100% readonly (get, describe)", {
       namespace: z.string().optional().describe("Filter by namespace \u2014 empty = all namespaces")
     }, async (args) => {
-      const { execSync: execSync2 } = await import("child_process");
       const ns = args["namespace"];
       const nsFlag = ns ? `-n ${ns}` : "--all-namespaces";
-      const run = (cmd) => {
-        try {
-          return execSync2(cmd, { stdio: "pipe", timeout: 15e3, shell: "/bin/sh" }).toString().trim();
-        } catch (e) {
-          return `(error: ${e instanceof Error ? e.message.split("\n")[0] : String(e)})`;
-        }
+      const runK = (cmd) => {
+        const r = run(cmd, { timeout: 15e3 });
+        return r || `(error or not available)`;
       };
-      const sections = [
+      const sections = IS_WIN ? [
+        ["CONTEXT", "kubectl config current-context"],
+        ["NODES", "kubectl get nodes -o wide"],
+        ["NAMESPACES", "kubectl get namespaces"],
+        ["SERVICES", `kubectl get services ${nsFlag}`],
+        ["DEPLOYMENTS", `kubectl get deployments ${nsFlag}`],
+        ["STATEFULSETS", `kubectl get statefulsets ${nsFlag}`],
+        ["INGRESSES", `kubectl get ingress ${nsFlag}`],
+        ["PODS_RUNNING", `kubectl get pods ${nsFlag} --field-selector=status.phase=Running`],
+        ["CONFIGMAPS_SYSTEM", "kubectl get configmaps -n kube-system"]
+      ] : [
         ["CONTEXT", 'kubectl config current-context 2>/dev/null || echo "(no context set)"'],
         ["NODES", "kubectl get nodes -o wide"],
         ["NAMESPACES", "kubectl get namespaces"],
@@ -731,128 +785,101 @@ ${v}`).join("\n\n");
         ["CONFIGMAPS_SYSTEM", "kubectl get configmaps -n kube-system 2>/dev/null | head -30"]
       ];
       const out = sections.map(([l, c]) => `=== ${l} ===
-${run(c)}`).join("\n\n");
+${runK(c)}`).join("\n\n");
       return { content: [{ type: "text", text: out }] };
     }),
     tool("scan_aws_resources", "Scan AWS infrastructure via AWS CLI \u2014 100% readonly (describe, list)", {
       region: z.string().optional().describe("AWS Region \u2014 default: AWS_DEFAULT_REGION or profile"),
       profile: z.string().optional().describe("AWS CLI profile")
     }, async (args) => {
-      const { execSync: execSync2 } = await import("child_process");
       const region = args["region"];
       const profile = args["profile"];
       const env = { ...process.env };
       if (region) env["AWS_DEFAULT_REGION"] = region;
       const pf = profile ? `--profile ${profile}` : "";
-      const run = (cmd) => {
-        try {
-          return execSync2(cmd, { stdio: "pipe", timeout: 2e4, shell: "/bin/sh", env }).toString().trim();
-        } catch (e) {
-          return `(error: ${e instanceof Error ? e.message.split("\n")[0] : String(e)})`;
-        }
-      };
+      const runAws = (cmd) => run(cmd, { timeout: 2e4, env }) || "(error or not available)";
       const sections = [
         ["IDENTITY", `aws sts get-caller-identity ${pf} --output json`],
-        ["EC2", `aws ec2 describe-instances ${pf} --query 'Reservations[*].Instances[*].[InstanceId,InstanceType,State.Name,PublicIpAddress,PrivateIpAddress,Tags[?Key==\`Name\`].Value|[0]]' --output table`],
-        ["RDS", `aws rds describe-db-instances ${pf} --query 'DBInstances[*].[DBInstanceIdentifier,Engine,DBInstanceStatus,Endpoint.Address,Endpoint.Port]' --output table`],
-        ["ELB_V2", `aws elbv2 describe-load-balancers ${pf} --query 'LoadBalancers[*].[LoadBalancerName,DNSName,Type,State.Code]' --output table`],
+        ["EC2", `aws ec2 describe-instances ${pf} --query "Reservations[*].Instances[*].[InstanceId,InstanceType,State.Name,PublicIpAddress,PrivateIpAddress]" --output table`],
+        ["RDS", `aws rds describe-db-instances ${pf} --query "DBInstances[*].[DBInstanceIdentifier,Engine,DBInstanceStatus,Endpoint.Address,Endpoint.Port]" --output table`],
+        ["ELB_V2", `aws elbv2 describe-load-balancers ${pf} --query "LoadBalancers[*].[LoadBalancerName,DNSName,Type,State.Code]" --output table`],
         ["EKS", `aws eks list-clusters ${pf} --output json`],
-        ["ELASTICACHE", `aws elasticache describe-cache-clusters ${pf} --query 'CacheClusters[*].[CacheClusterId,Engine,CacheClusterStatus]' --output table 2>/dev/null || echo "(not available)"`],
-        ["S3", `aws s3 ls ${pf} 2>/dev/null || echo "(not available)"`],
-        ["VPC", `aws ec2 describe-vpcs ${pf} --query 'Vpcs[*].[VpcId,CidrBlock,IsDefault,Tags[?Key==\`Name\`].Value|[0]]' --output table`]
