@sponsio/sdk 0.1.0-alpha.3 → 0.2.0-alpha.10

package/dist/cli/check.js

@@ -0,0 +1,283 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runCheckCli = runCheckCli;
+/**
+ * ``sponsio check`` — replay a trace file through the SDK and report
+ * which contracts would have blocked.
+ *
+ * Mirrors the Python ``sponsio check`` command. Loads a trace from
+ * disk, builds a ``Sponsio`` guard from inline NL contracts or a
+ * sponsio.yaml config, replays each event through ``guardBefore``,
+ * and prints a per-contract pass/fail summary.
+ *
+ * Supported trace formats (sniffed from content, like Python):
+ *   - Native single-file JSON: ``{"events": [{"action": "...", "args": {...}}, ...]}``
+ *   - Native event JSONL: one ``{"action": "...", "args": {...}}`` per line
+ *   - Session-log JSONL: one MonitorEvent per line (decisions, not raw
+ *     events — used to extract the underlying tool calls)
+ *
+ * OTLP/JSON is not yet supported; pipe through Python's
+ * ``sponsio export`` if you have OTLP traces.
+ */
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const yaml = __importStar(require("js-yaml"));
+const otlp_1 = require("./otlp");
+const HELP = "sponsio check — replay a trace file through the engine, report violations\n" +
+    "\n" +
+    "USAGE:\n" +
+    "  sponsio check --trace <file> [contracts...] [options]\n" +
+    "\n" +
+    "OPTIONS:\n" +
+    "  -t, --trace <file>     Trace file (.json or .jsonl) — required\n" +
+    "  -c, --config <file>    sponsio.yaml; loads contracts + agent id\n" +
+    "  -a, --agent <id>       Agent id (with --config); defaults to single-agent\n" +
+    "      --json             Output as JSON\n" +
+    "  -h, --help             Show this help\n" +
+    "\n" +
+    "Pass either positional NL contract strings or --config, not both.\n" +
+    "\n" +
+    "EXAMPLES:\n" +
+    "  sponsio check -t trace.json \"tool `A` must precede `B`\"\n" +
+    "  sponsio check -t run.jsonl --config sponsio.yaml --agent bot\n" +
+    "  sponsio check -t trace.json --config sponsio.yaml --json\n";
+function sniffEvents(text, path) {
+    const trimmed = text.trimStart();
+    if (trimmed.startsWith("{")) {
+        let data;
+        try {
+            data = JSON.parse(text);
+        }
+        catch (e) {
+            throw new Error(`[check] cannot parse ${path} as JSON: ${e.message}`);
+        }
+        if ((0, otlp_1.isOtlpPayload)(data)) {
+            return (0, otlp_1.extractOtlpEvents)(data);
+        }
+        if (data && typeof data === "object" && Array.isArray(data.events)) {
+            return (data.events).map(coerceEvent).filter(Boolean);
+        }
+        throw new Error(`[check] ${path}: expected {"events": [...]} or {"resourceSpans": [...]}`);
+    }
+    if (trimmed.startsWith("[")) {
+        let data;
+        try {
+            data = JSON.parse(text);
+        }
+        catch (e) {
+            throw new Error(`[check] cannot parse ${path} as JSON array: ${e.message}`);
+        }
+        if (!Array.isArray(data))
+            throw new Error(`[check] ${path}: expected JSON array`);
+        return data.map(coerceEvent).filter(Boolean);
+    }
+    // JSONL
+    const out = [];
+    for (const line of text.split(/\r?\n/)) {
+        if (!line.trim())
+            continue;
+        try {
+            const obj = JSON.parse(line);
+            const ev = coerceEvent(obj);
+            if (ev)
+                out.push(ev);
+        }
+        catch {
+            // skip malformed line
+        }
+    }
+    return out;
+}
+function coerceEvent(raw) {
+    if (!raw || typeof raw !== "object")
+        return null;
+    const r = raw;
+    // Session-log shape: pipeline + result + action — extract tool from action.
+    // Native shape: action: <tool>, args: {...}
+    // ToolEvent (TS SDK) shape: tool: <name>, args: {...}
+    const tool = r.tool ?? r.action;
+    if (typeof tool !== "string")
+        return null;
+    const args = r.args ?? {};
+    return { tool, args };
+}
+async function loadGuard(opts) {
+    // Lazy require so the scanner CLI works even when @sponsio/sdk isn't
+    // installed in the user's project for non-check commands.
