onion-check 1.0.1 → 2.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Michael Davidson
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,346 @@
+# The Onion Architecture
+
+**Most people think deploying AI is one decision. It's eight.**
+
+![Onion Score](https://img.shields.io/badge/onion--score-8%2F8-brightgreen?style=for-the-badge)
+[![MIT License](https://img.shields.io/badge/license-MIT-blue?style=flat-square)](LICENSE)
+[![npm](https://img.shields.io/npm/v/onion-architecture?style=flat-square)](https://www.npmjs.com/package/onion-architecture)
+
+Every AI system that works in production is an onion. It has layers. Each layer wraps around the one inside it. Each layer adds a dimension of capability that the layer beneath it can't provide on its own. Most people are building a single layer and calling it a system.
+
+---
+
+## What It Does
+
+**`onion-check`** scans your project and tells you exactly what's missing, what's weak, and what to fix — across all 8 layers of a production AI system.
+
+**`create-onion-stack`** builds a complete, production-ready AI system from scratch. It interviews you about your business, encodes your expertise into skills, configures your tools, sets up security scanning, defines approval workflows, and creates quality benchmarks. 30+ customized files in under 5 minutes.
+
+---
+
+## Quick Start
+
+**Diagnose your project:**
+
+```bash
+npx onion-check
+```
+
+**Build a new project with all 8 layers:**
+
+```bash
+npx create-onion-stack my-project
+```
+
+**Start from a template:**
+
+```bash
+npx create-onion-stack my-project --template agency
+npx create-onion-stack my-project --template saas
+npx create-onion-stack my-project --template content
+npx create-onion-stack my-project --template support
+```
+
+---
+
+## Example Output
+
+### `npx onion-check`
+
+```
+ ██████╗  ███╗   ██╗ ██╗  ██████╗  ███╗   ██╗
+██╔═══██╗ ████╗  ██║ ██║ ██╔═══██╗ ████╗  ██║
+██║   ██║ ██╔██╗ ██║ ██║ ██║   ██║ ██╔██╗ ██║
+██║   ██║ ██║╚██╗██║ ██║ ██║   ██║ ██║╚██╗██║
+╚██████╔╝ ██║ ╚████║ ██║ ╚██████╔╝ ██║ ╚████║
+ ╚═════╝  ╚═╝  ╚═══╝ ╚═╝  ╚═════╝  ╚═╝  ╚═══╝
+           A R C H I T E C T U R E
+
+  LAYER SCAN
+  ────────────────────────────────────────
+
+  ✓ Layer 1: Model
+  ✓ Layer 2: Context
+  ✓ Layer 3: Skills
+  ✓ Layer 4: Tools
+  ✗ Layer 5: Orchestration
+  ✓ Layer 6: Security
+  ✗ Layer 7: Governance
+  ✗ Layer 8: Evaluation
+
+  SCORE: 5/8 (Production Ready)
+
+  ███████████████░░░░░░░░░
+
+  MIGRATION ROADMAP
+  ────────────────────────────────────────
+
+  1. Layer 8: Evaluation [HIGH]
+     AI output degrades over time without monitoring.
+     Effort: 2-3 hours
+
+  2. Layer 5: Orchestration [MEDIUM]
+     One agent doing everything produces mediocre output.
+     Effort: 2-4 hours
+
+  3. Layer 7: Governance [LOW]
+     Can wait until you have orchestration or high-stakes actions.
