nayan-ai 1.0.0-beta.3 → 1.0.0-beta.5

package/README.md

@@ -1,21 +1,31 @@
 # Nayan AI 🤖
 
-A CLI tool that uses [Codex CLI](https://github.com/openai/codex) to review GitHub Pull Requests for bugs, security vulnerabilities, performance issues, error handling, edge cases, and code quality.
+A CLI tool that uses [Codex](https://github.com/openai/codex) or [Claude Code](https://code.claude.com) to review GitHub Pull Requests and scan repositories for security vulnerabilities with AI-powered agentic analysis and auto-fix capabilities.
 
 ## Features
 
-- **🤖 Agentic Review**: Uses Codex CLI's intelligent coding agent for deep code analysis
+### PR Review
+- **🤖 Agentic Review**: Uses Codex CLI or Claude Code CLI's intelligent coding agents for deep code analysis
 - **🐛 Bug Detection**: Finds logic errors, null pointer issues, race conditions, and edge cases
 - **🔐 Security Analysis**: Detects SQL injection, XSS, hardcoded secrets, and auth issues
 - **⚡ Performance Checks**: Identifies memory leaks, N+1 queries, and unnecessary computations
 - **🛡️ Error Handling**: Catches missing try/catch, unhandled promises, and silent failures
 - **✅ Test Coverage**: Checks if tests are added for new functionality
-- **🖥️ Local Execution**: Run reviews from your terminal, no GitHub Actions required
-- **🏢 Enterprise Support**: Works with GitHub Enterprise Server (auto-detected)
-- **🔒 Private Repos**: Full support for private repositories
 - **💬 Inline Comments**: Posts review comments directly on the relevant lines of code
 - **📊 Summary Report**: Provides an overview of all issues found
 
+### Vulnerability Scanning
+- **🔍 Multi-Language Support**: Scans npm, Python, Go, Rust, Ruby, PHP, Java, and .NET projects
+- **🤖 AI-Powered Analysis**: Uses Codex or Claude to detect vulnerabilities beyond native tools
+- **📋 CVE Tracking**: Lists all CVE identifiers found in dependencies
+- **🔧 Auto-Fix**: Generates fixes and creates PRs automatically with `--fix` flag
+- **🎯 Context-Aware Severity**: Adjusts severity based on project type (bundled vs server-side)
+
+### General
+- **🖥️ Local Execution**: Run from your terminal, no GitHub Actions / Jenkins required
+- **🏢 Enterprise Support**: Works with GitHub Enterprise Server (auto-detected)
+- **🔒 Private Repos**: Full support for private repositories
+
 ## Installation
 
 ### Prerequisites
@@ -38,20 +48,97 @@ npm install -g nayan-ai
 
 ## Usage
 
-### Basic Usage
+### Review Command
+
+Review a GitHub Pull Request for code issues:
+
+```bash
+nayan-ai review https://github.com/owner/repo/pull/123 --token ghp_xxx
+```
+
+#### Review Options
+
+| Option | Description |
+|--------|-------------|
+| `-t, --token` | GitHub personal access token (required) |
+| `-l, --llm` | LLM provider: `codex` (default) or `claude` |
+| `-d, --dry` | Analyze without posting comments to GitHub |
+| `-i, --inline` | Post inline comments on files instead of summary |
+
+### Scan Command
+
+Scan a GitHub repository for package vulnerabilities using native tools + AI analysis:
 
 ```bash
-# Review a PR using URL
-nayan-ai https://github.com/owner/repo/pull/123 --token ghp_xxx
+# Basic scan - detect and analyze all projects in the repo
+nayan-ai scan https://github.com/owner/repo --token ghp_xxx
+
+# Scan specific paths in the repo (detects all projects inside)
+nayan-ai scan https://github.com/owner/repo --token ghp_xxx --paths packages/api,packages/web
+
+# Auto-fix vulnerabilities and create a PR
+nayan-ai scan https://github.com/owner/repo --token ghp_xxx --fix
+
+# Auto-fix with custom branch name
+nayan-ai scan https://github.com/owner/repo --token ghp_xxx --fix --branch nayan-ai/security-updates
 ```
 
