@tanagram/cli 0.1.25 → 0.1.27

package/checker/llm_integration.go

@@ -10,7 +10,7 @@ import (
 )
 
 // CheckChangesWithLLM checks code changes against ALL policies using LLM
-func CheckChangesWithLLM(ctx context.Context, changes []git.ChangedLine, policies []parser.Policy) []Violation {
+func CheckChangesWithLLM(ctx context.Context, changes []git.ChangedLine, policies []parser.Policy, apiKey string) []Violation {
 	if len(policies) == 0 {
 		return []Violation{}
 	}
@@ -23,7 +23,7 @@ func CheckChangesWithLLM(ctx context.Context, changes []git.ChangedLine, policie
 
 	var allViolations []Violation
 	for file, fileChanges := range changesByFile {
-		violations := checkFileWithLLM(ctx, file, fileChanges, policies, policyMap)
+		violations := checkFileWithLLM(ctx, file, fileChanges, policies, policyMap, apiKey)
 		allViolations = append(allViolations, violations...)
 	}
 
@@ -49,12 +49,12 @@ func groupChangesByFile(changes []git.ChangedLine) map[string][]git.ChangedLine
 }
 
 // checkFileWithLLM checks a single file's changes using the LLM
-func checkFileWithLLM(ctx context.Context, file string, changes []git.ChangedLine, policies []parser.Policy, policyMap map[string]parser.Policy) []Violation {
+func checkFileWithLLM(ctx context.Context, file string, changes []git.ChangedLine, policies []parser.Policy, policyMap map[string]parser.Policy, apiKey string) []Violation {
 	// Format changes for LLM
 	codeChanges := formatChangesForLLM(changes)
 
 	// Call LLM to check violations
-	checks, err := CheckViolations(ctx, file, codeChanges, policies)
+	checks, err := CheckViolations(ctx, file, codeChanges, policies, apiKey)
 	if err != nil {
 		// Log error but don't fail the whole check
 		fmt.Printf("Warning: LLM check failed for %s: %v\n", file, err)

package/checker/matcher.go

@@ -26,14 +26,14 @@ type CheckResult struct {
 }
 
 // CheckChanges checks all changed lines against policies using LLM-based detection
-func CheckChanges(ctx context.Context, changes []git.ChangedLine, policies []parser.Policy) *CheckResult {
+func CheckChanges(ctx context.Context, changes []git.ChangedLine, policies []parser.Policy, apiKey string) *CheckResult {
 	result := &CheckResult{
 		Violations:   []Violation{},
 		TotalChecked: len(changes),
 	}
 
 	// Use LLM-based checking for all policies
-	llmViolations := CheckChangesWithLLM(ctx, changes, policies)
+	llmViolations := CheckChangesWithLLM(ctx, changes, policies, apiKey)
 	result.Violations = append(result.Violations, llmViolations...)
 
 	return result

package/checker/violation_checker.go

@@ -24,12 +24,12 @@ type ViolationCheckResponse struct {
 
 // CheckViolations uses LLM to check if code changes violate any policies
 // Returns a list of violation checks with policy names and reasons
-func CheckViolations(ctx context.Context, file string, codeChanges string, policies []parser.Policy) ([]ViolationCheck, error) {
+func CheckViolations(ctx context.Context, file string, codeChanges string, policies []parser.Policy, apiKey string) ([]ViolationCheck, error) {
 	if len(policies) == 0 {
 		return []ViolationCheck{}, nil
 	}
 
-	client, err := llm.NewClient()
+	client, err := llm.NewClient(apiKey)
 	if err != nil {
 		return nil, err
 	}

package/commands/run.go

@@ -9,6 +9,7 @@ import (
 	"time"
 
 	"github.com/tanagram/cli/checker"
+	"github.com/tanagram/cli/config"
 	"github.com/tanagram/cli/extractor"
 	"github.com/tanagram/cli/git"
 	"github.com/tanagram/cli/metrics"
@@ -71,6 +72,12 @@ func Run() error {
 
