@sponsio/sdk 0.1.0-alpha.3 → 0.1.0

package/dist/cli/config.js

@@ -0,0 +1,243 @@
+"use strict";
+/**
+ * ``sponsio.yaml`` loader for ``@sponsio/sdk``.
+ *
+ * Parity feature with the Python side's ``sponsio/config.py``.  The
+ * goal is *semantic* parity — same YAML file works for both
+ * scanners, same env-var interpolation rules, same precedence
+ * (CLI flag > YAML > built-in default) — not byte-level parity of
+ * the parsed dataclasses (the TS scanner only needs a narrow slice
+ * of the schema).
+ *
+ * The three things we read:
+ *
+ *   1. ``scan:`` — optional section for TS-scanner-specific
+ *      knobs: patterns, ignore list, output path, provenance
+ *      inclusion.  Lets a repo put all scanner config in one
+ *      file instead of sprinkling CLI flags across workflows.
+ *   2. ``extractor:`` — *passthrough* (not interpreted here).
+ *      We embed it in the output JSON as ``_extractor`` metadata
+ *      so a downstream ``sponsio scan tools.json`` picks up the
+ *      same LLM config without needing ``--config`` a second
+ *      time.  Mirrors the Python ``ExtractorSection``.
+ *   3. ``${ENV_VAR}`` / ``${ENV_VAR:-default}`` — interpolated
+ *      on load with EXACTLY the same regex and semantics as
+ *      Python (see ``_ENV_VAR_RE`` in ``sponsio/config.py``).
+ *
+ * Sections we *don't* parse: contracts, agents, judge, defaults.
+ * Those are Python-runtime concerns; touching them here would
+ * duplicate the Python schema and invite drift.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigError = void 0;
+exports.loadConfig = loadConfig;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const yaml = __importStar(require("js-yaml"));
+class ConfigError extends Error {
+    constructor(message, sourcePath) {
+        super(message);
+        this.sourcePath = sourcePath;
+        this.name = "ConfigError";
+    }
+}
+exports.ConfigError = ConfigError;
+/**
+ * Bash-style: ``${VAR}`` or ``${VAR:-default}``.  We deliberately
+ * do NOT support the bare ``$VAR`` shorthand because YAML strings
+ * routinely contain naked dollar signs (template vars, regex,
+ * currency) and we don't want to accidentally munch those.  Same
+ * regex as Python's ``_ENV_VAR_RE`` — keep them synchronized.
+ */
+const ENV_VAR_RE = /\$\{([A-Za-z_][A-Za-z0-9_]*)(?::-([^}]*))?\}/g;
+/**
+ * Recursively expand ``${VAR}`` / ``${VAR:-default}`` inside the
+ * parsed YAML tree.  Operates on a deep-cloned copy (we could
+ * mutate, but a clone makes the function safe to call on the raw
+ * parse result without surprising the caller if they also hold a
+ * reference).
+ *
+ * @param value Any JSON-serialisable value (string/array/object/primitive).
+ * @param missing Out-param: receives the names of unset-no-default env vars.
+ *                Shared across recursion so one flat list comes back.
+ */
+function interpolateEnv(value, missing) {
+    if (typeof value === "string") {
+        return value.replace(ENV_VAR_RE, (_match, name, def) => {
+            const resolved = process.env[name];
+            if (resolved !== undefined)
+                return resolved;
+            if (def !== undefined)
+                return def;
+            missing.add(name);
+            return "";
+        });
+    }
+    if (Array.isArray(value)) {
+        return value.map((v) => interpolateEnv(v, missing));
+    }
+    if (value !== null && typeof value === "object") {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            out[k] = interpolateEnv(v, missing);
+        }
+        return out;
+    }
+    return value;
+}
+/**
+ * Load and parse ``sponsio.yaml``.
+ *
+ * Design notes:
+ *   * We *don't* validate the full Python schema — only the two
+ *     sections we care about.  Everything else (``contracts``,
+ *     ``agents``, ``judge``) sails through untouched so a
+ *     single file can be authoritative for both Python and TS.
+ *   * Missing file → ``ConfigError`` (not silently-empty config),
+ *     because the user explicitly passed ``--config <path>`` and
+ *     typos are the #1 failure mode.