+        ["ELASTICACHE", `aws elasticache describe-cache-clusters ${pf} --query "CacheClusters[*].[CacheClusterId,Engine,CacheClusterStatus]" --output table`],
+        ["S3", `aws s3 ls ${pf}`],
+        ["VPC", `aws ec2 describe-vpcs ${pf} --query "Vpcs[*].[VpcId,CidrBlock,IsDefault]" --output table`]
       ];
       const out = sections.map(([l, c]) => `=== ${l} ===
-${run(c)}`).join("\n\n");
+${runAws(c)}`).join("\n\n");
       return { content: [{ type: "text", text: out }] };
     }),
     tool("scan_gcp_resources", "Scan Google Cloud Platform via gcloud CLI \u2014 100% readonly (list, describe)", {
       project: z.string().optional().describe("GCP Project ID \u2014 default: current gcloud project")
     }, async (args) => {
-      const { execSync: execSync2 } = await import("child_process");
       const project = args["project"];
       const pf = project ? `--project ${project}` : "";
-      const run = (cmd) => {
-        try {
-          return execSync2(cmd, { stdio: "pipe", timeout: 2e4, shell: "/bin/sh" }).toString().trim();
-        } catch (e) {
-          return `(error: ${e instanceof Error ? e.message.split("\n")[0] : String(e)})`;
-        }
-      };
+      const runGcp = (cmd) => run(cmd, { timeout: 2e4 }) || "(error or not available)";
       const sections = [
-        ["IDENTITY", `gcloud config list account --format='value(core.account)' 2>/dev/null; gcloud config get-value project 2>/dev/null`],
-        ["COMPUTE_INSTANCES", `gcloud compute instances list ${pf} 2>/dev/null || echo "(error)"`],
-        ["SQL_INSTANCES", `gcloud sql instances list ${pf} 2>/dev/null || echo "(error)"`],
-        ["GKE_CLUSTERS", `gcloud container clusters list ${pf} 2>/dev/null || echo "(error)"`],
-        ["CLOUD_RUN", `gcloud run services list ${pf} --platform managed 2>/dev/null || echo "(error)"`],
-        ["CLOUD_FUNCTIONS", `gcloud functions list ${pf} 2>/dev/null || echo "(error)"`],
-        ["REDIS", `gcloud redis instances list ${pf} --regions=- 2>/dev/null || echo "(error)"`],
-        ["PUBSUB", `gcloud pubsub topics list ${pf} 2>/dev/null || echo "(error)"`],
-        ["SPANNER", `gcloud spanner instances list ${pf} 2>/dev/null || echo "(error)"`]
+        ["IDENTITY", `gcloud config list account --format="value(core.account)"`],
+        ["COMPUTE_INSTANCES", `gcloud compute instances list ${pf}`],
+        ["SQL_INSTANCES", `gcloud sql instances list ${pf}`],
+        ["GKE_CLUSTERS", `gcloud container clusters list ${pf}`],
+        ["CLOUD_RUN", `gcloud run services list ${pf} --platform managed`],
+        ["CLOUD_FUNCTIONS", `gcloud functions list ${pf}`],
+        ["REDIS", `gcloud redis instances list ${pf} --regions=-`],
+        ["PUBSUB", `gcloud pubsub topics list ${pf}`],
+        ["SPANNER", `gcloud spanner instances list ${pf}`]
       ];
       const out = sections.map(([l, c]) => `=== ${l} ===
-${run(c)}`).join("\n\n");
+${runGcp(c)}`).join("\n\n");
       return { content: [{ type: "text", text: out }] };
     }),
     tool("scan_azure_resources", "Scan Azure infrastructure via az CLI \u2014 100% readonly (list, show)", {
       subscription: z.string().optional().describe("Azure Subscription ID"),
       resourceGroup: z.string().optional().describe("Filter by resource group")
     }, async (args) => {
-      const { execSync: execSync2 } = await import("child_process");
       const sub = args["subscription"];
       const rg = args["resourceGroup"];
       const sf = sub ? `--subscription ${sub}` : "";
       const rf = rg ? `--resource-group ${rg}` : "";
-      const run = (cmd) => {
-        try {
-          return execSync2(cmd, { stdio: "pipe", timeout: 2e4, shell: "/bin/sh" }).toString().trim();
-        } catch (e) {
-          return `(error: ${e instanceof Error ? e.message.split("\n")[0] : String(e)})`;
-        }
-      };
+      const runAz = (cmd) => run(cmd, { timeout: 2e4 }) || "(error or not available)";
       const sections = [
-        ["IDENTITY", `az account show --output json ${sf} 2>/dev/null || echo "(not logged in \u2014 az login)"`],
