cxgrd 0.1.0

package/dist/memory/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/memory/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB"}

package/dist/memory/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/memory/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/memory/types.ts"],"names":[],"mappings":""}

package/dist/prompt/llm-client.d.ts

@@ -0,0 +1,8 @@
+import type { ActiveSession } from '../auth/auth-session';
+export interface LlmResult {
+    prompt: string;
+    provider: string;
+    model: string;
+}
+export declare function generatePromptWithLlm(contextPayload: string, session: ActiveSession): Promise<LlmResult>;
+//# sourceMappingURL=llm-client.d.ts.map

package/dist/prompt/llm-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-client.d.ts","sourceRoot":"","sources":["../../src/prompt/llm-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAc1D,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,qBAAqB,CACzC,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,SAAS,CAAC,CAuBpB"}

package/dist/prompt/llm-client.js

@@ -0,0 +1,96 @@
+import { envString } from '../config/env';
+const SYSTEM_PROMPT = `You are an expert software architect helping a developer write a precise prompt for their AI coding assistant (Cursor, Copilot, etc.).
+
+Given dependency graph context, blast radius, symbols, and repo memory from the cxgrd tool, produce ONE markdown prompt the developer can paste into their AI assistant.
+
+Requirements:
+- Preserve the developer's original intent
+- List concrete files/modules to touch and why
+- Mention architectural layers and dependency constraints
+- Include verification steps (tests, cxgrd check)
+- Be actionable and concise (under 800 words)
+- Do not invent files not mentioned in the context`;
+export async function generatePromptWithLlm(contextPayload, session) {
+    const apiKey = envString('CXGRD_LLM_API_KEY');
+    const cloudUrl = envString('CXGRD_PROMPT_API_URL');
+    if (cloudUrl && session.source === 'auth_file') {
+        try {
+            return await callCloudPromptApi(cloudUrl, contextPayload, session.token);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            if (apiKey && message.includes('not deployed')) {
+                return callDirectLlm(contextPayload, apiKey);
+            }
+            throw err;
+        }
+    }
+    if (apiKey) {
+        return callDirectLlm(contextPayload, apiKey);
+    }
+    throw new Error('No LLM configured. Set CXGRD_LLM_API_KEY in .env (see .env.example) or sign in and use the cloud API when available.');
+}
+async function callCloudPromptApi(url, context, token) {
+    const response = await fetch(url.replace(/\/$/, ''), {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${token}`,
+        },
+        body: JSON.stringify({ context }),
+    });
+    if (response.status === 404 || response.status === 501) {
+        throw new Error('Cloud prompt API is not deployed yet. Use CXGRD_LLM_API_KEY in .env for direct LLM access during development.');
+    }
+    if (!response.ok) {
+        const body = await response.text().catch(() => '');
+        throw new Error(`Prompt API error (${response.status}): ${body || response.statusText}`);
+    }
+    const data = (await response.json());
+    if (!data.prompt) {
+        throw new Error('Prompt API returned an empty response');
+    }
+    return {
+        prompt: data.prompt,
+        provider: data.provider || 'cxgrd-cloud',
+        model: data.model || 'default',
+    };
+}
+async function callDirectLlm(context, apiKey) {
+    const provider = envString('CXGRD_LLM_PROVIDER', 'groq').toLowerCase();
+    const model = envString('CXGRD_LLM_MODEL', 'llama-3.3-70b-versatile');
+    const baseUrl = envString('CXGRD_LLM_BASE_URL') ||
+        (provider === 'openai'
+            ? 'https://api.openai.com/v1'
+            : 'https://api.groq.com/openai/v1');
+    const response = await fetch(`${baseUrl.replace(/\/$/, '')}/chat/completions`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${apiKey}`,
+        },
+        body: JSON.stringify({
+            model,
+            temperature: 0.3,
+            max_tokens: 2048,
+            messages: [
+                { role: 'system', content: SYSTEM_PROMPT },
+                {
+                    role: 'user',
+                    content: `Generate the enriched AI coding prompt from this cxgrd context:\n\n${context}`,
+                },
+            ],
+        }),
+    });
+    if (!response.ok) {
+        const body = await response.text().catch(() => '');
+        throw new Error(`LLM request failed (${response.status}): ${body || response.statusText}`);
+    }
+    const data = (await response.json());
+    const content = data.choices?.[0]?.message?.content?.trim();
+    if (!content) {
+        throw new Error('LLM returned an empty response');
+    }
+    return { prompt: content, provider, model };
+}
+//# sourceMappingURL=llm-client.js.map

