agent-security-scanner-mcp 3.20.0 → 4.0.0

package/code-review-agent/dist/src/graph/dependency.js

@@ -0,0 +1,102 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { extractImports, resolveImportPath } from './resolver.js';
+const MAX_DEPTH = 4;
+const MAX_FILES = 200;
+const LANGUAGE_MAP = {
+    '.js': 'javascript', '.mjs': 'javascript', '.cjs': 'javascript', '.jsx': 'javascript',
+    '.ts': 'typescript', '.tsx': 'typescript',
+    '.py': 'python',
+    '.go': 'go',
+    '.rs': 'rust',
+    '.java': 'java',
+    '.rb': 'ruby',
+    '.php': 'php',
+    '.c': 'c',
+    '.cpp': 'cpp',
+    '.h': 'c',
+    '.hpp': 'cpp',
+    '.cs': 'csharp',
+    '.swift': 'swift',
+    '.kt': 'kotlin',
+};
+export class DependencyGraphBuilder {
+    nodes = new Map();
+    visited = new Set();
+    projectRoot;
+    constructor(projectRoot) {
+        this.projectRoot = projectRoot;
+    }
+    build(entryFiles) {
+        const queue = entryFiles.map((f) => ({
+            file: path.resolve(this.projectRoot, f),
+            depth: 0,
+        }));
+        while (queue.length > 0 && this.nodes.size < MAX_FILES) {
+            const item = queue.shift();
+            const { file, depth } = item;
+            if (this.visited.has(file) || depth > MAX_DEPTH)
+                continue;
+            this.visited.add(file);
+            const relPath = path.relative(this.projectRoot, file);
+            const ext = path.extname(file);
+            const language = LANGUAGE_MAP[ext];
+            if (!language)
+                continue;
+            let content;
+            try {
+                content = fs.readFileSync(file, 'utf-8');
+            }
+            catch {
+                continue;
+            }
+            const imports = extractImports(content, language);
+            const resolvedImports = [];
+            for (const imp of imports) {
+                if (!imp.isLocal)
+                    continue;
+                const resolved = resolveImportPath(imp.specifier, file, language);
+                if (resolved) {
+                    const resolvedRel = path.relative(this.projectRoot, resolved);
+                    resolvedImports.push(resolvedRel);
+                    // Ensure the target node exists
+                    if (!this.nodes.has(resolvedRel)) {
+                        this.nodes.set(resolvedRel, {
+                            file: resolvedRel,
+                            imports: [],
+                            importedBy: [],
+                        });
+                    }
+                    // Add reverse edge
+                    this.nodes.get(resolvedRel).importedBy.push(relPath);
+                    // Queue for traversal
+                    if (!this.visited.has(resolved)) {
+                        queue.push({ file: resolved, depth: depth + 1 });
+                    }
+                }
+            }
+            const existing = this.nodes.get(relPath);
+            if (existing) {
+                existing.imports = resolvedImports;
+            }
+            else {
+                this.nodes.set(relPath, {
+                    file: relPath,
+                    imports: resolvedImports,
+                    importedBy: [],
+                });
+            }
+        }
+        return {
+            nodes: this.nodes,
+            entryPoints: entryFiles.map((f) => path.relative(this.projectRoot, path.resolve(this.projectRoot, f))),
+        };
+    }
+    getImporters(file) {
+        return this.nodes.get(file)?.importedBy ?? [];
+    }
+    getImportees(file) {
+        return this.nodes.get(file)?.imports ?? [];
+    }
+}
+//# sourceMappingURL=dependency.js.map