-        ["VMS", `az vm list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["AKS", `az aks list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["SQL_SERVERS", `az sql server list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["POSTGRES", `az postgres server list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["REDIS", `az redis list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["WEBAPPS", `az webapp list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["CONTAINER_APPS", `az containerapp list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["FUNCTIONS", `az functionapp list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`]
+        ["IDENTITY", `az account show --output json ${sf}`],
+        ["VMS", `az vm list ${sf} ${rf} --output table`],
+        ["AKS", `az aks list ${sf} ${rf} --output table`],
+        ["SQL_SERVERS", `az sql server list ${sf} ${rf} --output table`],
+        ["POSTGRES", `az postgres server list ${sf} ${rf} --output table`],
+        ["REDIS", `az redis list ${sf} ${rf} --output table`],
+        ["WEBAPPS", `az webapp list ${sf} ${rf} --output table`],
+        ["CONTAINER_APPS", `az containerapp list ${sf} ${rf} --output table`],
+        ["FUNCTIONS", `az functionapp list ${sf} ${rf} --output table`]
       ];
       const out = sections.map(([l, c]) => `=== ${l} ===
-${run(c)}`).join("\n\n");
+${runAz(c)}`).join("\n\n");
       return { content: [{ type: "text", text: out }] };
     }),
     tool("scan_installed_apps", "Scan all installed apps and tools \u2014 IDEs, office, dev tools, business apps, databases", {
       searchHint: z.string().optional().describe('Optional search term to find specific tools (e.g. "hubspot windsurf cursor")')
     }, async (args) => {
-      const { execSync: execSync2 } = await import("child_process");
       const hint = args["searchHint"];
-      const run = (cmd) => {
-        try {
-          return execSync2(cmd, { stdio: "pipe", timeout: 15e3, shell: "/bin/sh" }).toString().trim();
-        } catch {
-          return "";
-        }
-      };
-      const platform = process.platform;
       const results = {};
-      if (platform === "darwin") {
+      results["PLATFORM"] = `${PLATFORM} (${IS_WIN ? "Windows" : IS_MAC ? "macOS" : "Linux"})`;
+      if (IS_MAC) {
         results["APPLICATIONS"] = run("ls /Applications/ 2>/dev/null | head -200") || "(empty)";
         results["USER_APPLICATIONS"] = run("ls ~/Applications/ 2>/dev/null | head -100") || "(empty)";
         results["BREW_CASKS"] = run("brew list --cask 2>/dev/null | head -100") || "(brew not installed)";
         results["BREW_FORMULAE"] = run("brew list --formula 2>/dev/null | head -150") || "(brew not installed)";
         results["SPOTLIGHT_APPS"] = run(`mdfind "kMDItemKind == 'Application'" 2>/dev/null | grep -v "^/System" | grep -v "^/Library/Apple" | head -100`) || "(Spotlight not available)";
-      } else if (platform === "linux") {
+      } else if (IS_LINUX) {
         results["DPKG"] = run("dpkg --list 2>/dev/null | awk '{print $2}' | head -200") || "(dpkg not available)";
         results["SNAP"] = run("snap list 2>/dev/null | head -50") || "(snap not available)";
         results["FLATPAK"] = run("flatpak list 2>/dev/null | head -50") || "(flatpak not available)";
         results["DESKTOP_FILES"] = run("ls /usr/share/applications/*.desktop ~/.local/share/applications/*.desktop 2>/dev/null | xargs -I{} basename {} .desktop 2>/dev/null | head -100") || "(no .desktop files)";
         results["RPM"] = run("rpm -qa 2>/dev/null | head -200") || "(rpm not available)";
-      } else if (platform === "win32") {
-        results["WINGET"] = run("winget list 2>/dev/null | head -100") || "(winget not available)";
-        results["PROGRAMS_x64"] = run('reg query "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall" /s /v DisplayName 2>/dev/null | findstr DisplayName | head -100') || "(not available)";
+      } else if (IS_WIN) {
+        results["WINGET"] = run("winget list --accept-source-agreements", { timeout: 2e4 }) || "(winget not available)";
+        results["INSTALLED_PROGRAMS"] = scanWindowsPrograms() || "(registry scan failed)";
+        results["CHOCO"] = run("choco list --local-only", { timeout: 15e3 }) || "(chocolatey not installed)";
+        results["SCOOP"] = run("scoop list", { timeout: 15e3 }) || "(scoop not installed)";
       }
       const knownTools = [
         // IDEs & Editors
@@ -915,7 +942,6 @@ ${run(c)}`).join("\n\n");
         "php",
         "composer",
         "dotnet",
-        "dotnet-sdk",
         // Databases
         "psql",
         "mysql",
@@ -956,6 +982,8 @@ ${run(c)}`).join("\n\n");
         "brave",
         "opera",
         "edge",
+        // Windows-specific
