@sponsio/sdk 0.1.0-alpha.3 → 0.2.0-alpha.4

package/dist/cli/cli.js

@@ -0,0 +1,459 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * ``sponsio`` — CLI frontend for ``@sponsio/sdk``.
+ *
+ * Usage:
+ *
+ *   npx @sponsio/sdk ./src
+ *   npx @sponsio/sdk "src/**\/*.ts" --out tools.json
+ *   npx @sponsio/sdk --config sponsio.yaml
+ *   npx @sponsio/sdk ./src --pretty
+ *
+ * Writes the OpenAI function-calling JSON inventory to stdout (or to
+ * ``--out <file>``) so you can pipe into ``sponsio scan`` on the
+ * Python side:
+ *
+ *   npx @sponsio/sdk ./src > tools.json
+ *   sponsio scan tools.json --out sponsio.yaml
+ *
+ * When ``--config sponsio.yaml`` is passed, the CLI also reads the
+ * ``scan:`` section (for defaults) and ``extractor:`` (for LLM
+ * passthrough in the output JSON, so the Python-side scan doesn't
+ * need ``--config`` a second time).  CLI flags always win over YAML.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = require("fs");
+const config_1 = require("./config");
+const onboard_1 = require("./onboard");
+const report_1 = require("./report");
+const validate_1 = require("./validate");
+const patterns_1 = require("./patterns");
+const doctor_1 = require("./doctor");
+const packs_1 = require("./packs");
+const skill_1 = require("./skill");
+const mode_1 = require("./mode");
+const init_1 = require("./init");
+const scan_1 = require("./scan");
+const prompt_1 = require("./prompt");
+const explain_1 = require("./explain");
+const replay_1 = require("./replay");
+const check_1 = require("./check");
+const eval_1 = require("./eval");
+const export_1 = require("./export");
+const export_sessions_1 = require("./export-sessions");
+const demo_1 = require("./demo");
+const index_1 = require("./index");
+// Authored as a plain-string array (not a template literal) because
+// the help text contains literal ``${VAR}`` tokens that describe the
+// env-var interpolation syntax.  Inside a template literal those
+// would try to evaluate as JS expressions (and ``\$`` escapes are
+// inconsistently handled across TS-target combos).  Joining plain
+// strings is dull but unambiguous.
+const HELP = [
+    "sponsio — scan TypeScript/JavaScript for agent tool definitions",
+    "",
+    "USAGE:",
+    "  sponsio <patterns...> [options]",
+    "",
+    "ARGUMENTS:",
+    '  <patterns...>       Files or glob patterns to scan (default: "src/**/*.{ts,tsx,js,jsx}")',
+    "",
+    "OPTIONS:",
+    "  -o, --out <file>    Write output to <file> instead of stdout",
+    "  -c, --config <yaml> Read defaults from sponsio.yaml's ``scan:`` section and",
+    "                      embed ``extractor:`` config into the output for Python.",
+    "      --pretty        Pretty-print the emitted JSON",
+    "      --provenance    Include per-tool source-file provenance in output",
+    "  -h, --help          Show this help",
+    "  -v, --version       Show version",
+    "",
+    "EXAMPLES:",
+    "  sponsio ./src",
+    '  sponsio "src/tools/**/*.ts" --out tools.json',
+    "  sponsio --config sponsio.yaml --pretty",
+    "  sponsio ./src --out /tmp/inv.json && sponsio scan /tmp/inv.json -o sponsio.yaml",
+    "  sponsio onboard .",
+    "  sponsio init --mode observe",
+    "  sponsio scan ./src --append",
+    "  sponsio mode enforce",
+    "  sponsio check -t trace.json --config sponsio.yaml",
+    "  sponsio eval traces/ --config sponsio.yaml --json",
+    "  sponsio explain C1",
+    "  sponsio prompt onboard",
+    "  sponsio replay --list",
+    "  sponsio export run.json --to traces/ --label safe",
+    "  sponsio export-sessions --to audit.jsonl",
+    "  sponsio demo --scenario wire",
+    "  sponsio report --since 24h",
+    "  sponsio validate ./sponsio.yaml",
+    "  sponsio patterns",
+    "  sponsio doctor",
+    "  sponsio skill install",
+    "",
+    "SUBCOMMANDS:",
+    "  onboard [.]                Generate sponsio.yaml + print integration snippet",
+    "  init [target]              Skeleton sponsio.yaml (no scan)",
+    "  scan <patterns…>           AST-scan source -> sponsio.yaml with contracts",
+    "  mode <observe|enforce>     Flip the mode line in sponsio.yaml",
