@vyuhlabs/dxkit 2.2.0 → 2.2.1

package/CHANGELOG.md

@@ -7,6 +7,51 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.2.1] - 2026-04-23
+
+Patch release hardening the publish pipeline after `v2.2.0`'s Publish
+workflow failed with `403 — version already published`. The failure
+was caused by a local `npm publish` that preceded the
+Release-triggered CI publish, not a code defect — the tarball on npm
+byte-matches main. No functional changes in this release; all work
+is on the release path (tracked internally as D015).
+
+### Added — publish pipeline guardrails
+
+- **`scripts/require-ci.js` + `prepublishOnly` guard** — any `npm publish`
+  invocation outside GitHub Actions now fails at the script hook with
+  a clear error pointing to `CLAUDE.md §"Release procedure"`. Prevents
+  accidental local publish before the registry is ever contacted.
+
+- **`publishConfig.provenance: true`** — npm publishes now carry a
+  GitHub Actions provenance attestation. Provenance requires an OIDC
+  token that only exists inside Actions; tarball-mode publishes
+  (`npm publish *.tgz`, which skips `prepublishOnly`) also fail outside
+  CI. Belt-and-suspenders with the script guard.
+
+- **Publish-workflow preflights** (`.github/workflows/publish.yml`) —
+  before `npm publish` runs, the workflow now verifies (in order):
+  1. tag `vX.Y.Z` matches `package.json` version `X.Y.Z`
+  2. tagged commit is reachable from `origin/main` (blocks
+     feature-branch tags)
+  3. the `CI` workflow succeeded on the tagged commit SHA
+  4. `X.Y.Z` is not already on npm (catches the exact 2.2.0 failure)
+
+- **Explicit pack + publish + verify** — workflow packs the tarball,
+  records its sha1, publishes that exact file, then fetches
+  `npm view dist.shasum` and fails on mismatch. Eliminates drift
+  between "what npm packed" and "what we audited."
+
+- **Tarball workflow artifact** — every release archives the published
+  `.tgz` as a workflow artifact (90-day retention) for post-mortem
+  auditability.
+
+### Documented — `CLAUDE.md`
+
+New "Release procedure" section codifying PR → CI-green → merge → tag
+→ CI publishes as the only path. Explicit "no local `npm publish`"
+rule.
+
 ## [2.2.0] - 2026-04-23
 
 Minor release adding Snyk-style top-level dep attribution across every

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vyuhlabs/dxkit",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "description": "AI-native developer experience toolkit for any repository",
   "license": "MIT",
   "author": "Vyuh Labs",
@@ -16,7 +16,8 @@
     "vyuh-dxkit": "./dist/index.js"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "main": "./dist/lib.js",
   "types": "./dist/lib.d.ts",
@@ -39,7 +40,7 @@
   ],
   "scripts": {
     "build": "node scripts/copy-templates.js && tsc",
-    "prepublishOnly": "npm run build",
+    "prepublishOnly": "node scripts/require-ci.js && npm run build",
     "typecheck": "tsc --noEmit",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",

package/dist/agents/extract.d.ts

@@ -1,25 +0,0 @@
-/**
- * Prompt extraction — reads agent templates from src-templates/
- * and transforms them for use with Managed Agents.
- *
- * Source of truth: src-templates/.claude/agents-available/*.md
- * This module READS those files at runtime — never copies or duplicates them.
- */
-export interface ExtractedAgent {
-    name: string;
-    description: string;
-    systemPrompt: string;
-    model: string;
-    tools: Array<{
-        type: string;
-        [key: string]: unknown;
-    }>;
-    outputSchema: object | undefined;
-}
-/** List all available agent template names. */
-export declare function listAgentTemplates(): string[];
-/** Extract a single agent's prompt from its template file. */
-export declare function extractAgent(name: string, modelOverride?: string): ExtractedAgent;
-/** Extract all available agent prompts. */
-export declare function extractAllAgents(modelOverride?: string): ExtractedAgent[];
-//# sourceMappingURL=extract.d.ts.map