+ *   * Malformed YAML → ``ConfigError`` with the parser's line/col
+ *     where available (js-yaml's default YAMLException already
+ *     includes this in its ``reason`` field).
+ */
+function loadConfig(configPath) {
+    const abs = path.resolve(configPath);
+    if (!fs.existsSync(abs)) {
+        throw new ConfigError(`sponsio.yaml not found: ${abs}\n` +
+            `  (pass an absolute or cwd-relative path to --config)`, abs);
+    }
+    let raw;
+    try {
+        raw = fs.readFileSync(abs, "utf8");
+    }
+    catch (err) {
+        throw new ConfigError(`cannot read ${abs}: ${err.message}`, abs);
+    }
+    let parsed;
+    try {
+        parsed = yaml.load(raw);
+    }
+    catch (err) {
+        throw new ConfigError(`invalid YAML in ${abs}: ${err.message}`, abs);
+    }
+    if (parsed === null || parsed === undefined) {
+        // Empty file is legal in YAML — treat as no-config-at-all, not
+        // an error.  Users sometimes ``touch sponsio.yaml`` before
+        // filling it in.
+        return {
+            extractor: {},
+            scan: {},
+            missingEnvVars: [],
+            sourcePath: abs,
+        };
+    }
+    if (typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new ConfigError(`top level of ${abs} must be a mapping, got ${typeof parsed}`, abs);
+    }
+    const missing = new Set();
+    const interpolated = interpolateEnv(parsed, missing);
+    return {
+        extractor: normaliseExtractor(interpolated.extractor, abs),
+        scan: normaliseScan(interpolated.scan, abs),
+        missingEnvVars: [...missing].sort(),
+        sourcePath: abs,
+    };
+}
+function normaliseExtractor(raw, source) {
+    if (raw === undefined || raw === null)
+        return {};
+    if (typeof raw !== "object" || Array.isArray(raw)) {
+        throw new ConfigError(`'extractor' must be a mapping in ${source}, got ${Array.isArray(raw) ? "array" : typeof raw}`, source);
+    }
+    const r = raw;
+    const out = {};
+    for (const key of ["provider", "model", "api_key", "base_url"]) {
+        const v = r[key];
+        if (v === undefined || v === null)
+            continue;
+        if (typeof v !== "string") {
+            throw new ConfigError(`'extractor.${key}' must be a string in ${source}, got ${typeof v}`, source);
+        }
+        // Filter empty strings — the interpolator turns unset vars
+        // into ``""`` and emitting ``api_key: ""`` in the output
+        // downstream would look like an explicit blanking rather than
+        // "not set".  Treat empty as absent.
+        if (v !== "")
+            out[key] = v;
+    }
+    return out;
+}
+function normaliseScan(raw, source) {
+    if (raw === undefined || raw === null)
+        return {};
+    if (typeof raw !== "object" || Array.isArray(raw)) {
+        throw new ConfigError(`'scan' must be a mapping in ${source}, got ${Array.isArray(raw) ? "array" : typeof raw}`, source);
+    }
+    const r = raw;
+    const out = {};
+    const asStringArray = (v, key) => {
+        if (!Array.isArray(v)) {
+            throw new ConfigError(`'scan.${key}' must be an array of strings in ${source}`, source);
+        }
+        for (const item of v) {
+            if (typeof item !== "string") {
+                throw new ConfigError(`'scan.${key}' items must be strings in ${source}`, source);
+            }
+        }
+        return v;
+    };
+    if (r.patterns !== undefined)
+        out.patterns = asStringArray(r.patterns, "patterns");
+    if (r.ignore !== undefined)
+        out.ignore = asStringArray(r.ignore, "ignore");
+    if (r.out !== undefined) {
+        if (typeof r.out !== "string") {
+            throw new ConfigError(`'scan.out' must be a string in ${source}`, source);
+        }
+        // Empty string (from an unset ``${OUT_FILE}``) is treated as
+        // unset — same rationale as extractor fields above.
