@red-codes/agentguard 1.0.0 → 1.1.2

package/dist/commands/ci-check.js

@@ -0,0 +1,286 @@
+// CLI command: agentguard ci-check — CI governance verification.
+//
+// Reads an exported governance session (or the most recent local run),
+// summarises governance outcomes, and exits with code 1 when violations
+// or denials exceed the configured threshold. Designed for CI pipelines.
+// Supports both JSONL (default) and SQLite storage backends.
+import { readFileSync, existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { execSync } from 'node:child_process';
+import { parseArgs } from '../args.js';
+import { loadReplaySession, getLatestRunId, buildReplaySession } from '@red-codes/kernel';
+import { aggregateEvents, formatEvidenceMarkdown } from '../evidence-summary.js';
+// ---------------------------------------------------------------------------
+// Session Loading
+// ---------------------------------------------------------------------------
+/**
+ * Load a replay session from an exported `.agentguard.jsonl` file.
+ * Parses the header, extracts events, and builds a ReplaySession.
+ */
+function loadSessionFromExport(filePath) {
+    const content = readFileSync(filePath, 'utf8');
+    const lines = content.split('\n').filter((l) => l.trim());
+    if (lines.length === 0)
+        return null;
+    let header;
+    try {
+        header = JSON.parse(lines[0]);
+    }
+    catch {
+        return null;
+    }
+    if (header.__agentguard_export !== true || header.version !== 1) {
+        return null;
+    }
+    const eventLines = lines.slice(1, 1 + header.eventCount);
+    const events = [];
+    for (const line of eventLines) {
+        try {
+            events.push(JSON.parse(line));
+        }
+        catch {
+            // Skip malformed lines
+        }
+    }
+    if (events.length === 0)
+        return null;
+    return buildReplaySession(header.runId, events);
+}
+/**
+ * Load the most recent replay session from SQLite.
+ */
+async function loadLatestSessionSqlite(storageConfig) {
+    const { createStorageBundle } = await import('@red-codes/storage');
+    const { getLatestRunId: getLatestRunIdSqlite, loadRunEvents } = await import('@red-codes/storage');
+    const storage = await createStorageBundle(storageConfig);
+    if (!storage.db) {
+        process.stderr.write('  Error: SQLite storage backend did not initialize database.\n');
+        return null;
+    }
+    const db = storage.db;
+    const runId = getLatestRunIdSqlite(db);
+    if (!runId) {
+        storage.close();
+        return null;
+    }
+    const events = loadRunEvents(db, runId);
+    storage.close();
+    if (events.length === 0)
+        return null;
+    return buildReplaySession(runId, events);
+}
+// ---------------------------------------------------------------------------
+// Core Logic
+// ---------------------------------------------------------------------------
+function evaluateSession(session, options) {
+    const { summary } = session;
+    let pass = true;
+    if (options.failOnDenial && summary.denied > 0) {
+        pass = false;
+    }
+    if (options.failOnViolation && summary.violations > 0) {
+        pass = false;
+    }
+    return {
+        runId: session.runId,
+        totalActions: summary.totalActions,
+        allowed: summary.allowed,
+        denied: summary.denied,
+        violations: summary.violations,
+        escalations: summary.escalations,
+        denialReasons: summary.denialReasons,
+        pass,
+    };
+}
+// ---------------------------------------------------------------------------
+// Output Formatting
+// ---------------------------------------------------------------------------
+function formatTerminal(result) {
+    const icon = result.pass ? '\x1b[32m\u2713\x1b[0m' : '\x1b[31m\u2717\x1b[0m';
+    const verdict = result.pass ? '\x1b[32mPASS\x1b[0m' : '\x1b[31mFAIL\x1b[0m';
+    const lines = [];
+    lines.push('');
+    lines.push(`  ${icon} Governance CI Check — ${verdict}`);
+    lines.push(`  Run: ${result.runId}`);
+    lines.push('');
+    lines.push(`  Actions:     ${result.totalActions}`);
+    lines.push(`  Allowed:     ${result.allowed}`);
+    lines.push(`  Denied:      ${result.denied}`);
+    lines.push(`  Violations:  ${result.violations}`);
+    lines.push(`  Escalations: ${result.escalations}`);
+    if (result.denialReasons.length > 0) {
+        lines.push('');
+        lines.push('  Denial reasons:');