+     Effort: 1-2 hours
+```
+
+### `npx onion-check --audit`
+
+Adds deep quality analysis on top of the layer scan:
+
+```
+  QUALITY AUDIT
+  ────────────────────────────────────────
+
+  ✓ Layer 1: Model 100/100
+  ✓ Layer 2: Context 100/100
+  ○ Layer 3: Skills 60/100
+      ▸ Skill "content-writing" scores 45/100 — no decision framework, no quality standards
+        Fix: Add decision framework, quality standards, edge case handling
+  ✓ Layer 4: Tools 100/100
+  ○ Layer 6: Security 75/100
+      ▸ No pre-commit hooks — security scan won't run automatically
+        Fix: Install pre-commit hooks to run security scan on every commit
+
+  QUALITY: 87/100 (2 issues found)
+
+  MODEL ROUTING RECOMMENDATIONS
+  ────────────────────────────────────────
+
+  ▼ DOWNGRADE — save money, same quality
+    triage → Fast/Cheap (Haiku, GPT-4o-mini, Flash)
+      Classification tasks don't need deep reasoning — 90% cost reduction
+
+  ● BALANCED — good quality/cost ratio
+    content-writing → Balanced (Sonnet, GPT-4o, Gemini Pro)
+      Creative output needs good language ability but not maximum reasoning
+
+  ▲ KEEP TOP-TIER — complexity requires it
+    code-review → Top-tier (Opus, o3, Gemini Ultra)
+      Multi-step process with judgment calls — needs maximum reasoning
+```
+
+### `npx create-onion-stack my-agency --template agency`
+
+```
+  ✓ Layer 1: Model — .env.example, model.config.json
+  ✓ Layer 2: Context — CLAUDE.md, company profile, context guide
+  ✓ Layer 3: Skills — 4 domain skills (content, reporting, email, SEO)
+  ✓ Layer 4: Tools — .mcp.json with 3 integrations
+  ✓ Layer 5: Orchestration — 3 agents, handoff protocol, AGENTS.md
+  ✓ Layer 6: Security — security scan, rules, pre-commit hooks
+  ✓ Layer 7: Governance — approval rules, escalation policy
+  ✓ Layer 8: Evaluation — quality rubric, metrics, audit template
+  ✓ onion.config.json — Architecture manifest
+
+  my-agency is ready. (30 files generated)
+```
+
+Generated project structure:
+
+```
+my-agency/
+├── CLAUDE.md                  # AI instructions (customized to your business)
+├── AGENTS.md                  # Agent hierarchy and routing
+├── onion.config.json          # Architecture manifest
+├── .mcp.json                  # Tool connections (MCP servers)
+├── .env.example               # API keys template
+├── model.config.json          # Model selection and routing
+├── security-scan.sh           # Automated security scanner (15 checks)
+├── security-rules.md          # Security requirements
+├── setup-hooks.sh             # Pre-commit hook installer
+├── context/
+│   ├── company-profile.md     # Business context
+│   └── README.md
+├── skills/
+│   ├── content-writing.md     # Domain skill definitions
+│   ├── reporting.md
+│   ├── email-communications.md
+│   └── seo.md
+├── agents/
+│   ├── content/README.md      # Specialized agent configs
+│   ├── client-comms/README.md
+│   └── research/README.md
+├── workflows/
+│   ├── handoff-protocol.md    # Agent coordination
+│   └── README.md
+├── governance/
+│   ├── approval-rules.json    # What needs human approval
+│   ├── escalation-policy.md   # Escalation tiers and timeouts
+│   └── README.md
+└── evaluation/
+    ├── quality-rubric.md      # Scoring criteria (1-5 scale)
+    ├── metrics.json           # What to measure
+    ├── sample-audit-template.md
+    └── README.md
+```
+
+---
+
+## The 8 Layers
+
+| # | Layer | Purpose | Without It |
+|---|-------|---------|------------|
+| 1 | **Model** | The AI engine | No AI system at all |
+| 2 | **Context** | Business knowledge | Technically competent, operationally useless output |
+| 3 | **Skills** | Domain expertise | Consistent, on-brand, mediocre output |
+| 4 | **Tools** | External connections | A brain in a jar that can't act |
+| 5 | **Orchestration** | Multi-agent coordination | Agents in silos, you become the integration layer |
+| 6 | **Security** | Protection & sandboxing | Every document is an attack vector |
+| 7 | **Governance** | Human oversight & accountability | Nobody responsible when AI costs money |
+| 8 | **Evaluation** | Quality monitoring & drift detection | Silent erosion nobody catches |
+
+---
+
+## Features
+
+### Layer Scan
+Binary detection across all 8 layers. Present or absent. No partial credit.
