@triedotdev/mcp 1.0.166 → 1.0.167

package/dist/chunk-2HF65EHQ.js

@@ -0,0 +1,311 @@
+// src/agent/git.ts
+import { existsSync } from "fs";
+import path from "path";
+
+// src/utils/command-runner.ts
+import { exec, execFile, execSync } from "child_process";
+import { promisify } from "util";
+
+// src/utils/audit-logger.ts
+function createAuditEntry(skillName, skillSource, triggeredBy, targetPath) {
+  return {
+    skillName,
+    skillSource,
+    triggeredBy,
+    targetPath,
+    startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    commands: []
+  };
+}
+function completeAuditEntry(entry, success, error) {
+  const result = {
+    ...entry,
+    completedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    success
+  };
+  if (error !== void 0) {
+    result.error = error;
+  }
+  return result;
+}
+async function logSkillExecution(_execution) {
+}
+
+// src/utils/command-runner.ts
+var execAsync = promisify(exec);
+var execFileAsync = promisify(execFile);
+function redact(text) {
+  return text.replace(/\b(AWS|ANTHROPIC|OPENAI|GITHUB)_[A-Z0-9_]*\s*=\s*([^\s"'`]+)/gi, "$1_<REDACTED>=<REDACTED>").replace(/\bBearer\s+[A-Za-z0-9\-._~+/]+=*\b/g, "Bearer <REDACTED>").replace(/\bghp_[A-Za-z0-9]{20,}\b/g, "ghp_<REDACTED>").replace(/\b(?:xox[baprs]-)[A-Za-z0-9-]{10,}\b/g, "<REDACTED_SLACK_TOKEN>").replace(/\bAKIA[0-9A-Z]{16}\b/g, "AKIA<REDACTED>");
+}
+function clampOutput(text, maxChars) {
+  if (text.length <= maxChars) return text;
+  return text.slice(0, maxChars) + `
+\u2026(truncated ${text.length - maxChars} chars)`;
+}
+function buildCommandRecord(command) {
+  return {
+    command,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+async function finalizeAndWrite(entry, cmd, outcome, options) {
+  const duration = Date.now() - outcome.startedAt;
+  cmd.duration = duration;
+  if (outcome.exitCode !== void 0) {
+    cmd.exitCode = outcome.exitCode;
+  }
+  const captureOutput = options?.captureOutput ?? false;
+  const redactOutput = options?.redactOutput ?? true;
+  const maxOutputChars = options?.maxOutputChars ?? 2e3;
+  if (captureOutput) {
+    const out = outcome.stdout ?? "";
+    const err = outcome.stderr ?? "";
+    cmd.stdout = redactOutput ? redact(clampOutput(out, maxOutputChars)) : clampOutput(out, maxOutputChars);
+    cmd.stderr = redactOutput ? redact(clampOutput(err, maxOutputChars)) : clampOutput(err, maxOutputChars);
+  }
+  const completed = completeAuditEntry(entry, outcome.success, outcome.error);
+  await logSkillExecution(completed);
+}
+function runShellCommandSync(command, audit, options) {
+  const startedAt = Date.now();
+  const entry = createAuditEntry(audit.actor, audit.source ?? "trie", audit.triggeredBy, audit.targetPath);
+  const cmd = buildCommandRecord(command);
+  entry.commands?.push(cmd);
+  try {
+    const stdout = execSync(command, {
+      cwd: options?.cwd,
+      timeout: options?.timeoutMs,
+      maxBuffer: options?.maxBuffer,
+      encoding: "utf-8",
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    void finalizeAndWrite(entry, cmd, { success: true, exitCode: 0, stdout, stderr: "", startedAt }, options);
+    return { stdout: stdout ?? "", exitCode: 0 };
+  } catch (e) {
+    const err = e;
+    const stdout = typeof err.stdout === "string" ? err.stdout : "";
+    const stderr = typeof err.stderr === "string" ? err.stderr : "";
+    const exitCode = typeof err.status === "number" ? err.status : 1;
+    void finalizeAndWrite(
+      entry,
+      cmd,
+      { success: false, exitCode, stdout, stderr, error: err.message, startedAt },
+      { ...options, captureOutput: options?.captureOutput ?? true }
+    );
+    return { stdout, exitCode };
+  }
+}
+async function runExecFile(file, args, audit, options) {
+  const startedAt = Date.now();
+  const command = [file, ...args].join(" ");
+  const entry = createAuditEntry(audit.actor, audit.source ?? "trie", audit.triggeredBy, audit.targetPath);
+  const cmd = buildCommandRecord(command);
+  entry.commands?.push(cmd);
+  try {
+    const { stdout, stderr } = await execFileAsync(file, args, {
+      cwd: options?.cwd,
+      timeout: options?.timeoutMs,
+      maxBuffer: options?.maxBuffer
+    });
+    await finalizeAndWrite(entry, cmd, { success: true, exitCode: 0, stdout: String(stdout ?? ""), stderr: String(stderr ?? ""), startedAt }, options);
+    return { stdout: String(stdout ?? ""), stderr: String(stderr ?? ""), exitCode: 0 };
+  } catch (e) {
+    const err = e;
+    const stdout = typeof err.stdout === "string" ? err.stdout : "";
+    const stderr = typeof err.stderr === "string" ? err.stderr : "";
+    const exitCode = typeof err.code === "number" ? err.code : 1;
+    await finalizeAndWrite(
+      entry,
+      cmd,
+      { success: false, exitCode, stdout, stderr, error: err.message, startedAt },
+      { ...options, captureOutput: options?.captureOutput ?? true }
+    );
+    return { stdout, stderr, exitCode };
+  }
+}
+
+// src/agent/git.ts
+async function execGit(args, cwd) {
+  try {
+    const { stdout } = await runExecFile(
+      "git",
+      ["-C", cwd, ...args],
+      { actor: "internal:git", triggeredBy: "manual", targetPath: cwd },
+      { maxBuffer: 10 * 1024 * 1024, captureOutput: false }
+    );
+    return stdout.trim();
+  } catch (error) {
+    const stderr = error?.stderr?.toString();