package/dist/agents/extract.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../src/agents/extract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,CAAC;IACvD,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AA4DD,+CAA+C;AAC/C,wBAAgB,kBAAkB,IAAI,MAAM,EAAE,CAO7C;AAED,8DAA8D;AAC9D,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,cAAc,CA0CjF;AAED,2CAA2C;AAC3C,wBAAgB,gBAAgB,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE,CAEzE"}

package/dist/agents/extract.js

@@ -1,186 +0,0 @@
-"use strict";
-/**
- * Prompt extraction — reads agent templates from src-templates/
- * and transforms them for use with Managed Agents.
- *
- * Source of truth: src-templates/.claude/agents-available/*.md
- * This module READS those files at runtime — never copies or duplicates them.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.listAgentTemplates = listAgentTemplates;
-exports.extractAgent = extractAgent;
-exports.extractAllAgents = extractAllAgents;
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const schemas_1 = require("./schemas");
-/**
- * Default model per agent category.
- * Analysis agents use Sonnet (cheaper, good enough).
- * Execution agents use Opus (accuracy matters for code changes).
- */
-const AGENT_MODELS = {
-    // Analysis — Sonnet is cost-effective
-    'health-auditor': 'claude-sonnet-4-6',
-    'vulnerability-scanner': 'claude-sonnet-4-6',
-    'test-gap-finder': 'claude-sonnet-4-6',
-    'dev-report': 'claude-sonnet-4-6',
-    'dependency-mapper': 'claude-sonnet-4-6',
-    'codebase-explorer': 'claude-sonnet-4-6',
-    'code-reviewer': 'claude-sonnet-4-6',
-    'doc-writer': 'claude-sonnet-4-6',
-    'dashboard-builder': 'claude-sonnet-4-6',
-    'knowledge-bot': 'claude-sonnet-4-6',
-    // Execution — Opus for accuracy
-    'feature-planner': 'claude-opus-4-6',
-    'feature-builder': 'claude-opus-4-6',
-    'plan-executor': 'claude-opus-4-6',
-    'strategic-planner': 'claude-opus-4-6',
-    'test-writer': 'claude-opus-4-6',
-    'debugger': 'claude-opus-4-6',
-    'hooks-configurator': 'claude-sonnet-4-6',
-};
-/** Map of Claude Code slash command references to plain-language equivalents. */
-const COMMAND_REPLACEMENTS = {
-    'Run /health': 'Analyze the codebase for health metrics',
-    'Run /quality': 'Run available linting tools via bash',
-    'Run /test': 'Run the test suite via bash',
-    'Run /vulnerabilities': 'Scan for security vulnerabilities',
-    '/health': 'health analysis',
-    '/quality': 'quality check',
-    '/test': 'test suite',
-};
-/** Lines to strip from prompts (Claude Code-specific). */
-const STRIP_PATTERNS = [
-    /Save .*to \.ai\/reports\/.*/g,
-    /Saves? reports? to \.ai\/reports\/.*/g,
-    /\.ai\/reports\//g,
-    /\.ai\/sessions\//g,
-];
-/**
- * Resolve the templates directory.
- * In development: src-templates/
- * When published: templates/ (copied by build script)
- */
-function templatesDir() {
-    const srcTemplates = path.resolve(__dirname, '..', '..', 'src-templates');
-    if (fs.existsSync(srcTemplates))
-        return srcTemplates;
-    return path.resolve(__dirname, '..', '..', 'templates');
-}
-/** List all available agent template names. */
-function listAgentTemplates() {
-    const dir = path.join(templatesDir(), '.claude', 'agents-available');
