kirograph 0.12.1

package/dist/bin/installer/archive.js

@@ -0,0 +1,230 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var archive_exports = {};
+__export(archive_exports, {
+  downloadFile: () => downloadFile,
+  extractBinaryFromTarGz: () => extractBinaryFromTarGz,
+  extractTarGzFromUrl: () => extractTarGzFromUrl,
+  extractZip: () => extractZip,
+  fetchJson: () => fetchJson
+});
+module.exports = __toCommonJS(archive_exports);
+var path = __toESM(require("path"));
+var fs = __toESM(require("fs"));
+var http = __toESM(require("http"));
+var https = __toESM(require("https"));
+var zlib = __toESM(require("zlib"));
+function fetchJson(url) {
+  return new Promise((resolve, reject) => {
+    const mod = url.startsWith("https") ? https : http;
+    mod.get(url, { headers: { "User-Agent": "kirograph" } }, (res) => {
+      if (res.statusCode === 301 || res.statusCode === 302) {
+        return resolve(fetchJson(res.headers.location));
+      }
+      if (res.statusCode !== 200) {
+        return reject(new Error(`HTTP ${res.statusCode}`));
+      }
+      let body = "";
+      res.on("data", (c) => body += c);
+      res.on("end", () => {
+        try {
+          resolve(JSON.parse(body));
+        } catch (e) {
+          reject(e);
+        }
+      });
+    }).on("error", reject);
+  });
+}
+function downloadFile(url, dest) {
+  return new Promise((resolve, reject) => {
+    function doGet(currentUrl) {
+      const mod = currentUrl.startsWith("https") ? https : http;
+      mod.get(currentUrl, { headers: { "User-Agent": "kirograph" } }, (res) => {
+        if (res.statusCode === 301 || res.statusCode === 302) return doGet(res.headers.location);
+        if (res.statusCode !== 200) return reject(new Error(`Download failed: HTTP ${res.statusCode}`));
+        const out = fs.createWriteStream(dest);
+        res.pipe(out);
+        out.on("finish", () => out.close(() => resolve()));
+        out.on("error", reject);
+      }).on("error", reject);
+    }
+    doGet(url);
+  });
+}
+async function extractZip(zipPath, destDir) {
+  const buf = await fs.promises.readFile(zipPath);
+  const resolvedDest = path.resolve(destDir);
+  let eocdOffset = -1;
+  for (let i = buf.length - 22; i >= 0; i--) {
+    if (buf.readUInt32LE(i) === 101010256) {
+      eocdOffset = i;
+      break;
+    }
+  }
+  if (eocdOffset === -1) throw new Error("Invalid ZIP: EOCD not found");
+  const cdCount = buf.readUInt16LE(eocdOffset + 10);
+  const cdOffset = buf.readUInt32LE(eocdOffset + 16);
+  let cdPos = cdOffset;
+  for (let i = 0; i < cdCount; i++) {
+    if (buf.readUInt32LE(cdPos) !== 33639248) throw new Error("Invalid ZIP: bad CD signature");
+    const compMethod = buf.readUInt16LE(cdPos + 10);
+    const compSize = buf.readUInt32LE(cdPos + 20);
+    const uncompSize = buf.readUInt32LE(cdPos + 24);
+    const fileNameLen = buf.readUInt16LE(cdPos + 28);
+    const extraLen = buf.readUInt16LE(cdPos + 30);
+    const commentLen = buf.readUInt16LE(cdPos + 32);
+    const localOffset = buf.readUInt32LE(cdPos + 42);
+    const fileName = buf.slice(cdPos + 46, cdPos + 46 + fileNameLen).toString("utf8");
+    cdPos += 46 + fileNameLen + extraLen + commentLen;
+    if (fileName.endsWith("/") || uncompSize === 0 && compSize === 0) continue;
+    const destPath = path.resolve(resolvedDest, fileName);
+    if (!destPath.startsWith(resolvedDest + path.sep) && destPath !== resolvedDest) continue;
+    if (buf.readUInt32LE(localOffset) !== 67324752) throw new Error("Invalid ZIP: bad LFH signature");
+    const localFileNameLen = buf.readUInt16LE(localOffset + 26);
+    const localExtraLen = buf.readUInt16LE(localOffset + 28);
+    const dataOffset = localOffset + 30 + localFileNameLen + localExtraLen;
+    const compData = buf.slice(dataOffset, dataOffset + compSize);
+    let fileData;
+    if (compMethod === 0) {
+      fileData = compData;
+    } else if (compMethod === 8) {
+      fileData = await new Promise((resolve, reject) => {
+        zlib.inflateRaw(compData, (err, result) => err ? reject(err) : resolve(result));
+      });
+    } else {
+      continue;
+    }
+    await fs.promises.mkdir(path.dirname(destPath), { recursive: true });
+    await fs.promises.writeFile(destPath, fileData);
+  }
+}
+function extractTarGzFromUrl(url, destDir, opts) {
+  const resolvedDest = path.resolve(destDir);
+  return new Promise((resolve, reject) => {
+    fs.mkdirSync(resolvedDest, { recursive: true });
+    function doGet(currentUrl) {
+      const mod = currentUrl.startsWith("https") ? https : http;
+      mod.get(currentUrl, { headers: { "User-Agent": "kirograph" } }, (res) => {
+        if (res.statusCode === 301 || res.statusCode === 302) {
+          return doGet(res.headers.location);
+        }
+        if (res.statusCode !== 200) {
+          return reject(new Error(`Download failed: HTTP ${res.statusCode}`));
+        }
+        const gunzip = zlib.createGunzip();
+        res.pipe(gunzip);
+        let tarBuffer = Buffer.alloc(0);
+        let offset = 0;
+        let foundFile = null;
+        function extractEntries(final = false) {
+          while (offset + 512 <= tarBuffer.length) {
+            const header = tarBuffer.slice(offset, offset + 512);
+            const nameRaw = header.slice(0, 100).toString("utf8").replace(/\0/g, "");
+            const sizeOctal = header.slice(124, 136).toString("utf8").replace(/\0/g, "").trim();
+            const typeFlag = header[156];
+            const size = parseInt(sizeOctal, 8) || 0;
+            const dataStart = offset + 512;
+            const dataEnd = dataStart + size;
+            if (nameRaw === "") {
+              offset += 512;
+              continue;
+            }
+            const relName = opts?.stripPrefix && nameRaw.startsWith(opts.stripPrefix) ? nameRaw.slice(opts.stripPrefix.length) : nameRaw;
+            if (opts?.findFile && path.basename(nameRaw) === opts.findFile) {
+              if (tarBuffer.length >= dataEnd || final) {
+                foundFile = tarBuffer.slice(dataStart, dataEnd);
+                resolve(foundFile);
+                return;
+              }
+              return;
+            }
+            const destPath = path.resolve(resolvedDest, relName);
+            if (!destPath.startsWith(resolvedDest + path.sep) && destPath !== resolvedDest) {
+              offset = dataStart + Math.ceil(size / 512) * 512;
+              continue;
+            }
+            if (typeFlag === 53 || nameRaw.endsWith("/")) {
+              try {
+                fs.mkdirSync(destPath, { recursive: true });
+              } catch {
+              }
+              offset = dataStart;
+              continue;
+            }
+            if (tarBuffer.length < dataEnd && !final) return;
+            if (relName && !relName.endsWith("/")) {
+              try {
+                fs.mkdirSync(path.dirname(destPath), { recursive: true });
+                fs.writeFileSync(destPath, tarBuffer.slice(dataStart, dataEnd));
+              } catch {
+              }
+            }
+            offset = dataStart + Math.ceil(size / 512) * 512;
+          }
+        }
+        gunzip.on("data", (chunk) => {
+          tarBuffer = Buffer.concat([tarBuffer, chunk]);
+          extractEntries();
+        });
+        gunzip.on("end", () => {
+          extractEntries(true);
+          if (opts?.findFile && !foundFile) {
+            reject(new Error(`${opts.findFile} not found in archive`));
+          } else {
+            resolve(foundFile ?? void 0);
+          }
+        });
+        gunzip.on("error", reject);
+      }).on("error", reject);
+    }
+    doGet(url);
+  });
+}
+async function extractBinaryFromTarGz(url, binaryName, destPath) {
+  const destDir = path.dirname(destPath);
+  fs.mkdirSync(destDir, { recursive: true });
+  const content = await extractTarGzFromUrl(url, destDir, { findFile: binaryName });
+  if (content && Buffer.isBuffer(content)) {
+    fs.writeFileSync(destPath, content);
+    try {
+      fs.chmodSync(destPath, 493);
+    } catch {
+    }
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  downloadFile,
+  extractBinaryFromTarGz,
+  extractTarGzFromUrl,
+  extractZip,
+  fetchJson
+});
+//# sourceMappingURL=archive.js.map