+    if (stderr?.includes("not a git repository") || stderr?.includes("does not have any commits")) {
+      return null;
+    }
+    throw error;
+  }
+}
+async function ensureRepo(projectPath) {
+  const result = await execGit(["rev-parse", "--is-inside-work-tree"], projectPath);
+  return result === "true";
+}
+function parseNameStatus(output) {
+  return output.split("\n").map((line) => line.trim()).filter(Boolean).map((line) => {
+    const parts = line.split("	");
+    const status = parts[0] ?? "";
+    const filePath = parts[1] ?? "";
+    const oldPath = parts[2];
+    const change = { status, path: filePath };
+    if (oldPath) change.oldPath = oldPath;
+    return change;
+  }).filter((entry) => entry.path.length > 0);
+}
+async function getRecentCommits(projectPath, limit) {
+  const isRepo = await ensureRepo(projectPath);
+  if (!isRepo) return [];
+  const output = await execGit(
+    ["log", `-n`, String(limit), "--pretty=format:%H%x09%an%x09%ad%x09%s", "--date=iso"],
+    projectPath
+  );
+  if (!output) return [];
+  return output.split("\n").map((line) => {
+    const [hash, author, date, message] = line.split("	");
+    return { hash, author, date, message };
+  });
+}
+async function getLastCommit(projectPath) {
+  const commits = await getRecentCommits(projectPath, 1);
+  return commits[0] ?? null;
+}
+async function getStagedChanges(projectPath) {
+  const isRepo = await ensureRepo(projectPath);
+  if (!isRepo) return [];
+  const output = await execGit(["diff", "--cached", "--name-status"], projectPath);
+  if (!output) return [];
+  return parseNameStatus(output);
+}
+async function getUncommittedChanges(projectPath) {
+  const isRepo = await ensureRepo(projectPath);
+  if (!isRepo) return [];
+  const changes = [];
+  const unstaged = await execGit(["diff", "--name-status"], projectPath);
+  if (unstaged) {
+    changes.push(...parseNameStatus(unstaged));
+  }
+  const untracked = await execGit(["ls-files", "--others", "--exclude-standard"], projectPath);
+  if (untracked) {
+    changes.push(
+      ...untracked.split("\n").map((p) => p.trim()).filter(Boolean).map((p) => ({ status: "??", path: p }))
+    );
+  }
+  return changes;
+}
+async function getGitChangedFiles(projectPath) {
+  const isRepo = await ensureRepo(projectPath);
+  if (!isRepo) return null;
+  const [staged, uncommitted] = await Promise.all([
+    getStagedChanges(projectPath).catch(() => []),
+    getUncommittedChanges(projectPath).catch(() => [])
+  ]);
+  const paths = /* @__PURE__ */ new Set();
+  for (const change of [...staged, ...uncommitted]) {
+    if (change.path) paths.add(change.path);
+    if (change.oldPath) paths.add(change.oldPath);
+  }
+  return [...paths];
+}
+async function getDiff(projectPath, commitHash) {
+  const isRepo = await ensureRepo(projectPath);
+  if (!isRepo) return "";
+  const diff = await execGit(["show", commitHash, "--unified=3", "--no-color"], projectPath);
+  return diff ?? "";
+}
+async function getWorkingTreeDiff(projectPath, stagedOnly = false) {
+  const isRepo = await ensureRepo(projectPath);
+  if (!isRepo) return "";
+  const args = stagedOnly ? ["diff", "--cached", "--unified=3", "--no-color"] : ["diff", "--unified=3", "--no-color"];
+  const diff = await execGit(args, projectPath);
+  return diff ?? "";
+}
+async function getUnpushedCommits(projectPath) {
+  const isRepo = await ensureRepo(projectPath);
+  if (!isRepo) return [];
+  const upstream = await execGit(["rev-parse", "--abbrev-ref", "--symbolic-full-name", "@{u}"], projectPath);
+  if (!upstream) {
+    return getRecentCommits(projectPath, 10);
+  }
+  const output = await execGit(["log", `${upstream}..HEAD`, "--pretty=format:%H%x09%an%x09%ad%x09%s", "--date=iso"], projectPath);
+  if (!output) return [];
+  return output.split("\n").filter(Boolean).map((line) => {
+    const [hash, author, date, message] = line.split("	");
+    return { hash, author, date, message };
+  });
+}
+function resolveRepoPath(projectPath) {
+  const gitDir = path.join(projectPath, ".git");
+  if (existsSync(gitDir)) return projectPath;
+  return projectPath;
+}
+async function isGitRepo(projectPath) {
+  const result = await execGit(["rev-parse", "--is-inside-work-tree"], projectPath);
+  return result === "true";
+}
+async function getChangedFilesSinceTimestamp(projectPath, timestamp) {
+  const isRepo = await isGitRepo(projectPath);
+  if (!isRepo) return null;
+  try {
+    const sinceDate = new Date(timestamp).toISOString();
+    const GIT_TIMEOUT_MS = 5e3;
+    const startTime = Date.now();
+    const committedChangesPromise = execGit(
+      ["log", `--since=${sinceDate}`, "--name-only", "--pretty=format:"],
+      projectPath
+    );
+    const committedChangesTimeout = new Promise((resolve) => {
+      setTimeout(() => resolve(null), GIT_TIMEOUT_MS);
+    });
+    const committedChanges = await Promise.race([committedChangesPromise, committedChangesTimeout]);
+    if (Date.now() - startTime > GIT_TIMEOUT_MS) {
+      return null;
+    }
+    const stagedPromise = execGit(["diff", "--cached", "--name-only"], projectPath);
+    const unstagedPromise = execGit(["diff", "--name-only"], projectPath);
+    const untrackedPromise = execGit(
+      ["ls-files", "--others", "--exclude-standard"],
+      projectPath
+    );
+    const timeoutPromise = new Promise((resolve) => {