package/code-review-agent/dist/src/graph/dependency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency.js","sourceRoot":"","sources":["../../../src/graph/dependency.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElE,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,MAAM,YAAY,GAA2B;IAC3C,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY;IACrF,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY;IACzC,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,MAAM;IACb,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEF,MAAM,OAAO,sBAAsB;IACzB,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1C,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,WAAW,CAAS;IAE5B,YAAY,WAAmB;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,UAAoB;QACxB,MAAM,KAAK,GAA2C,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3E,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACvC,KAAK,EAAE,CAAC;SACT,CAAC,CAAC,CAAC;QAEJ,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,SAAS,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAC5B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;YAE7B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,SAAS;gBAAE,SAAS;YAC1D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAEvB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAExB,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAClD,MAAM,eAAe,GAAa,EAAE,CAAC;YAErC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,OAAO;oBAAE,SAAS;gBAE3B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAClE,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;oBAC9D,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAElC,gCAAgC;oBAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;wBACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;4BAC1B,IAAI,EAAE,WAAW;4BACjB,OAAO,EAAE,EAAE;4BACX,UAAU,EAAE,EAAE;yBACf,CAAC,CAAC;oBACL,CAAC;oBAED,mBAAmB;oBACnB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAEtD,sBAAsB;oBACtB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAChC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;oBACnD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,OAAO,GAAG,eAAe,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE;oBACtB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,eAAe;oBACxB,UAAU,EAAE,EAAE;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;SACvG,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7C,CAAC;CACF"}

package/code-review-agent/dist/src/graph/resolver.d.ts

@@ -0,0 +1,9 @@
+export interface ImportInfo {
+    specifier: string;
+    isLocal: boolean;
+    resolved: string | null;
+}
+export declare function extractImports(content: string, language: string): ImportInfo[];
+export declare function resolveImportPath(specifier: string, fromFile: string, language: string): string | null;
+export declare function isLocalImport(specifier: string, language: string): boolean;
+//# sourceMappingURL=resolver.d.ts.map

package/code-review-agent/dist/src/graph/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/graph/resolver.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAKD,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,CA6C9E;AAED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CA6Df;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAW1E"}

package/code-review-agent/dist/src/graph/resolver.js

@@ -0,0 +1,124 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+const JS_EXTENSIONS = ['.js', '.ts', '.jsx', '.tsx', '.mjs', '.cjs'];
+const PY_EXTENSIONS = ['.py'];
+export function extractImports(content, language) {
+    const imports = [];
+    if (['javascript', 'typescript'].includes(language)) {
+        // ES imports
+        for (const m of content.matchAll(/import\s+(?:.*?\s+from\s+)?['"]([^'"]+)['"]/g)) {
+            const spec = m[1];
+            imports.push({ specifier: spec, isLocal: isLocalImport(spec, language), resolved: null });
+        }
+        // Re-exports: export { ... } from '...', export * from '...', export { default } from '...'
+        for (const m of content.matchAll(/export\s+(?:\*|{[^}]*})\s+from\s+['"]([^'"]+)['"]/g)) {
+            const spec = m[1];
+            imports.push({ specifier: spec, isLocal: isLocalImport(spec, language), resolved: null });
+        }
+        // require
+        for (const m of content.matchAll(/require\s*\(\s*['"]([^'"]+)['"]\s*\)/g)) {
+            const spec = m[1];
+            imports.push({ specifier: spec, isLocal: isLocalImport(spec, language), resolved: null });
+        }
+        // dynamic import
+        for (const m of content.matchAll(/import\s*\(\s*['"]([^'"]+)['"]\s*\)/g)) {
+            const spec = m[1];
+            imports.push({ specifier: spec, isLocal: isLocalImport(spec, language), resolved: null });
+        }
+    }
+    else if (language === 'python') {
+        // from .module import ... (relative) and from package import ... (absolute)
+        for (const m of content.matchAll(/from\s+(\S+)\s+import/g)) {
+            const spec = m[1];
+            imports.push({ specifier: spec, isLocal: isLocalImport(spec, language), resolved: null });
+        }
+        // import module
+        for (const m of content.matchAll(/^import\s+(\S+)/gm)) {
+            const spec = m[1];
+            imports.push({ specifier: spec, isLocal: isLocalImport(spec, language), resolved: null });
+        }
+    }
+    else if (language === 'go') {
+        for (const m of content.matchAll(/["']([^"']+)["']/g)) {
+            const spec = m[1];
+            if (spec.includes('/')) {
+                imports.push({ specifier: spec, isLocal: isLocalImport(spec, language), resolved: null });
+            }
+        }
+    }
+    return imports;
+}
+export function resolveImportPath(specifier, fromFile, language) {
+    if (!isLocalImport(specifier, language))
+        return null;
+    const fromDir = path.dirname(fromFile);
+    if (['javascript', 'typescript'].includes(language)) {
+        // Try exact path first, then with extensions, then index files
+        const candidates = [];
+        const base = path.resolve(fromDir, specifier);
+        candidates.push(base);
+        for (const ext of JS_EXTENSIONS) {
+            candidates.push(base + ext);
+        }
+        for (const ext of JS_EXTENSIONS) {
+            candidates.push(path.join(base, `index${ext}`));
+        }
+        for (const candidate of candidates) {
+            try {
+                if (fs.statSync(candidate).isFile())
+                    return candidate;
+            }
+            catch { /* not found */ }
+        }
+    }
+    else if (language === 'python') {
+        // Handle relative imports: .utils, ..models, .sub.module
+        let resolveDir = fromDir;
+        let moduleSpec = specifier;
+        if (specifier.startsWith('.')) {
+            // Count leading dots for parent traversal
+            const dotMatch = specifier.match(/^(\.+)(.*)/);
+            if (dotMatch) {
+                const dots = dotMatch[1].length;
+                moduleSpec = dotMatch[2]; // remainder after dots (may be empty for bare ".")
+                // Each dot beyond the first goes up one directory
+                resolveDir = fromDir;
+                for (let i = 1; i < dots; i++) {
+                    resolveDir = path.dirname(resolveDir);
+                }
+            }
+        }
+        // Convert module.path to filesystem path
+        const modulePath = moduleSpec ? moduleSpec.replace(/\./g, path.sep) : '';
+        const base = modulePath ? path.resolve(resolveDir, modulePath) : resolveDir;
+        for (const ext of PY_EXTENSIONS) {
+            try {
+                const candidate = base + ext;
+                if (fs.statSync(candidate).isFile())
+                    return candidate;
+            }
+            catch { /* not found */ }
+        }
+        // Try as package (directory with __init__.py)
+        try {
+            const initFile = path.join(base, '__init__.py');
+            if (fs.statSync(initFile).isFile())
+                return initFile;
+        }
+        catch { /* not found */ }
+    }
+    return null;
+}
+export function isLocalImport(specifier, language) {
+    if (['javascript', 'typescript'].includes(language)) {
+        return specifier.startsWith('./') || specifier.startsWith('../');
+    }
+    if (language === 'python') {
+        return specifier.startsWith('.');
+    }
+    if (language === 'go') {
+        return !specifier.includes('.');
+    }
+    return false;
+}
+//# sourceMappingURL=resolver.js.map