+        for (const reason of result.denialReasons) {
+            lines.push(`    - ${reason}`);
+        }
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+function formatGitHubAnnotation(result) {
+    const lines = [];
+    if (!result.pass) {
+        const reasons = result.denialReasons.join('; ');
+        lines.push(`::error title=Governance Check Failed::${result.denied} action(s) denied, ${result.violations} violation(s). ${reasons}`);
+    }
+    // Always output summary as a notice
+    lines.push(`::notice title=Governance Summary::Actions: ${result.totalActions} | Allowed: ${result.allowed} | Denied: ${result.denied} | Violations: ${result.violations} | Escalations: ${result.escalations}`);
+    return lines.join('\n');
+}
+// ---------------------------------------------------------------------------
+// Evidence Posting
+// ---------------------------------------------------------------------------
+const COMMENT_MARKER = '<!-- agentguard-evidence-report -->';
+function detectPrNumber() {
+    try {
+        const result = execSync('gh pr view --json number --jq .number 2>/dev/null', {
+            encoding: 'utf8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        return result || null;
+    }
+    catch {
+        return null;
+    }
+}
+function postEvidenceComment(prNumber, markdown) {
+    const body = `${COMMENT_MARKER}\n${markdown}`;
+    // Delete any existing evidence comments
+    try {
+        const commentsJson = execSync(`gh pr view ${prNumber} --json comments --jq '.comments[] | select(.body | startswith("${COMMENT_MARKER}")) | .id'`, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+        if (commentsJson) {
+            const commentIds = commentsJson.split('\n').filter((id) => /^\d+$/.test(id));
+            for (const id of commentIds) {
+                try {
+                    execSync(`gh api repos/{owner}/{repo}/issues/comments/${id} -X DELETE`, {
+                        stdio: ['pipe', 'pipe', 'pipe'],
+                    });
+                }
+                catch {
+                    // Ignore delete failures
+                }
+            }
+        }
+    }
+    catch {
+        // No existing comments
+    }
+    try {
+        execSync(`gh pr comment ${prNumber} --body -`, {
+            input: body,
+            encoding: 'utf8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// ---------------------------------------------------------------------------
+// CLI Entry Point
+// ---------------------------------------------------------------------------
+export async function ciCheck(args, storageConfig) {
+    const parsed = parseArgs(args, {
+        boolean: ['--fail-on-violation', '--fail-on-denial', '--json', '--last', '--post-evidence'],
+        string: ['--base-dir', '--pr', '--artifact-url'],
+        alias: { '-d': '--base-dir', '-n': '--pr' },
+    });
+    const failOnViolation = !!parsed.flags['fail-on-violation'];
+    const failOnDenial = !!parsed.flags['fail-on-denial'];
+    const jsonOutput = !!parsed.flags.json;
+    const useLast = !!parsed.flags.last;
+    const postEvidence = !!parsed.flags['post-evidence'];
+    const baseDir = parsed.flags['base-dir'] || '.agentguard';
+    const prNumberFlag = parsed.flags.pr || null;
+    const artifactUrl = parsed.flags['artifact-url'] || undefined;
+    const sessionFile = parsed.positional[0];
+    const isGitHubActions = !!process.env.GITHUB_ACTIONS;
+    const useSqlite = storageConfig?.backend === 'sqlite';
+    // Resolve the session
+    let session = null;
+    if (sessionFile) {
+        // Session file is always JSONL format (portable export)
+        const resolvedPath = resolve(sessionFile);
+        if (!existsSync(resolvedPath)) {
+            process.stderr.write(`\n  \x1b[31mError:\x1b[0m Session file not found: ${resolvedPath}\n\n`);
+            return 1;
+        }
+        session = loadSessionFromExport(resolvedPath);
+        if (!session) {
+            process.stderr.write(`\n  \x1b[31mError:\x1b[0m Could not parse session file: ${resolvedPath}\n\n`);
+            return 1;
+        }
+    }
+    else if (useLast) {
+        if (useSqlite) {
+            session = await loadLatestSessionSqlite(storageConfig);
+        }
+        else {
+            const runId = getLatestRunId(baseDir);
+            if (!runId) {
+                process.stderr.write('\n  \x1b[31mError:\x1b[0m No governance runs found.\n\n');
