hackmyagent 0.7.2 → 0.8.0

package/dist/semantic/llm/budget.js

@@ -0,0 +1,139 @@
+"use strict";
+/**
+ * LLM Budget Tracking (Layer 3)
+ *
+ * Tracks daily LLM API spend and enforces budget cap.
+ * Default: $1/day (configurable via HACKMYAGENT_LLM_BUDGET env var).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BudgetTracker = void 0;
+const fs = __importStar(require("fs/promises"));
+const path = __importStar(require("path"));
+/** Anthropic API pricing (per 1M tokens) */
+const PRICING = {
+    haiku: { input: 0.25, output: 1.25 },
+    sonnet: { input: 3.0, output: 15.0 },
+};
+class BudgetTracker {
+    constructor(budgetCapUsd, cacheDir = '.hackmyagent-cache') {
+        this.budgetCap = budgetCapUsd ??
+            parseFloat(process.env.HACKMYAGENT_LLM_BUDGET || '1.0');
+        this.cacheDir = cacheDir;
+    }
+    /**
+     * Calculate cost for a request.
+     */
+    calculateCost(model, inputTokens, outputTokens) {
+        const pricing = PRICING[model];
+        return ((inputTokens / 1000000) * pricing.input +
+            (outputTokens / 1000000) * pricing.output);
+    }
+    /**
+     * Estimate cost before making a request.
+     */
+    estimateCost(model, estimatedInputTokens, estimatedOutputTokens = 1000) {
+        return this.calculateCost(model, estimatedInputTokens, estimatedOutputTokens);
+    }
+    /**
+     * Check if we're within budget for today.
+     */
+    async isWithinBudget() {
+        const state = await this.loadState();
+        return state.totalCostUsd < this.budgetCap;
+    }
+    /**
+     * Get remaining budget for today.
+     */
+    async remainingBudget() {
+        const state = await this.loadState();
+        return Math.max(0, this.budgetCap - state.totalCostUsd);
+    }
+    /**
+     * Record a completed request's cost.
+     */
+    async recordCost(model, inputTokens, outputTokens) {
+        const cost = this.calculateCost(model, inputTokens, outputTokens);
+        const state = await this.loadState();
+        state.totalCostUsd += cost;
+        state.requests += 1;
+        await this.saveState(state);
+        return cost;
+    }
+    /**
+     * Get today's spend summary.
+     */
+    async getSummary() {
+        const state = await this.loadState();
+        return {
+            spent: state.totalCostUsd,
+            cap: this.budgetCap,
+            remaining: Math.max(0, this.budgetCap - state.totalCostUsd),
+            requests: state.requests,
+        };
+    }
+    todayKey() {
+        return new Date().toISOString().split('T')[0];
+    }
+    budgetFilePath() {
+        return path.join(this.cacheDir, 'budget.json');
+    }
+    async loadState() {
+        const today = this.todayKey();
+        try {
+            const data = await fs.readFile(this.budgetFilePath(), 'utf-8');
+            const state = JSON.parse(data);
+            // Reset if it's a new day
+            if (state.date !== today) {
+                return { date: today, totalCostUsd: 0, requests: 0 };
+            }
+            return state;
+        }
+        catch {
+            return { date: today, totalCostUsd: 0, requests: 0 };
+        }
+    }
+    async saveState(state) {
+        try {
+            await fs.mkdir(this.cacheDir, { recursive: true });
+            await fs.writeFile(this.budgetFilePath(), JSON.stringify(state, null, 2));
+        }
+        catch {
+            // Budget write failures are non-fatal
+        }
+    }
+}
+exports.BudgetTracker = BudgetTracker;
+//# sourceMappingURL=budget.js.map

