kirograph 0.17.0 → 0.20.0

package/dist/bin/commands/licenses.js

@@ -0,0 +1,201 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var licenses_exports = {};
+__export(licenses_exports, {
+  register: () => register
+});
+module.exports = __toCommonJS(licenses_exports);
+var path = __toESM(require("path"));
+var import_config = require("../../config");
+var import_ui = require("../ui");
+var import_license = require("../../security/license");
+function register(program) {
+  program.command("licenses [projectPath]").description("Show license compliance: per-dependency licenses and policy violations").option("--policy", "Show only policy violations").option("--deny <patterns>", "Override deny list (comma-separated SPDX patterns)").option("--warn <patterns>", "Override warn list (comma-separated SPDX patterns)").option("--format <fmt>", "Output format: table (default) or json").action(async (projectPath, opts) => {
+    const target = path.resolve(projectPath ?? process.cwd());
+    const config = await (0, import_config.loadConfig)(target);
+    if (!config.enableSecurity) {
+      console.error(`
+  ${"\x1B[33m"}\u26A0 Security analysis is disabled.${import_ui.reset}`);
+      console.error(`  ${import_ui.dim}Enable it in .kirograph/config.json:${import_ui.reset} ${import_ui.violet}${import_ui.bold}"enableSecurity": true${import_ui.reset}`);
+      console.error(`  ${import_ui.dim}Then re-run:${import_ui.reset} ${import_ui.violet}${import_ui.bold}kirograph index${import_ui.reset}
+`);
+      process.exit(1);
+    }
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    if (!KiroGraph.isInitialized(target)) {
+      console.error("  \u2716 KiroGraph not initialized. Run: kirograph init");
+      process.exit(1);
+    }
+    const cg = await KiroGraph.open(target);
+    const db = cg.getDatabase();
+    db.applySecuritySchema();
+    const rawDb = db.getRawDb();
+    const deps = rawDb.all(
+      `SELECT package_name, ecosystem, license FROM sec_dependencies ORDER BY ecosystem, package_name`
+    );
+    const denyList = opts.deny ? opts.deny.split(",").map((s) => s.trim()).filter(Boolean) : config.securityLicensePolicy.deny;
+    const warnList = opts.warn ? opts.warn.split(",").map((s) => s.trim()).filter(Boolean) : config.securityLicensePolicy.warn;
+    const policy = { deny: denyList, warn: warnList };
+    const violations = (0, import_license.checkLicensePolicy)(deps, policy);
+    const violationMap = /* @__PURE__ */ new Map();
+    for (const v of violations) {
+      violationMap.set(`${v.ecosystem}:${v.packageName}`, v.severity);
+    }
+    if (opts.format === "json") {
+      if (opts.policy) {
+        console.log(JSON.stringify(violations, null, 2));
+      } else {
+        const output = deps.map((dep) => {
+          const key = `${dep.ecosystem}:${dep.package_name}`;
+          const violation = violationMap.get(key);
+          return {
+            package: dep.package_name,
+            ecosystem: dep.ecosystem,
+            license: dep.license ?? null,
+            status: violation ?? (dep.license ? "ok" : "unknown")
+          };
+        });
+        console.log(JSON.stringify(output, null, 2));
+      }
+      cg.close();
+      return;
+    }
+    const red = "\x1B[31m";
+    const yellow = "\x1B[33m";
+    if (opts.policy) {
+      if (violations.length === 0) {
+        console.log(`
+  ${import_ui.green}\u2713${import_ui.reset} No license policy violations found.