package/code-review-agent/dist/src/graph/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../../src/graph/resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACrE,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,CAAC;AAE9B,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,QAAgB;IAC9D,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,aAAa;QACb,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,8CAA8C,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,4FAA4F;QAC5F,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,oDAAoD,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,UAAU;QACV,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,uCAAuC,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,iBAAiB;QACjB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,sCAAsC,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,4EAA4E;QAC5E,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,gBAAgB;QAChB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,QAAgB,EAChB,QAAgB;IAEhB,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAErD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,+DAA+D;QAC/D,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAE9C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;oBAAE,OAAO,SAAS,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,yDAAyD;QACzD,IAAI,UAAU,GAAG,OAAO,CAAC;QACzB,IAAI,UAAU,GAAG,SAAS,CAAC;QAE3B,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,0CAA0C;YAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC/C,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAChC,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,mDAAmD;gBAC7E,kDAAkD;gBAClD,UAAU,GAAG,OAAO,CAAC;gBACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC9B,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAE5E,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,GAAG,GAAG,CAAC;gBAC7B,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;oBAAE,OAAO,SAAS,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAC7B,CAAC;QAED,8CAA8C;QAC9C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YAChD,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,QAAQ,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,QAAgB;IAC/D,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,OAAO,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/code-review-agent/dist/src/index.d.ts