-### Options
+#### Scan Options
+
+| Option | Description |
+|--------|-------------|
+| `-t, --token` | GitHub personal access token (required) |
+| `-l, --llm` | LLM provider: `codex` (default) or `claude` |
+| `-p, --paths` | Comma-separated list of paths to scan for projects |
+| `-f, --fix` | Auto-fix vulnerabilities and create a PR |
+| `-b, --branch` | Branch name for fix PR (default: `nayan-ai/security-fixes-<timestamp>`) |
+
+#### Scan Output
+
+The scan provides:
+- **Per-project vulnerabilities** grouped by severity (Critical, High, Medium, Low)
+- **CVE identifiers** for each vulnerability
+- **Suggested fixes** with package version updates
+- **Breaking changes warnings** when applicable
+
+#### Auto-Fix Workflow
+
+When using `--fix`, Nayan AI will:
+1. Analyze vulnerabilities and generate fixes using AI
+2. Create a new branch with the fixes
+3. Update manifest files (package.json, requirements.txt, etc.)
+4. Commit and push changes
+5. Create a Pull Request with detailed description of all changes
+
+#### Supported Project Types
+
+| Type | Manifest | Lock Files | Native Scanner |
+|------|----------|------------|----------------|
+| **npm** | package.json | package-lock.json, yarn.lock, pnpm-lock.yaml | `npm audit` |
+| **Python** | requirements.txt | Pipfile.lock, poetry.lock | `pip-audit` |
+| **Go** | go.mod | go.sum | `govulncheck` |
+| **Rust** | Cargo.toml | Cargo.lock | `cargo audit` |
+| **Ruby** | Gemfile | Gemfile.lock | `bundle audit` |
+| **PHP** | composer.json | composer.lock | `composer audit` |
+| **Java** | pom.xml | - | `mvn dependency-check` |
+| **.NET** | *.csproj | packages.lock.json | `dotnet list --vulnerable` |
+
+#### Context-Aware Severity
+
+The AI adjusts vulnerability severity based on project context:
+
+- **Bundled/Static Projects** (React, Vue, Angular, SPAs):
+  - DevDependencies → LOW (not in production bundle)
+  - Build tools (webpack, babel, eslint) → LOW
+  - Only runtime deps in client bundle → HIGH
+
+- **Server-side Projects** (Node.js APIs, Express):
+  - Runtime dependencies → HIGH
+  - DevDependencies → LOW
 
-| Option | Description                                            |
-|--------|--------------------------------------------------------|
-| `-t, --token` | GitHub personal access token to access code (required) |
-| `-d, --dry` | Analyze without posting comments to Github             |
-| `-i, --inline` | Post inline comments on files instead of summary       |
+- **Libraries** (npm/pypi packages):
+  - Runtime deps → HIGH (affects consumers)
+  - DevDependencies → LOW
 