package/dist/semantic/llm/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../../../src/semantic/llm/budget.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,gDAAkC;AAClC,2CAA6B;AAE7B,4CAA4C;AAC5C,MAAM,OAAO,GAAG;IACd,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IACpC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;CACrC,CAAC;AAQF,MAAa,aAAa;IAIxB,YAAY,YAAqB,EAAE,WAAmB,oBAAoB;QACxE,IAAI,CAAC,SAAS,GAAG,YAAY;YAC3B,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,aAAa,CACX,KAAyB,EACzB,WAAmB,EACnB,YAAoB;QAEpB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,CACL,CAAC,WAAW,GAAG,OAAS,CAAC,GAAG,OAAO,CAAC,KAAK;YACzC,CAAC,YAAY,GAAG,OAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAC5C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CACV,KAAyB,EACzB,oBAA4B,EAC5B,wBAAgC,IAAI;QAEpC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;IAChF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,KAAyB,EACzB,WAAmB,EACnB,YAAoB;QAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC;QAC3B,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,YAAY;YACzB,GAAG,EAAE,IAAI,CAAC,SAAS;YACnB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC;YAC3D,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;IACJ,CAAC;IAEO,QAAQ;QACd,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAEO,cAAc;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;YAC9C,0BAA0B;YAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBACzB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACvD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,KAAkB;QACxC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;CACF;AAhHD,sCAgHC"}

package/dist/semantic/llm/cache.d.ts

@@ -0,0 +1,36 @@
+/**
+ * LLM Response Cache (Layer 3)
+ *
+ * SHA-256 content-hash based cache. Same file content = same analysis result.
+ * Stored in .hackmyagent-cache/ (or configurable directory).
+ */
+export interface CacheEntry {
+    hash: string;
+    response: string;
+    model: string;
+    timestamp: string;
+    inputTokens: number;
+    outputTokens: number;
+}
+export declare class LLMCache {
+    private cacheDir;
+    constructor(cacheDir?: string);
+    /**
+     * Generate SHA-256 hash of content + prompt (so different analysis types
+     * don't share cache entries).
+     */
+    hash(content: string, systemPrompt: string): string;
+    /**
+     * Get cached response for content hash. Returns null if not cached.
+     */
+    get(contentHash: string): Promise<CacheEntry | null>;
+    /**
+     * Store response in cache.
+     */
+    set(contentHash: string, entry: CacheEntry): Promise<void>;
+    /**
+     * Check if a hash has a cached result.
+     */
+    has(contentHash: string): Promise<boolean>;
+}
+//# sourceMappingURL=cache.d.ts.map

package/dist/semantic/llm/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/semantic/llm/cache.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAS;gBAEb,QAAQ,GAAE,MAA6B;IAInD;;;OAGG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM;IASnD;;OAEG;IACG,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAU1D;;OAEG;IACG,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUhE;;OAEG;IACG,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CASjD"}

package/dist/semantic/llm/cache.js

@@ -0,0 +1,103 @@
+"use strict";
+/**
+ * LLM Response Cache (Layer 3)
+ *
+ * SHA-256 content-hash based cache. Same file content = same analysis result.
+ * Stored in .hackmyagent-cache/ (or configurable directory).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LLMCache = void 0;
+const fs = __importStar(require("fs/promises"));
+const path = __importStar(require("path"));
+const crypto = __importStar(require("crypto"));
+class LLMCache {
+    constructor(cacheDir = '.hackmyagent-cache') {
+        this.cacheDir = cacheDir;
+    }
+    /**
+     * Generate SHA-256 hash of content + prompt (so different analysis types
+     * don't share cache entries).
+     */
+    hash(content, systemPrompt) {
+        return crypto
+            .createHash('sha256')
+            .update(content)
+            .update('\0')
+            .update(systemPrompt)
+            .digest('hex');
+    }
+    /**
+     * Get cached response for content hash. Returns null if not cached.
+     */
+    async get(contentHash) {
+        const cachePath = path.join(this.cacheDir, `${contentHash}.json`);
+        try {
+            const data = await fs.readFile(cachePath, 'utf-8');
+            return JSON.parse(data);
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Store response in cache.
+     */
+    async set(contentHash, entry) {
+        try {
+            await fs.mkdir(this.cacheDir, { recursive: true });
+            const cachePath = path.join(this.cacheDir, `${contentHash}.json`);
+            await fs.writeFile(cachePath, JSON.stringify(entry, null, 2));
+        }
+        catch {
+            // Cache write failures are non-fatal
+        }
+    }
+    /**
+     * Check if a hash has a cached result.
+     */
+    async has(contentHash) {
+        const cachePath = path.join(this.cacheDir, `${contentHash}.json`);
+        try {
+            await fs.access(cachePath);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+exports.LLMCache = LLMCache;
+//# sourceMappingURL=cache.js.map