+        if (r.out !== "")
+            out.out = r.out;
+    }
+    if (r.provenance !== undefined) {
+        if (typeof r.provenance !== "boolean") {
+            throw new ConfigError(`'scan.provenance' must be a boolean in ${source}, got ${typeof r.provenance}`, source);
+        }
+        out.provenance = r.provenance;
+    }
+    return out;
+}
+//# sourceMappingURL=config.js.map

package/dist/cli/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/cli/config.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgHH,gCA4DC;AA1KD,uCAAyB;AACzB,2CAA6B;AAC7B,8CAAgC;AA2ChC,MAAa,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe,EAAkB,UAAmB;QAC9D,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,eAAU,GAAV,UAAU,CAAS;QAE9D,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AALD,kCAKC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,+CAA+C,CAAC;AAEnE;;;;;;;;;;GAUG;AACH,SAAS,cAAc,CAAC,KAAc,EAAE,OAAoB;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,GAAY,EAAE,EAAE;YACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAC;YAC5C,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,GAAG,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,UAAU,CAAC,UAAkB;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CACnB,2BAA2B,GAAG,IAAI;YAChC,uDAAuD,EACzD,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,eAAe,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,EAC/C,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,mBAAmB,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,EACnD,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC5C,+DAA+D;QAC/D,2DAA2D;QAC3D,iBAAiB;QACjB,OAAO;YACL,SAAS,EAAE,EAAE;YACb,IAAI,EAAE,EAAE;YACR,cAAc,EAAE,EAAE;YAClB,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,WAAW,CACnB,gBAAgB,GAAG,2BAA2B,OAAO,MAAM,EAAE,EAC7D,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAGlD,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,kBAAkB,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC;QAC1D,IAAI,EAAE,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC;QAC3C,cAAc,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE;QACnC,UAAU,EAAE,GAAG;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAY,EAAE,MAAc;IACtD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACjD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,WAAW,CACnB,oCAAoC,MAAM,SACxC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GACxC,EAAE,EACF,MAAM,CACP,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAU,EAAE,CAAC;QACxE,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,WAAW,CACnB,cAAc,GAAG,yBAAyB,MAAM,SAAS,OAAO,CAAC,EAAE,EACnE,MAAM,CACP,CAAC;QACJ,CAAC;QACD,2DAA2D;QAC3D,yDAAyD;QACzD,8DAA8D;QAC9D,qCAAqC;QACrC,IAAI,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,GAAY,EAAE,MAAc;IACjD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACjD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,WAAW,CACnB,+BAA+B,MAAM,SACnC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GACxC,EAAE,EACF,MAAM,CACP,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,GAAG,GAAgB,EAAE,CAAC;IAE5B,MAAM,aAAa,GAAG,CAAC,CAAU,EAAE,GAAW,EAAY,EAAE;QAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CACnB,SAAS,GAAG,oCAAoC,MAAM,EAAE,EACxD,MAAM,CACP,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,WAAW,CACnB,SAAS,GAAG,8BAA8B,MAAM,EAAE,EAClD,MAAM,CACP,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,CAAa,CAAC;IACvB,CAAC,CAAC;IAEF,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,WAAW,CAAC,kCAAkC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;QACD,6DAA6D;QAC7D,oDAAoD;QACpD,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE;YAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,WAAW,CACnB,0CAA0C,MAAM,SAAS,OAAO,CAAC,CAAC,UAAU,EAAE,EAC9E,MAAM,CACP,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/cli/demo.d.ts

@@ -0,0 +1,12 @@
+/**
+ * ``sponsio demo`` — terminal demo of unsafe agent behavior + Sponsio
+ * blocking it.
+ *
+ * Mirrors the Python ``sponsio demo`` UX in spirit. The Python version
+ * ships four baked-in scenarios; the TS version ships one (``wire``,
+ * the AP-copilot wire-transfer story) inline, and points users at the
+ * full ``ts/examples/bec-backoffice/`` example for a richer scenario
+ * with real Vercel AI SDK + @ai-sdk/anthropic integration.
+ */
+export declare function runDemoCli(argv: string[]): Promise<void>;
+//# sourceMappingURL=demo.d.ts.map

package/dist/cli/demo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo.d.ts","sourceRoot":"","sources":["../../src/cli/demo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAwTH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA6C9D"}

package/dist/cli/demo.js

@@ -0,0 +1,350 @@
+"use strict";
+/**
+ * ``sponsio demo`` — terminal demo of unsafe agent behavior + Sponsio
+ * blocking it.
