@panguard-ai/panguard 0.3.1 → 0.3.2

package/dist/cli/auth-guard.d.ts

@@ -30,7 +30,7 @@ export declare function withAuth<T>(requiredTier: RequiredTier, handler: (option
 export declare function tierBadge(tier: RequiredTier): string;
 /**
  * Refresh tier from server in background.
- * Called on CLI startup to ensure local cache is current.
+ * No-op: all features are free and open source. No auth needed.
  */
 export declare function refreshTierInBackground(): void;
 /**
@@ -49,32 +49,34 @@ export declare function checkAccess(requiredTier: Tier): boolean;
  * Check if current user has access to a feature by name.
  * Uses FEATURE_TIER mapping to resolve the required tier.
  */
-export declare function checkFeatureAccess(feature: string): boolean;
+export declare function checkFeatureAccess(_feature: string): boolean;
 /**
  * Display a branded upgrade prompt for a locked feature.
  * Accepts feature KEY (e.g. 'report', not 'Compliance Report').
  */
-export declare function showUpgradePrompt(feature: string, lang?: string): void;
+export declare function showUpgradePrompt(_feature: string, _lang?: string): void;
 /**
  * Show a contextual upgrade hint for scan auto-fix.
  * Used after scan results when fixable issues are found.
  */
-export declare function showScanUpgradeHint(fixableCount: number, lang?: string): void;
+export declare function showScanUpgradeHint(_fixableCount: number, _lang?: string): void;
 /**
  * Show a contextual upgrade hint for Guard AI analysis.
  * Used when a suspicious event needs AI analysis.
  */
-export declare function showGuardAIHint(threatType: string, confidence: number, lang?: string): void;
+export declare function showGuardAIHint(_threatType: string, _confidence: number, _lang?: string): void;
+/** @deprecated All features are free. Kept for backward compatibility. */
 export declare const PRICING_TIERS: Record<string, {
     price: number;
     unit: string;
     machines: string;
 }>;
+/** @deprecated All features are free. Kept for backward compatibility. */
 export declare const COMPLIANCE_PRICING: Record<string, {
     price: number;
     unit: string;
     name: Record<string, string>;
 }>;
-/** Business subscribers get 50% off additional reports */
-export declare const BUSINESS_REPORT_DISCOUNT = 0.5;
+/** All features are free — no discount logic needed */
+export declare const BUSINESS_REPORT_DISCOUNT = 0;
 //# sourceMappingURL=auth-guard.d.ts.map

package/dist/cli/auth-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-guard.d.ts","sourceRoot":"","sources":["../../src/cli/auth-guard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAO9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC;AAEhC,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACvC;AAID,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAsB,CAAC;AAE/E;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,GAAE,YAA0B,GAAG,eAAe,CAiBrF;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EACxB,YAAY,EAAE,YAAY,EAC1B,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,GACrE,CAAC,OAAO,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CA0D/B;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CASpD;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAgE9C;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAsB3D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,IAAI,GAAG,OAAO,CAGvD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG3D;AAgBD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAa,GAAG,IAAI,CAkD5E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,GAAE,MAAa,GAAG,IAAI,CAenF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,MAAa,GAAG,IAAI,CA0BjG;AAID,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAK3F,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,MAAM,CACrC,MAAM,EACN;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CA4B9D,CAAC;AAEF,0DAA0D;AAC1D,eAAO,MAAM,wBAAwB,MAAM,CAAC"}
+{"version":3,"file":"auth-guard.d.ts","sourceRoot":"","sources":["../../src/cli/auth-guard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAK9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC;AAEhC,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACvC;AAID,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAsB,CAAC;AAE/E;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,GAAE,YAA0B,GAAG,eAAe,CAiBrF;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EACxB,YAAY,EAAE,YAAY,EAC1B,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,GACrE,CAAC,OAAO,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAgB/B;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CASpD;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAsB3D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,IAAI,GAAG,OAAO,CAGvD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAG5D;AAgBD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAE,MAAa,GAAG,IAAI,CAE9E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,GAAE,MAAa,GAAG,IAAI,CAErF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,GAAE,MAAa,GAAG,IAAI,CAEpG;AAID,0EAA0E;AAC1E,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAE3F,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,EAAE,MAAM,CACrC,MAAM,EACN;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CACzD,CAAC;AAEP,uDAAuD;AACvD,eAAO,MAAM,wBAAwB,IAAI,CAAC"}

package/dist/cli/auth-guard.js

@@ -7,8 +7,8 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
-import { c, symbols, box, FEATURE_TIER as _CORE_FEATURE_TIER, isTierAtLeast, TIER_LEVEL } from '@panguard-ai/core';
-import { loadCredentials, saveCredentials, isTokenExpired, tierDisplayName, } from './credentials.js';
+import { c, FEATURE_TIER as _CORE_FEATURE_TIER, isTierAtLeast, TIER_LEVEL } from '@panguard-ai/core';
+import { loadCredentials, isTokenExpired, } from './credentials.js';
 /* ── Feature → Tier mapping (re-exported from core) ── */
 export const FEATURE_TIER = _CORE_FEATURE_TIER;
 /**
@@ -37,47 +37,19 @@ export function requireAuth(requiredTier = 'community') {
  */
 export function withAuth(requiredTier, handler) {
     return async (options) => {
-        // In server mode, require a valid service token from environment.