+        ...IS_WIN ? ["pwsh", "powershell", "wsl", "winget", "choco", "scoop", "notepad++"] : [],
         // Monitoring / Analytics
         "datadog-agent",
         "newrelic-agent",
@@ -970,21 +998,35 @@ ${run(c)}`).join("\n\n");
       const found = [];
       const notFound = [];
       for (const t of knownTools) {
-        const r = run(`which ${t} 2>/dev/null`);
+        const r = commandExists(t);
         if (r) found.push(`${t}: ${r}`);
         else notFound.push(t);
       }
-      results["WHICH_FOUND"] = found.join("\n") || "(none found)";
-      results["WHICH_NOT_FOUND"] = notFound.join(", ");
+      results["TOOLS_FOUND"] = found.join("\n") || "(none found)";
+      results["TOOLS_NOT_FOUND"] = notFound.join(", ");
       if (hint) {
         const terms = hint.split(/[\s,]+/).filter(Boolean);
         const hintResults = [];
         for (const term of terms) {
           const safe = term.replace(/[^a-zA-Z0-9._-]/g, "");
           if (!safe) continue;
-          const r = run(`which ${safe} 2>/dev/null || find /Applications ~/Applications /usr/bin /usr/local/bin /opt/homebrew/bin ~/.local/bin 2>/dev/null -iname "*${safe}*" -maxdepth 3 2>/dev/null | head -5`);
-          if (r) hintResults.push(`${term}: ${r}`);
-          else hintResults.push(`${term}: (not found)`);
+          const cmdPath = commandExists(safe);
+          if (cmdPath) {
+            hintResults.push(`${term}: ${cmdPath}`);
+            continue;
+          }
+          let fallback = "";
+          if (IS_WIN) {
+            fallback = run(
+              `Get-ChildItem -Path 'C:\\Program Files','C:\\Program Files (x86)','${HOME}\\AppData\\Local\\Programs' -Recurse -Depth 3 -Filter '*${safe}*' -ErrorAction SilentlyContinue | Select-Object -First 5 -ExpandProperty FullName`,
+              { timeout: 1e4 }
+            );
+          } else if (IS_MAC) {
+            fallback = run(`mdfind -name "${safe}" 2>/dev/null | head -5`);
+          } else {
+            fallback = run(`find /usr/bin /usr/local/bin /opt/homebrew/bin ~/.local/bin /Applications ~/Applications 2>/dev/null -iname "*${safe}*" -maxdepth 3 2>/dev/null | head -5`);
+          }
+          hintResults.push(fallback ? `${term}: ${fallback}` : `${term}: (not found)`);
         }
         results["HINT_SEARCH"] = hintResults.join("\n");
       }
@@ -1023,9 +1065,9 @@ ${v}`).join("\n\n");
 }
 
 // src/safety.ts
-var BLOCKED_CMDS = /\b(rm|mv|cp|dd|mkfs|chmod|chown|chgrp|kill|killall|pkill|reboot|shutdown|poweroff|halt|systemctl\s+(start|stop|restart|enable|disable)|service\s+(start|stop|restart)|docker\s+(rm|rmi|stop|kill|exec|run|build|push)|kubectl\s+(delete|apply|edit|exec|run|create|patch)|apt|yum|dnf|pacman|pip\s+install|npm\s+(install|uninstall)|curl\s+.*-X\s*(POST|PUT|DELETE|PATCH)|wget\s+-O|tee\s)\b/i;
-var BLOCKED_REDIRECTS = />>|>[^>]/;
-var safetyHook = async (input) => {
+var BLOCKED_CMDS = /\b(rm|mv|cp|dd|mkfs|chmod|chown|chgrp|kill|killall|pkill|reboot|shutdown|poweroff|halt|systemctl\s+(start|stop|restart|enable|disable)|service\s+(start|stop|restart)|docker\s+(rm|rmi|stop|kill|exec|run|build|push)|kubectl\s+(delete|apply|edit|exec|run|create|patch)|apt|yum|dnf|pacman|pip\s+install|npm\s+(install|uninstall)|curl\s+.*-X\s*(POST|PUT|DELETE|PATCH)|wget\s+-O|tee\s|Remove-Item|Move-Item|Copy-Item|Stop-Process|Stop-Service|Restart-Service|Start-Service|Set-Service|Invoke-WebRequest\s+.*-Method\s+(POST|PUT|DELETE|PATCH)|del\s|rmdir\s|Format-Volume|Clear-Disk|Stop-Computer|Restart-Computer|Uninstall-Package|Install-Package|Install-Module)\b/i;
+var BLOCKED_REDIRECTS = />>|>[^>]|Out-File|Set-Content|Add-Content/;
+var safetyHook = async (input, _toolUseID, _options) => {
   if (!("tool_name" in input)) return {};
   if (input.tool_name !== "Bash") return {};
   const cmd = input.tool_input?.command ?? "";
@@ -1048,13 +1090,18 @@ var safetyHook = async (input) => {
 
 // src/agent.ts
 async function runDiscovery(config, db, sessionId, onEvent, onAskUser, hint) {
-  const { query } = await import("@anthropic-ai/claude-code");
+  const { query } = await import("@anthropic-ai/claude-agent-sdk");
   const tools = await createCartographyTools(db, sessionId, { onAskUser });
   const hintSection = hint ? `
 \u26A1 USER HINT (HIGH PRIORITY): The user wants to find these specific tools: "${hint}"
   \u2192 Run scan_installed_apps(searchHint: "${hint}") IMMEDIATELY and save found tools as saas_tool nodes!