+`);
+        cg.close();
+        return;
+      }
+      console.log(`
+  ${import_ui.bold}License Policy Violations${import_ui.reset} (${violations.length})
+`);
+      for (const v of violations) {
+        const color = v.severity === "deny" ? red : yellow;
+        const label = v.severity === "deny" ? "DENY" : "WARN";
+        console.log(`  ${color}${label}${import_ui.reset}  ${import_ui.violet}${import_ui.bold}${v.packageName}${import_ui.reset}  ${import_ui.dim}[${v.ecosystem}]${import_ui.reset}  ${v.license}`);
+      }
+      console.log();
+      cg.close();
+      if (violations.some((v) => v.severity === "deny")) {
+        process.exit(1);
+      }
+      return;
+    }
+    if (deps.length === 0) {
+      console.log(`
+  ${import_ui.dim}No dependencies found. Run kirograph index first.${import_ui.reset}
+`);
+      cg.close();
+      return;
+    }
+    console.log(`
+  ${import_ui.bold}License Compliance${import_ui.reset}  ${import_ui.dim}(${deps.length} dependencies)${import_ui.reset}
+`);
+    const pkgWidth = Math.max(7, ...deps.map((d) => d.package_name.length));
+    const ecoWidth = Math.max(9, ...deps.map((d) => d.ecosystem.length));
+    const licWidth = Math.max(7, ...deps.map((d) => (d.license ?? "unknown").length));
+    const header = `  ${"package".padEnd(pkgWidth)}  ${"ecosystem".padEnd(ecoWidth)}  ${"license".padEnd(licWidth)}  status`;
+    const divider = `  ${"\u2500".repeat(pkgWidth)}  ${"\u2500".repeat(ecoWidth)}  ${"\u2500".repeat(licWidth)}  \u2500\u2500\u2500\u2500\u2500\u2500`;
+    console.log(`${import_ui.dim}${header}${import_ui.reset}`);
+    console.log(`${import_ui.dim}${divider}${import_ui.reset}`);
+    const sorted = [...deps].sort((a, b) => {
+      const aKey = `${a.ecosystem}:${a.package_name}`;
+      const bKey = `${b.ecosystem}:${b.package_name}`;
+      const aViol = violationMap.get(aKey);
+      const bViol = violationMap.get(bKey);
+      if (aViol !== bViol) {
+        if (aViol === "deny") return -1;
+        if (bViol === "deny") return 1;
+        if (aViol === "warn") return -1;
+        if (bViol === "warn") return 1;
+      }
+      return a.package_name.localeCompare(b.package_name);
+    });
+    for (const dep of sorted) {
+      const key = `${dep.ecosystem}:${dep.package_name}`;
+      const violation = violationMap.get(key);
+      const license = dep.license ?? "unknown";
+      let statusLabel;
+      let statusColor;
+      let nameColor;
+      if (violation === "deny") {
+        statusLabel = "deny";
+        statusColor = red;
+        nameColor = red;
+      } else if (violation === "warn") {
+        statusLabel = "warn";
+        statusColor = yellow;
+        nameColor = yellow;
+      } else if (!dep.license) {
+        statusLabel = "unknown";
+        statusColor = import_ui.dim;
+        nameColor = import_ui.dim;
+      } else {
+        statusLabel = "ok";
+        statusColor = import_ui.green;
+        nameColor = import_ui.reset;
+      }
+      const pkgStr = dep.package_name.padEnd(pkgWidth);
+      const ecoStr = dep.ecosystem.padEnd(ecoWidth);
+      const licStr = license.padEnd(licWidth);
+      console.log(`  ${nameColor}${pkgStr}${import_ui.reset}  ${import_ui.dim}${ecoStr}${import_ui.reset}  ${licStr}  ${statusColor}${statusLabel}${import_ui.reset}`);
+    }
+    console.log();
+    const denyCount = violations.filter((v) => v.severity === "deny").length;
+    const warnCount = violations.filter((v) => v.severity === "warn").length;
+    const unknownCount = deps.filter((d) => !d.license).length;
+    if (denyCount > 0 || warnCount > 0) {
+      if (denyCount > 0) {
+        console.log(`  ${red}${import_ui.bold}${denyCount} denied license${denyCount !== 1 ? "s" : ""}${import_ui.reset}`);
+      }
+      if (warnCount > 0) {
+        console.log(`  ${yellow}${import_ui.bold}${warnCount} license warning${warnCount !== 1 ? "s" : ""}${import_ui.reset}`);
+      }
+    } else {
+      console.log(`  ${import_ui.green}\u2713${import_ui.reset} No policy violations`);
+    }