-        // The server has its own session-based auth for API routes.
-        if (process.env['PANGUARD_SERVER_MODE'] === '1') {
-            const creds = loadCredentials();
-            if (!creds || isTokenExpired(creds)) {
-                console.error('Server mode requires valid credentials. Run `panguard login` first.');
-                process.exitCode = 1;
-                return;
-            }
-            await handler(options, creds);
-            return;
-        }
-        const check = requireAuth(requiredTier);
-        if (!check.authenticated) {
-            console.log('');
-            console.log(box([
-                `${symbols.warn} \u9700\u8981\u767B\u5165 / Authentication required`,
-                '',
-                `  \u8ACB\u57F7\u884C ${c.sage('panguard login')} \u4F86\u9A57\u8B49\u3002`,
-                `  Run ${c.sage('panguard login')} to authenticate.`,
-            ].join('\n'), { borderColor: c.caution, title: 'Panguard AI' }));
-            console.log('');
-            process.exitCode = 1;
-            return;
-        }
-        if (!check.authorized) {
-            const tierName = tierDisplayName(requiredTier);
-            console.log('');
-            console.log(box([
-                `${symbols.fail} \u9700\u8981 ${tierName} \u7B49\u7D1A / ${tierName} tier required`,
-                '',
-                `  \u76EE\u524D\u7B49\u7D1A: ${c.sage(tierDisplayName(check.credentials.tier))}`,
-                `  Current tier: ${c.sage(tierDisplayName(check.credentials.tier))}`,
-                '',
-                `  \u5347\u7D1A\u8ACB\u898B ${c.underline('https://panguard.ai/pricing')}`,
-            ].join('\n'), { borderColor: c.critical, title: '\u9700\u8981\u5347\u7D1A / Upgrade Required' }));
-            console.log('');
-            process.exitCode = 1;
-            return;
-        }
-        await handler(options, check.credentials);
+        // All features are free — skip tier checks entirely.
+        // Still load credentials if available for handler context.
+        const creds = loadCredentials();
+        const fallback = {
+            token: '',
+            email: '',
+            name: 'community',
+            tier: 'community',
+            apiUrl: '',
+            savedAt: new Date().toISOString(),
+            expiresAt: new Date(Date.now() + 365 * 24 * 60 * 60 * 1000).toISOString(),
+        };
+        await handler(options, creds ?? fallback);
     };
 }
 /**
@@ -96,54 +68,10 @@ export function tierBadge(tier) {
 }
 /**
  * Refresh tier from server in background.
- * Called on CLI startup to ensure local cache is current.
+ * No-op: all features are free and open source. No auth needed.
