@ezlkg/shn 1.0.0

package/dist/env.js

@@ -0,0 +1,119 @@
+/**
+ * Environment variable loading and credential validation.
+ *
+ * Loads ~/.shannon/.env and validates that at least one authentication
+ * method is configured (API key, OAuth, Bedrock, Vertex, or router).
+ */
+import dotenv from 'dotenv';
+import { getEnvFile } from './home.js';
+/** Environment variables forwarded to worker containers. */
+const FORWARD_VARS = [
+    'ANTHROPIC_API_KEY',
+    'ANTHROPIC_BASE_URL',
+    'ANTHROPIC_AUTH_TOKEN',
+    'ROUTER_DEFAULT',
+    'CLAUDE_CODE_OAUTH_TOKEN',
+    'CLAUDE_CODE_USE_BEDROCK',
+    'AWS_REGION',
+    'AWS_BEARER_TOKEN_BEDROCK',
+    'CLAUDE_CODE_USE_VERTEX',
+    'CLOUD_ML_REGION',
+    'ANTHROPIC_VERTEX_PROJECT_ID',
+    'GOOGLE_APPLICATION_CREDENTIALS',
+    'ANTHROPIC_SMALL_MODEL',
+    'ANTHROPIC_MEDIUM_MODEL',
+    'ANTHROPIC_LARGE_MODEL',
+    'CLAUDE_CODE_MAX_OUTPUT_TOKENS',
+];
+/**
+ * Load ~/.shannon/.env into process.env.
+ * Existing env vars take precedence (standard dotenv behavior).
+ */
+export function loadEnv() {
+    dotenv.config({ path: getEnvFile() });
+}
+/**
+ * Build `-e KEY=VALUE` flags for docker run, only for set variables.
+ */
+export function buildEnvFlags() {
+    const flags = ['-e', 'TEMPORAL_ADDRESS=shannon-temporal:7233'];
+    for (const key of FORWARD_VARS) {
+        const value = process.env[key];
+        if (value) {
+            flags.push('-e', `${key}=${value}`);
+        }
+    }
+    return flags;
+}
+/**
+ * Validate that at least one authentication method is configured.
+ */
+export function validateCredentials(useRouter) {
+    if (process.env.ANTHROPIC_API_KEY) {
+        return { valid: true, mode: 'api-key' };
+    }
+    if (process.env.CLAUDE_CODE_OAUTH_TOKEN) {
+        return { valid: true, mode: 'oauth' };
+    }
+    if (process.env.CLAUDE_CODE_USE_BEDROCK === '1') {
+        const missing = [];
+        if (!process.env.AWS_REGION)
+            missing.push('AWS_REGION');
+        if (!process.env.AWS_BEARER_TOKEN_BEDROCK)
+            missing.push('AWS_BEARER_TOKEN_BEDROCK');
+        if (!process.env.ANTHROPIC_SMALL_MODEL)
+            missing.push('ANTHROPIC_SMALL_MODEL');
+        if (!process.env.ANTHROPIC_MEDIUM_MODEL)
+            missing.push('ANTHROPIC_MEDIUM_MODEL');
+        if (!process.env.ANTHROPIC_LARGE_MODEL)
+            missing.push('ANTHROPIC_LARGE_MODEL');
+        if (missing.length > 0) {
+            return {
+                valid: false,
+                mode: 'bedrock',
+                error: `Bedrock mode requires: ${missing.join(', ')}`,
+            };
+        }
+        return { valid: true, mode: 'bedrock' };
+    }
+    if (process.env.CLAUDE_CODE_USE_VERTEX === '1') {
+        const missing = [];
+        if (!process.env.CLOUD_ML_REGION)
+            missing.push('CLOUD_ML_REGION');
+        if (!process.env.ANTHROPIC_VERTEX_PROJECT_ID)
+            missing.push('ANTHROPIC_VERTEX_PROJECT_ID');
+        if (!process.env.ANTHROPIC_SMALL_MODEL)
+            missing.push('ANTHROPIC_SMALL_MODEL');
+        if (!process.env.ANTHROPIC_MEDIUM_MODEL)
+            missing.push('ANTHROPIC_MEDIUM_MODEL');
+        if (!process.env.ANTHROPIC_LARGE_MODEL)
+            missing.push('ANTHROPIC_LARGE_MODEL');
+        if (missing.length > 0) {
+            return {
+                valid: false,
+                mode: 'vertex',
+                error: `Vertex AI mode requires: ${missing.join(', ')}`,
+            };
+        }
+        if (!process.env.GOOGLE_APPLICATION_CREDENTIALS) {
+            return {
+                valid: false,
+                mode: 'vertex',
+                error: 'Vertex AI mode requires GOOGLE_APPLICATION_CREDENTIALS',
+            };
+        }
+        return { valid: true, mode: 'vertex' };
+    }
+    if (useRouter && (process.env.OPENAI_API_KEY || process.env.OPENROUTER_API_KEY)) {
+        // Set a placeholder so the worker doesn't reject the missing key
+        process.env.ANTHROPIC_API_KEY = 'router-mode';
+        return { valid: true, mode: 'router' };
+    }
+    return {
+        valid: false,
+        mode: 'api-key',
+        error: 'No credentials found. Set ANTHROPIC_API_KEY in ~/.shannon/.env\n' +
+            '  (or use CLAUDE_CODE_OAUTH_TOKEN, CLAUDE_CODE_USE_BEDROCK=1, CLAUDE_CODE_USE_VERTEX=1)',
+    };
+}
+//# sourceMappingURL=env.js.map