package/dist/bin/installer/archive.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/bin/installer/archive.ts"],
+  "sourcesContent": ["/**\n * KiroGraph Archive Utilities\n *\n * Shared, cross-platform archive extraction and HTTP download helpers.\n * Pure Node.js \u2014 no external binaries required (no unzip, tar, etc.).\n * Works on all platforms without CrowdStrike or antivirus interference.\n */\n\nimport * as path from 'path';\nimport * as fs from 'fs';\nimport * as http from 'http';\nimport * as https from 'https';\nimport * as zlib from 'zlib';\n\n// \u2500\u2500 HTTP Helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Fetch JSON from a URL, following redirects.\n */\nexport function fetchJson(url: string): Promise<any> {\n  return new Promise((resolve, reject) => {\n    const mod = url.startsWith('https') ? https : http;\n    mod.get(url, { headers: { 'User-Agent': 'kirograph' } } as any, res => {\n      if (res.statusCode === 301 || res.statusCode === 302) {\n        return resolve(fetchJson(res.headers.location!));\n      }\n      if (res.statusCode !== 200) {\n        return reject(new Error(`HTTP ${res.statusCode}`));\n      }\n      let body = '';\n      res.on('data', (c: string) => body += c);\n      res.on('end', () => { try { resolve(JSON.parse(body)); } catch (e) { reject(e); } });\n    }).on('error', reject);\n  });\n}\n\n/**\n * Download a file from a URL to a local path, following redirects.\n */\nexport function downloadFile(url: string, dest: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    function doGet(currentUrl: string) {\n      const mod = currentUrl.startsWith('https') ? https : http;\n      mod.get(currentUrl, { headers: { 'User-Agent': 'kirograph' } } as any, res => {\n        if (res.statusCode === 301 || res.statusCode === 302) return doGet(res.headers.location!);\n        if (res.statusCode !== 200) return reject(new Error(`Download failed: HTTP ${res.statusCode}`));\n        const out = fs.createWriteStream(dest);\n        res.pipe(out);\n        out.on('finish', () => out.close(() => resolve()));\n        out.on('error', reject);\n      }).on('error', reject);\n    }\n    doGet(url);\n  });\n}\n\n// \u2500\u2500 ZIP Extraction \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Pure Node.js ZIP extractor \u2014 no external binary required.\n * Reads the ZIP central directory to locate file entries, then extracts\n * each one using Node's built-in zlib (DEFLATE) or raw copy (STORE).\n * Includes path traversal protection.\n *\n * Supports: STORE (method 0) and DEFLATE (method 8) compression.\n */\nexport async function extractZip(zipPath: string, destDir: string): Promise<void> {\n  const buf = await fs.promises.readFile(zipPath);\n  const resolvedDest = path.resolve(destDir);\n\n  // \u2500\u2500 Locate End of Central Directory record \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  let eocdOffset = -1;\n  for (let i = buf.length - 22; i >= 0; i--) {\n    if (buf.readUInt32LE(i) === 0x06054b50) { eocdOffset = i; break; }\n  }\n  if (eocdOffset === -1) throw new Error('Invalid ZIP: EOCD not found');\n\n  const cdCount  = buf.readUInt16LE(eocdOffset + 10);\n  const cdOffset = buf.readUInt32LE(eocdOffset + 16);\n\n  // \u2500\u2500 Walk Central Directory entries \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  let cdPos = cdOffset;\n  for (let i = 0; i < cdCount; i++) {\n    if (buf.readUInt32LE(cdPos) !== 0x02014b50) throw new Error('Invalid ZIP: bad CD signature');\n\n    const compMethod   = buf.readUInt16LE(cdPos + 10);\n    const compSize     = buf.readUInt32LE(cdPos + 20);\n    const uncompSize   = buf.readUInt32LE(cdPos + 24);\n    const fileNameLen  = buf.readUInt16LE(cdPos + 28);\n    const extraLen     = buf.readUInt16LE(cdPos + 30);\n    const commentLen   = buf.readUInt16LE(cdPos + 32);\n    const localOffset  = buf.readUInt32LE(cdPos + 42);\n    const fileName     = buf.slice(cdPos + 46, cdPos + 46 + fileNameLen).toString('utf8');\n\n    cdPos += 46 + fileNameLen + extraLen + commentLen;\n\n    // Skip directory entries\n    if (fileName.endsWith('/') || (uncompSize === 0 && compSize === 0)) continue;\n\n    // Prevent path traversal\n    const destPath = path.resolve(resolvedDest, fileName);\n    if (!destPath.startsWith(resolvedDest + path.sep) && destPath !== resolvedDest) continue;\n\n    // \u2500\u2500 Read Local File Header to find data offset \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    if (buf.readUInt32LE(localOffset) !== 0x04034b50) throw new Error('Invalid ZIP: bad LFH signature');\n    const localFileNameLen = buf.readUInt16LE(localOffset + 26);\n    const localExtraLen    = buf.readUInt16LE(localOffset + 28);\n    const dataOffset       = localOffset + 30 + localFileNameLen + localExtraLen;\n\n    const compData = buf.slice(dataOffset, dataOffset + compSize);\n\n    // \u2500\u2500 Decompress \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    let fileData: Buffer;\n    if (compMethod === 0) {\n      fileData = compData;\n    } else if (compMethod === 8) {\n      fileData = await new Promise<Buffer>((resolve, reject) => {\n        zlib.inflateRaw(compData, (err, result) => err ? reject(err) : resolve(result));\n      });\n    } else {\n      continue; // Unsupported compression method \u2014 skip\n    }\n\n    await fs.promises.mkdir(path.dirname(destPath), { recursive: true });\n    await fs.promises.writeFile(destPath, fileData);\n  }\n}\n\n// \u2500\u2500 Tar.gz Extraction \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface TarExtractOptions {\n  /** Strip this prefix from entry names (e.g. 