 ` : "";
+  const platformName = IS_WIN ? "Windows" : IS_MAC ? "macOS" : "Linux";
+  const networkScanCmd = IS_WIN ? "Get-NetTCPConnection -State Listen (PowerShell) \u2192 identify all listening ports/processes" : IS_MAC ? "lsof -iTCP -sTCP:LISTEN -n -P && ps aux \u2192 identify all listening ports/processes" : "ss -tlnp && ps aux \u2192 identify all listening ports/processes";
+  const readOnlyTools = IS_WIN ? "Get-NetTCPConnection, Get-Process, Get-Service, Get-ChildItem, curl, docker inspect, kubectl get" : IS_MAC ? "lsof, ps, cat, head, curl -s, docker inspect, kubectl get" : "ss, ps, cat, head, curl -s, docker inspect, kubectl get";
+  const processCmd = IS_WIN ? "Get-Process" : "ps aux";
   const systemPrompt = `You are an infrastructure discovery agent. Map the complete system landscape \u2014 local services, SaaS tools, AND all installed apps/tools of the user.
+PLATFORM: ${platformName} (${PLATFORM})
 ${hintSection}
 \u2501\u2501 MANDATORY SEQUENCE \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
 STEP 1 \u2014 Browser Bookmarks (ALWAYS FIRST):
@@ -1085,7 +1132,8 @@ STEP 4 \u2014 Local Databases & Infrastructure:
   \u2022 MongoDB running \u2192 save_node as database_server
   \u2022 Redis running \u2192 save_node as cache_server
   \u2022 SQLite files in app directories \u2192 save_node as database if clearly a business app DB
-  Then run: ss -tlnp && ps aux \u2192 identify all listening ports/processes
+  Then run: ${networkScanCmd}
+  Also run: ${processCmd} \u2192 identify running services
   Deepen each service: DB\u2192schemas, API\u2192endpoints, Queue\u2192topics
 
 STEP 5 \u2014 Cloud & Kubernetes (if CLI available):
@@ -1122,8 +1170,20 @@ PORT MAPPING: 5432=postgres, 3306=mysql, 27017=mongodb, 6379=redis,
 9092=kafka, 5672=rabbitmq, 80/443/8080/3000=web_service,
 9090=prometheus, 8500=consul, 8200=vault, 2379=etcd
 
+PLATFORM-SPECIFIC NOTES (${platformName}):
+${IS_WIN ? `\u2022 Use PowerShell commands: Get-NetTCPConnection, Get-Process, Get-Service, Get-ChildItem
+\u2022 Do NOT use Unix commands (ss, ps aux, find, which, head, grep) \u2014 they won't work on Windows
+\u2022 Use $env:LOCALAPPDATA, $env:APPDATA for app data paths
+\u2022 Registry scan for installed programs is handled by scan_installed_apps` : IS_MAC ? `\u2022 Use lsof -iTCP -sTCP:LISTEN -n -P for port scanning (ss is NOT available on macOS)
+\u2022 Use ps aux for process listing
+\u2022 Applications are in /Applications and ~/Applications
+\u2022 Homebrew (brew) for package management` : `\u2022 Use ss -tlnp for port scanning
+\u2022 Use ps aux for process listing
+\u2022 Check dpkg, snap, flatpak for installed packages
+\u2022 Check Snap/Flatpak browser variants for bookmarks`}
+
 RULES:
-\u2022 Read-only only (ss, ps, cat, head, curl -s, docker inspect, kubectl get)
+\u2022 Read-only only (${readOnlyTools})
 \u2022 Node IDs: "type:host:port" or "type:name" \u2014 no paths, no credentials
 \u2022 saas_tool IDs: "saas_tool:github.com", "saas_tool:vscode", "saas_tool:cursor"
 \u2022 Installed-app IDs: "saas_tool:<appname>" e.g. "saas_tool:slack", "saas_tool:docker-desktop"
@@ -1150,7 +1210,7 @@ Use ask_user when you need context from the user.`;
     options: {
       model: config.agentModel,
       maxTurns: config.maxTurns,
-      customSystemPrompt: systemPrompt,
+      systemPrompt,
       mcpServers: { cartography: tools },
       allowedTools: [
         "Bash",
@@ -2776,23 +2836,18 @@ function exportAll(db, sessionId, outputDir, formats = ["mermaid", "json", "yaml
   const edges = db.getEdges(sessionId);
   const jgfPath = join2(outputDir, "cartography-graph.jgf.json");
   writeFileSync(jgfPath, exportJGF(nodes, edges));
-  process.stderr.write("\u2713 cartography-graph.jgf.json\n");
   if (formats.includes("mermaid")) {
     writeFileSync(join2(outputDir, "topology.mermaid"), generateTopologyMermaid(nodes, edges));