 	// Auto-sync only the files that changed
 	if len(filesToSync) > 0 {
+		// Get API key once upfront before parallel processing
+		apiKey, err := config.GetAPIKey()
+		if err != nil {
+			return fmt.Errorf("failed to get API key: %w", err)
+		}
+
 		fmt.Printf("\nSyncing policies with LLM (processing %d changed file(s) in parallel)...\n", len(filesToSync))
 
 		syncStart := time.Now()
@@ -117,7 +124,7 @@ func Run() error {
 			go func(file string) {
 				defer wg.Done()
 				relPath, _ := filepath.Rel(gitRoot, file)
-				policies, err := extractor.ExtractPoliciesFromFile(ctx, file)
+				policies, err := extractor.ExtractPoliciesFromFile(ctx, file, apiKey)
 				results <- syncResult{file, relPath, policies, err}
 			}(file)
 		}
@@ -204,10 +211,16 @@ func Run() error {
 
 	fmt.Printf("Scanning %d changed lines...\n\n", len(diffResult.Changes))
 
+	// Get API key once upfront before checking
+	apiKey, err := config.GetAPIKey()
+	if err != nil {
+		return fmt.Errorf("failed to get API key: %w", err)
+	}
+
 	// Check changes against policies (both regex and LLM-based)
 	ctx := context.Background()
 	checkStart := time.Now()
-	result := checker.CheckChanges(ctx, diffResult.Changes, policies)
+	result := checker.CheckChanges(ctx, diffResult.Changes, policies, apiKey)
 	checkDuration := time.Since(checkStart)
 
 	// Track policy check results (similar to policy.execute.result in github-app)

package/commands/sync.go

@@ -8,6 +8,7 @@ import (
 	"sync"
 	"time"
 
+	"github.com/tanagram/cli/config"
 	"github.com/tanagram/cli/extractor"
 	"github.com/tanagram/cli/parser"
 	"github.com/tanagram/cli/storage"
@@ -15,6 +16,12 @@ import (
 
 // Sync manually syncs all instruction files to the cache
 func Sync() error {
+	// Get API key first before doing any work
+	apiKey, err := getAPIKey()
+	if err != nil {
+		return err
+	}
+
 	// Find git root
 	gitRoot, err := storage.FindGitRoot()
 	if err != nil {
@@ -103,7 +110,7 @@ func Sync() error {
 		go func(file string) {
 			defer wg.Done()
 			relPath, _ := filepath.Rel(gitRoot, file)
-			policies, err := extractor.ExtractPoliciesFromFile(ctx, file)
+			policies, err := extractor.ExtractPoliciesFromFile(ctx, file, apiKey)
 			results <- syncResult{file, relPath, policies, err}
 		}(file)
 	}
@@ -223,3 +230,12 @@ func FindInstructionFiles(gitRoot string) ([]string, error) {
 
 	return files, nil
 }
+
+// getAPIKey retrieves the API key once upfront before parallel processing
+func getAPIKey() (string, error) {
+	apiKey, err := config.GetAPIKey()
+	if err != nil {
+		return "", fmt.Errorf("failed to get API key: %w", err)
+	}
+	return apiKey, nil
+}

