kirograph 0.17.0 → 0.19.0

package/dist/bin/kirograph.js

@@ -34,6 +34,28 @@ var import_exec = require("./commands/exec");
 var import_memory = require("./commands/memory");
 var import_docs = require("./commands/docs");
 var import_data = require("./commands/data");
+var import_benchmark = require("./commands/benchmark");
+var import_flows = require("./commands/flows");
+var import_communities = require("./commands/communities");
+var import_refactor = require("./commands/refactor");
+var import_read = require("./commands/read");
+var import_budget = require("./commands/budget");
+var import_security = require("./commands/security");
+var import_sbom = require("./commands/sbom");
+var import_vex = require("./commands/vex");
+var import_vulns = require("./commands/vulns");
+var import_reachability = require("./commands/reachability");
+var import_staleness = require("./commands/staleness");
+var import_licenses = require("./commands/licenses");
+var import_security_export = require("./commands/security-export");
+var import_vuln_suppress = require("./commands/vuln-suppress");
+var import_attack_surface = require("./commands/attack-surface");
+var import_security_secrets = require("./commands/security-secrets");
+var import_security_flows = require("./commands/security-flows");
+var import_security_ci_report = require("./commands/security-ci-report");
+var import_supply_chain = require("./commands/supply-chain");
+var import_dep_confusion = require("./commands/dep-confusion");
+var import_remediation = require("./commands/remediation");
 process.on("uncaughtException", (err) => {
   const msg = err?.message ?? String(err);
   const isWasmAbort = msg.includes("Aborted(") || msg.includes("RuntimeError") || err?.constructor?.name === "RuntimeError";
@@ -62,7 +84,7 @@ process.on("uncaughtException", (err) => {
   process.exit(1);
 });
 const program = new import_commander.Command();
-program.name("kirograph").description("Semantic code knowledge graph for Kiro").version("0.17.0").addHelpCommand(true).hook("preAction", (thisCommand) => {
+program.name("kirograph").description("Semantic code knowledge graph for Kiro").version("0.19.0").addHelpCommand(true).hook("preAction", (thisCommand) => {
   const name = thisCommand.name();
   if (name === "init") (0, import_banner.printBanner)();
 });
@@ -97,11 +119,55 @@ program.name("kirograph").description("Semantic code knowledge graph for Kiro").
 (0, import_memory.register)(program);
 (0, import_docs.register)(program);
 (0, import_data.register)(program);
+(0, import_benchmark.register)(program);
+(0, import_flows.register)(program);
+(0, import_communities.register)(program);
+(0, import_refactor.register)(program);
+(0, import_read.register)(program);
+(0, import_budget.register)(program);
+const securityCmd = (0, import_security.register)(program);
+(0, import_sbom.register)(program);
+(0, import_vex.register)(program);
+(0, import_vulns.register)(program);
+(0, import_reachability.register)(program);
+(0, import_staleness.register)(program);
+(0, import_licenses.register)(program);
+(0, import_security_export.register)(securityCmd);
+(0, import_security_secrets.register)(securityCmd);
+(0, import_security_flows.register)(securityCmd);
+(0, import_security_ci_report.register)(securityCmd);
+(0, import_vuln_suppress.register)(program);
+(0, import_attack_surface.register)(program);
+(0, import_supply_chain.register)(program);
+(0, import_dep_confusion.register)(program);
+(0, import_remediation.register)(program);
+program.command("help").description("Show interactive help").action(() => {
+  if (process.stdout.isTTY) {
+    (0, import_help.printInteractiveHelp)();
+  } else {
+    (0, import_banner.printBanner)();
+    (0, import_help.printColoredHelp)();
+    process.exit(0);
+  }
+});
+(0, import_help.register)(program);
 if (process.argv.length === 2) {
-  (0, import_banner.printBanner)();
-  (0, import_help.printColoredHelp)();
-  process.exit(0);
+  if (process.stdout.isTTY) {
+    (0, import_help.printInteractiveHelp)();
+  } else {
+    (0, import_banner.printBanner)();
+    (0, import_help.printColoredHelp)();
+    process.exit(0);
+  }
+} else if (process.argv.includes("--help") || process.argv.includes("-h")) {
+  if (process.stdout.isTTY) {
+    (0, import_help.printInteractiveHelp)();
+  } else {
+    (0, import_banner.printBanner)();
+    (0, import_help.printColoredHelp)();
+    process.exit(0);
+  }
+} else {
+  program.parse(process.argv);
 }
-(0, import_help.register)(program);
-program.parse(process.argv);
 //# sourceMappingURL=kirograph.js.map

package/dist/bin/kirograph.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/bin/kirograph.ts"],
-  "sourcesContent": ["#!/usr/bin/env node\n/**\n * KiroGraph CLI\n */\n\nimport { Command } from 'commander';\nimport { printBanner } from './banner';\nimport { printColoredHelp, register as registerHelp } from './commands/help';\nimport { register as registerInit } from './commands/init';\nimport { register as registerUninit } from './commands/uninit';\nimport { register as registerIndex } from './commands/index';\nimport { register as registerSync } from './commands/sync';\nimport { register as registerStatus } from './commands/status';\nimport { register as registerQuery } from './commands/query';\nimport { register as registerFiles } from './commands/files';\nimport { register as registerContext } from './commands/context';\nimport { register as registerAffected } from './commands/affected';\nimport { register as registerMarkDirty } from './commands/mark-dirty';\nimport { register as registerSyncIfDirty } from './commands/sync-if-dirty';\nimport { register as registerUnlock } from './commands/unlock';\nimport { register as registerInstall } from './commands/install';\nimport { register as registerServe } from './commands/serve';\nimport { register as registerDashboard } from './commands/dashboard';\nimport { register as registerArchitecture } from './commands/architecture';\nimport { register as registerCoupling } from './commands/coupling';\nimport { register as registerPackage } from './commands/package';\nimport { register as registerCaveman } from './commands/caveman';\nimport { register as registerDeadCode } from './commands/dead-code';\nimport { register as registerHotspots } from './commands/hotspots';\nimport { register as registerSurprising } from './commands/surprising';\nimport { register as registerSnapshot } from './commands/snapshot';\nimport { register as registerPath } from './commands/path';\nimport { register as registerExport } from './commands/export';\nimport { register as registerGain } from './commands/gain';\nimport { register as registerCompression } from './commands/compression';\nimport { register as registerExec } from './commands/exec';\nimport { register as registerMemory } from './commands/memory';\nimport { register as registerDocs } from './commands/docs';\nimport { register as registerData } from './commands/data';\n\n// \u2500\u2500 Global error handler for WASM runtime crashes \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n//\n// node-sqlite3-wasm calls process.abort() when it hits a fatal error (e.g.\n// database is locked by another process). This produces a raw \"Aborted()\"\n// message with no context. We intercept it here to print a clear explanation\n// before the process exits.\nprocess.on('uncaughtException', (err: Error) => {\n  const msg = err?.message ?? String(err);\n  const isWasmAbort = msg.includes('Aborted(') || msg.includes('RuntimeError') || (err as any)?.constructor?.name === 'RuntimeError';\n\n  if (isWasmAbort) {\n    process.stderr.write([\n      '',\n      '  \u2716 KiroGraph crashed: SQLite WASM runtime aborted.',\n      '',\n      '  Most likely cause: another process (e.g. the Kiro MCP server) is',\n      '  holding the database open while indexing is running.',\n      '',\n      '  How to fix:',\n      '    1. Close Kiro IDE (or disable the kirograph MCP server) before indexing',\n      '    2. Run: kirograph unlock',\n      '    3. Then retry: kirograph index',\n      '',\n      '  If the problem persists, delete the lock manually:',\n      '    del .kirograph\\\\kirograph.db.lock  (Windows)',\n      '    rm -rf .kirograph/kirograph.db.lock  (macOS/Linux)',\n      '',\n    ].join('\\n'));\n    process.exit(1);\n  }\n\n  // Not a WASM crash \u2014 re-throw as normal\n  process.stderr.write(`Uncaught error: ${msg}\\n`);\n  process.exit(1);\n});\n\ndeclare const __CLI_VERSION__: string;\n\nconst program = new Command();\n\nprogram\n  .name('kirograph')\n  .description('Semantic code knowledge graph for Kiro')\n  .version(__CLI_VERSION__)\n  .addHelpCommand(true)\n  .hook('preAction', (thisCommand) => {\n    const name = thisCommand.name();\n    if (name === 'init') printBanner();\n  });\n\nregisterInstall(program);\nregisterInit(program);\nregisterUninit(program);\nregisterIndex(program);\nregisterSync(program);\nregisterSyncIfDirty(program);\nregisterMarkDirty(program);\nregisterStatus(program);\nregisterQuery(program);\nregisterContext(program);\nregisterFiles(program);\nregisterAffected(program);\nregisterUnlock(program);\nregisterServe(program);\nregisterDashboard(program);\nregisterArchitecture(program);\nregisterCoupling(program);\nregisterPackage(program);\nregisterCaveman(program);\nregisterDeadCode(program);\nregisterHotspots(program);\nregisterSurprising(program);\nregisterSnapshot(program);\nregisterPath(program);\nregisterExport(program);\nregisterGain(program);\nregisterCompression(program);\nregisterExec(program);\nregisterMemory(program);\nregisterDocs(program);\nregisterData(program);\n\n// Show banner + help when called with no arguments, otherwise parse normally\nif (process.argv.length === 2) {\n  printBanner();\n  printColoredHelp();\n  process.exit(0);\n}\n\nregisterHelp(program);\n\nprogram.parse(process.argv);\n"],