package/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,4DAA4D;AAC5D,MAAM,YAAY,GAAG;IACnB,mBAAmB;IACnB,oBAAoB;IACpB,sBAAsB;IACtB,gBAAgB;IAChB,yBAAyB;IACzB,yBAAyB;IACzB,YAAY;IACZ,0BAA0B;IAC1B,wBAAwB;IACxB,iBAAiB;IACjB,6BAA6B;IAC7B,gCAAgC;IAChC,uBAAuB;IACvB,wBAAwB;IACxB,uBAAuB;IACvB,+BAA+B;CACvB,CAAC;AAEX;;;GAGG;AACH,MAAM,UAAU,OAAO;IACrB,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,KAAK,GAAa,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC;IAEzE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAQD;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAkB;IACpD,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,EAAE,CAAC;QAChD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB;YAAE,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACpF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB;YAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB;YAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB;YAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,0BAA0B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACtD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe;YAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B;YAAE,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC1F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB;YAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB;YAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB;YAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACxD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,CAAC;YAChD,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,wDAAwD;aAChE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAChF,iEAAiE;QACjE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,aAAa,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,SAAS;QACf,KAAK,EACH,kEAAkE;YAClE,yFAAyF;KAC5F,CAAC;AACJ,CAAC"}

package/dist/home.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Shannon home directory management (~/.shannon/).
+ *
+ * Handles initialization, directory creation, and permission checks
+ * for the global state directory used by the npx CLI.
+ */
+export declare function getHome(): string;
+export declare function getWorkspacesDir(): string;
+export declare function getEnvFile(): string;
+export declare function getCredentialsPath(): string;
+/**
+ * Initialize ~/.shannon/ directory structure.
+ * Creates directories if missing, warns on overly permissive permissions.
+ */
+export declare function initHome(): void;
+//# sourceMappingURL=home.d.ts.map

package/dist/home.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"home.d.ts","sourceRoot":"","sources":["../src/home.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;;GAGG;AACH,wBAAgB,QAAQ,IAAI,IAAI,CAO/B"}

package/dist/home.js

@@ -0,0 +1,52 @@
+/**
+ * Shannon home directory management (~/.shannon/).
+ *
+ * Handles initialization, directory creation, and permission checks
+ * for the global state directory used by the npx CLI.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+const SHANNON_HOME = path.join(os.homedir(), '.shannon');
+const WORKSPACES_DIR = path.join(SHANNON_HOME, 'workspaces');
+const ENV_FILE = path.join(SHANNON_HOME, '.env');
+const CREDENTIALS_DIR = SHANNON_HOME;
+export function getHome() {
+    return SHANNON_HOME;
+}
+export function getWorkspacesDir() {
+    return WORKSPACES_DIR;
+}
+export function getEnvFile() {
+    return ENV_FILE;
+}
+export function getCredentialsPath() {
+    return path.join(CREDENTIALS_DIR, 'google-sa-vertex-key.json');
+}
+/**
+ * Initialize ~/.shannon/ directory structure.
+ * Creates directories if missing, warns on overly permissive permissions.
+ */
+export function initHome() {
+    // 1. Create directories
+    fs.mkdirSync(WORKSPACES_DIR, { recursive: true, mode: 0o700 });
+    // 2. Check permissions on sensitive files
+    checkPermissions(ENV_FILE, 0o600, '.env (contains API keys)');
+    checkPermissions(getCredentialsPath(), 0o600, 'GCP service account key');
+}
+function checkPermissions(filePath, expectedMode, label) {
+    try {
+        const stats = fs.statSync(filePath);
+        const actualMode = stats.mode & 0o777;
+        if (actualMode > expectedMode) {
+            const actual = '0' + actualMode.toString(8);
+            const expected = '0' + expectedMode.toString(8);
+            console.warn(`WARNING: ${label} has permissions ${actual}, expected ${expected} or stricter.`);
+            console.warn(`  Fix with: chmod ${expected} ${filePath}`);
+        }
+    }
+    catch {
+        // File doesn't exist yet — that's fine
+    }
+}
+//# sourceMappingURL=home.js.map

