@red-codes/agentguard 1.0.0 → 1.1.1

package/dist/colors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"colors.d.ts","sourceRoot":"","sources":["../src/colors.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,KAAK,QAA4B,CAAC;AAC/C,eAAO,MAAM,IAAI,QAA4B,CAAC;AAC9C,eAAO,MAAM,GAAG,QAA4B,CAAC;AAE7C,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAUrC,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAQ9C,CAAC;AAEF,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExC;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGzD"}

package/dist/colors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"colors.js","sourceRoot":"","sources":["../src/colors.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,uDAAuD;AAEvD,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAEtC,MAAM,GAAG,GAAG,OAAO,CAAC;AACpB,MAAM,CAAC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,MAAM,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9C,MAAM,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAE7C,MAAM,CAAC,MAAM,EAAE,GAA2B;IACxC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IACjC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IAC/B,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IACjC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IAClC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IAChC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IACnC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IAChC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IACjC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;CACjC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAA2B;IACjD,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,KAAK;IACd,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,OAAO;IAChB,YAAY,EAAE,SAAS;IACvB,QAAQ,EAAE,KAAK;IACf,EAAE,EAAE,MAAM;CACX,CAAC;AAEF,MAAM,UAAU,KAAK,CAAC,IAAY,EAAE,EAAU;IAC5C,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAY;IAC/B,OAAO,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY;IAC9B,OAAO,GAAG,GAAG,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,KAAa;IAC/C,MAAM,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACjD,CAAC"}

package/dist/commands/adoption.d.ts

@@ -0,0 +1,2 @@
+export declare function adoption(args: string[]): Promise<number>;
+//# sourceMappingURL=adoption.d.ts.map

package/dist/commands/adoption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adoption.d.ts","sourceRoot":"","sources":["../../src/commands/adoption.ts"],"names":[],"mappings":"AA0IA,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgF9D"}