'typesense-dashboard-gh-pages/'). */\n  stripPrefix?: string;\n  /** Only extract this specific file (by basename). Returns the file content via callback. */\n  findFile?: string;\n}\n\n/**\n * Extract a tar.gz archive from a URL directly to a destination directory.\n * Streams the download \u2192 gunzip \u2192 tar extraction without writing the archive to disk.\n * Includes path traversal protection.\n *\n * @param url - URL of the .tar.gz file\n * @param destDir - Directory to extract files into\n * @param opts - Optional: strip prefix from paths, or find a specific file\n * @returns Buffer of the found file if opts.findFile is set, otherwise void\n */\nexport function extractTarGzFromUrl(\n  url: string,\n  destDir: string,\n  opts?: TarExtractOptions\n): Promise<Buffer | void> {\n  const resolvedDest = path.resolve(destDir);\n\n  return new Promise((resolve, reject) => {\n    fs.mkdirSync(resolvedDest, { recursive: true });\n\n    function doGet(currentUrl: string) {\n      const mod = currentUrl.startsWith('https') ? https : http;\n      mod.get(currentUrl, { headers: { 'User-Agent': 'kirograph' } } as any, res => {\n        if (res.statusCode === 301 || res.statusCode === 302) {\n          return doGet(res.headers.location!);\n        }\n        if (res.statusCode !== 200) {\n          return reject(new Error(`Download failed: HTTP ${res.statusCode}`));\n        }\n\n        const gunzip = zlib.createGunzip();\n        res.pipe(gunzip);\n\n        let tarBuffer = Buffer.alloc(0);\n        let offset = 0;\n        let foundFile: Buffer | null = null;\n\n        function extractEntries(final = false) {\n          while (offset + 512 <= tarBuffer.length) {\n            const header    = tarBuffer.slice(offset, offset + 512);\n            const nameRaw   = header.slice(0, 100).toString('utf8').replace(/\\0/g, '');\n            const sizeOctal = header.slice(124, 136).toString('utf8').replace(/\\0/g, '').trim();\n            const typeFlag  = header[156];\n            const size      = parseInt(sizeOctal, 8) || 0;\n            const dataStart = offset + 512;\n            const dataEnd   = dataStart + size;\n\n            if (nameRaw === '') { offset += 512; continue; }\n\n            // Strip prefix if configured\n            const relName = opts?.stripPrefix && nameRaw.startsWith(opts.stripPrefix)\n              ? nameRaw.slice(opts.stripPrefix.length)\n              : nameRaw;\n\n            // If looking for a specific file\n            if (opts?.findFile && path.basename(nameRaw) === opts.findFile) {\n              if (tarBuffer.length >= dataEnd || final) {\n                foundFile = tarBuffer.slice(dataStart, dataEnd);\n                resolve(foundFile);\n                return;\n              }\n              return; // Wait for more data\n            }\n\n            const destPath = path.resolve(resolvedDest, relName);\n\n            // Prevent path traversal\n            if (!destPath.startsWith(resolvedDest + path.sep) && destPath !== resolvedDest) {\n              offset = dataStart + Math.ceil(size / 512) * 512;\n              continue;\n            }\n\n            // Directory entry\n            if (typeFlag === 53 || nameRaw.endsWith('/')) {\n              try { fs.mkdirSync(destPath, { recursive: true }); } catch { /* ignore */ }\n              offset = dataStart;\n              continue;\n            }\n\n            // File entry \u2014 wait for full data\n            if (tarBuffer.length < dataEnd && !final) return;\n\n            if (relName && !relName.endsWith('/')) {\n              try {\n                fs.mkdirSync(path.dirname(destPath), { recursive: true });\n                fs.writeFileSync(destPath, tarBuffer.slice(dataStart, dataEnd));\n              } catch { /* skip unwritable entries */ }\n            }\n\n            offset = dataStart + Math.ceil(size / 512) * 512;\n          }\n        }\n\n        gunzip.on('data', (chunk: Buffer) => {\n          tarBuffer = Buffer.concat([tarBuffer, chunk]);\n          extractEntries();\n        });\n        gunzip.on('end', () => {\n          extractEntries(true);\n          if (opts?.findFile && !foundFile) {\n            reject(new Error(`${opts.findFile} not found in archive`));\n          } else {\n            resolve(foundFile ?? undefined);\n          }\n        });\n        gunzip.on('error', reject);\n      }).on('error', reject);\n    }\n\n    doGet(url);\n  });\n}\n\n/**\n * Extract a single binary from a tar.gz URL and write it to destPath.\n * Useful for downloading server binaries (e.g. Typesense).