 ## License
 

package/dist/cli.js

@@ -1,172 +1,36 @@
 #!/usr/bin/env node
 import { program } from 'commander';
-import chalk from 'chalk';
-import ora from 'ora';
-import { GitHubClient, parseFiles, parsePRReference } from './github.js';
-import { issuesToReviewComments, generateSummary } from './analyzer.js';
-import { analyzeWithCodex } from './codex.js';
-import { analyzeWithClaude } from './claude.js';
-import { cloneRepo } from './repo.js';
 import { createRequire } from 'module';
-import { execSync } from 'child_process';
+import { reviewCommand } from './review/command.js';
+import { scanCommand } from './scan/command.js';
 const require = createRequire(import.meta.url);
 const { version } = require('../package.json');
-const VALID_LLM_PROVIDERS = ['codex', 'claude'];
 program
     .name('nayan-ai')
-    .description('AI-powered PR code reviewer using Codex CLI')
-    .version(version)
+    .description('AI powered code reviewer using Codex & Claude Code agents')
+    .version(version);
+program
+    .command('review')
+    .description('Review a GitHub Pull Request')
     .argument('<pr-url>', 'GitHub PR URL (e.g., https://github.com/owner/repo/pull/123)')
     .requiredOption('-t, --token <token>', 'GitHub personal access token')
-    .option('-v, --verbose', 'Show real-time output from Codex CLI', false)
+    .option('-v, --verbose', 'Show real-time output from CLI', false)
     .option('-d, --dry', 'Only analyze, don\'t post comments', false)
     .option('-i, --inline', 'Post inline comments instead of summary', false)
     .option('-l, --llm <provider>', 'LLM provider: codex (default) or claude', 'codex')
     .option('--format <format>', 'Output format: text, json', 'text')
-    .action(run);
+    .action((prUrl, options) => reviewCommand(prUrl, options));
+program
+    .command('scan')
+    .description('Scan a GitHub repository for package vulnerabilities using AI')
+    .argument('<repo-url>', 'GitHub repo URL (e.g., https://github.com/owner/repo)')
+    .requiredOption('-t, --token <token>', 'GitHub personal access token')
+    .option('-p, --paths <paths>', 'Comma-separated list of paths to scan for projects')
+    .option('-l, --llm <provider>', 'LLM provider: codex (default) or claude', 'codex')
+    .option('-v, --verbose', 'Show real-time output from CLI', false)
+    .option('--format <format>', 'Output format: text, json', 'text')
+    .option('-f, --fix', 'Auto-fix vulnerabilities and create a PR with changes', false)
+    .option('-b, --branch <name>', 'Branch name for fix PR', 'nayan-ai/security-fixes-' + Date.now())
+    .action((repoUrl, options) => scanCommand(repoUrl, options));
 program.parse();
-function checkLLMAvailability(provider) {
-    if (provider === 'codex') {
-        execSync('npx @openai/codex --version', { stdio: 'ignore' });
-    }
-    else if (provider === 'claude') {
-        execSync('claude --version', { stdio: 'ignore' });
-    }
-}
-async function run(prUrl, options) {
-    try {
-        // Validate --llm option
-        if (!VALID_LLM_PROVIDERS.includes(options.llm)) {
-            console.error(chalk.red(`Error: Invalid LLM provider '${options.llm}'. Valid options: ${VALID_LLM_PROVIDERS.join(', ')}`));
-            process.exit(1);
-        }
-        // Check if the selected LLM CLI is available
-        checkLLMAvailability(options.llm);
-        const prInfo = parsePRReference(prUrl);
-        const githubUrl = prInfo.githubUrl;
-        console.log(chalk.bold.blue('\n🤖 Nayan AI - PR Reviewer'));
-        console.log('━'.repeat(40));
-        console.log(`  Repository: ${chalk.cyan(`${prInfo.owner}/${prInfo.repo}`)}`);
-        console.log(`  PR Number:  ${chalk.cyan(`#${prInfo.number}`)}`);
-        if (githubUrl) {
-            console.log(`  GitHub:     ${chalk.cyan(githubUrl)}`);
-        }
-        if (options.dry) {
-            console.log(`  Mode:       ${chalk.yellow('Dry Run (no comments will be posted)')}`);
-        }
-        console.log('━'.repeat(40) + '\n');
-        const github = new GitHubClient(options.token, githubUrl);
-        // Fetch PR details
-        let spinner = ora('Fetching PR details...').start();
-        const pr = await github.getPullRequest(prInfo);
-        spinner.succeed(`PR: ${pr.title}`);
-        // Fetch changed files
-        spinner = ora('Fetching changed files...').start();
-        const files = await github.getPullRequestFiles(prInfo);
-        const fileChanges = parseFiles(files);
-        spinner.succeed(`Found ${fileChanges.length} files with changes`);
-        // Clone and analyze with Codex CLI
-        spinner = ora('Cloning repository...').start();
-        const repo = await cloneRepo(prInfo, options.token, githubUrl);
-        let issues;
-        try {
-            spinner.succeed('Repository cloned');
-            const llmName = options.llm === 'claude' ? 'Claude Code' : 'Codex';
