@owasp-aghast/aghast 0.8.0-beta.0

package/dist/check-types.js

@@ -0,0 +1,66 @@
+/**
+ * Check type descriptor system.
+ *
+ * Each check type declares its characteristics (needs AI, needs instructions, etc.)
+ * in one place. Code throughout the codebase queries these descriptors instead
+ * of comparing raw type strings.
+ *
+ * Check types describe *execution mode* (what happens with targets).
+ * Discovery type (how targets are found) is a separate axis — see src/discovery.ts.
+ */
+// --- Check Type Definitions ---
+const REPOSITORY = {
+    type: 'repository',
+    needsAI: true,
+    needsInstructions: true,
+    supportsMaxTargets: false,
+};
+const TARGETED = {
+    type: 'targeted',
+    needsAI: true,
+    needsInstructions: true,
+    supportsMaxTargets: true,
+};
+const STATIC = {
+    type: 'static',
+    needsAI: false,
+    needsInstructions: false,
+    supportsMaxTargets: true,
+};
+/** All registered check types, keyed by their type string. */
+const CHECK_TYPES = new Map([
+    [REPOSITORY.type, REPOSITORY],
+    [TARGETED.type, TARGETED],
+    [STATIC.type, STATIC],
+]);
+/**
+ * Default descriptor used when the type is unknown or undefined.
+ * Conservative defaults: requires AI and instructions (the common case).
+ */
+const DEFAULT_DESCRIPTOR = {
+    type: '',
+    needsAI: true,
+    needsInstructions: true,
+    supportsMaxTargets: false,
+};
+// --- Public API ---
+/**
+ * Get the descriptor for a check type string.
+ * Returns conservative defaults for unknown/undefined types.
+ */
+export function getCheckType(type) {
+    if (!type)
+        return DEFAULT_DESCRIPTOR;
+    return CHECK_TYPES.get(type) ?? DEFAULT_DESCRIPTOR;
+}
+/** All valid check type strings. */
+export function getValidCheckTypes() {
+    return [...CHECK_TYPES.keys()];
+}
+/** Check type string constants for use in routing (scan-runner switch). */
+export const CHECK_TYPE = {
+    REPOSITORY: REPOSITORY.type,
+    TARGETED: TARGETED.type,
+    STATIC: STATIC.type,
+};
+//# sourceMappingURL=check-types.js.map

package/dist/check-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-types.js","sourceRoot":"","sources":["../src/check-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAcH,iCAAiC;AAEjC,MAAM,UAAU,GAAwB;IACtC,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,IAAI;IACb,iBAAiB,EAAE,IAAI;IACvB,kBAAkB,EAAE,KAAK;CAC1B,CAAC;AAEF,MAAM,QAAQ,GAAwB;IACpC,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,IAAI;IACb,iBAAiB,EAAE,IAAI;IACvB,kBAAkB,EAAE,IAAI;CACzB,CAAC;AAEF,MAAM,MAAM,GAAwB;IAClC,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,KAAK;IACd,iBAAiB,EAAE,KAAK;IACxB,kBAAkB,EAAE,IAAI;CACzB,CAAC;AAEF,8DAA8D;AAC9D,MAAM,WAAW,GAA6C,IAAI,GAAG,CAAC;IACpE,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC;IAC7B,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACzB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,kBAAkB,GAAwB;IAC9C,IAAI,EAAE,EAAE;IACR,OAAO,EAAE,IAAI;IACb,iBAAiB,EAAE,IAAI;IACvB,kBAAkB,EAAE,KAAK;CAC1B,CAAC;AAEF,qBAAqB;AAErB;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAwB;IACnD,IAAI,CAAC,IAAI;QAAE,OAAO,kBAAkB,CAAC;IACrC,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC;AACrD,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,kBAAkB;IAChC,OAAO,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,UAAU,EAAE,UAAU,CAAC,IAAI;IAC3B,QAAQ,EAAE,QAAQ,CAAC,IAAI;IACvB,MAAM,EAAE,MAAM,CAAC,IAAI;CACX,CAAC"}

package/dist/claude-code-provider.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Claude Code agent provider implementation.
+ * Uses @anthropic-ai/claude-agent-sdk per spec Section 6.2 / Appendix C.8.
+ */
+import type { AgentProvider, AgentResponse, ProviderConfig, ProviderModelInfo } from './types.js';
+/** Type for the SDK query function — injectable for testing. */
+export type QueryFn = (params: {
+    prompt: string;
+    options: Record<string, unknown>;
+}) => AsyncIterable<Record<string, unknown>>;
+export declare class ClaudeCodeProvider implements AgentProvider {
+    private apiKey;
+    private useLocalClaude;
+    private model;
+    private _queryFn;
+    constructor(options?: {
+        _queryFn?: QueryFn;
+    });
+    checkPrerequisites(): void;
+    initialize(config: ProviderConfig): Promise<void>;
+    getModelName(): string;
+    setModel(model: string): void;
+    listModels(): Promise<readonly ProviderModelInfo[]>;
+    executeCheck(instructions: string, repositoryPath: string, logPrefix?: string, options?: {
+        maxTurns?: number;
+    }): Promise<AgentResponse>;
+    validateConfig(): Promise<boolean>;
+}
+//# sourceMappingURL=claude-code-provider.d.ts.map

