@zivis/cli 0.1.0-alpha.1

package/dist/internal/extractor/index.js

@@ -0,0 +1,107 @@
+/**
+ * Extractor orchestrator.
+ *
+ * Walks the customer's repo, dispatches matched files to per-language
+ * adapters, merges their findings into a single ExtractionResult.
+ *
+ * Adapters register their own file extensions + manifest filenames; the
+ * walker only reads files those filters claim. So adding a Go or Python
+ * adapter doesn't change anything here — register the adapter and the
+ * orchestrator picks up its files.
+ */
+import * as path from "node:path";
+import { walk } from "./walker.js";
+import { typescriptAdapter } from "./adapters/typescript/index.js";
+import { goAdapter } from "./adapters/go/index.js";
+import { pythonAdapter } from "./adapters/python/index.js";
+const ADAPTERS = [
+    typescriptAdapter,
+    goAdapter,
+    pythonAdapter,
+];
+export async function runExtractor(opts) {
+    const startedAt = Date.now();
+    const rootDir = path.resolve(opts.rootDir);
+    const adapters = opts.languages
+        ? ADAPTERS.filter((a) => opts.languages.includes(a.language))
+        : ADAPTERS;
+    // Aggregate the file filters from each adapter so we walk the tree once.
+    const extensions = new Set();
+    const manifests = new Set();
+    for (const a of adapters) {
+        for (const e of a.extensions)
+            extensions.add(e);
+        for (const m of a.manifests)
+            manifests.add(m);
+    }
+    const walked = await walk({
+        rootDir,
+        extensions: [...extensions],
+        manifests: [...manifests],
+        extraIgnores: opts.extraIgnores,
+    });
+    const components = [];
+    const externalServices = [];
+    const dataStores = [];
+    const manifestSummaries = [];
+    for (const adapter of adapters) {
+        const myExts = new Set(adapter.extensions);
+        const myManifests = new Set(adapter.manifests);
+        const sourceFiles = walked.sourceFiles.filter((f) => myExts.has(path.extname(f).toLowerCase()));
+        const manifestFiles = walked.manifestFiles.filter((f) => myManifests.has(path.basename(f)));
+        if (sourceFiles.length === 0 && manifestFiles.length === 0)
+            continue;
+        const out = await adapter.extract({ rootDir, sourceFiles, manifestFiles });
+        components.push(...out.components);
+        externalServices.push(...out.externalServices);
+        dataStores.push(...out.dataStores);
+        manifestSummaries.push(...out.manifests);
+    }
+    return {
+        version: "1.0",
+        extractedAt: new Date().toISOString(),
+        extractor: `@zivis-ai/cli@${opts.extractorVersion}`,
+        scope: {
+            rootDir,
+            filesScanned: walked.filesScanned,
+            filesSkipped: walked.filesSkipped,
+            durationMs: Date.now() - startedAt,
+        },
+        components: dedupeComponents(components),
+        externalServices: dedupeExternalServices(externalServices),
+        dataStores,
+        manifests: manifestSummaries,
+    };
+}
+function dedupeComponents(items) {
+    const out = new Map();
+    for (const c of items) {
+        const key = `${c.language}::${c.name}`;
+        const existing = out.get(key);
+        if (!existing) {
+            out.set(key, { ...c, sourceFiles: [...c.sourceFiles], evidence: [...c.evidence] });
+            continue;
+        }
+        for (const f of c.sourceFiles)
+            if (!existing.sourceFiles.includes(f))
+                existing.sourceFiles.push(f);
+        existing.evidence.push(...c.evidence);
+    }
+    return [...out.values()];
+}
+function dedupeExternalServices(items) {
+    const out = new Map();
+    for (const s of items) {
+        const key = `${s.kind}::${s.package}`;
+        const existing = out.get(key);
+        if (!existing) {
+            out.set(key, { ...s, callSites: [...s.callSites] });
+            continue;
+        }
+        if (!existing.version && s.version)
+            existing.version = s.version;
+        existing.callSites.push(...s.callSites);
+    }
+    return [...out.values()];
+}
+//# sourceMappingURL=index.js.map