-  "mappings": ";;AAKA,uBAAwB;AACxB,oBAA4B;AAC5B,kBAA2D;AAC3D,kBAAyC;AACzC,oBAA2C;AAC3C,sBAA0C;AAC1C,kBAAyC;AACzC,oBAA2C;AAC3C,mBAA0C;AAC1C,mBAA0C;AAC1C,qBAA4C;AAC5C,sBAA6C;AAC7C,wBAA8C;AAC9C,2BAAgD;AAChD,oBAA2C;AAC3C,qBAA4C;AAC5C,mBAA0C;AAC1C,uBAA8C;AAC9C,0BAAiD;AACjD,sBAA6C;AAC7C,qBAA4C;AAC5C,qBAA4C;AAC5C,uBAA6C;AAC7C,sBAA6C;AAC7C,wBAA+C;AAC/C,sBAA6C;AAC7C,kBAAyC;AACzC,oBAA2C;AAC3C,kBAAyC;AACzC,yBAAgD;AAChD,kBAAyC;AACzC,oBAA2C;AAC3C,kBAAyC;AACzC,kBAAyC;AAQzC,QAAQ,GAAG,qBAAqB,CAAC,QAAe;AAC9C,QAAM,MAAM,KAAK,WAAW,OAAO,GAAG;AACtC,QAAM,cAAc,IAAI,SAAS,UAAU,KAAK,IAAI,SAAS,cAAc,KAAM,KAAa,aAAa,SAAS;AAEpH,MAAI,aAAa;AACf,YAAQ,OAAO,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI,CAAC;AACZ,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,UAAQ,OAAO,MAAM,mBAAmB,GAAG;AAAA,CAAI;AAC/C,UAAQ,KAAK,CAAC;AAChB,CAAC;AAID,MAAM,UAAU,IAAI,yBAAQ;AAE5B,QACG,KAAK,WAAW,EAChB,YAAY,wCAAwC,EACpD,QAAQ,QAAe,EACvB,eAAe,IAAI,EACnB,KAAK,aAAa,CAAC,gBAAgB;AAClC,QAAM,OAAO,YAAY,KAAK;AAC9B,MAAI,SAAS,OAAQ,gCAAY;AACnC,CAAC;AAAA,IAEH,eAAAA,UAAgB,OAAO;AAAA,IACvB,YAAAC,UAAa,OAAO;AAAA,IACpB,cAAAC,UAAe,OAAO;AAAA,IACtB,gBAAAC,UAAc,OAAO;AAAA,IACrB,YAAAC,UAAa,OAAO;AAAA,IACpB,qBAAAC,UAAoB,OAAO;AAAA,IAC3B,kBAAAC,UAAkB,OAAO;AAAA,IACzB,cAAAC,UAAe,OAAO;AAAA,IACtB,aAAAC,UAAc,OAAO;AAAA,IACrB,eAAAC,UAAgB,OAAO;AAAA,IACvB,aAAAC,UAAc,OAAO;AAAA,IACrB,gBAAAC,UAAiB,OAAO;AAAA,IACxB,cAAAC,UAAe,OAAO;AAAA,IACtB,aAAAC,UAAc,OAAO;AAAA,IACrB,iBAAAC,UAAkB,OAAO;AAAA,IACzB,oBAAAC,UAAqB,OAAO;AAAA,IAC5B,gBAAAC,UAAiB,OAAO;AAAA,IACxB,eAAAC,UAAgB,OAAO;AAAA,IACvB,eAAAC,UAAgB,OAAO;AAAA,IACvB,iBAAAC,UAAiB,OAAO;AAAA,IACxB,gBAAAC,UAAiB,OAAO;AAAA,IACxB,kBAAAC,UAAmB,OAAO;AAAA,IAC1B,gBAAAC,UAAiB,OAAO;AAAA,IACxB,YAAAC,UAAa,OAAO;AAAA,IACpB,cAAAC,UAAe,OAAO;AAAA,IACtB,YAAAC,UAAa,OAAO;AAAA,IACpB,mBAAAC,UAAoB,OAAO;AAAA,IAC3B,YAAAC,UAAa,OAAO;AAAA,IACpB,cAAAC,UAAe,OAAO;AAAA,IACtB,YAAAC,UAAa,OAAO;AAAA,IACpB,YAAAC,UAAa,OAAO;AAGpB,IAAI,QAAQ,KAAK,WAAW,GAAG;AAC7B,iCAAY;AACZ,oCAAiB;AACjB,UAAQ,KAAK,CAAC;AAChB;AAAA,IAEA,YAAAC,UAAa,OAAO;AAEpB,QAAQ,MAAM,QAAQ,IAAI;",
-  "names": ["registerInstall", "registerInit", "registerUninit", "registerIndex", "registerSync", "registerSyncIfDirty", "registerMarkDirty", "registerStatus", "registerQuery", "registerContext", "registerFiles", "registerAffected", "registerUnlock", "registerServe", "registerDashboard", "registerArchitecture", "registerCoupling", "registerPackage", "registerCaveman", "registerDeadCode", "registerHotspots", "registerSurprising", "registerSnapshot", "registerPath", "registerExport", "registerGain", "registerCompression", "registerExec", "registerMemory", "registerDocs", "registerData", "registerHelp"]
+  "sourcesContent": ["#!/usr/bin/env node\n/**\n * KiroGraph CLI\n */\n\nimport { Command } from 'commander';\nimport { printBanner } from './banner';\nimport { printColoredHelp, printInteractiveHelp, register as registerHelp } from './commands/help';\nimport { register as registerInit } from './commands/init';\nimport { register as registerUninit } from './commands/uninit';\nimport { register as registerIndex } from './commands/index';\nimport { register as registerSync } from './commands/sync';\nimport { register as registerStatus } from './commands/status';\nimport { register as registerQuery } from './commands/query';\nimport { register as registerFiles } from './commands/files';\nimport { register as registerContext } from './commands/context';\nimport { register as registerAffected } from './commands/affected';\nimport { register as registerMarkDirty } from './commands/mark-dirty';\nimport { register as registerSyncIfDirty } from './commands/sync-if-dirty';\nimport { register as registerUnlock } from './commands/unlock';\nimport { register as registerInstall } from './commands/install';\nimport { register as registerServe } from './commands/serve';\nimport { register as registerDashboard } from './commands/dashboard';\nimport { register as registerArchitecture } from './commands/architecture';\nimport { register as registerCoupling } from './commands/coupling';\nimport { register as registerPackage } from './commands/package';\nimport { register as registerCaveman } from './commands/caveman';\nimport { register as registerDeadCode } from './commands/dead-code';\nimport { register as registerHotspots } from './commands/hotspots';\nimport { register as registerSurprising } from './commands/surprising';\nimport { register as registerSnapshot } from './commands/snapshot';\nimport { register as registerPath } from './commands/path';\nimport { register as registerExport } from './commands/export';\nimport { register as registerGain } from './commands/gain';\nimport { register as registerCompression } from './commands/compression';\nimport { register as registerExec } from './commands/exec';\nimport { register as registerMemory } from './commands/memory';\nimport { register as registerDocs } from './commands/docs';\nimport { register as registerData } from './commands/data';\nimport { register as registerBenchmark } from './commands/benchmark';\nimport { register as registerFlows } from './commands/flows';\nimport { register as registerCommunities } from './commands/communities';\nimport { register as registerRefactor } from './commands/refactor';\nimport { register as registerRead } from './commands/read';\nimport { register as registerBudget } from './commands/budget';\nimport { register as registerSecurity } from './commands/security';\nimport { register as registerSbom } from './commands/sbom';\nimport { register as registerVex } from './commands/vex';\nimport { register as registerVulns } from './commands/vulns';\nimport { register as registerReachability } from './commands/reachability';\nimport { register as registerStaleness } from './commands/staleness';\nimport { register as registerLicenses } from './commands/licenses';\nimport { register as registerSecurityExport } from './commands/security-export';\nimport { register as registerVulnSuppress } from './commands/vuln-suppress';\nimport { register as registerAttackSurface } from './commands/attack-surface';\nimport { register as registerSecuritySecrets } from './commands/security-secrets';\nimport { register as registerSecurityFlows } from './commands/security-flows';\nimport { register as registerSecurityCiReport } from './commands/security-ci-report';\nimport { register as registerSupplyChain } from './commands/supply-chain';\nimport { register as registerDepConfusion } from './commands/dep-confusion';\nimport { register as registerRemediation } from './commands/remediation';\n\n// \u2500\u2500 Global error handler for WASM runtime crashes \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n//\n// node-sqlite3-wasm calls process.abort() when it hits a fatal error (e.g.\n// database is locked by another process). This produces a raw \"Aborted()\"\n// message with no context. We intercept it here to print a clear explanation\n// before the process exits.