@nepopsx/cli 0.0.2 → 0.0.4

package/dist/licensing/fingerprint.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.test.js","sourceRoot":"","sources":["../../src/licensing/fingerprint.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE5G,MAAM,WAAW,GAAG,cAAc,CAAC;AAEnC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;CAc7B,CAAC;AAEF,IAAI,CAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAEhD,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;IAExD,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAErC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,8DAA8D,CAAC,CAAC;AACzF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2EAA2E,EAAE,GAAG,EAAE;IACrF,MAAM,cAAc,GAAG;;;;;;;CAOxB,CAAC;IAEA,MAAM,QAAQ,GAAG,kBAAkB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC"}

package/dist/licensing/installer.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Agent bundle installer — downloads, decrypts, verifies, and writes
+ * agent template files from the NEPOPSX API.
+ *
+ * Flow:
+ *   1. downloadBundle  — POST /v1/templates/:agent/:version  (auth: Bearer <key>)
+ *   2. decryptBundle   — AES-256-GCM, key = SHA-256(licenseKey + ":nepopsx-template-key")
+ *   3. verifyBundleSha — SHA-256 of raw JSON must match server-provided sha256
+ *   4. writeAgentFiles — atomic write via temp + rename into .github/<relative-path>
+ */
+import type { License } from "@nepopsx/core";
+export interface EncryptedBundle {
+    payload: string;
+    iv: string;
+    tag: string;
+    agent: string;
+    version: string;
+    sha256: string;
+}
+export interface InstalledFile {
+    path: string;
+}
+/**
+ * Download an encrypted template bundle from the NEPOPSX API.
+ */
+export declare function downloadBundle(cwd: string, license: License, agent: string, version: string): Promise<EncryptedBundle>;
+/**
+ * Decrypt an AES-256-GCM bundle using the license key.
+ * Returns the raw JSON string (not yet parsed).
+ */
+export declare function decryptBundle(bundle: EncryptedBundle, licenseKey: string): string;
+/**
+ * Verify that the decrypted JSON matches the server's sha256.
+ * Throws if the digest does not match.
+ */
+export declare function verifyBundleSha(decryptedJson: string, expectedSha: string): void;
+/**
+ * Atomically write agent template files into .github/<relative-path>.
+ * Uses a tmp-file + rename pattern to avoid partial writes.
+ * Returns the list of written file paths.
+ */
+export declare function writeAgentFiles(cwd: string, templates: Record<string, string>): InstalledFile[];
+//# sourceMappingURL=installer.d.ts.map

package/dist/licensing/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/licensing/installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAM7C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd;AAID;;GAEG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CAiC1B;AAID;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAcjF;AAID;;;GAGG;AACH,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAOhF;AAID;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,aAAa,EAAE,CAmBjB"}