package/dist/prompt/llm-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-client.js","sourceRoot":"","sources":["../../src/prompt/llm-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG1C,MAAM,aAAa,GAAG;;;;;;;;;;mDAU6B,CAAC;AAQpD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,cAAsB,EACtB,OAAsB;IAEtB,MAAM,MAAM,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,sBAAsB,CAAC,CAAC;IAEnD,IAAI,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,OAAO,MAAM,kBAAkB,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC/C,OAAO,aAAa,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,aAAa,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,GAAW,EACX,OAAe,EACf,KAAa;IAEb,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE;QACnD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,+GAA+G,CAChH,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,MAAM,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2D,CAAC;IAC/F,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,aAAa;QACxC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;KAC/B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,MAAc;IAC1D,MAAM,QAAQ,GAAG,SAAS,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACvE,MAAM,KAAK,GAAG,SAAS,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;IAEtE,MAAM,OAAO,GACX,SAAS,CAAC,oBAAoB,CAAC;QAC/B,CAAC,QAAQ,KAAK,QAAQ;YACpB,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,gCAAgC,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,EAAE;QAC7E,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,EAAE;SAClC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK;YACL,WAAW,EAAE,GAAG;YAChB,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE;gBAC1C;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,sEAAsE,OAAO,EAAE;iBACzF;aACF;SACF,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,MAAM,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC9C,CAAC"}

package/dist/prompt/subgraph.d.ts

@@ -0,0 +1,26 @@
+export interface PromptSubgraph {
+    changeDescription: string;
+    seedFiles: string[];
+    affectedFiles: Array<{
+        path: string;
+        severity: string;
+        reason: string;
+        distance: number;
+    }>;
+    dependencies: Array<{
+        from: string;
+        to: string;
+        type: string;
+    }>;
+    symbols: Record<string, string[]>;
+    architectureLayers: Record<string, string[]>;
+    riskLevel: string;
+    recommendations: string[];
+}
+export declare function buildPromptSubgraph(changeDescription: string, graph: {
+    files?: Record<string, unknown>;
+}, symbols: Record<string, string[]>, arch: {
+    layers?: Record<string, string[]>;
+} | null, projectRoot: string): PromptSubgraph;
+export declare function serializeSubgraphForLlm(subgraph: PromptSubgraph, repoMemoryBlock: string): string;
+//# sourceMappingURL=subgraph.d.ts.map

package/dist/prompt/subgraph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subgraph.d.ts","sourceRoot":"","sources":["../../src/prompt/subgraph.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3F,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,wBAAgB,mBAAmB,CACjC,iBAAiB,EAAE,MAAM,EACzB,KAAK,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EAC1C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EACjC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CAAE,GAAG,IAAI,EAClD,WAAW,EAAE,MAAM,GAClB,cAAc,CAuDhB;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,cAAc,EACxB,eAAe,EAAE,MAAM,GACtB,MAAM,CAiDR"}