package/dist/internal/extractor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/internal/extractor/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAoB3D,MAAM,QAAQ,GAAsB;IAClC,iBAAiB;IACjB,SAAS;IACT,aAAa;CACd,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAgB;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS;QAC7B,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAe,CAAC,CAAC;QACrE,CAAC,CAAC,QAAQ,CAAC;IAEb,yEAAyE;IACzE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;QACxB,OAAO;QACP,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC;QAC3B,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,MAAM,gBAAgB,GAA+B,EAAE,CAAC;IACxD,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,MAAM,iBAAiB,GAAsB,EAAE,CAAC;IAEhD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAChG,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5F,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAErE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QAC3E,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;QACnC,gBAAgB,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC/C,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;QACnC,iBAAiB,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,SAAS,EAAE,iBAAiB,IAAI,CAAC,gBAAgB,EAAE;QACnD,KAAK,EAAE;YACL,OAAO;YACP,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC;QACD,UAAU,EAAE,gBAAgB,CAAC,UAAU,CAAC;QACxC,gBAAgB,EAAE,sBAAsB,CAAC,gBAAgB,CAAC;QAC1D,UAAU;QACV,SAAS,EAAE,iBAAiB;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA2B;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA8B,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnF,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW;YAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAiC;IAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO;YAAE,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QACjE,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3B,CAAC"}

package/dist/internal/extractor/types.d.ts

@@ -0,0 +1,124 @@
+/**
+ * Extractor output schema.
+ *
+ * Matches `THREAT-MODEL-PHASE-J.md`'s J.2 output shape, with additions
+ * for privacy-audit metadata. The shape is the contract between the CLI
+ * and the eventual `--apply` endpoint that maps into ThreatModelComponent
+ * / OrgComponent records (RECON.3-gated).
+ *
+ * Privacy invariant — what's IN the JSON:
+ *   component names ("auth-service")
+ *   file paths ("src/auth/login.ts")
+ *   line numbers (42)
+ *   framework + SDK identifiers ("express", "@anthropic-ai/sdk")
+ *   detected protocols / methods (POST /login)
+ *   dependency versions (from package.json / go.mod / pyproject.toml)
+ *
+ * What's NOT:
+ *   function bodies, file contents, code snippets
+ *   variable names from inside functions
+ *   comments
+ *   raw AST nodes
+ *
+ * `zivis tm extract --privacy-audit` prints this whole object to stdout
+ * before any network call, so the customer can see exactly what would
+ * be sent.
+ */
+export type Language = "typescript" | "javascript" | "go" | "python";
+export interface EvidenceLocation {
+    file: string;
+    line: number;
+}
+export interface HttpRouteEvidence extends EvidenceLocation {
+    kind: "http_route";
+    method: string;
+    path: string;
+}
+export interface ImportEvidence extends EvidenceLocation {
+    kind: "import";
+    package: string;
+}
+export interface ConfigEvidence extends EvidenceLocation {
+    kind: "config";
+}
+export type Evidence = HttpRouteEvidence | ImportEvidence | ConfigEvidence;
+export type ComponentKind = "process" | "data_store" | "external_service" | "frontend";
+export interface ExtractedComponent {
+    /** Stable name derived from path / module — never a value from inside a function. */
+    name: string;
+    kind: ComponentKind;
+    language: Language;
+    /** Detected web framework, if any (express | fastify | nextjs | trpc | hono | gin | echo | …). */
+    framework?: string;
+    sourceFiles: string[];
+    evidence: Evidence[];
+}
+export interface ExtractedExternalService {
+    /** Vendor / SDK name — "Anthropic", "OpenAI", "WorkOS". */
+    name: string;
+    /** What kind of integration: ai_sdk, payments, auth, observability, etc. */
+    kind: string;
+    /** npm/PyPI/Go module identifier ("@anthropic-ai/sdk"). */
+    package: string;
+    version?: string;
+    callSites: EvidenceLocation[];
+}
+export interface ExtractedDataStore {
+    name: string;
+    kind: "postgres" | "mysql" | "mongo" | "redis" | "sqlite" | "unknown";
+    client?: string;
+    version?: string;
+    evidence: Evidence[];
+}
+export interface ExtractionScope {
+    rootDir: string;
+    filesScanned: number;
+    filesSkipped: number;
+    durationMs: number;
+}
+export interface ExtractionResult {
+    version: "1.0";
+    extractedAt: string;
+    extractor: string;
+    scope: ExtractionScope;
+    components: ExtractedComponent[];
+    externalServices: ExtractedExternalService[];
+    dataStores: ExtractedDataStore[];
+    /**
+     * Per-language manifests detected in the scope. Surfaces dependency-only
+     * findings (e.g., "this repo uses @anthropic-ai/sdk@^0.30") even when
+     * we can't yet match call sites.
+     */
+    manifests: ManifestSummary[];
+}
+export interface ManifestSummary {
+    language: Language;
+    file: string;
+    /** Direct dependency names → version (verbatim from manifest). */
+    dependencies: Record<string, string>;
+}
+/**
+ * Adapter contract — one per language. Each adapter is fed the list of
+ * source files matched for it (already filtered by .gitignore + .zivisignore)
+ * plus any manifest files (package.json, go.mod, pyproject.toml). Returns
+ * structured findings the framework merges into the final ExtractionResult.
+ */
+export interface LanguageAdapter {
+    language: Language;
+    /** File extensions this adapter handles. */
+    extensions: string[];
+    /** Manifest filenames this adapter cares about. */
+    manifests: string[];
+    extract(input: AdapterInput): Promise<AdapterOutput>;
+}
+export interface AdapterInput {
+    rootDir: string;
+    sourceFiles: string[];
+    manifestFiles: string[];
+}
+export interface AdapterOutput {
+    components: ExtractedComponent[];
+    externalServices: ExtractedExternalService[];
+    dataStores: ExtractedDataStore[];
+    manifests: ManifestSummary[];
+}