package/dist/licensing/installer.js

@@ -0,0 +1,98 @@
+/**
+ * Agent bundle installer — downloads, decrypts, verifies, and writes
+ * agent template files from the NEPOPSX API.
+ *
+ * Flow:
+ *   1. downloadBundle  — POST /v1/templates/:agent/:version  (auth: Bearer <key>)
+ *   2. decryptBundle   — AES-256-GCM, key = SHA-256(licenseKey + ":nepopsx-template-key")
+ *   3. verifyBundleSha — SHA-256 of raw JSON must match server-provided sha256
+ *   4. writeAgentFiles — atomic write via temp + rename into .github/<relative-path>
+ */
+import { createDecipheriv, createHash } from "node:crypto";
+import { existsSync, mkdirSync, renameSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { resolveApiBase } from "../config/api-config.js";
+const REQUEST_TIMEOUT_MS = 30_000;
+// ─── Download ───────────────────────────────────────────────
+/**
+ * Download an encrypted template bundle from the NEPOPSX API.
+ */
+export async function downloadBundle(cwd, license, agent, version) {
+    const apiBase = resolveApiBase(cwd);
+    const url = `${apiBase}/templates/${encodeURIComponent(agent)}/${encodeURIComponent(version)}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+    let response;
+    try {
+        response = await fetch(url, {
+            method: "POST",
+            headers: {
+                Authorization: license.key,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                machine_id: license.machine_id,
+                workspace: license.workspace ?? "",
+            }),
+            signal: controller.signal,
+        });
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    if (!response.ok) {
+        const body = await response.text().catch(() => "");
+        throw new Error(`Bundle download failed (${response.status}): ${body || response.statusText}`);
+    }
+    return response.json();
+}
+// ─── Decrypt ────────────────────────────────────────────────
+/**
+ * Decrypt an AES-256-GCM bundle using the license key.
+ * Returns the raw JSON string (not yet parsed).
+ */
+export function decryptBundle(bundle, licenseKey) {
+    const key = createHash("sha256")
+        .update(`${licenseKey}:nepopsx-template-key`)
+        .digest();
+    const iv = Buffer.from(bundle.iv, "base64");
+    const tag = Buffer.from(bundle.tag, "base64");
+    const encrypted = Buffer.from(bundle.payload, "base64");
+    const decipher = createDecipheriv("aes-256-gcm", key, iv);
+    decipher.setAuthTag(tag);
+    const decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]);
+    return decrypted.toString("utf-8");
+}
+// ─── Verify ─────────────────────────────────────────────────
+/**
+ * Verify that the decrypted JSON matches the server's sha256.
+ * Throws if the digest does not match.
+ */
+export function verifyBundleSha(decryptedJson, expectedSha) {
+    const actual = createHash("sha256").update(decryptedJson, "utf-8").digest("hex");
+    if (actual !== expectedSha) {
+        throw new Error(`Bundle integrity check failed — sha256 mismatch\n  expected: ${expectedSha}\n  actual:   ${actual}`);
+    }
+}
+// ─── Write ──────────────────────────────────────────────────
+/**
+ * Atomically write agent template files into .github/<relative-path>.
+ * Uses a tmp-file + rename pattern to avoid partial writes.
+ * Returns the list of written file paths.
+ */
+export function writeAgentFiles(cwd, templates) {
+    const written = [];
+    for (const [relativePath, content] of Object.entries(templates)) {
+        const dest = join(cwd, ".github", relativePath);
+        const destDir = dirname(dest);
+        const tmp = `${dest}.tmp`;
+        if (!existsSync(destDir)) {
+            mkdirSync(destDir, { recursive: true });
+        }
+        writeFileSync(tmp, content, "utf-8");
+        renameSync(tmp, dest);
+        written.push({ path: join(".github", relativePath) });
+    }
+    return written;
+}
+//# sourceMappingURL=installer.js.map

package/dist/licensing/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/licensing/installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGzD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAiBlC,+DAA+D;AAE/D;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,OAAgB,EAChB,KAAa,EACb,OAAe;IAEf,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,OAAO,cAAc,kBAAkB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IAE/F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAEvE,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC1B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,OAAO,CAAC,GAAG;gBAC1B,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;aACnC,CAAC;YACF,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,2BAA2B,QAAQ,CAAC,MAAM,MAAM,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAA8B,CAAC;AACrD,CAAC;AAED,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAuB,EAAE,UAAkB;IACvE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC7B,MAAM,CAAC,GAAG,UAAU,uBAAuB,CAAC;SAC5C,MAAM,EAAE,CAAC;IAEZ,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAExD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChF,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,aAAqB,EAAE,WAAmB;IACxE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,gEAAgE,WAAW,iBAAiB,MAAM,EAAE,CACrG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+DAA+D;AAE/D;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,SAAiC;IAEjC,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;QAE1B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACrC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEtB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/scan/__tests__/context-gatherer.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=context-gatherer.test.d.ts.map

package/dist/scan/__tests__/context-gatherer.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-gatherer.test.d.ts","sourceRoot":"","sources":["../../../src/scan/__tests__/context-gatherer.test.ts"],"names":[],"mappings":""}