package/dist/commands/adoption.js

@@ -0,0 +1,172 @@
+// CLI command: agentguard adoption — analyze what percentage of agent tool calls go through governance.
+// Reads Claude session JSONL (which logs all tool calls) and cross-references with AgentGuard
+// governance events in SQLite.
+import { readFileSync, readdirSync, statSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { homedir } from 'node:os';
+import { parseArgs } from '../args.js';
+// ---------------------------------------------------------------------------
+// Session auto-detection
+// ---------------------------------------------------------------------------
+/**
+ * Auto-detect the most recent Claude session JSONL file.
+ * Looks in ~/.claude/projects/ directories for .jsonl files.
+ */
+function autoDetectSession() {
+    const claudeDir = join(homedir(), '.claude', 'projects');
+    let bestPath = null;
+    let bestMtime = -1;
+    function scanDir(dir, depth) {
+        if (depth > 3)
+            return;
+        let entries;
+        try {
+            entries = readdirSync(dir);
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const fullPath = join(dir, entry);
+            let stat;
+            try {
+                stat = statSync(fullPath);
+            }
+            catch {
+                continue;
+            }
+            if (stat.isDirectory()) {
+                scanDir(fullPath, depth + 1);
+            }
+            else if (entry.endsWith('.jsonl')) {
+                const mtime = stat.mtimeMs;
+                if (mtime > bestMtime) {
+                    bestMtime = mtime;
+                    bestPath = fullPath;
+                }
+            }
+        }
+    }
+    scanDir(claudeDir, 0);
+    return bestPath;
+}
+// ---------------------------------------------------------------------------
+// Output formatting
+// ---------------------------------------------------------------------------
+const ANSI = {
+    reset: '\x1b[0m',
+    bold: '\x1b[1m',
+    dim: '\x1b[2m',
+    green: '\x1b[32m',
+    yellow: '\x1b[33m',
+    red: '\x1b[31m',
+    cyan: '\x1b[36m',
+};
+function adoptionColor(pct) {
+    if (pct >= 80)
+        return ANSI.green;
+    if (pct >= 50)
+        return ANSI.yellow;
+    return ANSI.red;
+}
+function renderAdoptionReport(result, sessionPath, jsonOutput) {
+    if (jsonOutput) {
+        process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+        return;
+    }
+    const color = adoptionColor(result.adoptionPct);
+    process.stderr.write('\n');
+    process.stderr.write(`  ${ANSI.bold}Adoption Analytics${ANSI.reset}  ${ANSI.dim}(session: ${sessionPath})${ANSI.reset}\n`);
+    process.stderr.write(`  ${ANSI.dim}${'─'.repeat(60)}${ANSI.reset}\n`);
+    process.stderr.write('\n');
+    process.stderr.write(`  ${ANSI.bold}Overall Adoption:${ANSI.reset}  ${color}${result.adoptionPct.toFixed(1)}%${ANSI.reset}\n`);
+    process.stderr.write(`  Total tool calls:   ${result.totalToolCalls}\n` +
+        `  Governed:           ${ANSI.green}${result.governedActions}${ANSI.reset}\n` +
+        `  Ungoverned:         ${result.ungoverned > 0 ? ANSI.red : ANSI.dim}${result.ungoverned}${ANSI.reset}\n`);
+    const toolEntries = Object.entries(result.byTool);
+    if (toolEntries.length > 0) {
+        process.stderr.write('\n');
+        process.stderr.write(`  ${ANSI.bold}Per-Tool Breakdown${ANSI.reset}\n`);
+        process.stderr.write(`  ${ANSI.dim}${'─'.repeat(40)}${ANSI.reset}\n`);
+        const maxToolLen = Math.max(...toolEntries.map(([t]) => t.length));
+        for (const [tool, counts] of toolEntries.sort(([a], [b]) => a.localeCompare(b))) {
+            const toolPct = counts.total > 0 ? (counts.governed / counts.total) * 100 : 0;
+            const tc = adoptionColor(toolPct);
+            process.stderr.write(`  ${tool.padEnd(maxToolLen + 2)} ` +
+                `${tc}${toolPct.toFixed(0).padStart(3)}%${ANSI.reset}` +
+                `  ${ANSI.dim}(${counts.governed}/${counts.total})${ANSI.reset}\n`);
+        }
+    }
+    process.stderr.write('\n');
+    if (result.adoptionPct < 100 && result.ungoverned > 0) {
+        process.stderr.write(`  ${ANSI.dim}Tip: Run ${ANSI.reset}${ANSI.cyan}agentguard auto-setup${ANSI.reset}` +
+            `${ANSI.dim} to configure Claude Code hooks and improve adoption.${ANSI.reset}\n\n`);
+    }
+}
+// ---------------------------------------------------------------------------
+// Public command
+// ---------------------------------------------------------------------------
+export async function adoption(args) {
+    const parsed = parseArgs(args, {
+        boolean: ['--json', '--help', '-h'],
+        string: ['--session', '--store', '--db-path'],
+    });
+    const jsonOutput = parsed.flags['json'] === true;
+    const sessionFlag = parsed.flags['session'];
+    const dbPathFlag = parsed.flags['db-path'];
+    // 1. Resolve session JSONL path
+    const sessionPath = sessionFlag ? resolve(sessionFlag) : autoDetectSession();
+    if (!sessionPath) {
+        process.stderr.write('\n  No Claude session JSONL found.\n' +
+            '  Provide one with: agentguard adoption --session <path>\n' +
+            '  Or ensure ~/.claude/projects/ exists with recorded sessions.\n\n');
+        return 1;
+    }
+    // 2. Parse tool calls from session
+    let lines;
+    try {
+        lines = readFileSync(sessionPath, 'utf8').split('\n');
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`  Error reading session file: ${msg}\n`);
+        return 1;
+    }
+    const { parseSessionToolCalls } = await import('@red-codes/storage');
+    const toolCalls = parseSessionToolCalls(lines);
+    if (toolCalls.length === 0) {
+        process.stderr.write(`\n  No tool_use entries found in session file: ${sessionPath}\n` +
+            '  Ensure the session file contains Claude Code tool call records.\n\n');
+        return 0;
+    }
+    // 3. Load governance events from SQLite
+    const storageConfig = {
+        backend: 'sqlite',
+        dbPath: dbPathFlag ?? process.env['AGENTGUARD_DB_PATH'],
+    };
+    const { createStorageBundle, queryEventsByKindAcrossRuns } = await import('@red-codes/storage');
+    let govEvents = [];
+    try {
+        const storage = await createStorageBundle(storageConfig);
+        if (storage.db) {
+            const db = storage.db;
+            const requested = queryEventsByKindAcrossRuns(db, 'ActionRequested');
+            const allowed = queryEventsByKindAcrossRuns(db, 'ActionAllowed');
+            const denied = queryEventsByKindAcrossRuns(db, 'ActionDenied');
+            govEvents = [...requested, ...allowed, ...denied];
+            storage.close();
+        }
+    }
+    catch {
+        // SQLite not available or no data — continue with empty governance events
+        process.stderr.write('  Note: Could not load governance events from SQLite. Adoption will show 0%.\n' +
+            '  Ensure AgentGuard has recorded governance sessions.\n');
+    }
+    // 4. Correlate
+    const { correlateWithGovernance } = await import('@red-codes/storage');
+    const result = correlateWithGovernance(toolCalls, govEvents);
+    // 5. Display results
+    renderAdoptionReport(result, sessionPath, jsonOutput);
+    return 0;
+}
+//# sourceMappingURL=adoption.js.map