+      setTimeout(() => resolve(null), Math.max(0, GIT_TIMEOUT_MS - (Date.now() - startTime)));
+    });
+    const [stagedChanges, unstagedChanges, untrackedFiles] = await Promise.race([
+      Promise.all([stagedPromise, unstagedPromise, untrackedPromise]),
+      timeoutPromise.then(() => [null, null, null])
+    ]);
+    const changedFiles = /* @__PURE__ */ new Set();
+    const addFiles = (output) => {
+      if (output) {
+        output.split("\n").map((f) => f.trim()).filter(Boolean).forEach((f) => changedFiles.add(path.join(projectPath, f)));
+      }
+    };
+    addFiles(committedChanges);
+    addFiles(stagedChanges);
+    addFiles(unstagedChanges);
+    addFiles(untrackedFiles);
+    return Array.from(changedFiles);
+  } catch {
+    return null;
+  }
+}
+
+export {
+  runShellCommandSync,
+  getRecentCommits,
+  getLastCommit,
+  getStagedChanges,
+  getUncommittedChanges,
+  getGitChangedFiles,
+  getDiff,
+  getWorkingTreeDiff,
+  getUnpushedCommits,
+  resolveRepoPath,
+  isGitRepo,
+  getChangedFilesSinceTimestamp
+};
+//# sourceMappingURL=chunk-2HF65EHQ.js.map

package/dist/chunk-2HF65EHQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agent/git.ts","../src/utils/command-runner.ts","../src/utils/audit-logger.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport { runExecFile } from '../utils/command-runner.js';\n\nexport interface Commit {\n  hash: string;\n  author: string;\n  date: string;\n  message: string;\n}\n\nexport interface Change {\n  path: string;\n  status: string;\n  oldPath?: string;\n}\n\nasync function execGit(args: string[], cwd: string): Promise<string | null> {\n  try {\n    const { stdout } = await runExecFile(\n      'git',\n      ['-C', cwd, ...args],\n      { actor: 'internal:git', triggeredBy: 'manual', targetPath: cwd },\n      { maxBuffer: 10 * 1024 * 1024, captureOutput: false }\n    );\n    return stdout.trim();\n  } catch (error: any) {\n    const stderr: string | undefined = error?.stderr?.toString();\n    // Gracefully handle non-git directories and repos with no commits\n    if (stderr?.includes('not a git repository') || stderr?.includes('does not have any commits')) {\n      return null;\n    }\n    throw error;\n  }\n}\n\nasync function ensureRepo(projectPath: string): Promise<boolean> {\n  const result = await execGit(['rev-parse', '--is-inside-work-tree'], projectPath);\n  return result === 'true';\n}\n\nfunction parseNameStatus(output: string): Change[] {\n  return output\n    .split('\\n')\n    .map((line) => line.trim())\n    .filter(Boolean)\n    .map((line) => {\n      const parts = line.split('\\t');\n      const status = parts[0] ?? '';\n      const filePath = parts[1] ?? '';\n      const oldPath = parts[2];\n      const change: Change = { status, path: filePath };\n      if (oldPath) change.oldPath = oldPath;\n      return change;\n    })\n    .filter((entry) => entry.path.length > 0);\n}\n\nexport async function getRecentCommits(projectPath: string, limit: number): Promise<Commit[]> {\n  const isRepo = await ensureRepo(projectPath);\n  if (!isRepo) return [];\n\n  const output = await execGit(\n    ['log', `-n`, String(limit), '--pretty=format:%H%x09%an%x09%ad%x09%s', '--date=iso'],\n    projectPath\n  );\n\n  if (!output) return [];\n\n  return output.split('\\n').map((line) => {\n    const [hash, author, date, message] = line.split('\\t');\n    return { hash, author, date, message } as Commit;\n  });\n}\n\nexport async function getLastCommit(projectPath: string): Promise<Commit | null> {\n  const commits = await getRecentCommits(projectPath, 1);\n  return commits[0] ?? null;\n}\n\nexport async function getStagedChanges(projectPath: string): Promise<Change[]> {\n  const isRepo = await ensureRepo(projectPath);\n  if (!isRepo) return [];\n\n  const output = await execGit(['diff', '--cached', '--name-status'], projectPath);\n  if (!output) return [];\n  return parseNameStatus(output);\n}\n\nexport async function getUncommittedChanges(projectPath: string): Promise<Change[]> {\n  const isRepo = await ensureRepo(projectPath);\n  if (!isRepo) return [];\n\n  const changes: Change[] = [];\n\n  const unstaged = await execGit(['diff', '--name-status'], projectPath);\n  if (unstaged) {\n    changes.push(...parseNameStatus(unstaged));\n  }\n\n  const untracked = await execGit(['ls-files', '--others', '--exclude-standard'], projectPath);\n  if (untracked) {\n    changes.push(\n      ...untracked\n        .split('\\n')\n        .map((p) => p.trim())\n        .filter(Boolean)\n        .map((p) => ({ status: '??', path: p }))\n    );\n  }\n\n  return changes;\n}\n\n/**\n * Get a flat list of changed file paths in the working tree.\n * Convenience helper used by tooling (e.g. cache invalidation).\n *\n * Returns null if not a git repository.