  */
 export function refreshTierInBackground() {
-    const creds = loadCredentials();
-    if (!creds || isTokenExpired(creds) || !creds.apiUrl)
-        return;
-    // Fire-and-forget: don't block CLI startup
-    fetch(`${creds.apiUrl}/api/auth/me`, {
-        headers: { Authorization: `Bearer ${creds.token}` },
-        signal: AbortSignal.timeout(5000),
-    })
-        .then((res) => res.ok
-        ? res.json()
-        : null)
-        .then((body) => {
-        if (!body?.data?.user?.tier)
-            return;
-        const serverTier = body.data.user.tier;
-        const serverPlanExpires = body.data.user['planExpiresAt'];
-        // Check if plan has expired server-side (tier got downgraded to community)
-        if (serverTier === 'community' && creds.tier !== 'community') {
-            console.log('');
-            console.log(c.caution(`  [!] Your ${tierDisplayName(creds.tier)} plan has expired. Account downgraded to Community tier.`));
-            console.log(c.dim(`      Renew at https://panguard.ai/pricing`));
-            console.log('');
-        }
-        // Warn if plan expiring soon (within 3 days)
-        if (serverPlanExpires) {
-            const expiresDate = new Date(serverPlanExpires);
-            const daysLeft = Math.ceil((expiresDate.getTime() - Date.now()) / (24 * 60 * 60 * 1000));
-            if (daysLeft > 0 && daysLeft <= 3) {
-                console.log('');
-                console.log(c.caution(`  [!] Your ${tierDisplayName(serverTier)} plan expires in ${daysLeft} day(s).`));
-                console.log(c.dim(`      Renew at https://panguard.ai/pricing`));
-                console.log('');
-            }
-        }
-        if (serverTier !== creds.tier || body.data.user.name !== creds.name) {
-            saveCredentials({
-                ...creds,
-                tier: serverTier,
-                name: body.data.user.name ?? creds.name,
-            });
-        }
-    })
-        .catch(() => {
-        /* offline or timeout — keep local cache */
-    });
+    // No-op: all features are free and open source
 }
 /**
  * Get current license/tier from stored credentials or license file.
@@ -182,9 +110,9 @@ export function checkAccess(requiredTier) {
  * Check if current user has access to a feature by name.
  * Uses FEATURE_TIER mapping to resolve the required tier.
  */
-export function checkFeatureAccess(feature) {
-    const requiredTier = FEATURE_TIER[feature] ?? 'community';
-    return checkAccess(requiredTier);
+export function checkFeatureAccess(_feature) {
+    // All features are free and open source
+    return true;
 }
 /* ── Feature display names (bilingual) ── */
 const FEATURE_DISPLAY = {
@@ -202,124 +130,30 @@ const FEATURE_DISPLAY = {
  * Display a branded upgrade prompt for a locked feature.
  * Accepts feature KEY (e.g. 'report', not 'Compliance Report').
  */
-export function showUpgradePrompt(feature, lang = 'en') {
-    const tier = FEATURE_TIER[feature] ?? 'community';
-    const { tier: userTier } = getLicense();
-    const tierName = tierDisplayName(tier);
-    const userTierName = tierDisplayName(userTier);
-    const pricing = PRICING_TIERS[tier];
-    const priceStr = pricing && pricing.price > 0 ? `$${pricing.price}${pricing.unit}` : '';
-    const machinesStr = pricing ? pricing.machines : '';
-    const featureName = FEATURE_DISPLAY[feature]?.[lang] ?? FEATURE_DISPLAY[feature]?.['en'] ?? feature;
-    const lines = lang === 'zh-TW'
-        ? [
-            `\u300C${featureName}\u300D\u9700\u8981 ${tierName} \u65B9\u6848`,
-            priceStr ? `${priceStr} | ${machinesStr} \u53F0\u6A5F\u5668` : '',
-            '',
-            `\u76EE\u524D\u65B9\u6848:  ${c.sage(userTierName)}`,
-            `\u9700\u8981\u65B9\u6848:  ${c.sage(tierName)}`,
-            '',
-            `\u2192 ${c.underline('https://panguard.ai/pricing')}`,
-            `\u2192 ${c.sage('panguard activate <license-key>')}`,
-            '',
-            c.dim('\u6240\u6709\u4ED8\u8CBB\u65B9\u6848\u4EAB 30 \u5929\u514D\u8CBB\u8A66\u7528\u3002'),
-        ]
-        : [
-            `${featureName} requires ${tierName} plan`,
-            priceStr ? `${priceStr} | ${machinesStr} machine(s)` : '',
-            '',
-            `Current:   ${c.sage(userTierName)}`,
-            `Required:  ${c.sage(tierName)}`,
-            '',
-            `\u2192 ${c.underline('https://panguard.ai/pricing')}`,
-            `\u2192 ${c.sage('panguard activate <license-key>')}`,
-            '',
-            c.dim('All paid plans include 30-day free trial.'),
-        ];
-    const content = lines.filter((l) => l !== '');
-    console.log('');
-    console.log(box(content.join('\n'), {
-        borderColor: c.sage,
-        title: lang === 'zh-TW' ? '\u9700\u8981\u5347\u7D1A' : 'Upgrade Required',
-    }));
-    console.log('');
+export function showUpgradePrompt(_feature, _lang = 'en') {
+    // All features are free and open source — no upgrade needed
 }
 /**
  * Show a contextual upgrade hint for scan auto-fix.
  * Used after scan results when fixable issues are found.