     writeFileSync(join2(outputDir, "dependencies.mermaid"), generateDependencyMermaid(nodes, edges));
-    process.stderr.write("\u2713 topology.mermaid, dependencies.mermaid\n");
   }
   if (formats.includes("json")) {
     writeFileSync(join2(outputDir, "catalog.json"), exportJSON(db, sessionId));
-    process.stderr.write("\u2713 catalog.json\n");
   }
   if (formats.includes("yaml")) {
     writeFileSync(join2(outputDir, "catalog-info.yaml"), exportBackstageYAML(nodes, edges));
-    process.stderr.write("\u2713 catalog-info.yaml\n");
   }
   if (formats.includes("html") || formats.includes("map") || formats.includes("discovery")) {
     writeFileSync(join2(outputDir, "discovery.html"), exportDiscoveryApp(nodes, edges));
-    process.stderr.write("\u2713 discovery.html\n");
   }
   if (formats.includes("sops")) {
     const sops = db.getSOPs(sessionId);
@@ -2802,10 +2857,6 @@ function exportAll(db, sessionId, outputDir, formats = ["mermaid", "json", "yaml
       const wfFilename = `workflow-${sop.workflowId.substring(0, 8)}.mermaid`;
       writeFileSync(join2(outputDir, "workflows", wfFilename), generateWorkflowMermaid(sop));
     }
-    if (sops.length > 0) {
-      process.stderr.write(`\u2713 ${sops.length} SOPs + workflow diagrams
-`);
-    }
   }
 }
 
@@ -2824,8 +2875,8 @@ main();
 function main() {
   const program = new Command();
   const CMD = "datasynx-cartography";
-  const VERSION = "0.2.3";
-  program.name(CMD).description("AI-powered Infrastructure Cartography & SOP Generation").version(VERSION);
+  const VERSION = "0.7.0";
+  program.name(CMD).description("AI-powered Infrastructure Discovery & Agentic AI Cartography").version(VERSION);
   program.command("discover").description("Scan and map your infrastructure").option("--entry <hosts...>", "Entry points", ["localhost"]).option("--depth <n>", "Max crawl depth", "8").option("--max-turns <n>", "Max agent turns", "50").option("--model <m>", "Agent model", "claude-sonnet-4-5-20250929").option("--org <name>", "Organization name (for Backstage)").option("-o, --output <dir>", "Output directory", "./datasynx-output").option("--db <path>", "DB path").option("-v, --verbose", "Show agent reasoning", false).action(async (opts) => {
     checkPrerequisites();
     const config = defaultConfig({
@@ -3034,12 +3085,11 @@ function main() {
 `);
       }
     }
-    exportAll(db, sessionId, config.outputDir);
-    const osc8 = (url, label) => `\x1B]8;;${url}\x1B\\${label}\x1B]8;;\x1B\\`;
+    exportAll(db, sessionId, config.outputDir, ["discovery"]);
     const discoveryPath = resolve(config.outputDir, "discovery.html");
     w("\n");
     if (existsSync2(discoveryPath)) {
-      w(`  ${green("\u2192")}  ${osc8(`file://${discoveryPath}`, bold("Open discovery.html"))}  ${dim("\u2190 Map + Topology")}
+      w(`  ${green("\u2713")}  ${bold("discovery.html")}  ${dim("\u2190 Enterprise Map")}
 `);
     }
     w("\n");
@@ -3082,9 +3132,9 @@ function main() {
         w(`  ${green(bold("\u2713"))}  Total now: ${bold(String(followupStats.nodes))} nodes, ${bold(String(followupStats.edges))} edges
 `);
         w("\n");
-        exportAll(db, sessionId, config.outputDir);
+        exportAll(db, sessionId, config.outputDir, ["discovery"]);
         if (existsSync2(discoveryPath)) {
-          w(`  ${green("\u2192")}  ${osc8(`file://${discoveryPath}`, bold("discovery.html updated"))}
+          w(`  ${green("\u2713")}  ${bold("discovery.html updated")}
 `);
         }
         w("\n");
@@ -3319,9 +3369,39 @@ ${infraSummary.substring(0, 12e3)}`;
     const out = process.stdout.write.bind(process.stdout);
     const b = bold;
     const line = () => out(dim("\u2500".repeat(60)) + "\n");
+    const platformName = IS_WIN ? "Windows" : IS_MAC ? "macOS" : "Linux";
     out("\n");
     out(b("  DATASYNX CARTOGRAPHY") + "  " + dim("v" + VERSION) + "\n");
-    out(dim("  AI-powered Infrastructure Cartography & SOP Generation\n"));