\nprocess.on('uncaughtException', (err: Error) => {\n  const msg = err?.message ?? String(err);\n  const isWasmAbort = msg.includes('Aborted(') || msg.includes('RuntimeError') || (err as any)?.constructor?.name === 'RuntimeError';\n\n  if (isWasmAbort) {\n    process.stderr.write([\n      '',\n      '  \u2716 KiroGraph crashed: SQLite WASM runtime aborted.',\n      '',\n      '  Most likely cause: another process (e.g. the Kiro MCP server) is',\n      '  holding the database open while indexing is running.',\n      '',\n      '  How to fix:',\n      '    1. Close Kiro IDE (or disable the kirograph MCP server) before indexing',\n      '    2. Run: kirograph unlock',\n      '    3. Then retry: kirograph index',\n      '',\n      '  If the problem persists, delete the lock manually:',\n      '    del .kirograph\\\\kirograph.db.lock  (Windows)',\n      '    rm -rf .kirograph/kirograph.db.lock  (macOS/Linux)',\n      '',\n    ].join('\\n'));\n    process.exit(1);\n  }\n\n  // Not a WASM crash \u2014 re-throw as normal\n  process.stderr.write(`Uncaught error: ${msg}\\n`);\n  process.exit(1);\n});\n\ndeclare const __CLI_VERSION__: string;\n\nconst program = new Command();\n\nprogram\n  .name('kirograph')\n  .description('Semantic code knowledge graph for Kiro')\n  .version(__CLI_VERSION__)\n  .addHelpCommand(true)\n  .hook('preAction', (thisCommand) => {\n    const name = thisCommand.name();\n    if (name === 'init') printBanner();\n  });\n\nregisterInstall(program);\nregisterInit(program);\nregisterUninit(program);\nregisterIndex(program);\nregisterSync(program);\nregisterSyncIfDirty(program);\nregisterMarkDirty(program);\nregisterStatus(program);\nregisterQuery(program);\nregisterContext(program);\nregisterFiles(program);\nregisterAffected(program);\nregisterUnlock(program);\nregisterServe(program);\nregisterDashboard(program);\nregisterArchitecture(program);\nregisterCoupling(program);\nregisterPackage(program);\nregisterCaveman(program);\nregisterDeadCode(program);\nregisterHotspots(program);\nregisterSurprising(program);\nregisterSnapshot(program);\nregisterPath(program);\nregisterExport(program);\nregisterGain(program);\nregisterCompression(program);\nregisterExec(program);\nregisterMemory(program);\nregisterDocs(program);\nregisterData(program);\nregisterBenchmark(program);\nregisterFlows(program);\nregisterCommunities(program);\nregisterRefactor(program);\nregisterRead(program);\nregisterBudget(program);\nconst securityCmd = registerSecurity(program);\nregisterSbom(program);\nregisterVex(program);\nregisterVulns(program);\nregisterReachability(program);\nregisterStaleness(program);\nregisterLicenses(program);\nregisterSecurityExport(securityCmd);\nregisterSecuritySecrets(securityCmd);\nregisterSecurityFlows(securityCmd);\nregisterSecurityCiReport(securityCmd);\nregisterVulnSuppress(program);\nregisterAttackSurface(program);\nregisterSupplyChain(program);\nregisterDepConfusion(program);\nregisterRemediation(program);\n\n// Register the help command for `kirograph help`\nprogram\n  .command('help')\n  .description('Show interactive help')\n  .action(() => {\n    if (process.stdout.isTTY) {\n      printInteractiveHelp();\n    } else {\n      printBanner();\n      printColoredHelp();\n      process.exit(0);\n    }\n  });\n\nregisterHelp(program);\n\n// Show interactive help when called with no arguments\nif (process.argv.length === 2) {\n  if (process.stdout.isTTY) {\n    printInteractiveHelp();\n  } else {\n    printBanner();\n    printColoredHelp();\n    process.exit(0);\n  }\n} else if (process.argv.includes('--help') || process.argv.includes('-h')) {\n  // Intercept --help before Commander to avoid process.exit\n  if (process.stdout.isTTY) {\n    printInteractiveHelp();\n  } else {\n    printBanner();\n    printColoredHelp();\n    process.exit(0);\n  }\n} else {\n  program.parse(process.argv);\n}\n"],
+  "mappings": ";;AAKA,uBAAwB;AACxB,oBAA4B;AAC5B,kBAAiF;AACjF,kBAAyC;AACzC,oBAA2C;AAC3C,sBAA0C;AAC1C,kBAAyC;AACzC,oBAA2C;AAC3C,mBAA0C;AAC1C,mBAA0C;AAC1C,qBAA4C;AAC5C,sBAA6C;AAC7C,wBAA8C;AAC9C,2BAAgD;AAChD,oBAA2C;AAC3C,qBAA4C;AAC5C,mBAA0C;AAC1C,uBAA8C;AAC9C,0BAAiD;AACjD,sBAA6C;AAC7C,qBAA4C;AAC5C,qBAA4C;AAC5C,uBAA6C;AAC7C,sBAA6C;AAC7C,wBAA+C;AAC/C,sBAA6C;AAC7C,kBAAyC;AACzC,oBAA2C;AAC3C,kBAAyC;AACzC,yBAAgD;AAChD,kBAAyC;AACzC,oBAA2C;AAC3C,kBAAyC;AACzC,kBAAyC;AACzC,uBAA8C;AAC9C,mBAA0C;AAC1C,yBAAgD;AAChD,sBAA6C;AAC7C,kBAAyC;AACzC,oBAA2C;AAC3C,sBAA6C;AAC7C,kBAAyC;AACzC,iBAAwC;AACxC,mBAA0C;AAC1C,0BAAiD;AACjD,uBAA8C;AAC9C,sBAA6C;AAC7C,6BAAmD;AACnD,2BAAiD;AACjD,4BAAkD;AAClD,8BAAoD;AACpD,4BAAkD;AAClD,gCAAqD;AACrD,0BAAgD;AAChD,2BAAiD;AACjD,yBAAgD;AAQhD,QAAQ,GAAG,qBAAqB,CAAC,QAAe;AAC9C,QAAM,MAAM,KAAK,WAAW,OAAO,GAAG;AACtC,QAAM,cAAc,IAAI,SAAS,UAAU,KAAK,IAAI,SAAS,cAAc,KAAM,KAAa,aAAa,SAAS;AAEpH,MAAI,aAAa;AACf,YAAQ,OAAO,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI,CAAC;AACZ,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,UAAQ,OAAO,MAAM,mBAAmB,GAAG;AAAA,CAAI;AAC/C,UAAQ,KAAK,CAAC;AAChB,CAAC;AAID,MAAM,UAAU,IAAI,yBAAQ;AAE5B,QACG,KAAK,WAAW,EAChB,YAAY,wCAAwC,EACpD,QAAQ,QAAe,EACvB,eAAe,IAAI,EACnB,KAAK,aAAa,CAAC,gBAAgB;AAClC,QAAM,OAAO,YAAY,KAAK;AAC9B,MAAI,SAAS,OAAQ,gCAAY;AACnC,CAAC;AAAA,IAEH,eAAAA,UAAgB,OAAO;AAAA,IACvB,YAAAC,UAAa,OAAO;AAAA,IACpB,cAAAC,UAAe,OAAO;AAAA,IACtB,gBAAAC,UAAc,OAAO;AAAA,IACrB,YAAAC,UAAa,OAAO;AAAA,IACpB,qBAAAC,UAAoB,OAAO;AAAA,IAC3B,kBAAAC,UAAkB,OAAO;AAAA,IACzB,cAAAC,UAAe,OAAO;AAAA,IACtB,aAAAC,UAAc,OAAO;AAAA,IACrB,eAAAC,UAAgB,OAAO;AAAA,IACvB,aAAAC,UAAc,OAAO;AAAA,IACrB,gBAAAC,UAAiB,OAAO;AAAA,IACxB,cAAAC,UAAe,OAAO;AAAA,IACtB,aAAAC,UAAc,OAAO;AAAA,IACrB,iBAAAC,UAAkB,OAAO;AAAA,IACzB,oBAAAC,UAAqB,OAAO;AAAA,IAC5B,gBAAAC,UAAiB,OAAO;AAAA,IACxB,eAAAC,UAAgB,OAAO;AAAA,IACvB,eAAAC,UAAgB,OAAO;AAAA,IACvB,iBAAAC,UAAiB,OAAO;AAAA,IACxB,gBAAAC,UAAiB,OAAO;AAAA,IACxB,kBAAAC,UAAmB,OAAO;AAAA,IAC1B,gBAAAC,UAAiB,OAAO;AAAA,IACxB,YAAAC,UAAa,OAAO;AAAA,IACpB,cAAAC,UAAe,OAAO;AAAA,IACtB,YAAAC,UAAa,OAAO;AAAA,IACpB,mBAAAC,UAAoB,OAAO;AAAA,IAC3B,YAAAC,UAAa,OAAO;AAAA,IACpB,cAAAC,UAAe,OAAO;AAAA,IACtB,YAAAC,UAAa,OAAO;AAAA,IACpB,YAAAC,UAAa,OAAO;AAAA,IACpB,iBAAAC,UAAkB,OAAO;AAAA,IACzB,aAAAC,UAAc,OAAO;AAAA,IACrB,mBAAAC,UAAoB,OAAO;AAAA,IAC3B,gBAAAC,UAAiB,OAAO;AAAA,IACxB,YAAAC,UAAa,OAAO;AAAA,IACpB,cAAAC,UAAe,OAAO;AACtB,MAAM,kBAAc,gBAAAC,UAAiB,OAAO;AAAA,IAC5C,YAAAC,UAAa,OAAO;AAAA,IACpB,WAAAC,UAAY,OAAO;AAAA,IACnB,aAAAC,UAAc,OAAO;AAAA,IACrB,oBAAAC,UAAqB,OAAO;AAAA,IAC5B,iBAAAC,UAAkB,OAAO;AAAA,IACzB,gBAAAC,UAAiB,OAAO;AAAA,IACxB,uBAAAC,UAAuB,WAAW;AAAA,IAClC,wBAAAC,UAAwB,WAAW;AAAA,IACnC,sBAAAC,UAAsB,WAAW;AAAA,IACjC,0BAAAC,UAAyB,WAAW;AAAA,IACpC,qBAAAC,UAAqB,OAAO;AAAA,IAC5B,sBAAAC,UAAsB,OAAO;AAAA,IAC7B,oBAAAC,UAAoB,OAAO;AAAA,IAC3B,qBAAAC,UAAqB,OAAO;AAAA,IAC5B,mBAAAC,UAAoB,OAAO;AAG3B,QACG,QAAQ,MAAM,EACd,YAAY,uBAAuB,EACnC,OAAO,MAAM;AACZ,MAAI,QAAQ,OAAO,OAAO;AACxB,0CAAqB;AAAA,EACvB,OAAO;AACL,mCAAY;AACZ,sCAAiB;AACjB,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAAA,IAEH,YAAAC,UAAa,OAAO;AAGpB,IAAI,QAAQ,KAAK,WAAW,GAAG;AAC7B,MAAI,QAAQ,OAAO,OAAO;AACxB,0CAAqB;AAAA,EACvB,OAAO;AACL,mCAAY;AACZ,sCAAiB;AACjB,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,WAAW,QAAQ,KAAK,SAAS,QAAQ,KAAK,QAAQ,KAAK,SAAS,IAAI,GAAG;AAEzE,MAAI,QAAQ,OAAO,OAAO;AACxB,0CAAqB;AAAA,EACvB,OAAO;AACL,mCAAY;AACZ,sCAAiB;AACjB,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,OAAO;AACL,UAAQ,MAAM,QAAQ,IAAI;AAC5B;",
+  "names": ["registerInstall", "registerInit", "registerUninit", "registerIndex", "registerSync", "registerSyncIfDirty", "registerMarkDirty", "registerStatus", "registerQuery", "registerContext", "registerFiles", "registerAffected", "registerUnlock", "registerServe", "registerDashboard", "registerArchitecture", "registerCoupling", "registerPackage", "registerCaveman", "registerDeadCode", "registerHotspots", "registerSurprising", "registerSnapshot", "registerPath", "registerExport", "registerGain", "registerCompression", "registerExec", "registerMemory", "registerDocs", "registerData", "registerBenchmark", "registerFlows", "registerCommunities", "registerRefactor", "registerRead", "registerBudget", "registerSecurity", "registerSbom", "registerVex", "registerVulns", "registerReachability", "registerStaleness", "registerLicenses", "registerSecurityExport", "registerSecuritySecrets", "registerSecurityFlows", "registerSecurityCiReport", "registerVulnSuppress", "registerAttackSurface", "registerSupplyChain", "registerDepConfusion", "registerRemediation", "registerHelp"]
 }

package/dist/compression/tracker.js

@@ -28,6 +28,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var tracker_exports = {};
 __export(tracker_exports, {
+  BudgetTracker: () => BudgetTracker,
   TokenTracker: () => TokenTracker
 });
 module.exports = __toCommonJS(tracker_exports);
@@ -253,8 +254,87 @@ class TokenTracker {
     }
   }
 }
+const DEFAULT_BUDGET = {
+  maxTokensPerSession: 1e5,
+  warnAt: 8e4,
+  throttleAt: 95e3
+};
+class BudgetTracker {
+  constructor(projectRoot, config) {
+    this.consumed = 0;
+    this.projectRoot = projectRoot;
+    this.config = { ...DEFAULT_BUDGET, ...config };
+  }
+  static {
+    this.instances = /* @__PURE__ */ new Map();
+  }
+  static getInstance(projectRoot, config) {
+    const key = projectRoot;
+    if (!BudgetTracker.instances.has(key)) {
+      BudgetTracker.instances.set(key, new BudgetTracker(projectRoot, config));
+    }
+    const instance = BudgetTracker.instances.get(key);
+    if (config) {
+      instance.config = { ...DEFAULT_BUDGET, ...config };
+    }
+    return instance;
+  }
+  /**
+   * Record tokens consumed by a tool response.
+   */
+  recordConsumption(tokens) {
+    this.consumed += tokens;
+  }
+  /**
+   * Get current budget status.
+   */
+  getStatus() {
+    const limit = this.config.maxTokensPerSession;
+    const remaining = Math.max(0, limit - this.consumed);
+    const utilization = limit > 0 ? Math.round(this.consumed / limit * 100) : 0;
+    let warning = null;
+    if (limit > 0 && this.consumed >= this.config.throttleAt) {
+      warning = `Budget nearly exhausted (${utilization}%). Responses will be truncated.`;
+    } else if (limit > 0 && this.consumed >= this.config.warnAt) {
+      warning = `Approaching budget limit (${utilization}%). Consider using compact read modes.`;
+    }
+    return {
+      consumed: this.consumed,
+      limit,
+      remaining,
+      utilization,
+      warning,
+      throttled: limit > 0 && this.consumed >= this.config.throttleAt
+    };
+  }
+  /**
+   * Check if the budget is throttled (responses should be truncated).