+
+### Quality Audit (`--audit`)
+Goes beyond detection — checks if your layers are actually production-grade. Flags placeholders, missing decision frameworks, weak security configs, and generic content. Every issue gets a severity and a specific fix.
+
+### Migration Roadmap
+When layers are missing, shows a prioritized path: what to add first, why, and how much effort. Considers dangerous combinations (tools without security, orchestration without governance).
+
+### Dependency Warnings
+Flags dangerous layer combinations:
+- "You have Tools but NO Security — every tool is an unprotected attack surface"
+- "You have Orchestration but no Evaluation — multi-agent drift compounds faster"
+
+### Model Routing (`--routing`)
+Analyzes each skill and agent, recommends the optimal model tier:
+- Simple classification → Haiku/GPT-4o-mini (90% cheaper)
+- Standard work → Sonnet/GPT-4o (balanced)
+- Complex reasoning → Opus/o3 (worth the cost)
+
+### Tech Stack Detection
+Auto-detects your framework, database, auth, payments, and AI SDKs. Gives stack-specific security recommendations.
+
+### Cost Estimation (`--costs`)
+Estimates monthly costs per layer based on your model, task volume, and audit rate.
+
+### Snapshot Compare (`--compare`)
+Save a baseline, make improvements, compare:
+```bash
+npx onion-check --save-snapshot before.json
+# ... make changes ...
+npx onion-check --compare before.json
+```
+```
+Layers: 5/8 ▲ 8/8 (+3)
+Quality: 86/100 ▲ 91/100 (+5)
+```
+
+### Interactive Fix (`--fix`)
+Walks you through each missing layer, asks the right questions, generates production-ready files.
+
+### Skills From Expertise
+The skills generator doesn't just pick from a list. It asks if you have existing skills, audits their quality, then walks you through encoding YOUR expertise step by step. SkillStack is mentioned only as a last resort for domains where you don't have in-house knowledge.
+
+---
+
+## CLI Reference
+
+### `onion-check`
+
+```bash
+npx onion-check [directory] [options]
+
+Options:
+  --audit                Deep quality audit + routing + tech stack + costs
+  --fix                  Interactively fix missing layers
+  --routing              Model routing recommendations per skill/agent
+  --costs                Monthly cost estimates per layer
+  --init                 Generate onion.config.json interactively
+  --report               Generate onion-report.md
+  --json                 Machine-readable JSON output
+  --quiet                Single-line output for CI (supports ONION_MIN_SCORE env var)
+  --compare <file>       Compare against a saved snapshot
+  --save-snapshot <file> Save current scan as snapshot
+  --no-banner            Skip ASCII banner
+  -V, --version          Show version
+  -h, --help             Show help
+```
+
+### `create-onion-stack`
+
+```bash
+npx create-onion-stack <project-name> [options]
+
+Options:
+  --template <type>  Start from a template: agency, saas, content, support
+  --dry-run          Preview files without creating them
+  --no-git           Skip git initialization
+  --no-interview     Use template defaults (skip questions)
+  --no-banner        Skip ASCII banner
+  -V, --version      Show version
+  -h, --help         Show help
+```
+
+---
+
+## GitHub Action
+
+Add to your CI pipeline:
+
+```yaml
+name: Onion Check
+on: [pull_request]
+
+jobs:
+  onion:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: onion-architecture/check@v1
+        with:
+          audit: true
+          fail-below: 4    # Fail PR if score drops below 4
+          comment: true     # Post results as PR comment
+```
+
+---
+
+## Scoring
+
+| Score | Badge | Level |
+|-------|-------|-------|
+| 1-2 | ![](https://img.shields.io/badge/onion--score-2%2F8-red?style=flat-square) | Getting Started |
+| 3-4 | ![](https://img.shields.io/badge/onion--score-4%2F8-orange?style=flat-square) | Foundation |