+    if (unknownCount > 0) {
+      console.log(`  ${import_ui.dim}${unknownCount} unknown license${unknownCount !== 1 ? "s" : ""} (no license info in manifest)${import_ui.reset}`);
+    }
+    console.log();
+    cg.close();
+    if (denyCount > 0) {
+      process.exit(1);
+    }
+  });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  register
+});
+//# sourceMappingURL=licenses.js.map

package/dist/bin/commands/licenses.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/bin/commands/licenses.ts"],
+  "sourcesContent": ["import { Command } from 'commander';\nimport * as path from 'path';\nimport { loadConfig } from '../../config';\nimport { dim, reset, violet, bold, green } from '../ui';\nimport { checkLicensePolicy } from '../../security/license';\n\nexport function register(program: Command): void {\n  program\n    .command('licenses [projectPath]')\n    .description('Show license compliance: per-dependency licenses and policy violations')\n    .option('--policy', 'Show only policy violations')\n    .option('--deny <patterns>', 'Override deny list (comma-separated SPDX patterns)')\n    .option('--warn <patterns>', 'Override warn list (comma-separated SPDX patterns)')\n    .option('--format <fmt>', 'Output format: table (default) or json')\n    .action(async (projectPath: string | undefined, opts: {\n      policy?: boolean;\n      deny?: string;\n      warn?: string;\n      format?: string;\n    }) => {\n      const target = path.resolve(projectPath ?? process.cwd());\n      const config = await loadConfig(target);\n\n      if (!config.enableSecurity) {\n        console.error(`\\n  ${'\\x1b[33m'}\u26A0 Security analysis is disabled.${reset}`);\n        console.error(`  ${dim}Enable it in .kirograph/config.json:${reset} ${violet}${bold}\"enableSecurity\": true${reset}`);\n        console.error(`  ${dim}Then re-run:${reset} ${violet}${bold}kirograph index${reset}\\n`);\n        process.exit(1);\n      }\n\n      const KiroGraph = (await Promise.resolve().then(() => require('../../index.js'))).default;\n      if (!KiroGraph.isInitialized(target)) {\n        console.error('  \u2716 KiroGraph not initialized. Run: kirograph init');\n        process.exit(1);\n      }\n\n      const cg = await KiroGraph.open(target);\n      const db = cg.getDatabase();\n      db.applySecuritySchema();\n      const rawDb = db.getRawDb();\n\n      // Query all dependencies with their license info\n      const deps: Array<{\n        package_name: string;\n        ecosystem: string;\n        license: string | null;\n      }> = rawDb.all(\n        `SELECT package_name, ecosystem, license FROM sec_dependencies ORDER BY ecosystem, package_name`,\n      );\n\n      // Build effective policy: CLI overrides take precedence over config\n      const denyList = opts.deny\n        ? opts.deny.split(',').map(s => s.trim()).filter(Boolean)\n        : config.securityLicensePolicy.deny;\n      const warnList = opts.warn\n        ? opts.warn.split(',').map(s => s.trim()).filter(Boolean)\n        : config.securityLicensePolicy.warn;\n\n      const policy = { deny: denyList, warn: warnList };\n\n      // Check for violations\n      const violations = checkLicensePolicy(deps, policy);\n      const violationMap = new Map<string, 'deny' | 'warn'>();\n      for (const v of violations) {\n        violationMap.set(`${v.ecosystem}:${v.packageName}`, v.severity);\n      }\n\n      // JSON output\n      if (opts.format === 'json') {\n        if (opts.policy) {\n          console.log(JSON.stringify(violations, null, 2));\n        } else {\n          const output = deps.map(dep => {\n            const key = `${dep.ecosystem}:${dep.package_name}`;\n            const violation = violationMap.get(key);\n            return {\n              package: dep.package_name,\n              ecosystem: dep.ecosystem,\n              license: dep.license ?? null,\n              status: violation ?? (dep.license ? 