package/dist/commands/adoption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adoption.js","sourceRoot":"","sources":["../../src/commands/adoption.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,8FAA8F;AAC9F,+BAA+B;AAE/B,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGvC,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,iBAAiB;IACxB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAEzD,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IAEnB,SAAS,OAAO,CAAC,GAAW,EAAE,KAAa;QACzC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO;QACtB,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,IAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,OAAO,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC/B,CAAC;iBAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC3B,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;oBACtB,SAAS,GAAG,KAAK,CAAC;oBAClB,QAAQ,GAAG,QAAQ,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACtB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,MAAM,IAAI,GAAG;IACX,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,SAAS;IACd,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,UAAU;IAClB,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,UAAU;CACjB,CAAC;AAEF,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,GAAG,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IACjC,IAAI,GAAG,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IAClC,OAAO,IAAI,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAsD,EACtD,WAAmB,EACnB,UAAmB;IAEnB,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAEhD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,IAAI,qBAAqB,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,GAAG,aAAa,WAAW,IAAI,IAAI,CAAC,KAAK,IAAI,CACrG,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,IAAI,oBAAoB,IAAI,CAAC,KAAK,KAAK,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CACzG,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yBAAyB,MAAM,CAAC,cAAc,IAAI;QAChD,yBAAyB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,KAAK,IAAI;QAC7E,yBAAyB,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,IAAI,CAC5G,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,IAAI,qBAAqB,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAEtE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAEnE,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG;gBACjC,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;gBACtD,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3B,IAAI,MAAM,CAAC,WAAW,GAAG,GAAG,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,CAAC,GAAG,YAAY,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,wBAAwB,IAAI,CAAC,KAAK,EAAE;YACjF,GAAG,IAAI,CAAC,GAAG,wDAAwD,IAAI,CAAC,KAAK,MAAM,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE;QAC7B,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;QACnC,MAAM,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC;KAC9C,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IACjD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAuB,CAAC;IAClE,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAuB,CAAC;IAEjE,gCAAgC;IAChC,MAAM,WAAW,GAAkB,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;IAE5F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC;YACpC,4DAA4D;YAC5D,oEAAoE,CACvE,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,mCAAmC;IACnC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAAC;QAC/D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAE/C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kDAAkD,WAAW,IAAI;YAC/D,uEAAuE,CAC1E,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,wCAAwC;IACxC,MAAM,aAAa,GAAkB;QACnC,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;KACxD,CAAC;IAEF,MAAM,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChG,IAAI,SAAS,GAAqE,EAAE,CAAC;IAErF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,EAAE,GAAG,OAAO,CAAC,EAAuC,CAAC;YAE3D,MAAM,SAAS,GAAG,2BAA2B,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,2BAA2B,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,2BAA2B,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;YAE/D,SAAS,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;YAClD,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gFAAgF;YAC9E,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IAED,eAAe;IACf,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAE7D,qBAAqB;IACrB,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAEtD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/analytics.d.ts