package/dist/claude-code-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-provider.d.ts","sourceRoot":"","sources":["../src/claude-code-provider.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAiB,iBAAiB,EAAc,MAAM,YAAY,CAAC;AA8D7H,gEAAgE;AAChE,MAAM,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,KAAK,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE7C,qBAAa,kBAAmB,YAAW,aAAa;IACtD,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,KAAK,CAAyB;IACtC,OAAO,CAAC,QAAQ,CAAsB;gBAC1B,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE;IAI5C,kBAAkB,IAAI,IAAI;IAMpB,UAAU,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBvD,YAAY,IAAI,MAAM;IAItB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIvB,UAAU,IAAI,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC;IAcnD,YAAY,CAChB,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9B,OAAO,CAAC,aAAa,CAAC;IAyQnB,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC;CAGzC"}

package/dist/claude-code-provider.js

@@ -0,0 +1,347 @@
+/**
+ * Claude Code agent provider implementation.
+ * Uses @anthropic-ai/claude-agent-sdk per spec Section 6.2 / Appendix C.8.
+ */
+import { DEFAULT_MODEL, FatalProviderError } from './types.js';
+// import { parseAgentResponse } from './response-parser.js';
+import { logProgress, logDebug, logDebugFull, createTimer, getLogLevel } from './logging.js';
+import { OUTPUT_SCHEMA } from './provider-utils.js';
+const TAG = 'agent-provider';
+/** Hit the Anthropic API /v1/models endpoint (full canonical model list). */
+async function listModelsViaApiKey(apiKey) {
+    const { default: Anthropic } = await import('@anthropic-ai/sdk');
+    const client = new Anthropic({ apiKey });
+    const out = [];
+    // `limit` is the page size, NOT a total cap — `for await` keeps fetching pages
+    // via the SDK's auto-pagination until the server reports no more.
+    for await (const m of client.models.list({ limit: 100 })) {
+        out.push({ id: m.id, label: m.display_name });
+    }
+    return out;
+}
+/** Ask the Claude Code agent SDK for its curated alias list (works with local-Claude auth).
+ *
+ * The SDK's `supportedModels()` is only available on a `Query` instance, not as a static
+ * call, so we have to spin up a streaming-input query just to issue one control request.
+ * The async generator never yields — we just await `block` so the SDK doesn't think the
+ * input stream has ended, then `interrupt()` it after `supportedModels()` returns.
+ *
+ * Best-effort cleanup: `release()` ends the prompt generator, then `interrupt()` cancels
+ * the query. Both are wrapped in a 5s timeout so a misbehaving SDK can't hang the CLI.
+ */
+async function listModelsViaAgentSdk() {
+    const { query } = await import('@anthropic-ai/claude-agent-sdk');
+    let release;
+    const block = new Promise((resolve) => {
+        release = resolve;
+    });
+    // eslint-disable-next-line require-yield -- intentional: streaming-input prompt that never yields, kept alive by `block` so `supportedModels()` can run.
+    const prompt = (async function* () {
+        await block;
+        await new Promise(() => { });
+    })();
+    const q = query({ prompt, options: {} });
+    try {
+        const models = await q.supportedModels();
+        return models.map((m) => ({
+            id: m.value,
+            label: m.displayName,
+            description: m.description,
+        }));
+    }
+    finally {
+        release?.();
+        await Promise.race([
+            q.interrupt().catch(() => undefined),
+            new Promise((resolve) => setTimeout(resolve, 5000)),
+        ]);
+    }
+}
+const HEARTBEAT_INTERVAL_MS = 15000; // Log heartbeat every 15s if no activity
+const MAX_API_ERROR_RETRIES = 3; // Fail after this many consecutive API errors
+const MAX_ERROR_DETECTION_LENGTH = 200; // Only check short text chunks for SDK error patterns — longer text is AI analysis content
+export class ClaudeCodeProvider {
+    apiKey;
+    useLocalClaude = false;
+    model = DEFAULT_MODEL;
+    _queryFn;
+    constructor(options) {
+        this._queryFn = options?._queryFn;
+    }
+    checkPrerequisites() {
+        if (!process.env.ANTHROPIC_API_KEY && process.env.AGHAST_LOCAL_CLAUDE !== 'true') {
+            throw new Error('ANTHROPIC_API_KEY environment variable is required');
+        }
+    }
+    async initialize(config) {
+        this.useLocalClaude = process.env.AGHAST_LOCAL_CLAUDE === 'true';
+        this.apiKey = config.apiKey ?? process.env.ANTHROPIC_API_KEY;
+        // Model selection priority: config.model (from AGHAST_AI_MODEL env or runtime config) > DEFAULT_MODEL
+        if (config.model) {
+            this.model = config.model;
+        }
+        if (!this.apiKey && !this.useLocalClaude) {
+            throw new Error('ANTHROPIC_API_KEY is required');
+        }
+        if (this.useLocalClaude) {
+            logProgress(TAG, 'Using local Claude Code session for authentication');
+        }
+        else {
+            logDebug(TAG, 'Using API key for authentication');
+        }
+        logDebug(TAG, `Provider initialized with model ${this.model}`);
+    }
+    getModelName() {
+        return this.model;
+    }
+    setModel(model) {
+        this.model = model;
+    }
+    async listModels() {
+        // Tier 1: if ANTHROPIC_API_KEY is set, hit /v1/models for the full canonical list.
+        const apiKey = this.apiKey ?? process.env.ANTHROPIC_API_KEY;
+        if (apiKey) {
+            try {
+                return await listModelsViaApiKey(apiKey);
+            }
+            catch (err) {
+                logDebug(TAG, `models.list() via API key failed, falling back to agent-SDK: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        // Tier 2: ask the Claude Code agent SDK for its curated list (works with local Claude auth).
+        return await listModelsViaAgentSdk();
+    }
+    async executeCheck(instructions, repositoryPath, logPrefix, options) {
+        const queryFn = this._queryFn ?? (await import('@anthropic-ai/claude-agent-sdk')).query;
+        const timer = createTimer();
+        const prefix = logPrefix ? `${logPrefix} ` : '';
+        const effectiveMaxTurns = options?.maxTurns ?? 100;
+        const prompt = instructions;
+        logDebug(TAG, `${prefix}Starting query: model=${this.model}, cwd=${repositoryPath}, promptLen=${prompt.length}, maxTurns=${effectiveMaxTurns}`);
+        logDebugFull(TAG, `${prefix}Full prompt sent to AI`, prompt);
+        const conversation = queryFn({
+            prompt,
+            options: {
+                model: this.model,
+                cwd: repositoryPath,
+                allowedTools: ['Read', 'Glob', 'Grep'],
+                maxTurns: effectiveMaxTurns,
+                permissionMode: 'bypassPermissions',
+                outputFormat: {
+                    type: 'json_schema',
+                    schema: OUTPUT_SCHEMA,
+                },
+            },
+        });