  */
-export function showScanUpgradeHint(fixableCount, lang = 'en') {
-    const lines = lang === 'zh-TW'
-        ? [
-            `\u767C\u73FE ${fixableCount} \u500B\u53EF\u81EA\u52D5\u4FEE\u5FA9\u7684\u554F\u984C\u3002`,
-            `\u5347\u7D1A\u5230 Solo ($9/\u6708) \u5373\u53EF\u4E00\u9375\u4FEE\u5FA9\uFF1A`,
-            `$ panguard scan --fix`,
-        ]
-        : [
-            `${fixableCount} issue(s) can be auto-fixed.`,
-            `Upgrade to Solo ($9/mo) for one-click fix:`,
-            `$ panguard scan --fix`,
-        ];
-    console.log('');
-    console.log(box(lines.join('\n'), { borderColor: c.sage }));
+export function showScanUpgradeHint(_fixableCount, _lang = 'en') {
+    // All features are free and open source — no upgrade needed
 }
 /**
  * Show a contextual upgrade hint for Guard AI analysis.
  * Used when a suspicious event needs AI analysis.
  */
-export function showGuardAIHint(threatType, confidence, lang = 'en') {
-    console.log('');
-    if (lang === 'zh-TW') {
-        console.log(`  ${c.caution('[?]')} \u5075\u6E2C\u5230\u53EF\u7591\u6D3B\u52D5\uFF08\u4FE1\u5FC3\u5EA6 ${confidence}%\uFF09`);
-        console.log(`      \u985E\u578B: ${threatType}`);
-        console.log('');
-        console.log(c.dim(`      \u9700\u8981 AI \u5206\u6790\u624D\u80FD\u5224\u65B7\u662F\u5426\u70BA\u5A01\u8105\u3002`));
-        console.log(c.dim(`      \u5347\u7D1A\u5230 Solo ($9/\u6708) \u89E3\u9396 AI \u6DF1\u5EA6\u5206\u6790\u3002`));
-    }
-    else {
-        console.log(`  ${c.caution('[?]')} Suspicious activity detected (confidence ${confidence}%)`);
-        console.log(`      Type: ${threatType}`);
-        console.log('');
-        console.log(c.dim(`      AI analysis required to determine if this is a threat.`));
-        console.log(c.dim(`      Upgrade to Solo ($9/mo) for AI-powered analysis.`));
-    }
-    console.log('');
+export function showGuardAIHint(_threatType, _confidence, _lang = 'en') {
+    // All features are free and open source — no upgrade needed
 }
-/* ── Pricing Constants ── */
+/* ── Pricing Constants (deprecated: all features are free) ── */
+/** @deprecated All features are free. Kept for backward compatibility. */
 export const PRICING_TIERS = {
-    community: { price: 0, unit: '', machines: '1' },
-    solo: { price: 9, unit: '/mo', machines: '3' },
-    pro: { price: 29, unit: '/mo', machines: '10' },
-    business: { price: 79, unit: '/mo', machines: '25' },
-};
-export const COMPLIANCE_PRICING = {
-    tw_cyber_security: {
-        price: 299,
-        unit: 'one-time',
-        name: {
-            en: 'TW Cyber Security Act',
-            'zh-TW': '\u8CC7\u5B89\u6CD5\u6E96\u5099\u5EA6\u8A55\u4F30',
-        },
-    },
-    iso27001: {
-        price: 499,
-        unit: 'one-time',
-        name: { en: 'ISO 27001 Readiness', 'zh-TW': 'ISO 27001 \u6E96\u5099\u5EA6\u8A55\u4F30' },
-    },
-    soc2: {
-        price: 699,
-        unit: 'one-time',
-        name: { en: 'SOC 2 Readiness', 'zh-TW': 'SOC 2 \u6E96\u5099\u5EA6\u8A55\u4F30' },
-    },
-    bundle: {
-        price: 999,
-        unit: 'one-time',
-        name: {
-            en: 'Compliance Bundle (All 3)',
-            'zh-TW': '\u5408\u898F\u7D44\u5408\u5305 (3 \u9805\u5168\u542B)',
-        },
-    },
+    community: { price: 0, unit: '', machines: 'unlimited' },
 };
-/** Business subscribers get 50% off additional reports */
-export const BUSINESS_REPORT_DISCOUNT = 0.5;
+/** @deprecated All features are free. Kept for backward compatibility. */
+export const COMPLIANCE_PRICING = {};
+/** All features are free — no discount logic needed */
+export const BUSINESS_REPORT_DISCOUNT = 0;
 //# sourceMappingURL=auth-guard.js.map

package/dist/cli/auth-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-guard.js","sourceRoot":"","sources":["../../src/cli/auth-guard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,IAAI,kBAAkB,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEnH,OAAO,EACL,eAAe,EACf,eAAe,EACf,cAAc,EACd,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAW1B,0DAA0D;AAE1D,MAAM,CAAC,MAAM,YAAY,GAAmC,kBAAkB,CAAC;AAE/E;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,eAA6B,WAAW;IAClE,oEAAoE;IACpE,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAEhC,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACxE,CAAC;IAED,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC;QACnD,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CACtB,YAA0B,EAC1B,OAAsE;IAEtE,OAAO,KAAK,EAAE,OAAU,EAAE,EAAE;QAC1B,kEAAkE;QAClE,4DAA4D;QAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,KAAK,GAAG,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