@@ -0,0 +1,3 @@
+import type { StorageConfig } from '@red-codes/storage';
+export declare function analytics(_args: string[], _storageConfig?: StorageConfig): Promise<number>;
+//# sourceMappingURL=analytics.d.ts.map

package/dist/commands/analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../../src/commands/analytics.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,cAAc,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAGhG"}

package/dist/commands/analytics.js

@@ -0,0 +1,7 @@
+// CLI command: agentguard analytics — cross-session violation pattern analysis.
+// Advanced analytics have moved to AgentGuard Cloud.
+export async function analytics(_args, _storageConfig) {
+    console.log('Advanced analytics available in AgentGuard Cloud. Visit https://agentguard.dev');
+    return 0;
+}
+//# sourceMappingURL=analytics.js.map

package/dist/commands/analytics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../src/commands/analytics.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,qDAAqD;AAIrD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAe,EAAE,cAA8B;IAC7E,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;IAC9F,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/audit-verify.d.ts

@@ -0,0 +1,3 @@
+import type { StorageConfig } from '@red-codes/storage';
+export declare function auditVerify(args: string[], storageConfig?: StorageConfig): Promise<number>;
+//# sourceMappingURL=audit-verify.d.ts.map

package/dist/commands/audit-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-verify.d.ts","sourceRoot":"","sources":["../../src/commands/audit-verify.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAyCxD,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,aAAa,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAyDhG"}