package/dist/prompt/subgraph.js

@@ -0,0 +1,96 @@
+import { BlastRadiusAnalyzer } from '../utils/blast-radius-analyzer';
+import { ChangeDetector } from '../utils/change-detector';
+export function buildPromptSubgraph(changeDescription, graph, symbols, arch, projectRoot) {
+    const filePaths = Object.keys(graph.files || {});
+    const detector = new ChangeDetector(projectRoot);
+    const gitChanges = detector.getChangedFiles();
+    const descriptionMatch = detector.parseDescription(changeDescription, filePaths);
+    const seedFiles = [
+        ...new Set([...gitChanges.files, ...descriptionMatch.files]),
+    ].slice(0, 15);
+    const analyzer = new BlastRadiusAnalyzer(graph);
+    const blast = analyzer.analyze(seedFiles);
+    const affectedSet = new Set();
+    const dependencies = [];
+    for (const af of blast.affectedFiles.slice(0, 25)) {
+        affectedSet.add(af.path);
+    }
+    for (const seed of seedFiles) {
+        affectedSet.add(seed);
+    }
+    const relevantSymbols = {};
+    for (const path of affectedSet) {
+        if (symbols[path]?.length) {
+            relevantSymbols[path] = symbols[path].slice(0, 15);
+        }
+        const node = graph.files?.[path];
+        if (node?.dependencies) {
+            for (const dep of node.dependencies.slice(0, 8)) {
+                dependencies.push({
+                    from: dep.from || path,
+                    to: dep.to,
+                    type: dep.type || 'import',
+                });
+            }
+        }
+    }
+    return {
+        changeDescription,
+        seedFiles,
+        affectedFiles: blast.affectedFiles.slice(0, 25).map((f) => ({
+            path: f.path,
+            severity: f.severity,
+            reason: f.reason,
+            distance: f.distance,
+        })),
+        dependencies: dependencies.slice(0, 40),
+        symbols: relevantSymbols,
+        architectureLayers: arch?.layers || {},
+        riskLevel: blast.riskLevel,
+        recommendations: blast.recommendations.slice(0, 6),
+    };
+}
+export function serializeSubgraphForLlm(subgraph, repoMemoryBlock) {
+    const parts = [
+        `# Change request\n${subgraph.changeDescription}`,
+        `\n## Blast radius (${subgraph.riskLevel} risk)`,
+        `Seed files: ${subgraph.seedFiles.length ? subgraph.seedFiles.join(', ') : '(inferred from description)'}`,
+    ];
+    if (subgraph.affectedFiles.length) {
+        parts.push('\n### Affected files');
+        for (const f of subgraph.affectedFiles) {
+            parts.push(`- [${f.severity}] ${f.path} — ${f.reason} (depth ${f.distance})`);
+        }
+    }
+    if (subgraph.dependencies.length) {
+        parts.push('\n### Dependency edges (subgraph)');
+        for (const d of subgraph.dependencies.slice(0, 25)) {
+            parts.push(`- ${d.from} → ${d.to} (${d.type})`);
+        }
+    }
+    const symbolEntries = Object.entries(subgraph.symbols);
+    if (symbolEntries.length) {
+        parts.push('\n### Symbols in affected modules');
+        for (const [file, syms] of symbolEntries.slice(0, 12)) {
+            parts.push(`- ${file}: ${syms.join(', ')}`);
+        }
+    }
+    const layers = Object.entries(subgraph.architectureLayers);
+    if (layers.length) {
+        parts.push('\n### Architecture layers');
+        for (const [layer, files] of layers) {
+            parts.push(`- ${layer}: ${files.length} files`);
+        }
+    }
+    if (subgraph.recommendations.length) {
+        parts.push('\n### Analyzer recommendations');
+        for (const r of subgraph.recommendations) {
+            parts.push(`- ${r}`);
+        }
+    }
+    if (repoMemoryBlock.trim()) {
+        parts.push('\n' + repoMemoryBlock);
+    }
+    return parts.join('\n');
+}
+//# sourceMappingURL=subgraph.js.map