+                return 1;
+            }
+            session = loadReplaySession(runId, { baseDir });
+        }
+        if (!session) {
+            process.stderr.write('\n  \x1b[31mError:\x1b[0m Could not load the most recent run.\n\n');
+            return 1;
+        }
+    }
+    else {
+        process.stderr.write('\n  Usage: agentguard ci-check <session-file> [flags]\n');
+        process.stderr.write('         agentguard ci-check --last [flags]\n\n');
+        process.stderr.write('  Flags:\n');
+        process.stderr.write('    --fail-on-violation      Exit 1 if invariant violations found\n');
+        process.stderr.write('    --fail-on-denial         Exit 1 if any actions were denied\n');
+        process.stderr.write('    --json                   Output as JSON\n');
+        process.stderr.write('    --last                   Use the most recent local run\n');
+        process.stderr.write('    --post-evidence          Post evidence report as PR comment\n');
+        process.stderr.write('    --pr, -n <number>        Target PR number (auto-detected if omitted)\n');
+        process.stderr.write('    --artifact-url <url>     Link to full session artifact\n');
+        process.stderr.write('    --base-dir, -d <dir>     Base directory for events\n');
+        process.stderr.write('    --store <backend>        Storage backend (sqlite)\n\n');
+        return 1;
+    }
+    // Evaluate
+    const result = evaluateSession(session, { failOnViolation, failOnDenial });
+    // Output
+    if (jsonOutput) {
+        process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+    }
+    else {
+        process.stderr.write(formatTerminal(result));
+    }
+    // GitHub Actions annotations
+    if (isGitHubActions) {
+        process.stdout.write(formatGitHubAnnotation(result) + '\n');
+    }
+    // Post evidence report to PR
+    if (postEvidence) {
+        const prNumber = prNumberFlag || detectPrNumber();
+        if (!prNumber) {
+            process.stderr.write('\n  \x1b[33mWarning:\x1b[0m --post-evidence: could not determine PR number. ' +
+                'Use --pr <number> or run from a branch with an open PR.\n\n');
+        }
+        else if (!/^\d+$/.test(prNumber)) {
+            process.stderr.write('\n  \x1b[33mWarning:\x1b[0m --post-evidence: PR number must be numeric.\n\n');
+        }
+        else {
+            const evidenceSummary = aggregateEvents([...session.events]);
+            const markdownOptions = { artifactUrl };
+            const markdown = formatEvidenceMarkdown(evidenceSummary, markdownOptions);
+            const posted = postEvidenceComment(prNumber, markdown);
+            if (posted) {
+                process.stderr.write(`  \x1b[32m\u2713\x1b[0m Evidence report posted to PR #${prNumber}\n\n`);
+            }
+            else {
+                process.stderr.write(`\n  \x1b[33mWarning:\x1b[0m Failed to post evidence report to PR #${prNumber}.\n\n`);
+            }
+        }
+    }
+    return result.pass ? 0 : 1;
+}
+//# sourceMappingURL=ci-check.js.map

package/dist/commands/ci-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-check.js","sourceRoot":"","sources":["../../src/commands/ci-check.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,6DAA6D;AAE7D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAK1F,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAkBjF,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAE1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAA2B,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,CAAC,mBAAmB,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,OAAO,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,uBAAuB,CACpC,aAA4B;IAE5B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACnE,MAAM,EAAE,cAAc,EAAE,oBAAoB,EAAE,aAAa,EAAE,GAC3D,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAErC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,EAAuC,CAAC;IAE3D,MAAM,KAAK,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACxC,OAAO,CAAC,KAAK,EAAE,CAAC;IAEhB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,SAAS,eAAe,CACtB,OAAsB,EACtB,OAA4D;IAE5D,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAE5B,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACtD,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IAED,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,IAAI;KACL,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,cAAc,CAAC,MAAqB;