package/config/config.go

@@ -0,0 +1,155 @@
+package config
+
+import (
+	"bufio"
+	"context"
+	"encoding/json"
+	"fmt"
+	"os"
+	"path/filepath"
+	"strings"
+
+	"github.com/anthropics/anthropic-sdk-go"
+	"github.com/anthropics/anthropic-sdk-go/option"
+)
+
+const (
+	configDir  = ".tanagram"
+	configFile = "config.json"
+)
+
+// Config represents the application configuration
+type Config struct {
+	AnthropicAPIKey string `json:"anthropic_api_key"`
+}
+
+// GetConfigPath returns the full path to the config file
+func GetConfigPath() (string, error) {
+	home, err := os.UserHomeDir()
+	if err != nil {
+		return "", fmt.Errorf("failed to get user home directory: %w", err)
+	}
+	return filepath.Join(home, configDir, configFile), nil
+}
+
+// Load reads the config from disk
+func Load() (*Config, error) {
+	configPath, err := GetConfigPath()
+	if err != nil {
+		return nil, err
+	}
+
+	// If config doesn't exist, return empty config
+	if _, err := os.Stat(configPath); os.IsNotExist(err) {
+		return &Config{}, nil
+	}
+
+	data, err := os.ReadFile(configPath)
+	if err != nil {
+		return nil, fmt.Errorf("failed to read config file: %w", err)
+	}
+
+	var cfg Config
+	if err := json.Unmarshal(data, &cfg); err != nil {
+		return nil, fmt.Errorf("failed to parse config file: %w", err)
+	}
+
+	return &cfg, nil
+}
+
+// Save writes the config to disk
+func Save(cfg *Config) error {
+	configPath, err := GetConfigPath()
+	if err != nil {
+		return err
+	}
+
+	// Ensure config directory exists
+	configDir := filepath.Dir(configPath)
+	if err := os.MkdirAll(configDir, 0755); err != nil {
+		return fmt.Errorf("failed to create config directory: %w", err)
+	}
+
+	data, err := json.MarshalIndent(cfg, "", "  ")
+	if err != nil {
+		return fmt.Errorf("failed to marshal config: %w", err)
+	}
+
+	if err := os.WriteFile(configPath, data, 0600); err != nil {
+		return fmt.Errorf("failed to write config file: %w", err)
+	}
+
+	return nil
+}
+
+// GetAPIKey retrieves the Anthropic API key from config
+// If not found, prompts the user and saves it to config
+func GetAPIKey() (string, error) {
+	// Check config file
+	cfg, err := Load()
+	if err != nil {
+		return "", fmt.Errorf("failed to load config: %w", err)
+	}
+
+	if cfg.AnthropicAPIKey != "" {
+		return cfg.AnthropicAPIKey, nil
+	}
+
+	// Prompt user for API key
+	fmt.Println("ANTHROPIC_API_KEY not found.")
+	fmt.Print("Please enter your Anthropic API key: ")
+
+	reader := bufio.NewReader(os.Stdin)
+	apiKey, err := reader.ReadString('\n')
+	if err != nil {
+		return "", fmt.Errorf("failed to read API key: %w", err)
+	}
+
+	apiKey = strings.TrimSpace(apiKey)
+	if apiKey == "" {
+		return "", fmt.Errorf("API key cannot be empty")
+	}
+
+	// Validate the API key before saving
+	fmt.Print("Validating API key... ")
+	if err := ValidateAPIKey(apiKey); err != nil {
+		fmt.Println("✗")
+		return "", fmt.Errorf("invalid API key: %w", err)
+	}
+	fmt.Println("✓")
+
+	// Save to config
+	cfg.AnthropicAPIKey = apiKey
+	if err := Save(cfg); err != nil {
+		return "", fmt.Errorf("failed to save config: %w", err)
+	}
+
+	configPath, _ := GetConfigPath()
+	fmt.Printf("API key saved to %s\n", configPath)
+
+	return apiKey, nil
+}
+
+// ValidateAPIKey checks if the API key is valid by making a test API call
+func ValidateAPIKey(apiKey string) error {
+	client := anthropic.NewClient(option.WithAPIKey(apiKey))
+
+	ctx := context.Background()
+	_, err := client.Messages.New(ctx, anthropic.MessageNewParams{
+		MaxTokens: 10,
+		Messages: []anthropic.MessageParam{
+			anthropic.NewUserMessage(anthropic.NewTextBlock("test")),
+		},
+		Model: anthropic.ModelClaudeHaiku4_5_20251001,
+	})
+
+	if err != nil {
+		// Check if it's an authentication error
+		if strings.Contains(err.Error(), "401") || strings.Contains(err.Error(), "authentication_error") {
+			return fmt.Errorf("authentication failed - please check your API key")
+		}
+		return err
+	}
+
+	return nil
+}