package/dist/internal/extractor/types.js

@@ -0,0 +1,28 @@
+/**
+ * Extractor output schema.
+ *
+ * Matches `THREAT-MODEL-PHASE-J.md`'s J.2 output shape, with additions
+ * for privacy-audit metadata. The shape is the contract between the CLI
+ * and the eventual `--apply` endpoint that maps into ThreatModelComponent
+ * / OrgComponent records (RECON.3-gated).
+ *
+ * Privacy invariant — what's IN the JSON:
+ *   component names ("auth-service")
+ *   file paths ("src/auth/login.ts")
+ *   line numbers (42)
+ *   framework + SDK identifiers ("express", "@anthropic-ai/sdk")
+ *   detected protocols / methods (POST /login)
+ *   dependency versions (from package.json / go.mod / pyproject.toml)
+ *
+ * What's NOT:
+ *   function bodies, file contents, code snippets
+ *   variable names from inside functions
+ *   comments
+ *   raw AST nodes
+ *
+ * `zivis tm extract --privacy-audit` prints this whole object to stdout
+ * before any network call, so the customer can see exactly what would
+ * be sent.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/internal/extractor/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/internal/extractor/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG"}

package/dist/internal/extractor/walker.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Filesystem walker — yields source files relative to the scan root,
+ * filtered by .gitignore + .zivisignore + per-extractor extension filters.
+ *
+ * Uses the `ignore` npm package (the same engine git ships with) so the
+ * matching semantics mirror what developers expect from .gitignore.
+ *
+ * Hard limits:
+ *  - Skips node_modules, dist, build, .next, .git, .yarn, vendor — even
+ *    if not in .gitignore. These exist by convention and contain
+ *    third-party code that pollutes the inventory.
+ *  - Caps total files at 50_000 to refuse to scan a generated monorepo
+ *    by accident (extractor would take forever; user should narrow scope).
+ */
+export interface WalkOptions {
+    rootDir: string;
+    /** Extensions to include (with the leading dot, e.g. [".ts", ".tsx"]). */
+    extensions: string[];
+    /** Manifest basenames to capture regardless of extension (e.g. ["package.json"]). */
+    manifests: string[];
+    /** Extra ignore patterns from --ignore CLI flags. */
+    extraIgnores?: string[];
+}
+export interface WalkResult {
+    sourceFiles: string[];
+    manifestFiles: string[];
+    filesScanned: number;
+    filesSkipped: number;
+}
+export declare function walk(opts: WalkOptions): Promise<WalkResult>;
+/** Convert an absolute path to a posix-style repo-relative path. */
+export declare function repoRelative(rootDir: string, absPath: string): string;