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAE5E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,0BAA0B,OAAO,EAAE,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAEnD,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAqB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CACR,0CAA0C,MAAM,CAAC,MAAM,sBAAsB,MAAM,CAAC,UAAU,kBAAkB,OAAO,EAAE,CAC1H,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,KAAK,CAAC,IAAI,CACR,+CAA+C,MAAM,CAAC,YAAY,eAAe,MAAM,CAAC,OAAO,cAAc,MAAM,CAAC,MAAM,kBAAkB,MAAM,CAAC,UAAU,mBAAmB,MAAM,CAAC,WAAW,EAAE,CACrM,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAE7D,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,mDAAmD,EAAE;YAC3E,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB,EAAE,QAAgB;IAC7D,MAAM,IAAI,GAAG,GAAG,cAAc,KAAK,QAAQ,EAAE,CAAC;IAE9C,wCAAwC;IACxC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,QAAQ,CAC3B,cAAc,QAAQ,mEAAmE,cAAc,YAAY,EACnH,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACtD,CAAC,IAAI,EAAE,CAAC;QAET,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7E,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,QAAQ,CAAC,+CAA+C,EAAE,YAAY,EAAE;wBACtE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;qBAChC,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;IAED,IAAI,CAAC;QACH,QAAQ,CAAC,iBAAiB,QAAQ,WAAW,EAAE;YAC7C,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAc,EAAE,aAA6B;IACzE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE;QAC7B,OAAO,EAAE,CAAC,qBAAqB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC;QAC3F,MAAM,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,gBAAgB,CAAC;QAChD,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE;KAC5C,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACpC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACrD,MAAM,OAAO,GAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAY,IAAI,aAAa,CAAC;IACtE,MAAM,YAAY,GAAI,MAAM,CAAC,KAAK,CAAC,EAAa,IAAI,IAAI,CAAC;IACzD,MAAM,WAAW,GAAI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAY,IAAI,SAAS,CAAC;IAC1E,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,eAAe,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAErD,MAAM,SAAS,GAAG,aAAa,EAAE,OAAO,KAAK,QAAQ,CAAC;IAEtD,sBAAsB;IACtB,IAAI,OAAO,GAAyB,IAAI,CAAC;IAEzC,IAAI,WAAW,EAAE,CAAC;QAChB,wDAAwD;QACxD,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,YAAY,MAAM,CAAC,CAAC;YAC9F,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2DAA2D,YAAY,MAAM,CAC9E,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,EAAE,CAAC;QACnB,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,GAAG,MAAM,uBAAuB,CAAC,aAAa,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;gBAChF,OAAO,CAAC,CAAC;YACX,CAAC;YACD,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YAC1F,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;QAC5F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;QAC1F,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4EAA4E,CAC7E,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,WAAW;IACX,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC;IAE3E,SAAS;IACT,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,6BAA6B;IAC7B,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED,6BAA6B;IAC7B,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,YAAY,IAAI,cAAc,EAAE,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8EAA8E;gBAC5E,6DAA6D,CAChE,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6EAA6E,CAC9E,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,eAAe,GAAG,eAAe,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7D,MAAM,eAAe,GAA4B,EAAE,WAAW,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACvD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yDAAyD,QAAQ,MAAM,CACxE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qEAAqE,QAAQ,OAAO,CACrF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC"}

package/dist/commands/claude-hook.d.ts

@@ -0,0 +1,2 @@
+export declare function claudeHook(hookType?: string, extraArgs?: string[]): Promise<void>;
+//# sourceMappingURL=claude-hook.d.ts.map

package/dist/commands/claude-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-hook.d.ts","sourceRoot":"","sources":["../../src/commands/claude-hook.ts"],"names":[],"mappings":"AAwBA,wBAAsB,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA6C3F"}

package/dist/commands/claude-hook.js

@@ -0,0 +1,254 @@
+// AgentGuard Claude Code hook — PreToolUse governance + PostToolUse error monitoring + Notification session viewer.