package/dist/home.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"home.js","sourceRoot":"","sources":["../src/home.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AACzD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;AAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AACjD,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC,MAAM,UAAU,OAAO;IACrB,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ;IACtB,wBAAwB;IACxB,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE/D,0CAA0C;IAC1C,gBAAgB,CAAC,QAAQ,EAAE,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAC9D,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,yBAAyB,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB,EAAE,YAAoB,EAAE,KAAa;IAC7E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;QACtC,IAAI,UAAU,GAAG,YAAY,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAChD,OAAO,CAAC,IAAI,CACV,YAAY,KAAK,oBAAoB,MAAM,cAAc,QAAQ,eAAe,CACjF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,qBAAqB,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+/**
+ * Shannon CLI — AI Penetration Testing Framework
+ *
+ * Zero-install CLI that orchestrates Docker containers for security scans.
+ * Uses pre-built images from Docker Hub and stores state in ~/.shannon/.
+ *
+ * Usage:
+ *   npx @ezlkg/shn start --url <url> --repo <path> [options]
+ *   npx @ezlkg/shn stop [--clean]
+ *   npx @ezlkg/shn workspaces
+ *   npx @ezlkg/shn logs <workspace>
+ *   npx @ezlkg/shn status
+ *   npx @ezlkg/shn update
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;GAaG"}