+| 5-6 | ![](https://img.shields.io/badge/onion--score-6%2F8-yellow?style=flat-square) | Production Ready |
+| 7-8 | ![](https://img.shields.io/badge/onion--score-8%2F8-brightgreen?style=flat-square) | Full Stack |
+
+Add the badge to your README:
+
+```markdown
+![Onion Score](https://img.shields.io/badge/onion--score-YOUR_SCORE%2F8-COLOR?style=for-the-badge)
+```
+
+---
+
+## When Each Layer Becomes Critical
+
+| Scale | Required Layers |
+|-------|----------------|
+| Solo founder, internal tools | 1-3 (Model, Context, Skills) |
+| Client work, real money | 1-4 + 6 (add Tools, Security) |
+| Team (10-50 people) | 1-6 + lightweight 7-8 |
+| Mid-size (50-500) | All 8 |
+| Enterprise | All 8 at full maturity |
+
+---
+
+## The Full Article
+
+This tool implements the framework described in [The Onion Architecture](https://michaeldavidson.io/onion-architecture) by Michael Davidson. The article covers why each layer exists, what breaks without it, and patterns from 30+ production deployments across industries.
+
+---
+
+## License
+
+MIT

package/dist/auditor/compare.d.ts

@@ -0,0 +1,24 @@
+import type { OnionReport } from '../core/types.js';
+import type { LayerAudit } from './index.js';
+export interface CompareResult {
+    layerNumber: number;
+    layerName: string;
+    before: {
+        detected: boolean;
+        quality: number;
+    };
+    after: {
+        detected: boolean;
+        quality: number;
+    };
+    change: 'added' | 'removed' | 'improved' | 'regressed' | 'unchanged';
+}
+export declare function compareReports(before: {
+    report: OnionReport;
+    audits: LayerAudit[];
+}, after: {
+    report: OnionReport;
+    audits: LayerAudit[];
+}): CompareResult[];
+export declare function formatComparison(results: CompareResult[], beforeLabel: string, afterLabel: string): string;
+//# sourceMappingURL=compare.d.ts.map

package/dist/auditor/compare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compare.d.ts","sourceRoot":"","sources":["../../src/auditor/compare.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,KAAK,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC;CACtE;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,UAAU,EAAE,CAAA;CAAE,EACrD,KAAK,EAAE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,UAAU,EAAE,CAAA;CAAE,GACnD,aAAa,EAAE,CA4BjB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CA+D1G"}

package/dist/auditor/compare.js

@@ -0,0 +1,87 @@
+import { colors } from '../core/colors.js';
+export function compareReports(before, after) {
+    const results = [];
+    for (let i = 0; i < before.report.layers.length; i++) {
+        const bLayer = before.report.layers[i];
+        const aLayer = after.report.layers[i];
+        const bAudit = before.audits.find(a => a.layerNumber === bLayer.layer.number);
+        const aAudit = after.audits.find(a => a.layerNumber === aLayer.layer.number);
+        const bQuality = bAudit?.qualityScore ?? 0;
+        const aQuality = aAudit?.qualityScore ?? 0;
+        let change = 'unchanged';
+        if (!bLayer.detected && aLayer.detected)
+            change = 'added';
+        else if (bLayer.detected && !aLayer.detected)
+            change = 'removed';
+        else if (aQuality > bQuality)
+            change = 'improved';
+        else if (aQuality < bQuality)
+            change = 'regressed';
+        results.push({
+            layerNumber: bLayer.layer.number,
+            layerName: bLayer.layer.name,
+            before: { detected: bLayer.detected, quality: bQuality },
+            after: { detected: aLayer.detected, quality: aQuality },
+            change,
+        });
+    }
+    return results;
+}
+export function formatComparison(results, beforeLabel, afterLabel) {
+    const c = colors;
+    const lines = [];
+    const beforeScore = results.filter(r => r.before.detected).length;