package/extractor/extractor.go

@@ -23,8 +23,8 @@ type ExtractorResponse struct {
 }
 
 // ExtractPolicies uses LLM to extract policies from instruction file content
-func ExtractPolicies(ctx context.Context, content string) ([]parser.Policy, error) {
-	client, err := llm.NewClient()
+func ExtractPolicies(ctx context.Context, content string, apiKey string) ([]parser.Policy, error) {
+	client, err := llm.NewClient(apiKey)
 	if err != nil {
 		return nil, err
 	}

package/extractor/file.go

@@ -11,7 +11,7 @@ import (
 )
 
 // ExtractPoliciesFromFile reads a file and extracts policies using LLM
-func ExtractPoliciesFromFile(ctx context.Context, filePath string) ([]parser.Policy, error) {
+func ExtractPoliciesFromFile(ctx context.Context, filePath string, apiKey string) ([]parser.Policy, error) {
 	content, err := os.ReadFile(filePath)
 	if err != nil {
 		return nil, fmt.Errorf("failed to read file: %w", err)
@@ -24,5 +24,5 @@ func ExtractPoliciesFromFile(ctx context.Context, filePath string) ([]parser.Pol
 		contentStr = parser.StripMDCFrontmatter(contentStr)
 	}
 
-	return ExtractPolicies(ctx, contentStr)
+	return ExtractPolicies(ctx, contentStr, apiKey)
 }

package/go.mod

@@ -1,15 +1,34 @@
 module github.com/tanagram/cli
 
-go 1.23.0
+go 1.24.0
 
 require github.com/anthropics/anthropic-sdk-go v1.17.0
 
 require (
+	github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
+	github.com/charmbracelet/bubbletea v1.3.10 // indirect
+	github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc // indirect
+	github.com/charmbracelet/lipgloss v1.1.0 // indirect
+	github.com/charmbracelet/x/ansi v0.10.1 // indirect
+	github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd // indirect
+	github.com/charmbracelet/x/term v0.2.1 // indirect
+	github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect
 	github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
+	github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/mattn/go-localereader v0.0.1 // indirect
+	github.com/mattn/go-runewidth v0.0.16 // indirect
+	github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 // indirect
+	github.com/muesli/cancelreader v0.2.2 // indirect
+	github.com/muesli/termenv v0.16.0 // indirect
 	github.com/posthog/posthog-go v1.6.12 // indirect
+	github.com/rivo/uniseg v0.4.7 // indirect
 	github.com/stretchr/testify v1.10.0 // indirect
 	github.com/tidwall/gjson v1.18.0 // indirect
 	github.com/tidwall/match v1.1.1 // indirect
 	github.com/tidwall/pretty v1.2.1 // indirect
 	github.com/tidwall/sjson v1.2.5 // indirect
+	github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
+	golang.org/x/sys v0.36.0 // indirect
+	golang.org/x/text v0.27.0 // indirect
 )