\n */\nexport async function getGitChangedFiles(projectPath: string): Promise<string[] | null> {\n  const isRepo = await ensureRepo(projectPath);\n  if (!isRepo) return null;\n\n  const [staged, uncommitted] = await Promise.all([\n    getStagedChanges(projectPath).catch(() => []),\n    getUncommittedChanges(projectPath).catch(() => []),\n  ]);\n\n  const paths = new Set<string>();\n  for (const change of [...staged, ...uncommitted]) {\n    if (change.path) paths.add(change.path);\n    if (change.oldPath) paths.add(change.oldPath);\n  }\n\n  return [...paths];\n}\n\nexport async function getDiff(projectPath: string, commitHash: string): Promise<string> {\n  const isRepo = await ensureRepo(projectPath);\n  if (!isRepo) return '';\n\n  const diff = await execGit(['show', commitHash, '--unified=3', '--no-color'], projectPath);\n  return diff ?? '';\n}\n\nexport async function getWorkingTreeDiff(projectPath: string, stagedOnly = false): Promise<string> {\n  const isRepo = await ensureRepo(projectPath);\n  if (!isRepo) return '';\n\n  const args = stagedOnly ? ['diff', '--cached', '--unified=3', '--no-color'] : ['diff', '--unified=3', '--no-color'];\n  const diff = await execGit(args, projectPath);\n  return diff ?? '';\n}\n\nexport async function getUnpushedCommits(projectPath: string): Promise<Commit[]> {\n  const isRepo = await ensureRepo(projectPath);\n  if (!isRepo) return [];\n\n  // Handles detached HEAD by falling back to HEAD if upstream missing\n  const upstream = await execGit(['rev-parse', '--abbrev-ref', '--symbolic-full-name', '@{u}'], projectPath);\n  if (!upstream) {\n    return getRecentCommits(projectPath, 10);\n  }\n\n  const output = await execGit(['log', `${upstream}..HEAD`, '--pretty=format:%H%x09%an%x09%ad%x09%s', '--date=iso'], projectPath);\n  if (!output) return [];\n\n  return output.split('\\n').filter(Boolean).map((line) => {\n    const [hash, author, date, message] = line.split('\\t');\n    return { hash, author, date, message } as Commit;\n  });\n}\n\nexport function resolveRepoPath(projectPath: string): string {\n  const gitDir = path.join(projectPath, '.git');\n  if (existsSync(gitDir)) return projectPath;\n  return projectPath;\n}\n\n/**\n * Check if the given path is inside a git repository\n */\nexport async function isGitRepo(projectPath: string): Promise<boolean> {\n  const result = await execGit(['rev-parse', '--is-inside-work-tree'], projectPath);\n  return result === 'true';\n}\n\n/**\n * Get files changed since a given timestamp\n * Uses git log to find commits after timestamp, then gets affected files\n * Returns null if not a git repo or on error\n */\nexport async function getChangedFilesSinceTimestamp(\n  projectPath: string,\n  timestamp: number\n): Promise<string[] | null> {\n  const isRepo = await isGitRepo(projectPath);\n  if (!isRepo) return null;\n\n  try {\n    // Convert timestamp to ISO date for git\n    const sinceDate = new Date(timestamp).toISOString();\n    \n    // Set timeout for git operations (5 seconds total)\n    const GIT_TIMEOUT_MS = 5000;\n    const startTime = Date.now();\n    \n    // Get all files that changed in commits since the timestamp\n    // Use Promise.race to timeout if git operations take too long\n    const committedChangesPromise = execGit(\n      ['log', `--since=${sinceDate}`, '--name-only', '--pretty=format:'],\n      projectPath\n    );\n    const committedChangesTimeout = new Promise<string | null>((resolve) => {\n      setTimeout(() => resolve(null), GIT_TIMEOUT_MS);\n    });\n    const committedChanges = await Promise.race([committedChangesPromise, committedChangesTimeout]);\n\n    // Check if we've exceeded timeout\n    if (Date.now() - startTime > GIT_TIMEOUT_MS) {\n      return null;\n    }\n\n    // Get currently modified files (staged + unstaged) - run in parallel with timeout\n    const stagedPromise = execGit(['diff', '--cached', '--name-only'], projectPath);\n    const unstagedPromise = execGit(['diff', '--name-only'], projectPath);\n    const untrackedPromise = execGit(\n      ['ls-files', '--others', '--exclude-standard'],\n      projectPath\n    );\n    \n    const timeoutPromise = new Promise<null>((resolve) => {\n      setTimeout(() => resolve(null), Math.max(0, GIT_TIMEOUT_MS - (Date.now() - startTime)));\n    });\n    \n    const [stagedChanges, unstagedChanges, untrackedFiles] = await Promise.race([\n      Promise.all([stagedPromise, unstagedPromise, untrackedPromise]),\n      timeoutPromise.then(() => [null, null, null] as const)\n    ]);\n\n    // Combine all changed files\n    const changedFiles = new Set<string>();\n    \n    const addFiles = (output: string | null) => {\n      if (output) {\n        output.split('\\n')\n          .map(f => f.trim())\n          .filter(Boolean)\n          .forEach(f => changedFiles.add(path.join(projectPath, f)));\n      }\n    };\n\n    addFiles(committedChanges);\n    addFiles(stagedChanges);\n    addFiles(unstagedChanges);\n    addFiles(untrackedFiles);\n\n    return Array.from(changedFiles);\n  } catch {\n    return null;\n  }\n}\n","/**\n * Command Runner (with audit logging)\n *\n * Goal: Whenever Trie runs a shell command, record:\n * - command string\n * - exit code\n * - duration\n * - optional (redacted) stdout/stderr\n */\nimport { exec, execFile, execSync, type ExecException } from 'node:child_process';\nimport { promisify } from 'node:util';\n\nimport {\n  createAuditEntry,\n  completeAuditEntry,\n  logSkillExecution,\n  type ExecutedCommand,\n  type SkillExecution,\n} from './audit-logger.js';\n\nconst execAsync = promisify(exec);\nconst execFileAsync = promisify(execFile);\n\nexport type { ExecutedCommand, SkillExecution };\nexport type AuditTriggeredBy = SkillExecution['triggeredBy'];\n\nexport interface CommandAuditContext {\n  /** Shown as `skillName` in audit logs; use something like `tool:pr-review` */\n  actor: string;\n  /** Where this came from in the product flow */\n  triggeredBy: AuditTriggeredBy;\n  /** Usually the working directory / repo path */\n  targetPath: string;\n  /** Optional string for `skillSource` */\n  source?: string;\n}\n\nexport interface RunCommandOptions {\n  cwd?: string;\n  timeoutMs?: number;\n  maxBuffer?: number;\n\n  /** Capture stdout/stderr in the audit log */\n  captureOutput?: boolean;\n  /** Redact obvious secrets from captured output */\n  redactOutput?: boolean;\n  /** Max chars to keep per output stream */\n  maxOutputChars?: number;\n}\n\nfunction redact(text: string): string {\n  // Keep this conservative to avoid false redaction and avoid expensive processing.