package/dist/semantic/llm/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../../src/semantic/llm/cache.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,gDAAkC;AAClC,2CAA6B;AAC7B,+CAAiC;AAWjC,MAAa,QAAQ;IAGnB,YAAY,WAAmB,oBAAoB;QACjD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,OAAe,EAAE,YAAoB;QACxC,OAAO,MAAM;aACV,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,IAAI,CAAC;aACZ,MAAM,CAAC,YAAY,CAAC;aACpB,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,KAAiB;QAC9C,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC;YAClE,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AA1DD,4BA0DC"}

package/dist/semantic/llm/client.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Raw Anthropic API Client (Layer 3)
+ *
+ * Zero-dependency fetch() client for Claude API.
+ * Used only in CLI standalone mode (--deep with ANTHROPIC_API_KEY).
+ */
+export interface AnthropicMessage {
+    role: 'user' | 'assistant';
+    content: string;
+}
+export interface AnthropicRequest {
+    model: string;
+    max_tokens: number;
+    system?: string;
+    messages: AnthropicMessage[];
+}
+export interface AnthropicResponse {
+    id: string;
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+    model: string;
+    usage: {
+        input_tokens: number;
+        output_tokens: number;
+    };
+}
+export interface AnthropicError {
+    type: string;
+    error: {
+        type: string;
+        message: string;
+    };
+}
+export declare class AnthropicClient {
+    private apiKey;
+    private baseUrl;
+    constructor(apiKey: string, baseUrl?: string);
+    /**
+     * Send a message to Claude and get a text response.
+     */
+    chat(model: 'haiku' | 'sonnet', systemPrompt: string, userMessage: string, maxTokens?: number): Promise<{
+        text: string;
+        inputTokens: number;
+        outputTokens: number;
+    }>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/semantic/llm/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/semantic/llm/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAQD,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;gBAEZ,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,MAAoC;IAKzE;;OAEG;IACG,IAAI,CACR,KAAK,EAAE,OAAO,GAAG,QAAQ,EACzB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,SAAS,GAAE,MAAa,GACvB,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;CA4CxE"}

package/dist/semantic/llm/client.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * Raw Anthropic API Client (Layer 3)
+ *
+ * Zero-dependency fetch() client for Claude API.
+ * Used only in CLI standalone mode (--deep with ANTHROPIC_API_KEY).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AnthropicClient = void 0;
+/** Model ID mapping */
+const MODEL_IDS = {
+    haiku: 'claude-haiku-4-5-20251001',
+    sonnet: 'claude-sonnet-4-5-20250929',
+};
+class AnthropicClient {
+    constructor(apiKey, baseUrl = 'https://api.anthropic.com') {
+        this.apiKey = apiKey;
+        this.baseUrl = baseUrl;
+    }
+    /**
+     * Send a message to Claude and get a text response.
+     */
+    async chat(model, systemPrompt, userMessage, maxTokens = 4096) {
+        const request = {
+            model: MODEL_IDS[model],
+            max_tokens: maxTokens,
+            system: systemPrompt,
+            messages: [{ role: 'user', content: userMessage }],
+        };
+        const response = await fetch(`${this.baseUrl}/v1/messages`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'x-api-key': this.apiKey,
+                'anthropic-version': '2023-06-01',
+            },
+            body: JSON.stringify(request),
+        });
+        if (!response.ok) {
+            const errorBody = await response.text();
+            let errorMessage;
+            try {
+                const parsed = JSON.parse(errorBody);
+                errorMessage = parsed.error?.message || errorBody;
+            }
+            catch {
+                errorMessage = errorBody;
+            }
+            throw new Error(`Anthropic API error (${response.status}): ${errorMessage}`);
+        }
+        const body = (await response.json());
+        const text = body.content
+            .filter((c) => c.type === 'text')
+            .map((c) => c.text)
+            .join('');
+        return {
+            text,
+            inputTokens: body.usage.input_tokens,
+            outputTokens: body.usage.output_tokens,
+        };
+    }
+}
+exports.AnthropicClient = AnthropicClient;
+//# sourceMappingURL=client.js.map