+        // Consume all messages from the async generator to get the result
+        let resultText = '';
+        let structuredOutput;
+        let errorMessage;
+        let turnCount = 0;
+        let toolCallCount = 0;
+        let tokenUsage;
+        let consecutiveApiErrors = 0;
+        let currentToolName;
+        let lastActivityTime = Date.now();
+        const trace = getLogLevel() === 'trace';
+        // Background heartbeat timer - logs if no activity for a while
+        const heartbeatInterval = setInterval(() => {
+            const silentSeconds = Math.round((Date.now() - lastActivityTime) / 1000);
+            if (silentSeconds >= HEARTBEAT_INTERVAL_MS / 1000) {
+                const status = currentToolName ? `running ${currentToolName}` : 'waiting';
+                logDebug(TAG, `${prefix}Still ${status}... (${timer.elapsedStr()})`);
+            }
+        }, HEARTBEAT_INTERVAL_MS);
+        try {
+            for await (const message of conversation) {
+                lastActivityTime = Date.now();
+                // Tool progress events - emitted during long-running tool executions
+                if (message.type === 'tool_progress') {
+                    const progress = message;
+                    currentToolName = progress.tool_name;
+                    logDebug(TAG, `${prefix}Running ${progress.tool_name}... (${Math.round(progress.elapsed_time_seconds)}s)`);
+                }
+                if (message.type === 'assistant') {
+                    turnCount++;
+                    currentToolName = undefined;
+                    // Activity indicator at debug level (scan-runner provides periodic summary at info)
+                    logDebug(TAG, `${prefix}Turn ${turnCount} (${timer.elapsedStr()})`);
+                    const content = message.message?.content;
+                    if (Array.isArray(content)) {
+                        // Count and log tool calls at debug level (compact)
+                        for (const block of content) {
+                            if (block?.type === 'tool_use') {
+                                toolCallCount++;
+                                currentToolName = block.name;
+                                const inputStr = JSON.stringify(block.input);
+                                const inputPreview = inputStr.length > 100 ? inputStr.slice(0, 100) + '...' : inputStr;
+                                logDebug(TAG, `${prefix}Tool[${toolCallCount}]: ${block.name} ${inputPreview}`);
+                                if (trace && inputStr.length > 100)
+                                    logDebugFull(TAG, `${prefix}Full tool call input`, inputStr);
+                            }
+                        }
+                        // Log thinking blocks
+                        const thinkingBlocks = content.filter((c) => c?.type === 'thinking' && typeof c.thinking === 'string').map((c) => c.thinking.trim()).filter(Boolean);
+                        for (const thinking of thinkingBlocks) {
+                            logDebug(TAG, `${prefix}Thinking: [${thinking.length} chars] ${thinking.slice(0, 100)}...`);
+                            if (trace)
+                                logDebugFull(TAG, `${prefix}Full thinking block`, thinking);
+                        }
+                        // Log assistant text at debug level
+                        const textChunks = content
+                            .filter((c) => c?.type === 'text' && typeof c.text === 'string')
+                            .map((c) => c.text.trim())
+                            .filter(Boolean);
+                        if (textChunks.length > 0) {
+                            for (const chunk of textChunks) {
+                                if (chunk.length > 200) {
+                                    logDebug(TAG, `${prefix}Assistant: [${chunk.length} chars] ${chunk.slice(0, 100)}...`);
+                                    if (trace)
+                                        logDebugFull(TAG, `${prefix}Full assistant text`, chunk);
+                                }
+                                else {
+                                    logDebug(TAG, `${prefix}Assistant: ${chunk}`);
+                                }
+                            }
+                            // Error detection: only check short text chunks to avoid matching the AI's
+                            // own analysis text (e.g., a security finding mentioning "rate limiting").
+                            // SDK/API error messages are typically short (under 200 chars), while AI analysis
+                            // text is much longer.
+                            const shortChunks = textChunks.filter((t) => t.length < MAX_ERROR_DETECTION_LENGTH);
+                            // Detect rate-limit messages — fail immediately since retrying won't help.
+                            const rateLimitMatch = shortChunks.find((t) => /you've hit your limit|API Error:\s*429|rate.?limit.?exceeded/i.test(t));
+                            if (rateLimitMatch) {
+                                throw new FatalProviderError(`Agent provider rate limit reached: ${rateLimitMatch}`);
+                            }
+                            // Detect authentication errors (401) — fail immediately, unrecoverable
+                            const authErrorMatch = shortChunks.find((t) => /API Error:\s*401/i.test(t));
+                            if (authErrorMatch) {
+                                throw new FatalProviderError(`Agent provider authentication failed (401): ${authErrorMatch}`);
+                            }
+                            // Detect login required — fail immediately, unrecoverable without user action
+                            const loginRequiredMatch = shortChunks.find((t) => /not logged in/i.test(t));
+                            if (loginRequiredMatch) {
+                                throw new FatalProviderError(`Agent provider not logged in: ${loginRequiredMatch}. Please authenticate before running scans.`);
+                            }
+                            // Detect API errors surfaced as assistant text by the SDK
+                            const apiErrorMatch = shortChunks.find((t) => t.includes('API Error:'));
+                            if (apiErrorMatch) {
+                                consecutiveApiErrors++;
+                                if (consecutiveApiErrors >= MAX_API_ERROR_RETRIES) {
+                                    throw new Error(`Agent provider API error (after ${MAX_API_ERROR_RETRIES} attempts): ${apiErrorMatch}`);
+                                }
+                            }
+                            else {
+                                consecutiveApiErrors = 0;
+                            }
+                        }
+                    }
+                }
+                if (message.type === 'tool_result') {
+                    const toolResult = message;