+    const mod = await Promise.resolve().then(() => __importStar(require("@sponsio/sdk")));
+    const Sponsio = mod.Sponsio;
+    if (!Sponsio)
+        throw new Error("[check] @sponsio/sdk does not export Sponsio — upgrade the SDK.");
+    const ctorOpts = {
+        mode: "enforce",
+        sessionLog: false,
+    };
+    if (opts.configPath) {
+        const cfgAbs = (0, node_path_1.resolve)(opts.configPath);
+        ctorOpts.config = cfgAbs;
+        if (opts.agentId) {
+            ctorOpts.agentId = opts.agentId;
+        }
+        else {
+            // Auto-select when the yaml has exactly one agent — matches the
+            // Python `sponsio check` UX. Falls back to the SDK's default
+            // ("agent") if the yaml is missing or malformed.
+            try {
+                const data = yaml.load((0, node_fs_1.readFileSync)(cfgAbs, "utf-8"));
+                const agents = data?.agents;
+                const ids = agents ? Object.keys(agents) : [];
+                if (ids.length === 1)
+                    ctorOpts.agentId = ids[0];
+            }
+            catch {
+                // ignore — let the SDK ctor surface the real error
+            }
+        }
+    }
+    else {
+        ctorOpts.agentId = "check";
+        ctorOpts.contracts = opts.inline;
+    }
+    const guard = new Sponsio(ctorOpts);
+    return { guard, contractDescs: guard.contractDescs() };
+}
+async function runCheckCli(argv) {
+    let tracePath;
+    let configPath;
+    let agentId;
+    let asJson = false;
+    const inline = [];
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === "-h" || a === "--help") {
+            process.stdout.write(HELP);
+            return;
+        }
+        if (a === "-t" || a === "--trace") {
+            tracePath = argv[++i];
+            continue;
+        }
+        if (a === "-c" || a === "--config") {
+            configPath = argv[++i];
+            continue;
+        }
+        if (a === "-a" || a === "--agent") {
+            agentId = argv[++i];
+            continue;
+        }
+        if (a === "--json") {
+            asJson = true;
+            continue;
+        }
+        if (a.startsWith("-")) {
+            process.stderr.write(`unknown flag: ${a}\n${HELP}`);
+            process.exit(2);
+        }
+        inline.push(a);
+    }
+    if (!tracePath) {
+        process.stderr.write(`Error: --trace is required\n\n${HELP}`);
+        process.exit(2);
+    }
+    if (configPath && inline.length > 0) {
+        process.stderr.write(`Error: cannot use both --config and positional contracts\n`);
+        process.exit(2);
+    }
+    if (!configPath && inline.length === 0) {
+        process.stderr.write(`Error: pass --config or at least one positional contract\n\n${HELP}`);
+        process.exit(2);
+    }
+    if (agentId && !configPath) {
+        process.stderr.write(`Error: --agent requires --config\n`);
+        process.exit(2);
+    }
+    if (!(0, node_fs_1.existsSync)((0, node_path_1.resolve)(tracePath))) {
+        process.stderr.write(`Error: trace file ${tracePath} does not exist\n`);
+        process.exit(1);
+    }
+    const text = (0, node_fs_1.readFileSync)((0, node_path_1.resolve)(tracePath), "utf-8");
+    const events = sniffEvents(text, tracePath);
+    if (events.length === 0) {
+        process.stderr.write(`Warning: trace is empty (no events extracted)\n`);
+        process.exit(0);
+    }
+    const { guard, contractDescs } = await loadGuard({ inline, configPath, agentId });
+    const stats = new Map();
+    for (const d of contractDescs)
+        stats.set(d, { desc: d, blockedCount: 0 });
+    let totalBlocks = 0;
+    for (let i = 0; i < events.length; i++) {
+        const ev = events[i];
+        const r = guard.guardBefore(ev.tool, ev.args ?? {});
+        if (r.blocked) {
+            totalBlocks++;
+            const descs = (r.violatedDescs ?? r.detViolations?.map((v) => v.desc) ?? []);
+            for (const d of descs) {
+                const s = stats.get(d) ?? { desc: d, blockedCount: 0 };
+                if (s.blockedCount === 0)
+                    s.firstBlockAt = i;
+                s.blockedCount += 1;
+                stats.set(d, s);
+            }
+        }
+    }
+    if (asJson) {
+        process.stdout.write(JSON.stringify({
+            trace: tracePath,
+            events: events.length,
+            totalBlocks,
+            perContract: Array.from(stats.values()),
+        }, null, 2) + "\n");
+        return;
+    }
+    process.stdout.write(`Trace:    ${tracePath}\n`);
+    process.stdout.write(`Events:   ${events.length}\n`);
+    process.stdout.write(`Contracts: ${contractDescs.length}\n`);
+    process.stdout.write(`Blocks:   ${totalBlocks}\n\n`);
+    if (stats.size === 0) {
+        process.stdout.write("(no contracts compiled)\n");
+        return;
+    }
+    process.stdout.write(`Per-contract:\n`);
+    for (const s of stats.values()) {
+        const tag = s.blockedCount === 0 ? "\x1b[32mPASS\x1b[0m" : "\x1b[31mFAIL\x1b[0m";