package/dist/prompt/subgraph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subgraph.js","sourceRoot":"","sources":["../../src/prompt/subgraph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAa1D,MAAM,UAAU,mBAAmB,CACjC,iBAAyB,EACzB,KAA0C,EAC1C,OAAiC,EACjC,IAAkD,EAClD,WAAmB;IAEnB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;IAC9C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAEjF,MAAM,SAAS,GAAG;QAChB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;KAC7D,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEf,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,KAA6D,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE1C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,YAAY,GAAsD,EAAE,CAAC;IAE3E,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAClD,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,eAAe,GAA6B,EAAE,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;YAC1B,eAAe,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,CAAyE,CAAC;QACzG,IAAI,IAAI,EAAE,YAAY,EAAE,CAAC;YACvB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAChD,YAAY,CAAC,IAAI,CAAC;oBAChB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;oBACtB,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,QAAQ;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,iBAAiB;QACjB,SAAS;QACT,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1D,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC;QACH,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACvC,OAAO,EAAE,eAAe;QACxB,kBAAkB,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAwB,EACxB,eAAuB;IAEvB,MAAM,KAAK,GAAa;QACtB,qBAAqB,QAAQ,CAAC,iBAAiB,EAAE;QACjD,sBAAsB,QAAQ,CAAC,SAAS,QAAQ;QAChD,eAAe,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,6BAA6B,EAAE;KAC3G,CAAC;IAEF,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,KAAM,KAAkB,CAAC,MAAM,QAAQ,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/scanner.d.ts

@@ -0,0 +1,13 @@
+interface FileInfo {
+    path: string;
+    content: string;
+    language: string;
+}
+export declare class FileScanner {
+    private ignorePatterns;
+    private languageMap;
+    private shouldIgnore;
+    scanDirectory(rootPath: string): Promise<FileInfo[]>;
+}
+export {};
+//# sourceMappingURL=scanner.d.ts.map

package/dist/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAGA,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,cAAc,CAiBpB;IAEF,OAAO,CAAC,WAAW,CAoBjB;IAEF,OAAO,CAAC,YAAY;IAOd,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;CA2C3D"}

package/dist/scanner.js

@@ -0,0 +1,92 @@
+import { readdir, readFile } from 'fs/promises';
+import { join, relative, extname } from 'path';
+export class FileScanner {
+    constructor() {
+        this.ignorePatterns = [
+            'node_modules',
+            '.git',
+            'dist',
+            'build',
+            '.next',
+            '.venv',
+            '__pycache__',
+            'target',
+            '.cg',
+            '.vscode',
+            '.idea',
+            'coverage',
+            "venv",
+            ".env",
+            "env",
+            "site-packages",
+        ];
+        this.languageMap = {
+            '.ts': 'typescript',
+            '.tsx': 'typescript',
+            '.js': 'javascript',
+            '.jsx': 'javascript',
+            '.py': 'python',
+            '.java': 'java',
+            '.cpp': 'cpp',
+            '.cc': 'cpp',
+            '.cxx': 'cpp',
+            '.h': 'cpp',
+            '.hpp': 'cpp',
+            '.cs': 'csharp',
+            '.rb': 'ruby',
+            '.go': 'go',
+            '.rs': 'rust',
+            '.sql': 'sql',
+            '.json': 'json',
+            '.yaml': 'yaml',
+            '.yml': 'yaml',
+        };
+    }
+    shouldIgnore(filePath) {
+        return this.ignorePatterns.some(pattern => {
+            const parts = filePath.replace(/\\/g, '/').split('/');
+            return parts.includes(pattern);
+        });
+    }
+    async scanDirectory(rootPath) {
+        const files = [];
+        const walkDir = async (dir) => {
+            try {
+                const entries = await readdir(dir, { withFileTypes: true });
+                for (const entry of entries) {
+                    const fullPath = join(dir, entry.name);
+                    const relativePath = relative(rootPath, fullPath);
+                    if (this.shouldIgnore(relativePath)) {
+                        continue;
+                    }
+                    if (entry.isDirectory()) {
+                        await walkDir(fullPath);
+                    }
+                    else if (entry.isFile()) {
+                        const ext = extname(entry.name).toLowerCase();
+                        const language = this.languageMap[ext];
+                        if (language) {
+                            try {
+                                const content = await readFile(fullPath, 'utf-8');
+                                files.push({
+                                    path: relativePath.replace(/\\/g, '/'),
+                                    content,
+                                    language,
+                                });
+                            }
+                            catch (err) {
+                                // Skip files that can't be read
+                            }
+                        }
+                    }
+                }
+            }
+            catch (err) {
+                // Skip directories that can't be read
+            }
+        };
+        await walkDir(rootPath);
+        return files;
+    }
+}
+//# sourceMappingURL=scanner.js.map