-            console.log(chalk.cyan(`Running code review with ${llmName} CLI...\n`));
-            if (options.llm === 'claude') {
-                const claudeOpts = { verbose: options.verbose };
-                issues = await analyzeWithClaude(repo.path, 'origin/main', claudeOpts);
-            }
-            else {
-                const codexOpts = { verbose: options.verbose };
-                issues = await analyzeWithCodex(repo.path, 'origin/main', codexOpts);
-            }
-            console.log(chalk.green(`\n✔ Analysis complete: ${issues.length} issues found`));
-        }
-        finally {
-            await repo.cleanup();
-        }
-        // Display results
-        console.log(chalk.bold('\n📋 Review Summary'));
-        console.log('─'.repeat(41));
-        if (options.format === 'json') {
-            console.log(JSON.stringify(issues, null, 2));
-        }
-        else {
-            printIssuesSummary(issues);
-        }
-        // Post to GitHub
-        if (!options.dry) {
-            spinner = ora('Posting review to GitHub...').start();
-            if (options.inline) {
-                // Post inline comments on specific lines
-                const reviewComments = issuesToReviewComments(issues);
-                const summary = generateSummary(issues);
-                await github.postReview(prInfo, pr.head.sha, summary, reviewComments);
-                spinner.succeed('Inline review posted to GitHub');
-            }
-            else {
-                // Post summary as a PR-level comment (default)
-                const summary = generateSummary(issues);
-                await github.postComment(prInfo, summary);
-                spinner.succeed('Review summary posted to GitHub');
-            }
-        }
-        else {
-            console.log(chalk.yellow('\nDry run mode - no comments posted to GitHub'));
-        }
-        console.log(chalk.green('\n✅ Review complete!\n'));
-    }
-    catch (error) {
-        console.error(chalk.red('\nError:'), error instanceof Error ? error.message : error);
-        process.exit(1);
-    }
-}
-function printIssuesSummary(issues) {
-    if (issues.length === 0) {
-        console.log(chalk.green('  No issues found! The code looks good.'));
-        return;
-    }
-    const bySeverity = {
-        error: issues.filter((i) => i.severity === 'error'),
-        warning: issues.filter((i) => i.severity === 'warning'),
-        info: issues.filter((i) => i.severity === 'info'),
-    };
-    // Print errors
-    if (bySeverity.error.length > 0) {
-        console.log(chalk.red.bold(`\n  🔴 Errors (${bySeverity.error.length}):`));
-        for (const issue of bySeverity.error) {
-            const icon = issue.category === 'functionality' ? '🐛' : issue.category === 'readability' ? '📖' : '⚡';
-            console.log(chalk.red(`    ${icon} ${issue.filename}:${issue.line}`));
-            console.log(`       ${issue.message}`);
-            if (issue.suggestion) {
-                console.log(chalk.dim(`       💡 ${issue.suggestion}`));
-            }
-        }
-    }
-    // Print warnings
-    if (bySeverity.warning.length > 0) {
-        console.log(chalk.yellow.bold(`\n  🟡 Warnings (${bySeverity.warning.length}):`));
-        for (const issue of bySeverity.warning) {
-            const icon = issue.category === 'functionality' ? '🐛' : issue.category === 'readability' ? '📖' : '⚡';
-            console.log(chalk.yellow(`    ${icon} ${issue.filename}:${issue.line}`));
-            console.log(`       ${issue.message}`);
-            if (issue.suggestion) {
-                console.log(chalk.dim(`       💡 ${issue.suggestion}`));
-            }
-        }
-    }
-    // Print info
-    if (bySeverity.info.length > 0) {
-        console.log(chalk.blue.bold(`\n  🔵 Info (${bySeverity.info.length}):`));
-        for (const issue of bySeverity.info) {
-            const icon = issue.category === 'functionality' ? '🐛' : issue.category === 'readability' ? '📖' : '⚡';
-            console.log(chalk.blue(`    ${icon} ${issue.filename}:${issue.line}`));
-            console.log(`       ${issue.message}`);
-            if (issue.suggestion) {
-                console.log(chalk.dim(`       💡 ${issue.suggestion}`));
-            }
-        }
-    }
-}