+    out(dim("  AI-powered Infrastructure Discovery & Agentic AI Cartography\n"));
+    out(dim(`  Platform: ${platformName}
+`));
+    out("\n");
+    line();
+    out(b(cyan("  CROSS-PLATFORM SUPPORT\n")));
+    out("\n");
+    out(`  ${green("Linux")}     ss, ps, dpkg/snap/flatpak, find, /bin/sh
+`);
+    out(`  ${green("macOS")}     lsof, ps, /Applications, Homebrew, Spotlight, /bin/sh
+`);
+    out(`  ${green("Windows")}   Get-NetTCPConnection, Get-Process, Get-Service, Registry,
+`);
+    out(`            winget, choco, scoop, PowerShell
+`);
+    out("\n");
+    out(dim("  Network scanning:\n"));
+    out(dim("    Linux:   ss -tlnp\n"));
+    out(dim("    macOS:   lsof -iTCP -sTCP:LISTEN -n -P\n"));
+    out(dim("    Windows: Get-NetTCPConnection -State Listen\n"));
+    out("\n");
+    out(dim("  Installed apps:\n"));
+    out(dim("    Linux:   dpkg, rpm, snap, flatpak, .desktop files\n"));
+    out(dim("    macOS:   /Applications, brew list, Spotlight (mdfind)\n"));
+    out(dim("    Windows: winget list, Registry scan, choco, scoop\n"));
+    out("\n");
+    out(dim("  Browser bookmarks & history:\n"));
+    out(dim("    Linux:   ~/.config/google-chrome, Snap/Flatpak variants, ~/.mozilla\n"));
+    out(dim("    macOS:   ~/Library/Application Support/Google/Chrome, ~/Library/.../Firefox\n"));
+    out(dim("    Windows: %LOCALAPPDATA%\\Google\\Chrome\\User Data, %APPDATA%\\Mozilla\n"));
     out("\n");
     line();
     out(b(cyan("  CARTOGRAPHY\n")));
@@ -3330,7 +3410,7 @@ ${infraSummary.substring(0, 12e3)}`;
 `);
     out(`    Scans your local infrastructure (Claude Sonnet).
 `);
-    out(`    Claude autonomously runs ss, ps, curl, docker inspect, kubectl get
+    out(`    Claude autonomously runs ${IS_WIN ? "Get-NetTCPConnection, Get-Process" : IS_MAC ? "lsof, ps" : "ss, ps"}, curl, docker inspect, kubectl get
 `);
     out(`    and stores everything in SQLite.
 `);
@@ -3346,13 +3426,7 @@ ${infraSummary.substring(0, 12e3)}`;
     out("\n");
     out(dim("    Output:\n"));
     out(dim("      datasynx-output/\n"));
-    out(dim("        catalog.json          Machine-readable full dump\n"));
-    out(dim("        catalog-info.yaml     Backstage service catalog\n"));
-    out(dim("        topology.mermaid      Infrastructure topology (graph TB)\n"));
-    out(dim("        dependencies.mermaid  Service dependencies (graph LR)\n"));
-    out(dim("        discovery.html         Enterprise discovery frontend (Map + Topology)\n"));
-    out(dim("        sops/                 Generated SOPs as Markdown\n"));
-    out(dim("        workflows/            Workflow flowcharts as Mermaid\n"));
+    out(dim("        discovery.html         Enterprise Map\n"));
     out("\n");
     line();
     out(b(cyan("  ANALYSIS & EXPORT\n")));
@@ -3379,14 +3453,25 @@ ${infraSummary.substring(0, 12e3)}`;
     out(b(cyan("  ARCHITECTURE\n")));
     out("\n");
     out(dim("  CLI (Commander)\n"));
-    out(dim("    \u2514\u2500\u2500 Preflight: Claude CLI check + API key + interval validation\n"));
-    out(dim("        \u2514\u2500\u2500 Agent Orchestrator (agent.ts)\n"));
-    out(dim("            \u2514\u2500\u2500 runDiscovery()    \u2192 Claude Sonnet + Bash + MCP Tools\n"));
-    out(dim("                \u2514\u2500\u2500 Custom MCP Tools (tools.ts)\n"));
-    out(dim("                    save_node, save_edge,\n"));
-    out(dim("                    scan_bookmarks, scan_browser_history,\n"));
-    out(dim("                    scan_installed_apps, scan_local_databases\n"));
-    out(dim("                    \u2514\u2500\u2500 CartographyDB (SQLite WAL)\n"));
+    out(dim("    \u2514\u2500\u2500 Preflight: Claude CLI check + API key\n"));
+    out(dim("        \u2514\u2500\u2500 Platform Detection (platform.ts)\n"));
+    out(dim("            \u2514\u2500\u2500 Shell: /bin/sh (Unix) | PowerShell (Windows)\n"));
+    out(dim("            \u2514\u2500\u2500 Agent Orchestrator (agent.ts)\n"));