@@ -0,0 +1,21 @@
+export { AnalysisEngine, type ProgressCallback } from './analyzer/engine.js';
+export { IntentProfiler } from './analyzer/intent.js';
+export { SemanticAnalyzer } from './analyzer/semantic.js';
+export { AnthropicProvider } from './llm/anthropic.js';
+export { ClaudeCliProvider } from './llm/claude-cli.js';
+export { OpenAIProvider } from './llm/openai.js';
+export { ModelRouter } from './llm/router.js';
+export type { LLMProvider, ChatMessage } from './llm/provider.js';
+export { SchemaValidationError } from './llm/provider.js';
+export { zodToJsonSchema, zodToAnthropicTool, zodToOpenAIResponseFormat } from './llm/schemas.js';
+export { buildProjectContext, formatProjectContextForLLM } from './context/project.js';
+export { buildFileContext, isTestFile, isConfigFile, isGeneratedFile } from './context/file.js';
+export { ContextAssembler } from './context/assembler.js';
+export { DependencyGraphBuilder } from './graph/dependency.js';
+export { resolveImportPath, extractImports, isLocalImport } from './graph/resolver.js';
+export type { AnalysisResult, AnalysisStats, FileAnalysisResult, ProjectContext, FileContext, DependencyNode, DependencyGraph, } from './types/analysis.js';
+export type { AnalysisOptions, CRAgentConfig, } from './types/config.js';
+export { loadConfig, resolveOptions } from './types/config.js';
+export { FindingSchema, FileAnalysisResponseSchema, IntentProfileSchema, TriageDecisionSchema, SeveritySchema, CategorySchema, IntentAlignmentSchema, RiskDomainSchema, } from './types/findings.js';
+export type { Finding, FileAnalysisResponse, IntentProfile, TriageDecision, Severity, Category, IntentAlignment, RiskDomain, } from './types/findings.js';
+//# sourceMappingURL=index.d.ts.map

package/code-review-agent/dist/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAGlG,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGvF,YAAY,EACV,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,cAAc,EACd,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,eAAe,EACf,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EACL,aAAa,EACb,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,OAAO,EACP,oBAAoB,EACpB,aAAa,EACb,cAAc,EACd,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,UAAU,GACX,MAAM,qBAAqB,CAAC"}

package/code-review-agent/dist/src/index.js

@@ -0,0 +1,21 @@
+// Core engine
+export { AnalysisEngine } from './analyzer/engine.js';
+export { IntentProfiler } from './analyzer/intent.js';
+export { SemanticAnalyzer } from './analyzer/semantic.js';
+// LLM providers
+export { AnthropicProvider } from './llm/anthropic.js';
+export { ClaudeCliProvider } from './llm/claude-cli.js';
+export { OpenAIProvider } from './llm/openai.js';
+export { ModelRouter } from './llm/router.js';
+export { SchemaValidationError } from './llm/provider.js';
+export { zodToJsonSchema, zodToAnthropicTool, zodToOpenAIResponseFormat } from './llm/schemas.js';
+// Context
+export { buildProjectContext, formatProjectContextForLLM } from './context/project.js';
+export { buildFileContext, isTestFile, isConfigFile, isGeneratedFile } from './context/file.js';
+export { ContextAssembler } from './context/assembler.js';
+// Graph
+export { DependencyGraphBuilder } from './graph/dependency.js';
+export { resolveImportPath, extractImports, isLocalImport } from './graph/resolver.js';
+export { loadConfig, resolveOptions } from './types/config.js';
+export { FindingSchema, FileAnalysisResponseSchema, IntentProfileSchema, TriageDecisionSchema, SeveritySchema, CategorySchema, IntentAlignmentSchema, RiskDomainSchema, } from './types/findings.js';
+//# sourceMappingURL=index.js.map

package/code-review-agent/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc;AACd,OAAO,EAAE,cAAc,EAAyB,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,gBAAgB;AAChB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAElG,UAAU;AACV,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,QAAQ;AACR,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAgBvF,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EACL,aAAa,EACb,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC"}

package/code-review-agent/dist/src/llm/anthropic.d.ts

@@ -0,0 +1,13 @@
+import type { z } from 'zod';
+import { type ChatMessage, type LLMProvider } from './provider.js';
+export declare class AnthropicProvider implements LLMProvider {
+    private client;
+    readonly modelId: string;
+    readonly providerName = "anthropic";
+    constructor(apiKey: string, model?: string);
+    chat(messages: ChatMessage[]): Promise<string>;
+    chatStructured<T>(messages: ChatMessage[], schema: z.ZodType<T>, schemaName: string): Promise<T>;
+    countTokens(text: string): number;
+    private splitMessages;
+}
+//# sourceMappingURL=anthropic.d.ts.map