package/dist/internal/extractor/walker.js

@@ -0,0 +1,110 @@
+/**
+ * Filesystem walker — yields source files relative to the scan root,
+ * filtered by .gitignore + .zivisignore + per-extractor extension filters.
+ *
+ * Uses the `ignore` npm package (the same engine git ships with) so the
+ * matching semantics mirror what developers expect from .gitignore.
+ *
+ * Hard limits:
+ *  - Skips node_modules, dist, build, .next, .git, .yarn, vendor — even
+ *    if not in .gitignore. These exist by convention and contain
+ *    third-party code that pollutes the inventory.
+ *  - Caps total files at 50_000 to refuse to scan a generated monorepo
+ *    by accident (extractor would take forever; user should narrow scope).
+ */
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import ignore from "ignore";
+const HARD_SKIP_DIRS = new Set([
+    "node_modules",
+    ".git",
+    ".yarn",
+    ".pnpm",
+    "dist",
+    "build",
+    "out",
+    ".next",
+    ".nuxt",
+    ".turbo",
+    ".cache",
+    "coverage",
+    "vendor",
+    "__pycache__",
+    ".venv",
+    "target",
+]);
+const MAX_FILES = 50_000;
+export async function walk(opts) {
+    const ig = ignore();
+    await loadIgnoreFile(ig, path.join(opts.rootDir, ".gitignore"));
+    await loadIgnoreFile(ig, path.join(opts.rootDir, ".zivisignore"));
+    if (opts.extraIgnores?.length)
+        ig.add(opts.extraIgnores);
+    const extSet = new Set(opts.extensions.map((e) => e.toLowerCase()));
+    const manifestSet = new Set(opts.manifests);
+    const sourceFiles = [];
+    const manifestFiles = [];
+    let filesScanned = 0;
+    let filesSkipped = 0;
+    async function visit(dirAbs, dirRel) {
+        if (sourceFiles.length + manifestFiles.length >= MAX_FILES)
+            return;
+        let entries;
+        try {
+            entries = await fs.readdir(dirAbs, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const name = entry.name;
+            const childRel = dirRel ? path.posix.join(dirRel, name) : name;
+            if (entry.isDirectory()) {
+                if (HARD_SKIP_DIRS.has(name)) {
+                    filesSkipped++;
+                    continue;
+                }
+                // ignore() expects gitignore-style paths with trailing /
+                if (ig.ignores(childRel + "/")) {
+                    filesSkipped++;
+                    continue;
+                }
+                await visit(path.join(dirAbs, name), childRel);
+                continue;
+            }
+            if (!entry.isFile() && !entry.isSymbolicLink())
+                continue;
+            if (ig.ignores(childRel)) {
+                filesSkipped++;
+                continue;
+            }
+            filesScanned++;
+            const abs = path.join(dirAbs, name);
+            if (manifestSet.has(name)) {
+                manifestFiles.push(abs);
+                continue;
+            }
+            const ext = path.extname(name).toLowerCase();
+            if (extSet.has(ext)) {
+                sourceFiles.push(abs);
+            }
+        }
+    }
+    await visit(opts.rootDir, "");
+    return { sourceFiles, manifestFiles, filesScanned, filesSkipped };
+}
+async function loadIgnoreFile(ig, filePath) {
+    try {
+        const content = await fs.readFile(filePath, "utf8");
+        ig.add(content);
+    }
+    catch {
+        // No ignore file — fine.
+    }
+}
+/** Convert an absolute path to a posix-style repo-relative path. */
+export function repoRelative(rootDir, absPath) {
+    const rel = path.relative(rootDir, absPath);
+    return rel.split(path.sep).join("/");
+}
+//# sourceMappingURL=walker.js.map