;gBACrF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QAExC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,GAAG,CACD;gBACE,GAAG,OAAO,CAAC,IAAI,qDAAqD;gBACpE,EAAE;gBACF,wBAAwB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,2BAA2B;gBAC3E,SAAS,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,mBAAmB;aACrD,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CACjD,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,GAAG,CACD;gBACE,GAAG,OAAO,CAAC,IAAI,iBAAiB,QAAQ,mBAAmB,QAAQ,gBAAgB;gBACnF,EAAE;gBACF,+BAA+B,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAY,CAAC,IAAI,CAAC,CAAC,EAAE;gBACjF,mBAAmB,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAY,CAAC,IAAI,CAAC,CAAC,EAAE;gBACrE,EAAE;gBACF,8BAA8B,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,EAAE;aAC3E,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAClF,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,WAAY,CAAC,CAAC;IAC7C,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,IAAkB;IAC1C,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAA2B;QACpC,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,OAAO;QACZ,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,OAAO;KACpB,CAAC;IACF,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAE7D,2CAA2C;IAC3C,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,cAAc,EAAE;QACnC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE;QACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;KAClC,CAAC;SACC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,EAAE;QACJ,CAAC,CAAE,GAAG,CAAC,IAAI,EAGN;QACL,CAAC,CAAC,IAAI,CACT;SACA,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACb,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;YAAE,OAAO;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAY,CAAC;QAC/C,MAAM,iBAAiB,GAAI,IAAI,CAAC,IAAI,CAAC,IAAgC,CAAC,eAAe,CAGxE,CAAC;QAEd,2EAA2E;QAC3E,IAAI,UAAU,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,OAAO,CACP,cAAc,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,0DAA0D,CACpG,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,6CAA6C;QAC7C,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YACzF,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,OAAO,CACP,cAAc,eAAe,CAAC,UAAU,CAAC,oBAAoB,QAAQ,UAAU,CAChF,CACF,CAAC;gBACF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,UAAU,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YACpE,eAAe,CAAC;gBACd,GAAG,KAAK;gBACR,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE;QACV,2CAA2C;IAC7C,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,4CAA4C;IAC5C,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,KAAK,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC;IAED,+DAA+D;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAY,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC7D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAY,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,YAAkB;IAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC;IAC9B,OAAO,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC;IAC1D,OAAO,WAAW,CAAC,YAAY,CAAC,CAAC;AACnC,CAAC;AAED,6CAA6C;AAE7C,MAAM,eAAe,GAA2C;IAC9D,IAAI,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAClE,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAClE,MAAM,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,0BAA0B,EAAE;IACxE,IAAI,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,OAAO,EAAE,0BAA0B,EAAE;IACpE,aAAa,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAC3E,MAAM,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE;IACpE,cAAc,EAAE,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAClF,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAClE,IAAI,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,0BAA0B,EAAE;CAClE,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,OAAe,IAAI;IACpE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC;IAClD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,MAAM,WAAW,GACf,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC;IAElF,MAAM,KAAK,GACT,IAAI,KAAK,OAAO;QACd,CAAC,CAAC;YACE,SAAS,WAAW,sBAAsB,QAAQ,eAAe;YACjE,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,MAAM,WAAW,qBAAqB,CAAC,CAAC,CAAC,EAAE;YACjE,EAAE;YACF,8BAA8B,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;YACpD,8BAA8B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAChD,EAAE;YACF,UAAU,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,EAAE;YACtD,UAAU,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,EAAE;YACrD,EAAE;YACF,CAAC,CAAC,GAAG,CACH,oFAAoF,CACrF;SACF;QACH,CAAC,CAAC;YACE,GAAG,WAAW,aAAa,QAAQ,OAAO;YAC1C,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,MAAM,WAAW,aAAa,CAAC,CAAC,CAAC,EAAE;YACzD,EAAE;YACF,cAAc,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;YACpC,cAAc,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAChC,EAAE;YACF,UAAU,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,EAAE;YACtD,UAAU,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,EAAE;YACrD,EAAE;YACF,CAAC,CAAC,GAAG,CAAC,2CAA2C,CAAC;SACnD,CAAC;IAER,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAE9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACtB,WAAW,EAAE,CAAC,CAAC,IAAI;QACnB,KAAK,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,kBAAkB;KAC1E,CAAC,CACH,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoB,EAAE,OAAe,IAAI;IAC3E,MAAM,KAAK,GACT,IAAI,KAAK,OAAO;QACd,CAAC,CAAC;YACE,gBAAgB,YAAY,+DAA+D;YAC3F,gFAAgF;YAChF,uBAAuB;SACxB;QACH,CAAC,CAAC;YACE,GAAG,YAAY,8BAA8B;YAC7C,4CAA4C;YAC5C,uBAAuB;SACxB,CAAC;IACR,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,UAAkB,EAAE,OAAe,IAAI;IACzF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,uEAAuE,UAAU,SAAS,CAChH,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,GAAG,CACH,gGAAgG,CACjG,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,GAAG,CACH,0FAA0F,CAC3F,CACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,6CAA6C,UAAU,IAAI,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,6BAA6B;AAE7B,MAAM,CAAC,MAAM,aAAa,GAAsE;IAC9F,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE;IAChD,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE;IAC9C,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC/C,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;CACrD,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAG3B;IACF,iBAAiB,EAAE;QACjB,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE;YACJ,EAAE,EAAE,uBAAuB;YAC3B,OAAO,EAAE,kDAAkD;SAC5D;KACF;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,0CAA0C,EAAE;KACzF;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,OAAO,EAAE,sCAAsC,EAAE;KACjF;IACD,MAAM,EAAE;QACN,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE;YACJ,EAAE,EAAE,2BAA2B;YAC/B,OAAO,EAAE,uDAAuD;SACjE;KACF;CACF,CAAC;AAEF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC"}
+{"version":3,"file":"auth-guard.js","sourceRoot":"","sources":["../../src/cli/auth-guard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,YAAY,IAAI,kBAAkB,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAErG,OAAO,EACL,eAAe,EACf,cAAc,GACf,MAAM,kBAAkB,CAAC;AAW1B,0DAA0D;AAE1D,MAAM,CAAC,MAAM,YAAY,GAAmC,kBAAkB,CAAC;AAE/E;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,eAA6B,WAAW;IAClE,oEAAoE;IACpE,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAEhC,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACxE,CAAC;IAED,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC;QACnD,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CACtB,YAA0B,EAC1B,OAAsE;IAEtE,OAAO,KAAK,EAAE,OAAU,EAAE,EAAE;QAC1B,qDAAqD;QACrD,2DAA2D;QAC3D,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAsB;YAClC,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,WAAmB;YACzB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACjC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SAC1E,CAAC;QACF,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,IAAkB;IAC1C,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAA2B;QACpC,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,OAAO;QACZ,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,OAAO;KACpB,CAAC;IACF,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,+CAA+C;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU;IACxB,4CAA4C;IAC5C,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,KAAK,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC;IAED,+DAA+D;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAY,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC7D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAY,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,YAAkB;IAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC;IAC9B,OAAO,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,wCAAwC;IACxC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6CAA6C;AAE7C,MAAM,eAAe,GAA2C;IAC9D,IAAI,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAClE,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAClE,MAAM,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,0BAA0B,EAAE;IACxE,IAAI,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,OAAO,EAAE,0BAA0B,EAAE;IACpE,aAAa,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAC3E,MAAM,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE;IACpE,cAAc,EAAE,EAAE,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAClF,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,0BAA0B,EAAE;IAClE,IAAI,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,0BAA0B,EAAE;CAClE,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,QAAgB,IAAI;IACtE,4DAA4D;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,aAAqB,EAAE,QAAgB,IAAI;IAC7E,4DAA4D;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,WAAmB,EAAE,QAAgB,IAAI;IAC5F,4DAA4D;AAC9D,CAAC;AAED,iEAAiE;AAEjE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,aAAa,GAAsE;IAC9F,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE;CACzD,CAAC;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAG3B,EAAE,CAAC;AAEP,uDAAuD;AACvD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC"}