package/dist/semantic/llm/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/semantic/llm/client.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAgCH,uBAAuB;AACvB,MAAM,SAAS,GAAG;IAChB,KAAK,EAAE,2BAA2B;IAClC,MAAM,EAAE,4BAA4B;CAC5B,CAAC;AAEX,MAAa,eAAe;IAI1B,YAAY,MAAc,EAAE,UAAkB,2BAA2B;QACvE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CACR,KAAyB,EACzB,YAAoB,EACpB,WAAmB,EACnB,YAAoB,IAAI;QAExB,MAAM,OAAO,GAAqB;YAChC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;YACvB,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE,YAAY;YACpB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;SACnD,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,cAAc,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,IAAI,CAAC,MAAM;gBACxB,mBAAmB,EAAE,YAAY;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,YAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAmB,CAAC;gBACvD,YAAY,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,SAAS,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,GAAG,SAAS,CAAC;YAC3B,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,CAAC,MAAM,MAAM,YAAY,EAAE,CAC5D,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO;aACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;aAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,CAAC,EAAE,CAAC,CAAC;QAEZ,OAAO;YACL,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;YACpC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;SACvC,CAAC;IACJ,CAAC;CACF;AA7DD,0CA6DC"}

package/dist/semantic/llm/index.d.ts

@@ -0,0 +1,33 @@
+/**
+ * LLM Analyzer (Layer 3 Orchestrator)
+ *
+ * Coordinates LLM-powered analysis for standalone CLI mode (--deep).
+ * Uses the Anthropic API directly with caching and budget control.
+ *
+ * NOT used in MCP server mode — there, the host LLM does the reasoning.
+ */
+import type { SemanticFinding, AnalysisFile, LLMAnalysisOptions } from '../types';
+export declare class LLMAnalyzer {
+    private client;
+    private cache;
+    private budget;
+    private onProgress?;
+    constructor(options: LLMAnalysisOptions);
+    /**
+     * Analyze files using LLM. Respects cache and budget.
+     */
+    analyze(files: AnalysisFile[]): Promise<{
+        findings: SemanticFinding[];
+        cost: number;
+        cachedResults: number;
+    }>;
+    /**
+     * Parse JSON findings from LLM response.
+     */
+    private parseFindings;
+    private normalizeSeverity;
+}
+export { AnthropicClient } from './client';
+export { LLMCache } from './cache';
+export { BudgetTracker } from './budget';
+//# sourceMappingURL=index.d.ts.map

package/dist/semantic/llm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/semantic/llm/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAelF,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,UAAU,CAAC,CAA4B;gBAEnC,OAAO,EAAE,kBAAkB;IAOvC;;OAEG;IACG,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;QAC5C,QAAQ,EAAE,eAAe,EAAE,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IAqFF;;OAEG;IACH,OAAO,CAAC,aAAa;IAgCrB,OAAO,CAAC,iBAAiB;CAS1B;AAED,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC"}