package/dist/internal/extractor/walker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walker.js","sourceRoot":"","sources":["../../../src/internal/extractor/walker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,MAAkB,MAAM,QAAQ,CAAC;AAExC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,cAAc;IACd,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,aAAa;IACb,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,MAAM,CAAC;AAmBzB,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAiB;IAC1C,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IACpB,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM;QAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE5C,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,UAAU,KAAK,CAAC,MAAc,EAAE,MAAc;QACjD,IAAI,WAAW,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,IAAI,SAAS;YAAE,OAAO;QAEnE,IAAI,OAAmC,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAE/D,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,YAAY,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBACD,yDAAyD;gBACzD,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;oBAC/B,YAAY,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC/C,SAAS;YACX,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YACzD,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,YAAY,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,YAAY,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEpC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAE9B,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,EAAU,EAAE,QAAgB;IACxD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,OAAe;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC"}

package/dist/internal/ide-setup.d.ts

@@ -0,0 +1,7 @@
+export declare function setupCursor(session?: string): Promise<void>;
+export declare function setupVsCodeCopilot(session?: string): Promise<void>;
+export declare function setupVsCodeClaude(session?: string): Promise<void>;
+export declare function setupClaudeCodeCli(session?: string): Promise<void>;
+export declare function setupCline(session?: string): Promise<void>;
+export declare function setupWindsurf(session?: string): Promise<void>;
+export declare function printClaudeCodeManual(session?: string): void;