package/go.sum

@@ -1,13 +1,46 @@
 github.com/anthropics/anthropic-sdk-go v1.17.0 h1:BwK8ApcmaAUkvZTiQE0yi3R9XneEFskDIjLTmOAFZxQ=
 github.com/anthropics/anthropic-sdk-go v1.17.0/go.mod h1:WTz31rIUHUHqai2UslPpw5CwXrQP3geYBioRV4WOLvE=
+github.com/aymanbagabas/go-osc52/v2 v2.0.1 h1:HwpRHbFMcZLEVr42D4p7XBqjyuxQH5SMiErDT4WkJ2k=
+github.com/aymanbagabas/go-osc52/v2 v2.0.1/go.mod h1:uYgXzlJ7ZpABp8OJ+exZzJJhRNQ2ASbcXHWsFqH8hp8=
+github.com/charmbracelet/bubbletea v1.3.10 h1:otUDHWMMzQSB0Pkc87rm691KZ3SWa4KUlvF9nRvCICw=
+github.com/charmbracelet/bubbletea v1.3.10/go.mod h1:ORQfo0fk8U+po9VaNvnV95UPWA1BitP1E0N6xJPlHr4=
+github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc h1:4pZI35227imm7yK2bGPcfpFEmuY1gc2YSTShr4iJBfs=
+github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc/go.mod h1:X4/0JoqgTIPSFcRA/P6INZzIuyqdFY5rm8tb41s9okk=
+github.com/charmbracelet/lipgloss v1.1.0 h1:vYXsiLHVkK7fp74RkV7b2kq9+zDLoEU4MZoFqR/noCY=
+github.com/charmbracelet/lipgloss v1.1.0/go.mod h1:/6Q8FR2o+kj8rz4Dq0zQc3vYf7X+B0binUUBwA0aL30=
+github.com/charmbracelet/x/ansi v0.10.1 h1:rL3Koar5XvX0pHGfovN03f5cxLbCF2YvLeyz7D2jVDQ=
+github.com/charmbracelet/x/ansi v0.10.1/go.mod h1:3RQDQ6lDnROptfpWuUVIUG64bD2g2BgntdxH0Ya5TeE=
+github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd h1:vy0GVL4jeHEwG5YOXDmi86oYw2yuYUGqz6a8sLwg0X8=
+github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd/go.mod h1:xe0nKWGd3eJgtqZRaN9RjMtK7xUYchjzPr7q6kcvCCs=
+github.com/charmbracelet/x/term v0.2.1 h1:AQeHeLZ1OqSXhrAWpYUtZyX1T3zVxfpZuEQMIQaGIAQ=
+github.com/charmbracelet/x/term v0.2.1/go.mod h1:oQ4enTYFV7QN4m0i9mzHrViD7TQKvNEEkHUMCmsxdUg=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f h1:Y/CXytFA4m6baUTXGLOoWe4PQhGxaX0KpnayAqC48p4=
+github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f/go.mod h1:vw97MGsxSvLiUE2X8qFplwetxpGLQrlU1Q9AUEIzCaM=
 github.com/hashicorp/golang-lru/v2 v2.0.7 h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k=
 github.com/hashicorp/golang-lru/v2 v2.0.7/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM=
+github.com/lucasb-eyer/go-colorful v1.2.0 h1:1nnpGOrhyZZuNyfu1QjKiUICQ74+3FNCN69Aj6K7nkY=
+github.com/lucasb-eyer/go-colorful v1.2.0/go.mod h1:R4dSotOR9KMtayYi1e77YzuveK+i7ruzyGqttikkLy0=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/mattn/go-localereader v0.0.1 h1:ygSAOl7ZXTx4RdPYinUpg6W99U8jWvWi9Ye2JC/oIi4=
+github.com/mattn/go-localereader v0.0.1/go.mod h1:8fBrzywKY7BI3czFoHkuzRoWE9C+EiG4R1k4Cjx5p88=
+github.com/mattn/go-runewidth v0.0.16 h1:E5ScNMtiwvlvB5paMFdw9p4kSQzbXFikJ5SQO6TULQc=
+github.com/mattn/go-runewidth v0.0.16/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
+github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 h1:ZK8zHtRHOkbHy6Mmr5D264iyp3TiX5OmNcI5cIARiQI=
+github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6/go.mod h1:CJlz5H+gyd6CUWT45Oy4q24RdLyn7Md9Vj2/ldJBSIo=
+github.com/muesli/cancelreader v0.2.2 h1:3I4Kt4BQjOR54NavqnDogx/MIoWBFa0StPA8ELUXHmA=
+github.com/muesli/cancelreader v0.2.2/go.mod h1:3XuTXfFS2VjM+HTLZY9Ak0l6eUKfijIfMUZ4EgX0QYo=
+github.com/muesli/termenv v0.16.0 h1:S5AlUN9dENB57rsbnkPyfdGuWIlkmzJjbFf0Tf5FWUc=
+github.com/muesli/termenv v0.16.0/go.mod h1:ZRfOIKPFDYQoDFF4Olj7/QJbW60Ol/kL1pU3VfY/Cnk=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/posthog/posthog-go v1.6.12 h1:rsOBL/YdMfLJtOVjKJLgdzYmvaL3aIW6IVbAteSe+aI=
 github.com/posthog/posthog-go v1.6.12/go.mod h1:LcC1Nu4AgvV22EndTtrMXTy+7RGVC0MhChSw7Qk5XkY=
+github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
+github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ=
+github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
 github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=
 github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
 github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
@@ -22,5 +55,13 @@ github.com/tidwall/pretty v1.2.1 h1:qjsOFOWWQl+N3RsoF5/ssm1pHmJJwhjlSbZ51I6wMl4=
 github.com/tidwall/pretty v1.2.1/go.mod h1:ITEVvHYasfjBbM0u2Pg8T2nJnzm8xPwvNhhsoaGGjNU=
 github.com/tidwall/sjson v1.2.5 h1:kLy8mja+1c9jlljvWTlSazM7cKDRfJuR/bOJhcY5NcY=
 github.com/tidwall/sjson v1.2.5/go.mod h1:Fvgq9kS/6ociJEDnK0Fk1cpYF4FIW6ZF7LAe+6jwd28=
+github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e h1:JVG44RsyaB9T2KIHavMF/ppJZNG9ZpyihvCd0w101no=
+github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e/go.mod h1:RbqR21r5mrJuqunuUZ/Dhy/avygyECGrLceyNeo4LiM=
+golang.org/x/sys v0.0.0-20210809222454-d867a43fc93e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.36.0 h1:KVRy2GtZBrk1cBYA7MKu5bEZFxQk4NIDV6RLVcC8o0k=
+golang.org/x/sys v0.36.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/text v0.27.0 h1:4fGWRpyh641NLlecmyl4LOe6yDdfaYNrGb2zdfo4JV4=
+golang.org/x/text v0.27.0/go.mod h1:1D28KMCvyooCX9hBiosv5Tz/+YLxj0j7XhWjpSUF7CU=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