package/dist/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAQ,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAQ/C,MAAM,OAAO,WAAW;IAAxB;QACU,mBAAc,GAAa;YACjC,cAAc;YACd,MAAM;YACN,MAAM;YACN,OAAO;YACP,OAAO;YACP,OAAO;YACP,aAAa;YACb,QAAQ;YACR,KAAK;YACL,SAAS;YACT,OAAO;YACP,UAAU;YACV,MAAM;YACN,MAAM;YACN,KAAK;YACL,eAAe;SAChB,CAAC;QAEM,gBAAW,GAA2B;YAC5C,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,MAAM;SACf,CAAC;IAoDJ,CAAC;IAlDS,YAAY,CAAC,QAAgB;QACnC,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,MAAM,KAAK,GAAe,EAAE,CAAC;QAE7B,MAAM,OAAO,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;YACpC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;gBAE5D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;oBACvC,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBAElD,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;wBACpC,SAAS;oBACX,CAAC;oBAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;wBACxB,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAC1B,CAAC;yBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;wBAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;wBAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;wBAEvC,IAAI,QAAQ,EAAE,CAAC;4BACb,IAAI,CAAC;gCACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gCAClD,KAAK,CAAC,IAAI,CAAC;oCACT,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;oCACtC,OAAO;oCACP,QAAQ;iCACT,CAAC,CAAC;4BACL,CAAC;4BAAC,OAAO,GAAG,EAAE,CAAC;gCACb,gCAAgC;4BAClC,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sCAAsC;YACxC,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/team/audit.d.ts

@@ -0,0 +1,4 @@
+import type { ActiveSession } from '../auth/auth-session';
+import type { AuditEventPayload } from './types';
+export declare function recordAuditEventIfTeam(session: ActiveSession | null, projectRoot: string, partial: Omit<AuditEventPayload, 'repoId' | 'gitRef'>): Promise<void>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/team/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/team/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAIjD,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,aAAa,GAAG,IAAI,EAC7B,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,QAAQ,GAAG,QAAQ,CAAC,GACpD,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/team/audit.js

@@ -0,0 +1,16 @@
+import { planIncludesFeature } from '../auth/plans';
+import { postAuditEvent } from './cloud-client';
+import { resolveRepoIdentity } from './repo-identity';
+export async function recordAuditEventIfTeam(session, projectRoot, partial) {
+    if (!session?.orgId)
+        return;
+    if (!planIncludesFeature(session.plan, 'team_cloud'))
+        return;
+    const identity = resolveRepoIdentity(projectRoot);
+    await postAuditEvent(session, {
+        ...partial,
+        repoId: identity.repoId,
+        gitRef: identity.gitRef,
+    });
+}
+//# sourceMappingURL=audit.js.map

package/dist/team/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/team/audit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAA6B,EAC7B,WAAmB,EACnB,OAAqD;IAErD,IAAI,CAAC,OAAO,EAAE,KAAK;QAAE,OAAO;IAC5B,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC;QAAE,OAAO;IAE7D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,cAAc,CAAC,OAAO,EAAE;QAC5B,GAAG,OAAO;QACV,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;KACxB,CAAC,CAAC;AACL,CAAC"}