package/dist/index.js

@@ -0,0 +1,167 @@
+#!/usr/bin/env node
+/**
+ * Shannon CLI — AI Penetration Testing Framework
+ *
+ * Zero-install CLI that orchestrates Docker containers for security scans.
+ * Uses pre-built images from Docker Hub and stores state in ~/.shannon/.
+ *
+ * Usage:
+ *   npx @ezlkg/shn start --url <url> --repo <path> [options]
+ *   npx @ezlkg/shn stop [--clean]
+ *   npx @ezlkg/shn workspaces
+ *   npx @ezlkg/shn logs <workspace>
+ *   npx @ezlkg/shn status
+ *   npx @ezlkg/shn update
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { start } from './commands/start.js';
+import { stop } from './commands/stop.js';
+import { logs } from './commands/logs.js';
+import { workspaces } from './commands/workspaces.js';
+import { status } from './commands/status.js';
+import { update } from './commands/update.js';
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+function getVersion() {
+    try {
+        const pkgPath = path.join(__dirname, '..', 'package.json');
+        const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
+        return pkg.version || '1.0.0';
+    }
+    catch {
+        return '1.0.0';
+    }
+}
+function showHelp() {
+    console.log(`
+Shannon - AI Penetration Testing Framework
+
+Usage:
+  shannon start --url <url> --repo <path> [options]   Start a pentest scan
+  shannon stop [--clean]                               Stop all containers
+  shannon workspaces                                   List all workspaces
+  shannon logs <workspace>                             Tail workflow log
+  shannon status                                       Show running workers
+  shannon update                                       Pull latest image
+  shannon help                                         Show this help
+
+Options for 'start':
+  -u, --url <url>           Target URL (required)
+  -r, --repo <path>         Repository path (required)
+  -c, --config <path>       Configuration file (YAML)
+  -w, --workspace <name>    Named workspace (auto-resumes if exists)
+      --pipeline-testing    Use minimal prompts for fast testing
+      --router              Route requests through claude-code-router
+
+Examples:
+  npx @ezlkg/shn start -u https://example.com -r ./my-repo
+  npx @ezlkg/shn start -u https://example.com -r /path/to/repo -c config.yaml -w q1-audit
+  npx @ezlkg/shn logs q1-audit
+  npx @ezlkg/shn stop --clean
+
+State directory: ~/.shannon/
+Monitor workflows at http://localhost:8233
+`);
+}
+function parseStartArgs(argv) {
+    let url = '';
+    let repo = '';
+    let config;
+    let workspace;
+    let pipelineTesting = false;
+    let router = false;
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        const next = argv[i + 1];
+        switch (arg) {
+            case '-u':
+            case '--url':
+                if (next && !next.startsWith('-')) {
+                    url = next;
+                    i++;
+                }
+                break;
+            case '-r':
+            case '--repo':
+                if (next && !next.startsWith('-')) {
+                    repo = next;
+                    i++;
+                }
+                break;
+            case '-c':
+            case '--config':
+                if (next && !next.startsWith('-')) {
+                    config = next;
+                    i++;
+                }
+                break;
+            case '-w':
+            case '--workspace':
+                if (next && !next.startsWith('-')) {
+                    workspace = next;
+                    i++;
+                }
+                break;
+            case '--pipeline-testing':
+                pipelineTesting = true;
+                break;
+            case '--router':
+                router = true;
+                break;
+            default:
+                console.error(`Unknown option: ${arg}`);
+                console.error('Run "shannon help" for usage');
+                process.exit(1);
+        }
+    }
+    if (!url || !repo) {
+        console.error('ERROR: --url and --repo are required');
+        console.error('Usage: shannon start -u <url> -r <path>');
+        process.exit(1);
+    }
+    return { url, repo, pipelineTesting, router, ...(config && { config }), ...(workspace && { workspace }) };
+}
+// === Main Dispatch ===
+const args = process.argv.slice(2);
+const command = args[0];
+switch (command) {
+    case 'start': {
+        const parsed = parseStartArgs(args.slice(1));
+        start({ ...parsed, version: getVersion() });
+        break;
+    }
+    case 'stop':
+        stop(args.includes('--clean'));
+        break;
+    case 'logs': {
+        const workspaceId = args[1];
+        if (!workspaceId) {
+            console.error('ERROR: Workspace ID is required');
+            console.error('Usage: shannon logs <workspace>');
+            process.exit(1);
+        }
+        logs(workspaceId);
+        break;
+    }
+    case 'workspaces':
+        workspaces();
+        break;
+    case 'status':
+        status();
+        break;
+    case 'update':
+        update();
+        break;
+    case 'help':
+    case '--help':
+    case '-h':
+    case undefined:
+        showHelp();
+        break;
+    default:
+        console.error(`Unknown command: ${command}`);
+        showHelp();
+        process.exit(1);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAyB,CAAC;QAClF,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4Bb,CAAC,CAAC;AACH,CAAC;AAWD,SAAS,cAAc,CAAC,IAAc;IACpC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,MAA0B,CAAC;IAC/B,IAAI,SAA6B,CAAC;IAClC,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEzB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC;YACV,KAAK,OAAO;gBACV,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAC,GAAG,GAAG,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;gBACvD,MAAM;YACR,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAC,IAAI,GAAG,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;gBACxD,MAAM;YACR,KAAK,IAAI,CAAC;YACV,KAAK,UAAU;gBACb,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAC,MAAM,GAAG,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;gBAC1D,MAAM;YACR,KAAK,IAAI,CAAC;YACV,KAAK,aAAa;gBAChB,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAC,SAAS,GAAG,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;gBAC7D,MAAM;YACR,KAAK,oBAAoB;gBACvB,eAAe,GAAG,IAAI,CAAC;gBACvB,MAAM;YACR,KAAK,UAAU;gBACb,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM;YACR;gBACE,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;gBACxC,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACtD,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAC5G,CAAC;AAED,wBAAwB;AAExB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAExB,QAAQ,OAAO,EAAE,CAAC;IAChB,KAAK,OAAO,CAAC,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM;IACR,CAAC;IACD,KAAK,MAAM;QACT,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/B,MAAM;IACR,KAAK,MAAM,CAAC,CAAC,CAAC;QACZ,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACjD,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,CAAC;QAClB,MAAM;IACR,CAAC;IACD,KAAK,YAAY;QACf,UAAU,EAAE,CAAC;QACb,MAAM;IACR,KAAK,QAAQ;QACX,MAAM,EAAE,CAAC;QACT,MAAM;IACR,KAAK,QAAQ;QACX,MAAM,EAAE,CAAC;QACT,MAAM;IACR,KAAK,MAAM,CAAC;IACZ,KAAK,QAAQ,CAAC;IACd,KAAK,IAAI,CAAC;IACV,KAAK,SAAS;QACZ,QAAQ,EAAE,CAAC;QACX,MAAM;IACR;QACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAC7C,QAAQ,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/paths.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Path resolution for --repo and --config arguments.
+ *
+ * Resolves user-provided paths to absolute host paths and generates
+ * corresponding container mount paths.
+ */
+export interface MountPair {
+    hostPath: string;
+    containerPath: string;
+}
+/**
+ * Resolve --repo to absolute path and container mount.
+ * Unlike the bash CLI, there is no ./repos/ convention — all paths
+ * are resolved against CWD.
+ */
+export declare function resolveRepo(repoArg: string): MountPair;
+/**
+ * Resolve --config to absolute path and container mount.
+ */
+export declare function resolveConfig(configArg: string): MountPair;
+/**
+ * Ensure the deliverables directory exists and is writable by the container user.
+ */
+export declare function ensureDeliverables(repoHostPath: string): void;
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAkBtD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAkB1D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAI7D"}