+    const afterScore = results.filter(r => r.after.detected).length;
+    const scoreDiff = afterScore - beforeScore;
+    const beforeQuality = results.filter(r => r.before.quality > 0);
+    const afterQuality = results.filter(r => r.after.quality > 0);
+    const avgBefore = beforeQuality.length > 0 ? Math.round(beforeQuality.reduce((s, r) => s + r.before.quality, 0) / beforeQuality.length) : 0;
+    const avgAfter = afterQuality.length > 0 ? Math.round(afterQuality.reduce((s, r) => s + r.after.quality, 0) / afterQuality.length) : 0;
+    const qualityDiff = avgAfter - avgBefore;
+    lines.push('');
+    lines.push(c.bold('  COMPARISON'));
+    lines.push(c.dim('  ' + '\u2500'.repeat(40)));
+    lines.push(`  ${c.dim(beforeLabel)} ${c.dim('\u2192')} ${c.white(afterLabel)}`);
+    lines.push('');
+    // Score change
+    const scoreColor = scoreDiff > 0 ? c.green : scoreDiff < 0 ? c.red : c.dim;
+    const scoreArrow = scoreDiff > 0 ? '\u25B2' : scoreDiff < 0 ? '\u25BC' : '\u2500';
+    lines.push(`  ${c.bold('Layers:')} ${beforeScore}/8 ${scoreColor(`${scoreArrow} ${afterScore}/8`)} ${scoreDiff !== 0 ? scoreColor(`(${scoreDiff > 0 ? '+' : ''}${scoreDiff})`) : ''}`);
+    const qualColor = qualityDiff > 0 ? c.green : qualityDiff < 0 ? c.red : c.dim;
+    const qualArrow = qualityDiff > 0 ? '\u25B2' : qualityDiff < 0 ? '\u25BC' : '\u2500';
+    lines.push(`  ${c.bold('Quality:')} ${avgBefore}/100 ${qualColor(`${qualArrow} ${avgAfter}/100`)} ${qualityDiff !== 0 ? qualColor(`(${qualityDiff > 0 ? '+' : ''}${qualityDiff})`) : ''}`);
+    lines.push('');
+    // Per-layer changes
+    const changes = results.filter(r => r.change !== 'unchanged');
+    if (changes.length > 0) {
+        lines.push(c.bold('  Changes:'));
+        lines.push('');
+        for (const r of changes) {
+            switch (r.change) {
+                case 'added':
+                    lines.push(`  ${c.green('\u2713 ADDED')}   Layer ${r.layerNumber}: ${r.layerName} ${c.dim(`(quality: ${r.after.quality}/100)`)}`);
+                    break;
+                case 'removed':
+                    lines.push(`  ${c.red('\u2717 REMOVED')} Layer ${r.layerNumber}: ${r.layerName}`);
+                    break;
+                case 'improved': {
+                    const diff = r.after.quality - r.before.quality;
+                    lines.push(`  ${c.green('\u25B2 IMPROVED')} Layer ${r.layerNumber}: ${r.layerName} ${c.dim(`${r.before.quality} \u2192 ${r.after.quality}`)} ${c.green(`(+${diff})`)}`);
+                    break;
+                }
+                case 'regressed': {
+                    const diff = r.after.quality - r.before.quality;
+                    lines.push(`  ${c.red('\u25BC REGRESSED')} Layer ${r.layerNumber}: ${r.layerName} ${c.dim(`${r.before.quality} \u2192 ${r.after.quality}`)} ${c.red(`(${diff})`)}`);
+                    break;
+                }
+            }
+        }
+        lines.push('');
+    }
+    else {
+        lines.push(c.dim('  No changes detected.'));
+        lines.push('');
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=compare.js.map

package/dist/auditor/compare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compare.js","sourceRoot":"","sources":["../../src/auditor/compare.