+                    const outputText = toolResult.content?.filter((c) => c.type === 'text').map((c) => c.text).join('\n') ?? '(no output)';
+                    const isMultiline = outputText.includes('\n');
+                    const preview = outputText.length > 300 ? outputText.slice(0, 300) + '...' : outputText;
+                    if (isMultiline || outputText.length > 300) {
+                        logDebug(TAG, `${prefix}Tool result [${outputText.length} chars]: ${preview}`);
+                        if (trace)
+                            logDebugFull(TAG, `${prefix}Full tool result`, outputText);
+                    }
+                    else {
+                        logDebug(TAG, `${prefix}Tool result: ${outputText}`);
+                    }
+                }
+                if (message.type === 'result') {
+                    if (message.subtype === 'success') {
+                        resultText = message.result;
+                        // Extract structured output if available
+                        const resultMsg = message;
+                        if (resultMsg.structured_output) {
+                            structuredOutput = resultMsg.structured_output;
+                            logDebug(TAG, `${prefix}Structured output: ${structuredOutput.issues.length} issues`);
+                        }
+                        // Extract token usage if available.
+                        // Prefer modelUsage (camelCase, per-model breakdown) over usage (snake_case, raw API).
+                        // Always use total_cost_usd from the result message as the authoritative cost.
+                        if (resultMsg.modelUsage && Object.keys(resultMsg.modelUsage).length > 0) {
+                            let inputTokens = 0;
+                            let outputTokens = 0;
+                            let cacheCreationInputTokens;
+                            let cacheReadInputTokens;
+                            for (const model of Object.values(resultMsg.modelUsage)) {
+                                inputTokens += model.inputTokens;
+                                outputTokens += model.outputTokens;
+                                if (model.cacheCreationInputTokens !== undefined) {
+                                    cacheCreationInputTokens = (cacheCreationInputTokens ?? 0) + model.cacheCreationInputTokens;
+                                }
+                                if (model.cacheReadInputTokens !== undefined) {
+                                    cacheReadInputTokens = (cacheReadInputTokens ?? 0) + model.cacheReadInputTokens;
+                                }
+                            }
+                            tokenUsage = {
+                                inputTokens,
+                                outputTokens,
+                                cacheCreationInputTokens,
+                                cacheReadInputTokens,
+                                totalTokens: inputTokens + outputTokens,
+                                ...(resultMsg.total_cost_usd !== undefined
+                                    ? { reportedCost: { amountUsd: resultMsg.total_cost_usd, source: 'claude-agent-sdk', ...(this.useLocalClaude ? { coveredBySubscription: true } : {}) } }
+                                    : {}),
+                            };
+                            logDebug(TAG, `${prefix}Token usage: ${tokenUsage.inputTokens} in, ${tokenUsage.outputTokens} out, ${cacheReadInputTokens ?? 0} cache-read, ${cacheCreationInputTokens ?? 0} cache-write, $${resultMsg.total_cost_usd ?? 0} reported`);
+                        }
+                        else if (resultMsg.usage) {
+                            const cacheCreation = resultMsg.usage.cache_creation_input_tokens;
+                            const cacheRead = resultMsg.usage.cache_read_input_tokens;
+                            tokenUsage = {
+                                inputTokens: resultMsg.usage.input_tokens,
+                                outputTokens: resultMsg.usage.output_tokens,
+                                ...(cacheCreation !== undefined ? { cacheCreationInputTokens: cacheCreation } : {}),
+                                ...(cacheRead !== undefined ? { cacheReadInputTokens: cacheRead } : {}),
+                                totalTokens: resultMsg.usage.input_tokens + resultMsg.usage.output_tokens,
+                                ...(resultMsg.total_cost_usd !== undefined
+                                    ? { reportedCost: { amountUsd: resultMsg.total_cost_usd, source: 'claude-agent-sdk', ...(this.useLocalClaude ? { coveredBySubscription: true } : {}) } }
+                                    : {}),
+                            };
+                            logDebug(TAG, `${prefix}Token usage: ${tokenUsage.inputTokens} in, ${tokenUsage.outputTokens} out, ${cacheRead ?? 0} cache-read, ${cacheCreation ?? 0} cache-write, $${resultMsg.total_cost_usd ?? 0} reported`);
+                        }
+                        logProgress(TAG, `${prefix}Completed in ${timer.elapsedStr()} (${turnCount} turns, ${toolCallCount} tool calls)`);
+                    }
+                    else {
+                        const errorResult = message;
+                        errorMessage = errorResult.errors?.join('; ') ?? `Agent provider error: ${errorResult.subtype}`;
+                        logProgress(TAG, `${prefix}Failed: ${errorResult.subtype} (${timer.elapsedStr()})`);
+                    }
+                }
+            }
+        }
+        finally {
+            clearInterval(heartbeatInterval);
+        }
+        if (errorMessage) {
+            logDebug(TAG, `${prefix}Error: ${errorMessage}`);
+            throw new Error(errorMessage);
+        }
+        if (!resultText && !structuredOutput && !errorMessage) {
+            throw new Error('Agent provider returned no result');
+        }
+        logDebug(TAG, `${prefix}Result: ${resultText.length} chars`);
+        logDebugFull(TAG, `${prefix}Full AI response`, resultText);
+        // Structured output from SDK is required - we enforce JSON schema output mode.
+        // The response parser (parseAgentResponse) is kept in the codebase as a potential
+        // fallback for future use cases (e.g., alternative agent providers that don't support
+        // structured output), but this provider always requires structured output.
+        if (structuredOutput) {
+            return { raw: resultText, parsed: structuredOutput, tokenUsage };
+        }
+        // No fallback parsing - structured output is mandatory for this provider.
+        // If needed in the future, uncomment:
+        // const parsed = parseAgentResponse(resultText);
+        // return { raw: resultText, parsed: parsed ?? undefined };
+        throw new Error('Agent provider did not return structured output');
+    }
+    async validateConfig() {
+        return !!this.apiKey || this.useLocalClaude;
+    }
+}
+//# sourceMappingURL=claude-code-provider.js.map