'ok' : 'unknown'),\n            };\n          });\n          console.log(JSON.stringify(output, null, 2));\n        }\n        cg.close();\n        return;\n      }\n\n      // Table output\n      const red = '\\x1b[31m';\n      const yellow = '\\x1b[33m';\n\n      if (opts.policy) {\n        // Show only violations\n        if (violations.length === 0) {\n          console.log(`\\n  ${green}\u2713${reset} No license policy violations found.\\n`);\n          cg.close();\n          return;\n        }\n\n        console.log(`\\n  ${bold}License Policy Violations${reset} (${violations.length})\\n`);\n        for (const v of violations) {\n          const color = v.severity === 'deny' ? red : yellow;\n          const label = v.severity === 'deny' ? 'DENY' : 'WARN';\n          console.log(`  ${color}${label}${reset}  ${violet}${bold}${v.packageName}${reset}  ${dim}[${v.ecosystem}]${reset}  ${v.license}`);\n        }\n        console.log();\n        cg.close();\n\n        // Exit with non-zero if there are deny violations\n        if (violations.some(v => v.severity === 'deny')) {\n          process.exit(1);\n        }\n        return;\n      }\n\n      // Full table: group violations at top\n      if (deps.length === 0) {\n        console.log(`\\n  ${dim}No dependencies found. Run kirograph index first.${reset}\\n`);\n        cg.close();\n        return;\n      }\n\n      console.log(`\\n  ${bold}License Compliance${reset}  ${dim}(${deps.length} dependencies)${reset}\\n`);\n\n      // Compute column widths\n      const pkgWidth = Math.max(7, ...deps.map(d => d.package_name.length));\n      const ecoWidth = Math.max(9, ...deps.map(d => d.ecosystem.length));\n      const licWidth = Math.max(7, ...deps.map(d => (d.license ?? 'unknown').length));\n\n      const header = `  ${'package'.padEnd(pkgWidth)}  ${'ecosystem'.padEnd(ecoWidth)}  ${'license'.padEnd(licWidth)}  status`;\n      const divider = `  ${'\u2500'.repeat(pkgWidth)}  ${'\u2500'.repeat(ecoWidth)}  ${'\u2500'.repeat(licWidth)}  \u2500\u2500\u2500\u2500\u2500\u2500`;\n      console.log(`${dim}${header}${reset}`);\n      console.log(`${dim}${divider}${reset}`);\n\n      // Sort: violations first, then alphabetical\n      const sorted = [...deps].sort((a, b) => {\n        const aKey = `${a.ecosystem}:${a.package_name}`;\n        const bKey = `${b.ecosystem}:${b.package_name}`;\n        const aViol = violationMap.get(aKey);\n        const bViol = violationMap.get(bKey);\n        if (aViol !== bViol) {\n          if (aViol === 'deny') return -1;\n          if (bViol === 'deny') return 1;\n          if (aViol === 'warn') return -1;\n          if (bViol === 'warn') return 1;\n        }\n        return a.package_name.localeCompare(b.package_name);\n      });\n\n      for (const dep of sorted) {\n        const key = `${dep.ecosystem}:${dep.package_name}`;\n        const violation = violationMap.get(key);\n        const license = dep.license ?? 'unknown';\n\n        let statusLabel: string;\n        let statusColor: string;\n        let nameColor: string;\n\n        if (violation === 'deny') {\n          statusLabel = 'deny';\n          statusColor = red;\n          nameColor = red;\n        } else if (violation === 'warn') {\n          statusLabel = 'warn';\n          statusColor = yellow;\n          nameColor = yellow;\n        } else if (!dep.license) {\n          statusLabel = 'unknown';\n          statusColor = dim;\n          nameColor = dim;\n        } else {\n          statusLabel = 'ok';\n          statusColor = green;\n          nameColor = reset;\n        }\n\n        const pkgStr = dep.package_name.padEnd(pkgWidth);\n        const ecoStr = dep.ecosystem.padEnd(ecoWidth);\n        const licStr = license.padEnd(licWidth);\n        console.log(`  ${nameColor}${pkgStr}${reset}  ${dim}${ecoStr}${reset}  ${licStr}  ${statusColor}${statusLabel}${reset}`);\n      }\n\n      console.log();\n\n      // Summary\n      const denyCount = violations.filter(v => v.severity === 'deny').length;\n      const warnCount = violations.filter(v => v.severity === 'warn').length;\n      const unknownCount = deps.filter(d => !d.license).length;\n\n      if (denyCount > 0 || warnCount > 0) {\n        if (denyCount > 0) {\n          console.log(`  ${red}${bold}${denyCount} denied license${denyCount !