package/dist/paths.js

@@ -0,0 +1,57 @@
+/**
+ * Path resolution for --repo and --config arguments.
+ *
+ * Resolves user-provided paths to absolute host paths and generates
+ * corresponding container mount paths.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+/**
+ * Resolve --repo to absolute path and container mount.
+ * Unlike the bash CLI, there is no ./repos/ convention — all paths
+ * are resolved against CWD.
+ */
+export function resolveRepo(repoArg) {
+    const hostPath = path.resolve(repoArg);
+    if (!fs.existsSync(hostPath)) {
+        console.error(`ERROR: Repository not found: ${hostPath}`);
+        process.exit(1);
+    }
+    if (!fs.statSync(hostPath).isDirectory()) {
+        console.error(`ERROR: Not a directory: ${hostPath}`);
+        process.exit(1);
+    }
+    const basename = path.basename(hostPath);
+    return {
+        hostPath,
+        containerPath: `/repos/${basename}`,
+    };
+}
+/**
+ * Resolve --config to absolute path and container mount.
+ */
+export function resolveConfig(configArg) {
+    const hostPath = path.resolve(configArg);
+    if (!fs.existsSync(hostPath)) {
+        console.error(`ERROR: Config file not found: ${hostPath}`);
+        process.exit(1);
+    }
+    if (!fs.statSync(hostPath).isFile()) {
+        console.error(`ERROR: Not a file: ${hostPath}`);
+        process.exit(1);
+    }
+    const basename = path.basename(hostPath);
+    return {
+        hostPath,
+        containerPath: `/app/configs/${basename}`,
+    };
+}
+/**
+ * Ensure the deliverables directory exists and is writable by the container user.
+ */
+export function ensureDeliverables(repoHostPath) {
+    const deliverables = path.join(repoHostPath, 'deliverables');
+    fs.mkdirSync(deliverables, { recursive: true });
+    fs.chmodSync(deliverables, 0o777);
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAO7B;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACzC,OAAO,CAAC,KAAK,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO;QACL,QAAQ;QACR,aAAa,EAAE,UAAU,QAAQ,EAAE;KACpC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,OAAO,CAAC,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO;QACL,QAAQ;QACR,aAAa,EAAE,gBAAgB,QAAQ,EAAE;KAC1C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB;IACrD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC7D,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC"}

package/dist/splash.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Splash screen display — pure terminal output, no npm dependencies.
+ */
+export declare function displaySplash(version: string): void;
+//# sourceMappingURL=splash.d.ts.map

package/dist/splash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"splash.d.ts","sourceRoot":"","sources":["../src/splash.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CA4CnD"}