package/dist/commands/audit-verify.js

@@ -0,0 +1,94 @@
+// CLI command: agentguard audit-verify — generate enforcement audit report
+// from SQLite decision records.
+import { generateEnforcementAudit, formatEnforcementAudit } from '@red-codes/kernel';
+async function loadDecisionsFromSqlite(runId, storageConfig) {
+    const config = storageConfig ?? { backend: 'sqlite' };
+    const { createStorageBundle } = await import('@red-codes/storage');
+    const storage = await createStorageBundle(config);
+    if (!storage.db)
+        return [];
+    const { loadRunDecisions } = await import('@red-codes/storage');
+    const db = storage.db;
+    const decisions = loadRunDecisions(db, runId);
+    storage.close();
+    return decisions;
+}
+async function listRuns(storageConfig) {
+    const config = storageConfig ?? { backend: 'sqlite' };
+    const { createStorageBundle } = await import('@red-codes/storage');
+    const storage = await createStorageBundle(config);
+    if (!storage.db)
+        return [];
+    const { listRunIds } = await import('@red-codes/storage');
+    const db = storage.db;
+    const runs = listRunIds(db);
+    storage.close();
+    return runs;
+}
+async function getLastRunId(storageConfig) {
+    const config = storageConfig ?? { backend: 'sqlite' };
+    const { createStorageBundle } = await import('@red-codes/storage');
+    const storage = await createStorageBundle(config);
+    if (!storage.db)
+        return null;
+    const { getLatestRunId } = await import('@red-codes/storage');
+    const db = storage.db;
+    const runId = getLatestRunId(db);
+    storage.close();
+    return runId;
+}
+export async function auditVerify(args, storageConfig) {
+    const wantsJson = args.includes('--json');
+    const wantsList = args.includes('--list');
+    const wantsLast = args.includes('--last');
+    // List available runs
+    if (wantsList) {
+        const runs = await listRuns(storageConfig);
+        if (runs.length === 0) {
+            console.log('  No governance runs found.');
+            return 0;
+        }
+        console.log(`\n  Governance runs (${runs.length}):\n`);
+        for (const r of runs.slice(0, 20)) {
+            console.log(`    ${r}`);
+        }
+        console.log('');
+        return 0;
+    }
+    // Resolve run ID
+    let runId = null;
+    if (wantsLast) {
+        runId = await getLastRunId(storageConfig);
+        if (!runId) {
+            console.error('  No governance runs found.');
+            return 1;
+        }
+    }
+    else {
+        // First positional argument that isn't a flag
+        runId = args.find((a) => !a.startsWith('--')) || null;
+        if (!runId) {
+            runId = await getLastRunId(storageConfig);
+            if (!runId) {
+                console.error('  Usage: agentguard audit-verify [runId] [--last] [--json]');
+                return 1;
+            }
+        }
+    }
+    // Load decisions from SQLite
+    const decisions = await loadDecisionsFromSqlite(runId, storageConfig);
+    // Generate enforcement audit report
+    const report = generateEnforcementAudit({
+        runId,
+        decisions,
+        chainVerified: true, // SQLite provides integrity via database constraints
+    });
+    if (wantsJson) {
+        console.log(JSON.stringify(report, null, 2));
+    }
+    else {
+        console.log(formatEnforcementAudit(report));
+    }
+    return 0;
+}
+//# sourceMappingURL=audit-verify.js.map

package/dist/commands/audit-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-verify.js","sourceRoot":"","sources":["../../src/commands/audit-verify.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,gCAAgC;AAEhC,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAIrF,KAAK,UAAU,uBAAuB,CACpC,KAAa,EACb,aAA6B;IAE7B,MAAM,MAAM,GAAG,aAAa,IAAI,EAAE,OAAO,EAAE,QAAiB,EAAE,CAAC;IAC/D,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChE,MAAM,EAAE,GAAG,OAAO,CAAC,EAAuC,CAAC;IAC3D,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,aAA6B;IACnD,MAAM,MAAM,GAAG,aAAa,IAAI,EAAE,OAAO,EAAE,QAAiB,EAAE,CAAC;IAC/D,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,OAAO,CAAC,EAAuC,CAAC;IAC3D,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,aAA6B;IACvD,MAAM,MAAM,GAAG,aAAa,IAAI,EAAE,OAAO,EAAE,QAAiB,EAAE,CAAC;IAC/D,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,OAAO,CAAC,EAAuC,CAAC;IAC3D,MAAM,KAAK,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc,EAAE,aAA6B;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE1C,sBAAsB;IACtB,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC3C,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,MAAM,MAAM,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,iBAAiB;IACjB,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC7C,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;SAAM,CAAC;QACN,8CAA8C;QAC9C,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;QACtD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBAC5E,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAEtE,oCAAoC;IACpC,MAAM,MAAM,GAAG,wBAAwB,CAAC;QACtC,KAAK;QACL,SAAS;QACT,aAAa,EAAE,IAAI,EAAE,qDAAqD;KAC3E,CAAC,CAAC;IAEH,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/auto-setup.d.ts