package/dist/cli/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWpC,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,KAAK,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC;AAsc3B,wBAAsB,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAsCzD;AAMD,wBAAgB,aAAa,IAAI,OAAO,CA0DvC"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWpC,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,KAAK,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC;AAkkB3B,wBAAsB,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAsCzD;AAMD,wBAAgB,aAAa,IAAI,OAAO,CA0DvC"}

package/dist/cli/commands/doctor.js

@@ -106,25 +106,31 @@ function checkCredentials() {
     }
 }
 function checkAiProvider() {
-    // Check environment variables
-    const hasOllama = Boolean(process.env['OLLAMA_HOST']);
+    const layers = [];
+    // Check Layer 2: Local AI (Ollama)
+    const hasOllamaEnv = Boolean(process.env['OLLAMA_HOST']);
+    let ollamaInstalled = false;
+    try {
+        const { execFileSync } = require('node:child_process');
+        execFileSync('ollama', ['--version'], { encoding: 'utf-8', timeout: 3000 });
+        ollamaInstalled = true;
+    }
+    catch {
+        // Ollama not available
+    }
+    // Check Layer 3: Cloud AI (API keys)
     const hasOpenAi = Boolean(process.env['OPENAI_API_KEY']);
-    const hasAnthropic = Boolean(process.env['ANTHROPIC_API_KEY']);
-    if (hasOllama || hasOpenAi || hasAnthropic) {
-        const providers = [];
-        if (hasOllama)
-            providers.push('Ollama');
-        if (hasOpenAi)
-            providers.push('OpenAI');
-        if (hasAnthropic)
-            providers.push('Anthropic');
-        return {
-            status: 'pass',
-            label: 'AI provider',
-            detail: `API key set (${providers.join(', ')})`,
-        };
+    const hasAnthropic = Boolean(process.env['ANTHROPIC_API_KEY'] || process.env['PANGUARD_AI_KEY']);
+    if (hasOllamaEnv || ollamaInstalled) {
+        layers.push('Layer 2: Ollama' + (hasOllamaEnv ? ' (env)' : ' (installed)'));
     }
-    // Fall back to config file
+    if (hasOpenAi)
+        layers.push('Layer 3: OpenAI');
+    if (hasAnthropic)
+        layers.push('Layer 3: Anthropic');
+    // Check config file for AI settings
+    let configProvider;
+    let configModel;
     if (existsSync(CONFIG_PATH)) {
         try {
             const raw = readFileSync(CONFIG_PATH, 'utf-8');
@@ -133,26 +139,47 @@ function checkAiProvider() {
                 return {
                     status: 'pass',
                     label: 'AI provider',
-                    detail: 'Rules-only mode (no AI provider required)',
+                    detail: 'Rules-only mode (Layer 1 only, no AI provider required)',
                 };
             }
             if (cfg.ai?.provider) {
-                return {
-                    status: 'pass',
-                    label: 'AI provider',
-                    detail: `Provider configured: ${cfg.ai.provider}`,
-                };
+                configProvider = cfg.ai.provider;
+                configModel = cfg.ai.model;
+                const layerNum = cfg.ai.provider === 'ollama' ? '2' : '3';
+                layers.push(`Layer ${layerNum}: ${cfg.ai.provider} (config)` + (cfg.ai.model ? ` / ${cfg.ai.model}` : ''));
             }
         }
         catch {
-            // fall through to warn
+            // fall through
         }
     }
+    // Also check guard-specific config
+    const guardConfigPath = join(HOME, '.panguard-guard', 'config.json');
+    if (existsSync(guardConfigPath) && !configProvider) {
+        try {
+            const raw = readFileSync(guardConfigPath, 'utf-8');
+            const cfg = JSON.parse(raw);
+            if (cfg.ai?.provider) {
+                const layerNum = cfg.ai.provider === 'ollama' ? '2' : '3';
+                layers.push(`Layer ${layerNum}: ${cfg.ai.provider} (guard config)` + (cfg.ai.model ? ` / ${cfg.ai.model}` : ''));
+            }
+        }