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAqB,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAsB,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGzC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE/C,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAEzD,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,6CAA6C,CAAC;KAC1D,OAAO,CAAC,OAAO,CAAC;KAChB,QAAQ,CAAC,UAAU,EAAE,8DAA8D,CAAC;KACpF,cAAc,CAAC,qBAAqB,EAAE,8BAA8B,CAAC;KACrE,MAAM,CAAC,eAAe,EAAE,sCAAsC,EAAE,KAAK,CAAC;KACtE,MAAM,CAAC,WAAW,EAAE,oCAAoC,EAAE,KAAK,CAAC;KAChE,MAAM,CAAC,cAAc,EAAE,yCAAyC,EAAE,KAAK,CAAC;KACxE,MAAM,CAAC,sBAAsB,EAAE,yCAAyC,EAAE,OAAO,CAAC;KAClF,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,CAAC;KAChE,MAAM,CAAC,GAAG,CAAC,CAAC;AAEf,OAAO,CAAC,KAAK,EAAE,CAAC;AAEhB,SAAS,oBAAoB,CAAC,QAAqB;IACjD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,QAAQ,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC;SAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,KAAa,EAAE,OAAmB;IACnD,IAAI,CAAC;QACH,wBAAwB;QACxB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAU,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,gCAAgC,OAAO,CAAC,GAAG,qBAAqB,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3H,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,6CAA6C;QAC7C,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAEnC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAChE,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,MAAM,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAEnC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAE1D,mBAAmB;QACnB,IAAI,OAAO,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC;QACpD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAEnC,sBAAsB;QACtB,OAAO,GAAG,GAAG,CAAC,2BAA2B,CAAC,CAAC,KAAK,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,CAAC,OAAO,CAAC,SAAS,WAAW,CAAC,MAAM,qBAAqB,CAAC,CAAC;QAElE,mCAAmC;QACnC,OAAO,GAAG,GAAG,CAAC,uBAAuB,CAAC,CAAC,KAAK,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAE/D,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;YAErC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,OAAO,WAAW,CAAC,CAAC,CAAC;YAExE,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,UAAU,GAAkB,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC/D,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,GAAiB,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC7D,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,eAAe,CAAC,CAAC,CAAC;QACnF,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;QAED,kBAAkB;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAE5B,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QAED,iBAAiB;QACjB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC;YAErD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,yCAAyC;gBACzC,MAAM,cAAc,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;gBACtD,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;gBACxC,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;gBACtE,OAAO,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,+CAA+C;gBAC/C,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;gBACxC,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC1C,OAAO,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,+CAA+C,CAAC,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAmB;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;QACnD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC;QACvD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;KAClD,CAAC;IAEF,eAAe;IACf,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,UAAU,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QAC3E,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YACvG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,UAAU,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QAClF,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YACvG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAED,aAAa;IACb,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,UAAU,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACzE,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YACvG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE/C,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,2DAA2D,CAAC;KACxE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,8BAA8B,CAAC;KAC3C,QAAQ,CAAC,UAAU,EAAE,8DAA8D,CAAC;KACpF,cAAc,CAAC,qBAAqB,EAAE,8BAA8B,CAAC;KACrE,MAAM,CAAC,eAAe,EAAE,gCAAgC,EAAE,KAAK,CAAC;KAChE,MAAM,CAAC,WAAW,EAAE,oCAAoC,EAAE,KAAK,CAAC;KAChE,MAAM,CAAC,cAAc,EAAE,yCAAyC,EAAE,KAAK,CAAC;KACxE,MAAM,CAAC,sBAAsB,EAAE,yCAAyC,EAAE,OAAO,CAAC;KAClF,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,CAAC;KAChE,MAAM,CAAC,CAAC,KAAa,EAAE,OAAsB,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpF,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,+DAA+D,CAAC;KAC5E,QAAQ,CAAC,YAAY,EAAE,uDAAuD,CAAC;KAC/E,cAAc,CAAC,qBAAqB,EAAE,8BAA8B,CAAC;KACrE,MAAM,CAAC,qBAAqB,EAAE,oDAAoD,CAAC;KACnF,MAAM,CAAC,sBAAsB,EAAE,yCAAyC,EAAE,OAAO,CAAC;KAClF,MAAM,CAAC,eAAe,EAAE,gCAAgC,EAAE,KAAK,CAAC;KAChE,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,CAAC;KAChE,MAAM,CAAC,WAAW,EAAE,uDAAuD,EAAE,KAAK,CAAC;KACnF,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,EAAE,0BAA0B,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;KAChG,MAAM,CAAC,CAAC,OAAe,EAAE,OAAoB,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpF,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/common/claude.d.ts