package/dist/claude-code-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-provider.js","sourceRoot":"","sources":["../src/claude-code-provider.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAC/D,6DAA6D;AAC7D,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,GAAG,GAAG,gBAAgB,CAAC;AAE7B,6EAA6E;AAC7E,KAAK,UAAU,mBAAmB,CAAC,MAAc;IAC/C,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,+EAA+E;IAC/E,kEAAkE;IAClE,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,qBAAqB;IAClC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;IACjE,IAAI,OAAiC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC1C,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,yJAAyJ;IACzJ,MAAM,MAAM,GAAG,CAAC,KAAK,SAAS,CAAC;QAC7B,MAAM,KAAK,CAAC;QACZ,MAAM,IAAI,OAAO,CAAQ,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,eAAe,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxB,EAAE,EAAE,CAAC,CAAC,KAAK;YACX,KAAK,EAAE,CAAC,CAAC,WAAW;YACpB,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,EAAE,CAAC;QACZ,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;YACpC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AACD,MAAM,qBAAqB,GAAG,KAAK,CAAC,CAAC,yCAAyC;AAC9E,MAAM,qBAAqB,GAAG,CAAC,CAAC,CAAC,8CAA8C;AAC/E,MAAM,0BAA0B,GAAG,GAAG,CAAC,CAAC,2FAA2F;AAQnI,MAAM,OAAO,kBAAkB;IACrB,MAAM,CAAqB;IAC3B,cAAc,GAAY,KAAK,CAAC;IAChC,KAAK,GAAW,aAAa,CAAC;IAC9B,QAAQ,CAAsB;IACtC,YAAY,OAAgC;QAC1C,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAC;IACpC,CAAC;IAED,kBAAkB;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAsB;QACrC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM,CAAC;QACjE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC7D,sGAAsG;QACtG,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,WAAW,CAAC,GAAG,EAAE,oDAAoD,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;QACpD,CAAC;QACD,QAAQ,CAAC,GAAG,EAAE,mCAAmC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,mFAAmF;QACnF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC5D,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,OAAO,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,GAAG,EAAE,gEAAgE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpI,CAAC;QACH,CAAC;QACD,6FAA6F;QAC7F,OAAO,MAAM,qBAAqB,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,YAAoB,EACpB,cAAsB,EACtB,SAAkB,EAClB,OAA+B;QAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC,CAAC,KAAK,CAAC;QACxF,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,iBAAiB,GAAG,OAAO,EAAE,QAAQ,IAAI,GAAG,CAAC;QAEnD,MAAM,MAAM,GAAG,YAAY,CAAC;QAE5B,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,yBAAyB,IAAI,CAAC,KAAK,SAAS,cAAc,eAAe,MAAM,CAAC,MAAM,cAAc,iBAAiB,EAAE,CAAC,CAAC;QAChJ,YAAY,CAAC,GAAG,EAAE,GAAG,MAAM,wBAAwB,EAAE,MAAM,CAAC,CAAC;QAE7D,MAAM,YAAY,GAAG,OAAO,CAAC;YAC3B,MAAM;YACN,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,EAAE,cAAc;gBACnB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBACtC,QAAQ,EAAE,iBAAiB;gBAC3B,cAAc,EAAE,mBAAmB;gBACnC,YAAY,EAAE;oBACZ,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,aAAa;iBACtB;aACF;SACF,CAAC,CAAC;QAEH,kEAAkE;QAClE,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,gBAA2C,CAAC;QAChD,IAAI,YAAgC,CAAC;QACrC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,UAAkC,CAAC;QAEvC,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,IAAI,eAAmC,CAAC;QACxC,IAAI,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,WAAW,EAAE,KAAK,OAAO,CAAC;QAExC,+DAA+D;QAC/D,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE;YACzC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC;YACzE,IAAI,aAAa,IAAI,qBAAqB,GAAG,IAAI,EAAE,CAAC;gBAClD,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,WAAW,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC1E,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YACvE,CAAC;QACH,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAE1B,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;gBACzC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAChC,qEAAqE;gBACrE,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBACrC,MAAM,QAAQ,GAAG,OAA8D,CAAC;oBAChF,eAAe,GAAG,QAAQ,CAAC,SAAS,CAAC;oBACrC,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,WAAW,QAAQ,CAAC,SAAS,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBAC7G,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACjC,SAAS,EAAE,CAAC;oBACZ,eAAe,GAAG,SAAS,CAAC;oBAC5B,oFAAoF;oBACpF,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,QAAQ,SAAS,KAAK,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;oBAEpE,MAAM,OAAO,GAAI,OAAe,CAAC,OAAO,EAAE,OAAO,CAAC;oBAClD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC3B,oDAAoD;wBACpD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;4BAC5B,IAAI,KAAK,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;gCAC/B,aAAa,EAAE,CAAC;gCAChB,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC;gCAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gCAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;gCACvF,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,QAAQ,aAAa,MAAM,KAAK,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC,CAAC;gCAChF,IAAI,KAAK,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;oCAAE,YAAY,CAAC,GAAG,EAAE,GAAG,MAAM,sBAAsB,EAAE,QAAQ,CAAC,CAAC;4BACnG,CAAC;wBACH,CAAC;wBAED,sBAAsB;wBACtB,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;wBAC/J,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;4BACtC,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,cAAc,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;4BAC5F,IAAI,KAAK;gCAAE,YAAY,CAAC,GAAG,EAAE,GAAG,MAAM,qBAAqB,EAAE,QAAQ,CAAC,CAAC;wBACzE,CAAC;wBAED,oCAAoC;wBACpC,MAAM,UAAU,GAAG,OAAO;6BACvB,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;6BACpE,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;6BAC9B,MAAM,CAAC,OAAO,CAAC,CAAC;wBACnB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC1B,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gCAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oCACvB,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,eAAe,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;oCACvF,IAAI,KAAK;wCAAE,YAAY,CAAC,GAAG,EAAE,GAAG,MAAM,qBAAqB,EAAE,KAAK,CAAC,CAAC;gCACtE,CAAC;qCAAM,CAAC;oCACN,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,cAAc,KAAK,EAAE,CAAC,CAAC;gCAChD,CAAC;4BACH,CAAC;4BAED,2EAA2E;4BAC3E,2EAA2E;4BAC3E,kFAAkF;4BAClF,uBAAuB;4BACvB,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,0BAA0B,CAAC,CAAC;4BAE5F,2EAA2E;4BAC3E,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CACpD,+DAA+D,CAAC,IAAI,CAAC,CAAC,CAAC,CACxE,CAAC;4BACF,IAAI,cAAc,EAAE,CAAC;gCACnB,MAAM,IAAI,kBAAkB,CAAC,sCAAsC,cAAc,EAAE,CAAC,CAAC;4BACvF,CAAC;4BAED,uEAAuE;4BACvE,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CACpD,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAC5B,CAAC;4BACF,IAAI,cAAc,EAAE,CAAC;gCACnB,MAAM,IAAI,kBAAkB,CAAC,+CAA+C,cAAc,EAAE,CAAC,CAAC;4BAChG,CAAC;4BAED,8EAA8E;4BAC9E,MAAM,kBAAkB,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CACxD,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CACzB,CAAC;4BACF,IAAI,kBAAkB,EAAE,CAAC;gCACvB,MAAM,IAAI,kBAAkB,CAAC,iCAAiC,kBAAkB,6CAA6C,CAAC,CAAC;4BACjI,CAAC;4BAED,0DAA0D;4BAC1D,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;4BAChF,IAAI,aAAa,EAAE,CAAC;gCAClB,oBAAoB,EAAE,CAAC;gCACvB,IAAI,oBAAoB,IAAI,qBAAqB,EAAE,CAAC;oCAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,qBAAqB,eAAe,aAAa,EAAE,CAAC,CAAC;gCAC1G,CAAC;4BACH,CAAC;iCAAM,CAAC;gCACN,oBAAoB,GAAG,CAAC,CAAC;4BAC3B,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBACnC,MAAM,UAAU,GAAG,OAAqF,CAAC;oBACzG,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC;oBACjI,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAC9C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;oBACxF,IAAI,WAAW,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;wBAC3C,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