\n */\nexport async function extractBinaryFromTarGz(\n  url: string,\n  binaryName: string,\n  destPath: string\n): Promise<void> {\n  const destDir = path.dirname(destPath);\n  fs.mkdirSync(destDir, { recursive: true });\n\n  const content = await extractTarGzFromUrl(url, destDir, { findFile: binaryName });\n  if (content && Buffer.isBuffer(content)) {\n    fs.writeFileSync(destPath, content);\n    try { fs.chmodSync(destPath, 0o755); } catch { /* Windows doesn't support chmod */ }\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQA,WAAsB;AACtB,SAAoB;AACpB,WAAsB;AACtB,YAAuB;AACvB,WAAsB;AAOf,SAAS,UAAU,KAA2B;AACnD,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,MAAM,IAAI,WAAW,OAAO,IAAI,QAAQ;AAC9C,QAAI,IAAI,KAAK,EAAE,SAAS,EAAE,cAAc,YAAY,EAAE,GAAU,SAAO;AACrE,UAAI,IAAI,eAAe,OAAO,IAAI,eAAe,KAAK;AACpD,eAAO,QAAQ,UAAU,IAAI,QAAQ,QAAS,CAAC;AAAA,MACjD;AACA,UAAI,IAAI,eAAe,KAAK;AAC1B,eAAO,OAAO,IAAI,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;AAAA,MACnD;AACA,UAAI,OAAO;AACX,UAAI,GAAG,QAAQ,CAAC,MAAc,QAAQ,CAAC;AACvC,UAAI,GAAG,OAAO,MAAM;AAAE,YAAI;AAAE,kBAAQ,KAAK,MAAM,IAAI,CAAC;AAAA,QAAG,SAAS,GAAG;AAAE,iBAAO,CAAC;AAAA,QAAG;AAAA,MAAE,CAAC;AAAA,IACrF,CAAC,EAAE,GAAG,SAAS,MAAM;AAAA,EACvB,CAAC;AACH;AAKO,SAAS,aAAa,KAAa,MAA6B;AACrE,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,aAAS,MAAM,YAAoB;AACjC,YAAM,MAAM,WAAW,WAAW,OAAO,IAAI,QAAQ;AACrD,UAAI,IAAI,YAAY,EAAE,SAAS,EAAE,cAAc,YAAY,EAAE,GAAU,SAAO;AAC5E,YAAI,IAAI,eAAe,OAAO,IAAI,eAAe,IAAK,QAAO,MAAM,IAAI,QAAQ,QAAS;AACxF,YAAI,IAAI,eAAe,IAAK,QAAO,OAAO,IAAI,MAAM,yBAAyB,IAAI,UAAU,EAAE,CAAC;AAC9F,cAAM,MAAM,GAAG,kBAAkB,IAAI;AACrC,YAAI,KAAK,GAAG;AACZ,YAAI,GAAG,UAAU,MAAM,IAAI,MAAM,MAAM,QAAQ,CAAC,CAAC;AACjD,YAAI,GAAG,SAAS,MAAM;AAAA,MACxB,CAAC,EAAE,GAAG,SAAS,MAAM;AAAA,IACvB;AACA,UAAM,GAAG;AAAA,EACX,CAAC;AACH;AAYA,eAAsB,WAAW,SAAiB,SAAgC;AAChF,QAAM,MAAM,MAAM,GAAG,SAAS,SAAS,OAAO;AAC9C,QAAM,eAAe,KAAK,QAAQ,OAAO;AAGzC,MAAI,aAAa;AACjB,WAAS,IAAI,IAAI,SAAS,IAAI,KAAK,GAAG,KAAK;AACzC,QAAI,IAAI,aAAa,CAAC,MAAM,WAAY;AAAE,mBAAa;AAAG;AAAA,IAAO;AAAA,EACnE;AACA,MAAI,eAAe,GAAI,OAAM,IAAI,MAAM,6BAA6B;AAEpE,QAAM,UAAW,IAAI,aAAa,aAAa,EAAE;AACjD,QAAM,WAAW,IAAI,aAAa,aAAa,EAAE;AAGjD,MAAI,QAAQ;AACZ,WAAS,IAAI,GAAG,IAAI,SAAS,KAAK;AAChC,QAAI,IAAI,aAAa,KAAK,MAAM,SAAY,OAAM,IAAI,MAAM,+BAA+B;AAE3F,UAAM,aAAe,IAAI,aAAa,QAAQ,EAAE;AAChD,UAAM,WAAe,IAAI,aAAa,QAAQ,EAAE;AAChD,UAAM,aAAe,IAAI,aAAa,QAAQ,EAAE;AAChD,UAAM,cAAe,IAAI,aAAa,QAAQ,EAAE;AAChD,UAAM,WAAe,IAAI,aAAa,QAAQ,EAAE;AAChD,UAAM,aAAe,IAAI,aAAa,QAAQ,EAAE;AAChD,UAAM,cAAe,IAAI,aAAa,QAAQ,EAAE;AAChD,UAAM,WAAe,IAAI,MAAM,QAAQ,IAAI,QAAQ,KAAK,WAAW,EAAE,SAAS,MAAM;AAEpF,aAAS,KAAK,cAAc,WAAW;AAGvC,QAAI,SAAS,SAAS,GAAG,KAAM,eAAe,KAAK,aAAa,EAAI;AAGpE,UAAM,WAAW,KAAK,QAAQ,cAAc,QAAQ;AACpD,QAAI,CAAC,SAAS,WAAW,eAAe,KAAK,GAAG,KAAK,aAAa,aAAc;AAGhF,QAAI,IAAI,aAAa,WAAW,MAAM,SAAY,OAAM,IAAI,MAAM,gCAAgC;AAClG,UAAM,mBAAmB,IAAI,aAAa,cAAc,EAAE;AAC1D,UAAM,gBAAmB,IAAI,aAAa,cAAc,EAAE;AAC1D,UAAM,aAAmB,cAAc,KAAK,mBAAmB;AAE/D,UAAM,WAAW,IAAI,MAAM,YAAY,aAAa,QAAQ;AAG5D,QAAI;AACJ,QAAI,eAAe,GAAG;AACpB,iBAAW;AAAA,IACb,WAAW,eAAe,GAAG;AAC3B,iBAAW,MAAM,IAAI,QAAgB,CAAC,SAAS,WAAW;AACxD,aAAK,WAAW,UAAU,CAAC,KAAK,WAAW,MAAM,OAAO,GAAG,IAAI,QAAQ,MAAM,CAAC;AAAA,MAChF,CAAC;AAAA,IACH,OAAO;AACL;AAAA,IACF;AAEA,UAAM,GAAG,SAAS,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AACnE,UAAM,GAAG,SAAS,UAAU,UAAU,QAAQ;AAAA,EAChD;AACF;AAqBO,SAAS,oBACd,KACA,SACA,MACwB;AACxB,QAAM,eAAe,KAAK,QAAQ,OAAO;AAEzC,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,OAAG,UAAU,cAAc,EAAE,WAAW,KAAK,CAAC;AAE9C,aAAS,MAAM,YAAoB;AACjC,YAAM,MAAM,WAAW,WAAW,OAAO,IAAI,QAAQ;AACrD,UAAI,IAAI,YAAY,EAAE,SAAS,EAAE,cAAc,YAAY,EAAE,GAAU,SAAO;AAC5E,YAAI,IAAI,eAAe,OAAO,IAAI,eAAe,KAAK;AACpD,iBAAO,MAAM,IAAI,QAAQ,QAAS;AAAA,QACpC;AACA,YAAI,IAAI,eAAe,KAAK;AAC1B,iBAAO,OAAO,IAAI,MAAM,yBAAyB,IAAI,UAAU,EAAE,CAAC;AAAA,QACpE;AAEA,cAAM,SAAS,KAAK,aAAa;AACjC,YAAI,KAAK,MAAM;AAEf,YAAI,YAAY,OAAO,MAAM,CAAC;AAC9B,YAAI,SAAS;AACb,YAAI,YAA2B;AAE/B,iBAAS,eAAe,QAAQ,OAAO;AACrC,iBAAO,SAAS,OAAO,UAAU,QAAQ;AACvC,kBAAM,SAAY,UAAU,MAAM,QAAQ,SAAS,GAAG;AACtD,kBAAM,UAAY,OAAO,MAAM,GAAG,GAAG,EAAE,SAAS,MAAM,EAAE,QAAQ,OAAO,EAAE;AACzE,kBAAM,YAAY,OAAO,MAAM,KAAK,GAAG,EAAE,SAAS,MAAM,EAAE,QAAQ,OAAO,EAAE,EAAE,KAAK;AAClF,kBAAM,WAAY,OAAO,GAAG;AAC5B,kBAAM,OAAY,SAAS,WAAW,CAAC,KAAK;AAC5C,kBAAM,YAAY,SAAS;AAC3B,kBAAM,UAAY,YAAY;AAE9B,gBAAI,YAAY,IAAI;AAAE,wBAAU;AAAK;AAAA,YAAU;AAG/C,kBAAM,UAAU,MAAM,eAAe,QAAQ,WAAW,KAAK,WAAW,IACpE,QAAQ,MAAM,KAAK,YAAY,MAAM,IACrC;AAGJ,gBAAI,MAAM,YAAY,KAAK,SAAS,OAAO,MAAM,KAAK,UAAU;AAC9D,kBAAI,UAAU,UAAU,WAAW,OAAO;AACxC,4BAAY,UAAU,MAAM,WAAW,OAAO;AAC9C,wBAAQ,SAAS;AACjB;AAAA,cACF;AACA;AAAA,YACF;AAEA,kBAAM,WAAW,KAAK,QAAQ,cAAc,OAAO;AAGnD,gBAAI,CAAC,SAAS,WAAW,eAAe,KAAK,GAAG,KAAK,aAAa,cAAc;AAC9E,uBAAS,YAAY,KAAK,KAAK,OAAO,GAAG,IAAI;AAC7C;AAAA,YACF;AAGA,gBAAI,aAAa,MAAM,QAAQ,SAAS,GAAG,GAAG;AAC5C,kBAAI;AAAE,mBAAG,UAAU,UAAU,EAAE,WAAW,KAAK,CAAC;AAAA,cAAG,QAAQ;AAAA,cAAe;AAC1E,uBAAS;AACT;AAAA,YACF;AAGA,gBAAI,UAAU,SAAS,WAAW,CAAC,MAAO;AAE1C,gBAAI,WAAW,CAAC,QAAQ,SAAS,GAAG,GAAG;AACrC,kBAAI;AACF,mBAAG,UAAU,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AACxD,mBAAG,cAAc,UAAU,UAAU,MAAM,WAAW,OAAO,CAAC;AAAA,cAChE,QAAQ;AAAA,cAAgC;AAAA,YAC1C;AAEA,qBAAS,YAAY,KAAK,KAAK,OAAO,GAAG,IAAI;AAAA,UAC/C;AAAA,QACF;AAEA,eAAO,GAAG,QAAQ,CAAC,UAAkB;AACnC,sBAAY,OAAO,OAAO,CAAC,WAAW,KAAK,CAAC;AAC5C,yBAAe;AAAA,QACjB,CAAC;AACD,eAAO,GAAG,OAAO,MAAM;AACrB,yBAAe,IAAI;AACnB,cAAI,MAAM,YAAY,CAAC,WAAW;AAChC,mBAAO,IAAI,MAAM,GAAG,KAAK,QAAQ,uBAAuB,CAAC;AAAA,UAC3D,OAAO;AACL,oBAAQ,aAAa,MAAS;AAAA,UAChC;AAAA,QACF,CAAC;AACD,eAAO,GAAG,SAAS,MAAM;AAAA,MAC3B,CAAC,EAAE,GAAG,SAAS,MAAM;AAAA,IACvB;AAEA,UAAM,GAAG;AAAA,EACX,CAAC;AACH;AAMA,eAAsB,uBACpB,KACA,YACA,UACe;AACf,QAAM,UAAU,KAAK,QAAQ,QAAQ;AACrC,KAAG,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AAEzC,QAAM,UAAU,MAAM,oBAAoB,KAAK,SAAS,EAAE,UAAU,WAAW,CAAC;AAChF,MAAI,WAAW,OAAO,SAAS,OAAO,GAAG;AACvC,OAAG,cAAc,UAAU,OAAO;AAClC,QAAI;AAAE,SAAG,UAAU,UAAU,GAAK;AAAA,IAAG,QAAQ;AAAA,IAAsC;AAAA,EACrF;AACF;",
+  "names": []
+}