-    if (!fs.existsSync(dir))
-        return [];
-    return fs
-        .readdirSync(dir)
-        .filter((f) => f.endsWith('.md'))
-        .map((f) => f.replace('.md', ''));
-}
-/** Extract a single agent's prompt from its template file. */
-function extractAgent(name, modelOverride) {
-    const filePath = path.join(templatesDir(), '.claude', 'agents-available', `${name}.md`);
-    if (!fs.existsSync(filePath)) {
-        throw new Error(`Agent template not found: ${name}`);
-    }
-    const raw = fs.readFileSync(filePath, 'utf-8');
-    const { frontmatter, body } = parseFrontmatter(raw);
-    // Clean the prompt for Managed Agent use
-    let systemPrompt = body;
-    // Replace Claude Code command references
-    for (const [pattern, replacement] of Object.entries(COMMAND_REPLACEMENTS)) {
-        systemPrompt = systemPrompt.replaceAll(pattern, replacement);
-    }
-    // Strip Claude Code-specific lines
-    for (const pattern of STRIP_PATTERNS) {
-        systemPrompt = systemPrompt.replace(pattern, '');
-    }
-    // Determine the agent type for schema lookup
-    const agentType = mapNameToSchemaType(name);
-    const outputSchema = agentType ? (0, schemas_1.getSchema)(agentType) : undefined;
-    // Append JSON output instructions if we have a schema
-    if (outputSchema) {
-        systemPrompt += `\n\n## Output Format\n\nReturn your analysis as valid JSON. Wrap the JSON in a \`\`\`json code block. The JSON must match this schema:\n\n\`\`\`json\n${JSON.stringify(outputSchema, null, 2)}\n\`\`\`\n`;
-    }
-    // Clean up excessive blank lines
-    systemPrompt = systemPrompt.replace(/\n{3,}/g, '\n\n').trim();
-    return {
-        name: `dxkit-${name}`,
-        description: frontmatter.description || `DXKit ${name} agent`,
-        systemPrompt,
-        model: modelOverride || AGENT_MODELS[name] || 'claude-sonnet-4-6',
-        tools: [{ type: 'agent_toolset_20260401' }],
-        outputSchema,
-    };
-}
-/** Extract all available agent prompts. */
-function extractAllAgents(modelOverride) {
-    return listAgentTemplates().map((name) => extractAgent(name, modelOverride));
-}
-/** Map agent names to schema type keys. */
-function mapNameToSchemaType(name) {
-    const map = {
-        'health-auditor': 'health',
-        'vulnerability-scanner': 'vulnerabilities',
-        'feature-planner': 'feature',
-        'feature-builder': 'execution',
-        'plan-executor': 'execution',
-    };
-    return map[name];
-}
-/** Parse YAML-ish frontmatter from agent markdown files. */
-function parseFrontmatter(raw) {
-    const frontmatter = {};
-    if (!raw.startsWith('---')) {
-        return { frontmatter, body: raw };
-    }
-    const endIdx = raw.indexOf('---', 3);
-    if (endIdx === -1) {
-        return { frontmatter, body: raw };
-    }
-    const fmBlock = raw.slice(3, endIdx).trim();
-    for (const line of fmBlock.split('\n')) {
-        const colonIdx = line.indexOf(':');
-        if (colonIdx === -1)
-            continue;
-        const key = line.slice(0, colonIdx).trim();
-        const value = line.slice(colonIdx + 1).trim();
-        frontmatter[key] = value;
-    }
-    const body = raw.slice(endIdx + 3).trim();
-    return { frontmatter, body };
-}
-//# sourceMappingURL=extract.js.map