== 1 ? 's' : ''}${reset}`);\n        }\n        if (warnCount > 0) {\n          console.log(`  ${yellow}${bold}${warnCount} license warning${warnCount !== 1 ? 's' : ''}${reset}`);\n        }\n      } else {\n        console.log(`  ${green}\u2713${reset} No policy violations`);\n      }\n\n      if (unknownCount > 0) {\n        console.log(`  ${dim}${unknownCount} unknown license${unknownCount !== 1 ? 's' : ''} (no license info in manifest)${reset}`);\n      }\n      console.log();\n\n      cg.close();\n\n      // Exit non-zero if deny violations\n      if (denyCount > 0) {\n        process.exit(1);\n      }\n    });\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,WAAsB;AACtB,oBAA2B;AAC3B,gBAAgD;AAChD,qBAAmC;AAE5B,SAAS,SAAS,SAAwB;AAC/C,UACG,QAAQ,wBAAwB,EAChC,YAAY,wEAAwE,EACpF,OAAO,YAAY,6BAA6B,EAChD,OAAO,qBAAqB,oDAAoD,EAChF,OAAO,qBAAqB,oDAAoD,EAChF,OAAO,kBAAkB,wCAAwC,EACjE,OAAO,OAAO,aAAiC,SAK1C;AACJ,UAAM,SAAS,KAAK,QAAQ,eAAe,QAAQ,IAAI,CAAC;AACxD,UAAM,SAAS,UAAM,0BAAW,MAAM;AAEtC,QAAI,CAAC,OAAO,gBAAgB;AAC1B,cAAQ,MAAM;AAAA,IAAO,UAAU,wCAAmC,eAAK,EAAE;AACzE,cAAQ,MAAM,KAAK,aAAG,uCAAuC,eAAK,IAAI,gBAAM,GAAG,cAAI,yBAAyB,eAAK,EAAE;AACnH,cAAQ,MAAM,KAAK,aAAG,eAAe,eAAK,IAAI,gBAAM,GAAG,cAAI,kBAAkB,eAAK;AAAA,CAAI;AACtF,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,aAAa,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,gBAAgB,CAAC,GAAG;AAClF,QAAI,CAAC,UAAU,cAAc,MAAM,GAAG;AACpC,cAAQ,MAAM,yDAAoD;AAClE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,KAAK,MAAM,UAAU,KAAK,MAAM;AACtC,UAAM,KAAK,GAAG,YAAY;AAC1B,OAAG,oBAAoB;AACvB,UAAM,QAAQ,GAAG,SAAS;AAG1B,UAAM,OAID,MAAM;AAAA,MACT;AAAA,IACF;AAGA,UAAM,WAAW,KAAK,OAClB,KAAK,KAAK,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO,IACtD,OAAO,sBAAsB;AACjC,UAAM,WAAW,KAAK,OAClB,KAAK,KAAK,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO,IACtD,OAAO,sBAAsB;AAEjC,UAAM,SAAS,EAAE,MAAM,UAAU,MAAM,SAAS;AAGhD,UAAM,iBAAa,mCAAmB,MAAM,MAAM;AAClD,UAAM,eAAe,oBAAI,IAA6B;AACtD,eAAW,KAAK,YAAY;AAC1B,mBAAa,IAAI,GAAG,EAAE,SAAS,IAAI,EAAE,WAAW,IAAI,EAAE,QAAQ;AAAA,IAChE;AAGA,QAAI,KAAK,WAAW,QAAQ;AAC1B,UAAI,KAAK,QAAQ;AACf,gBAAQ,IAAI,KAAK,UAAU,YAAY,MAAM,CAAC,CAAC;AAAA,MACjD,OAAO;AACL,cAAM,SAAS,KAAK,IAAI,SAAO;AAC7B,gBAAM,MAAM,GAAG,IAAI,SAAS,IAAI,IAAI,YAAY;AAChD,gBAAM,YAAY,aAAa,IAAI,GAAG;AACtC,iBAAO;AAAA,YACL,SAAS,IAAI;AAAA,YACb,WAAW,IAAI;AAAA,YACf,SAAS,IAAI,WAAW;AAAA,YACxB,QAAQ,cAAc,IAAI,UAAU,OAAO;AAAA,UAC7C;AAAA,QACF,CAAC;AACD,gBAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,MAC7C;AACA,SAAG,MAAM;AACT;AAAA,IACF;AAGA,UAAM,MAAM;AACZ,UAAM,SAAS;AAEf,QAAI,KAAK,QAAQ;AAEf,UAAI,WAAW,WAAW,GAAG;AAC3B,gBAAQ,IAAI;AAAA,IAAO,eAAK,SAAI,eAAK;AAAA,CAAwC;AACzE,WAAG,MAAM;AACT;AAAA,MACF;AAEA,cAAQ,IAAI;AAAA,IAAO,cAAI,4BAA4B,eAAK,KAAK,WAAW,MAAM;AAAA,CAAK;AACnF,iBAAW,KAAK,YAAY;AAC1B,cAAM,QAAQ,EAAE,aAAa,SAAS,MAAM;AAC5C,cAAM,QAAQ,EAAE,aAAa,SAAS,SAAS;AAC/C,gBAAQ,IAAI,KAAK,KAAK,GAAG,KAAK,GAAG,eAAK,KAAK,gBAAM,GAAG,cAAI,GAAG,EAAE,WAAW,GAAG,eAAK,KAAK,aAAG,IAAI,EAAE,SAAS,IAAI,eAAK,KAAK,EAAE,OAAO,EAAE;AAAA,MAClI;AACA,cAAQ,IAAI;AACZ,SAAG,MAAM;AAGT,UAAI,WAAW,KAAK,OAAK,EAAE,aAAa,MAAM,GAAG;AAC/C,gBAAQ,KAAK,CAAC;AAAA,MAChB;AACA;AAAA,IACF;AAGA,QAAI,KAAK,WAAW,GAAG;AACrB,cAAQ,IAAI;AAAA,IAAO,aAAG,oDAAoD,eAAK;AAAA,CAAI;AACnF,SAAG,MAAM;AACT;AAAA,IACF;AAEA,YAAQ,IAAI;AAAA,IAAO,cAAI,qBAAqB,eAAK,KAAK,aAAG,IAAI,KAAK,MAAM,iBAAiB,eAAK;AAAA,CAAI;AAGlG,UAAM,WAAW,KAAK,IAAI,GAAG,GAAG,KAAK,IAAI,OAAK,EAAE,aAAa,MAAM,CAAC;AACpE,UAAM,WAAW,KAAK,IAAI,GAAG,GAAG,KAAK,IAAI,OAAK,EAAE,UAAU,MAAM,CAAC;AACjE,UAAM,WAAW,KAAK,IAAI,GAAG,GAAG,KAAK,IAAI,QAAM,EAAE,WAAW,WAAW,MAAM,CAAC;AAE9E,UAAM,SAAS,KAAK,UAAU,OAAO,QAAQ,CAAC,KAAK,YAAY,OAAO,QAAQ,CAAC,KAAK,UAAU,OAAO,QAAQ,CAAC;AAC9G,UAAM,UAAU,KAAK,SAAI,OAAO,QAAQ,CAAC,KAAK,SAAI,OAAO,QAAQ,CAAC,KAAK,SAAI,OAAO,QAAQ,CAAC;AAC3F,YAAQ,IAAI,GAAG,aAAG,GAAG,MAAM,GAAG,eAAK,EAAE;AACrC,YAAQ,IAAI,GAAG,aAAG,GAAG,OAAO,GAAG,eAAK,EAAE;AAGtC,UAAM,SAAS,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM;AACtC,YAAM,OAAO,GAAG,EAAE,SAAS,IAAI,EAAE,YAAY;AAC7C,YAAM,OAAO,GAAG