package/dist/bin/installer/caveman.js

@@ -0,0 +1,57 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var caveman_exports = {};
+__export(caveman_exports, {
+  CAVEMAN_RULES: () => CAVEMAN_RULES
+});
+module.exports = __toCommonJS(caveman_exports);
+const AUTO_CLARITY = `Auto-clarity exceptions: temporarily revert to normal prose for (1) security warnings, (2) confirmations of irreversible actions (delete, overwrite, force-push), and (3) multi-step sequences where fragment order could cause misunderstanding. Resume compressed style immediately after.`;
+const CAVEMAN_RULES = {
+  lite: `## Communication style: lite
+
+Respond concisely. Omit filler words (just, really, basically, simply, actually).
+Keep full sentences and articles. Remove pleasantries and hedging.
+Preserve all code blocks, technical terms, file paths, and URLs unchanged.
+Pattern: state the fact, then the next step.
+${AUTO_CLARITY}`,
+  full: `## Communication style: full caveman
+
+Drop articles (a, an, the). Use fragments. Short synonyms OK.
+No filler (just, really, basically, simply, actually). No pleasantries.
+No hedging ("I think", "it seems", "you might want to").
+Preserve all code blocks, technical terms, file paths, URLs unchanged.
+Pattern: [thing] [action] [reason]. [next step].
+Example: "Bug in auth middleware. Token check use \`<\` not \`<=\`. Fix line 42."
+${AUTO_CLARITY}`,
+  ultra: `## Communication style: ultra caveman
+
+Max compression. Drop articles, conjunctions, filler. Use fragments only.
+Abbreviate: DB, auth, req, res, fn, cfg, msg, err, impl, dep.
+Use \u2192 for causality. Use + for "and". Omit subject when obvious.
+No pleasantries. No hedging. No explanations unless asked.
+Preserve code blocks, technical terms, file paths, URLs unchanged.
+Pattern: [thing] \u2192 [action]. [fix].
+Example: "auth middleware \u2192 token check \`<\` not \`<=\`. Fix L42."
+${AUTO_CLARITY}`
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CAVEMAN_RULES
+});
+//# sourceMappingURL=caveman.js.map