package/dist/semantic/llm/index.js

@@ -0,0 +1,129 @@
+"use strict";
+/**
+ * LLM Analyzer (Layer 3 Orchestrator)
+ *
+ * Coordinates LLM-powered analysis for standalone CLI mode (--deep).
+ * Uses the Anthropic API directly with caching and budget control.
+ *
+ * NOT used in MCP server mode — there, the host LLM does the reasoning.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BudgetTracker = exports.LLMCache = exports.AnthropicClient = exports.LLMAnalyzer = void 0;
+const client_1 = require("./client");
+const cache_1 = require("./cache");
+const budget_1 = require("./budget");
+const prompts_1 = require("./prompts");
+class LLMAnalyzer {
+    constructor(options) {
+        this.client = new client_1.AnthropicClient(options.apiKey);
+        this.cache = new cache_1.LLMCache(options.cacheDir);
+        this.budget = new budget_1.BudgetTracker(options.budgetCap, options.cacheDir);
+        this.onProgress = options.onProgress;
+    }
+    /**
+     * Analyze files using LLM. Respects cache and budget.
+     */
+    async analyze(files) {
+        const allFindings = [];
+        let totalCost = 0;
+        let cachedResults = 0;
+        for (let i = 0; i < files.length; i++) {
+            const file = files[i];
+            const { systemPrompt, model } = (0, prompts_1.getPromptForFileType)(file.type);
+            // Check cache
+            const contentHash = this.cache.hash(file.content, systemPrompt);
+            const cached = await this.cache.get(contentHash);
+            if (cached) {
+                this.onProgress?.(`[${i + 1}/${files.length}] ${file.path} .............. (cached)`);
+                const findings = this.parseFindings(cached.response, file);
+                allFindings.push(...findings);
+                cachedResults++;
+                continue;
+            }
+            // Check budget
+            const withinBudget = await this.budget.isWithinBudget();
+            if (!withinBudget) {
+                this.onProgress?.(`[${i + 1}/${files.length}] ${file.path} .............. skipped (budget exceeded)`);
+                continue;
+            }
+            // Call LLM
+            this.onProgress?.(`[${i + 1}/${files.length}] ${file.path} ..............`);
+            try {
+                const userMessage = (0, prompts_1.buildFileAnalysisMessage)(file.path, file.content, file.type);
+                const result = await this.client.chat(model, systemPrompt, userMessage);
+                // Cache the response
+                await this.cache.set(contentHash, {
+                    hash: contentHash,
+                    response: result.text,
+                    model,
+                    timestamp: new Date().toISOString(),
+                    inputTokens: result.inputTokens,
+                    outputTokens: result.outputTokens,
+                });
+                // Record cost
+                const cost = await this.budget.recordCost(model, result.inputTokens, result.outputTokens);
+                totalCost += cost;
+                // Parse findings
+                const findings = this.parseFindings(result.text, file);
+                allFindings.push(...findings);
+                this.onProgress?.(` ${findings.length} finding${findings.length === 1 ? '' : 's'}`);
+            }
+            catch (error) {
+                const msg = error instanceof Error ? error.message : String(error);
+                this.onProgress?.(` error: ${msg}`);
+                // Graceful degradation — continue with remaining files
+            }
+        }
+        return { findings: allFindings, cost: totalCost, cachedResults };
+    }
+    /**
+     * Parse JSON findings from LLM response.
+     */
+    parseFindings(response, file) {
+        try {
+            // Extract JSON array from response (may have markdown code blocks)
+            const jsonMatch = response.match(/\[[\s\S]*\]/);
+            if (!jsonMatch)
+                return [];
+            const raw = JSON.parse(jsonMatch[0]);
+            if (!Array.isArray(raw))
+                return [];
+            return raw
+                .filter((f) => f.description && f.severity)
+                .map((f, idx) => ({
+                id: `SEM-LLM-${String(idx + 1).padStart(3, '0')}`,
+                title: f.type || 'LLM finding',
+                description: f.description || '',
+                rationale: f.rationale || '',
+                category: 'credential',
+                severity: this.normalizeSeverity(f.severity || 'medium'),
+                file: file.path,
+                line: f.line ?? undefined,
+                recommendation: f.recommendation || 'Review and remediate.',
+                layer: 3,
+                autoFixable: false,
+            }));
+        }
+        catch {
+            return [];
+        }
+    }
+    normalizeSeverity(s) {
+        const lower = s.toLowerCase();
+        if (lower === 'critical')
+            return 'critical';
+        if (lower === 'high')
+            return 'high';
+        if (lower === 'medium')
+            return 'medium';
+        return 'low';
+    }
+}
+exports.LLMAnalyzer = LLMAnalyzer;
+var client_2 = require("./client");
+Object.defineProperty(exports, "AnthropicClient", { enumerable: true, get: function () { return client_2.AnthropicClient; } });
+var cache_2 = require("./cache");
+Object.defineProperty(exports, "LLMCache", { enumerable: true, get: function () { return cache_2.LLMCache; } });
+var budget_2 = require("./budget");
+Object.defineProperty(exports, "BudgetTracker", { enumerable: true, get: function () { return budget_2.BudgetTracker; } });
+//# sourceMappingURL=index.js.map