+// PreToolUse: routes actions through the kernel for policy/invariant enforcement.
+// PostToolUse: reports Bash stderr errors (informational only).
+// Notification: auto-opens the session viewer when the agent pauses for human input.
+// Stop: generates session viewer HTML (no browser open — Notification handles that).
+// Always exits 0 — hooks must never fail.
+// Supports both JSONL (default) and SQLite storage backends via --store flag or AGENTGUARD_STORE env var.
+import { randomUUID } from 'node:crypto';
+import { execSync, spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { resolveMainRepoRoot } from '@red-codes/core';
+/** Resolve the CLI command — use local bin.js if in the agentguard dev repo, else bare `agentguard`. */
+function resolveCliCommand() {
+    const mainRoot = resolveMainRepoRoot();
+    const localBin = join(mainRoot, 'apps', 'cli', 'dist', 'bin.js');
+    if (existsSync(localBin))
+        return `node ${localBin}`;
+    return 'agentguard';
+}
+export async function claudeHook(hookType, extraArgs = []) {
+    try {
+        // Stop hook has no stdin payload — generates session viewer HTML quietly (no browser open)
+        if (hookType === 'stop') {
+            await handleStop(extraArgs);
+            process.exit(0);
+            return;
+        }
+        // Notification hook — fires when the agent pauses for human input.
+        // Auto-opens the session viewer in the browser so the user can review governance decisions.
+        if (hookType === 'notify') {
+            await handleNotification(extraArgs);
+            process.exit(0);
+            return;
+        }
+        const input = await readStdin();
+        if (!input)
+            process.exit(0);
+        let data;
+        try {
+            data = JSON.parse(input);
+        }
+        catch {
+            process.exit(0);
+            return;
+        }
+        // Determine hook type: explicit CLI arg > payload field > inference from tool_output
+        const isPreToolUse = hookType === 'pre' || data.hook === 'PreToolUse' || (!hookType && !data.tool_output);
+        if (isPreToolUse) {
+            // Resolve session_id: payload field > environment variable > undefined
+            const sessionId = data.session_id || process.env.CLAUDE_SESSION_ID || undefined;
+            const payload = { ...data, session_id: sessionId };
+            await handlePreToolUse(payload, extraArgs);
+        }
+        else {
+            handlePostToolUse(data, extraArgs);
+        }
+    }
+    catch {
+        // Swallow all errors — hooks must never fail
+    }
+    process.exit(0);
+}
+async function handlePreToolUse(payload, cliArgs) {
+    const { processClaudeCodeHook, formatHookResponse } = await import('@red-codes/adapters');
+    const { createKernel } = await import('@red-codes/kernel');
+    const { loadPolicyDefs } = await import('../policy-resolver.js');
+    const { resolveStorageConfig, createStorageBundle } = await import('@red-codes/storage');
+    // Ensure hook field is set
+    const normalizedPayload = {
+        ...payload,
+        hook: 'PreToolUse',
+    };
+    // Load policy (fail-open: empty policy if none found)
+    let policyDefs = [];
+    try {
+        policyDefs = loadPolicyDefs();
+    }
+    catch (policyErr) {
+        // Policy loading failure is non-fatal — continue with no policy (allow all)
+        process.stderr.write(`agentguard: warning — no policy loaded (${policyErr instanceof Error ? policyErr.message : 'unknown error'}). All actions will be allowed.\n`);
+    }
+    // Generate run ID
+    const runId = `hook_${Date.now()}_${randomUUID().replace(/-/g, '').slice(0, 8)}`;
+    // Resolve storage backend from CLI args (e.g. --store sqlite) or AGENTGUARD_STORE env var
+    const storageConfig = resolveStorageConfig(cliArgs);
+    let storage = null;
+    let eventSink;
+    let decisionSink;
+    try {
+        storage = await createStorageBundle(storageConfig);
+        eventSink = storage.createEventSink(runId);
+        decisionSink = storage.createDecisionSink(runId);
+    }
+    catch {
+        // Sink creation failure is non-fatal
+    }
+    // Build kernel — dryRun: true = evaluate policies/invariants only (no adapter execution).