@@ -0,0 +1,28 @@
+export interface AutoSetupResult {
+    detected: boolean;
+    hooksMissing: boolean;
+    installed: boolean;
+    source: string | null;
+    skipped: string | null;
+}
+/** Check if agentguard is listed in package.json dependencies. */
+export declare function detectAgentGuardDependency(cwd?: string): {
+    found: boolean;
+    source: string | null;
+};
+/** Check if Claude Code environment exists (.claude/ directory). */
+export declare function detectClaudeCodeEnvironment(cwd?: string): boolean;
+/** Check if AgentGuard hooks are already installed in settings.json. */
+export declare function detectExistingHooks(cwd?: string): boolean;
+/**
+ * Auto-detect AgentGuard in the project and configure Claude Code hooks if needed.
+ *
+ * Detection checks (in order):
+ * 1. Is agentguard listed in package.json dependencies?
+ * 2. Does .claude/ directory exist (Claude Code environment)?
+ * 3. Are hooks already installed?
+ *
+ * If agentguard is a dependency and hooks are missing, runs claude-init automatically.
+ */
+export declare function autoSetup(args?: string[]): Promise<AutoSetupResult>;
+//# sourceMappingURL=auto-setup.d.ts.map

package/dist/commands/auto-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-setup.d.ts","sourceRoot":"","sources":["../../src/commands/auto-setup.ts"],"names":[],"mappings":"AA6BA,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,kEAAkE;AAClE,wBAAgB,0BAA0B,CAAC,GAAG,GAAE,MAAsB,GAAG;IACvE,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAsBA;AAED,oEAAoE;AACpE,wBAAgB,2BAA2B,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAEhF;AAED,wEAAwE;AACxE,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAqBxE;AAED;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAAC,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAqG7E"}