package/dist/scan/__tests__/context-gatherer.test.js

@@ -0,0 +1,111 @@
+// @nepopsx/cli — Context gatherer tests
+import { strict as assert } from 'node:assert';
+import { describe, it, before, after } from 'node:test';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { gatherContext } from '../context/gatherer.js';
+import { loadIgnoreFilter } from '../context/gitignore.js';
+function createFixture(dir, files) {
+    for (const [relPath, content] of Object.entries(files)) {
+        const absPath = join(dir, relPath);
+        mkdirSync(join(absPath, '..'), { recursive: true });
+        writeFileSync(absPath, content, 'utf-8');
+    }
+}
+describe('gatherContext', () => {
+    let tmpDir;
+    before(() => {
+        tmpDir = mkdtempSync(join(tmpdir(), 'nepopsx-test-'));
+    });
+    after(() => {
+        rmSync(tmpDir, { recursive: true, force: true });
+    });
+    it('stat-first budget enforcement: files exceeding budget are skipped', async () => {
+        const svcDir = join(tmpDir, 'budget-test');
+        mkdirSync(svcDir, { recursive: true });
+        // Create a package.json (small) and a large src file that nestjs patterns will pick up
+        const largeContent = 'x'.repeat(10_000);
+        createFixture(svcDir, {
+            'package.json': JSON.stringify({ name: 'test', version: '1.0.0' }),
+            'tsconfig.json': '{}',
+            'src/app.module.ts': 'import { Module } from "@nestjs/common"; @Module({}) export class AppModule {}',
+        });
+        // A very large service file that nestjs tier2 patterns will pick up
+        mkdirSync(join(svcDir, 'src'), { recursive: true });
+        writeFileSync(join(svcDir, 'src', 'app.service.ts'), largeContent, 'utf-8');
+        // Budget of 200 tokens — src/app.service.ts (~2857 tokens) must be skipped
+        const result = await gatherContext(svcDir, 'nestjs', 200);
+        assert.ok(result.files.size > 0, 'at least one file included');
+        assert.ok(!result.files.has('src/app.service.ts'), 'large file excluded from budget');
+        assert.ok(result.skippedFiles.includes('src/app.service.ts'), 'large file listed in skippedFiles');
+        assert.ok(result.totalTokens <= 200, `total tokens within budget: ${result.totalTokens}`);
+    });
+    it('gitignore patterns are respected', async () => {
+        const svcDir = join(tmpDir, 'gitignore-test');
+        mkdirSync(svcDir, { recursive: true });
+        createFixture(svcDir, {
+            '.gitignore': 'node_modules/\ndist/\n*.log\n',
+            'README.md': '# Test service',
+            'package.json': '{"name":"test"}',
+            'dist/index.js': 'compiled code',
+            'node_modules/lodash/index.js': 'library code',
+            'debug.log': 'log output',
+        });
+        const ignoreFilter = loadIgnoreFilter(svcDir);
+        const result = await gatherContext(svcDir, undefined, 50_000, ignoreFilter);
+        assert.ok(!result.files.has('dist/index.js'), 'dist/ is ignored');
+        assert.ok(!result.files.has('node_modules/lodash/index.js'), 'node_modules/ is ignored');
+        assert.ok(!result.files.has('debug.log'), '*.log is ignored');
+        assert.ok(result.files.has('README.md'), 'README.md is included');
+    });
+    it('empty service directory returns empty context', async () => {
+        const svcDir = join(tmpDir, 'empty-test');
+        mkdirSync(svcDir, { recursive: true });
+        const result = await gatherContext(svcDir, undefined, 50_000);
+        assert.equal(result.files.size, 0);
+        assert.equal(result.totalTokens, 0);
+        assert.equal(result.skippedFiles.length, 0);
+    });
+    it('framework patterns include framework-specific files', async () => {
+        const svcDir = join(tmpDir, 'nestjs-test');
+        mkdirSync(svcDir, { recursive: true });
+        createFixture(svcDir, {
+            'package.json': '{"name":"api","dependencies":{"@nestjs/core":"^10"}}',
+            'tsconfig.json': '{"compilerOptions":{}}',
+            'src/app.module.ts': 'import { Module } from "@nestjs/common";',
+            'src/main.ts': 'import { NestFactory } from "@nestjs/core";',
+        });
+        const result = await gatherContext(svcDir, 'nestjs', 50_000);
+        assert.ok(result.files.has('package.json'), 'package.json included');
+        assert.ok(result.files.has('src/app.module.ts'), 'app.module.ts included');
+        assert.ok(result.files.has('src/main.ts'), 'main.ts included');
+    });
+});
+describe('loadIgnoreFilter', () => {
+    let tmpDir;
+    before(() => {
+        tmpDir = mkdtempSync(join(tmpdir(), 'nepopsx-gitignore-test-'));
+    });
+    after(() => {
+        rmSync(tmpDir, { recursive: true, force: true });
+    });
+    it('default exclusions apply when no .gitignore exists', () => {
+        const svcDir = join(tmpDir, 'no-gitignore');
+        mkdirSync(svcDir, { recursive: true });
+        const filter = loadIgnoreFilter(svcDir);
+        assert.ok(filter('node_modules/index.js'), 'node_modules is excluded by default');
+        assert.ok(filter('dist/bundle.js'), 'dist is excluded by default');
+        assert.ok(!filter('src/app.ts'), 'src/app.ts is not excluded');
+    });
+    it('custom .gitignore patterns are applied', () => {
+        const svcDir = join(tmpDir, 'custom-gitignore');
+        mkdirSync(svcDir, { recursive: true });
+        writeFileSync(join(svcDir, '.gitignore'), 'secrets/\n*.env\n', 'utf-8');
+        const filter = loadIgnoreFilter(svcDir);
+        assert.ok(filter('secrets/api-key.txt'), 'secrets/ is excluded');
+        assert.ok(filter('prod.env'), '*.env is excluded');
+        assert.ok(!filter('src/index.ts'), 'src/index.ts is not excluded');
+    });
+});
+//# sourceMappingURL=context-gatherer.test.js.map