package/dist/internal/ide-setup.js

@@ -0,0 +1,131 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+const SERVER_NAME = "zivis";
+function buildServerConfig(session, extra) {
+    const config = {
+        ...extra,
+        command: "zivis",
+        args: ["mcp", "serve"],
+    };
+    if (session) {
+        config.env = { ZIVIS_SESSION: session };
+    }
+    return config;
+}
+async function updateMcpConfig(configPath, serverName, serverConfig, rootKey) {
+    const configDir = path.dirname(configPath);
+    if (!fs.existsSync(configDir)) {
+        fs.mkdirSync(configDir, { recursive: true });
+    }
+    let config = {};
+    if (fs.existsSync(configPath)) {
+        try {
+            config = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+        }
+        catch {
+            console.warn(`Warning: Could not parse existing ${configPath}, will overwrite`);
+        }
+    }
+    if (!config[rootKey]) {
+        config[rootKey] = {};
+    }
+    const servers = config[rootKey];
+    servers[serverName] = serverConfig;
+    fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
+}
+export async function setupCursor(session) {
+    const homeDir = process.env.HOME || "";
+    const configPath = path.join(homeDir, ".cursor", "mcp.json");
+    await updateMcpConfig(configPath, SERVER_NAME, buildServerConfig(session), "mcpServers");
+    console.log(`✓ Cursor MCP config updated: ${configPath}`);
+    if (session)
+        console.log(`  Session: ${session}`);
+    console.log("  Restart Cursor for changes to take effect");
+}
+export async function setupVsCodeCopilot(session) {
+    const localConfigPath = path.join(process.cwd(), ".vscode", "mcp.json");
+    const globalConfigPath = path.join(process.env.HOME || "", ".vscode", "mcp.json");
+    let configPath = localConfigPath;
+    const exists = fs.existsSync(localConfigPath);
+    if (!exists && fs.existsSync(globalConfigPath)) {
+        configPath = globalConfigPath;
+    }
+    await updateMcpConfig(configPath, SERVER_NAME, buildServerConfig(session, { type: "stdio" }), "servers");
+    console.log(`✓ VS Code (GitHub Copilot) MCP config updated: ${configPath}`);
+    if (session)
+        console.log(`  Session: ${session}`);
+    console.log("  Restart VS Code for changes to take effect");
+}
+export async function setupVsCodeClaude(session) {
+    const configPath = path.join(process.cwd(), ".vscode", "mcp.json");
+    await updateMcpConfig(configPath, SERVER_NAME, buildServerConfig(session), "mcpServers");
+    console.log(`✓ VS Code (Claude Code) MCP config updated: ${configPath}`);
+    if (session)
+        console.log(`  Session: ${session}`);
+    console.log("  Restart VS Code for changes to take effect");
+}
+export async function setupClaudeCodeCli(session) {
+    const homeDir = process.env.HOME || "";
+    const configPath = path.join(homeDir, ".claude.json");
+    const projectPath = process.cwd();
+    if (!fs.existsSync(configPath)) {
+        console.log("  Skipping Claude Code CLI (no ~/.claude.json found)");
+        return;
+    }
+    try {
+        const config = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+        config.projects ??= {};
+        config.projects[projectPath] ??= {};
+        config.projects[projectPath].mcpServers ??= {};
+        config.projects[projectPath].mcpServers[SERVER_NAME] = {
+            type: "stdio",
+            command: "zivis",
+            args: ["mcp", "serve"],
+            env: session ? { ZIVIS_SESSION: session } : {},
+        };
+        fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
+        console.log("✓ Claude Code CLI MCP config updated: ~/.claude.json");
+        if (session)
+            console.log(`  Session: ${session}`);
+        console.log("  Restart Claude Code for changes to take effect");
+    }
+    catch (err) {
+        console.log(`  WARNING: Failed to update ~/.claude.json: ${err instanceof Error ? err.message : err}`);
+    }
+}
+export async function setupCline(session) {
+    const homeDir = process.env.HOME || "";
+    const configPath = process.platform === "darwin"
+        ? path.join(homeDir, "Library", "Application Support", "Code", "User", "globalStorage", "saoudrizwan.claude-dev", "settings", "cline_mcp_settings.json")
+        : path.join(homeDir, ".config", "Code", "User", "globalStorage", "saoudrizwan.claude-dev", "settings", "cline_mcp_settings.json");
+    await updateMcpConfig(configPath, SERVER_NAME, buildServerConfig(session), "mcpServers");
+    console.log(`✓ Cline MCP config updated: ${configPath}`);
+    if (session)
+        console.log(`  Session: ${session}`);
+    console.log("  Restart VS Code for changes to take effect");
+}
+export async function setupWindsurf(session) {
+    const homeDir = process.env.HOME || "";
+    const configPath = path.join(homeDir, ".codeium", "windsurf", "mcp_config.json");
+    await updateMcpConfig(configPath, SERVER_NAME, buildServerConfig(session), "mcpServers");
+    console.log(`✓ Windsurf MCP config updated: ${configPath}`);
+    if (session)
+        console.log(`  Session: ${session}`);
+    console.log("  Restart Windsurf for changes to take effect");
+}
+export function printClaudeCodeManual(session) {
+    const serverConfig = {
+        mcpServers: {
+            [SERVER_NAME]: buildServerConfig(session),
+        },
+    };
+    console.log("");
+    console.log("✓ Claude Code MCP configuration:");
+    console.log("");
+    console.log("Add the following to your Claude Code MCP settings:");
+    console.log("");
+    console.log(JSON.stringify(serverConfig, null, 2));
+    console.log("");
+    console.log("Then restart Claude Code for changes to take effect");
+}
+//# sourceMappingURL=ide-setup.js.map