+    "  check -t <trace> …         Replay a trace file, report contract pass/fail",
+    "  eval <traces/> …           Replay labelled corpus, report FPR/FNR + diff",
+    "  explain <Cn|substr>        Explain a contract: source, last violation",
+    "  prompt <onboard|scan|…>    Print agent-facing contract-authoring template",
+    "  replay [session|--list]    Pretty-print a session log",
+    "  export <src> --to <dir>    Sponsio-native trace -> OTLP/JSON",
+    "  export-sessions --to <f>   Session log -> OTLP-JSONL",
+    "  report [--since 24h …]     Summarize ~/.sponsio/sessions/ into markdown/json",
+    "  validate [path]            Parse sponsio.yaml + report contract counts (sto contracts flagged as Cloud-only)",
+    "  patterns [--category …]    List deterministic pattern templates available in TS",
+    "  packs                      List the built-in pack library (Python-executed)",
+    "  doctor                     Env + config health check",
+    "  demo [--scenario wire]     Terminal demo of unsafe agent + Sponsio block",
+    "  skill install              Drop SKILL.md into Cursor/Claude/Codex skill dirs",
+    "",
+    "CONFIG FILE SHAPE:",
+    "  # sponsio.yaml",
+    "  scan:",
+    '    patterns:  ["src/**/*.ts", "packages/*/src/**/*.ts"]',
+    '    ignore:    ["**/generated/**"]',
+    '    out:       "tools.json"',
+    "    provenance: true",
+    "  extractor:",
+    "    provider: openai",
+    "    model:    gpt-4o",
+    "    api_key:  ${OPENAI_API_KEY}      # ${VAR} / ${VAR:-default} supported",
+].join("\n") + "\n";
+function parseArgs(argv) {
+    const args = {
+        patterns: [],
+        pretty: false,
+        help: false,
+        version: false,
+        includeProvenance: false,
+    };
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === "-h" || a === "--help")
+            args.help = true;
+        else if (a === "-v" || a === "--version")
+            args.version = true;
+        else if (a === "--pretty")
+            args.pretty = true;
+        else if (a === "--provenance")
+            args.includeProvenance = true;
+        else if (a === "-o" || a === "--out") {
+            args.out = argv[++i];
+        }
+        else if (a === "-c" || a === "--config") {
+            args.configPath = argv[++i];
+        }
+        else if (a.startsWith("-")) {
+            process.stderr.write(`unknown flag: ${a}\n`);
+            process.exit(2);
+        }
+        else {
+            args.patterns.push(a);
+        }
+    }
+    return args;
+}
+async function main() {
+    const raw = process.argv.slice(2);
+    if (raw[0] === "onboard") {
+        try {
+            await (0, onboard_1.runOnboardCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "report") {
+        try {
+            await (0, report_1.runReportCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "validate") {
+        try {
+            await (0, validate_1.runValidateCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "patterns") {
+        try {
+            await (0, patterns_1.runPatternsCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "packs") {
+        try {
+            await (0, packs_1.runPacksCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "doctor") {
+        try {
+            await (0, doctor_1.runDoctorCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "skill") {
+        try {
+            await (0, skill_1.runSkillCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "mode") {
+        try {
+            await (0, mode_1.runModeCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "init") {
+        try {
+            await (0, init_1.runInitCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "scan") {
+        try {
+            await (0, scan_1.runScanCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "prompt") {
+        try {
+            await (0, prompt_1.runPromptCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "explain") {
+        try {
+            await (0, explain_1.runExplainCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "replay") {
+        try {