package/dist/splash.js

@@ -0,0 +1,38 @@
+/**
+ * Splash screen display — pure terminal output, no npm dependencies.
+ */
+export function displaySplash(version) {
+    const GOLD = '\x1b[38;2;244;197;66m';
+    const CYAN = '\x1b[36;1m';
+    const WHITE = '\x1b[1;37m';
+    const GRAY = '\x1b[0;37m';
+    const YELLOW = '\x1b[1;33m';
+    const RESET = '\x1b[0m';
+    const B = `${CYAN}\u2551${RESET}`;
+    const S67 = ' '.repeat(67);
+    const HR = '\u2550'.repeat(67);
+    const lines = [
+        '',
+        `  ${CYAN}\u2554${HR}\u2557${RESET}`,
+        `  ${B}${S67}${B}`,
+        `  ${B}  ${GOLD}\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2557  \u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2557   \u2588\u2588\u2557\u2588\u2588\u2588\u2557   \u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2557   \u2588\u2588\u2557${RESET}  ${B}`,
+        `  ${B}  ${GOLD}\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551${RESET}  ${B}`,
+        `  ${B}  ${GOLD}\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2554\u2588\u2588\u2557 \u2588\u2588\u2551\u2588\u2588\u2554\u2588\u2588\u2557 \u2588\u2588\u2551\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2588\u2588\u2557 \u2588\u2588\u2551${RESET}  ${B}`,
+        `  ${B}  ${GOLD}\u255A\u2550\u2550\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2551\u255A\u2588\u2588\u2557\u2588\u2588\u2551\u2588\u2588\u2551\u255A\u2588\u2588\u2557\u2588\u2588\u2551\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2551\u255A\u2588\u2588\u2557\u2588\u2588\u2551${RESET}  ${B}`,
+        `  ${B}  ${GOLD}\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2551 \u255A\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2551 \u255A\u2588\u2588\u2588\u2588\u2551\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551 \u255A\u2588\u2588\u2588\u2588\u2551${RESET}  ${B}`,
+        `  ${B}  ${GOLD}\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D  \u255A\u2550\u255D\u255A\u2550\u255D  \u255A\u2550\u255D\u255A\u2550\u255D  \u255A\u2550\u2550\u2550\u255D\u255A\u2550\u255D  \u255A\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u255D  \u255A\u2550\u2550\u2550\u255D${RESET}  ${B}`,
+        `  ${B}${S67}${B}`,
+        `  ${B}              ${CYAN}\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557${RESET}               ${B}`,
+        `  ${B}              ${CYAN}\u2551${RESET}  ${WHITE}AI Penetration Testing Framework${RESET}  ${CYAN}\u2551${RESET}               ${B}`,
+        `  ${B}              ${CYAN}\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D${RESET}               ${B}`,
+        `  ${B}${S67}${B}`,
+    ];
+    // Center the version string
+    const verStr = `v${version}`;
+    const verPadLeft = Math.floor((67 - verStr.length) / 2);
+    const verPadRight = 67 - verStr.length - verPadLeft;
+    lines.push(`  ${B}${' '.repeat(verPadLeft)}${GRAY}${verStr}${RESET}${' '.repeat(verPadRight)}${B}`);
+    lines.push(`  ${B}${S67}${B}`, `  ${B}                    ${YELLOW}\uD83D\uDD10 DEFENSIVE SECURITY ONLY \uD83D\uDD10${RESET}                  ${B}`, `  ${B}${S67}${B}`, `  ${CYAN}\u255A${HR}\u255D${RESET}`, '');
+    console.log(lines.join('\n'));
+}
+//# sourceMappingURL=splash.js.map