package/dist/team/cloud-client.d.ts

@@ -0,0 +1,7 @@
+import type { ActiveSession } from '../auth/auth-session';
+import type { AuditEventPayload, GraphBundle, OrgPolicyDocument } from './types';
+export declare function pushGraph(session: ActiveSession, bundle: GraphBundle): Promise<void>;
+export declare function pullGraph(session: ActiveSession, repoId: string, gitRef: string): Promise<GraphBundle | null>;
+export declare function fetchOrgPolicy(session: ActiveSession): Promise<OrgPolicyDocument>;
+export declare function postAuditEvent(session: ActiveSession, payload: AuditEventPayload): Promise<void>;
+//# sourceMappingURL=cloud-client.d.ts.map

package/dist/team/cloud-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-client.d.ts","sourceRoot":"","sources":["../../src/team/cloud-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAoCjF,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAyB1F;AAED,wBAAsB,SAAS,CAC7B,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CA8B7B;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAwBvF;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CAuBf"}

package/dist/team/cloud-client.js

@@ -0,0 +1,106 @@
+import { envString } from '../config/env';
+import { devAppendEvent, devGetGraph, devGetPolicy, devPutGraph, isDevCloudEnabled, } from './dev-store';
+function apiBase() {
+    return envString('CXGRD_AUTH_BASE_URL', 'https://cxgrd.com').replace(/\/$/, '');
+}
+function authHeaders(token) {
+    return {
+        Accept: 'application/json',
+        'Content-Type': 'application/json',
+        Authorization: `Bearer ${token}`,
+    };
+}
+async function apiFetch(path, token, init) {
+    return fetch(`${apiBase()}${path}`, {
+        ...init,
+        headers: { ...authHeaders(token), ...init?.headers },
+    });
+}
+function useDevStore(session) {
+    return isDevCloudEnabled() || session.source === 'dev_override';
+}
+export async function pushGraph(session, bundle) {
+    const orgId = session.orgId;
+    if (!orgId) {
+        throw new Error('No organization on this account. Team features require an org.');
+    }
+    if (useDevStore(session)) {
+        await devPutGraph(orgId, bundle);
+        return;
+    }
+    const res = await apiFetch(`/api/orgs/${orgId}/graphs`, session.token, {
+        method: 'PUT',
+        body: JSON.stringify(bundle),
+    });
+    if (res.status === 404 || res.status === 501) {
+        await devPutGraph(orgId, bundle);
+        return;
+    }
+    if (!res.ok) {
+        const body = await res.text().catch(() => '');
+        throw new Error(`Graph push failed (${res.status}): ${body || res.statusText}`);
+    }
+}
+export async function pullGraph(session, repoId, gitRef) {
+    const orgId = session.orgId;
+    if (!orgId) {
+        throw new Error('No organization on this account.');
+    }
+    if (useDevStore(session)) {
+        return devGetGraph(orgId, repoId, gitRef);
+    }
+    const res = await apiFetch(`/api/orgs/${orgId}/graphs?repoId=${encodeURIComponent(repoId)}&ref=${encodeURIComponent(gitRef)}`, session.token, { method: 'GET' });
+    if (res.status === 404) {
+        return devGetGraph(orgId, repoId, gitRef);
+    }
+    if (res.status === 501) {
+        return devGetGraph(orgId, repoId, gitRef);
+    }
+    if (!res.ok) {
+        const body = await res.text().catch(() => '');
+        throw new Error(`Graph pull failed (${res.status}): ${body || res.statusText}`);
+    }
+    return (await res.json());
+}
+export async function fetchOrgPolicy(session) {
+    const orgId = session.orgId;
+    if (!orgId) {
+        throw new Error('No organization on this account.');
+    }
+    if (useDevStore(session)) {
+        const policy = await devGetPolicy(orgId);
+        return policy;
+    }
+    const res = await apiFetch(`/api/orgs/${orgId}/policies`, session.token, { method: 'GET' });
+    if (res.status === 404 || res.status === 501) {
+        const policy = await devGetPolicy(orgId);
+        return policy;
+    }
+    if (!res.ok) {
+        const body = await res.text().catch(() => '');
+        throw new Error(`Policy fetch failed (${res.status}): ${body || res.statusText}`);
+    }
+    return (await res.json());
+}
+export async function postAuditEvent(session, payload) {
+    const orgId = session.orgId;
+    if (!orgId)
+        return;
+    if (useDevStore(session)) {
+        await devAppendEvent(orgId, payload);
+        return;
+    }
+    const res = await apiFetch(`/api/orgs/${orgId}/events`, session.token, {
+        method: 'POST',
+        body: JSON.stringify(payload),
+    });
+    if (res.status === 404 || res.status === 501) {
+        await devAppendEvent(orgId, payload);
+        return;
+    }
+    if (!res.ok) {
+        // Non-fatal for CLI UX
+        return;
+    }
+}
+//# sourceMappingURL=cloud-client.js.map