,gBAAgB,UAAU,CAAC,MAAM,YAAY,OAAO,EAAE,CAAC,CAAC;wBAC/E,IAAI,KAAK;4BAAE,YAAY,CAAC,GAAG,EAAE,GAAG,MAAM,kBAAkB,EAAE,UAAU,CAAC,CAAC;oBACxE,CAAC;yBAAM,CAAC;wBACN,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,gBAAgB,UAAU,EAAE,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9B,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;wBAClC,UAAU,GAAG,OAAO,CAAC,MAAgB,CAAC;wBACtC,yCAAyC;wBACzC,MAAM,SAAS,GAAG,OAgBjB,CAAC;wBACF,IAAI,SAAS,CAAC,iBAAiB,EAAE,CAAC;4BAChC,gBAAgB,GAAG,SAAS,CAAC,iBAAiB,CAAC;4BAC/C,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,sBAAsB,gBAAgB,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;wBACxF,CAAC;wBACD,oCAAoC;wBACpC,uFAAuF;wBACvF,+EAA+E;wBAC/E,IAAI,SAAS,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACzE,IAAI,WAAW,GAAG,CAAC,CAAC;4BACpB,IAAI,YAAY,GAAG,CAAC,CAAC;4BACrB,IAAI,wBAA4C,CAAC;4BACjD,IAAI,oBAAwC,CAAC;4BAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gCACxD,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC;gCACjC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC;gCACnC,IAAI,KAAK,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;oCACjD,wBAAwB,GAAG,CAAC,wBAAwB,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,wBAAwB,CAAC;gCAC9F,CAAC;gCACD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;oCAC7C,oBAAoB,GAAG,CAAC,oBAAoB,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,oBAAoB,CAAC;gCAClF,CAAC;4BACH,CAAC;4BACD,UAAU,GAAG;gCACX,WAAW;gCACX,YAAY;gCACZ,wBAAwB;gCACxB,oBAAoB;gCACpB,WAAW,EAAE,WAAW,GAAG,YAAY;gCACvC,GAAG,CAAC,SAAS,CAAC,cAAc,KAAK,SAAS;oCACxC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,kBAA2B,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oCACjK,CAAC,CAAC,EAAE,CAAC;6BACR,CAAC;4BACF,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,gBAAgB,UAAU,CAAC,WAAW,QAAQ,UAAU,CAAC,YAAY,SAAS,oBAAoB,IAAI,CAAC,gBAAgB,wBAAwB,IAAI,CAAC,kBAAkB,SAAS,CAAC,cAAc,IAAI,CAAC,WAAW,CAAC,CAAC;wBACzO,CAAC;6BAAM,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;4BAC3B,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,2BAA2B,CAAC;4BAClE,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,uBAAuB,CAAC;4BAC1D,UAAU,GAAG;gCACX,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,YAAY;gCACzC,YAAY,EAAE,SAAS,CAAC,KAAK,CAAC,aAAa;gCAC3C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACnF,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACvE,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa;gCACzE,GAAG,CAAC,SAAS,CAAC,cAAc,KAAK,SAAS;oCACxC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,kBAA2B,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oCACjK,CAAC,CAAC,EAAE,CAAC;6BACR,CAAC;4BACF,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,gBAAgB,UAAU,CAAC,WAAW,QAAQ,UAAU,CAAC,YAAY,SAAS,SAAS,IAAI,CAAC,gBAAgB,aAAa,IAAI,CAAC,kBAAkB,SAAS,CAAC,cAAc,IAAI,CAAC,WAAW,CAAC,CAAC;wBACnN,CAAC;wBACD,WAAW,CAAC,GAAG,EAAE,GAAG,MAAM,gBAAgB,KAAK,CAAC,UAAU,EAAE,KAAK,SAAS,WAAW,aAAa,cAAc,CAAC,CAAC;oBACpH,CAAC;yBAAM,CAAC;wBACN,MAAM,WAAW,GAAG,OAAiD,CAAC;wBACtE,YAAY,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,yBAAyB,WAAW,CAAC,OAAO,EAAE,CAAC;wBAChG,WAAW,CAAC,GAAG,EAAE,GAAG,MAAM,WAAW,WAAW,CAAC,OAAO,KAAK,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;oBACtF,CAAC;gBACH,CAAC;YACH,CAAC;QACD,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,iBAAiB,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,UAAU,YAAY,EAAE,CAAC,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,CAAC,UAAU,IAAI,CAAC,gBAAgB,IAAI,CAAC,YAAY,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,QAAQ,CAAC,GAAG,EAAE,GAAG,MAAM,WAAW,UAAU,CAAC,MAAM,QAAQ,CAAC,CAAC;QAC7D,YAAY,CAAC,GAAG,EAAE,GAAG,MAAM,kBAAkB,EAAE,UAAU,CAAC,CAAC;QAE3D,+EAA+E;QAC/E,kFAAkF;QAClF,sFAAsF;QACtF,2EAA2E;QAC3E,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;QACnE,CAAC;QAED,0EAA0E;QAC1E,sCAAsC;QACtC,iDAAiD;QACjD,2DAA2D;QAC3D,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,CAAC;IAC9C,CAAC;CACF"}