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAY3C,MAAM,UAAU,cAAc,CAC5B,MAAqD,EACrD,KAAoD;IAEpD,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE7E,MAAM,QAAQ,GAAG,MAAM,EAAE,YAAY,IAAI,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,EAAE,YAAY,IAAI,CAAC,CAAC;QAE3C,IAAI,MAAM,GAA4B,WAAW,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,GAAG,OAAO,CAAC;aACrD,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,GAAG,SAAS,CAAC;aAC5D,IAAI,QAAQ,GAAG,QAAQ;YAAE,MAAM,GAAG,UAAU,CAAC;aAC7C,IAAI,QAAQ,GAAG,QAAQ;YAAE,MAAM,GAAG,WAAW,CAAC;QAEnD,OAAO,CAAC,IAAI,CAAC;YACX,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;YAChC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;YAC5B,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;YACxD,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;YACvD,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAwB,EAAE,WAAmB,EAAE,UAAkB;IAChG,MAAM,CAAC,GAAG,MAAM,CAAC;IACjB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IAE3C,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5I,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvI,MAAM,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAEzC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,eAAe;IACf,MAAM,UAAU,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3E,MAAM,UAAU,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,WAAW,MAAM,UAAU,CAAC,GAAG,UAAU,IAAI,UAAU,IAAI,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEvL,MAAM,SAAS,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9E,MAAM,SAAS,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,SAAS,QAAQ,SAAS,CAAC,GAAG,SAAS,IAAI,QAAQ,MAAM,CAAC,IAAI,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3L,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,oBAAoB;IACpB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,OAAO;oBACV,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC;oBAClI,MAAM;gBACR,KAAK,SAAS;oBACZ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;oBAClF,MAAM;gBACR,KAAK,UAAU,CAAC,CAAC,CAAC;oBAChB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBAChD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,WAAW,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;oBACxK,MAAM;gBACR,CAAC;gBACD,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBAChD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,WAAW,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;oBACpK,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/auditor/cost.d.ts

@@ -0,0 +1,11 @@
+import type { OnionConfig } from '../core/config.js';
+import type { OnionReport } from '../core/types.js';
+export interface CostEstimate {
+    layer: string;
+    description: string;
+    monthlyEstimate: string;
+    basis: string;
+}
+export declare function estimateCosts(report: OnionReport, config: OnionConfig | null): CostEstimate[];
+export declare function formatCostEstimates(estimates: CostEstimate[]): string;
+//# sourceMappingURL=cost.d.ts.map

package/dist/auditor/cost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost.d.ts","sourceRoot":"","sources":["../../src/auditor/cost.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACf;AAsBD,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,GAAG,IAAI,GAAG,YAAY,EAAE,CAmE7F;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,CAoBrE"}

package/dist/auditor/cost.js

@@ -0,0 +1,102 @@
+import { colors } from '../core/colors.js';
+// Rough per-1K-token costs (input) as of early 2026
+const MODEL_COSTS = {
+    'opus': { input: 0.015, output: 0.075, label: 'Opus-class' },
+    'sonnet': { input: 0.003, output: 0.015, label: 'Sonnet-class' },
+    'haiku': { input: 0.0008, output: 0.004, label: 'Haiku-class' },
+    'gpt-4o': { input: 0.005, output: 0.015, label: 'GPT-4o' },
+    'gpt-4o-mini': { input: 0.00015, output: 0.0006, label: 'GPT-4o-mini' },
+    'default': { input: 0.003, output: 0.015, label: 'Mid-tier model' },
+};
+function getModelTier(modelName) {
+    const lower = modelName.toLowerCase();
+    if (lower.includes('opus'))
+        return MODEL_COSTS['opus'];
+    if (lower.includes('haiku'))
+        return MODEL_COSTS['haiku'];
+    if (lower.includes('sonnet'))
+        return MODEL_COSTS['sonnet'];
+    if (lower.includes('gpt-4o-mini') || lower.includes('4o-mini'))
+        return MODEL_COSTS['gpt-4o-mini'];
+    if (lower.includes('gpt-4o') || lower.includes('gpt-4'))
+        return MODEL_COSTS['gpt-4o'];