+            await (0, replay_1.runReplayCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "check") {
+        try {
+            await (0, check_1.runCheckCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "eval") {
+        try {
+            await (0, eval_1.runEvalCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "export") {
+        try {
+            await (0, export_1.runExportCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "export-sessions") {
+        try {
+            await (0, export_sessions_1.runExportSessionsCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    if (raw[0] === "demo") {
+        try {
+            await (0, demo_1.runDemoCli)(raw.slice(1));
+        }
+        catch (err) {
+            process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : err}\n`);
+            process.exit(1);
+        }
+        return;
+    }
+    const args = parseArgs(raw);
+    if (args.help) {
+        process.stdout.write(HELP);
+        return;
+    }
+    if (args.version) {
+        // eslint-disable-next-line @typescript-eslint/no-var-requires
+        const pkg = require("../package.json");
+        process.stdout.write(`${pkg.version}\n`);
+        return;
+    }
+    // ---------------------------------------------------------------
+    // Resolve config (if any).  Precedence: CLI flag > YAML > default.
+    // We load the YAML *first* so CLI flags can overwrite whatever we
+    // parsed; the opposite order (CLI then YAML) would silently undo
+    // ``--out foo.json`` when the YAML also set ``scan.out``.
+    // ---------------------------------------------------------------
+    let config;
+    if (args.configPath) {
+        try {
+            config = (0, config_1.loadConfig)(args.configPath);
+        }
+        catch (err) {
+            if (err instanceof config_1.ConfigError) {
+                process.stderr.write(`[config] ${err.message}\n`);
+                process.exit(2);
+            }
+            throw err;
+        }
+        // Warn about unset env-var references.  We don't fail on these
+        // — shell semantics says a missing var expands to empty, and
+        // aborting a pure AST scan because an ``OPENAI_API_KEY`` env
+        // isn't exported would be actively unhelpful (the scanner
+        // itself doesn't use that key; only the downstream Python
+        // extractor does).  But a warning means users find out before
+        // the Python side yells about ``api_key: ""``.
+        if (config.missingEnvVars.length) {
+            process.stderr.write(`[config] warning: ${config.missingEnvVars.length} ` +
+                `env var(s) referenced in ${config.sourcePath} are unset ` +
+                `and have no default, expanded to empty string: ` +
+                config.missingEnvVars.join(", ") +
+                `\n`);
+        }
+    }
+    // ---------------------------------------------------------------
+    // Apply precedence for each knob.
+    // ---------------------------------------------------------------
+    const effectivePatterns = args.patterns.length > 0
+        ? args.patterns
+        : config?.scan.patterns && config.scan.patterns.length > 0
+            ? config.scan.patterns
+            : ["src/**/*.{ts,tsx,js,jsx}"];
+    const effectiveOut = args.out ?? config?.scan.out;
+    // Provenance is a boolean flag so we can't use ``??`` to mean
+    // "CLI not provided" — but since CLI parsing only sets
+    // includeProvenance to ``true`` on --provenance (never back to
+    // false from a flag), the YAML value only matters when the flag
+    // wasn't passed.  Keep this explicit so future additions (e.g. a
+    // ``--no-provenance`` flag) don't accidentally tangle precedence.
+    const effectiveProvenance = args.includeProvenance
+        ? true
+        : config?.scan.provenance === true;
+    // ---------------------------------------------------------------
+    // If a bare directory was passed, expand it to a glob.  Kept here
+    // (not in the config loader) because ``scan.patterns`` in YAML is
+    // authored with globs already — only CLI args get the fast-path
+    // directory expansion.