package/dist/semantic/llm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/semantic/llm/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAGH,qCAA2C;AAC3C,mCAAmC;AACnC,qCAAyC;AACzC,uCAA2E;AAW3E,MAAa,WAAW;IAMtB,YAAY,OAA2B;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,gBAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,sBAAa,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,KAAqB;QAKjC,MAAM,WAAW,GAAsB,EAAE,CAAC;QAC1C,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,IAAA,8BAAoB,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEhE,cAAc;YACd,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAEjD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,UAAU,EAAE,CACf,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,0BAA0B,CAClE,CAAC;gBACF,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC3D,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;gBAC9B,aAAa,EAAE,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,eAAe;YACf,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC,UAAU,EAAE,CACf,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,2CAA2C,CACnF,CAAC;gBACF,SAAS;YACX,CAAC;YAED,WAAW;YACX,IAAI,CAAC,UAAU,EAAE,CACf,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,iBAAiB,CACzD,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAA,kCAAwB,EAC1C,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,IAAI,CACV,CAAC;gBAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACnC,KAAK,EACL,YAAY,EACZ,WAAW,CACZ,CAAC;gBAEF,qBAAqB;gBACrB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;oBAChC,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,KAAK;oBACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC,CAAC;gBAEH,cAAc;gBACd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CACvC,KAAK,EACL,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,YAAY,CACpB,CAAC;gBACF,SAAS,IAAI,IAAI,CAAC;gBAElB,iBAAiB;gBACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACvD,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;gBAE9B,IAAI,CAAC,UAAU,EAAE,CACf,IAAI,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CACjE,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnE,IAAI,CAAC,UAAU,EAAE,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;gBACpC,uDAAuD;YACzD,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;IACnE,CAAC;IAED;;OAEG;IACK,aAAa,CACnB,QAAgB,EAChB,IAAkB;QAElB,IAAI,CAAC;YACH,mEAAmE;YACnE,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAChD,IAAI,CAAC,SAAS;gBAAE,OAAO,EAAE,CAAC;YAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAoB,CAAC;YACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;YAEnC,OAAO,GAAG;iBACP,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC;iBAC1C,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBAChB,EAAE,EAAE,WAAW,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACjD,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,aAAa;gBAC9B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;gBAChC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE;gBAC5B,QAAQ,EAAE,YAAqB;gBAC/B,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC;gBACxD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS;gBACzB,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,uBAAuB;gBAC3D,KAAK,EAAE,CAAU;gBACjB,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC,CAAC;QACR,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,iBAAiB,CACvB,CAAS;QAET,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,IAAI,KAAK,KAAK,UAAU;YAAE,OAAO,UAAU,CAAC;QAC5C,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC;QACpC,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AArJD,kCAqJC;AAED,mCAA2C;AAAlC,yGAAA,eAAe,OAAA;AACxB,iCAAmC;AAA1B,iGAAA,QAAQ,OAAA;AACjB,mCAAyC;AAAhC,uGAAA,aAAa,OAAA"}