\n  return text\n    // Common key=value secrets\n    .replace(/\\b(AWS|ANTHROPIC|OPENAI|GITHUB)_[A-Z0-9_]*\\s*=\\s*([^\\s\"'`]+)/gi, '$1_<REDACTED>=<REDACTED>')\n    // Bearer tokens\n    .replace(/\\bBearer\\s+[A-Za-z0-9\\-._~+/]+=*\\b/g, 'Bearer <REDACTED>')\n    // GitHub tokens / generic tokens\n    .replace(/\\bghp_[A-Za-z0-9]{20,}\\b/g, 'ghp_<REDACTED>')\n    .replace(/\\b(?:xox[baprs]-)[A-Za-z0-9-]{10,}\\b/g, '<REDACTED_SLACK_TOKEN>')\n    // AWS access key id (best-effort)\n    .replace(/\\bAKIA[0-9A-Z]{16}\\b/g, 'AKIA<REDACTED>');\n}\n\nfunction clampOutput(text: string, maxChars: number): string {\n  if (text.length <= maxChars) return text;\n  return text.slice(0, maxChars) + `\\n…(truncated ${text.length - maxChars} chars)`;\n}\n\nfunction buildCommandRecord(command: string): ExecutedCommand {\n  return {\n    command,\n    timestamp: new Date().toISOString(),\n  };\n}\n\nasync function finalizeAndWrite(\n  entry: SkillExecution,\n  cmd: ExecutedCommand,\n  outcome: { success: boolean; exitCode?: number; stdout?: string; stderr?: string; error?: string; startedAt: number },\n  options?: Pick<RunCommandOptions, 'captureOutput' | 'redactOutput' | 'maxOutputChars'>\n): Promise<void> {\n  const duration = Date.now() - outcome.startedAt;\n  cmd.duration = duration;\n  if (outcome.exitCode !== undefined) {\n    cmd.exitCode = outcome.exitCode;\n  }\n\n  const captureOutput = options?.captureOutput ?? false;\n  const redactOutput = options?.redactOutput ?? true;\n  const maxOutputChars = options?.maxOutputChars ?? 2000;\n\n  if (captureOutput) {\n    const out = outcome.stdout ?? '';\n    const err = outcome.stderr ?? '';\n    cmd.stdout = redactOutput ? redact(clampOutput(out, maxOutputChars)) : clampOutput(out, maxOutputChars);\n    cmd.stderr = redactOutput ? redact(clampOutput(err, maxOutputChars)) : clampOutput(err, maxOutputChars);\n  }\n\n  const completed = completeAuditEntry(entry, outcome.success, outcome.error);\n  await logSkillExecution(completed);\n}\n\nexport async function runShellCommand(\n  command: string,\n  audit: CommandAuditContext,\n  options?: RunCommandOptions\n): Promise<{ stdout: string; stderr: string; exitCode: number }> {\n  const startedAt = Date.now();\n  const entry = createAuditEntry(audit.actor, audit.source ?? 'trie', audit.triggeredBy, audit.targetPath);\n  const cmd = buildCommandRecord(command);\n  entry.commands?.push(cmd);\n\n  try {\n    const { stdout, stderr } = await execAsync(command, {\n      cwd: options?.cwd,\n      timeout: options?.timeoutMs,\n      maxBuffer: options?.maxBuffer,\n    });\n\n    await finalizeAndWrite(entry, cmd, { success: true, exitCode: 0, stdout, stderr, startedAt }, options);\n    return { stdout: stdout ?? '', stderr: stderr ?? '', exitCode: 0 };\n  } catch (e) {\n    const err = e as ExecException & { stdout?: unknown; stderr?: unknown; code?: unknown };\n    const stdout = typeof err.stdout === 'string' ? err.stdout : '';\n    const stderr = typeof err.stderr === 'string' ? err.stderr : '';\n    const exitCode = typeof err.code === 'number' ? err.code : 1;\n\n    await finalizeAndWrite(\n      entry,\n      cmd,\n      { success: false, exitCode, stdout, stderr, error: err.message, startedAt },\n      // Capture output for failures by default (so audits are useful)\n      { ...options, captureOutput: options?.captureOutput ?? true }\n    );\n\n    return { stdout, stderr, exitCode };\n  }\n}\n\nexport function runShellCommandSync(\n  command: string,\n  audit: CommandAuditContext,\n  options?: Omit<RunCommandOptions, 'timeoutMs'> & { timeoutMs?: number }\n): { stdout: string; exitCode: number } {\n  const startedAt = Date.now();\n  const entry = createAuditEntry(audit.actor, audit.source ?? 'trie', audit.triggeredBy, audit.targetPath);\n  const cmd = buildCommandRecord(command);\n  entry.commands?.push(cmd);\n\n  try {\n    const stdout = execSync(command, {\n      cwd: options?.cwd,\n      timeout: options?.timeoutMs,\n      maxBuffer: options?.maxBuffer,\n      encoding: 'utf-8',\n      stdio: ['pipe', 'pipe', 'pipe'],\n    });\n\n    // Fire-and-forget write; sync APIs can’t await.