@@ -0,0 +1,6 @@
+import type { CodeIssue } from './types.js';
+export interface ClaudeOptions {
+    verbose?: boolean;
+}
+export declare const analyzeWithClaude: (repoPath: string, prompt: string, options: ClaudeOptions) => Promise<CodeIssue[]>;
+export declare const analyzeWithClaudeRaw: (repoPath: string, prompt: string, options: ClaudeOptions) => Promise<any>;

package/dist/common/claude.js

@@ -0,0 +1,180 @@
+import { spawn } from 'child_process';
+import chalk from 'chalk';
+export const analyzeWithClaude = async (repoPath, prompt, options) => {
+    const response = await runClaudeExec(repoPath, prompt, options);
+    return parseClaudeResponse(response);
+};
+export const analyzeWithClaudeRaw = async (repoPath, prompt, options) => {
+    const response = await runClaudeExec(repoPath, prompt, options);
+    return parseClaudeResponseRaw(response);
+};
+const runClaudeExec = (repoPath, prompt, options) => new Promise((resolve, reject) => {
+    const args = ['-p', '--output-format', 'json', prompt];
+    if (options.verbose) {
+        console.log(`\n[Claude] Running: claude ${args.slice(0, 3).join(' ')} "<prompt>"`);
+        console.log(`[Claude] Working directory: ${repoPath}`);
+    }
+    const startTime = Date.now();
+    const child = spawn('claude', args, { cwd: repoPath, stdio: ['pipe', 'pipe', 'pipe'] });
+    let stdout = '';
+    let stderr = '';
+    child.stdout.on('data', (data) => {
+        const chunk = data.toString();
+        stdout += chunk;
+        if (options.verbose) {
+            process.stdout.write(chunk);
+        }
+        else {
+            process.stdout.write(chalk.gray('.'));
+        }
+    });
+    child.stderr.on('data', (data) => {
+        const chunk = data.toString();
+        stderr += chunk;
+        if (options.verbose)
+            process.stderr.write(chunk);
+    });
+    child.on('close', (code) => {
+        if (!options.verbose)
+            console.log();
+        console.log(`\n[Claude] Completed in ${((Date.now() - startTime) / 1000).toFixed(1)}s`);
+        if (code !== 0) {
+            reject(new Error(`Claude review failed (exit ${code}): ${(stderr || stdout || 'Unknown error').slice(0, 500)}`));
+            return;
+        }
+        resolve(stdout);
+    });
+    child.on('error', (err) => {
+        if (err.code === 'ENOENT') {
+            reject(new Error('claude CLI not found. Install Claude Code CLI first: https://code.claude.com'));
+            return;
+        }
+        reject(err);
+    });
+});
+const mapIssue = (item) => ({
+    filename: item.filename || item.package || 'unknown',
+    line: item.line || 0,
+    category: item.category || 'functionality',
+    severity: item.severity || 'info',
+    message: item.message || item.title || item.description,
+    suggestion: item.suggestion || item.fixedIn,
+    // Preserve vulnerability-specific fields for scan command
+    package: item.package,
+    version: item.version,
+    title: item.title,
+    description: item.description,
+    fixedIn: item.fixedIn,
+    cve: item.cve,
+});
+const extractItems = (json) => {
+    if (Array.isArray(json.issues))
+        return json.issues;
+    if (Array.isArray(json.vulnerabilities))
+        return json.vulnerabilities;
+    return [];
+};
+const extractFixData = (text) => {
+    const fixMatch = text.match(/\{[\s\S]*"(?:fixes|updatedManifest)"[\s\S]*\}/);
+    if (!fixMatch)
+        return null;
+    try {
+        const parsed = JSON.parse(fixMatch[0]);
+        if (parsed.fixes || parsed.updatedManifest)
+            return parsed;
+    }
+    catch {
+        // ignore
+    }
+    return null;
+};
+const extractIssuesFromText = (text) => {
+    // First check for fix response
+    const fixData = extractFixData(text);
+    if (fixData) {
+        return [{
+                ...mapIssue({ message: 'Fix response' }),
+                _rawFixData: fixData
+            }];
+    }
+    const jsonMatch = text.match(/\{\s*"(?:issues|vulnerabilities)"\s*:\s*\[[\s\S]*?\]\s*\}/);
+    if (!jsonMatch)
+        return null;
+    try {
+        const parsed = JSON.parse(jsonMatch[0]);
+        const items = extractItems(parsed);
+        if (items.length > 0) {
+            return items.filter((item) => item.message || item.package || item.title).map(mapIssue);
+        }
+    }
+    catch {
+        // ignore
+    }
+    return null;
+};
+const parseClaudeResponse = (response) => {
+    try {
+        const parsed = JSON.parse(response);
+        const text = parsed.result || parsed.text || response;
+        // Check for fix response first
+        const fixData = extractFixData(typeof text === 'string' ? text : JSON.stringify(text));
+        if (fixData) {
+            return [{
+                    ...mapIssue({ message: 'Fix response' }),
+                    _rawFixData: fixData
+                }];
+        }
+        const issues = extractIssuesFromText(text);
+        if (issues)
+            return issues;
+    }
+    catch {
+        // Not valid JSON wrapper
+    }
+    const issues = extractIssuesFromText(response);
+    if (issues)
+        return issues;
+    if (response.trim() && !response.includes('"issues"') && !response.includes('"vulnerabilities"')) {
+        console.warn(chalk.yellow(`\n⚠ Warning: Claude response does not contain expected format`));
+        console.warn(chalk.gray(`  Response preview: ${response.slice(0, 200)}...`));
+    }
+    return [];
+};
+const parseClaudeResponseRaw = (response) => {
+    try {
+        const parsed = JSON.parse(response);
+        const text = parsed.result || parsed.text || response;
+        // Try to parse the text as JSON
+        if (typeof text === 'string') {
+            try {
+                return JSON.parse(text);
+            }
+            catch {
+                // Text contains JSON somewhere
+                const jsonMatch = text.match(/\{[\s\S]*"(?:fixes|updatedManifest|issues|vulnerabilities)"[\s\S]*\}/);
+                if (jsonMatch) {
+                    return JSON.parse(jsonMatch[0]);
+                }
+            }
+        }
+        // If parsed already has the structure we need
+        if (parsed.fixes || parsed.updatedManifest) {
+            return parsed;
+        }
+    }
+    catch {
+        // Not valid JSON wrapper
+    }
+    // Try to find JSON in raw response
+    const jsonMatch = response.match(/\{[\s\S]*"(?:fixes|updatedManifest|issues|vulnerabilities)"[\s\S]*\}/);
+    if (jsonMatch) {
+        try {
+            return JSON.parse(jsonMatch[0]);
+        }
+        catch {
+            // ignore
+        }
+    }
+    return null;
+};
+//# sourceMappingURL=claude.js.map