package/dist/bin/installer/caveman.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/bin/installer/caveman.ts"],
+  "sourcesContent": ["/**\n * KiroGraph \u2014 Caveman mode support\n *\n * Mode stored in .kirograph/config.json as `cavemanMode`.\n * Rules are injected into:\n *  - .kiro/steering/kirograph.md  (IDE, inclusion: always)\n *  - .kiro/agents/kirograph.json  (kiro-cli, inline prompt)\n * No hooks needed \u2014 steering is always included.\n */\n\nexport type CavemanMode = 'off' | 'lite' | 'full' | 'ultra';\n\n// \u2500\u2500 Rules per level \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nconst AUTO_CLARITY = `\\\nAuto-clarity exceptions: temporarily revert to normal prose for (1) security warnings, \\\n(2) confirmations of irreversible actions (delete, overwrite, force-push), and \\\n(3) multi-step sequences where fragment order could cause misunderstanding. \\\nResume compressed style immediately after.`;\n\nexport const CAVEMAN_RULES: Record<string, string> = {\n  lite: `\\\n## Communication style: lite\n\nRespond concisely. Omit filler words (just, really, basically, simply, actually).\nKeep full sentences and articles. Remove pleasantries and hedging.\nPreserve all code blocks, technical terms, file paths, and URLs unchanged.\nPattern: state the fact, then the next step.\n${AUTO_CLARITY}`,\n\n  full: `\\\n## Communication style: full caveman\n\nDrop articles (a, an, the). Use fragments. Short synonyms OK.\nNo filler (just, really, basically, simply, actually). No pleasantries.\nNo hedging (\"I think\", \"it seems\", \"you might want to\").\nPreserve all code blocks, technical terms, file paths, URLs unchanged.\nPattern: [thing] [action] [reason]. [next step].\nExample: \"Bug in auth middleware. Token check use \\`<\\` not \\`<=\\`. Fix line 42.\"\n${AUTO_CLARITY}`,\n\n  ultra: `\\\n## Communication style: ultra caveman\n\nMax compression. Drop articles, conjunctions, filler. Use fragments only.\nAbbreviate: DB, auth, req, res, fn, cfg, msg, err, impl, dep.\nUse \u2192 for causality. Use + for \"and\". Omit subject when obvious.\nNo pleasantries. No hedging. No explanations unless asked.\nPreserve code blocks, technical terms, file paths, URLs unchanged.\nPattern: [thing] \u2192 [action]. [fix].\nExample: \"auth middleware \u2192 token check \\`<\\` not \\`<=\\`. Fix L42.\"\n${AUTO_CLARITY}`,\n};\n\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAcA,MAAM,eAAe;AAMd,MAAM,gBAAwC;AAAA,EACnD,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAON,YAAY;AAAA,EAEZ,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASN,YAAY;AAAA,EAEZ,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUP,YAAY;AACd;",
+  "names": []
+}

package/dist/bin/installer/cli-agent.d.ts

@@ -0,0 +1,15 @@
+/**
+ * KiroGraph Installer — Kiro CLI agent config
+ *
+ * Writes .kiro/agents/kirograph.json — a workspace custom agent that wires up:
+ *  - MCP server (kirograph tools)
+ *  - steering instructions inlined as prompt
+ *  - hooks: sync on agentSpawn, userPromptSubmit, stop
+ *
+ * Sync strategy (CLI has no file-watch events unlike the IDE):
+ *  - agentSpawn:       sync-if-dirty — catches edits made between sessions
+ *  - userPromptSubmit: sync-if-dirty — keeps graph fresh within a session
+ *  - stop:             sync-if-dirty --quiet — deferred flush, mirrors IDE agentStop
+ */
+export declare function writeCliAgent(kiroDir: string): void;
+//# sourceMappingURL=cli-agent.d.ts.map

package/dist/bin/installer/cli-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-agent.d.ts","sourceRoot":"","sources":["../../../src/bin/installer/cli-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAyGH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMnD"}

package/dist/bin/installer/cli-agent.js

@@ -0,0 +1,89 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var cli_agent_exports = {};
+__export(cli_agent_exports, {
+  writeCliAgent: () => writeCliAgent
+});
+module.exports = __toCommonJS(cli_agent_exports);
+var fs = __toESM(require("fs"));
+var path = __toESM(require("path"));
+const KIROGRAPH_TOOLS = [
+  "@kirograph/kirograph_search",
+  "@kirograph/kirograph_context",
+  "@kirograph/kirograph_callers",
+  "@kirograph/kirograph_callees",
+  "@kirograph/kirograph_impact",
+  "@kirograph/kirograph_node",
+  "@kirograph/kirograph_status",
+  "@kirograph/kirograph_files",
+  "@kirograph/kirograph_dead_code",
+  "@kirograph/kirograph_circular_deps",
+  "@kirograph/kirograph_path",
+  "@kirograph/kirograph_type_hierarchy",
+  "@kirograph/kirograph_architecture",
+  "@kirograph/kirograph_package",
+  "@kirograph/kirograph_coupling",
+  "@kirograph/kirograph_hotspots",
+  "@kirograph/kirograph_surprising",
+  "@kirograph/kirograph_diff"
+];
+const SYNC_CMD = "kirograph sync-if-dirty --quiet 2>/dev/null || true";
+function buildAgentConfig() {
+  return {
+    name: "kirograph",
+    description: "KiroGraph-aware agent \u2014 uses the semantic code graph for faster, smarter exploration.",
+    resources: ["file://.kiro/steering/kirograph.md"],
+    tools: ["@builtin", "@kirograph"],
+    allowedTools: KIROGRAPH_TOOLS,
+    useLegacyMcpJson: true,
+    hooks: {
+      agentSpawn: [{ command: SYNC_CMD }],
+      userPromptSubmit: [{ command: SYNC_CMD }],
+      stop: [{ command: SYNC_CMD }]
+    }
+  };
+}
+function ensureDir(p) {
+  fs.mkdirSync(p, { recursive: true });
+}
+function writeJson(p, data) {
+  fs.writeFileSync(p, JSON.stringify(data, null, 2) + "\n");
+}
+function writeCliAgent(kiroDir) {
+  const agentsDir = path.join(kiroDir, "agents");
+  ensureDir(agentsDir);
+  const agentPath = path.join(agentsDir, "kirograph.json");
+  writeJson(agentPath, buildAgentConfig());
+  console.log(`  \u2713 CLI agent config written to ${agentPath}`);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  writeCliAgent
+});
+//# sourceMappingURL=cli-agent.js.map