package/dist/scan/__tests__/context-gatherer.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-gatherer.test.js","sourceRoot":"","sources":["../../../src/scan/__tests__/context-gatherer.test.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,OAAO,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,SAAS,aAAa,CAAC,GAAW,EAAE,KAA6B;IAC/D,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,MAAc,CAAC;IAEnB,MAAM,CAAC,GAAG,EAAE;QACV,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,EAAE;QACT,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC3C,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvC,uFAAuF;QACvF,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAExC,aAAa,CAAC,MAAM,EAAE;YACpB,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YAClE,eAAe,EAAE,IAAI;YACrB,mBAAmB,EAAE,gFAAgF;SACtG,CAAC,CAAC;QAEH,oEAAoE;QACpE,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,gBAAgB,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QAE5E,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAE1D,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,4BAA4B,CAAC,CAAC;QAC/D,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,iCAAiC,CAAC,CAAC;QACtF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,mCAAmC,CAAC,CAAC;QACnG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,GAAG,EAAE,+BAA+B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC9C,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvC,aAAa,CAAC,MAAM,EAAE;YACpB,YAAY,EAAE,+BAA+B;YAC7C,WAAW,EAAE,gBAAgB;YAC7B,cAAc,EAAE,iBAAiB;YACjC,eAAe,EAAE,eAAe;YAChC,8BAA8B,EAAE,cAAc;YAC9C,WAAW,EAAE,YAAY;SAC1B,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QAE5E,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAClE,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,0BAA0B,CAAC,CAAC;QACzF,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC9D,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC1C,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAE9D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC3C,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvC,aAAa,CAAC,MAAM,EAAE;YACpB,cAAc,EAAE,sDAAsD;YACtE,eAAe,EAAE,wBAAwB;YACzC,mBAAmB,EAAE,0CAA0C;YAC/D,aAAa,EAAE,6CAA6C;SAC7D,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE7D,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAC3E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,MAAc,CAAC;IAEnB,MAAM,CAAC,GAAG,EAAE;QACV,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,EAAE;QACT,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC5C,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAExC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,EAAE,qCAAqC,CAAC,CAAC;QAClF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,6BAA6B,CAAC,CAAC;QACnE,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAChD,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAExC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,8BAA8B,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/scan/__tests__/merge.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=merge.test.d.ts.map

package/dist/scan/__tests__/merge.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge.test.d.ts","sourceRoot":"","sources":["../../../src/scan/__tests__/merge.test.ts"],"names":[],"mappings":""}