+ *
+ * Mirrors the Python ``sponsio demo`` UX in spirit. The Python version
+ * ships four baked-in scenarios; the TS version ships one (``wire``,
+ * the AP-copilot wire-transfer story) inline, and points users at the
+ * full ``ts/examples/bec-backoffice/`` example for a richer scenario
+ * with real Vercel AI SDK + @ai-sdk/anthropic integration.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDemoCli = runDemoCli;
+const HELP = "sponsio demo — terminal demo of unsafe agent behavior + the contract that blocks it\n" +
+    "\n" +
+    "USAGE:\n" +
+    "  sponsio demo [options]\n" +
+    "\n" +
+    "OPTIONS:\n" +
+    "      --scenario <name>   Scenario to replay (default: wire)\n" +
+    "                          Built-in: wire\n" +
+    "      --no-guard          Replay without Sponsio (show the unsafe outcome)\n" +
+    "      --list              List available scenarios and exit\n" +
+    "  -h, --help              Show this help\n" +
+    "\n" +
+    "EXAMPLES:\n" +
+    "  sponsio demo                          # blocked-by-default\n" +
+    "  sponsio demo --no-guard               # see the unsafe trajectory\n" +
+    "  sponsio demo --list\n" +
+    "\n" +
+    "For a richer end-to-end demo with real LLM tool-calling, see\n" +
+    "  ts/examples/bec-backoffice/  (Vercel AI SDK + @ai-sdk/anthropic)\n";
+async function loadSdk() {
+    const mod = await Promise.resolve().then(() => __importStar(require("@sponsio/sdk")));
+    return mod;
+}
+const SCENARIOS = {
+    wire: {
+        id: "wire",
+        title: "AP copilot wires $847k to an unverified vendor (OWASP ASI-09)",
+        blurb: "The accounts-payable agent processes a vendor invoice email. The email\n" +
+            "claims the vendor's banking changed; the agent updates the bank record\n" +
+            "and wires the funds — without an out-of-band callback. This is the\n" +
+            "structural shape of a Business Email Compromise attack against agents.",
+        events: [
+            { tool: "list_invoices", args: { quarter: "q2" } },
+            { tool: "read_invoice", args: { id: "inv_044" } },
+            {
+                tool: "check_vendor_history",
+                args: { vendor: "Acme Logistics LLC" },
+                narration: "No prior transactions with this vendor — new bank, new EIN",
+            },
+            {
+                tool: "wire_transfer",
+                args: { to: "Acme Logistics LLC", amount: 847000, invoice_id: "inv_044" },
+                narration: "$847k wired to an unverified vendor with no confirm or compliance sign-off",
+            },
+        ],
+        async build() {
+            const sdk = await loadSdk();
+            const { argValueRange, mustPrecede, mustConfirm, rateLimit } = sdk;
+            const contracts = [
+                argValueRange("wire_transfer", "amount", 0, 50000),
+                mustPrecede("compliance_approve", "wire_transfer"),
+                mustConfirm("wire_transfer"),
+                rateLimit("wire_transfer", 5),
+            ];
+            const descs = contracts.map((c) => c.desc);
+            return { contracts, contractDescs: descs };
+        },
+    },
+    backup: {
+        id: "backup",
+        title: "SRE cost-optimizer deletes prod DR backups (OWASP ASI-10)",
+        blurb: "Under a 'cut storage bill 20%' KPI, an SRE agent deletes off-site\n" +
+            "disaster-recovery snapshots it reads as 'unused'. Three rapid-fire\n" +
+            "deletes wipe out the 90-day DR window. Sponsio blocks the first\n" +
+            "delete via path-scope (only dev/staging allowed) + age-bound (only\n" +
+            "snapshots <= 30 days old).",
+        events: [
+            { tool: "list_snapshots", args: { root: "/snapshots/" } },
+            {
+                tool: "estimate_savings",
+                args: { pattern: "/snapshots/prod/db_2025_11_*.tar.gz" },
+                narration: "Agent decides $3,400/mo can come from the 'unused' prod snapshots",
+            },
+            {
+                tool: "delete_snapshot",
+                args: { path: "/snapshots/prod/db_2025_11_01.tar.gz", age_days: 94 },
+                narration: "Off-site DR backup deleted",
+            },
+            {