package/dist/commands/auto-setup.js

@@ -0,0 +1,146 @@
+// agentguard auto-setup — detect AgentGuard in project and auto-configure Claude Code hooks
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { RESET, BOLD, DIM, FG } from '../colors.js';
+import { claudeInit } from './claude-init.js';
+import { resolveMainRepoRoot } from '@red-codes/core';
+const HOOK_MARKER = 'claude-hook';
+/** Check if agentguard is listed in package.json dependencies. */
+export function detectAgentGuardDependency(cwd = process.cwd()) {
+    const pkgPath = join(cwd, 'package.json');
+    if (!existsSync(pkgPath)) {
+        return { found: false, source: null };
+    }
+    try {
+        const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+        const deps = pkg.dependencies ?? {};
+        const devDeps = pkg.devDependencies ?? {};
+        // Check for published package name or monorepo workspace name
+        const candidates = ['@red-codes/agentguard', 'agentguard'];
+        for (const name of candidates) {
+            if (name in deps)
+                return { found: true, source: `dependencies["${name}"]` };
+            if (name in devDeps)
+                return { found: true, source: `devDependencies["${name}"]` };
+        }
+    }
+    catch {
+        // Corrupt package.json — treat as not found
+    }
+    return { found: false, source: null };
+}
+/** Check if Claude Code environment exists (.claude/ directory). */
+export function detectClaudeCodeEnvironment(cwd = process.cwd()) {
+    return existsSync(join(cwd, '.claude'));
+}
+/** Check if AgentGuard hooks are already installed in settings.json. */
+export function detectExistingHooks(cwd = process.cwd()) {
+    const localPath = join(cwd, '.claude', 'settings.json');
+    const globalPath = join(homedir(), '.claude', 'settings.json');
+    for (const settingsPath of [localPath, globalPath]) {
+        if (existsSync(settingsPath)) {
+            try {
+                const settings = JSON.parse(readFileSync(settingsPath, 'utf8'));
+                const preToolUse = settings?.hooks?.PreToolUse ?? [];
+                const hasHook = preToolUse.some((entry) => {
+                    const hooks = entry.hooks ?? [];
+                    return hooks.some((h) => h.command && h.command.includes(HOOK_MARKER));
+                });
+                if (hasHook)
+                    return true;
+            }
+            catch {
+                // Corrupt settings — treat as no hooks
+            }
+        }
+    }
+    return false;
+}
+/**
+ * Auto-detect AgentGuard in the project and configure Claude Code hooks if needed.
+ *
+ * Detection checks (in order):
+ * 1. Is agentguard listed in package.json dependencies?
+ * 2. Does .claude/ directory exist (Claude Code environment)?
+ * 3. Are hooks already installed?
+ *
+ * If agentguard is a dependency and hooks are missing, runs claude-init automatically.
+ */
+export async function autoSetup(args = []) {
+    const quiet = args.includes('--quiet') || args.includes('-q');
+    const dryRun = args.includes('--dry-run');
+    const cwd = resolveMainRepoRoot();
+    const result = {
+        detected: false,
+        hooksMissing: false,
+        installed: false,
+        source: null,
+        skipped: null,
+    };
+    if (!quiet) {
+        process.stderr.write('\n');
+        process.stderr.write(`  ${BOLD}AgentGuard Auto-Setup${RESET}\n\n`);
+    }
+    // Step 1: Detect agentguard in package.json
+    const dep = detectAgentGuardDependency(cwd);
+    // Also check if we're in the agentguard dev repo (has apps/cli/src/bin.ts)
+    const isDevRepo = existsSync(join(cwd, 'apps', 'cli', 'src', 'bin.ts'));
+    if (!dep.found && !isDevRepo) {
+        result.skipped = 'AgentGuard not found in package.json dependencies';
+        if (!quiet) {
+            process.stderr.write(`  ${FG.yellow}⊘${RESET}  AgentGuard not detected in ${FG.cyan}package.json${RESET}\n`);
+            process.stderr.write(`  ${DIM}Install: npm install --save-dev @red-codes/agentguard${RESET}\n`);
+            process.stderr.write(`  ${DIM}Or run: agentguard claude-init (to configure manually)${RESET}\n\n`);
+        }
+        return result;
+    }
+    result.detected = true;
+    result.source = isDevRepo ? 'agentguard-dev-repo' : dep.source;
+    if (!quiet) {
+        const sourceLabel = isDevRepo ? 'dev repo' : dep.source;
+        process.stderr.write(`  ${FG.green}✓${RESET}  AgentGuard detected ${DIM}(${sourceLabel})${RESET}\n`);
+    }
+    // Step 2: Check if hooks are already installed
+    if (detectExistingHooks(cwd)) {
+        result.hooksMissing = false;
+        result.skipped = 'Hooks already installed';
+        if (!quiet) {
+            process.stderr.write(`  ${FG.green}✓${RESET}  Claude Code hooks already installed\n`);
+            process.stderr.write(`\n  ${DIM}No action needed — governance is active.${RESET}\n\n`);
+        }
+        return result;
+    }
+    result.hooksMissing = true;
+    // Step 3: Check Claude Code environment
+    const hasClaudeDir = detectClaudeCodeEnvironment(cwd);
+    if (!quiet) {
+        if (hasClaudeDir) {
+            process.stderr.write(`  ${FG.green}✓${RESET}  Claude Code environment detected ${DIM}(.claude/)${RESET}\n`);
+        }
+        else {
+            process.stderr.write(`  ${DIM}ℹ${RESET}  .claude/ directory will be created\n`);
+        }
+        process.stderr.write(`  ${FG.yellow}!${RESET}  Hooks not configured — auto-installing...\n\n`);
+    }
+    // Resolve forwarded args before dry-run check so the message reflects actual flags
+    const storeIdx = args.findIndex((a) => a === '--store');
+    const storeBackend = storeIdx !== -1 && args[storeIdx + 1] ? args[storeIdx + 1] : 'sqlite';
+    const dbPathIdx = args.findIndex((a) => a === '--db-path');
+    const forwardArgs = ['--store', storeBackend];
+    if (dbPathIdx !== -1 && args[dbPathIdx + 1]) {
+        forwardArgs.push('--db-path', args[dbPathIdx + 1]);
+    }
+    // Step 4: Auto-install (delegate to claude-init)
+    if (dryRun) {
+        result.skipped = 'Dry run — skipped installation';
+        if (!quiet) {
+            process.stderr.write(`  ${DIM}[dry-run] Would run: agentguard claude-init --store ${storeBackend}${RESET}\n\n`);
+        }
+        return result;
+    }
+    await claudeInit(forwardArgs);
+    result.installed = true;
+    return result;
+}
+//# sourceMappingURL=auto-setup.js.map