+    // Claude Code handles actual tool execution; the hook only governs (allow/deny).
+    // Events and decision records are still emitted and persisted to the configured storage backend.
+    const kernel = createKernel({
+        runId,
+        policyDefs,
+        dryRun: true,
+        evaluateOptions: { defaultDeny: false },
+        sinks: eventSink ? [eventSink] : [],
+        decisionSinks: [decisionSink].filter(Boolean),
+    });
+    // Record session in the sessions table (SQLite only).
+    // Uses session_id from Claude Code so multiple hook invocations share one session row.
+    const sessionKey = normalizedPayload.session_id || runId;
+    if (storage?.sessions) {
+        storage.sessions.start(sessionKey, 'claude-hook', {
+            storageBackend: storageConfig.backend,
+        });
+    }
+    // Resolve agent persona from environment variables.
+    // Persona enriches telemetry and enables persona-based policy conditions.
+    const { personaFromEnv: readPersonaFromEnv, resolvePersona } = await import('@red-codes/core');
+    const envPersona = readPersonaFromEnv();
+    const resolvedPersona = envPersona ? resolvePersona(undefined, envPersona) : undefined;
+    const result = await processClaudeCodeHook(kernel, normalizedPayload, {}, resolvedPersona);
+    kernel.shutdown();
+    // Close storage (important for SQLite to flush WAL)
+    if (storage) {
+        try {
+            storage.close();
+        }
+        catch {
+            // Non-fatal
+        }
+    }
+    // If denied, output to stdout — this tells Claude Code to block the action
+    if (!result.allowed) {
+        const response = formatHookResponse(result);
+        if (response) {
+            process.stdout.write(response);
+        }
+    }
+}
+function handlePostToolUse(data, cliArgs = []) {
+    if (data.tool_name !== 'Bash')
+        return;
+    const output = (data.tool_output || {});
+    const exitCode = (output.exit_code ?? output.exitCode ?? 0);
+    const stderr = (output.stderr || '');
+    const stdout = (output.stdout || '');
+    if (exitCode !== 0 && stderr.trim()) {
+        process.stdout.write('\n');
+        process.stdout.write(`  \x1b[1m\x1b[31mError detected:\x1b[0m ${stderr.trim().split('\n')[0].slice(0, 80)}\n`);
+        process.stdout.write('\n');
+    }
+    // Track rtk-optimized commands (informational — for session viewer visibility)
+    const toolInput = (data.tool_input || data.command || '');
+    if (toolInput.startsWith('rtk ') || toolInput.includes('/rtk ')) {
+        process.stderr.write(`  \x1b[36m\u26A1\x1b[0m rtk: token-optimized output\n`);
+    }
+    // Detect PR creation — suggest opening the session viewer
+    const isPrCreate = toolInput.includes('gh pr create') || toolInput.includes('gh pr merge');
+    if (isPrCreate && exitCode === 0 && stdout.trim()) {
+        generateSessionViewerQuietly(cliArgs);
+    }
+}
+function generateSessionViewerQuietly(cliArgs) {
+    try {
+        const storeFlagIdx = cliArgs.indexOf('--store');
+        const storeFlag = storeFlagIdx !== -1 ? ` --store ${cliArgs[storeFlagIdx + 1]}` : '';
+        const dbPathIdx = cliArgs.indexOf('--db-path');
+        const dbPathFlag = dbPathIdx !== -1 ? ` --db-path "${cliArgs[dbPathIdx + 1]}"` : '';
+        const cli = resolveCliCommand();
+        execSync(`${cli} session-viewer --last --no-open${storeFlag}${dbPathFlag}`, {
+            stdio: 'ignore',
+            timeout: 10000,
+        });
+        process.stderr.write('\n  \x1b[36m\u2139\x1b[0m  PR detected — session viewer generated. Run \x1b[1magentguard session-viewer --last\x1b[0m to open.\n\n');
+    }
+    catch {
+        // Non-fatal — viewer generation is best-effort
+    }
+}
+async function handleNotification(cliArgs) {
+    // Agent paused for human input — open the session viewer in the browser.