\n    void finalizeAndWrite(entry, cmd, { success: true, exitCode: 0, stdout, stderr: '', startedAt }, options);\n    return { stdout: stdout ?? '', exitCode: 0 };\n  } catch (e) {\n    const err = e as ExecException & { stdout?: unknown; stderr?: unknown; status?: unknown };\n    const stdout = typeof err.stdout === 'string' ? err.stdout : '';\n    const stderr = typeof err.stderr === 'string' ? err.stderr : '';\n    const exitCode = typeof err.status === 'number' ? err.status : 1;\n\n    void finalizeAndWrite(\n      entry,\n      cmd,\n      { success: false, exitCode, stdout, stderr, error: err.message, startedAt },\n      { ...options, captureOutput: options?.captureOutput ?? true }\n    );\n\n    return { stdout, exitCode };\n  }\n}\n\nexport async function runExecFile(\n  file: string,\n  args: string[],\n  audit: CommandAuditContext,\n  options?: Omit<RunCommandOptions, 'timeoutMs'> & { timeoutMs?: number }\n): Promise<{ stdout: string; stderr: string; exitCode: number }> {\n  const startedAt = Date.now();\n  const command = [file, ...args].join(' ');\n  const entry = createAuditEntry(audit.actor, audit.source ?? 'trie', audit.triggeredBy, audit.targetPath);\n  const cmd = buildCommandRecord(command);\n  entry.commands?.push(cmd);\n\n  try {\n    const { stdout, stderr } = await execFileAsync(file, args, {\n      cwd: options?.cwd,\n      timeout: options?.timeoutMs,\n      maxBuffer: options?.maxBuffer,\n    });\n\n    await finalizeAndWrite(entry, cmd, { success: true, exitCode: 0, stdout: String(stdout ?? ''), stderr: String(stderr ?? ''), startedAt }, options);\n    return { stdout: String(stdout ?? ''), stderr: String(stderr ?? ''), exitCode: 0 };\n  } catch (e) {\n    const err = e as ExecException & { stdout?: unknown; stderr?: unknown; code?: unknown };\n    const stdout = typeof err.stdout === 'string' ? err.stdout : '';\n    const stderr = typeof err.stderr === 'string' ? err.stderr : '';\n    const exitCode = typeof err.code === 'number' ? err.code : 1;\n\n    await finalizeAndWrite(\n      entry,\n      cmd,\n      { success: false, exitCode, stdout, stderr, error: err.message, startedAt },\n      { ...options, captureOutput: options?.captureOutput ?? true }\n    );\n    return { stdout, stderr, exitCode };\n  }\n}\n\n","/**\n * Audit logger stub\n *\n * Audit functionality has been integrated into the decision ledger.\n * This module exists to keep legacy CLI/tooling paths working without the old skills system.\n */\n\nexport interface AuditStatistics {\n  totalScans: number;\n  totalIssues: number;\n  criticalCount: number;\n  seriousCount: number;\n  moderateCount: number;\n  lowCount: number;\n  totalExecutions: number;\n  successfulExecutions: number;\n  failedExecutions: number;\n  uniqueSkills: number;\n  totalCommands: number;\n  blockedCommands: number;\n  totalNetworkCalls: number;\n  blockedNetworkCalls: number;\n}\n\nexport interface AuditEntry {\n  id: string;\n  timestamp: string;\n  command: string;\n  status: string;\n  commands?: ExecutedCommand[];\n}\n\nexport interface ExecutedCommand {\n  command: string;\n  timestamp: string;\n  exitCode?: number;\n  duration?: number;\n  stdout?: string;\n  stderr?: string;\n}\n\nexport interface SkillExecution {\n  skillName: string;\n  skillSource: string;\n  triggeredBy: 'scan' | 'mcp' | 'cli' | 'watch' | 'manual';\n  targetPath: string;\n  startedAt: string;\n  completedAt?: string;\n  success?: boolean;\n  error?: string;\n  commands?: ExecutedCommand[];\n}\n\nexport function formatAuditLog(_entry: AuditEntry): string {\n  return 'Audit logging has been integrated into the decision ledger';\n}\n\nexport function getAuditStatistics(): AuditStatistics {\n  return {\n    totalScans: 0,\n    totalIssues: 0,\n    criticalCount: 0,\n    seriousCount: 0,\n    moderateCount: 0,\n    lowCount: 0,\n    totalExecutions: 0,\n    successfulExecutions: 0,\n    failedExecutions: 0,\n    uniqueSkills: 0,\n    totalCommands: 0,\n    blockedCommands: 0,\n    totalNetworkCalls: 0,\n    blockedNetworkCalls: 0,\n  };\n}\n\nexport function createAuditEntry(\n  skillName: string,\n  skillSource: string,\n  triggeredBy: SkillExecution['triggeredBy'],\n  targetPath: string\n): SkillExecution {\n  return {\n    skillName,\n    skillSource,\n    triggeredBy,\n    targetPath,\n    startedAt: new Date().toISOString(),\n    commands: [],\n  };\n}\n\nexport function completeAuditEntry(\n  entry: SkillExecution,\n  success: boolean,\n  error?: string\n): SkillExecution {\n  const result: SkillExecution = {\n    ...entry,\n    completedAt: new Date().toISOString(),\n    success,\n  };\n  if (error !== undefined) {\n    result.error = error;\n  }\n  return result;\n}\n\nexport async function logSkillExecution(_execution: SkillExecution): Promise<void> {\n  // Stub - no-op\n}\n\nexport async function getRecentAuditLogs(_limit: number = 10): Promise<AuditEntry[]> {\n  return [];\n}\n\nexport async function getSkillAuditLogs(_skillName: string): Promise<AuditEntry[]> {\n  return [];\n}\n\n"],"mappings":";AAAA,SAAS,kBAAkB;AAC3B,OAAO,UAAU;;;ACQjB,SAAS,MAAM,UAAU,gBAAoC;AAC7D,SAAS,iBAAiB;;;ACkEnB,SAAS,iBACd,WACA,aACA,aACA,YACgB;AAChB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,UAAU,CAAC;AAAA,EACb;AACF;AAEO,SAAS,mBACd,OACA,SACA,OACgB;AAChB,QAAM,SAAyB;AAAA,IAC7B,GAAG;AAAA,IACH,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC;AAAA,EACF;AACA,MAAI,UAAU,QAAW;AACvB,WAAO,QAAQ;AAAA,EACjB;AACA,SAAO;AACT;AAEA,eAAsB,kBAAkB,YAA2C;AAEnF;;;AD1FA,IAAM,YAAY,UAAU,IAAI;AAChC,IAAM,gBAAgB,UAAU,QAAQ;AA6BxC,SAAS,OAAO,MAAsB;AAEpC,SAAO,KAEJ,QAAQ,kEAAkE,0BAA0B,EAEpG,QAAQ,uCAAuC,mBAAmB,EAElE,QAAQ,6BAA6B,gBAAgB,EACrD,QAAQ,yCAAyC,wBAAwB,EAEzE,QAAQ,yBAAyB,gBAAgB;AACtD;AAEA,SAAS,YAAY,MAAc,UAA0B;AAC3D,MAAI,KAAK,UAAU,SAAU,QAAO;AACpC,SAAO,KAAK,MAAM,GAAG,QAAQ,IAAI;AAAA,mBAAiB,KAAK,SAAS,QAAQ;AAC1E;AAEA,SAAS,mBAAmB,SAAkC;AAC5D,SAAO;AAAA,IACL;AAAA,IACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