+   */
+  isThrottled() {
+    return this.config.maxTokensPerSession > 0 && this.consumed >= this.config.throttleAt;
+  }
+  /**
+   * Check if a warning should be appended to responses.
+   */
+  shouldWarn() {
+    return this.config.maxTokensPerSession > 0 && this.consumed >= this.config.warnAt;
+  }
+  /**
+   * Reset the budget counters.
+   */
+  reset() {
+    this.consumed = 0;
+  }
+  /**
+   * Update budget configuration.
+   */
+  updateConfig(config) {
+    this.config = { ...this.config, ...config };
+  }
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  BudgetTracker,
   TokenTracker
 });
 //# sourceMappingURL=tracker.js.map

package/dist/compression/tracker.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/compression/tracker.ts"],
-  "sourcesContent": ["/**\n * KiroGraph Token Savings Tracker\n *\n * Records compression results to a local JSON file for analytics.\n * Uses a simple append-only JSON lines file to avoid SQLite dependency\n * in the compression module (keeps it lightweight and independent).\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\nimport type { TokenSavingsRecord } from './types';\n\nconst TRACKER_DIR = '.kirograph';\nconst TRACKER_FILE = 'token-savings.jsonl';\nconst MAX_RECORDS = 5000; // Rotate after this many records\n\nexport interface GainStats {\n  totalCommands: number;\n  totalOriginal: number;\n  totalCompressed: number;\n  totalSaved: number;\n  savingsPercent: number;\n  byFamily: Record<string, { count: number; savings: number }>;\n  recentCommands: Array<{ command: string; savings: number; timestamp: number; source?: string }>;\n  /** Breakdown by source type */\n  bySource: {\n    exec: { count: number; saved: number };\n    graph: { count: number; saved: number };\n    memory: { count: number; saved: number };\n    docs: { count: number; saved: number };\n    data: { count: number; saved: number };\n  };\n}\n\nexport class TokenTracker {\n  private filePath: string;\n  private sessionId: string;\n\n  constructor(projectRoot: string) {\n    const dir = path.join(projectRoot, TRACKER_DIR);\n    fs.mkdirSync(dir, { recursive: true });\n    this.filePath = path.join(dir, TRACKER_FILE);\n    this.sessionId = this.getOrCreateSessionId(dir);\n  }\n\n  private getOrCreateSessionId(dir: string): string {\n    const sessionFile = path.join(dir, '.session-id');\n    try {\n      const existing = fs.readFileSync(sessionFile, 'utf8').trim();\n      if (existing) return existing;\n    } catch { /* file doesn't exist */ }\n\n    const id = crypto.randomBytes(8).toString('hex');\n    try {\n      fs.writeFileSync(sessionFile, id, 'utf8');\n    } catch { /* ignore write errors */ }\n    return id;\n  }\n\n  /**\n   * Record a compression result.\n   */\n  record(command: string, originalTokens: number, compressedTokens: number, strategy: string, source: 'exec' | 'graph' | 'memory' | 'docs' | 'data' = 'exec'): void {\n    const record: TokenSavingsRecord = {\n      timestamp: Date.now(),\n      command: command.slice(0, 200), // Truncate long commands\n      originalTokens,\n      compressedTokens,\n      strategy,\n      sessionId: this.sessionId,\n      source,\n    };\n\n    try {\n      fs.appendFileSync(this.filePath, JSON.stringify(record) + '\\n', 'utf8');\n      this.maybeRotate();\n    } catch {\n      // Non-critical \u2014 don't crash on tracking failure\n    }\n  }\n\n  /**\n   * Record a graph tool saving.\n   * @param toolName - The MCP tool that was called\n   * @param outputTokens - Actual tokens returned by the tool\n   * @param naiveCost - Estimated tokens the agent would have used without the tool\n   */\n  recordGraphSaving(toolName: string, outputTokens: number, naiveCost: number): void {\n    this.record(toolName, naiveCost, outputTokens, `graph:${toolName}`, 'graph');\n  }\n\n  /**\n   * Record a memory tool saving.\n   * @param toolName - The MCP tool that was called\n   * @param outputTokens - Actual tokens returned by the tool\n   * @param naiveCost - Estimated tokens the agent would have used without memory\n   */\n  recordMemorySaving(toolName: string, outputTokens: number, naiveCost: number): void {\n    this.record(toolName, naiveCost, outputTokens, `memory:${toolName}`, 'memory');\n  }\n\n  /**\n   * Record a docs tool saving.\n   * @param toolName - The MCP tool that was called\n   * @param outputTokens - Actual tokens returned by the tool\n   * @param naiveCost - Estimated tokens the agent would have used without docs indexing\n   */\n  recordDocsSaving(toolName: string, outputTokens: number, naiveCost: number): void {\n    this.record(toolName, naiveCost, outputTokens, `docs:${toolName}`, 'docs');\n  }\n\n  /**\n   * Record a data tool saving.\n   * @param toolName - The MCP tool that was called\n   * @param outputTokens - Actual tokens returned by the tool\n   * @param naiveCost - Estimated tokens the agent would have used without data indexing\n   */\n  recordDataSaving(toolName: string, outputTokens: number, naiveCost: number): void {\n    this.record(toolName, naiveCost, outputTokens, `data:${toolName}`, 'data');\n  }\n\n  /**\n   * Get aggregated statistics for a time period.\n   */\n  getStats(period: 'session' | 'today' | 'week' | 'all'): GainStats {\n    const records = this.loadRecords(period);\n\n    if (records.length === 0) {\n      return {\n        totalCommands: 0,\n        totalOriginal: 0,\n        totalCompressed: 0,\n        totalSaved: 0,\n        savingsPercent: 0,\n        byFamily: {},\n        recentCommands: [],\n        bySource: { exec: { count: 0, saved: 0 }, graph: { count: 0, saved: 0 }, memory: { count: 0, saved: 0 }, docs: { count: 0, saved: 0 }, data: { count: 0, saved: 0 } },\n      };\n    }\n\n    let totalOriginal = 0;\n    let totalCompressed = 0;\n    const byFamily = new Map<string, { count: number; totalOriginal: number; totalCompressed: number }>();\n    const bySource = { exec: { count: 0, saved: 0 }, graph: { count: 0, saved: 0 }, memory: { count: 0, saved: 0 }, docs: { count: 0, saved: 0 }, data: { count: 0, saved: 0 } };\n\n    for (const r of records) {\n      totalOriginal += r.originalTokens;\n      totalCompressed += r.compressedTokens;\n\n      const family = this.extractFamily(r.strategy);\n      const existing = byFamily.get(family) || { count: 0, totalOriginal: 0, totalCompressed: 0 };\n      existing.count++;\n      existing.totalOriginal += r.originalTokens;\n      existing.totalCompressed += r.compressedTokens;\n      byFamily.set(family, existing);\n\n      const source = (r.source || 'exec') as 'exec' | 'graph' | 'memory' | 'docs' | 'data';\n      if (bySource[source]) {\n        bySource[source].count++;\n        bySource[source].saved += r.originalTokens - r.compressedTokens;\n      } else {\n        bySource.exec.count++;\n        bySource.exec.saved += r.originalTokens - r.compressedTokens;\n      }\n    }\n\n    const totalSaved = totalOriginal - totalCompressed;\n    const savingsPercent = totalOriginal > 0 ? Math.round((totalSaved / totalOriginal) * 100) : 0;\n\n    // Convert byFamily map to sorted object\n    const byFamilyObj: Record<string, { count: number; savings: number }> = {};\n    const sortedFamilies = [...byFamily.entries()].sort((a, b) => b[1].count - a[1].count);\n    for (const [family, data] of sortedFamilies) {\n      const familySaved = data.totalOriginal - data.totalCompressed;\n      const familyPercent = data.totalOriginal > 0 ? Math.round((familySaved / data.totalOriginal) * 100) : 0;\n      byFamilyObj[family] = { count: data.count, savings: familyPercent };\n    }\n\n    // Recent commands (last 10)\n    const recentCommands = records.slice(-10).reverse().map(r => ({\n      command: r.command,\n      savings: r.originalTokens > 0\n        ? Math.round(((r.originalTokens - r.compressedTokens) / r.originalTokens) * 100)\n        : 0,\n      timestamp: r.timestamp,\n      source: r.source,\n    }));\n\n    return {\n      totalCommands: records.length,\n      totalOriginal,\n      totalCompressed,\n      totalSaved,\n      savingsPercent,\n      byFamily: byFamilyObj,\n      recentCommands,\n      bySource,\n    };\n  }\n\n  /**\n   * Get raw history for CLI display.\n   */\n  getHistory(limit: number = 20): TokenSavingsRecord[] {\n    const records = this.loadRecords('all');\n    return records.slice(-limit).reverse();\n  }\n\n  /**\n   * Get daily breakdown for graph display.