,EAAE,SAAS,IAAI,EAAE,YAAY;AAC7C,YAAM,QAAQ,aAAa,IAAI,IAAI;AACnC,YAAM,QAAQ,aAAa,IAAI,IAAI;AACnC,UAAI,UAAU,OAAO;AACnB,YAAI,UAAU,OAAQ,QAAO;AAC7B,YAAI,UAAU,OAAQ,QAAO;AAC7B,YAAI,UAAU,OAAQ,QAAO;AAC7B,YAAI,UAAU,OAAQ,QAAO;AAAA,MAC/B;AACA,aAAO,EAAE,aAAa,cAAc,EAAE,YAAY;AAAA,IACpD,CAAC;AAED,eAAW,OAAO,QAAQ;AACxB,YAAM,MAAM,GAAG,IAAI,SAAS,IAAI,IAAI,YAAY;AAChD,YAAM,YAAY,aAAa,IAAI,GAAG;AACtC,YAAM,UAAU,IAAI,WAAW;AAE/B,UAAI;AACJ,UAAI;AACJ,UAAI;AAEJ,UAAI,cAAc,QAAQ;AACxB,sBAAc;AACd,sBAAc;AACd,oBAAY;AAAA,MACd,WAAW,cAAc,QAAQ;AAC/B,sBAAc;AACd,sBAAc;AACd,oBAAY;AAAA,MACd,WAAW,CAAC,IAAI,SAAS;AACvB,sBAAc;AACd,sBAAc;AACd,oBAAY;AAAA,MACd,OAAO;AACL,sBAAc;AACd,sBAAc;AACd,oBAAY;AAAA,MACd;AAEA,YAAM,SAAS,IAAI,aAAa,OAAO,QAAQ;AAC/C,YAAM,SAAS,IAAI,UAAU,OAAO,QAAQ;AAC5C,YAAM,SAAS,QAAQ,OAAO,QAAQ;AACtC,cAAQ,IAAI,KAAK,SAAS,GAAG,MAAM,GAAG,eAAK,KAAK,aAAG,GAAG,MAAM,GAAG,eAAK,KAAK,MAAM,KAAK,WAAW,GAAG,WAAW,GAAG,eAAK,EAAE;AAAA,IACzH;AAEA,YAAQ,IAAI;AAGZ,UAAM,YAAY,WAAW,OAAO,OAAK,EAAE,aAAa,MAAM,EAAE;AAChE,UAAM,YAAY,WAAW,OAAO,OAAK,EAAE,aAAa,MAAM,EAAE;AAChE,UAAM,eAAe,KAAK,OAAO,OAAK,CAAC,EAAE,OAAO,EAAE;AAElD,QAAI,YAAY,KAAK,YAAY,GAAG;AAClC,UAAI,YAAY,GAAG;AACjB,gBAAQ,IAAI,KAAK,GAAG,GAAG,cAAI,GAAG,SAAS,kBAAkB,cAAc,IAAI,MAAM,EAAE,GAAG,eAAK,EAAE;AAAA,MAC/F;AACA,UAAI,YAAY,GAAG;AACjB,gBAAQ,IAAI,KAAK,MAAM,GAAG,cAAI,GAAG,SAAS,mBAAmB,cAAc,IAAI,MAAM,EAAE,GAAG,eAAK,EAAE;AAAA,MACnG;AAAA,IACF,OAAO;AACL,cAAQ,IAAI,KAAK,eAAK,SAAI,eAAK,uBAAuB;AAAA,IACxD;AAEA,QAAI,eAAe,GAAG;AACpB,cAAQ,IAAI,KAAK,aAAG,GAAG,YAAY,mBAAmB,iBAAiB,IAAI,MAAM,EAAE,iCAAiC,eAAK,EAAE;AAAA,IAC7H;AACA,YAAQ,IAAI;AAEZ,OAAG,MAAM;AAGT,QAAI,YAAY,GAAG;AACjB,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF,CAAC;AACL;",
+  "names": []
+}

package/dist/bin/commands/memory.d.ts

@@ -0,0 +1,16 @@
+/**
+ * KiroGraph Memory CLI — mirrors MCP tools + maintenance commands
+ *
+ * kirograph mem search <query>
+ * kirograph mem store <content>
+ * kirograph mem timeline
+ * kirograph mem status
+ * kirograph mem prune
+ * kirograph mem export
+ * kirograph mem import
+ * kirograph mem reembed
+ * kirograph mem lint
+ */
+import { Command } from 'commander';
+export declare function register(program: Command): void;
+//# sourceMappingURL=memory.d.ts.map

package/dist/bin/commands/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/bin/commands/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmhB/C"}

package/dist/bin/commands/memory.js

@@ -120,11 +120,24 @@ function register(program) {
     db.applyMemorySchema();
     const mem2 = new MemoryManager(config, db.getRawDb());
     mem2.initialize();
-    const id = await mem2.store({ content: text, kind: opts.kind, source: "manual" });
-    if (id) {
-      console.log(`  \u2713 Stored observation ${import_ui.dim}${id}${import_ui.reset} [${import_ui.violet}${opts.kind}${import_ui.reset}]`);
-    } else {
+    const result = await mem2.store({ content: text, kind: opts.kind, source: "manual" });
+    if (!result) {
       console.log(`  ${import_ui.dim}Duplicate observation \u2014 already stored.${import_ui.reset}`);
+    } else if (typeof result === "object" && result.watchmenReady) {
+      console.log(`  \u2713 Stored observation ${import_ui.dim}${result.id}${import_ui.reset} [${import_ui.violet}${opts.kind}${import_ui.reset}]`);
+      console.log(`
+  ${import_ui.violet}\u26A1 Watchmen ready${import_ui.reset} \u2014 ${result.pendingCount} observations since last synthesis`);
+      console.log(`  Target files:`);
+      for (const f of result.targetFiles) {
+        console.log(`    ${import_ui.dim}\xB7${import_ui.reset} ${f}`);
+      }
+      if (result.skillTargetDir) {
+        console.log(`  Skill dir:    ${import_ui.dim}${result.skillTargetDir}/watchmen-<slug>.md${import_ui.reset} (inclusion: manual)`);
+      }
+      console.log(`
+  ${import_ui.dim}Run synthesis manually or let the agentStop hook handle it.${import_ui.reset}`);
+    } else {
+      console.log(`  \u2713 Stored observation ${import_ui.dim}${result}${import_ui.reset} [${import_ui.violet}${opts.kind}${import_ui.reset}]`);
     }
     cg.close();
   });