package/dist/team/cloud-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-client.js","sourceRoot":"","sources":["../../src/team/cloud-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG1C,OAAO,EACL,cAAc,EACd,WAAW,EACX,YAAY,EACZ,WAAW,EACX,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,SAAS,OAAO;IACd,OAAO,SAAS,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO;QACL,MAAM,EAAE,kBAAkB;QAC1B,cAAc,EAAE,kBAAkB;QAClC,aAAa,EAAE,UAAU,KAAK,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,IAAY,EACZ,KAAa,EACb,IAAkB;IAElB,OAAO,KAAK,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE;QAClC,GAAG,IAAI;QACP,OAAO,EAAE,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE;KACrD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,OAAsB;IACzC,OAAO,iBAAiB,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB,EAAE,MAAmB;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,KAAK,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE;QACrE,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7C,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,MAAM,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAsB,EACtB,MAAc,EACd,MAAc;IAEd,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,aAAa,KAAK,kBAAkB,kBAAkB,CAAC,MAAM,CAAC,QAAQ,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAClG,OAAO,CAAC,KAAK,EACb,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,MAAM,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAsB;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,MAAO,CAAC;IACjB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,KAAK,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAE5F,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,MAAO,CAAC;IACjB,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,MAAM,MAAM,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAsB,EACtB,OAA0B;IAE1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,KAAK,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE;QACrE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7C,MAAM,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,uBAAuB;QACvB,OAAO;IACT,CAAC;AACH,CAAC"}

package/dist/team/dev-store.d.ts

@@ -0,0 +1,9 @@
+import type { AuditEventPayload, GraphBundle, OrgPolicyDocument } from './types';
+export declare function isDevCloudEnabled(): boolean;
+export declare function devPutGraph(orgId: string, bundle: GraphBundle): Promise<void>;
+export declare function devGetGraph(orgId: string, repoId: string, gitRef: string): Promise<GraphBundle | null>;
+export declare function devGetPolicy(orgId: string): Promise<OrgPolicyDocument | null>;
+export declare function devPutPolicy(orgId: string, policy: OrgPolicyDocument): Promise<void>;
+export declare function devAppendEvent(orgId: string, payload: AuditEventPayload): Promise<void>;
+export declare function getDevCloudRoot(): string;
+//# sourceMappingURL=dev-store.d.ts.map

package/dist/team/dev-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-store.d.ts","sourceRoot":"","sources":["../../src/team/dev-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAIjF,wBAAgB,iBAAiB,IAAI,OAAO,CAG3C;AAeD,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAInF;AAED,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAK7B;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAOnF;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAI1F;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7F;AAmBD,wBAAgB,eAAe,IAAI,MAAM,CAExC"}