\n   */\n  getDailyBreakdown(days: number = 30): Array<{ date: string; commands: number; saved: number }> {\n    const records = this.loadRecords('all');\n    const now = Date.now();\n    const cutoff = now - days * 24 * 60 * 60 * 1000;\n\n    const byDay = new Map<string, { commands: number; saved: number }>();\n\n    for (const r of records) {\n      if (r.timestamp < cutoff) continue;\n      const date = new Date(r.timestamp).toISOString().slice(0, 10);\n      const existing = byDay.get(date) || { commands: 0, saved: 0 };\n      existing.commands++;\n      existing.saved += r.originalTokens - r.compressedTokens;\n      byDay.set(date, existing);\n    }\n\n    return [...byDay.entries()]\n      .sort((a, b) => a[0].localeCompare(b[0]))\n      .map(([date, data]) => ({ date, ...data }));\n  }\n\n  // \u2500\u2500 Private \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n  private loadRecords(period: 'session' | 'today' | 'week' | 'all'): TokenSavingsRecord[] {\n    if (!fs.existsSync(this.filePath)) return [];\n\n    let lines: string[];\n    try {\n      lines = fs.readFileSync(this.filePath, 'utf8').split('\\n').filter(l => l.trim());\n    } catch {\n      return [];\n    }\n\n    const records: TokenSavingsRecord[] = [];\n    for (const line of lines) {\n      try {\n        records.push(JSON.parse(line));\n      } catch {\n        // Skip malformed lines\n      }\n    }\n\n    // Filter by period\n    const now = Date.now();\n    switch (period) {\n      case 'session':\n        return records.filter(r => r.sessionId === this.sessionId);\n      case 'today': {\n        const startOfDay = new Date();\n        startOfDay.setHours(0, 0, 0, 0);\n        return records.filter(r => r.timestamp >= startOfDay.getTime());\n      }\n      case 'week':\n        return records.filter(r => r.timestamp >= now - 7 * 24 * 60 * 60 * 1000);\n      case 'all':\n        return records;\n    }\n  }\n\n  private extractFamily(strategy: string): string {\n    // \"git:status:ultra\" \u2192 \"git\"\n    // \"jest:failures\" \u2192 \"jest\"\n    const colon = strategy.indexOf(':');\n    return colon > 0 ? strategy.slice(0, colon) : strategy;\n  }\n\n  private maybeRotate(): void {\n    try {\n      const stat = fs.statSync(this.filePath);\n      // Rotate if file exceeds ~500KB\n      if (stat.size > 500 * 1024) {\n        const lines = fs.readFileSync(this.filePath, 'utf8').split('\\n').filter(l => l.trim());\n        if (lines.length > MAX_RECORDS) {\n          // Keep last half\n          const keep = lines.slice(-Math.floor(MAX_RECORDS / 2));\n          fs.writeFileSync(this.filePath, keep.join('\\n') + '\\n', 'utf8');\n        }\n      }\n    } catch {\n      // Non-critical\n    }\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAQA,SAAoB;AACpB,WAAsB;AACtB,aAAwB;AAGxB,MAAM,cAAc;AACpB,MAAM,eAAe;AACrB,MAAM,cAAc;AAoBb,MAAM,aAAa;AAAA,EAIxB,YAAY,aAAqB;AAC/B,UAAM,MAAM,KAAK,KAAK,aAAa,WAAW;AAC9C,OAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACrC,SAAK,WAAW,KAAK,KAAK,KAAK,YAAY;AAC3C,SAAK,YAAY,KAAK,qBAAqB,GAAG;AAAA,EAChD;AAAA,EAEQ,qBAAqB,KAAqB;AAChD,UAAM,cAAc,KAAK,KAAK,KAAK,aAAa;AAChD,QAAI;AACF,YAAM,WAAW,GAAG,aAAa,aAAa,MAAM,EAAE,KAAK;AAC3D,UAAI,SAAU,QAAO;AAAA,IACvB,QAAQ;AAAA,IAA2B;AAEnC,UAAM,KAAK,OAAO,YAAY,CAAC,EAAE,SAAS,KAAK;AAC/C,QAAI;AACF,SAAG,cAAc,aAAa,IAAI,MAAM;AAAA,IAC1C,QAAQ;AAAA,IAA4B;AACpC,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,SAAiB,gBAAwB,kBAA0B,UAAkB,SAAwD,QAAc;AAChK,UAAM,SAA6B;AAAA,MACjC,WAAW,KAAK,IAAI;AAAA,MACpB,SAAS,QAAQ,MAAM,GAAG,GAAG;AAAA;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,KAAK;AAAA,MAChB;AAAA,IACF;AAEA,QAAI;AACF,SAAG,eAAe,KAAK,UAAU,KAAK,UAAU,MAAM,IAAI,MAAM,MAAM;AACtE,WAAK,YAAY;AAAA,IACnB,QAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,kBAAkB,UAAkB,cAAsB,WAAyB;AACjF,SAAK,OAAO,UAAU,WAAW,cAAc,SAAS,QAAQ,IAAI,OAAO;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,mBAAmB,UAAkB,cAAsB,WAAyB;AAClF,SAAK,OAAO,UAAU,WAAW,cAAc,UAAU,QAAQ,IAAI,QAAQ;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,iBAAiB,UAAkB,cAAsB,WAAyB;AAChF,SAAK,OAAO,UAAU,WAAW,cAAc,QAAQ,QAAQ,IAAI,MAAM;AAAA,EAC3E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,iBAAiB,UAAkB,cAAsB,WAAyB;AAChF,SAAK,OAAO,UAAU,WAAW,cAAc,QAAQ,QAAQ,IAAI,MAAM;AAAA,EAC3E;AAAA;AAAA;AAAA;AAAA,EAKA,SAAS,QAAyD;AAChE,UAAM,UAAU,KAAK,YAAY,MAAM;AAEvC,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO;AAAA,QACL,eAAe;AAAA,QACf,eAAe;AAAA,QACf,iBAAiB;AAAA,QACjB,YAAY;AAAA,QACZ,gBAAgB;AAAA,QAChB,UAAU,CAAC;AAAA,QACX,gBAAgB,CAAC;AAAA,QACjB,UAAU,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,EAAE;AAAA,MACtK;AAAA,IACF;AAEA,QAAI,gBAAgB;AACpB,QAAI,kBAAkB;AACtB,UAAM,WAAW,oBAAI,IAA+E;AACpG,UAAM,WAAW,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,EAAE;AAE3K,eAAW,KAAK,SAAS;AACvB,uBAAiB,EAAE;AACnB,yBAAmB,EAAE;AAErB,YAAM,SAAS,KAAK,cAAc,EAAE,QAAQ;AAC5C,YAAM,WAAW,SAAS,IAAI,MAAM,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,iBAAiB,EAAE;AAC1F,eAAS;AACT,eAAS,iBAAiB,EAAE;AAC5B,eAAS,mBAAmB,EAAE;AAC9B,eAAS,IAAI,QAAQ,QAAQ;AAE7B,YAAM,SAAU,EAAE,UAAU;AAC5B,UAAI,SAAS,MAAM,GAAG;AACpB,iBAAS,MAAM,EAAE;AACjB,iBAAS,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE;AAAA,MACjD,OAAO;AACL,iBAAS,KAAK;AACd,iBAAS,KAAK,SAAS,EAAE,iBAAiB,EAAE;AAAA,MAC9C;AAAA,IACF;AAEA,UAAM,aAAa,gBAAgB;AACnC,UAAM,iBAAiB,gBAAgB,IAAI,KAAK,MAAO,aAAa,gBAAiB,GAAG,IAAI;AAG5F,UAAM,cAAkE,CAAC;AACzE,UAAM,iBAAiB,CAAC,GAAG,SAAS,QAAQ,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK;AACrF,eAAW,CAAC,QAAQ,IAAI,KAAK,gBAAgB;AAC3C,YAAM,cAAc,KAAK,gBAAgB,KAAK;AAC9C,YAAM,gBAAgB,KAAK,gBAAgB,IAAI,KAAK,MAAO,cAAc,KAAK,gBAAiB,GAAG,IAAI;AACtG,kBAAY,MAAM,IAAI,EAAE,OAAO,KAAK,OAAO,SAAS,cAAc;AAAA,IACpE;AAGA,UAAM,iBAAiB,QAAQ,MAAM,GAAG,EAAE,QAAQ,EAAE,IAAI,QAAM;AAAA,MAC5D,SAAS,EAAE;AAAA,MACX,SAAS,EAAE,iBAAiB,IACxB,KAAK,OAAQ,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAkB,GAAG,IAC7E;AAAA,MACJ,WAAW,EAAE;AAAA,MACb,QAAQ,EAAE;AAAA,IACZ,EAAE;AAEF,WAAO;AAAA,MACL,eAAe,QAAQ;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,WAAW,QAAgB,IAA0B;AACnD,UAAM,UAAU,KAAK,YAAY,KAAK;AACtC,WAAO,QAAQ,MAAM,CAAC,KAAK,EAAE,QAAQ;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAkB,OAAe,IAA8D;AAC7F,UAAM,UAAU,KAAK,YAAY,KAAK;AACtC,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,SAAS,MAAM,OAAO,KAAK,KAAK,KAAK;AAE3C,UAAM,QAAQ,oBAAI,IAAiD;AAEnE,eAAW,KAAK,SAAS;AACvB,UAAI,EAAE,YAAY,OAAQ;AAC1B,YAAM,OAAO,IAAI,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC5D,YAAM,WAAW,MAAM,IAAI,IAAI,KAAK,EAAE,UAAU,GAAG,OAAO,EAAE;AAC5D,eAAS;AACT,eAAS,SAAS,EAAE,iBAAiB,EAAE;AACvC,YAAM,IAAI,MAAM,QAAQ;AAAA,IAC1B;AAEA,WAAO,CAAC,GAAG,MAAM,QAAQ,CAAC,EACvB,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EACvC,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,EAAE,MAAM,GAAG,KAAK,EAAE;AAAA,EAC9C;AAAA;AAAA,EAIQ,YAAY,QAAoE;AACtF,QAAI,CAAC,GAAG,WAAW,KAAK,QAAQ,EAAG,QAAO,CAAC;AAE3C,QAAI;AACJ,QAAI;AACF,cAAQ,GAAG,aAAa,KAAK,UAAU,MAAM,EAAE,MAAM,IAAI,EAAE,OAAO,OAAK,EAAE,KAAK,CAAC;AAAA,IACjF,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,UAAgC,CAAC;AACvC,eAAW,QAAQ,OAAO;AACxB,UAAI;AACF,gBAAQ,KAAK,KAAK,MAAM,IAAI,CAAC;AAAA,MAC/B,QAAQ;AAAA,MAER;AAAA,IACF;AAGA,UAAM,MAAM,KAAK,IAAI;AACrB,YAAQ,QAAQ;AAAA,MACd,KAAK;AACH,eAAO,QAAQ,OAAO,OAAK,EAAE,cAAc,KAAK,SAAS;AAAA,MAC3D,KAAK,SAAS;AACZ,cAAM,aAAa,oBAAI,KAAK;AAC5B,mBAAW,SAAS,GAAG,GAAG,GAAG,CAAC;AAC9B,eAAO,QAAQ,OAAO,OAAK,EAAE,aAAa,WAAW,QAAQ,CAAC;AAAA,MAChE;AAAA,MACA,KAAK;AACH,eAAO,QAAQ,OAAO,OAAK,EAAE,aAAa,MAAM,IAAI,KAAK,KAAK,KAAK,GAAI;AAAA,MACzE,KAAK;AACH,eAAO;AAAA,IACX;AAAA,EACF;AAAA,EAEQ,cAAc,UAA0B;AAG9C,UAAM,QAAQ,SAAS,QAAQ,GAAG;AAClC,WAAO,QAAQ,IAAI,SAAS,MAAM,GAAG,KAAK,IAAI;AAAA,EAChD;AAAA,EAEQ,cAAoB;AAC1B,QAAI;AACF,YAAM,OAAO,GAAG,SAAS,KAAK,QAAQ;AAEtC,UAAI,KAAK,OAAO,MAAM,MAAM;AAC1B,cAAM,QAAQ,GAAG,aAAa,KAAK,UAAU,MAAM,EAAE,MAAM,IAAI,EAAE,OAAO,OAAK,EAAE,KAAK,CAAC;AACrF,YAAI,MAAM,SAAS,aAAa;AAE9B,gBAAM,OAAO,MAAM,MAAM,CAAC,KAAK,MAAM,cAAc,CAAC,CAAC;AACrD,aAAG,cAAc,KAAK,UAAU,KAAK,KAAK,IAAI,IAAI,MAAM,MAAM;AAAA,QAChE;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * KiroGraph Token Savings Tracker\n *\n * Records compression results to a local JSON file for analytics.\n * Uses a simple append-only JSON lines file to avoid SQLite dependency\n * in the compression module (keeps it lightweight and independent).