package/code-review-agent/dist/src/llm/anthropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../../src/llm/anthropic.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAyB,MAAM,eAAe,CAAC;AAK1F,qBAAa,iBAAkB,YAAW,WAAW;IACnD,OAAO,CAAC,MAAM,CAAY;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,eAAe;gBAExB,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;IAKpC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAc9C,cAAc,CAAC,CAAC,EACpB,QAAQ,EAAE,WAAW,EAAE,EACvB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EACpB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC;IA4Cb,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAQjC,OAAO,CAAC,aAAa;CAiBtB"}

package/code-review-agent/dist/src/llm/anthropic.js

@@ -0,0 +1,83 @@
+import Anthropic from '@anthropic-ai/sdk';
+import { countTokens } from '@anthropic-ai/tokenizer';
+import { SchemaValidationError } from './provider.js';
+import { zodToAnthropicTool } from './schemas.js';
+const MAX_RETRIES = 3;
+export class AnthropicProvider {
+    client;
+    modelId;
+    providerName = 'anthropic';
+    constructor(apiKey, model) {
+        this.client = new Anthropic({ apiKey });
+        this.modelId = model ?? 'claude-sonnet-4-20250514';
+    }
+    async chat(messages) {
+        const { system, userMessages } = this.splitMessages(messages);
+        const response = await this.client.messages.create({
+            model: this.modelId,
+            max_tokens: 4096,
+            system: system ?? undefined,
+            messages: userMessages,
+        });
+        const textBlock = response.content.find((b) => b.type === 'text');
+        return textBlock?.text ?? '';
+    }
+    async chatStructured(messages, schema, schemaName) {
+        const tool = zodToAnthropicTool(schema, schemaName, `Respond with ${schemaName}`);
+        const { system, userMessages } = this.splitMessages(messages);
+        let lastError = null;
+        const conversationMessages = [...userMessages];
+        for (let attempt = 0; attempt < MAX_RETRIES; attempt++) {
+            const response = await this.client.messages.create({
+                model: this.modelId,
+                max_tokens: 8192,
+                system: system ?? undefined,
+                messages: conversationMessages,
+                tools: [tool],
+                tool_choice: { type: 'tool', name: schemaName },
+            });
+            const toolBlock = response.content.find((b) => b.type === 'tool_use');
+            if (!toolBlock || toolBlock.type !== 'tool_use') {
+                lastError = new Error('No tool_use block in response');
+                continue;
+            }
+            const result = schema.safeParse(toolBlock.input);
+            if (result.success) {
+                return result.data;
+            }
+            lastError = new Error(result.error.message);
+            // Append error feedback for retry
+            conversationMessages.push({
+                role: 'assistant',
+                content: JSON.stringify(toolBlock.input),
+            });
+            conversationMessages.push({
+                role: 'user',
+                content: `Schema validation error: ${result.error.message}. Please fix and respond again.`,
+            });
+        }
+        throw new SchemaValidationError(MAX_RETRIES, lastError);
+    }
+    countTokens(text) {
+        try {
+            return countTokens(text);
+        }
+        catch {
+            return Math.ceil(text.length / 4);
+        }
+    }
+    splitMessages(messages) {
+        let system = null;
+        const userMessages = [];
+        for (const msg of messages) {
+            if (msg.role === 'system') {
+                system = msg.content;
+            }
+            else {
+                userMessages.push({ role: msg.role, content: msg.content });
+            }
+        }
+        return { system, userMessages };
+    }
+}
+//# sourceMappingURL=anthropic.js.map