+        catch {
+            // fall through
+        }
+    }
+    if (layers.length > 0) {
+        return {
+            status: 'pass',
+            label: 'AI provider',
+            detail: layers.join(', '),
+        };
+    }
     return {
         status: 'warn',
         label: 'AI provider',
-        detail: 'No AI provider configured',
-        fix: 'Set OPENAI_API_KEY / ANTHROPIC_API_KEY env var, or run "panguard config llm --provider ollama"',
+        detail: 'No AI provider configured (Layer 1 rules-only mode)',
+        fix: 'Run "panguard guard setup-ai" for interactive setup, or set ANTHROPIC_API_KEY / install Ollama',
     };
 }
 function checkGuardEngine() {
@@ -380,12 +407,105 @@ function checkShellCompletions() {
 // ---------------------------------------------------------------------------
 // Run all checks
 // ---------------------------------------------------------------------------
+function checkAiLayerLocal() {
+    // Check if Ollama is installed
+    let ollamaInstalled = false;
+    let ollamaVersion = '';
+    try {
+        const { execFileSync } = require('node:child_process');
+        ollamaVersion = execFileSync('ollama', ['--version'], { encoding: 'utf-8', timeout: 3000 }).trim();
+        ollamaInstalled = true;
+    }
+    catch {
+        // not installed
+    }
+    if (!ollamaInstalled) {
+        return {
+            status: 'warn',
+            label: 'AI Layer 2 (Local)',
+            detail: 'Ollama not installed',
+            fix: 'Install: curl -fsSL https://ollama.com/install.sh | sh && ollama pull llama3.2',
+        };
+    }
+    // Check if any models are pulled
+    try {
+        const { execFileSync } = require('node:child_process');
+        const models = execFileSync('ollama', ['list'], { encoding: 'utf-8', timeout: 5000 }).trim();
+        const modelLines = models.split('\n').slice(1).filter(Boolean);
+        if (modelLines.length === 0) {
+            return {
+                status: 'warn',
+                label: 'AI Layer 2 (Local)',
+                detail: `Ollama installed (${ollamaVersion}) but no models pulled`,
+                fix: 'Pull a model: ollama pull llama3.2',
+            };
+        }
+        const firstModel = modelLines[0]?.split(/\s+/)[0] ?? 'unknown';
+        return {
+            status: 'pass',
+            label: 'AI Layer 2 (Local)',
+            detail: `Ollama ready (${modelLines.length} model${modelLines.length > 1 ? 's' : ''}, e.g. ${firstModel})`,
+        };
+    }
+    catch {
+        return {
+            status: 'warn',
+            label: 'AI Layer 2 (Local)',
+            detail: 'Ollama installed but cannot list models (is it running?)',
+            fix: 'Start Ollama: ollama serve',
+        };
+    }
+}
+function checkAiLayerCloud() {
+    const hasAnthropic = Boolean(process.env['ANTHROPIC_API_KEY'] || process.env['PANGUARD_AI_KEY']);
+    const hasOpenAi = Boolean(process.env['OPENAI_API_KEY']);
+    // Check config files
+    let configCloud = false;
+    let configProvider = '';
+    for (const cfgPath of [CONFIG_PATH, join(HOME, '.panguard-guard', 'config.json')]) {
+        if (existsSync(cfgPath)) {
+            try {
+                const raw = readFileSync(cfgPath, 'utf-8');
+                const cfg = JSON.parse(raw);
+                if (cfg.ai?.provider && cfg.ai.provider !== 'ollama' && cfg.ai?.apiKey) {
+                    configCloud = true;
+                    configProvider = `${cfg.ai.provider}${cfg.ai.model ? ' / ' + cfg.ai.model : ''}`;
+                }
+            }
+            catch {
+                // ignore
+            }
+        }
+    }
+    if (hasAnthropic || hasOpenAi || configCloud) {
+        const sources = [];
+        if (hasAnthropic)
+            sources.push('Anthropic (env)');
+        if (hasOpenAi)
+            sources.push('OpenAI (env)');
+        if (configCloud)
+            sources.push(configProvider + ' (config)');
+        return {
+            status: 'pass',
+            label: 'AI Layer 3 (Cloud)',
+            detail: sources.join(', '),
+        };
+    }
+    return {
+        status: 'warn',
+        label: 'AI Layer 3 (Cloud)',
+        detail: 'No cloud AI API key configured',
+        fix: 'Run "panguard guard setup-ai" or set ANTHROPIC_API_KEY / OPENAI_API_KEY',
+    };
+}
 function runAllChecks() {
     return [
         checkInstallation(),
         checkConfiguration(),
         checkCredentials(),
         checkAiProvider(),
+        checkAiLayerLocal(),
+        checkAiLayerCloud(),
         checkGuardEngine(),
         checkNotificationChannels(),
         checkLastScan(),