+    // ---------------------------------------------------------------
+    const expanded = await Promise.all(effectivePatterns.map(async (p) => {
+        try {
+            const stat = await fs_1.promises.stat(p);
+            if (stat.isDirectory()) {
+                return `${p.replace(/\/$/, "")}/**/*.{ts,tsx,js,jsx}`;
+            }
+        }
+        catch {
+            // not a real path — treat as a glob
+        }
+        return p;
+    }));
+    const scanOptions = config?.scan.ignore ? { ignore: config.scan.ignore } : {};
+    const result = await (0, index_1.scan)(expanded, scanOptions);
+    // ---------------------------------------------------------------
+    // Build the output payload.  The extractor passthrough goes on a
+    // ``_extractor`` key with a leading underscore so Python's tool
+    // inventory loader (which accepts any top-level dict with a
+    // ``tools:`` key) ignores it as metadata rather than trying to
+    // interpret it as a tool.  The Python ``sponsio scan`` side will
+    // read ``_extractor`` in a follow-up PR.
+    // ---------------------------------------------------------------
+    const basePayload = effectiveProvenance
+        ? result
+        : { tools: result.tools };
+    const payload = { ...basePayload };
+    if (config && Object.keys(config.extractor).length > 0) {
+        payload._extractor = config.extractor;
+    }
+    const json = args.pretty
+        ? JSON.stringify(payload, null, 2)
+        : JSON.stringify(payload);
+    if (effectiveOut) {
+        await fs_1.promises.writeFile(effectiveOut, json + "\n", "utf8");
+        process.stderr.write(`wrote ${result.tools.length} tools to ${effectiveOut}\n`);
+    }
+    else {
+        process.stdout.write(json + "\n");
+    }
+    if (result.diagnostics.length) {
+        for (const d of result.diagnostics) {
+            process.stderr.write(`[${d.level}] ${d.filepath}:${d.line}  ${d.message}\n`);
+        }
+    }
+}
+main().catch((err) => {
+    process.stderr.write(`${err.stack ?? err.message ?? err}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli/cli.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;;;;;;GAqBG;;AAEH,2BAAoC;AACpC,qCAAuE;AACvE,uCAA0C;AAC1C,qCAAwC;AACxC,yCAA4C;AAC5C,yCAA4C;AAC5C,qCAAwC;AACxC,mCAAsC;AACtC,mCAAsC;AACtC,iCAAoC;AACpC,iCAAoC;AACpC,iCAAoC;AACpC,qCAAwC;AACxC,uCAA0C;AAC1C,qCAAwC;AACxC,mCAAsC;AACtC,iCAAoC;AACpC,qCAAwC;AACxC,uDAAyD;AACzD,iCAAoC;AACpC,mCAA+B;AAY/B,oEAAoE;AACpE,qEAAqE;AACrE,iEAAiE;AACjE,kEAAkE;AAClE,kEAAkE;AAClE,mCAAmC;AACnC,MAAM,IAAI,GACR;IACE,iEAAiE;IACjE,EAAE;IACF,QAAQ;IACR,mCAAmC;IACnC,EAAE;IACF,YAAY;IACZ,4FAA4F;IAC5F,EAAE;IACF,UAAU;IACV,gEAAgE;IAChE,+EAA+E;IAC/E,+EAA+E;IAC/E,qDAAqD;IACrD,yEAAyE;IACzE,sCAAsC;IACtC,oCAAoC;IACpC,EAAE;IACF,WAAW;IACX,iBAAiB;IACjB,gDAAgD;IAClD,0CAA0C;IAC1C,mFAAmF;IACnF,qBAAqB;IACrB,+BAA+B;IAC/B,+BAA+B;IAC/B,wBAAwB;IACxB,qDAAqD;IACrD,qDAAqD;IACrD,sBAAsB;IACtB,0BAA0B;IAC1B,yBAAyB;IACzB,qDAAqD;IACrD,4CAA4C;IAC5C,gCAAgC;IAChC,8BAA8B;IAC9B,mCAAmC;IACnC,oBAAoB;IACpB,kBAAkB;IAClB,yBAAyB;IACvB,EAAE;IACF,cAAc;IACd,gFAAgF;IAChF,8DAA8D;IAC9D,6EAA6E;IAC7E,iEAAiE;IACjE,6EAA6E;IAC7E,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,yDAAyD;IACzD,gEAAgE;IAChE,wDAAwD;IACxD,gFAAgF;IAChF,gHAAgH;IAChH,mFAAmF;IACnF,+EAA+E;IAC/E,wDAAwD;IACxD,4EAA4E;IAC5E,gFAAgF;IAChF,EAAE;IACF,oBAAoB;IACpB,kBAAkB;IAClB,SAAS;IACT,0DAA0D;IAC1D,oCAAoC;IACpC,6BAA6B;IAC7B,sBAAsB;IACtB,cAAc;IACd,sBAAsB;IACtB,sBAAsB;IACtB,2EAA2E;CAC5E,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAEtB,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAAY;QACpB,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,KAAK;QACd,iBAAiB,EAAE,KAAK;KACzB,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;aAC9C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,WAAW;