package/code-review-agent/dist/src/llm/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../../src/llm/anthropic.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,EAAsC,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,MAAM,OAAO,iBAAiB;IACpB,MAAM,CAAY;IACjB,OAAO,CAAS;IAChB,YAAY,GAAG,WAAW,CAAC;IAEpC,YAAY,MAAc,EAAE,KAAc;QACxC,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,KAAK,IAAI,0BAA0B,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAuB;QAChC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjD,KAAK,EAAE,IAAI,CAAC,OAAO;YACnB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,MAAM,IAAI,SAAS;YAC3B,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAClE,OAAO,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,QAAuB,EACvB,MAAoB,EACpB,UAAkB;QAElB,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,UAAU,EAAE,CAAC,CAAC;QAClF,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE9D,IAAI,SAAS,GAAiB,IAAI,CAAC;QACnC,MAAM,oBAAoB,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;QAE/C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACjD,KAAK,EAAE,IAAI,CAAC,OAAO;gBACnB,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,MAAM,IAAI,SAAS;gBAC3B,QAAQ,EAAE,oBAAoB;gBAC9B,KAAK,EAAE,CAAC,IAAsB,CAAC;gBAC/B,WAAW,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,EAAE;aACzD,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;YACtE,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAChD,SAAS,GAAG,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACvD,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAED,SAAS,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAE5C,kCAAkC;YAClC,oBAAoB,CAAC,IAAI,CAAC;gBACxB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC;aACzC,CAAC,CAAC;YACH,oBAAoB,CAAC,IAAI,CAAC;gBACxB,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,4BAA4B,MAAM,CAAC,KAAK,CAAC,OAAO,iCAAiC;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,SAAU,CAAC,CAAC;IAC3D,CAAC;IAED,WAAW,CAAC,IAAY;QACtB,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,QAAuB;QAI3C,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,MAAM,YAAY,GAA2D,EAAE,CAAC;QAEhF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;CACF"}

package/code-review-agent/dist/src/llm/claude-cli.d.ts

@@ -0,0 +1,13 @@
+import type { z } from 'zod';
+import { type ChatMessage, type LLMProvider } from './provider.js';
+export declare class ClaudeCliProvider implements LLMProvider {
+    readonly modelId: string;
+    readonly providerName = "claude-cli";
+    constructor(model?: string);
+    chat(messages: ChatMessage[]): Promise<string>;
+    chatStructured<T>(messages: ChatMessage[], schema: z.ZodType<T>, schemaName: string): Promise<T>;
+    countTokens(text: string): number;
+    private formatMessages;
+    private runClaude;
+}
+//# sourceMappingURL=claude-cli.d.ts.map

package/code-review-agent/dist/src/llm/claude-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-cli.d.ts","sourceRoot":"","sources":["../../../src/llm/claude-cli.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAyB,MAAM,eAAe,CAAC;AAe1F,qBAAa,iBAAkB,YAAW,WAAW;IACnD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,gBAAgB;gBAEzB,KAAK,CAAC,EAAE,MAAM;IAIpB,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAK9C,cAAc,CAAC,CAAC,EACpB,QAAQ,EAAE,WAAW,EAAE,EACvB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EACpB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC;IAoDb,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAKjC,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,SAAS;CAyDlB"}