@@ -409,6 +422,140 @@ function register(program) {
     console.log("");
     cg.close();
   });
+  const watchmen = mem.command("watchmen").description("Watchmen \u2014 workspace brief synthesis from memory observations (requires enableWatchmen: true)");
+  watchmen.command("status").description("Show pending observation count and which files would be written on next synthesis").action(async () => {
+    const { MemoryManager } = await Promise.resolve().then(() => require("../../memory/index.js"));
+    const { WatchmenChecker } = await Promise.resolve().then(() => require("../../watchmen/index.js"));
+    const { MemoryDatabase } = await Promise.resolve().then(() => require("../../memory/database.js"));
+    const { loadConfig } = await Promise.resolve().then(() => require("../../config.js"));
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    const cwd = process.cwd();
+    if (!KiroGraph.isInitialized(cwd)) {
+      console.error("  \u2716 KiroGraph is not initialized. Run `kirograph init` first.");
+      process.exit(1);
+    }
+    const config = await loadConfig(cwd);
+    if (!config.enableMemory) {
+      console.error("  \u2716 Memory is not enabled. Set enableMemory: true in .kirograph/config.json");
+      process.exit(1);
+    }
+    if (!config.enableWatchmen) {
+      console.error("  \u2716 Watchmen is not enabled. Set enableWatchmen: true in .kirograph/config.json");
+      process.exit(1);
+    }
+    const cg = await KiroGraph.open(cwd);
+    const db = cg.getDatabase();
+    db.applyMemorySchema();
+    const memDb = new MemoryDatabase(db.getRawDb());
+    memDb.initialize();
+    const checker = new WatchmenChecker(config.watchmenThreshold);
+    const { ready, pendingCount } = checker.shouldSynthesize(memDb);
+    const { targetFiles } = checker.buildReadyResponse("", pendingCount, cwd);
+    console.log(`
+  ${(0, import_ui.section)("Watchmen Status")}
+`);
+    console.log(`  Pending observations: ${import_ui.bold}${pendingCount}${import_ui.reset} / ${config.watchmenThreshold} threshold`);
+    console.log(`  Ready to synthesize:  ${ready ? import_ui.violet + "yes" + import_ui.reset : import_ui.dim + "no" + import_ui.reset}`);
+    console.log(`  Target files:`);
+    for (const f of targetFiles) {
+      console.log(`    ${import_ui.dim}\xB7${import_ui.reset} ${f}`);
+    }
+    console.log("");
+    cg.close();
+  });
+  watchmen.command("synthesize").description("Run local model synthesis immediately (requires watchmenSynthesisMode: local)").option("--force", "Run even if below threshold").option("--quiet", "Suppress output (used by runCommand hook)").action(async (opts) => {
+    const { MemoryManager } = await Promise.resolve().then(() => require("../../memory/index.js"));
+    const { WatchmenChecker } = await Promise.resolve().then(() => require("../../watchmen/index.js"));
+    const { MemoryDatabase } = await Promise.resolve().then(() => require("../../memory/database.js"));
+    const { runLocalSynthesis } = await Promise.resolve().then(() => require("../../watchmen/synthesize.js"));
+    const { loadConfig } = await Promise.resolve().then(() => require("../../config.js"));
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    const cwd = process.cwd();
+    if (!KiroGraph.isInitialized(cwd)) {
+      if (!opts.quiet) console.error("  \u2716 KiroGraph is not initialized.");
+      process.exit(1);
+    }
+    const config = await loadConfig(cwd);
+    if (!config.enableMemory || !config.enableWatchmen) {
+      if (!opts.quiet) console.error("  \u2716 Watchmen is not enabled (enableMemory + enableWatchmen required).");
+      process.exit(1);
+    }
+    if (config.watchmenSynthesisMode !== "local") {
+      if (!opts.quiet) console.error('  \u2716 watchmenSynthesisMode is not "local" \u2014 use the agent hook instead.');
+      process.exit(1);
+    }
+    const cg = await KiroGraph.open(cwd);
+    const db = cg.getDatabase();
+    db.applyMemorySchema();
+    const memDb = new MemoryDatabase(db.getRawDb());
+    memDb.initialize();