package/dist/semantic/llm/prompts.d.ts

@@ -0,0 +1,30 @@
+/**
+ * LLM Prompt Templates (Layer 3)
+ *
+ * Structured prompts for each analysis type.
+ * Each prompt requests JSON output with line numbers, severity, and rationale.
+ */
+/**
+ * System prompt for credential detection (uses Haiku — fast classification)
+ */
+export declare const CREDENTIAL_DETECTION_PROMPT = "You are a security analyst specializing in credential detection. Analyze the following file for ANY form of credentials, secrets, tokens, or passwords.\n\nLook for ALL credential types including:\n- API keys in any format (not just known prefixes)\n- Database connection strings with passwords\n- JWT tokens\n- OAuth tokens and refresh tokens\n- Private keys (RSA, Ed25519, etc.)\n- Basic auth credentials\n- Session tokens\n- Webhook secrets\n- Encryption keys\n\nFor each credential found, respond with a JSON array:\n[\n  {\n    \"line\": <line number>,\n    \"type\": \"<credential type>\",\n    \"severity\": \"critical\" | \"high\",\n    \"description\": \"<what was found>\",\n    \"rationale\": \"<why this is a security risk in this specific file context>\"\n  }\n]\n\nIf no credentials are found, respond with an empty array: []\n\nIMPORTANT: Be thorough but avoid false positives. Example strings, documentation references, and redacted values (xxx, ***, REDACTED) are NOT findings.";
+/**
+ * System prompt for MCP threat analysis (uses Sonnet — complex reasoning)
+ */
+export declare const MCP_THREAT_ANALYSIS_PROMPT = "You are a security analyst specializing in AI agent security. Analyze the following MCP (Model Context Protocol) configuration for security threats.\n\nEvaluate:\n1. **Capability scope**: What can each server do? Is it overprivileged?\n2. **Attack chains**: Can the combination of servers enable read\u2192execute\u2192exfiltrate attacks?\n3. **Secrets exposure**: Are credentials passed via args (visible to LLM) instead of env vars?\n4. **Trust boundaries**: Are servers from untrusted sources given privileged access?\n5. **Sandbox integrity**: Are there flags that bypass security sandboxes?\n\nFor each finding, respond with a JSON array:\n[\n  {\n    \"line\": <line number or null>,\n    \"type\": \"<finding type>\",\n    \"severity\": \"critical\" | \"high\" | \"medium\" | \"low\",\n    \"description\": \"<what was found>\",\n    \"rationale\": \"<why this is a security risk>\",\n    \"recommendation\": \"<specific fix>\"\n  }\n]\n\nIf no issues found, respond with an empty array: []";
+/**
+ * System prompt for instruction analysis (uses Sonnet — nuanced reasoning)
+ */
+export declare const INSTRUCTION_ANALYSIS_PROMPT = "You are a security analyst specializing in AI agent security. Analyze the following agent instruction file for security risks.\n\nThis file is loaded into the AI agent's context window with every interaction. Evaluate:\n\n1. **Prompt injection vectors**: Could an attacker craft input that exploits these instructions?\n2. **Permissive behaviors**: Does the file tell the agent to bypass security controls?\n3. **Data exfiltration risks**: Could the instructions be used to leak sensitive data?\n4. **Credential exposure**: Are any secrets, tokens, or passwords present in the instructions?\n5. **Missing boundaries**: What security constraints are absent that should be present?\n\nFor each finding, respond with a JSON array:\n[\n  {\n    \"line\": <line number or null>,\n    \"type\": \"<finding type>\",\n    \"severity\": \"critical\" | \"high\" | \"medium\" | \"low\",\n    \"description\": \"<what was found>\",\n    \"rationale\": \"<why this is a security risk>\",\n    \"recommendation\": \"<specific fix>\"\n  }\n]\n\nIf no issues found, respond with an empty array: []";
+/**
+ * Build the user message for file analysis
+ */
+export declare function buildFileAnalysisMessage(filePath: string, content: string, fileType: string): string;
+/**
+ * Select the appropriate prompt for a file type
+ */
+export declare function getPromptForFileType(fileType: string): {
+    systemPrompt: string;
+    model: 'haiku' | 'sonnet';
+};
+//# sourceMappingURL=prompts.d.ts.map

package/dist/semantic/llm/prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../../src/semantic/llm/prompts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,eAAO,MAAM,2BAA2B,s+BA0BgH,CAAC;AAEzJ;;GAEG;AACH,eAAO,MAAM,0BAA0B,0+BAqBa,CAAC;AAErD;;GAEG;AACH,eAAO,MAAM,2BAA2B,8jCAsBY,CAAC;AAErD;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,MAAM,CAOR;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,GACf;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAA;CAAE,CAYrD"}