package/code-review-agent/dist/src/llm/claude-cli.js

@@ -0,0 +1,142 @@
+import { spawn } from 'node:child_process';
+import { SchemaValidationError } from './provider.js';
+import { zodToJsonSchema } from './schemas.js';
+const MAX_RETRIES = 3;
+export class ClaudeCliProvider {
+    modelId;
+    providerName = 'claude-cli';
+    constructor(model) {
+        this.modelId = model ?? 'sonnet';
+    }
+    async chat(messages) {
+        const prompt = this.formatMessages(messages);
+        return this.runClaude(prompt);
+    }
+    async chatStructured(messages, schema, schemaName) {
+        const jsonSchema = zodToJsonSchema(schema);
+        const schemaInstruction = [
+            `You MUST respond with ONLY a valid JSON object matching this schema (no markdown, no explanation, no wrapping):`,
+            `Schema name: ${schemaName}`,
+            '```json',
+            JSON.stringify(jsonSchema, null, 2),
+            '```',
+            'Respond with ONLY the JSON object. No other text.',
+        ].join('\n');
+        let lastError = null;
+        const conversationParts = [...messages];
+        for (let attempt = 0; attempt < MAX_RETRIES; attempt++) {
+            const prompt = this.formatMessages([
+                ...conversationParts,
+                { role: 'user', content: schemaInstruction },
+            ]);
+            const raw = await this.runClaude(prompt);
+            // Extract JSON from response (handle markdown code blocks)
+            const jsonStr = extractJson(raw);
+            let parsed;
+            try {
+                parsed = JSON.parse(jsonStr);
+            }
+            catch (e) {
+                lastError = e instanceof Error ? e : new Error(String(e));
+                conversationParts.push({ role: 'assistant', content: raw }, { role: 'user', content: `That was not valid JSON. Parse error: ${lastError.message}. Respond with ONLY a valid JSON object.` });
+                continue;
+            }
+            const result = schema.safeParse(parsed);
+            if (result.success) {
+                return result.data;
+            }
+            lastError = new Error(result.error.message);
+            conversationParts.push({ role: 'assistant', content: raw }, { role: 'user', content: `Schema validation error: ${result.error.message}. Fix the JSON and respond with ONLY the corrected JSON object.` });
+        }
+        throw new SchemaValidationError(MAX_RETRIES, lastError);
+    }
+    countTokens(text) {
+        // Approximate — Claude CLI doesn't expose a token counter
+        return Math.ceil(text.length / 4);
+    }
+    formatMessages(messages) {
+        const parts = [];
+        for (const msg of messages) {
+            if (msg.role === 'system') {
+                parts.push(`[System Instructions]\n${msg.content}\n`);
+            }
+            else if (msg.role === 'user') {
+                parts.push(`${msg.content}`);
+            }
+            else if (msg.role === 'assistant') {
+                parts.push(`[Previous response]\n${msg.content}\n`);
+            }
+        }
+        return parts.join('\n\n');
+    }
+    runClaude(prompt) {
+        return new Promise((resolve, reject) => {
+            const args = [
+                '-p', '-',
+                '--output-format', 'json',
+                '--model', this.modelId,
+                '--no-session-persistence',
+            ];
+            const child = spawn('claude', args, {
+                stdio: ['pipe', 'pipe', 'pipe'],
+                timeout: 180_000,
+            });
+            let stdout = '';
+            let stderr = '';
+            child.stdout.on('data', (data) => { stdout += data.toString(); });
+            child.stderr.on('data', (data) => { stderr += data.toString(); });
+            child.on('close', (code) => {
+                if (code !== 0 && !stdout) {
+                    // Sanitize stderr — only show first 200 chars, never leak prompt content
+                    const safeStderr = stderr ? sanitizeError(stderr) : '';
+                    reject(new Error(`claude CLI exited with code ${code}${safeStderr ? `: ${safeStderr}` : ''}`));
+                    return;
+                }
+                try {
+                    const result = JSON.parse(stdout);
+                    if (result.is_error) {
+                        reject(new Error(`claude CLI error: ${sanitizeError(result.result)}`));
+                        return;
+                    }
+                    resolve(result.result);
+                }
+                catch {
+                    resolve(stdout.trim());
+                }
+            });
+            child.on('error', (err) => {
+                reject(new Error(`claude CLI failed to start: ${sanitizeError(err.message)}`));
+            });
+            // Handle stdin write errors (e.g., broken pipe if child exits early)
+            child.stdin.on('error', (err) => {
+                // Ignore EPIPE — child may have already exited, close handler will deal with it
+                if (err.code !== 'EPIPE') {
+                    reject(new Error(`Failed to write prompt to claude CLI: ${sanitizeError(err.message)}`));
+                }
+            });
+            // Write prompt to stdin and close it
+            child.stdin.write(prompt);
+            child.stdin.end();
+        });
+    }
+}
+function sanitizeError(msg) {
+    // Never leak prompt content in errors — truncate and strip anything
+    // that looks like it could be prompt/code/schema content
+    const firstLine = msg.split('\n')[0].trim();
+    return firstLine.length > 200 ? firstLine.slice(0, 200) + '...' : firstLine;
+}
+function extractJson(text) {
+    // Try to extract JSON from markdown code blocks
+    const codeBlockMatch = text.match(/```(?:json)?\s*\n?([\s\S]*?)\n?```/);
+    if (codeBlockMatch) {
+        return codeBlockMatch[1].trim();
+    }
+    // Try to find a JSON object directly
+    const objectMatch = text.match(/\{[\s\S]*\}/);
+    if (objectMatch) {
+        return objectMatch[0];
+    }
+    return text.trim();
+}
+//# sourceMappingURL=claude-cli.js.map