package/dist/scan/__tests__/merge.test.js

@@ -0,0 +1,163 @@
+// @nepopsx/cli — Merge logic tests (re-exported from core)
+// These tests exercise the mergeWorkspaceConfig function via the scan pipeline.
+import { strict as assert } from 'node:assert';
+import { describe, it } from 'node:test';
+import { mergeWorkspaceConfig } from '@nepopsx/core';
+const BASE_CONFIG = {
+    version: 1,
+    workspace: { name: 'test-workspace' },
+    services: [
+        {
+            name: 'api',
+            path: './api',
+            language: 'typescript',
+            framework: 'nestjs',
+        },
+        {
+            name: 'web',
+            path: './web',
+            language: 'typescript',
+            framework: 'nextjs',
+        },
+    ],
+};
+describe('mergeWorkspaceConfig', () => {
+    it('empty field gets filled from scan result', () => {
+        const scan = {
+            services: [
+                {
+                    service_name: 'api',
+                    description: 'REST API service',
+                    confidence: { description: 'high' },
+                },
+            ],
+        };
+        const { updated, changedFields } = mergeWorkspaceConfig(BASE_CONFIG, scan, null);
+        assert.equal(updated.services[0].description, 'REST API service');
+        assert.ok(changedFields.includes('services.api.description'));
+    });
+    it('user-provenance field gets suggestion, not overwrite', () => {
+        const scan = {
+            services: [
+                {
+                    service_name: 'api',
+                    description: 'LLM-suggested description',
+                    confidence: { description: 'high' },
+                },
+            ],
+        };
+        const state = {
+            version: 1,
+            lastRunAt: new Date().toISOString(),
+            provider: 'openai',
+            model: 'gpt-4o',
+            fields: {
+                'services.api.description': 'user',
+            },
+        };
+        const config = {
+            ...BASE_CONFIG,
+            services: [
+                { ...BASE_CONFIG.services[0], description: 'My custom description' },
+                BASE_CONFIG.services[1],
+            ],
+        };
+        const { updated, suggestions, changedFields } = mergeWorkspaceConfig(config, scan, state);
+        assert.equal(updated.services[0].description, 'My custom description');
+        assert.ok(!changedFields.includes('services.api.description'));
+        assert.ok(suggestions.some((s) => s.path === 'services.api.description'));
+        assert.equal(suggestions.find((s) => s.path === 'services.api.description')?.suggestedValue, 'LLM-suggested description');
+    });
+    it('scan-provenance field gets updated with new value', () => {
+        const scan = {
+            services: [
+                {
+                    service_name: 'api',
+                    description: 'Updated description from scan',
+                    confidence: { description: 'high' },
+                },
+            ],
+        };
+        const state = {
+            version: 1,
+            lastRunAt: new Date().toISOString(),
+            provider: 'openai',
+            model: 'gpt-4o',
+            fields: {
+                'services.api.description': 'scan',
+            },
+        };
+        const config = {
+            ...BASE_CONFIG,
+            services: [
+                { ...BASE_CONFIG.services[0], description: 'Previous scan description' },
+                BASE_CONFIG.services[1],
+            ],
+        };
+        const { updated, changedFields } = mergeWorkspaceConfig(config, scan, state);
+        assert.equal(updated.services[0].description, 'Updated description from scan');
+        assert.ok(changedFields.includes('services.api.description'));
+    });
+    it('commands are only filled when absent', () => {
+        const scan = {
+            services: [
+                {
+                    service_name: 'api',
+                    commands: { dev: 'pnpm dev', build: 'pnpm build', test: 'pnpm test' },
+                    confidence: {},
+                },
+            ],
+        };
+        const config = {
+            ...BASE_CONFIG,
+            services: [
+                { ...BASE_CONFIG.services[0], commands: { dev: 'npm run dev' } },
+                BASE_CONFIG.services[1],
+            ],
+        };
+        const { updated, suggestions } = mergeWorkspaceConfig(config, scan, null);
+        // dev was set by user — should not overwrite
+        assert.equal(updated.services[0].commands?.dev, 'npm run dev');
+        // build was absent — should fill
+        assert.equal(updated.services[0].commands?.build, 'pnpm build');
+        // User-set dev should appear as suggestion
+        assert.ok(suggestions.some((s) => s.path.endsWith('commands.dev')));
+    });
+    it('database type-fallback applies when exactly one DB of that type exists', () => {
+        const config = {
+            ...BASE_CONFIG,
+            databases: [{ name: 'main-db', type: 'postgresql' }],
+        };
+        const scan = {
+            services: [{ service_name: 'api', confidence: {} }],
+            cross_service: {
+                databases: [{ name: 'renamed-pg', type: 'postgresql', description: 'Main database' }],
+            },
+        };
+        // When exactly one PostgreSQL db exists, type-fallback matches it
+        const { updated } = mergeWorkspaceConfig(config, scan, null);
+        // The existing DB should get the description merged
+        const mainDb = updated.databases?.find((d) => d.name === 'main-db');
+        assert.ok(mainDb, 'original DB preserved');
+        assert.equal(mainDb?.description, 'Main database');
+    });
+    it('database type-fallback rejected when two DBs share the same type', () => {
+        const config = {
+            ...BASE_CONFIG,
+            databases: [
+                { name: 'db-a', type: 'postgresql' },
+                { name: 'db-b', type: 'postgresql' },
+            ],
+        };
+        const scan = {
+            services: [{ service_name: 'api', confidence: {} }],
+            cross_service: {
+                databases: [{ name: 'some-pg', type: 'postgresql', description: 'ambiguous' }],
+            },
+        };
+        // Two PostgreSQL dbs — no type fallback, new DB should be added
+        const { updated } = mergeWorkspaceConfig(config, scan, null);
+        assert.ok(updated.databases?.length === 3, 'new DB added since no unique type match');
+    });
+});
+//# sourceMappingURL=merge.test.js.map