package/dist/internal/ide-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ide-setup.js","sourceRoot":"","sources":["../../src/internal/ide-setup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,WAAW,GAAG,OAAO,CAAC;AAE5B,SAAS,iBAAiB,CACxB,OAAgB,EAChB,KAA+B;IAE/B,MAAM,MAAM,GAA4B;QACtC,GAAG,KAAK;QACR,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;KACvB,CAAC;IACF,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,GAAG,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,UAAkB,EAClB,YAAqC,EACrC,OAAe;IAEf,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,qCAAqC,UAAU,kBAAkB,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAA4B,CAAC;IAC3D,OAAO,CAAC,UAAU,CAAC,GAAG,YAAY,CAAC;IAEnC,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAgB;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC7D,MAAM,eAAe,CAAC,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,gCAAgC,UAAU,EAAE,CAAC,CAAC;IAC1D,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAgB;IACvD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACxE,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAElF,IAAI,UAAU,GAAG,eAAe,CAAC;IACjC,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC/C,UAAU,GAAG,gBAAgB,CAAC;IAChC,CAAC;IAED,MAAM,eAAe,CACnB,UAAU,EACV,WAAW,EACX,iBAAiB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAC7C,SAAS,CACV,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,kDAAkD,UAAU,EAAE,CAAC,CAAC;IAC5E,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAgB;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACnE,MAAM,eAAe,CAAC,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,+CAA+C,UAAU,EAAE,CAAC,CAAC;IACzE,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAgB;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAElC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,QAAQ,KAAK,EAAE,CAAC;QACvB,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC;QAC/C,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG;YACrD,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;YACtB,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;SAC/C,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,IAAI,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CACT,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAgB;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,UAAU,GACd,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,IAAI,CAAC,IAAI,CACP,OAAO,EACP,SAAS,EACT,qBAAqB,EACrB,MAAM,EACN,MAAM,EACN,eAAe,EACf,wBAAwB,EACxB,UAAU,EACV,yBAAyB,CAC1B;QACH,CAAC,CAAC,IAAI,CAAC,IAAI,CACP,OAAO,EACP,SAAS,EACT,MAAM,EACN,MAAM,EACN,eAAe,EACf,wBAAwB,EACxB,UAAU,EACV,yBAAyB,CAC1B,CAAC;IACR,MAAM,eAAe,CAAC,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC;IACzD,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgB;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACjF,MAAM,eAAe,CAAC,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,kCAAkC,UAAU,EAAE,CAAC,CAAC;IAC5D,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,YAAY,GAAG;QACnB,UAAU,EAAE;YACV,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC;SAC1C;KACF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;AACrE,CAAC"}

package/dist/internal/orgs.d.ts

@@ -0,0 +1,8 @@
+import type { ZivisConfig } from "@zivis-ai/mcp-security/types";
+export interface OrgInfo {
+    id: string;
+    name: string;
+    workosOrgId: string | null;
+}
+export declare function fetchUserOrgs(config: ZivisConfig, accessToken: string): Promise<OrgInfo[]>;
+export declare function extractEmail(idToken?: string): string;

package/dist/internal/orgs.js

@@ -0,0 +1,31 @@
+export async function fetchUserOrgs(config, accessToken) {
+    const url = `${config.apiBaseUrl}/api/user/organizations`;
+    const response = await fetch(url, {
+        method: "GET",
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            "Content-Type": "application/json",
+            "User-Agent": "@zivis-ai/cli",
+        },
+    });
+    if (!response.ok) {
+        const body = await response.json().catch(() => ({}));
+        throw new Error(body.message ||
+            body.error ||
+            `Failed to fetch organizations (HTTP ${response.status})`);
+    }
+    const data = (await response.json());
+    return data.organizations;
+}
+export function extractEmail(idToken) {
+    if (!idToken)
+        return "unknown";
+    try {
+        const payload = JSON.parse(Buffer.from(idToken.split(".")[1], "base64url").toString());
+        return payload.email || "unknown";
+    }
+    catch {
+        return "unknown";
+    }
+}
+//# sourceMappingURL=orgs.js.map

package/dist/internal/orgs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgs.js","sourceRoot":"","sources":["../../src/internal/orgs.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAmB,EACnB,WAAmB;IAEnB,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,yBAAyB,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,eAAe;SAC9B;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CACZ,IAA+B,CAAC,OAAO;YACrC,IAA+B,CAAC,KAAK;YACtC,uCAAuC,QAAQ,CAAC,MAAM,GAAG,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiC,CAAC;IACrE,OAAO,IAAI,CAAC,aAAa,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAC3D,CAAC;QACF,OAAO,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/internal/project-binding.d.ts

@@ -0,0 +1,11 @@
+import type { ZivisConfig } from "@zivis-ai/mcp-security/types";
+export interface EnsureBindingOpts {
+    config: ZivisConfig;
+    session: string;
+    accessToken: string;
+    organizationId?: string;
+    cwd: string;
+    autoBind: boolean;
+    skipBind: boolean;
+}
+export declare function ensureProjectBinding(opts: EnsureBindingOpts): Promise<void>;