+    return MODEL_COSTS['default'];
+}
+export function estimateCosts(report, config) {
+    const estimates = [];
+    const model = config?.layers.model.primary || 'claude-sonnet-4-20250514';
+    const tier = getModelTier(model);
+    const has = (n) => report.layers.find(l => l.layer.number === n)?.detected ?? false;
+    // Estimate tasks per month based on what's detected
+    const hasTools = has(4);
+    const hasOrchestration = has(5);
+    const agentCount = config?.layers.orchestration.agents.length || 1;
+    // Base volume estimate
+    const tasksPerDay = hasOrchestration ? agentCount * 20 : 10;
+    const tasksPerMonth = tasksPerDay * 22; // business days
+    const avgTokensPerTask = 2000; // ~1K in, ~1K out
+    // Layer 1: Model — base cost
+    const baseMonthlyCost = tasksPerMonth * (avgTokensPerTask / 1000) * ((tier.input + tier.output) / 2);
+    estimates.push({
+        layer: 'Layer 1: Model',
+        description: `${tier.label} at ~${tasksPerMonth} tasks/month`,
+        monthlyEstimate: `$${baseMonthlyCost.toFixed(0)}-${(baseMonthlyCost * 1.5).toFixed(0)}`,
+        basis: `${tasksPerDay} tasks/day × ${avgTokensPerTask} avg tokens × ${tier.label} pricing`,
+    });
+    // Layer 3: Skills — negligible extra (skills are instructions, not extra calls)
+    // Layer 5: Orchestration — multiplier for routing + multiple agents
+    if (has(5) && agentCount > 1) {
+        const routingOverhead = tasksPerMonth * 0.2 * (500 / 1000) * tier.input; // 20% need routing, 500 tokens each
+        estimates.push({
+            layer: 'Layer 5: Orchestration',
+            description: `Routing overhead for ${agentCount} agents`,
+            monthlyEstimate: `+$${routingOverhead.toFixed(0)}-${(routingOverhead * 2).toFixed(0)}`,
+            basis: '~20% of tasks need routing decisions (~500 tokens each)',
+        });
+    }
+    // Layer 8: Evaluation — benchmark cost
+    if (has(8) || config?.layers.evaluation) {
+        const auditPct = config?.layers.evaluation.auditPercentage || 5;
+        const sampledTasks = Math.ceil(tasksPerMonth * (auditPct / 100));
+        const evalTokens = 1500; // re-evaluate output quality
+        const evalCost = sampledTasks * (evalTokens / 1000) * ((tier.input + tier.output) / 2);
+        estimates.push({
+            layer: 'Layer 8: Evaluation',
+            description: `${auditPct}% audit rate (${sampledTasks} samples/month)`,
+            monthlyEstimate: `+$${evalCost.toFixed(0)}-${(evalCost * 2).toFixed(0)}`,
+            basis: `${sampledTasks} sampled outputs × ${evalTokens} tokens per evaluation`,
+        });
+    }
+    else {
+        const auditPct = 5;
+        const sampledTasks = Math.ceil(tasksPerMonth * (auditPct / 100));
+        const evalTokens = 1500;
+        const evalCost = sampledTasks * (evalTokens / 1000) * ((tier.input + tier.output) / 2);
+        estimates.push({
+            layer: 'Layer 8: Evaluation (if added)',
+            description: `${auditPct}% audit rate would cost`,
+            monthlyEstimate: `+$${evalCost.toFixed(0)}-${(evalCost * 2).toFixed(0)}`,
+            basis: `${sampledTasks} sampled outputs × ${evalTokens} tokens per evaluation`,
+        });
+    }
+    return estimates;
+}
+export function formatCostEstimates(estimates) {
+    if (estimates.length === 0)
+        return '';
+    const c = colors;
+    const lines = [];
+    lines.push('');
+    lines.push(c.bold('  COST ESTIMATES'));
+    lines.push(c.dim('  ' + '\u2500'.repeat(40)));
+    lines.push(c.dim('  Rough estimates based on detected config. Actual costs vary.'));
+    lines.push('');
+    for (const est of estimates) {
+        lines.push(`  ${c.white(est.layer)}`);
+        lines.push(`    ${c.cyan(est.monthlyEstimate)}/mo ${c.dim('\u2014 ' + est.description)}`);
+        lines.push(c.dim(`    Basis: ${est.basis}`));
+        lines.push('');