+    out(dim("                \u2514\u2500\u2500 runDiscovery() \u2192 Claude Sonnet + Bash + MCP Tools\n"));
+    out(dim("                    \u2514\u2500\u2500 Custom MCP Tools (tools.ts)\n"));
+    out(dim("                        save_node, save_edge,\n"));
+    out(dim("                        scan_bookmarks, scan_browser_history,\n"));
+    out(dim("                        scan_installed_apps, scan_local_databases\n"));
+    out(dim("                        scan_k8s, scan_aws, scan_gcp, scan_azure\n"));
+    out(dim("                        \u2514\u2500\u2500 CartographyDB (SQLite WAL)\n"));
+    out("\n");
+    line();
+    out(b(cyan("  SAFETY\n")));
+    out("\n");
+    out(dim("  PreToolUse hook blocks ALL destructive commands:\n"));
+    out(dim("    Unix:       rm, mv, dd, chmod, kill, docker rm/run, kubectl delete, >\n"));
+    out(dim("    PowerShell: Remove-Item, Stop-Process, Stop-Service, Out-File, etc.\n"));
+    out(dim("  Claude only reads \u2014 never writes, never deletes.\n"));
     out("\n");
     line();
     out(b(cyan("  SETUP\n")));
@@ -3396,7 +3481,11 @@ ${infraSummary.substring(0, 12e3)}`;
     out("  claude login\n");
     out("\n");
     out(dim("  # 2. API Key (if not using claude login)\n"));
-    out("  export ANTHROPIC_API_KEY=sk-ant-...\n");
+    if (IS_WIN) {
+      out('  $env:ANTHROPIC_API_KEY="sk-ant-..."\n');
+    } else {
+      out("  export ANTHROPIC_API_KEY=sk-ant-...\n");
+    }
     out("\n");
     out(dim("  # 3. Go\n"));
     out("  datasynx-cartography discover\n");
@@ -3405,7 +3494,7 @@ ${infraSummary.substring(0, 12e3)}`;
     out("\n");
   });
   program.command("bookmarks").description("View all browser bookmarks (Chrome, Chromium, Edge, Brave, Vivaldi, Opera, Firefox)").action(async () => {
-    const { scanAllBookmarks: scanAllBookmarks2 } = await import("./bookmarks-ITLW7U5D.js");
+    const { scanAllBookmarks: scanAllBookmarks2 } = await import("./bookmarks-72CDYAHD.js");
     const out = (s) => process.stdout.write(s);
     process.stderr.write("  Scanning bookmarks...\n\n");
     const hosts = await scanAllBookmarks2();
@@ -3492,7 +3581,7 @@ ${infraSummary.substring(0, 12e3)}`;
 `);
       return;
     }
-    const { NODE_TYPES: NODE_TYPES2 } = await import("./types-ZD6G5JKR.js");
+    const { NODE_TYPES: NODE_TYPES2 } = await import("./types-RHMJ6EGX.js");
     if (!process.stdin.isTTY) {
       w(red("\n  \u2717  Interactive mode requires a terminal (use --file for non-interactive)\n\n"));
       process.exitCode = 1;
@@ -3633,12 +3722,18 @@ ${infraSummary.substring(0, 12e3)}`;
       }
     }
     const localTools = [
-      ["docker", "docker --version"],
-      ["ss", "ss --version"]
+      ["docker", "docker --version", "all"]
     ];
+    if (IS_WIN) {
+      localTools.push(["PowerShell (Get-NetTCPConnection)", 'powershell -Command "Get-NetTCPConnection -State Listen | Select-Object -First 1"', "win32"]);
+    } else if (IS_MAC) {
+      localTools.push(["lsof", "lsof -v 2>&1 | head -1", "darwin"]);
+    } else {
+      localTools.push(["ss", "ss --version", "linux"]);
+    }
     for (const [name, cmd] of localTools) {
       try {
-        execSync2(cmd, { stdio: "pipe" });
+        execSync2(cmd, { stdio: "pipe", timeout: 1e4 });
         ok(`${name}  ${dim2("(discovery tool)")}`);
       } catch {
         warn(`${name} not found  ${dim2("\u2014 discovery without " + name + " will be limited")}`);
@@ -3673,7 +3768,7 @@ ${infraSummary.substring(0, 12e3)}`;
   o(_c("                              |___/             ") + "\n");
   o("\n");
   o(_b("  Cartography") + "  " + _d("v" + VERSION) + "\n");
-  o(_d("  AI-powered Infrastructure Discovery & SOP Generation\n"));
+  o(_d("  AI-powered Infrastructure Discovery & Agentic AI Cartography\n"));
   o(_d("  Built on Claude Agent SDK\n"));
   o("\n");
   if (process.argv.length <= 2) {