package/dist/scan/__tests__/merge.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge.test.js","sourceRoot":"","sources":["../../../src/scan/__tests__/merge.test.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,gFAAgF;AAChF,OAAO,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAIrD,MAAM,WAAW,GAAoB;IACnC,OAAO,EAAE,CAAC;IACV,SAAS,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;IACrC,QAAQ,EAAE;QACR;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,QAAQ;SACpB;QACD;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,QAAQ;SACpB;KACF;CACF,CAAC;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,IAAI,GAAiB;YACzB,QAAQ,EAAE;gBACR;oBACE,YAAY,EAAE,KAAK;oBACnB,WAAW,EAAE,kBAAkB;oBAC/B,UAAU,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;iBACpC;aACF;SACF,CAAC;QAEF,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,oBAAoB,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEjF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAClE,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,GAAiB;YACzB,QAAQ,EAAE;gBACR;oBACE,YAAY,EAAE,KAAK;oBACnB,WAAW,EAAE,2BAA2B;oBACxC,UAAU,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;iBACpC;aACF;SACF,CAAC;QAEF,MAAM,KAAK,GAAc;YACvB,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE;gBACN,0BAA0B,EAAE,MAAM;aACnC;SACF,CAAC;QAEF,MAAM,MAAM,GAAoB;YAC9B,GAAG,WAAW;YACd,QAAQ,EAAE;gBACR,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE;gBACpE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;aACxB;SACF,CAAC;QAEF,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE1F,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;QACvE,MAAM,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CACV,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAAC,EAAE,cAAc,EAC9E,2BAA2B,CAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,IAAI,GAAiB;YACzB,QAAQ,EAAE;gBACR;oBACE,YAAY,EAAE,KAAK;oBACnB,WAAW,EAAE,+BAA+B;oBAC5C,UAAU,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;iBACpC;aACF;SACF,CAAC;QAEF,MAAM,KAAK,GAAc;YACvB,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE;gBACN,0BAA0B,EAAE,MAAM;aACnC;SACF,CAAC;QAEF,MAAM,MAAM,GAAoB;YAC9B,GAAG,WAAW;YACd,QAAQ,EAAE;gBACR,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE;gBACxE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;aACxB;SACF,CAAC;QAEF,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE7E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,IAAI,GAAiB;YACzB,QAAQ,EAAE;gBACR;oBACE,YAAY,EAAE,KAAK;oBACnB,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE;oBACrE,UAAU,EAAE,EAAE;iBACf;aACF;SACF,CAAC;QAEF,MAAM,MAAM,GAAoB;YAC9B,GAAG,WAAW;YACd,QAAQ,EAAE;gBACR,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;gBAChE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;aACxB;SACF,CAAC;QAEF,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAE1E,6CAA6C;QAC7C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;QAC/D,iCAAiC;QACjC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QAChE,2CAA2C;QAC3C,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,MAAM,GAAoB;YAC9B,GAAG,WAAW;YACd,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;SACrD,CAAC;QAEF,MAAM,IAAI,GAAiB;YACzB,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YACnD,aAAa,EAAE;gBACb,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;aACtF;SACF,CAAC;QAEF,kEAAkE;QAClE,MAAM,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7D,oDAAoD;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QACpE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GAAoB;YAC9B,GAAG,WAAW;YACd,SAAS,EAAE;gBACT,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;gBACpC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;aACrC;SACF,CAAC;QAEF,MAAM,IAAI,GAAiB;YACzB,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YACnD,aAAa,EAAE;gBACb,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;aAC/E;SACF,CAAC;QAEF,gEAAgE;QAChE,MAAM,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7D,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,KAAK,CAAC,EAAE,yCAAyC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/scan/config.d.ts