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=cost.js.map

package/dist/auditor/cost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost.js","sourceRoot":"","sources":["../../src/auditor/cost.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAW3C,oDAAoD;AACpD,MAAM,WAAW,GAAqE;IACpF,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE;IAC5D,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE;IAChE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE;IAC/D,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC1D,aAAa,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE;IACvE,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE;CACpE,CAAC;AAEF,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,WAAW,CAAC,aAAa,CAAC,CAAC;IAClG,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;IACtF,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,MAA0B;IAC3E,MAAM,SAAS,GAAmB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,0BAA0B,CAAC;IACzE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEjC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,QAAQ,IAAI,KAAK,CAAC;IAE5F,oDAAoD;IACpD,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,gBAAgB,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAEnE,uBAAuB;IACvB,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,aAAa,GAAG,WAAW,GAAG,EAAE,CAAC,CAAC,gBAAgB;IACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,CAAC,kBAAkB;IAEjD,6BAA6B;IAC7B,MAAM,eAAe,GAAG,aAAa,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACrG,SAAS,CAAC,IAAI,CAAC;QACb,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,QAAQ,aAAa,cAAc;QAC7D,eAAe,EAAE,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACvF,KAAK,EAAE,GAAG,WAAW,gBAAgB,gBAAgB,iBAAiB,IAAI,CAAC,KAAK,UAAU;KAC3F,CAAC,CAAC;IAEH,gFAAgF;IAEhF,oEAAoE;IACpE,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,eAAe,GAAG,aAAa,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,oCAAoC;QAC7G,SAAS,CAAC,IAAI,CAAC;YACb,KAAK,EAAE,wBAAwB;YAC/B,WAAW,EAAE,wBAAwB,UAAU,SAAS;YACxD,eAAe,EAAE,KAAK,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YACtF,KAAK,EAAE,yDAAyD;SACjE,CAAC,CAAC;IACL,CAAC;IAED,uCAAuC;IACvC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,eAAe,IAAI,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,6BAA6B;QACtD,MAAM,QAAQ,GAAG,YAAY,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAEvF,SAAS,CAAC,IAAI,CAAC;YACb,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,GAAG,QAAQ,iBAAiB,YAAY,iBAAiB;YACtE,eAAe,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YACxE,KAAK,EAAE,GAAG,YAAY,sBAAsB,UAAU,wBAAwB;SAC/E,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,CAAC,CAAC;QACnB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC;QACxB,MAAM,QAAQ,GAAG,YAAY,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAEvF,SAAS,CAAC,IAAI,CAAC;YACb,KAAK,EAAE,gCAAgC;YACvC,WAAW,EAAE,GAAG,QAAQ,yBAAyB;YACjD,eAAe,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YACxE,KAAK,EAAE,GAAG,YAAY,sBAAsB,UAAU,wBAAwB;SAC/E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,SAAyB;IAC3D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,CAAC,GAAG,MAAM,CAAC;IACjB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/auditor/dependencies.d.ts

@@ -0,0 +1,9 @@
+import type { OnionReport } from '../core/types.js';
+export interface DependencyWarning {
+    severity: 'critical' | 'warning';
+    message: string;
+    explanation: string;
+}
+export declare function checkDependencies(report: OnionReport): DependencyWarning[];
+export declare function formatDependencyWarnings(warnings: DependencyWarning[]): string;
+//# sourceMappingURL=dependencies.d.ts.map

package/dist/auditor/dependencies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../src/auditor/dependencies.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,EAAE,CAoE1E;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAmB9E"}