+                tool: "delete_snapshot",
+                args: { path: "/snapshots/prod/db_2025_11_08.tar.gz", age_days: 87 },
+                narration: "Second DR backup deleted",
+            },
+            {
+                tool: "delete_snapshot",
+                args: { path: "/snapshots/prod/db_2025_11_15.tar.gz", age_days: 80 },
+                narration: "Third DR backup deleted",
+            },
+            {
+                tool: "generate_report",
+                args: { output_path: "/reports/cost_savings.json" },
+                narration: "Report claims $3,400/mo savings; DR window silently gone",
+            },
+        ],
+        async build() {
+            const sdk = await loadSdk();
+            const { scopeLimit, argValueRange, rateLimit } = sdk;
+            const contracts = [
+                scopeLimit("delete_snapshot", ["/snapshots/dev/", "/snapshots/staging/"]),
+                argValueRange("delete_snapshot", "age_days", 0, 30),
+                rateLimit("delete_snapshot", 5),
+            ];
+            const descs = contracts.map((c) => c.desc);
+            return { contracts, contractDescs: descs };
+        },
+    },
+    cleanup: {
+        id: "cleanup",
+        title: "Coding cleanup agent deletes .env / .git, force-pushes to main",
+        blurb: "A Claude Code-style cleanup agent reads .env contents, then 'cleans\n" +
+            "up' by rm-ing them along with .git/, then force-pushes to main.\n" +
+            "Two arg-blacklist contracts on Bash.command catch the destructive\n" +
+            "commands before the shell sees them.",
+        events: [
+            { tool: "Bash", args: { command: "git status --porcelain" } },
+            {
+                tool: "Bash",
+                args: { command: "cat .env .env.production" },
+                narration: ".env contents loaded into context",
+            },
+            { tool: "Bash", args: { command: "rm -rf node_modules dist .next build" } },
+            {
+                tool: "Bash",
+                args: { command: "rm -f .env .env.local .env.production prod.env" },
+                narration: "secret files deleted",
+            },
+            {
+                tool: "Bash",
+                args: { command: "git push --force origin main" },
+                narration: "force-pushed to main",
+            },
+        ],
+        async build() {
+            const sdk = await loadSdk();
+            const { argBlacklist } = sdk;
+            const contracts = [
+                argBlacklist("Bash", "command", ["rm\\s+.*\\.env", "rm\\s+.*\\.git"]),
+                argBlacklist("Bash", "command", ["git\\s+push\\s+.*--force.*\\b(main|master)\\b"]),
+            ];
+            const descs = contracts.map((c) => c.desc);
+            return { contracts, contractDescs: descs };
+        },
+    },
+    freeze: {
+        id: "freeze",
+        title: "Coding agent violates code freeze, drops prod tables, hides damage",
+        blurb: "Replays the July 2025 Replit incident: agent receives a 'code freeze'\n" +
+            "instruction, then drops a prod table and fabricates replacement rows\n" +
+            "from memory. The TS port lands two of the canonical contracts: the\n" +
+            "'no destructive SQL' arg blacklist on execute_sql.query, and the\n" +
+            "must_precede(escalate_to_human, generate_status_report) gate that\n" +
+            "stops the silent status report after destructive ops.",
+        events: [
+            {
+                tool: "user_instruction",
+                args: { text: "Code freeze for the next 48h — please don't touch the prod DB" },
+                narration: "Operator declares the freeze",
+            },
+            { tool: "edit_react_component", args: { file: "src/Header.tsx" } },
+            {
+                tool: "execute_sql",
+                args: { query: "DROP TABLE archived_events" },
+                narration: "Agent 'cleans up' an archived table",
+            },
+            {
+                tool: "execute_sql",
+                args: { query: "DELETE FROM users WHERE last_login < NOW() - INTERVAL '90 days'" },
+                narration: "Mass DELETE on prod users",