+    const checker = new WatchmenChecker(config.watchmenThreshold);
+    const { ready, pendingCount } = checker.shouldSynthesize(memDb);
+    if (!ready && !opts.force) {
+      if (!opts.quiet) console.log(`  ${import_ui.dim}Watchmen: ${pendingCount}/${config.watchmenThreshold} observations \u2014 threshold not reached.${import_ui.reset}`);
+      cg.close();
+      return;
+    }
+    const observations = memDb.getObservationsSinceLastSummary(50);
+    if (observations.length === 0) {
+      if (!opts.quiet) console.log(`  ${import_ui.dim}No observations to synthesize.${import_ui.reset}`);
+      cg.close();
+      return;
+    }
+    if (!opts.quiet) {
+      console.log(`
+  ${(0, import_ui.section)("Watchmen Synthesis")}
+`);
+      console.log(`  Synthesizing ${observations.length} observations with ${import_ui.dim}${config.watchmenLocalModel}${import_ui.reset}`);
+      const cacheDir = require("path").join(require("os").homedir(), ".kirograph", "models");
+      const cached = require("fs").existsSync(require("path").join(cacheDir, config.watchmenLocalModel));
+      if (!cached) console.log(`  ${import_ui.dim}Downloading model \u2014 first run only (cached in ~/.kirograph/models/)${import_ui.reset}`);
+      console.log("");
+    }
+    const readyResult = checker.buildReadyResponse("", pendingCount, cwd);
+    const result = await runLocalSynthesis(observations, readyResult, config.watchmenLocalModel, cwd, !!opts.quiet);
+    const mgr = new MemoryManager(config, db.getRawDb(), cwd);
+    mgr.initialize();
+    await mgr.store({ content: result.summaryObservation, kind: "summary", source: "agent" });
+    if (!opts.quiet) {
+      if (result.filesWritten.length) console.log(`  \u2713 Brief written to: ${result.filesWritten.map((f) => import_ui.violet + f + import_ui.reset).join(", ")}`);
+      if (result.skillsWritten.length) console.log(`  \u2713 Skills written:   ${result.skillsWritten.map((f) => import_ui.violet + f + import_ui.reset).join(", ")}`);
+      if (result.skillsPruned.length) console.log(`  ${import_ui.dim}\u2717 Pruned stale:     ${result.skillsPruned.join(", ")}${import_ui.reset}`);
+      console.log("");
+    }
+    cg.close();
+  });
+  watchmen.command("reset").description("Store a summary observation to reset the synthesis counter without running synthesis").action(async () => {
+    const { MemoryManager } = await Promise.resolve().then(() => require("../../memory/index.js"));
+    const { loadConfig } = await Promise.resolve().then(() => require("../../config.js"));
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    const cwd = process.cwd();
+    if (!KiroGraph.isInitialized(cwd)) {
+      console.error("  \u2716 KiroGraph is not initialized. Run `kirograph init` first.");
+      process.exit(1);
+    }
+    const config = await loadConfig(cwd);
+    if (!config.enableMemory) {
+      console.error("  \u2716 Memory is not enabled.");
+      process.exit(1);
+    }
+    if (!config.enableWatchmen) {
+      console.error("  \u2716 Watchmen is not enabled.");
+      process.exit(1);
+    }
+    const cg = await KiroGraph.open(cwd);
+    const db = cg.getDatabase();
+    db.applyMemorySchema();
+    const mgr = new MemoryManager(config, db.getRawDb(), cwd);
+    mgr.initialize();
+    const id = await mgr.store({ content: `Watchmen counter reset manually via CLI at ${(/* @__PURE__ */ new Date()).toISOString()}.`, kind: "summary", source: "manual" });
+    if (id) {
+      console.log(`  \u2713 Counter reset \u2014 pending observations set back to 0`);
+    } else {
+      console.log(`  ${import_ui.dim}Already at zero \u2014 nothing to reset.${import_ui.reset}`);
+    }
+    cg.close();
+  });
   mem.command("session-start").description("Start a new memory session (called by hooks)").option("--ide <name>", "IDE name", "kiro").action(async (opts) => {
     const { MemoryManager } = await Promise.resolve().then(() => require("../../memory/index.js"));
     const { loadConfig } = await Promise.resolve().then(() => require("../../config.js"));