package/llm/client.go

@@ -3,7 +3,7 @@ package llm
 import (
 	"context"
 	"fmt"
-	"os"
+	"strings"
 
 	"github.com/anthropics/anthropic-sdk-go"
 	"github.com/anthropics/anthropic-sdk-go/option"
@@ -14,13 +14,8 @@ type Client struct {
 	client *anthropic.Client
 }
 
-// NewClient creates a new Anthropic API client
-func NewClient() (*Client, error) {
-	apiKey := os.Getenv("ANTHROPIC_API_KEY")
-	if apiKey == "" {
-		return nil, fmt.Errorf("ANTHROPIC_API_KEY environment variable not set. Please set it to use LLM-based policy extraction")
-	}
-
+// NewClient creates a new Anthropic API client with the provided API key
+func NewClient(apiKey string) (*Client, error) {
 	client := anthropic.NewClient(
 		option.WithAPIKey(apiKey),
 	)
@@ -40,6 +35,11 @@ func (c *Client) SendMessage(ctx context.Context, prompt string) (string, error)
 		Model: anthropic.ModelClaudeHaiku4_5_20251001,
 	})
 	if err != nil {
+		// Check for authentication errors
+		errStr := err.Error()
+		if strings.Contains(errStr, "401") || strings.Contains(errStr, "authentication_error") {
+			return "", fmt.Errorf("authentication failed - your API key is invalid or expired. Please run 'tanagram sync' to update your API key")
+		}
 		return "", fmt.Errorf("failed to send message: %w", err)
 	}
 