+            },
+            {
+                tool: "execute_sql",
+                args: { query: "INSERT INTO users (email, name) VALUES ('[email protected]', 'Test User')" },
+                narration: "Fabricates rows to refill the table",
+            },
+            {
+                tool: "generate_status_report",
+                args: { content: "Database intact. No issues." },
+                narration: "Status report hides the damage",
+            },
+        ],
+        async build() {
+            const sdk = await loadSdk();
+            const { argBlacklist, mustPrecede } = sdk;
+            const contracts = [
+                argBlacklist("execute_sql", "query", ["\\b(DROP|DELETE|TRUNCATE|ALTER)\\b"]),
+                mustPrecede("escalate_to_human", "generate_status_report"),
+            ];
+            const descs = contracts.map((c) => c.desc);
+            return { contracts, contractDescs: descs };
+        },
+    },
+};
+function decorate(label) {
+    switch (label) {
+        case "blocked":
+            return `\x1b[31mBLOCKED\x1b[0m`;
+        case "would-block":
+            return `\x1b[33mWOULD-BLOCK\x1b[0m`;
+        case "allowed":
+            return `\x1b[32mallowed\x1b[0m`;
+    }
+}
+async function buildGuard(scenario, contracts) {
+    const mod = await Promise.resolve().then(() => __importStar(require("@sponsio/sdk")));
+    const Sponsio = mod.Sponsio;
+    if (!Sponsio)
+        throw new Error("[demo] @sponsio/sdk does not export Sponsio");
+    return new Sponsio({
+        agentId: scenario.id,
+        contracts,
+        mode: "enforce",
+        sessionLog: false,
+    });
+}
+async function runScenario(scenario, guarded) {
+    const built = await scenario.build();
+    process.stdout.write(`\n╔═ ${scenario.title}\n║\n`);
+    for (const line of scenario.blurb.split("\n"))
+        process.stdout.write(`║  ${line}\n`);
+    process.stdout.write(`║\n║  Contracts armed:\n`);
+    for (const d of built.contractDescs) {
+        process.stdout.write(`║    • ${d.split("\n")[0]}\n`);
+    }
+    process.stdout.write(`║\n║  Mode: ${guarded ? "guarded (Sponsio enforce)" : "no-guard (raw replay)"}\n`);
+    process.stdout.write(`╚═\n\n`);
+    const guard = guarded ? await buildGuard(scenario, built.contracts) : null;
+    let blockedAt = -1;
+    for (let i = 0; i < scenario.events.length; i++) {
+        const ev = scenario.events[i];
+        process.stdout.write(`  ${String(i + 1).padStart(2)}. ${ev.tool}${ev.args ? "(" + JSON.stringify(ev.args) + ")" : "()"}\n`);
+        if (ev.narration)
+            process.stdout.write(`      ${ev.narration}\n`);
+        if (guard) {
+            const r = guard.guardBefore(ev.tool, ev.args ?? {});
+            if (r.blocked) {
+                const desc = (r.violatedDescs ?? [])[0] ?? r.detViolations?.[0]?.desc ?? "(no desc)";
+                process.stdout.write(`      ${decorate("blocked")}: ${desc}\n`);
+                blockedAt = i;
+                break;
+            }
+            else {
+                process.stdout.write(`      ${decorate("allowed")}\n`);
+            }
+        }
+    }
+    process.stdout.write(`\n`);
+    if (guarded) {
+        if (blockedAt >= 0) {
+            process.stdout.write(`✓ Sponsio blocked the trajectory at step ${blockedAt + 1}.\n`);
+        }
+        else {
+            process.stdout.write(`(no contract fired — scenario contracts may need tuning)\n`);
+        }
+    }
+    else {
+        process.stdout.write(`Trajectory completed unguarded. The full attack would have succeeded.\n`);
+    }
+    process.stdout.write(`\nFor a richer end-to-end demo with real Anthropic tool-calling, see:\n` +
+        `  ts/examples/bec-backoffice/\n`);
+}
+async function runDemoCli(argv) {
+    let scenarioId = "wire";
+    let noGuard = false;
+    let listOnly = false;
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === "-h" || a === "--help") {
+            process.stdout.write(HELP);
+            return;
+        }
+        if (a === "--scenario") {
+            scenarioId = argv[++i];
+            continue;
+        }
+        if (a === "--no-guard") {
+            noGuard = true;
+            continue;
+        }
+        if (a === "--list") {