package/dist/commands/auto-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-setup.js","sourceRoot":"","sources":["../../src/commands/auto-setup.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAE5F,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,WAAW,GAAG,aAAa,CAAC;AA4BlC,kEAAkE;AAClE,MAAM,UAAU,0BAA0B,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAIpE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAgB,CAAC;QACrE,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;QAE1C,8DAA8D;QAC9D,MAAM,UAAU,GAAG,CAAC,uBAAuB,EAAE,YAAY,CAAC,CAAC;QAC3D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,IAAI,IAAI,IAAI;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,IAAI,IAAI,EAAE,CAAC;YAC5E,IAAI,IAAI,IAAI,OAAO;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,IAAI,IAAI,EAAE,CAAC;QACpF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,2BAA2B,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IACrE,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAE/D,KAAK,MAAM,YAAY,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QACnD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAa,CAAC;gBAC5E,MAAM,UAAU,GAAG,QAAQ,EAAE,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC;gBACrD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;oBACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;oBAChC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;gBACzE,CAAC,CAAC,CAAC;gBACH,IAAI,OAAO;oBAAE,OAAO,IAAI,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAiB,EAAE;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAElC,MAAM,MAAM,GAAoB;QAC9B,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI;KACd,CAAC;IAEF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,wBAAwB,KAAK,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,4CAA4C;IAC5C,MAAM,GAAG,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAE5C,2EAA2E;IAC3E,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAExE,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,OAAO,GAAG,mDAAmD,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,MAAM,IAAI,KAAK,gCAAgC,EAAE,CAAC,IAAI,eAAe,KAAK,IAAI,CACvF,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,wDAAwD,KAAK,IAAI,CAC1E,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,yDAAyD,KAAK,MAAM,CAC7E,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAE/D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,KAAK,IAAI,KAAK,yBAAyB,GAAG,IAAI,WAAW,IAAI,KAAK,IAAI,CAC/E,CAAC;IACJ,CAAC;IAED,+CAA+C;IAC/C,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC;QAC5B,MAAM,CAAC,OAAO,GAAG,yBAAyB,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,KAAK,yCAAyC,CAAC,CAAC;YACtF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,2CAA2C,KAAK,MAAM,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;IAE3B,wCAAwC;IACxC,MAAM,YAAY,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,KAAK,IAAI,KAAK,sCAAsC,GAAG,aAAa,KAAK,IAAI,CACtF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,KAAK,wCAAwC,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,IAAI,KAAK,iDAAiD,CAAC,CAAC;IACjG,CAAC;IAED,mFAAmF;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,QAAQ,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE3F,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAa,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACxD,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5C,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,iDAAiD;IACjD,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,OAAO,GAAG,gCAAgC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,uDAAuD,YAAY,GAAG,KAAK,MAAM,CAC1F,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;IAC9B,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;IAExB,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/commands/ci-check.d.ts

@@ -0,0 +1,13 @@
+import type { StorageConfig } from '@red-codes/storage';
+export interface CiCheckResult {
+    readonly runId: string;
+    readonly totalActions: number;
+    readonly allowed: number;
+    readonly denied: number;
+    readonly violations: number;
+    readonly escalations: number;
+    readonly denialReasons: readonly string[];
+    readonly pass: boolean;
+}
+export declare function ciCheck(args: string[], storageConfig?: StorageConfig): Promise<number>;
+//# sourceMappingURL=ci-check.d.ts.map

package/dist/commands/ci-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-check.d.ts","sourceRoot":"","sources":["../../src/commands/ci-check.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAQxD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAmND,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,aAAa,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAmH5F"}