+        process.stdout.write(`  ${tag}  ${s.desc.split("\n")[0]}\n`);
+        if (s.blockedCount > 0) {
+            process.stdout.write(`        first block at event #${s.firstBlockAt}, total ${s.blockedCount}\n`);
+        }
+    }
+}
+//# sourceMappingURL=check.js.map

package/dist/cli/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/cli/check.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6JA,kCAoHC;AAjRD;;;;;;;;;;;;;;;;;GAiBG;AACH,qCAAmD;AACnD,yCAAoC;AACpC,8CAAgC;AAChC,iCAA0D;AAE1D,MAAM,IAAI,GACR,6EAA6E;IAC7E,IAAI;IACJ,UAAU;IACV,2DAA2D;IAC3D,IAAI;IACJ,YAAY;IACZ,oEAAoE;IACpE,qEAAqE;IACrE,+EAA+E;IAC/E,2CAA2C;IAC3C,2CAA2C;IAC3C,IAAI;IACJ,qEAAqE;IACrE,IAAI;IACJ,aAAa;IACb,+DAA+D;IAC/D,kEAAkE;IAClE,8DAA8D,CAAC;AAejE,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,aAAc,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,IAAA,oBAAa,EAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,IAAA,wBAAiB,EAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAE,IAA6B,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7F,OAAO,CAAE,IAA8B,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAe,CAAC;QACjG,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,0DAA0D,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,mBAAoB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,uBAAuB,CAAC,CAAC;QAClF,OAAQ,IAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAe,CAAC;IAC5E,CAAC;IACD,QAAQ;IACR,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,4EAA4E;IAC5E,4CAA4C;IAC5C,sDAAsD;IACtD,MAAM,IAAI,GAAI,CAAC,CAAC,IAAe,IAAK,CAAC,CAAC,MAAiB,CAAC;IACxD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAI,CAAC,CAAC,IAAgC,IAAI,EAAE,CAAC;IACvD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAQD,KAAK,UAAU,SAAS,CAAC,IAIxB;IACC,qEAAqE;IACrE,0DAA0D;IAC1D,MAAM,GAAG,GAAG,wDAAa,cAAc,GAAC,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAEjG,MAAM,QAAQ,GAA4B;QACxC,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,KAAK;KAClB,CAAC;IACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,6DAA6D;YAC7D,iDAAiD;YACjD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,sBAAY,EAAC,MAAM,EAAE,OAAO,CAAC,CAA4B,CAAC;gBACjF,MAAM,MAAM,GAAG,IAAI,EAAE,MAA6C,CAAC;gBACnE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;oBAAE,QAAQ,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;QAC3B,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;IACnC,CAAC;IACD,MAAM,KAAK,GAAG,IAAK,OAAuD,CAAC,QAAQ,CAAC,CAAC;IACrF,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;AACzD,CAAC;AAEM,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,IAAI,SAA6B,CAAC;IAClC,IAAI,UAA8B,CAAC;IACnC,IAAI,OAA2B,CAAC;IAChC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAClC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YACnC,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,UAAU,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+DAA+D,IAAI,EAAE,CAAC,CAAC;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAA,mBAAO,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,SAAS,mBAAmB,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAClF,MAAM,KAAK,GAA8B,IAAI,GAAG,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,aAAa;QAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;IAE1E,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,WAAW,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;gBACvD,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC;oBAAE,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;gBAC7C,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;gBACpB,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CACZ;YACE,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW;YACX,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;SACxC,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,SAAS,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,aAAa,CAAC,MAAM,IAAI,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,WAAW,MAAM,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC;QACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,YAAY,WAAW,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/cli.d.ts

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+/**
+ * ``sponsio`` — CLI frontend for ``@sponsio/sdk``.
+ *
+ * Usage:
+ *
+ *   npx @sponsio/sdk ./src
+ *   npx @sponsio/sdk "src/**\/*.ts" --out tools.json
+ *   npx @sponsio/sdk --config sponsio.yaml
+ *   npx @sponsio/sdk ./src --pretty
+ *
+ * Writes the OpenAI function-calling JSON inventory to stdout (or to
+ * ``--out <file>``) so you can pipe into ``sponsio scan`` on the
+ * Python side:
+ *
+ *   npx @sponsio/sdk ./src > tools.json
+ *   sponsio scan tools.json --out sponsio.yaml
+ *
+ * When ``--config sponsio.yaml`` is passed, the CLI also reads the
+ * ``scan:`` section (for defaults) and ``extractor:`` (for LLM
+ * passthrough in the output JSON, so the Python-side scan doesn't
+ * need ``--config`` a second time).  CLI flags always win over YAML.
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;GAqBG"}