package/dist/agents/extract.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../src/agents/extract.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0EH,gDAOC;AAGD,oCA0CC;AAGD,4CAEC;AAjID,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAsC;AAWtC;;;;GAIG;AACH,MAAM,YAAY,GAA2B;IAC3C,sCAAsC;IACtC,gBAAgB,EAAE,mBAAmB;IACrC,uBAAuB,EAAE,mBAAmB;IAC5C,iBAAiB,EAAE,mBAAmB;IACtC,YAAY,EAAE,mBAAmB;IACjC,mBAAmB,EAAE,mBAAmB;IACxC,mBAAmB,EAAE,mBAAmB;IACxC,eAAe,EAAE,mBAAmB;IACpC,YAAY,EAAE,mBAAmB;IACjC,mBAAmB,EAAE,mBAAmB;IACxC,eAAe,EAAE,mBAAmB;IAEpC,gCAAgC;IAChC,iBAAiB,EAAE,iBAAiB;IACpC,iBAAiB,EAAE,iBAAiB;IACpC,eAAe,EAAE,iBAAiB;IAClC,mBAAmB,EAAE,iBAAiB;IACtC,aAAa,EAAE,iBAAiB;IAChC,UAAU,EAAE,iBAAiB;IAC7B,oBAAoB,EAAE,mBAAmB;CAC1C,CAAC;AAEF,iFAAiF;AACjF,MAAM,oBAAoB,GAA2B;IACnD,aAAa,EAAE,yCAAyC;IACxD,cAAc,EAAE,sCAAsC;IACtD,WAAW,EAAE,6BAA6B;IAC1C,sBAAsB,EAAE,mCAAmC;IAC3D,SAAS,EAAE,iBAAiB;IAC5B,UAAU,EAAE,eAAe;IAC3B,OAAO,EAAE,YAAY;CACtB,CAAC;AAEF,0DAA0D;AAC1D,MAAM,cAAc,GAAG;IACrB,8BAA8B;IAC9B,uCAAuC;IACvC,kBAAkB;IAClB,mBAAmB;CACpB,CAAC;AAEF;;;;GAIG;AACH,SAAS,YAAY;IACnB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IAC1E,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC;IACrD,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED,+CAA+C;AAC/C,SAAgB,kBAAkB;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACrE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,EAAE;SACN,WAAW,CAAC,GAAG,CAAC;SAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,8DAA8D;AAC9D,SAAgB,YAAY,CAAC,IAAY,EAAE,aAAsB;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;IACxF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAEpD,yCAAyC;IACzC,IAAI,YAAY,GAAG,IAAI,CAAC;IAExB,yCAAyC;IACzC,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC1E,YAAY,GAAG,YAAY,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/D,CAAC;IAED,mCAAmC;IACnC,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,6CAA6C;IAC7C,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,IAAA,mBAAS,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAElE,sDAAsD;IACtD,IAAI,YAAY,EAAE,CAAC;QACjB,YAAY,IAAI,yJAAyJ,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC;IAC7N,CAAC;IAED,iCAAiC;IACjC,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAE9D,OAAO;QACL,IAAI,EAAE,SAAS,IAAI,EAAE;QACrB,WAAW,EAAE,WAAW,CAAC,WAAW,IAAI,SAAS,IAAI,QAAQ;QAC7D,YAAY;QACZ,KAAK,EAAE,aAAa,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,mBAAmB;QACjE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;QAC3C,YAAY;KACb,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,SAAgB,gBAAgB,CAAC,aAAsB;IACrD,OAAO,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,2CAA2C;AAC3C,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,GAAG,GAA2B;QAClC,gBAAgB,EAAE,QAAQ;QAC1B,uBAAuB,EAAE,iBAAiB;QAC1C,iBAAiB,EAAE,SAAS;QAC5B,iBAAiB,EAAE,WAAW;QAC9B,eAAe,EAAE,WAAW;KAC7B,CAAC;IACF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,4DAA4D;AAC5D,SAAS,gBAAgB,CAAC,GAAW;IAInC,MAAM,WAAW,GAA2B,EAAE,CAAC;IAE/C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAClB,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC/B,CAAC"}