,EACpC;AACF;AAEA,eAAe,iBACb,OACA,KACA,SACA,SACe;AACf,QAAM,WAAW,KAAK,IAAI,IAAI,QAAQ;AACtC,MAAI,WAAW;AACf,MAAI,QAAQ,aAAa,QAAW;AAClC,QAAI,WAAW,QAAQ;AAAA,EACzB;AAEA,QAAM,gBAAgB,SAAS,iBAAiB;AAChD,QAAM,eAAe,SAAS,gBAAgB;AAC9C,QAAM,iBAAiB,SAAS,kBAAkB;AAElD,MAAI,eAAe;AACjB,UAAM,MAAM,QAAQ,UAAU;AAC9B,UAAM,MAAM,QAAQ,UAAU;AAC9B,QAAI,SAAS,eAAe,OAAO,YAAY,KAAK,cAAc,CAAC,IAAI,YAAY,KAAK,cAAc;AACtG,QAAI,SAAS,eAAe,OAAO,YAAY,KAAK,cAAc,CAAC,IAAI,YAAY,KAAK,cAAc;AAAA,EACxG;AAEA,QAAM,YAAY,mBAAmB,OAAO,QAAQ,SAAS,QAAQ,KAAK;AAC1E,QAAM,kBAAkB,SAAS;AACnC;AAuCO,SAAS,oBACd,SACA,OACA,SACsC;AACtC,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,QAAQ,iBAAiB,MAAM,OAAO,MAAM,UAAU,QAAQ,MAAM,aAAa,MAAM,UAAU;AACvG,QAAM,MAAM,mBAAmB,OAAO;AACtC,QAAM,UAAU,KAAK,GAAG;AAExB,MAAI;AACF,UAAM,SAAS,SAAS,SAAS;AAAA,MAC/B,KAAK,SAAS;AAAA,MACd,SAAS,SAAS;AAAA,MAClB,WAAW,SAAS;AAAA,MACpB,UAAU;AAAA,MACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC;AAGD,SAAK,iBAAiB,OAAO,KAAK,EAAE,SAAS,MAAM,UAAU,GAAG,QAAQ,QAAQ,IAAI,UAAU,GAAG,OAAO;AACxG,WAAO,EAAE,QAAQ,UAAU,IAAI,UAAU,EAAE;AAAA,EAC7C,SAAS,GAAG;AACV,UAAM,MAAM;AACZ,UAAM,SAAS,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAC7D,UAAM,SAAS,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAC7D,UAAM,WAAW,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAE/D,SAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,EAAE,SAAS,OAAO,UAAU,QAAQ,QAAQ,OAAO,IAAI,SAAS,UAAU;AAAA,MAC1E,EAAE,GAAG,SAAS,eAAe,SAAS,iBAAiB,KAAK;AAAA,IAC9D;AAEA,WAAO,EAAE,QAAQ,SAAS;AAAA,EAC5B;AACF;AAEA,eAAsB,YACpB,MACA,MACA,OACA,SAC+D;AAC/D,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,UAAU,CAAC,MAAM,GAAG,IAAI,EAAE,KAAK,GAAG;AACxC,QAAM,QAAQ,iBAAiB,MAAM,OAAO,MAAM,UAAU,QAAQ,MAAM,aAAa,MAAM,UAAU;AACvG,QAAM,MAAM,mBAAmB,OAAO;AACtC,QAAM,UAAU,KAAK,GAAG;AAExB,MAAI;AACF,UAAM,EAAE,QAAQ,OAAO,IAAI,MAAM,cAAc,MAAM,MAAM;AAAA,MACzD,KAAK,SAAS;AAAA,MACd,SAAS,SAAS;AAAA,MAClB,WAAW,SAAS;AAAA,IACtB,CAAC;AAED,UAAM,iBAAiB,OAAO,KAAK,EAAE,SAAS,MAAM,UAAU,GAAG,QAAQ,OAAO,UAAU,EAAE,GAAG,QAAQ,OAAO,UAAU,EAAE,GAAG,UAAU,GAAG,OAAO;AACjJ,WAAO,EAAE,QAAQ,OAAO,UAAU,EAAE,GAAG,QAAQ,OAAO,UAAU,EAAE,GAAG,UAAU,EAAE;AAAA,EACnF,SAAS,GAAG;AACV,UAAM,MAAM;AACZ,UAAM,SAAS,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAC7D,UAAM,SAAS,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAC7D,UAAM,WAAW,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;AAE3D,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,EAAE,SAAS,OAAO,UAAU,QAAQ,QAAQ,OAAO,IAAI,SAAS,UAAU;AAAA,MAC1E,EAAE,GAAG,SAAS,eAAe,SAAS,iBAAiB,KAAK;AAAA,IAC9D;AACA,WAAO,EAAE,QAAQ,QAAQ,SAAS;AAAA,EACpC;AACF;;;ADrMA,eAAe,QAAQ,MAAgB,KAAqC;AAC1E,MAAI;AACF,UAAM,EAAE,OAAO,IAAI,MAAM;AAAA,MACvB;AAAA,MACA,CAAC,MAAM,KAAK,GAAG,IAAI;AAAA,MACnB,EAAE,OAAO,gBAAgB,aAAa,UAAU,YAAY,IAAI;AAAA,MAChE,EAAE,WAAW,KAAK,OAAO,MAAM,eAAe,MAAM;AAAA,IACtD;AACA,WAAO,OAAO,KAAK;AAAA,EACrB,SAAS,OAAY;AACnB,UAAM,SAA6B,OAAO,QAAQ,SAAS;AAE3D,QAAI,QAAQ,SAAS,sBAAsB,KAAK,QAAQ,SAAS,2BAA2B,GAAG;AAC7F,aAAO;AAAA,IACT;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAe,WAAW,aAAuC;AAC/D,QAAM,SAAS,MAAM,QAAQ,CAAC,aAAa,uBAAuB,GAAG,WAAW;AAChF,SAAO,WAAW;AACpB;AAEA,SAAS,gBAAgB,QAA0B;AACjD,SAAO,OACJ,MAAM,IAAI,EACV,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO,EACd,IAAI,CAAC,SAAS;AACb,UAAM,QAAQ,KAAK,MAAM,GAAI;AAC7B,UAAM,SAAS,MAAM,CAAC,KAAK;AAC3B,UAAM,WAAW,MAAM,CAAC,KAAK;AAC7B,UAAM,UAAU,MAAM,CAAC;AACvB,UAAM,SAAiB,EAAE,QAAQ,MAAM,SAAS;AAChD,QAAI,QAAS,QAAO,UAAU;AAC9B,WAAO;AAAA,EACT,CAAC,EACA,OAAO,CAAC,UAAU,MAAM,KAAK,SAAS,CAAC;AAC5C;AAEA,eAAsB,iBAAiB,aAAqB,OAAkC;AAC5F,QAAM,SAAS,MAAM,WAAW,WAAW;AAC3C,MAAI,CAAC,OAAQ,QAAO,CAAC;AAErB,QAAM,SAAS,MAAM;AAAA,IACnB,CAAC,OAAO,MAAM,OAAO,KAAK,GAAG,0CAA0C,YAAY;AAAA,IACnF;AAAA,EACF;AAEA,MAAI,CAAC,OAAQ,QAAO,CAAC;AAErB,SAAO,OAAO,MAAM,IAAI,EAAE,IAAI,CAAC,SAAS;AACtC,UAAM,CAAC,MAAM,QAAQ,MAAM,OAAO,IAAI,KAAK,MAAM,GAAI;AACrD,WAAO,EAAE,MAAM,QAAQ,MAAM,QAAQ;AAAA,EACvC,CAAC;AACH;AAEA,eAAsB,cAAc,aAA6C;AAC/E,QAAM,UAAU,MAAM,iBAAiB,aAAa,CAAC;AACrD,SAAO,QAAQ,CAAC,KAAK;AACvB;AAEA,eAAsB,iBAAiB,aAAwC;AAC7E,QAAM,SAAS,MAAM,WAAW,WAAW;AAC3C,MAAI,CAAC,OAAQ,QAAO,CAAC;AAErB,QAAM,SAAS,MAAM,QAAQ,CAAC,QAAQ,YAAY,eAAe,GAAG,WAAW;AAC/E,MAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,SAAO,gBAAgB,MAAM;AAC/B;AAEA,eAAsB,sBAAsB,aAAwC;AAClF,QAAM,SAAS,MAAM,WAAW,WAAW;AAC3C,MAAI,CAAC,OAAQ,QAAO,CAAC;AAErB,QAAM,UAAoB,CAAC;AAE3B,QAAM,WAAW,MAAM,QAAQ,CAAC,QAAQ,eAAe,GAAG,WAAW;AACrE,MAAI,UAAU;AACZ,YAAQ,KAAK,GAAG,gBAAgB,QAAQ,CAAC;AAAA,EAC3C;AAEA,QAAM,YAAY,MAAM,QAAQ,CAAC,YAAY,YAAY,oBAAoB,GAAG,WAAW;AAC3F,MAAI,WAAW;AACb,YAAQ;AAAA,MACN,GAAG,UACA,MAAM,IAAI,EACV,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO,EACd,IAAI,CAAC,OAAO,EAAE,QAAQ,MAAM,MAAM,EAAE,EAAE;AAAA,IAC3C;AAAA,EACF;AAEA,SAAO;AACT;AAQA,eAAsB,mBAAmB,aAA+C;AACtF,QAAM,SAAS,MAAM,WAAW,WAAW;AAC3C,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,CAAC,QAAQ,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC9C,iBAAiB,WAAW,EAAE,MAAM,MAAM,CAAC,CAAC;AAAA,IAC5C,sBAAsB,WAAW,EAAE,MAAM,MAAM,CAAC,CAAC;AAAA,EACnD,CAAC;AAED,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,UAAU,CAAC,GAAG,QAAQ,GAAG,WAAW,GAAG;AAChD,QAAI,OAAO,KAAM,OAAM,IAAI,OAAO,IAAI;AACtC,QAAI,OAAO,QAAS,OAAM,IAAI,OAAO,OAAO;AAAA,EAC9C;AAEA,SAAO,CAAC,GAAG,KAAK;AAClB;AAEA,eAAsB,QAAQ,aAAqB,YAAqC;AACtF,QAAM,SAAS,MAAM,WAAW,WAAW;AAC3C,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,OAAO,MAAM,QAAQ,CAAC,QAAQ,YAAY,eAAe,YAAY,GAAG,WAAW;AACzF,SAAO,QAAQ;AACjB;AAEA,eAAsB,mBAAmB,aAAqB,aAAa,OAAwB;AACjG,QAAM,SAAS,MAAM,WAAW,WAAW;AAC3C,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,OAAO,aAAa,CAAC,QAAQ,YAAY,eAAe,YAAY,IAAI,CAAC,QAAQ,eAAe,YAAY;AAClH,QAAM,OAAO,MAAM,QAAQ,MAAM,WAAW;AAC5C,SAAO,QAAQ;AACjB;AAEA,eAAsB,mBAAmB,aAAwC;AAC/E,QAAM,SAAS,MAAM,WAAW,WAAW;AAC3C,MAAI,CAAC,OAAQ,QAAO,CAAC;AAGrB,QAAM,WAAW,MAAM,QAAQ,CAAC,aAAa,gBAAgB,wBAAwB,MAAM,GAAG,WAAW;AACzG,MAAI,CAAC,UAAU;AACb,WAAO,iBAAiB,aAAa,EAAE;AAAA,EACzC;AAEA,QAAM,SAAS,MAAM,QAAQ,CAAC,OAAO,GAAG,QAAQ,UAAU,0CAA0C,YAAY,GAAG,WAAW;AAC9H,MAAI,CAAC,OAAQ,QAAO,CAAC;AAErB,SAAO,OAAO,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,SAAS;AACtD,UAAM,CAAC,MAAM,QAAQ,MAAM,OAAO,IAAI,KAAK,MAAM,GAAI;AACrD,WAAO,EAAE,MAAM,QAAQ,MAAM,QAAQ;AAAA,EACvC,CAAC;AACH;AAEO,SAAS,gBAAgB,aAA6B;AAC3D,QAAM,SAAS,KAAK,KAAK,aAAa,MAAM;AAC5C,MAAI,WAAW,MAAM,EAAG,QAAO;AAC/B,SAAO;AACT;AAKA,eAAsB,UAAU,aAAuC;AACrE,QAAM,SAAS,MAAM,QAAQ,CAAC,aAAa,uBAAuB,GAAG,WAAW;AAChF,SAAO,WAAW;AACpB;AAOA,eAAsB,8BACpB,aACA,WAC0B;AAC1B,QAAM,SAAS,MAAM,UAAU,WAAW;AAC1C,MAAI,CAAC,OAAQ,QAAO;AAEpB,MAAI;AAEF,UAAM,YAAY,IAAI,KAAK,SAAS,EAAE,YAAY;AAGlD,UAAM,iBAAiB;AACvB,UAAM,YAAY,KAAK,IAAI;AAI3B,UAAM,0BAA0B;AAAA,MAC9B,CAAC,OAAO,WAAW,SAAS,IAAI,eAAe,kBAAkB;AAAA,MACjE;AAAA,IACF;AACA,UAAM,0BAA0B,IAAI,QAAuB,CAAC,YAAY;AACtE,iBAAW,MAAM,QAAQ,IAAI,GAAG,cAAc;AAAA,IAChD,CAAC;AACD,UAAM,mBAAmB,MAAM,QAAQ,KAAK,CAAC,yBAAyB,uBAAuB,CAAC;AAG9F,QAAI,KAAK,IAAI,IAAI,YAAY,gBAAgB;AAC3C,aAAO;AAAA,IACT;AAGA,UAAM,gBAAgB,QAAQ,CAAC,QAAQ,YAAY,aAAa,GAAG,WAAW;AAC9E,UAAM,kBAAkB,QAAQ,CAAC,QAAQ,aAAa,GAAG,WAAW;AACpE,UAAM,mBAAmB;AAAA,MACvB,CAAC,YAAY,YAAY,oBAAoB;AAAA,MAC7C;AAAA,IACF;AAEA,UAAM,iBAAiB,IAAI,QAAc,CAAC,YAAY;AACpD,iBAAW,MAAM,QAAQ,IAAI,GAAG,KAAK,IAAI,GAAG,kBAAkB,KAAK,IAAI,IAAI,UAAU,CAAC;AAAA,IACxF,CAAC;AAED,UAAM,CAAC,eAAe,iBAAiB,cAAc,IAAI,MAAM,QAAQ,KAAK;AAAA,MAC1E,QAAQ,IAAI,CAAC,eAAe,iBAAiB,gBAAgB,CAAC;AAAA,MAC9D,eAAe,KAAK,MAAM,CAAC,MAAM,MAAM,IAAI,CAAU;AAAA,IACvD,CAAC;AAGD,UAAM,eAAe,oBAAI,IAAY;AAErC,UAAM,WAAW,CAAC,WAA0B;AAC1C,UAAI,QAAQ;AACV,eAAO,MAAM,IAAI,EACd,IAAI,OAAK,EAAE,KAAK,CAAC,EACjB,OAAO,OAAO,EACd,QAAQ,OAAK,aAAa,IAAI,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC;AAAA,MAC7D;AAAA,IACF;AAEA,aAAS,gBAAgB;AACzB,aAAS,aAAa;AACtB,aAAS,eAAe;AACxB,aAAS,cAAc;AAEvB,WAAO,MAAM,KAAK,YAAY;AAAA,EAChC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/{chunk-JNUOW2JS.js → chunk-4MXH2ZPT.js}

@@ -1,9 +1,9 @@
-import {
-  getGoalManager
-} from "./chunk-2Z3TQNNK.js";
 import {
   getHypothesisEngine
-} from "./chunk-JEZ7XJQN.js";
+} from "./chunk-XTFWT2XM.js";
+import {
+  getGoalManager
+} from "./chunk-MRHKX5M5.js";
 import {
   getInsightStore
 } from "./chunk-T63OHG4Q.js";
@@ -12,13 +12,13 @@ import {
   SlackIntegration,
   findCrossProjectPatterns,
   recordToGlobalMemory
-} from "./chunk-TQOO6A4G.js";
+} from "./chunk-7WITSO22.js";
 import {
   ContextGraph
 } from "./chunk-VUL52BQL.js";
 import {
   getStorage
-} from "./chunk-LR5M4RTN.js";
+} from "./chunk-575YT2SD.js";
 import {
   isAIAvailable,
   runAIAnalysis
@@ -29,7 +29,7 @@ import {
   getIssueHash,
   searchIssues,
   storeIssues
-} from "./chunk-S36IO3EE.js";
+} from "./chunk-XE6KQRKZ.js";
 import {
   getProjectState
 } from "./chunk-GTKYBOXL.js";
@@ -1120,7 +1120,7 @@ var TrieAgent = class {
           await this.addInsight(this.createInsight({
             type: "observation",
             message: `${this.pick(PERSONALITY.greetings)} Issue count has been trending up. Might be worth a focused cleanup session.`,
-            suggestedAction: "Run `trie scan` and address top issues",
+            suggestedAction: "Run `trie watch` to monitor and address issues",
             priority: 5,
             category: "quality"
           }));
@@ -1220,7 +1220,7 @@ var TrieAgent = class {
           type: "warning",
           message: `Found ${securityIssues.length} security issue${securityIssues.length > 1 ? "s" : ""} that could expose your app.`,
           suggestedAction: `Review ${affectedFiles.length} file${affectedFiles.length > 1 ? "s" : ""} immediately`,
-          actionCommand: "trie scan --skill security",
+          actionCommand: "trie check",
           priority: 10,
           category: "security",
           relatedIssues: securityIssues.map((i) => i.id),
@@ -1581,13 +1581,13 @@ var TrieAgent = class {
     await this.projectState.recordScan();
     try {
       const riskLevel = issues.filter((i) => i.severity === "critical").length > 0 ? "critical" : issues.filter((i) => i.severity === "serious").length >= 3 ? "high" : issues.length > 10 ? "medium" : "low";
-      const { calculateAdaptiveScanFrequency } = await import("./goal-manager-DVX24UPZ.js");
+      const { calculateAdaptiveScanFrequency } = await import("./goal-manager-YOB7VWK7.js");
       const result = await calculateAdaptiveScanFrequency(riskLevel);
       await this.projectState.setScanFrequency(result.frequencyMs);
     } catch {
     }
     try {
-      const { getStorage: getStorage2 } = await import("./tiered-storage-OP74NPJY.js");
+      const { getStorage: getStorage2 } = await import("./tiered-storage-Z3YCR465.js");
       const storage = getStorage2(this.projectPath);
       const resolvedIssueIds = [...this.lastIssueHashes].filter((h) => !currentHashes.has(h)).map((h) => {
         return h.split(":").join("-");
@@ -1824,4 +1824,4 @@ export {
   TrieAgent,
   getTrieAgent
 };
-//# sourceMappingURL=chunk-JNUOW2JS.js.map
+//# sourceMappingURL=chunk-4MXH2ZPT.js.map