+    // If a live server is already running, skip — the live page polls for new data.
+    // Otherwise, spawn a detached live server process so events stream in without hard refresh.
+    try {
+        const { detectLiveServer } = await import('./session-viewer.js');
+        if (detectLiveServer() !== null) {
+            return;
+        }
+        // Spawn the live server as a detached process so the hook can exit immediately.
+        // The live server stays running and the browser page polls it for updates.
+        const cli = resolveCliCommand();
+        const storeFlagIdx = cliArgs.indexOf('--store');
+        const storeFlag = storeFlagIdx !== -1 ? ['--store', cliArgs[storeFlagIdx + 1]] : [];
+        const dbPathIdx = cliArgs.indexOf('--db-path');
+        const dbPathFlag = dbPathIdx !== -1 ? ['--db-path', cliArgs[dbPathIdx + 1]] : [];
+        const cliParts = cli.split(' ');
+        const cmd = cliParts[0];
+        const baseArgs = [
+            ...cliParts.slice(1),
+            'session-viewer',
+            '--last',
+            '--live',
+            ...storeFlag,
+            ...dbPathFlag,
+        ];
+        const child = spawn(cmd, baseArgs, {
+            detached: true,
+            stdio: 'ignore',
+        });
+        child.unref();
+    }
+    catch {
+        // Non-fatal — viewer generation is best-effort
+    }
+}
+async function handleStop(cliArgs) {
+    // On session end, generate the session viewer HTML quietly (no browser open).
+    // If a live server is running, skip — it already has the latest data.
+    try {
+        const { detectLiveServer, sessionViewer } = await import('./session-viewer.js');
+        if (detectLiveServer() !== null) {
+            return;
+        }
+        const { resolveStorageConfig } = await import('@red-codes/storage');
+        const storageConfig = resolveStorageConfig(cliArgs);
+        await sessionViewer(['--last', '--no-open', ...cliArgs], storageConfig);
+    }
+    catch {
+        // Non-fatal — viewer generation is best-effort
+    }
+}
+function readStdin() {
+    return new Promise((resolve) => {
+        let input = '';
+        process.stdin.setEncoding('utf8');
+        process.stdin.on('data', (chunk) => {
+            input += chunk;
+        });
+        process.stdin.on('end', () => resolve(input));
+        process.stdin.on('error', () => resolve(''));
+        if (process.stdin.isTTY)
+            resolve('');
+    });
+}
+// Entry point: when run directly via `node claude-hook.js pre|post`, invoke claudeHook().
+// Without this, the file only exports the function and nothing executes.