package/dist/agents/schemas.d.ts

@@ -1,106 +0,0 @@
-/**
- * JSON output schemas for Managed Agent responses.
- * Each agent type returns structured JSON matching these schemas.
- */
-export interface HealthReport {
-    repo: string;
-    analyzedAt: string;
-    summary: {
-        overallScore: number;
-        maxScore: number;
-        grade: 'A' | 'B' | 'C' | 'D' | 'F';
-    };
-    dimensions: {
-        testing: {
-            score: number;
-            details: string;
-        };
-        quality: {
-            score: number;
-            details: string;
-        };
-        documentation: {
-            score: number;
-            details: string;
-        };
-        security: {
-            score: number;
-            details: string;
-        };
-        maintainability: {
-            score: number;
-            details: string;
-        };
-        developerExperience: {
-            score: number;
-            details: string;
-        };
-    };
-    recommendations: Array<{
-        priority: number;
-        title: string;
-        description: string;
-        affectedFiles: string[];
-    }>;
-}
-export interface VulnerabilityReport {
-    repo: string;
-    analyzedAt: string;
-    summary: {
-        total: number;
-        critical: number;
-        high: number;
-        medium: number;
-        low: number;
-    };
-    findings: Array<{
-        cwe: string;
-        severity: 'critical' | 'high' | 'medium' | 'low';
-        title: string;
-        file: string;
-        line: number | null;
-        description: string;
-        recommendation: string;
-    }>;
-}
-export interface FeaturePlan {
-    slug: string;
-    title: string;
-    description: string;
-    tasks: Array<{
-        sequence: number;
-        title: string;
-        description: string;
-        type: string;
-        affectedFiles: string[];
-        acceptanceCriteria: string[];
-        dependsOn: number[];
-    }>;
-    risks: Array<{
-        description: string;
-        severity: string;
-        mitigation: string;
-    }>;
-}
-export interface ExecutionReport {
-    taskKey: string;
-    status: 'success' | 'failed' | 'timeout';
-    filesChanged: Array<{
-        path: string;
-        additions: number;
-        deletions: number;
-    }>;
-    changeSummary: string;
-    testResults: {
-        passed: boolean;
-        total: number;
-        failed: number;
-        output: string;
-    };
-    retries: number;
-}
-/** JSON schema objects for injection into system prompts. */
-export declare const SCHEMA_JSON: Record<string, object>;
-/** Map agent type names to their JSON schemas. */
-export declare function getSchema(agentType: string): object | undefined;
-//# sourceMappingURL=schemas.d.ts.map

package/dist/agents/schemas.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/agents/schemas.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QACP,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;KACpC,CAAC;IACF,UAAU,EAAE;QACV,OAAO,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C,OAAO,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C,aAAa,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAClD,QAAQ,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7C,eAAe,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QACpD,mBAAmB,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;KACzD,CAAC;IACF,eAAe,EAAE,KAAK,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,QAAQ,EAAE,KAAK,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;QACjD,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,EAAE,CAAC;QACxB,kBAAkB,EAAE,MAAM,EAAE,CAAC;QAC7B,SAAS,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC,CAAC;IACH,KAAK,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7E;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAChF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,6DAA6D;AAC7D,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAuE9C,CAAC;AAEF,kDAAkD;AAClD,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE/D"}