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;aACzD,IAAI,CAAC,KAAK,UAAU;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;aACzC,IAAI,CAAC,KAAK,cAAc;YAAE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;aACxD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAA,uBAAa,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAA,qBAAY,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,IAAA,yBAAc,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,IAAA,yBAAc,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAA,mBAAW,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAA,qBAAY,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAA,mBAAW,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAA,qBAAY,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAA,uBAAa,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAA,qBAAY,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAA,mBAAW,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAA,qBAAY,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,iBAAiB,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,IAAA,sCAAoB,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAA,iBAAU,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAE5B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,8DAA8D;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,kEAAkE;IAClE,mEAAmE;IACnE,kEAAkE;IAClE,iEAAiE;IACjE,0DAA0D;IAC1D,kEAAkE;IAClE,IAAI,MAAiC,CAAC;IACtC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,oBAAW,EAAE,CAAC;gBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,+DAA+D;QAC/D,6DAA6D;QAC7D,6DAA6D;QAC7D,0DAA0D;QAC1D,0DAA0D;QAC1D,8DAA8D;QAC9D,+CAA+C;QAC/C,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG;gBAClD,4BAA4B,MAAM,CAAC,UAAU,aAAa;gBAC1D,iDAAiD;gBACjD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;gBAChC,IAAI,CACP,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,kCAAkC;IAClC,kEAAkE;IAClE,MAAM,iBAAiB,GACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,IAAI,CAAC,QAAQ;QACf,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ;YACtB,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAEnC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;IAElD,8DAA8D;IAC9D,uDAAuD;IACvD,+DAA+D;IAC/D,gEAAgE;IAChE,iEAAiE;IACjE,kEAAkE;IAClE,MAAM,mBAAmB,GAAG,IAAI,CAAC,iBAAiB;QAChD,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC;IAErC,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,gEAAgE;IAChE,uBAAuB;IACvB,kEAAkE;IAClE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,aAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,MAAM,GAAG,MAAM,IAAA,YAAI,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAEjD,kEAAkE;IAClE,iEAAiE;IACjE,gEAAgE;IAChE,4DAA4D;IAC5D,+DAA+D;IAC/D,iEAAiE;IACjE,yCAAyC;IACzC,kEAAkE;IAClE,MAAM,WAAW,GAAG,mBAAmB;QACrC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAE5B,MAAM,OAAO,GAA4B,EAAE,GAAG,WAAW,EAAE,CAAC;IAC5D,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;IACxC,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;QACtB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAE5B,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,aAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,SAAS,MAAM,CAAC,KAAK,CAAC,MAAM,aAAa,YAAY,IAAI,CAC1D,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,IAAI,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,IAAI,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cli/config.d.ts

@@ -0,0 +1,88 @@
+/**
+ * ``sponsio.yaml`` loader for ``@sponsio/sdk``.
+ *
+ * Parity feature with the Python side's ``sponsio/config.py``.  The
+ * goal is *semantic* parity — same YAML file works for both
+ * scanners, same env-var interpolation rules, same precedence
+ * (CLI flag > YAML > built-in default) — not byte-level parity of
+ * the parsed dataclasses (the TS scanner only needs a narrow slice
+ * of the schema).