package/dist/cli.d.ts

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+/**
+ * Unified CLI entry point for aghast.
+ * Subcommand router: delegates to `scan` or `new-check`.
+ *
+ * Usage:
+ *   aghast scan <repo-path> [options]
+ *   aghast new-check [options]
+ *   aghast --help
+ *   aghast --version
+ */
+import 'dotenv/config';
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;GASG;AAEH,OAAO,eAAe,CAAC"}

package/dist/cli.js

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+/**
+ * Unified CLI entry point for aghast.
+ * Subcommand router: delegates to `scan` or `new-check`.
+ *
+ * Usage:
+ *   aghast scan <repo-path> [options]
+ *   aghast new-check [options]
+ *   aghast --help
+ *   aghast --version
+ */
+import 'dotenv/config';
+import { createRequire } from 'node:module';
+import { readFileSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { ERROR_CODES, formatError, formatFatalError } from './error-codes.js';
+// Signal to subcommand modules that they're being imported, not run directly
+process.env._AGHAST_CLI = '1';
+const USAGE = `Usage: aghast <command> [options]
+
+Commands:
+  scan           Run security checks against a repository
+  new-check      Scaffold a new security check
+  build-config   Build or edit a runtime-config.json (interactive or flag-driven)
+  stats          Print a cost summary from the scan history
+
+Options:
+  --help      Show this help message
+  --version   Show version number
+
+Run 'aghast <command> --help' for more information on a command.`;
+function getVersion() {
+    const require = createRequire(import.meta.url);
+    const pkg = require('../package.json');
+    return pkg.version;
+}
+function printVersion() {
+    console.log(getVersion());
+}
+function printLogo() {
+    const __dirname = dirname(fileURLToPath(import.meta.url));
+    const logoPath = resolve(__dirname, '..', 'assets', 'txt', 'logo.txt');
+    try {
+        const logo = readFileSync(logoPath, 'utf-8');
+        console.log(logo);
+    }
+    catch {
+        // Logo file not found — continue without it
+    }
+}
+async function main() {
+    // Graceful shutdown on POSIX signals
+    process.on('SIGINT', () => {
+        process.exit(130);
+    });
+    process.on('SIGTERM', () => {
+        process.exit(143);
+    });
+    const args = process.argv.slice(2);
+    const command = args[0];
+    // Skip the logo for `stats --json` so machine-readable output is parseable.
+    const isStatsJson = command === 'stats' && args.includes('--json');
+    if (!isStatsJson) {
+        printLogo();
+    }
+    if (!command || command === '--help' || command === '-h') {
+        console.log(USAGE);
+        process.exit(0);
+    }
+    if (command === '--version' || command === '-V') {
+        printVersion();
+        process.exit(0);
+    }
+    const subArgs = args.slice(1);
+    switch (command) {
+        case 'scan': {
+            const { runScan } = await import('./index.js');
+            await runScan(subArgs);
+            break;
+        }
+        case 'new-check': {
+            const { runNewCheck } = await import('./new-check.js');
+            await runNewCheck(subArgs);
+            break;
+        }
+        case 'build-config': {
+            const { runBuildConfig } = await import('./build-config.js');
+            await runBuildConfig(subArgs);
+            break;
+        }
+        case 'stats': {
+            const { runStats } = await import('./stats.js');
+            await runStats(subArgs);
+            break;
+        }
+        default:
+            console.error(formatError(ERROR_CODES.E1002, `Unknown command: ${command}`));
+            console.error('');
+            console.error(USAGE);
+            process.exit(1);
+    }
+}
+main().catch((err) => {
+    console.error('');
+    console.error(formatFatalError(err instanceof Error ? err.message : String(err), getVersion()));
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;GASG;AAEH,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAE9E,6EAA6E;AAC7E,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC;AAE9B,MAAM,KAAK,GAAG;;;;;;;;;;;;iEAYmD,CAAC;AAElE,SAAS,UAAU;IACjB,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;IAC9D,OAAO,GAAG,CAAC,OAAO,CAAC;AACrB,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,qCAAqC;IACrC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAExB,4EAA4E;IAC5E,MAAM,WAAW,GAAG,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,SAAS,EAAE,CAAC;IACd,CAAC;IAED,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAChD,YAAY,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE9B,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM;QACR,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACvD,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;YAC3B,MAAM;QACR,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAC7D,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;YAC9B,MAAM;QACR,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;YACxB,MAAM;QACR,CAAC;QACD;YACE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,oBAAoB,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7E,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/colors.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Color helpers for CLI output.
+ * Uses picocolors which automatically respects NO_COLOR env var and non-TTY.
+ */
+export declare function colorStatus(status: string): string;
+export declare function colorError(message: string): string;
+//# sourceMappingURL=colors.d.ts.map

package/dist/colors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"colors.d.ts","sourceRoot":"","sources":["../src/colors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAQlD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAElD"}

package/dist/colors.js

@@ -0,0 +1,18 @@
+/**
+ * Color helpers for CLI output.
+ * Uses picocolors which automatically respects NO_COLOR env var and non-TTY.
+ */
+import pc from 'picocolors';
+export function colorStatus(status) {
+    switch (status) {
+        case 'NO ISSUES DETECTED': return pc.green(status);
+        case 'ISSUES DETECTED': return pc.red(status);
+        case 'REVIEW REQUIRED': return pc.yellow(status);
+        case 'SCAN ERROR': return pc.red(status);
+        default: return status;
+    }
+}
+export function colorError(message) {
+    return pc.red(message);
+}
+//# sourceMappingURL=colors.js.map

package/dist/colors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"colors.js","sourceRoot":"","sources":["../src/colors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,KAAK,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,KAAK,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,KAAK,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC,OAAO,MAAM,CAAC;IACzB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC"}