package/dist/common/claude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../src/common/claude.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,OAAO,KAAK,MAAM,OAAO,CAAC;AAM1B,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,QAAgB,EAChB,MAAc,EACd,OAAsB,EACA,EAAE;IACxB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAChE,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EACvC,QAAgB,EAChB,MAAc,EACd,OAAsB,EACR,EAAE;IAChB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAChE,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,QAAgB,EAChB,MAAc,EACd,OAAsB,EACL,EAAE,CACnB,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAEvD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAExF,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC;QAChB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC;QAChB,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAExF,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,IAAI,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACjH,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACxB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,QAAQ,GAAG,CAAC,IAAS,EAAmC,EAAE,CAAC,CAAC;IAChE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,IAAI,SAAS;IACpD,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC;IACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,eAAe;IAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM;IACjC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW;IACvD,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO;IAC3C,0DAA0D;IAC1D,OAAO,EAAE,IAAI,CAAC,OAAO;IACrB,OAAO,EAAE,IAAI,CAAC,OAAO;IACrB,KAAK,EAAE,IAAI,CAAC,KAAK;IACjB,WAAW,EAAE,IAAI,CAAC,WAAW;IAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;IACrB,GAAG,EAAE,IAAI,CAAC,GAAG;CACd,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,IAAS,EAAS,EAAE;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IACnD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC,eAAe,CAAC;IACrE,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,IAAY,EAAc,EAAE;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC7E,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,eAAe;YAAE,OAAO,MAAM,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,IAAY,EAAsB,EAAE;IACjE,+BAA+B;IAC/B,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC;gBACN,GAAG,QAAQ,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;gBACxC,WAAW,EAAE,OAAO;aACd,CAAC,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC1F,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,QAAgB,EAAe,EAAE;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC;QAEtD,+BAA+B;QAC/B,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACvF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC;oBACN,GAAG,QAAQ,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;oBACxC,WAAW,EAAE,OAAO;iBACd,CAAC,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACjG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,+DAA+D,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,QAAgB,EAAO,EAAE;IACvD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC;QAEtD,gCAAgC;QAChC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,+BAA+B;gBAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;gBACrG,IAAI,SAAS,EAAE,CAAC;oBACd,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,mCAAmC;IACnC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;IACzG,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}

package/dist/common/codex.d.ts

@@ -0,0 +1,6 @@
+import type { CodeIssue } from './types.js';
+export interface CodexOptions {
+    verbose?: boolean;
+}
+export declare const analyzeWithCodex: (repoPath: string, prompt: string, options: CodexOptions) => Promise<CodeIssue[]>;
+export declare const analyzeWithCodexRaw: (repoPath: string, prompt: string, options: CodexOptions) => Promise<any>;