+if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {
+    const hookArg = process.argv[2]; // 'pre' or 'post'
+    const extra = process.argv.slice(3); // e.g., ['--store', 'sqlite']
+    claudeHook(hookArg, extra);
+}
+//# sourceMappingURL=claude-hook.js.map

package/dist/commands/claude-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-hook.js","sourceRoot":"","sources":["../../src/commands/claude-hook.ts"],"names":[],"mappings":"AAAA,oHAAoH;AACpH,kFAAkF;AAClF,gEAAgE;AAChE,qFAAqF;AACrF,qFAAqF;AACrF,0CAA0C;AAC1C,0GAA0G;AAE1G,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,wGAAwG;AACxG,SAAS,iBAAiB;IACxB,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjE,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,QAAQ,EAAE,CAAC;IACpD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAiB,EAAE,YAAsB,EAAE;IAC1E,IAAI,CAAC;QACH,2FAA2F;QAC3F,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QAED,mEAAmE;QACnE,4FAA4F;QAC5F,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAA4B,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QAED,qFAAqF;QACrF,MAAM,YAAY,GAChB,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEvF,IAAI,YAAY,EAAE,CAAC;YACjB,uEAAuE;YACvE,MAAM,SAAS,GACZ,IAAI,CAAC,UAAiC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS,CAAC;YACxF,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,SAAS,EAAsC,CAAC;YACvF,MAAM,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAA8B,EAAE,OAAiB;IAC/E,MAAM,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC1F,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC3D,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IACjE,MAAM,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAEzF,2BAA2B;IAC3B,MAAM,iBAAiB,GAA0B;QAC/C,GAAG,OAAO;QACV,IAAI,EAAE,YAAY;KACnB,CAAC;IAEF,sDAAsD;IACtD,IAAI,UAAU,GAAc,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,UAAU,GAAG,cAAc,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,SAAS,EAAE,CAAC;QACnB,4EAA4E;QAC5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2CAA2C,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,mCAAmC,CAC/I,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,MAAM,KAAK,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAEjF,0FAA0F;IAC1F,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,OAAO,GAA2D,IAAI,CAAC;IAC3E,IAAI,SAA0D,CAAC;IAC/D,IAAI,YAAgE,CAAC;IAErE,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACnD,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC3C,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IAED,0FAA0F;IAC1F,iFAAiF;IACjF,iGAAiG;IACjG,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,KAAK;QACL,UAAU;QACV,MAAM,EAAE,IAAI;QACZ,eAAe,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;QACvC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;QACnC,aAAa,EAAE,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAA6C;KAC1F,CAAC,CAAC;IAEH,sDAAsD;IACtD,uFAAuF;IACvF,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAU,IAAI,KAAK,CAAC;IACzD,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,aAAa,EAAE;YAChD,cAAc,EAAE,aAAa,CAAC,OAAO;SACtC,CAAC,CAAC;IACL,CAAC;IAED,oDAAoD;IACpD,0EAA0E;IAC1E,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;IACxC,MAAM,eAAe,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;IAC3F,MAAM,CAAC,QAAQ,EAAE,CAAC;IAElB,oDAAoD;IACpD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAA6B,EAAE,UAAoB,EAAE;IAC9E,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO;IAEtC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAA4B,CAAC;IACnE,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAW,CAAC;IACtE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAW,CAAC;IAC/C,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAW,CAAC;IAE/C,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2CAA2C,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CACzF,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,+EAA+E;IAC/E,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,CAAW,CAAC;IACpE,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAChF,CAAC;IAED,0DAA0D;IAC1D,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC3F,IAAI,UAAU,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,OAAiB;IACrD,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;QAChC,QAAQ,CAAC,GAAG,GAAG,mCAAmC,SAAS,GAAG,UAAU,EAAE,EAAE;YAC1E,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oIAAoI,CACrI,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAiB;IACjD,yEAAyE;IACzE,gFAAgF;IAChF,4FAA4F;IAC5F,IAAI,CAAC;QACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACjE,IAAI,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,gFAAgF;QAChF,2EAA2E;QAC3E,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEjF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,QAAQ,GAAG;YACf,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YACpB,gBAAgB;YAChB,QAAQ;YACR,QAAQ;YACR,GAAG,SAAS;YACZ,GAAG,UAAU;SACd,CAAC;QAEF,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE;YACjC,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAiB;IACzC,8EAA8E;IAC9E,sEAAsE;IACtE,IAAI,CAAC;QACH,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAChF,IAAI,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QACD,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,aAAa,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,EAAE,aAAa,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,KAAK,IAAI,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0FAA0F;AAC1F,yEAAyE;AACzE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B;IACnE,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC"}

package/dist/commands/claude-init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-init.d.ts","sourceRoot":"","sources":["../../src/commands/claude-init.ts"],"names":[],"mappings":"AA2CA,wBAAsB,UAAU,CAAC,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAyNnE"}