\n */\n\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport * as crypto from 'crypto';\nimport type { TokenSavingsRecord } from './types';\n\nconst TRACKER_DIR = '.kirograph';\nconst TRACKER_FILE = 'token-savings.jsonl';\nconst MAX_RECORDS = 5000; // Rotate after this many records\n\nexport interface GainStats {\n  totalCommands: number;\n  totalOriginal: number;\n  totalCompressed: number;\n  totalSaved: number;\n  savingsPercent: number;\n  byFamily: Record<string, { count: number; savings: number }>;\n  recentCommands: Array<{ command: string; savings: number; timestamp: number; source?: string }>;\n  /** Breakdown by source type */\n  bySource: {\n    exec: { count: number; saved: number };\n    graph: { count: number; saved: number };\n    memory: { count: number; saved: number };\n    docs: { count: number; saved: number };\n    data: { count: number; saved: number };\n  };\n}\n\nexport class TokenTracker {\n  private filePath: string;\n  private sessionId: string;\n\n  constructor(projectRoot: string) {\n    const dir = path.join(projectRoot, TRACKER_DIR);\n    fs.mkdirSync(dir, { recursive: true });\n    this.filePath = path.join(dir, TRACKER_FILE);\n    this.sessionId = this.getOrCreateSessionId(dir);\n  }\n\n  private getOrCreateSessionId(dir: string): string {\n    const sessionFile = path.join(dir, '.session-id');\n    try {\n      const existing = fs.readFileSync(sessionFile, 'utf8').trim();\n      if (existing) return existing;\n    } catch { /* file doesn't exist */ }\n\n    const id = crypto.randomBytes(8).toString('hex');\n    try {\n      fs.writeFileSync(sessionFile, id, 'utf8');\n    } catch { /* ignore write errors */ }\n    return id;\n  }\n\n  /**\n   * Record a compression result.\n   */\n  record(command: string, originalTokens: number, compressedTokens: number, strategy: string, source: 'exec' | 'graph' | 'memory' | 'docs' | 'data' = 'exec'): void {\n    const record: TokenSavingsRecord = {\n      timestamp: Date.now(),\n      command: command.slice(0, 200), // Truncate long commands\n      originalTokens,\n      compressedTokens,\n      strategy,\n      sessionId: this.sessionId,\n      source,\n    };\n\n    try {\n      fs.appendFileSync(this.filePath, JSON.stringify(record) + '\\n', 'utf8');\n      this.maybeRotate();\n    } catch {\n      // Non-critical \u2014 don't crash on tracking failure\n    }\n  }\n\n  /**\n   * Record a graph tool saving.\n   * @param toolName - The MCP tool that was called\n   * @param outputTokens - Actual tokens returned by the tool\n   * @param naiveCost - Estimated tokens the agent would have used without the tool\n   */\n  recordGraphSaving(toolName: string, outputTokens: number, naiveCost: number): void {\n    this.record(toolName, naiveCost, outputTokens, `graph:${toolName}`, 'graph');\n  }\n\n  /**\n   * Record a memory tool saving.\n   * @param toolName - The MCP tool that was called\n   * @param outputTokens - Actual tokens returned by the tool\n   * @param naiveCost - Estimated tokens the agent would have used without memory\n   */\n  recordMemorySaving(toolName: string, outputTokens: number, naiveCost: number): void {\n    this.record(toolName, naiveCost, outputTokens, `memory:${toolName}`, 'memory');\n  }\n\n  /**\n   * Record a docs tool saving.\n   * @param toolName - The MCP tool that was called\n   * @param outputTokens - Actual tokens returned by the tool\n   * @param naiveCost - Estimated tokens the agent would have used without docs indexing\n   */\n  recordDocsSaving(toolName: string, outputTokens: number, naiveCost: number): void {\n    this.record(toolName, naiveCost, outputTokens, `docs:${toolName}`, 'docs');\n  }\n\n  /**\n   * Record a data tool saving.\n   * @param toolName - The MCP tool that was called\n   * @param outputTokens - Actual tokens returned by the tool\n   * @param naiveCost - Estimated tokens the agent would have used without data indexing\n   */\n  recordDataSaving(toolName: string, outputTokens: number, naiveCost: number): void {\n    this.record(toolName, naiveCost, outputTokens, `data:${toolName}`, 'data');\n  }\n\n  /**\n   * Get aggregated statistics for a time period.\n   */\n  getStats(period: 'session' | 'today' | 'week' | 'all'): GainStats {\n    const records = this.loadRecords(period);\n\n    if (records.length === 0) {\n      return {\n        totalCommands: 0,\n        totalOriginal: 0,\n        totalCompressed: 0,\n        totalSaved: 0,\n        savingsPercent: 0,\n        byFamily: {},\n        recentCommands: [],\n        bySource: { exec: { count: 0, saved: 0 }, graph: { count: 0, saved: 0 }, memory: { count: 0, saved: 0 }, docs: { count: 0, saved: 0 }, data: { count: 0, saved: 0 } },\n      };\n    }\n\n    let totalOriginal = 0;\n    let totalCompressed = 0;\n    const byFamily = new Map<string, { count: number; totalOriginal: number; totalCompressed: number }>();\n    const bySource = { exec: { count: 0, saved: 0 }, graph: { count: 0, saved: 0 }, memory: { count: 0, saved: 0 }, docs: { count: 0, saved: 0 }, data: { count: 0, saved: 0 } };\n\n    for (const r of records) {\n      totalOriginal += r.originalTokens;\n      totalCompressed += r.compressedTokens;\n\n      const family = this.extractFamily(r.strategy);\n      const existing = byFamily.get(family) || { count: 0, totalOriginal: 0, totalCompressed: 0 };\n      existing.count++;\n      existing.totalOriginal += r.originalTokens;\n      existing.totalCompressed += r.compressedTokens;\n      byFamily.set(family, existing);\n\n      const source = (r.source || 'exec') as 'exec' | 'graph' | 'memory' | 'docs' | 'data';\n      if (bySource[source]) {\n        bySource[source].count++;\n        bySource[source].saved += r.originalTokens - r.compressedTokens;\n      } else {\n        bySource.exec.count++;\n        bySource.exec.saved += r.originalTokens - r.compressedTokens;\n      }\n    }\n\n    const totalSaved = totalOriginal - totalCompressed;\n    const savingsPercent = totalOriginal > 0 ? Math.round((totalSaved / totalOriginal) * 100) : 0;\n\n    // Convert byFamily map to sorted object\n    const byFamilyObj: Record<string, { count: number; savings: number }> = {};\n    const sortedFamilies = [...byFamily.entries()].sort((a, b) => b[1].count - a[1].count);\n    for (const [family, data] of sortedFamilies) {\n      const familySaved = data.totalOriginal - data.totalCompressed;\n      const familyPercent = data.totalOriginal > 0 ? Math.round((familySaved / data.totalOriginal) * 100) : 0;\n      byFamilyObj[family] = { count: data.count, savings: familyPercent };\n    }\n\n    // Recent commands (last 10)\n    const recentCommands = records.slice(-10).reverse().map(r => ({\n      command: r.command,\n      savings: r.originalTokens > 0\n        ? Math.round(((r.originalTokens - r.compressedTokens) / r.originalTokens) * 100)\n        : 0,\n      timestamp: r.timestamp,\n      source: r.source,\n    }));\n\n    return {\n      totalCommands: records.length,\n      totalOriginal,\n      totalCompressed,\n      totalSaved,\n      savingsPercent,\n      byFamily: byFamilyObj,\n      recentCommands,\n      bySource,\n    };\n  }\n\n  /**\n   * Get raw history for CLI display.\n   */\n  getHistory(limit: number = 20): TokenSavingsRecord[] {\n    const records = this.loadRecords('all');\n    return records.slice(-limit).reverse();\n  }\n\n  /**\n   * Get daily breakdown for graph display.\n   */\n  getDailyBreakdown(days: number = 30): Array<{ date: string; commands: number; saved: number }> {\n    const records = this.loadRecords('all');\n    const now = Date.now();\n    const cutoff = now - days * 24 * 60 * 60 * 1000;\n\n    const byDay = new Map<string, { commands: number; saved: number }>();\n\n    for (const r of records) {\n      if (r.timestamp < cutoff) continue;\n      const date = new Date(r.timestamp).toISOString().slice(0, 10);\n      const existing = byDay.get(date) || { commands: 0, saved: 0 };\n      existing.commands++;\n      existing.saved += r.originalTokens - r.compressedTokens;\n      byDay.set(date, existing);\n    }\n\n    return [...byDay.entries()]\n      .sort((a, b) => a[0].localeCompare(b[0]))\n      .map(([date, data]) => ({ date, ...data }));\n  }\n\n  // \u2500\u2500 Private \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n  private loadRecords(period: 'session' | 'today' | 'week' | 'all'): TokenSavingsRecord[] {\n    if (!fs.existsSync(this.filePath)) return [];\n\n    let lines: string[];\n    try {\n      lines = fs.readFileSync(this.filePath, 'utf8').split('\\n').filter(l => l.trim());\n    } catch {\n      return [];\n    }\n\n    const records: TokenSavingsRecord[] = [];\n    for (const line of lines) {\n      try {\n        records.push(JSON.parse(line));\n      } catch {\n        // Skip malformed lines\n      }\n    }\n\n    // Filter by period\n    const now = Date.now();\n    switch (period) {\n      case 'session':\n        return records.filter(r => r.sessionId === this.sessionId);\n      case 'today': {\n        const startOfDay = new Date();\n        startOfDay.setHours(0, 0, 0, 0);\n        return records.filter(r => r.timestamp >= startOfDay.getTime());\n      }\n      case 'week':\n        return records.filter(r => r.timestamp >= now - 7 * 24 * 60 * 60 * 1000);\n      case 'all':\n        return records;\n    }\n  }\n\n  private extractFamily(strategy: string): string {\n    // \"git:status:ultra\" \u2192 \"git\"\n    // \"jest:failures\" \u2192 \"jest\"\n    const colon = strategy.indexOf(':');\n    return colon > 0 ? strategy.slice(0, colon) : strategy;\n  }\n\n  private maybeRotate(): void {\n    try {\n      const stat = fs.statSync(this.filePath);\n      // Rotate if file exceeds ~500KB\n      if (stat.size > 500 * 1024) {\n        const lines = fs.readFileSync(this.filePath, 'utf8').split('\\n').filter(l => l.trim());\n        if (lines.length > MAX_RECORDS) {\n          // Keep last half\n          const keep = lines.slice(-Math.floor(MAX_RECORDS / 2));\n          fs.writeFileSync(this.filePath, keep.join('\\n') + '\\n', 'utf8');\n        }\n      }\n    } catch {\n      // Non-critical\n    }\n  }\n}\n\n\n// \u2500\u2500 Context Budget Governance \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface BudgetConfig {\n  maxTokensPerSession: number;\n  warnAt: number;\n  throttleAt: number;\n}\n\nexport interface BudgetStatus {\n  consumed: number;\n  limit: number;\n  remaining: number;\n  utilization: number;\n  warning: string | null;\n  throttled: boolean;\n}\n\nconst DEFAULT_BUDGET: BudgetConfig = {\n  maxTokensPerSession: 100_000,\n  warnAt: 80_000,\n  throttleAt: 95_000,\n};\n\n/**\n * Session-scoped context budget tracker.\n * Tracks cumulative token consumption and enforces budget limits.\n */\nexport class BudgetTracker {\n  private static instances = new Map<string, BudgetTracker>();\n\n  private consumed = 0;\n  private config: BudgetConfig;\n  private projectRoot: string;\n\n  private constructor(projectRoot: string, config?: Partial<BudgetConfig>) {\n    this.projectRoot = projectRoot;\n    this.config = { ...DEFAULT_BUDGET, ...config };\n  }\n\n  static getInstance(projectRoot: string, config?: Partial<BudgetConfig>): BudgetTracker {\n    const key = projectRoot;\n    if (!BudgetTracker.instances.has(key)) {\n      BudgetTracker.instances.set(key, new BudgetTracker(projectRoot, config));\n    }\n    const instance = BudgetTracker.instances.get(key)!;\n    if (config) {\n      instance.config = { ...DEFAULT_BUDGET, ...config };\n    }\n    return instance;\n  }\n\n  /**\n   * Record tokens consumed by a tool response.\n   */\n  recordConsumption(tokens: number): void {\n    this.consumed += tokens;\n  }\n\n  /**\n   * Get current budget status.\n   */\n  getStatus(): BudgetStatus {\n    const limit = this.config.maxTokensPerSession;\n    const remaining = Math.max(0, limit - this.consumed);\n    const utilization = limit > 0 ? Math.round((this.consumed / limit) * 100) : 0;\n\n    let warning: string | null = null;\n    if (limit > 0 && this.consumed >= this.config.throttleAt) {\n      warning = `Budget nearly exhausted (${utilization}%). Responses will be truncated.`;\n    } else if (limit > 0 && this.consumed >= this.config.warnAt) {\n      warning = `Approaching budget limit (${utilization}%). Consider using compact read modes.`;\n    }\n\n    return {\n      consumed: this.consumed,\n      limit,\n      remaining,\n      utilization,\n      warning,\n      throttled: limit > 0 && this.consumed >= this.config.throttleAt,\n    };\n  }\n\n  /**\n   * Check if the budget is throttled (responses should be truncated).\n   */\n  isThrottled(): boolean {\n    return this.config.maxTokensPerSession > 0 && this.consumed >= this.config.throttleAt;\n  }\n\n  /**\n   * Check if a warning should be appended to responses.\n   */\n  shouldWarn(): boolean {\n    return this.config.maxTokensPerSession > 0 && this.consumed >= this.config.warnAt;\n  }\n\n  /**\n   * Reset the budget counters.\n   */\n  reset(): void {\n    this.consumed = 0;\n  }\n\n  /**\n   * Update budget configuration.\n   */\n  updateConfig(config: Partial<BudgetConfig>): void {\n    this.config = { ...this.config, ...config };\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQA,SAAoB;AACpB,WAAsB;AACtB,aAAwB;AAGxB,MAAM,cAAc;AACpB,MAAM,eAAe;AACrB,MAAM,cAAc;AAoBb,MAAM,aAAa;AAAA,EAIxB,YAAY,aAAqB;AAC/B,UAAM,MAAM,KAAK,KAAK,aAAa,WAAW;AAC9C,OAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACrC,SAAK,WAAW,KAAK,KAAK,KAAK,YAAY;AAC3C,SAAK,YAAY,KAAK,qBAAqB,GAAG;AAAA,EAChD;AAAA,EAEQ,qBAAqB,KAAqB;AAChD,UAAM,cAAc,KAAK,KAAK,KAAK,aAAa;AAChD,QAAI;AACF,YAAM,WAAW,GAAG,aAAa,aAAa,MAAM,EAAE,KAAK;AAC3D,UAAI,SAAU,QAAO;AAAA,IACvB,QAAQ;AAAA,IAA2B;AAEnC,UAAM,KAAK,OAAO,YAAY,CAAC,EAAE,SAAS,KAAK;AAC/C,QAAI;AACF,SAAG,cAAc,aAAa,IAAI,MAAM;AAAA,IAC1C,QAAQ;AAAA,IAA4B;AACpC,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,SAAiB,gBAAwB,kBAA0B,UAAkB,SAAwD,QAAc;AAChK,UAAM,SAA6B;AAAA,MACjC,WAAW,KAAK,IAAI;AAAA,MACpB,SAAS,QAAQ,MAAM,GAAG,GAAG;AAAA;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,KAAK;AAAA,MAChB;AAAA,IACF;AAEA,QAAI;AACF,SAAG,eAAe,KAAK,UAAU,KAAK,UAAU,MAAM,IAAI,MAAM,MAAM;AACtE,WAAK,YAAY;AAAA,IACnB,QAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,kBAAkB,UAAkB,cAAsB,WAAyB;AACjF,SAAK,OAAO,UAAU,WAAW,cAAc,SAAS,QAAQ,IAAI,OAAO;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,mBAAmB,UAAkB,cAAsB,WAAyB;AAClF,SAAK,OAAO,UAAU,WAAW,cAAc,UAAU,QAAQ,IAAI,QAAQ;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,iBAAiB,UAAkB,cAAsB,WAAyB;AAChF,SAAK,OAAO,UAAU,WAAW,cAAc,QAAQ,QAAQ,IAAI,MAAM;AAAA,EAC3E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,iBAAiB,UAAkB,cAAsB,WAAyB;AAChF,SAAK,OAAO,UAAU,WAAW,cAAc,QAAQ,QAAQ,IAAI,MAAM;AAAA,EAC3E;AAAA;AAAA;AAAA;AAAA,EAKA,SAAS,QAAyD;AAChE,UAAM,UAAU,KAAK,YAAY,MAAM;AAEvC,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO;AAAA,QACL,eAAe;AAAA,QACf,eAAe;AAAA,QACf,iBAAiB;AAAA,QACjB,YAAY;AAAA,QACZ,gBAAgB;AAAA,QAChB,UAAU,CAAC;AAAA,QACX,gBAAgB,CAAC;AAAA,QACjB,UAAU,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,EAAE;AAAA,MACtK;AAAA,IACF;AAEA,QAAI,gBAAgB;AACpB,QAAI,kBAAkB;AACtB,UAAM,WAAW,oBAAI,IAA+E;AACpG,UAAM,WAAW,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,EAAE;AAE3K,eAAW,KAAK,SAAS;AACvB,uBAAiB,EAAE;AACnB,yBAAmB,EAAE;AAErB,YAAM,SAAS,KAAK,cAAc,EAAE,QAAQ;AAC5C,YAAM,WAAW,SAAS,IAAI,MAAM,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,iBAAiB,EAAE;AAC1F,eAAS;AACT,eAAS,iBAAiB,EAAE;AAC5B,eAAS,mBAAmB,EAAE;AAC9B,eAAS,IAAI,QAAQ,QAAQ;AAE7B,YAAM,SAAU,EAAE,UAAU;AAC5B,UAAI,SAAS,MAAM,GAAG;AACpB,iBAAS,MAAM,EAAE;AACjB,iBAAS,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE;AAAA,MACjD,OAAO;AACL,iBAAS,KAAK;AACd,iBAAS,KAAK,SAAS,EAAE,iBAAiB,EAAE;AAAA,MAC9C;AAAA,IACF;AAEA,UAAM,aAAa,gBAAgB;AACnC,UAAM,iBAAiB,gBAAgB,IAAI,KAAK,MAAO,aAAa,gBAAiB,GAAG,IAAI;AAG5F,UAAM,cAAkE,CAAC;AACzE,UAAM,iBAAiB,CAAC,GAAG,SAAS,QAAQ,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK;AACrF,eAAW,CAAC,QAAQ,IAAI,KAAK,gBAAgB;AAC3C,YAAM,cAAc,KAAK,gBAAgB,KAAK;AAC9C,YAAM,gBAAgB,KAAK,gBAAgB,IAAI,KAAK,MAAO,cAAc,KAAK,gBAAiB,GAAG,IAAI;AACtG,kBAAY,MAAM,IAAI,EAAE,OAAO,KAAK,OAAO,SAAS,cAAc;AAAA,IACpE;AAGA,UAAM,iBAAiB,QAAQ,MAAM,GAAG,EAAE,QAAQ,EAAE,IAAI,QAAM;AAAA,MAC5D,SAAS,EAAE;AAAA,MACX,SAAS,EAAE,iBAAiB,IACxB,KAAK,OAAQ,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAkB,GAAG,IAC7E;AAAA,MACJ,WAAW,EAAE;AAAA,MACb,QAAQ,EAAE;AAAA,IACZ,EAAE;AAEF,WAAO;AAAA,MACL,eAAe,QAAQ;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU;AAAA,MACV;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,WAAW,QAAgB,IAA0B;AACnD,UAAM,UAAU,KAAK,YAAY,KAAK;AACtC,WAAO,QAAQ,MAAM,CAAC,KAAK,EAAE,QAAQ;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAkB,OAAe,IAA8D;AAC7F,UAAM,UAAU,KAAK,YAAY,KAAK;AACtC,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,SAAS,MAAM,OAAO,KAAK,KAAK,KAAK;AAE3C,UAAM,QAAQ,oBAAI,IAAiD;AAEnE,eAAW,KAAK,SAAS;AACvB,UAAI,EAAE,YAAY,OAAQ;AAC1B,YAAM,OAAO,IAAI,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAC5D,YAAM,WAAW,MAAM,IAAI,IAAI,KAAK,EAAE,UAAU,GAAG,OAAO,EAAE;AAC5D,eAAS;AACT,eAAS,SAAS,EAAE,iBAAiB,EAAE;AACvC,YAAM,IAAI,MAAM,QAAQ;AAAA,IAC1B;AAEA,WAAO,CAAC,GAAG,MAAM,QAAQ,CAAC,EACvB,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EACvC,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,EAAE,MAAM,GAAG,KAAK,EAAE;AAAA,EAC9C;AAAA;AAAA,EAIQ,YAAY,QAAoE;AACtF,QAAI,CAAC,GAAG,WAAW,KAAK,QAAQ,EAAG,QAAO,CAAC;AAE3C,QAAI;AACJ,QAAI;AACF,cAAQ,GAAG,aAAa,KAAK,UAAU,MAAM,EAAE,MAAM,IAAI,EAAE,OAAO,OAAK,EAAE,KAAK,CAAC;AAAA,IACjF,