package/dist/bin/installer/cli-agent.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/bin/installer/cli-agent.ts"],
+  "sourcesContent": ["/**\n * KiroGraph Installer \u2014 Kiro CLI agent config\n *\n * Writes .kiro/agents/kirograph.json \u2014 a workspace custom agent that wires up:\n *  - MCP server (kirograph tools)\n *  - steering file as resource (single source of truth for instructions + caveman rules)\n *  - hooks: sync on agentSpawn, userPromptSubmit, stop\n *\n * Sync strategy (CLI has no file-watch events unlike the IDE):\n *  - agentSpawn:       sync-if-dirty \u2014 catches edits made between sessions\n *  - userPromptSubmit: sync-if-dirty \u2014 keeps graph fresh within a session\n *  - stop:             sync-if-dirty --quiet \u2014 deferred flush, mirrors IDE agentStop\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\n\nconst KIROGRAPH_TOOLS = [\n  '@kirograph/kirograph_search',\n  '@kirograph/kirograph_context',\n  '@kirograph/kirograph_callers',\n  '@kirograph/kirograph_callees',\n  '@kirograph/kirograph_impact',\n  '@kirograph/kirograph_node',\n  '@kirograph/kirograph_status',\n  '@kirograph/kirograph_files',\n  '@kirograph/kirograph_dead_code',\n  '@kirograph/kirograph_circular_deps',\n  '@kirograph/kirograph_path',\n  '@kirograph/kirograph_type_hierarchy',\n  '@kirograph/kirograph_architecture',\n  '@kirograph/kirograph_package',\n  '@kirograph/kirograph_coupling',\n  '@kirograph/kirograph_hotspots',\n  '@kirograph/kirograph_surprising',\n  '@kirograph/kirograph_diff',\n];\n\nconst SYNC_CMD = 'kirograph sync-if-dirty --quiet 2>/dev/null || true';\n\nfunction buildAgentConfig() {\n  return {\n    name: 'kirograph',\n    description: 'KiroGraph-aware agent \u2014 uses the semantic code graph for faster, smarter exploration.',\n    resources: ['file://.kiro/steering/kirograph.md'],\n    tools: ['@builtin', '@kirograph'],\n    allowedTools: KIROGRAPH_TOOLS,\n    useLegacyMcpJson: true,\n    hooks: {\n      agentSpawn: [{ command: SYNC_CMD }],\n      userPromptSubmit: [{ command: SYNC_CMD }],\n      stop: [{ command: SYNC_CMD }],\n    },\n  };\n}\n\nfunction ensureDir(p: string): void {\n  fs.mkdirSync(p, { recursive: true });\n}\n\nfunction writeJson(p: string, data: unknown): void {\n  fs.writeFileSync(p, JSON.stringify(data, null, 2) + '\\n');\n}\n\nexport function writeCliAgent(kiroDir: string): void {\n  const agentsDir = path.join(kiroDir, 'agents');\n  ensureDir(agentsDir);\n  const agentPath = path.join(agentsDir, 'kirograph.json');\n  writeJson(agentPath, buildAgentConfig());\n  console.log(`  \u2713 CLI agent config written to ${agentPath}`);\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAcA,SAAoB;AACpB,WAAsB;AAEtB,MAAM,kBAAkB;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,WAAW;AAEjB,SAAS,mBAAmB;AAC1B,SAAO;AAAA,IACL,MAAM;AAAA,IACN,aAAa;AAAA,IACb,WAAW,CAAC,oCAAoC;AAAA,IAChD,OAAO,CAAC,YAAY,YAAY;AAAA,IAChC,cAAc;AAAA,IACd,kBAAkB;AAAA,IAClB,OAAO;AAAA,MACL,YAAY,CAAC,EAAE,SAAS,SAAS,CAAC;AAAA,MAClC,kBAAkB,CAAC,EAAE,SAAS,SAAS,CAAC;AAAA,MACxC,MAAM,CAAC,EAAE,SAAS,SAAS,CAAC;AAAA,IAC9B;AAAA,EACF;AACF;AAEA,SAAS,UAAU,GAAiB;AAClC,KAAG,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AACrC;AAEA,SAAS,UAAU,GAAW,MAAqB;AACjD,KAAG,cAAc,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,IAAI,IAAI;AAC1D;AAEO,SAAS,cAAc,SAAuB;AACnD,QAAM,YAAY,KAAK,KAAK,SAAS,QAAQ;AAC7C,YAAU,SAAS;AACnB,QAAM,YAAY,KAAK,KAAK,WAAW,gBAAgB;AACvD,YAAU,WAAW,iBAAiB,CAAC;AACvC,UAAQ,IAAI,wCAAmC,SAAS,EAAE;AAC5D;",
+  "names": []
+}

package/dist/bin/installer/config-prompt.d.ts

@@ -0,0 +1,13 @@
+/**
+ * KiroGraph Installer — configuration prompting
+ */
+import * as readline from 'readline';
+import { KiroGraphConfig } from '../../config';
+export type ConfigPatch = Pick<KiroGraphConfig, 'enableEmbeddings' | 'useVecIndex' | 'semanticEngine' | 'typesenseDashboard' | 'qdrantDashboard' | 'extractDocstrings' | 'trackCallSites' | 'enableArchitecture'> & {
+    embeddingModel?: string;
+    embeddingDim?: number;
+};
+export type SemanticEngine = KiroGraphConfig['semanticEngine'];
+export declare const DEFAULT_EMBEDDING_MODEL = "nomic-ai/nomic-embed-text-v1.5";
+export declare function promptConfigOptions(rl: readline.Interface): Promise<ConfigPatch>;
+//# sourceMappingURL=config-prompt.d.ts.map

package/dist/bin/installer/config-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-prompt.d.ts","sourceRoot":"","sources":["../../../src/bin/installer/config-prompt.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG/C,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,kBAAkB,GAAG,aAAa,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,iBAAiB,GAAG,mBAAmB,GAAG,gBAAgB,GAAG,oBAAoB,CAAC,GAAG;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AACvQ,MAAM,MAAM,cAAc,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;AAE/D,eAAO,MAAM,uBAAuB,mCAAmC,CAAC;AAoCxE,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CA4FtF"}