@@ -0,0 +1,24 @@
+import type { ProviderName } from './llm/types.js';
+export interface ResolvedScanConfig {
+    provider: ProviderName;
+    model: string;
+    /** API key — resolved from env only, never persisted */
+    apiKey?: string;
+    /** Custom endpoint for ollama or compatible providers */
+    endpoint?: string;
+    /** Per-service token budget */
+    budget: number;
+    /** Total context budget for agent mode */
+    agentBudget: number;
+    /** Concurrent service analysis */
+    parallel: number;
+    customs: boolean;
+    dryRun: boolean;
+    verbose: boolean;
+    yes: boolean;
+    /** Service name filter (undefined = all services) */
+    services?: string[];
+    resume: boolean;
+}
+export declare function resolveScanConfig(flags: Record<string, unknown>, cwd?: string): Promise<ResolvedScanConfig>;
+//# sourceMappingURL=config.d.ts.map

package/dist/scan/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/scan/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,YAAY,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,OAAO,CAAC;IACb,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;CACjB;AAkCD,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,CA0D7B"}

package/dist/scan/config.js

@@ -0,0 +1,77 @@
+// @nepopsx/cli — Provider config resolution for scan command
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+function readConfigFile(cwd) {
+    const configPath = join(cwd, '.nepopsx', 'config.json');
+    if (!existsSync(configPath))
+        return {};
+    try {
+        const raw = JSON.parse(readFileSync(configPath, 'utf-8'));
+        return (raw.scan ?? {});
+    }
+    catch {
+        return {};
+    }
+}
+const PROVIDER_DEFAULTS = {
+    openai: 'gpt-4o',
+    anthropic: 'claude-3-5-sonnet-20241022',
+    ollama: 'llama3.2',
+    compatible: 'gpt-4o',
+};
+function parseIntSafe(value, fallback) {
+    const n = parseInt(String(value ?? fallback), 10);
+    return isNaN(n) ? fallback : n;
+}
+export async function resolveScanConfig(flags, cwd = process.cwd()) {
+    const fileConf = readConfigFile(cwd);
+    // Resolve provider: CLI flags > env > config file > default (ollama)
+    const providerRaw = flags.provider ??
+        process.env.NEPOPSX_LLM_PROVIDER ??
+        fileConf.provider ??
+        'ollama';
+    const provider = providerRaw;
+    // Resolve model: CLI flags > env > config file > provider default
+    const model = flags.model ??
+        process.env.NEPOPSX_LLM_MODEL ??
+        fileConf.model ??
+        PROVIDER_DEFAULTS[provider] ??
+        'gpt-4o';
+    // Resolve API key from env only — never from config file (C3)
+    let apiKey;
+    if (provider === 'openai' || provider === 'compatible') {
+        apiKey =
+            flags.apiKey ??
+                process.env.OPENAI_API_KEY ??
+                process.env.NEPOPSX_LLM_API_KEY;
+    }
+    else if (provider === 'anthropic') {
+        apiKey =
+            flags.apiKey ??
+                process.env.ANTHROPIC_API_KEY ??
+                process.env.NEPOPSX_LLM_API_KEY;
+    }
+    const endpoint = flags.endpoint ?? fileConf.endpoint;
+    const budget = parseIntSafe(flags.budget ?? fileConf.budget, 30_000);
+    const agentBudget = parseIntSafe(flags.agentBudget ?? fileConf.agentBudget, 60_000);
+    const parallel = parseIntSafe(flags.parallel ?? fileConf.parallel, 1);
+    return {
+        provider,
+        model,
+        apiKey,
+        endpoint,