+ *
+ * The three things we read:
+ *
+ *   1. ``scan:`` — optional section for TS-scanner-specific
+ *      knobs: patterns, ignore list, output path, provenance
+ *      inclusion.  Lets a repo put all scanner config in one
+ *      file instead of sprinkling CLI flags across workflows.
+ *   2. ``extractor:`` — *passthrough* (not interpreted here).
+ *      We embed it in the output JSON as ``_extractor`` metadata
+ *      so a downstream ``sponsio scan tools.json`` picks up the
+ *      same LLM config without needing ``--config`` a second
+ *      time.  Mirrors the Python ``ExtractorSection``.
+ *   3. ``${ENV_VAR}`` / ``${ENV_VAR:-default}`` — interpolated
+ *      on load with EXACTLY the same regex and semantics as
+ *      Python (see ``_ENV_VAR_RE`` in ``sponsio/config.py``).
+ *
+ * Sections we *don't* parse: contracts, agents, judge, defaults.
+ * Those are Python-runtime concerns; touching them here would
+ * duplicate the Python schema and invite drift.
+ */
+/**
+ * Parse-time LLM config — passed through to the output JSON for
+ * Python-side consumption.  All fields optional because partial
+ * configs are common (e.g. ``provider`` + ``model`` with the
+ * api_key coming from an env var later).
+ */
+export interface ExtractorSection {
+    provider?: string;
+    model?: string;
+    api_key?: string;
+    base_url?: string;
+}
+/**
+ * TS-scanner-specific config knobs.  Everything optional; CLI flags
+ * still override whatever we find here.
+ */
+export interface ScanSection {
+    patterns?: string[];
+    ignore?: string[];
+    out?: string;
+    provenance?: boolean;
+}
+export interface SponsioConfig {
+    /** Raw extractor section — unvalidated, emitted verbatim so any
+     *  future field the Python side adds flows through without a
+     *  TS-side schema change. */
+    extractor: ExtractorSection;
+    scan: ScanSection;
+    /** Env-var references that appeared in the file but were unset
+     *  AND had no default.  The loader keeps going (shell-like
+     *  semantics: the var expands to empty) but surfaces these for
+     *  CLI-time warnings — silent empty strings are a classic
+     *  "api_key: " source of head-scratching. */
+    missingEnvVars: string[];
+    /** Absolute path the file was loaded from — used in error
+     *  messages and tests. */
+    sourcePath: string;
+}
+export declare class ConfigError extends Error {
+    readonly sourcePath?: string | undefined;
+    constructor(message: string, sourcePath?: string | undefined);
+}
+/**
+ * Load and parse ``sponsio.yaml``.
+ *
+ * Design notes:
+ *   * We *don't* validate the full Python schema — only the two
+ *     sections we care about.  Everything else (``contracts``,
+ *     ``agents``, ``judge``) sails through untouched so a
+ *     single file can be authoritative for both Python and TS.
+ *   * Missing file → ``ConfigError`` (not silently-empty config),
+ *     because the user explicitly passed ``--config <path>`` and
+ *     typos are the #1 failure mode.
+ *   * Malformed YAML → ``ConfigError`` with the parser's line/col
+ *     where available (js-yaml's default YAMLException already
+ *     includes this in its ``reason`` field).
+ */
+export declare function loadConfig(configPath: string): SponsioConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/cli/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/cli/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAMH;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B;;iCAE6B;IAC7B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,IAAI,EAAE,WAAW,CAAC;IAClB;;;;iDAI6C;IAC7C,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;8BAC0B;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,WAAY,SAAQ,KAAK;aACS,UAAU,CAAC,EAAE,MAAM;gBAApD,OAAO,EAAE,MAAM,EAAkB,UAAU,CAAC,EAAE,MAAM,YAAA;CAIjE;AA6CD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,CA4D5D"}