package/dist/bin/installer/config-prompt.js

@@ -0,0 +1,158 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var config_prompt_exports = {};
+__export(config_prompt_exports, {
+  DEFAULT_EMBEDDING_MODEL: () => DEFAULT_EMBEDDING_MODEL,
+  promptConfigOptions: () => promptConfigOptions
+});
+module.exports = __toCommonJS(config_prompt_exports);
+var import_prompts = require("./prompts");
+const DEFAULT_EMBEDDING_MODEL = "nomic-ai/nomic-embed-text-v1.5";
+const PRESET_MODELS = [
+  {
+    value: "nomic-ai/nomic-embed-text-v1.5",
+    label: "nomic-embed-text-v1.5",
+    dim: 768,
+    description: "768-dim \xB7 ~130MB \xB7 Best quality for code search  (recommended)"
+  },
+  {
+    value: "onnx-community/embeddinggemma-300m-ONNX",
+    label: "embeddinggemma-300m",
+    dim: 768,
+    description: "768-dim \xB7 ~300MB \xB7 Google Gemma-based, multilingual, 2048-token context"
+  },
+  {
+    value: "Xenova/all-MiniLM-L6-v2",
+    label: "all-MiniLM-L6-v2",
+    dim: 384,
+    description: "384-dim \xB7 ~23MB  \xB7 Fast and lightweight, lower accuracy"
+  },
+  {
+    value: "BAAI/bge-base-en-v1.5",
+    label: "bge-base-en-v1.5",
+    dim: 768,
+    description: "768-dim \xB7 ~110MB \xB7 Strong general-purpose alternative to nomic"
+  },
+  {
+    value: "__other__",
+    label: "Other",
+    dim: 768,
+    description: "Enter a custom HuggingFace model ID and embedding dimension"
+  }
+];
+async function promptConfigOptions(rl) {
+  const enableEmbeddings = await (0, import_prompts.askBool)(
+    rl,
+    "Enable semantic embeddings for similarity search? (requires a local embedding model)",
+    "Enables semantic/similarity-based code search. Increases indexing time; the chosen embedding model is downloaded automatically on first use."
+  );
+  const patch = { enableEmbeddings, useVecIndex: false, semanticEngine: "cosine", typesenseDashboard: false, qdrantDashboard: false, extractDocstrings: true, trackCallSites: true, enableArchitecture: false, cavemanMode: "off" };
+  if (enableEmbeddings) {
+    const modelChoice = await (0, import_prompts.arrowSelect)(
+      rl,
+      "Choose an embedding model:",
+      PRESET_MODELS.map((m) => ({ value: m.value, label: m.label, description: m.description }))
+    );
+    let embeddingModel;
+    let embeddingDim;
+    if (modelChoice === "__other__") {
+      console.log(`
+  ${import_prompts.dim}Enter a HuggingFace model ID in the format org/model-name.${import_prompts.reset}`);
+      while (true) {
+        const raw = (await (0, import_prompts.ask)(rl, `  ${import_prompts.violet}Model identifier:${import_prompts.reset} `)).trim();
+        if (raw.includes("/")) {
+          embeddingModel = raw;
+          break;
+        }
+        console.log(`  Expected a HuggingFace model ID in the format org/model-name (e.g. nomic-ai/nomic-embed-text-v1.5).`);
+      }
+      console.log(`
+  ${import_prompts.dim}Enter the embedding output dimension for this model (check the model card on HuggingFace).${import_prompts.reset}`);
+      while (true) {
+        const raw = (await (0, import_prompts.ask)(rl, `  ${import_prompts.violet}Embedding dimension (e.g. 768, 384):${import_prompts.reset} `)).trim();
+        const n = parseInt(raw, 10);
+        if (!isNaN(n) && n > 0) {
+          embeddingDim = n;
+          break;
+        }
+        console.log(`  Expected a positive integer (e.g. 768, 384, 1536).`);
+      }
+    } else {
+      const preset = PRESET_MODELS.find((m) => m.value === modelChoice);
+      embeddingModel = preset.value;
+      embeddingDim = preset.dim;
+    }
+    patch.embeddingModel = embeddingModel;
+    patch.embeddingDim = embeddingDim;
+    const semanticEngine = await (0, import_prompts.arrowSelect)(rl, "Choose the semantic search engine:", [
+      { value: "cosine", label: "cosine", description: "In-process cosine similarity. No extra deps. Best for small/medium projects." },
+      { value: "sqlite-vec", label: "sqlite-vec", description: "ANN index. Sub-linear search. Best for large codebases. Needs: better-sqlite3, sqlite-vec (native)." },
+      { value: "orama", label: "orama", description: "Hybrid search (full-text + vector). Pure JS. Needs: @orama/orama, @orama/plugin-data-persistence." },
+      { value: "pglite", label: "pglite", description: "Hybrid search via PostgreSQL + pgvector. Exact results. Pure WASM. Needs: @electric-sql/pglite." },
+      { value: "lancedb", label: "lancedb", description: "ANN search via LanceDB (Apache Lance columnar format). Pure JS. Needs: @lancedb/lancedb." },
+      { value: "qdrant", label: "qdrant", description: "ANN search via Qdrant embedded binary (HNSW index, Cosine). Needs: qdrant-local." },
+      { value: "typesense", label: "typesense", description: "ANN search via Typesense (auto-downloaded binary, HNSW, Cosine). Needs: typesense." }
+    ]);
+    patch.semanticEngine = semanticEngine;
+    patch.useVecIndex = semanticEngine === "sqlite-vec";
+    if (semanticEngine === "typesense") {
+      patch.typesenseDashboard = await (0, import_prompts.askBool)(
+        rl,
+        "Open Typesense dashboard after indexing?",
+        "Serves the Typesense Dashboard locally and opens it in your browser after indexing completes."
+      );
+    }
+    if (semanticEngine === "qdrant") {
+      patch.qdrantDashboard = await (0, import_prompts.askBool)(
+        rl,
+        "Open Qdrant dashboard after indexing?",
+        "Downloads the Qdrant Web UI (first time only) and opens it in your browser after indexing completes."
+      );
+    }
+  }
+  patch.extractDocstrings = await (0, import_prompts.askBool)(
+    rl,
+    "Extract docstrings from source files?",
+    "Enriches symbol metadata and improves context quality. Slightly increases indexing time."
+  );
+  patch.trackCallSites = await (0, import_prompts.askBool)(
+    rl,
+    "Track call sites to enable caller/callee graph traversal?",
+    "Enables the kirograph_callers and kirograph_callees MCP tools for graph traversal. Increases index size."
+  );
+  patch.enableArchitecture = await (0, import_prompts.askBool)(
+    rl,
+    "Enable architecture analysis (package graph + layer detection)?",
+    "Detects packages from manifests (package.json, go.mod, Cargo.toml, etc.) and architectural layers (api, service, data, ui, shared) from file structure. Enables kirograph_architecture, kirograph_coupling, and kirograph_package MCP tools."
+  );
+  const cavemanChoice = await (0, import_prompts.arrowSelect)(rl, "Caveman mode \u2014 agent communication style:", [
+    { value: "off", label: "off", description: "Normal responses" },
+    { value: "lite", label: "lite", description: "Compact, no filler, full sentences" },
+    { value: "full", label: "full", description: "Fragments, no articles, short synonyms" },
+    { value: "ultra", label: "ultra", description: "Max compression, abbreviations, \u2192 for causality" }
+  ]);
+  patch.cavemanMode = cavemanChoice;
+  return patch;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DEFAULT_EMBEDDING_MODEL,
+  promptConfigOptions
+});
+//# sourceMappingURL=config-prompt.js.map