+            listOnly = true;
+            continue;
+        }
+        if (a.startsWith("-")) {
+            process.stderr.write(`unknown flag: ${a}\n${HELP}`);
+            process.exit(2);
+        }
+        process.stderr.write(`unexpected positional: ${a}\n${HELP}`);
+        process.exit(2);
+    }
+    if (listOnly) {
+        process.stdout.write("Available scenarios:\n");
+        for (const s of Object.values(SCENARIOS)) {
+            process.stdout.write(`  ${s.id.padEnd(8)} ${s.title}\n`);
+        }
+        return;
+    }
+    const scenario = SCENARIOS[scenarioId];
+    if (!scenario) {
+        process.stderr.write(`Error: unknown scenario '${scenarioId}'. Try --list.\n`);
+        process.exit(2);
+    }
+    await runScenario(scenario, !noGuard);
+}
+//# sourceMappingURL=demo.js.map

package/dist/cli/demo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo.js","sourceRoot":"","sources":["../../src/cli/demo.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwTH,gCA6CC;AAnWD,MAAM,IAAI,GACR,uFAAuF;IACvF,IAAI;IACJ,UAAU;IACV,4BAA4B;IAC5B,IAAI;IACJ,YAAY;IACZ,gEAAgE;IAChE,4CAA4C;IAC5C,8EAA8E;IAC9E,+DAA+D;IAC/D,4CAA4C;IAC5C,IAAI;IACJ,aAAa;IACb,gEAAgE;IAChE,uEAAuE;IACvE,yBAAyB;IACzB,IAAI;IACJ,gEAAgE;IAChE,sEAAsE,CAAC;AA2BzE,KAAK,UAAU,OAAO;IACpB,MAAM,GAAG,GAAG,wDAAa,cAAc,GAAC,CAAC;IACzC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,SAAS,GAA6B;IAC1C,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,+DAA+D;QACtE,KAAK,EACH,0EAA0E;YAC1E,0EAA0E;YAC1E,sEAAsE;YACtE,wEAAwE;QAC1E,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAClD,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE;YACjD;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE;gBACtC,SAAS,EAAE,4DAA4D;aACxE;YACD;gBACE,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE;gBACzE,SAAS,EAAE,4EAA4E;aACxF;SACF;QACD,KAAK,CAAC,KAAK;YACT,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;YAC5B,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,GAK9D,CAAC;YACF,MAAM,SAAS,GAAG;gBAChB,aAAa,CAAC,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,CAAC;gBAClD,WAAW,CAAC,oBAAoB,EAAE,eAAe,CAAC;gBAClD,WAAW,CAAC,eAAe,CAAC;gBAC5B,SAAS,CAAC,eAAe,EAAE,CAAC,CAAC;aAC9B,CAAC;YACF,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAsB,CAAC,IAAI,CAAC,CAAC;YACjE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC;KACF;IACD,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,2DAA2D;QAClE,KAAK,EACH,qEAAqE;YACrE,sEAAsE;YACtE,mEAAmE;YACnE,sEAAsE;YACtE,4BAA4B;QAC9B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;YACzD;gBACE,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE;gBACxD,SAAS,EAAE,mEAAmE;aAC/E;YACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,EAAE,IAAI,EAAE,sCAAsC,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACpE,SAAS,EAAE,4BAA4B;aACxC;YACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,EAAE,IAAI,EAAE,sCAAsC,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACpE,SAAS,EAAE,0BAA0B;aACtC;YACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,EAAE,IAAI,EAAE,sCAAsC,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACpE,SAAS,EAAE,yBAAyB;aACrC;YACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,EAAE,WAAW,EAAE,4BAA4B,EAAE;gBACnD,SAAS,EAAE,0DAA0D;aACtE;SACF;QACD,KAAK,CAAC,KAAK;YACT,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;YAC5B,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,GAIhD,CAAC;YACF,MAAM,SAAS,GAAG;gBAChB,UAAU,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;gBACzE,aAAa,CAAC,iBAAiB,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;gBACnD,SAAS,CAAC,iBAAiB,EAAE,CAAC,CAAC;aAChC,CAAC;YACF,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAsB,CAAC,IAAI,CAAC,CAAC;YACjE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC;KACF;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,gEAAgE;QACvE,KAAK,EACH,uEAAuE;YACvE,mEAAmE;YACnE,qEAAqE;YACrE,sCAAsC;QACxC,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE;YAC7D;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE;gBAC7C,SAAS,EAAE,mCAAmC;aAC/C;YACD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAAE;YAC3E;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE;gBACnE,SAAS,EAAE,sBAAsB;aAClC;YACD;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,EAAE,OAAO,EAAE,8BAA8B,EAAE;gBACjD,SAAS,EAAE,sBAAsB;aAClC;SACF;QACD,KAAK,CAAC,KAAK;YACT,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;YAC5B,MAAM,EAAE,YAAY,EAAE,GAAG,GAExB,CAAC;YACF,MAAM,SAAS,GAAG;gBAChB,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;gBACrE,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,+CAA+C,CAAC,CAAC;aACnF,CAAC;YACF,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAsB,CAAC,IAAI,CAAC,CAAC;YACjE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC;KACF;IACD,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,oEAAoE;QAC3E,KAAK,EACH,yEAAyE;YACzE,wEAAwE;YACxE,sEAAsE;YACtE,oEAAoE;YACpE,qEAAqE;YACrE,uDAAuD;QACzD,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,+DAA+D,EAAE;gBAC/E,SAAS,EAAE,8BAA8B;aAC1C;YACD,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE;YAClE;gBACE,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE;gBAC7C,SAAS,EAAE,qCAAqC;aACjD;YACD;gBACE,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,EAAE,KAAK,EAAE,iEAAiE,EAAE;gBAClF,SAAS,EAAE,2BAA2B;aACvC;YACD;gBACE,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,EAAE,KAAK,EAAE,2EAA2E,EAAE;gBAC5F,SAAS,EAAE,qCAAqC;aACjD;YACD;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,IAAI,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE;gBAChD,SAAS,EAAE,gCAAgC;aAC5C;SACF;QACD,KAAK,CAAC,KAAK;YACT,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;YAC5B,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,GAGrC,CAAC;YACF,MAAM,SAAS,GAAG;gBAChB,YAAY,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC,oCAAoC,CAAC,CAAC;gBAC5E,WAAW,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;aAC3D,CAAC;YACF,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAsB,CAAC,IAAI,CAAC,CAAC;YACjE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC;KACF;CACF,CAAC;AAEF,SAAS,QAAQ,CAAC,KAA4C;IAC5D,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,wBAAwB,CAAC;QAClC,KAAK,aAAa;YAChB,OAAO,4BAA4B,CAAC;QACtC,KAAK,SAAS;YACZ,OAAO,wBAAwB,CAAC;IACpC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAkB,EAAE,SAA0B;IACtE,MAAM,GAAG,GAAG,wDAAa,cAAc,GAAC,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC7E,OAAO,IAAK,OAAuD,CAAC;QAClE,OAAO,EAAE,QAAQ,CAAC,EAAE;QACpB,SAAS;QACT,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAkB,EAAE,OAAgB;IAC7D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAErC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,QAAQ,CAAC,KAAK,OAAO,CAAC,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;IACpF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,uBAAuB,IAAI,CAAC,CAAC;IACzG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE/B,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAC5H,IAAI,EAAE,CAAC,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC;QAClE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,IAAI,GACR,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,WAAW,CAAC;gBAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,QAAQ,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;gBAChE,SAAS,GAAG,CAAC,CAAC;gBACd,MAAM;YACR,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,SAAS,GAAG,CAAC,KAAK,CAAC,CAAC;QACvF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yEAAyE;QACvE,iCAAiC,CACpC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,IAAI,UAAU,GAAG,MAAM,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,YAAY,EAAE,CAAC;YACvB,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,YAAY,EAAE,CAAC;YACvB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnB,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,UAAU,kBAAkB,CAAC,CAAC;QAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC"}

package/dist/cli/doctor.d.ts

@@ -0,0 +1,11 @@
+/**
+ * ``sponsio doctor`` — pre-flight env + config sanity check.
+ *
+ * Parity with Python's ``sponsio doctor``, tuned to the TS runtime:
+ * verifies node version, the ``yaml`` peer dep, the session log dir,
+ * ``SPONSIO_MODE`` value, and (if ``sponsio.yaml`` is present in CWD)
+ * that it parses cleanly. Exits non-zero when any check fails so CI
+ * can gate on it.
+ */
+export declare function runDoctorCli(argv: string[]): Promise<void>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/cli/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA+KH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BhE"}