package/dist/splash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"splash.js","sourceRoot":"","sources":["../src/splash.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,IAAI,GAAG,uBAAuB,CAAC;IACrC,MAAM,IAAI,GAAG,YAAY,CAAC;IAC1B,MAAM,KAAK,GAAG,YAAY,CAAC;IAC3B,MAAM,IAAI,GAAG,YAAY,CAAC;IAC1B,MAAM,MAAM,GAAG,YAAY,CAAC;IAC5B,MAAM,KAAK,GAAG,SAAS,CAAC;IAExB,MAAM,CAAC,GAAG,GAAG,IAAI,SAAS,KAAK,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE/B,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,KAAK,IAAI,SAAS,EAAE,SAAS,KAAK,EAAE;QACpC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE;QAClB,KAAK,CAAC,KAAK,IAAI,kTAAkT,KAAK,KAAK,CAAC,EAAE;QAC9U,KAAK,CAAC,KAAK,IAAI,qVAAqV,KAAK,KAAK,CAAC,EAAE;QACjX,KAAK,CAAC,KAAK,IAAI,+VAA+V,KAAK,KAAK,CAAC,EAAE;QAC3X,KAAK,CAAC,KAAK,IAAI,8WAA8W,KAAK,KAAK,CAAC,EAAE;QAC1Y,KAAK,CAAC,KAAK,IAAI,0VAA0V,KAAK,KAAK,CAAC,EAAE;QACtX,KAAK,CAAC,KAAK,IAAI,iUAAiU,KAAK,KAAK,CAAC,EAAE;QAC7V,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE;QAClB,KAAK,CAAC,iBAAiB,IAAI,uOAAuO,KAAK,kBAAkB,CAAC,EAAE;QAC5R,KAAK,CAAC,iBAAiB,IAAI,SAAS,KAAK,KAAK,KAAK,mCAAmC,KAAK,KAAK,IAAI,SAAS,KAAK,kBAAkB,CAAC,EAAE;QACvI,KAAK,CAAC,iBAAiB,IAAI,uOAAuO,KAAK,kBAAkB,CAAC,EAAE;QAC5R,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE;KACnB,CAAC;IAEF,4BAA4B;IAC5B,MAAM,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEpG,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,EAClB,KAAK,CAAC,uBAAuB,MAAM,oDAAoD,KAAK,qBAAqB,CAAC,EAAE,EACpH,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,EAClB,KAAK,IAAI,SAAS,EAAE,SAAS,KAAK,EAAE,EACpC,EAAE,CACH,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC"}

package/infra/compose.yml

@@ -0,0 +1,50 @@
+networks:
+  default:
+    name: shannon-net
+
+services:
+  temporal:
+    image: temporalio/temporal:latest
+    container_name: shannon-temporal
+    command: ["server", "start-dev", "--db-filename", "/home/temporal/temporal.db", "--ip", "0.0.0.0"]
+    ports:
+      - "7233:7233"
+      - "8233:8233"
+    volumes:
+      - temporal-data:/home/temporal
+    healthcheck:
+      test: ["CMD", "temporal", "operator", "cluster", "health", "--address", "localhost:7233"]
+      interval: 10s
+      timeout: 5s
+      retries: 10
+      start_period: 30s
+
+  router:
+    image: node:20-slim
+    container_name: shannon-router
+    profiles: ["router"]
+    command: >
+      sh -c "apt-get update && apt-get install -y gettext-base &&
+             npm install -g @musistudio/claude-code-router &&
+             mkdir -p /root/.claude-code-router &&
+             envsubst < /config/router-config.json > /root/.claude-code-router/config.json &&
+             ccr start"
+    ports:
+      - "3456:3456"
+    volumes:
+      - ./router-config.json:/config/router-config.json:ro
+    environment:
+      - HOST=0.0.0.0
+      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
+      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
+      - OPENROUTER_API_KEY=${OPENROUTER_API_KEY:-}
+      - ROUTER_DEFAULT=${ROUTER_DEFAULT:-openai,gpt-4o}
+    healthcheck:
+      test: ["CMD", "node", "-e", "require('http').get('http://localhost:3456/health', r => process.exit(r.statusCode === 200 ? 0 : 1)).on('error', () => process.exit(1))"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+      start_period: 30s
+
+volumes:
+  temporal-data:

package/infra/router-config.json

@@ -0,0 +1,33 @@
+{
+  "HOST": "0.0.0.0",
+  "APIKEY": "shannon-router-key",
+  "LOG": true,
+  "LOG_LEVEL": "info",
+  "NON_INTERACTIVE_MODE": true,
+  "API_TIMEOUT_MS": 600000,
+  "Providers": [
+    {
+      "name": "openai",
+      "api_base_url": "https://api.openai.com/v1/chat/completions",
+      "api_key": "$OPENAI_API_KEY",
+      "models": ["gpt-5.2", "gpt-5-mini"],
+      "transformer": {
+        "use": [["maxcompletiontokens", { "max_completion_tokens": 16384 }]]
+      }
+    },
+    {
+      "name": "openrouter",
+      "api_base_url": "https://openrouter.ai/api/v1/chat/completions",
+      "api_key": "$OPENROUTER_API_KEY",
+      "models": [
+        "google/gemini-3-flash-preview"
+      ],
+      "transformer": {
+        "use": ["openrouter"]
+      }
+    }
+  ],
+  "Router": {
+    "default": "$ROUTER_DEFAULT"
+  }
+}