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,UAAgC,CAAC;AACvC,eAAW,QAAQ,OAAO;AACxB,UAAI;AACF,gBAAQ,KAAK,KAAK,MAAM,IAAI,CAAC;AAAA,MAC/B,QAAQ;AAAA,MAER;AAAA,IACF;AAGA,UAAM,MAAM,KAAK,IAAI;AACrB,YAAQ,QAAQ;AAAA,MACd,KAAK;AACH,eAAO,QAAQ,OAAO,OAAK,EAAE,cAAc,KAAK,SAAS;AAAA,MAC3D,KAAK,SAAS;AACZ,cAAM,aAAa,oBAAI,KAAK;AAC5B,mBAAW,SAAS,GAAG,GAAG,GAAG,CAAC;AAC9B,eAAO,QAAQ,OAAO,OAAK,EAAE,aAAa,WAAW,QAAQ,CAAC;AAAA,MAChE;AAAA,MACA,KAAK;AACH,eAAO,QAAQ,OAAO,OAAK,EAAE,aAAa,MAAM,IAAI,KAAK,KAAK,KAAK,GAAI;AAAA,MACzE,KAAK;AACH,eAAO;AAAA,IACX;AAAA,EACF;AAAA,EAEQ,cAAc,UAA0B;AAG9C,UAAM,QAAQ,SAAS,QAAQ,GAAG;AAClC,WAAO,QAAQ,IAAI,SAAS,MAAM,GAAG,KAAK,IAAI;AAAA,EAChD;AAAA,EAEQ,cAAoB;AAC1B,QAAI;AACF,YAAM,OAAO,GAAG,SAAS,KAAK,QAAQ;AAEtC,UAAI,KAAK,OAAO,MAAM,MAAM;AAC1B,cAAM,QAAQ,GAAG,aAAa,KAAK,UAAU,MAAM,EAAE,MAAM,IAAI,EAAE,OAAO,OAAK,EAAE,KAAK,CAAC;AACrF,YAAI,MAAM,SAAS,aAAa;AAE9B,gBAAM,OAAO,MAAM,MAAM,CAAC,KAAK,MAAM,cAAc,CAAC,CAAC;AACrD,aAAG,cAAc,KAAK,UAAU,KAAK,KAAK,IAAI,IAAI,MAAM,MAAM;AAAA,QAChE;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAoBA,MAAM,iBAA+B;AAAA,EACnC,qBAAqB;AAAA,EACrB,QAAQ;AAAA,EACR,YAAY;AACd;AAMO,MAAM,cAAc;AAAA,EAOjB,YAAY,aAAqB,QAAgC;AAJzE,SAAQ,WAAW;AAKjB,SAAK,cAAc;AACnB,SAAK,SAAS,EAAE,GAAG,gBAAgB,GAAG,OAAO;AAAA,EAC/C;AAAA,EATA;AAAA,SAAe,YAAY,oBAAI,IAA2B;AAAA;AAAA,EAW1D,OAAO,YAAY,aAAqB,QAA+C;AACrF,UAAM,MAAM;AACZ,QAAI,CAAC,cAAc,UAAU,IAAI,GAAG,GAAG;AACrC,oBAAc,UAAU,IAAI,KAAK,IAAI,cAAc,aAAa,MAAM,CAAC;AAAA,IACzE;AACA,UAAM,WAAW,cAAc,UAAU,IAAI,GAAG;AAChD,QAAI,QAAQ;AACV,eAAS,SAAS,EAAE,GAAG,gBAAgB,GAAG,OAAO;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAkB,QAAsB;AACtC,SAAK,YAAY;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA,EAKA,YAA0B;AACxB,UAAM,QAAQ,KAAK,OAAO;AAC1B,UAAM,YAAY,KAAK,IAAI,GAAG,QAAQ,KAAK,QAAQ;AACnD,UAAM,cAAc,QAAQ,IAAI,KAAK,MAAO,KAAK,WAAW,QAAS,GAAG,IAAI;AAE5E,QAAI,UAAyB;AAC7B,QAAI,QAAQ,KAAK,KAAK,YAAY,KAAK,OAAO,YAAY;AACxD,gBAAU,4BAA4B,WAAW;AAAA,IACnD,WAAW,QAAQ,KAAK,KAAK,YAAY,KAAK,OAAO,QAAQ;AAC3D,gBAAU,6BAA6B,WAAW;AAAA,IACpD;AAEA,WAAO;AAAA,MACL,UAAU,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,QAAQ,KAAK,KAAK,YAAY,KAAK,OAAO;AAAA,IACvD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,cAAuB;AACrB,WAAO,KAAK,OAAO,sBAAsB,KAAK,KAAK,YAAY,KAAK,OAAO;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA,EAKA,aAAsB;AACpB,WAAO,KAAK,OAAO,sBAAsB,KAAK,KAAK,YAAY,KAAK,OAAO;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA,EAKA,QAAc;AACZ,SAAK,WAAW;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,QAAqC;AAChD,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,OAAO;AAAA,EAC5C;AACF;",
   "names": []
 }

package/dist/config.js

@@ -93,6 +93,12 @@ const KNOWN_FIELDS = /* @__PURE__ */ new Set([
   "dataMaxRows",
   "dataQueryLimit",
   "dataMaxResponseTokens",
+  "enableSecurity",
+  "securityDatabases",
+  "securityAutoEnrich",
+  "securityEnrichMaxAgeDays",
+  "securityLicensePolicy",
+  "contextBudget",
   // Legacy aliases (still accepted, mapped during validation)
   "enableCompression",
   "compressionLevel"
@@ -151,7 +157,12 @@ function createDefaultConfig(_projectRoot) {
     dataMaxFileSize: 52428800,
     dataMaxRows: 1e6,
     dataQueryLimit: 500,
-    dataMaxResponseTokens: 8e3
+    dataMaxResponseTokens: 8e3,
+    enableSecurity: false,
+    securityDatabases: ["OSV"],
+    securityAutoEnrich: true,
+    securityEnrichMaxAgeDays: 7,
+    securityLicensePolicy: { deny: [], warn: [] }
   };
 }
 function validateConfig(config) {
@@ -223,6 +234,76 @@ function validateConfig(config) {
   const dataMaxRows = typeof raw.dataMaxRows === "number" && raw.dataMaxRows > 0 ? Math.round(raw.dataMaxRows) : defaults.dataMaxRows;
   const dataQueryLimit = typeof raw.dataQueryLimit === "number" && raw.dataQueryLimit > 0 ? Math.min(Math.round(raw.dataQueryLimit), 500) : defaults.dataQueryLimit;
   const dataMaxResponseTokens = typeof raw.dataMaxResponseTokens === "number" && raw.dataMaxResponseTokens > 0 ? Math.round(raw.dataMaxResponseTokens) : defaults.dataMaxResponseTokens;
+  let enableSecurity;
+  if (typeof raw.enableSecurity === "boolean") {
+    enableSecurity = raw.enableSecurity;
+  } else {
+    if (raw.enableSecurity !== void 0) {
+      (0, import_errors.logWarn)("Invalid config field enableSecurity: expected boolean, applying default (false)");
+    }
+    enableSecurity = defaults.enableSecurity;
+  }
+  let securityAutoEnrich;
+  if (typeof raw.securityAutoEnrich === "boolean") {
+    securityAutoEnrich = raw.securityAutoEnrich;
+  } else {
+    if (raw.securityAutoEnrich !== void 0) {
+      (0, import_errors.logWarn)("Invalid config field securityAutoEnrich: expected boolean, applying default (true)");
+    }
+    securityAutoEnrich = defaults.securityAutoEnrich;
+  }
+  let securityEnrichMaxAgeDays;
+  if (typeof raw.securityEnrichMaxAgeDays === "number" && raw.securityEnrichMaxAgeDays > 0) {
+    securityEnrichMaxAgeDays = raw.securityEnrichMaxAgeDays;
+  } else {
+    if (raw.securityEnrichMaxAgeDays !== void 0) {
+      (0, import_errors.logWarn)("Invalid config field securityEnrichMaxAgeDays: expected positive number, applying default (7)");
+    }
+    securityEnrichMaxAgeDays = defaults.securityEnrichMaxAgeDays;
+  }
+  const SUPPORTED_SECURITY_DATABASES = /* @__PURE__ */ new Set(["OSV"]);
+  let securityDatabases;
+  if (Array.isArray(raw.securityDatabases) && raw.securityDatabases.every((d) => typeof d === "string")) {
+    const valid = raw.securityDatabases.filter((d) => {
+      if (!SUPPORTED_SECURITY_DATABASES.has(d)) {
+        (0, import_errors.logWarn)(`Unsupported security database "${d}" in securityDatabases, ignoring`);
+        return false;
+      }
+      return true;
+    });
+    securityDatabases = valid.length > 0 ? valid : defaults.securityDatabases;
+  } else {
+    if (raw.securityDatabases !== void 0) {
+      (0, import_errors.logWarn)('Invalid config field securityDatabases: expected array of strings, applying default (["OSV"])');
+    }
+    securityDatabases = defaults.securityDatabases;
+  }
+  let securityLicensePolicy;
+  if (raw.securityLicensePolicy && typeof raw.securityLicensePolicy === "object" && !Array.isArray(raw.securityLicensePolicy)) {
+    const rawPolicy = raw.securityLicensePolicy;
+    const deny = Array.isArray(rawPolicy.deny) && rawPolicy.deny.every((p) => typeof p === "string") ? rawPolicy.deny : defaults.securityLicensePolicy.deny;
+    const warn = Array.isArray(rawPolicy.warn) && rawPolicy.warn.every((p) => typeof p === "string") ? rawPolicy.warn : defaults.securityLicensePolicy.warn;
+    securityLicensePolicy = { deny, warn };
+  } else {
+    if (raw.securityLicensePolicy !== void 0) {
+      (0, import_errors.logWarn)("Invalid config field securityLicensePolicy: expected object with deny/warn arrays, applying default");
+    }
+    securityLicensePolicy = defaults.securityLicensePolicy;
+  }
+  let finalEnableArchitecture = enableArchitecture;
+  if (enableSecurity && !enableArchitecture) {
+    (0, import_errors.logWarn)("enableSecurity requires enableArchitecture \u2014 auto-enabling architecture analysis");
+    finalEnableArchitecture = true;
+  }
+  let contextBudget;
+  if (raw.contextBudget && typeof raw.contextBudget === "object" && !Array.isArray(raw.contextBudget)) {
+    const cb = raw.contextBudget;
+    contextBudget = {
+      maxTokensPerSession: typeof cb.maxTokensPerSession === "number" && cb.maxTokensPerSession > 0 ? Math.round(cb.maxTokensPerSession) : 1e5,
+      warnAt: typeof cb.warnAt === "number" && cb.warnAt > 0 ? Math.round(cb.warnAt) : 8e4,
+      throttleAt: typeof cb.throttleAt === "number" && cb.throttleAt > 0 ? Math.round(cb.throttleAt) : 95e3
+    };
+  }
   const include = _validatePatterns(raw.include, defaults.include);
   const exclude = _validatePatterns(raw.exclude, defaults.exclude);
   return {
@@ -243,7 +324,7 @@ function validateConfig(config) {
     minLogLevel,
     frameworkHints,
     fuzzyResolutionThreshold,
-    enableArchitecture,
+    enableArchitecture: finalEnableArchitecture,
     cavemanMode,
     shellCompressionLevel,
     syncWarningThreshold,
@@ -272,7 +353,13 @@ function validateConfig(config) {
     dataMaxRows,
     dataQueryLimit,
     dataMaxResponseTokens,
-    ...architectureLayers !== void 0 ? { architectureLayers } : {}
+    enableSecurity,
+    securityDatabases,
+    securityAutoEnrich,
+    securityEnrichMaxAgeDays,
+    securityLicensePolicy,
+    ...architectureLayers !== void 0 ? { architectureLayers } : {},
+    ...contextBudget !== void 0 ? { contextBudget } : {}
   };
 }
 function _validateArchitectureLayers(raw) {