package/dist/agents/schemas.js

@@ -1,86 +0,0 @@
-"use strict";
-/**
- * JSON output schemas for Managed Agent responses.
- * Each agent type returns structured JSON matching these schemas.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SCHEMA_JSON = void 0;
-exports.getSchema = getSchema;
-/** JSON schema objects for injection into system prompts. */
-exports.SCHEMA_JSON = {
-    health: {
-        type: 'object',
-        properties: {
-            repo: { type: 'string' },
-            analyzedAt: { type: 'string' },
-            summary: {
-                type: 'object',
-                properties: {
-                    overallScore: { type: 'number' },
-                    maxScore: { type: 'number', const: 60 },
-                    grade: { type: 'string', enum: ['A', 'B', 'C', 'D', 'F'] },
-                },
-            },
-            dimensions: {
-                type: 'object',
-                properties: {
-                    testing: { type: 'object', properties: { score: { type: 'number' }, details: { type: 'string' } } },
-                    quality: { type: 'object', properties: { score: { type: 'number' }, details: { type: 'string' } } },
-                    documentation: { type: 'object', properties: { score: { type: 'number' }, details: { type: 'string' } } },
-                    security: { type: 'object', properties: { score: { type: 'number' }, details: { type: 'string' } } },
-                    maintainability: { type: 'object', properties: { score: { type: 'number' }, details: { type: 'string' } } },
-                    developerExperience: { type: 'object', properties: { score: { type: 'number' }, details: { type: 'string' } } },
-                },
-            },
-            recommendations: {
-                type: 'array',
-                items: {
-                    type: 'object',
-                    properties: {
-                        priority: { type: 'number' },
-                        title: { type: 'string' },
-                        description: { type: 'string' },
-                        affectedFiles: { type: 'array', items: { type: 'string' } },
-                    },
-                },
-            },
-        },
-    },
-    vulnerabilities: {
-        type: 'object',
-        properties: {
-            repo: { type: 'string' },
-            analyzedAt: { type: 'string' },
-            summary: {
-                type: 'object',
-                properties: {
-                    total: { type: 'number' },
-                    critical: { type: 'number' },
-                    high: { type: 'number' },
-                    medium: { type: 'number' },
-                    low: { type: 'number' },
-                },
-            },
-            findings: {
-                type: 'array',
-                items: {
-                    type: 'object',
-                    properties: {
-                        cwe: { type: 'string' },
-                        severity: { type: 'string' },
-                        title: { type: 'string' },
-                        file: { type: 'string' },
-                        line: { type: ['number', 'null'] },
-                        description: { type: 'string' },
-                        recommendation: { type: 'string' },
-                    },
-                },
-            },
-        },
-    },
-};
-/** Map agent type names to their JSON schemas. */
-function getSchema(agentType) {
-    return exports.SCHEMA_JSON[agentType];
-}
-//# sourceMappingURL=schemas.js.map

package/dist/agents/schemas.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/agents/schemas.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AA6IH,8BAEC;AA7ED,6DAA6D;AAChD,QAAA,WAAW,GAA2B;IACjD,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAChC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;oBACvC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE;iBAC3D;aACF;YACD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;oBACnG,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;oBACnG,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;oBACzG,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;oBACpG,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;oBAC3G,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;iBAChH;aACF;YACD,eAAe,EAAE;gBACf,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBAC5D;iBACF;aACF;SACF;KACF;IACD,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC5B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC1B,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACxB;aACF;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;wBAClC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC/B,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBACnC;iBACF;aACF;SACF;KACF;CACF,CAAC;AAEF,kDAAkD;AAClD,SAAgB,SAAS,CAAC,SAAiB;IACzC,OAAO,mBAAW,CAAC,SAAS,CAAC,CAAC;AAChC,CAAC"}

package/dist/agents/session.d.ts

@@ -1,28 +0,0 @@
-/**
- * Managed Agent session orchestration.
- *
- * Creates sessions, mounts repos, sends tasks, streams results.
- * Requires @anthropic-ai/sdk and ANTHROPIC_API_KEY.
- */
-/** Stored agent config — persisted to .dxkit-agents.json */
-export interface AgentConfig {
-    version: string;
-    environment_id: string;
-    agents: Record<string, {
-        agent_id: string;
-        agent_version: string;
-        prompt_hash: string;
-    }>;
-}
-/** Load agent config from disk. */
-export declare function loadConfig(cwd: string): AgentConfig | null;
-/**
- * Set up all agents on Anthropic's infrastructure.
- * Creates an environment and one agent per template.
- */
-export declare function setupAgents(cwd: string, modelOverride?: string): Promise<AgentConfig>;
-/** List registered agents. */
-export declare function listAgents(cwd: string): void;
-/** Run an agent session on a GitHub repo. */
-export declare function runAgent(cwd: string, agentType: string, repoUrl: string, githubToken: string, branch?: string, task?: string): Promise<string>;
-//# sourceMappingURL=session.d.ts.map

package/dist/agents/session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/agents/session.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,4DAA4D;AAC5D,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CACZ,MAAM,EACN;QACE,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;KACrB,CACF,CAAC;CACH;AAID,mCAAmC;AACnC,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAQ1D;AAkBD;;;GAGG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAsD3F;AAED,8BAA8B;AAC9B,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAe5C;AAED,6CAA6C;AAC7C,wBAAsB,QAAQ,CAC5B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAuFjB"}