+        budget,
+        agentBudget,
+        parallel,
+        customs: Boolean(flags.customs),
+        dryRun: Boolean(flags.dryRun),
+        verbose: Boolean(flags.verbose),
+        yes: Boolean(flags.yes),
+        // Empty array (Commander default when --service not passed) means "all services"
+        services: Array.isArray(flags.service) && flags.service.length > 0
+            ? flags.service
+            : undefined,
+        resume: Boolean(flags.resume),
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/scan/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/scan/config.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAkCjC,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAmB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,GAA2B;IAChD,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,4BAA4B;IACvC,MAAM,EAAE,UAAU;IAClB,UAAU,EAAE,QAAQ;CACrB,CAAC;AAEF,SAAS,YAAY,CAAC,KAAc,EAAE,QAAgB;IACpD,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA8B,EAC9B,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAErC,qEAAqE;IACrE,MAAM,WAAW,GACd,KAAK,CAAC,QAA+B;QACtC,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,QAAQ,CAAC,QAAQ;QACjB,QAAQ,CAAC;IACX,MAAM,QAAQ,GAAG,WAA2B,CAAC;IAE7C,kEAAkE;IAClE,MAAM,KAAK,GACR,KAAK,CAAC,KAA4B;QACnC,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,QAAQ,CAAC,KAAK;QACd,iBAAiB,CAAC,QAAQ,CAAC;QAC3B,QAAQ,CAAC;IAEX,8DAA8D;IAC9D,IAAI,MAA0B,CAAC;IAC/B,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QACvD,MAAM;YACH,KAAK,CAAC,MAA6B;gBACpC,OAAO,CAAC,GAAG,CAAC,cAAc;gBAC1B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACpC,CAAC;SAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QACpC,MAAM;YACH,KAAK,CAAC,MAA6B;gBACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB;gBAC7B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACpC,CAAC;IAED,MAAM,QAAQ,GAAI,KAAK,CAAC,QAA+B,IAAI,QAAQ,CAAC,QAAQ,CAAC;IAE7E,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAEtE,OAAO;QACL,QAAQ;QACR,KAAK;QACL,MAAM;QACN,QAAQ;QACR,MAAM;QACN,WAAW;QACX,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC/B,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC/B,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QACvB,iFAAiF;QACjF,QAAQ,EACN,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAK,KAAK,CAAC,OAAoB,CAAC,MAAM,GAAG,CAAC;YACpE,CAAC,CAAE,KAAK,CAAC,OAAoB;YAC7B,CAAC,CAAC,SAAS;QACf,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;KAC9B,CAAC;AACJ,CAAC"}

package/dist/scan/context/gatherer.d.ts

@@ -0,0 +1,13 @@
+export interface FileContext {
+    /** relativePath → content */
+    files: Map<string, string>;
+    totalTokens: number;
+    /** Files skipped due to budget overflow (for --verbose logging) */
+    skippedFiles: string[];
+}
+/**
+ * Gather high-signal files from a service directory, respecting a token budget.
+ * Uses stat-first estimation to avoid reading files that would exceed budget.
+ */
+export declare function gatherContext(servicePath: string, framework: string | undefined, budget: number, ignoreFilter?: (path: string) => boolean): Promise<FileContext>;
+//# sourceMappingURL=gatherer.d.ts.map

package/dist/scan/context/gatherer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gatherer.d.ts","sourceRoot":"","sources":["../../../src/scan/context/gatherer.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AA0BD;;;GAGG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GACvC,OAAO,CAAC,WAAW,CAAC,CAuEtB"}