package/code-review-agent/dist/src/llm/claude-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-cli.js","sourceRoot":"","sources":["../../../src/llm/claude-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAsC,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,WAAW,GAAG,CAAC,CAAC;AAYtB,MAAM,OAAO,iBAAiB;IACnB,OAAO,CAAS;IAChB,YAAY,GAAG,YAAY,CAAC;IAErC,YAAY,KAAc;QACxB,IAAI,CAAC,OAAO,GAAG,KAAK,IAAI,QAAQ,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAuB;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,QAAuB,EACvB,MAAoB,EACpB,UAAkB;QAElB,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,iBAAiB,GAAG;YACxB,iHAAiH;YACjH,gBAAgB,UAAU,EAAE;YAC5B,SAAS;YACT,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,KAAK;YACL,mDAAmD;SACpD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,IAAI,SAAS,GAAiB,IAAI,CAAC;QACnC,MAAM,iBAAiB,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QAExC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC;gBACjC,GAAG,iBAAiB;gBACpB,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE;aAC7C,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAEzC,2DAA2D;YAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAEjC,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,SAAS,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,iBAAiB,CAAC,IAAI,CACpB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,EACnC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,yCAAyC,SAAS,CAAC,OAAO,0CAA0C,EAAE,CAChI,CAAC;gBACF,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAED,SAAS,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5C,iBAAiB,CAAC,IAAI,CACpB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,EACnC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,4BAA4B,MAAM,CAAC,KAAK,CAAC,OAAO,iEAAiE,EAAE,CAC7I,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,SAAU,CAAC,CAAC;IAC3D,CAAC;IAED,WAAW,CAAC,IAAY;QACtB,0DAA0D;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IAEO,cAAc,CAAC,QAAuB;QAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACxD,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/B,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,wBAAwB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAEO,SAAS,CAAC,MAAc;QAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG;gBACX,IAAI,EAAE,GAAG;gBACT,iBAAiB,EAAE,MAAM;gBACzB,SAAS,EAAE,IAAI,CAAC,OAAO;gBACvB,0BAA0B;aAC3B,CAAC;YAEF,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE;gBAClC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,OAAO,EAAE,OAAO;aACjB,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1E,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAE1E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;oBAC1B,yEAAyE;oBACzE,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBAC/F,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAoB,CAAC;oBACrD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;wBACvE,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;YAEH,qEAAqE;YACrE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC9B,gFAAgF;gBAChF,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACpD,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC3F,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,qCAAqC;YACrC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,oEAAoE;IACpE,yDAAyD;IACzD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,OAAO,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,gDAAgD;IAChD,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxE,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,qCAAqC;IACrC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9C,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;AACrB,CAAC"}

package/code-review-agent/dist/src/llm/openai.d.ts

@@ -0,0 +1,13 @@
+import type { z } from 'zod';
+import { type ChatMessage, type LLMProvider } from './provider.js';
+export declare class OpenAIProvider implements LLMProvider {
+    private client;
+    private encoder;
+    readonly modelId: string;
+    readonly providerName = "openai";
+    constructor(apiKey: string, model?: string);
+    chat(messages: ChatMessage[]): Promise<string>;
+    chatStructured<T>(messages: ChatMessage[], schema: z.ZodType<T>, schemaName: string): Promise<T>;
+    countTokens(text: string): number;
+}
+//# sourceMappingURL=openai.d.ts.map

package/code-review-agent/dist/src/llm/openai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../../src/llm/openai.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAyB,MAAM,eAAe,CAAC;AAK1F,qBAAa,cAAe,YAAW,WAAW;IAChD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,YAAY;gBAErB,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;IAKpC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAU9C,cAAc,CAAC,CAAC,EACpB,QAAQ,EAAE,WAAW,EAAE,EACvB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EACpB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,CAAC,CAAC;IAmDb,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAUlC"}