package/main.go

@@ -6,6 +6,7 @@ import (
 
 	"github.com/tanagram/cli/commands"
 	"github.com/tanagram/cli/metrics"
+	"github.com/tanagram/cli/tui"
 )
 
 func main() {
@@ -36,6 +37,36 @@ func main() {
 			"command": "list",
 		})
 		err = commands.List()
+	case "welcome":
+		metrics.Track("command.execute", map[string]interface{}{
+			"command": "welcome",
+		})
+		choice, err := tui.RunWelcomeScreen()
+		if err != nil {
+			fmt.Fprintf(os.Stderr, "Error: %v\n", err)
+			os.Exit(1)
+		}
+		switch choice {
+		case tui.ChoiceImportPolicies:
+			fmt.Println("\n✓ Selected: Import policies from Tanagram")
+			fmt.Println("  (This feature will be implemented to connect to Tanagram cloud)")
+		case tui.ChoiceLocalMode:
+			fmt.Println("\n✓ Selected: Continue with local (no sign in)")
+			fmt.Println("  Continuing with local policy enforcement...")
+		case tui.ChoiceNone:
+			fmt.Println("\nNo selection made")
+		}
+		return
+	case "puzzle":
+		metrics.Track("command.execute", map[string]interface{}{
+			"command": "puzzle",
+		})
+		err := tui.RunPuzzleEditor()
+		if err != nil {
+			fmt.Fprintf(os.Stderr, "Error: %v\n", err)
+			os.Exit(1)
+		}
+		return
 	case "help", "-h", "--help":
 		printHelp()
 		return

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tanagram/cli",
-  "version": "0.1.25",
+  "version": "0.1.27",
   "description": "Tanagram - Catch sloppy code before it ships",
   "main": "index.js",
   "bin": {
@@ -35,6 +35,7 @@
     "bin/tanagram.js",
     "checker/",
     "commands/",
+    "config/",
     "extractor/",
     "fixtures/",
     "git/",
@@ -42,10 +43,12 @@
     "metrics/",
     "parser/",
     "storage/",
+    "tui/",
     "main.go",
     "go.mod",
     "go.sum",
     "install.js",
+    "tanagram-config.json",
     "README.md",
     "LICENSE"
   ]

package/tanagram-config.json

@@ -0,0 +1,72 @@
+[
+  {
+    "id": 1,
+    "type": "small-triangle",
+    "position": {
+      "X": 22,
+      "Y": 8
+    },
+    "rotation": 180,
+    "flipped": true
+  },
+  {
+    "id": 2,
+    "type": "small-triangle",
+    "position": {
+      "X": 52,
+      "Y": 16
+    },
+    "rotation": 0,
+    "flipped": true
+  },
+  {
+    "id": 3,
+    "type": "medium-triangle",
+    "position": {
+      "X": 68,
+      "Y": 7
+    },
+    "rotation": 0,
+    "flipped": false
+  },
+  {
+    "id": 4,
+    "type": "large-triangle",
+    "position": {
+      "X": 48,
+      "Y": 20
+    },
+    "rotation": 315,
+    "flipped": true
+  },
+  {
+    "id": 5,
+    "type": "large-triangle",
+    "position": {
+      "X": 22,
+      "Y": 7
+    },
+    "rotation": 0,
+    "flipped": true
+  },
+  {
+    "id": 6,
+    "type": "square",
+    "position": {
+      "X": 50,
+      "Y": 7
+    },
+    "rotation": 0,
+    "flipped": false
+  },
+  {
+    "id": 7,
+    "type": "parallelogram",
+    "position": {
+      "X": 50,
+      "Y": 16
+    },
+    "rotation": 135,
+    "flipped": true
+  }
+]