package/dist/team/dev-store.js

@@ -0,0 +1,69 @@
+import { mkdir, readFile, writeFile, appendFile } from 'fs/promises';
+import { existsSync } from 'fs';
+import { homedir } from 'os';
+import { join } from 'path';
+const DEV_ROOT = join(homedir(), '.cg', 'dev-cloud');
+export function isDevCloudEnabled() {
+    const v = process.env.CXGRD_DEV_CLOUD?.trim().toLowerCase();
+    return v === '1' || v === 'true' || v === 'yes';
+}
+function graphPath(orgId, repoId, gitRef) {
+    const safeRef = gitRef.replace(/[^a-zA-Z0-9._-]/g, '_');
+    return join(DEV_ROOT, 'orgs', orgId, 'graphs', repoId, `${safeRef}.json`);
+}
+function policyPath(orgId) {
+    return join(DEV_ROOT, 'orgs', orgId, 'policy.json');
+}
+function eventsPath(orgId) {
+    return join(DEV_ROOT, 'orgs', orgId, 'events.jsonl');
+}
+export async function devPutGraph(orgId, bundle) {
+    const path = graphPath(orgId, bundle.repoId, bundle.gitRef);
+    await mkdir(join(path, '..'), { recursive: true });
+    await writeFile(path, JSON.stringify(bundle, null, 2), 'utf-8');
+}
+export async function devGetGraph(orgId, repoId, gitRef) {
+    const path = graphPath(orgId, repoId, gitRef);
+    if (!existsSync(path))
+        return null;
+    const raw = await readFile(path, 'utf-8');
+    return JSON.parse(raw);
+}
+export async function devGetPolicy(orgId) {
+    const path = policyPath(orgId);
+    if (!existsSync(path)) {
+        return defaultDevPolicy(orgId);
+    }
+    const raw = await readFile(path, 'utf-8');
+    return JSON.parse(raw);
+}
+export async function devPutPolicy(orgId, policy) {
+    const path = policyPath(orgId);
+    await mkdir(join(path, '..'), { recursive: true });
+    await writeFile(path, JSON.stringify(policy, null, 2), 'utf-8');
+}
+export async function devAppendEvent(orgId, payload) {
+    const path = eventsPath(orgId);
+    await mkdir(join(path, '..'), { recursive: true });
+    await appendFile(path, `${JSON.stringify({ ...payload, recordedAt: Date.now() })}\n`, 'utf-8');
+}
+function defaultDevPolicy(orgId) {
+    return {
+        version: 1,
+        orgId,
+        defaultMaxBlastRadius: 100,
+        roles: {
+            member: { maxBlastRadius: 85, blockOnRiskLevels: ['critical'] },
+            lead: { maxBlastRadius: 70, blockOnRiskLevels: ['critical', 'high'] },
+            admin: { maxBlastRadius: 100, blockOnRiskLevels: [] },
+        },
+        merge: {
+            blockIfBlastRadiusAbove: 80,
+            requireCheckPass: false,
+        },
+    };
+}
+export function getDevCloudRoot() {
+    return DEV_ROOT;
+}
+//# sourceMappingURL=dev-store.js.map

package/dist/team/dev-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-store.js","sourceRoot":"","sources":["../../src/team/dev-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;AAErD,MAAM,UAAU,iBAAiB;IAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,CAAC;AAClD,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,MAAc,EAAE,MAAc;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAa,EAAE,MAAmB;IAClE,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAa,EACb,MAAc,EACd,MAAc;IAEd,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa;IAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa,EAAE,MAAyB;IACzE,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,OAA0B;IAC5E,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,KAAK;QACL,qBAAqB,EAAE,GAAG;QAC1B,KAAK,EAAE;YACL,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,UAAU,CAAC,EAAE;YAC/D,IAAI,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE;YACrE,KAAK,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAAE,EAAE;SACtD;QACD,KAAK,EAAE;YACL,uBAAuB,EAAE,EAAE;YAC3B,gBAAgB,EAAE,KAAK;SACxB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,QAAQ,CAAC;AAClB,CAAC"}