prism-pr 1.0.0-alpha.47

package/dist/commands/rules/stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../../src/commands/rules/stats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,OAAO;IAC7C,MAAM,CAAC,WAAW,GAAG,mDAAmD,CAAC;IAEzE,MAAM,CAAC,QAAQ,GAAG;QAChB,qDAAqD;QACrD,4EAA4E;KAC7E,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG;QACb,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,0BAA0B;YACvC,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,iBAAiB;YAC9B,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC;YACtB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,+BAA+B;YAC5C,OAAO,EAAE,EAAE;SACZ,CAAC;QACF,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC;YACjB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,sBAAsB;YACnC,OAAO,EAAE,EAAE;SACZ,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;YACrB,WAAW,EAAE,wBAAwB;YACrC,OAAO,EAAE,KAAK;SACf,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE1E,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAChE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACvC,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9E,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gCAAgC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,CACnE,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,YAAY,EAAE,KAAK,CAAC,QAAQ;aAC7B,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yBAAyB,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,CAC5D,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAElD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;gBACtB,IAAI,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC;gBACzE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;aACrC,CAAC,CAAC;YAEH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC;oBACT,CAAC,GAAG,CAAC;oBACL,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;oBAC5D,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,KAAK;iBACR,CAAC,CAAC;YACL,CAAC;YAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,aAAa,KAAK,CAAC,MAAM,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,kBAAkB,MAAM,CAAC,YAAY,cAAc;gBACzG,8CAA8C,CAC/C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,OAAO,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC"}

package/dist/commands/rules/sync.d.ts

@@ -0,0 +1,15 @@
+import { Command } from '@oclif/core';
+export default class RulesSync extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        workspace: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        repo: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        sessions: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'skip-rules': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=sync.d.ts.map

package/dist/commands/rules/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../../src/commands/rules/sync.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAU7C,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,OAAO;IAC5C,MAAM,CAAC,WAAW,SAAuD;IAEzE,MAAM,CAAC,QAAQ,WAKb;IAEF,MAAM,CAAC,KAAK;;;;;;;MA6BV;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA6G3B"}

package/dist/commands/rules/sync.js

@@ -0,0 +1,144 @@
+import path from 'node:path';
+import { Command, Flags } from '@oclif/core';
+import { getDatabase } from '../../persistence/database.js';
+import { SessionRepository } from '../../persistence/repository.js';
+import { FindingAggregator } from '../../rules-engine/finding-aggregator.js';
+import { PatternGenerator } from '../../rules-engine/pattern-generator.js';
+import { RulesEngineError } from '../../rules-engine/types.js';
+import { Logger, LogLevel } from '../../utils/logger.js';
+export default class RulesSync extends Command {
+    static description = 'Generate .prism-patterns.json from review history';
+    static examples = [
+        '$ prism rules sync --workspace acme --repo my-repo',
+        '$ prism rules sync --workspace acme --repo my-repo --output ./custom/.prism-patterns.json',
+        '$ prism rules sync --workspace acme --repo my-repo --sessions 20',
+        '$ prism rules sync --workspace acme --repo my-repo --skip-rules',
+    ];
+    static flags = {
+        workspace: Flags.string({
+            char: 'w',
+            description: 'Bitbucket workspace slug',
+            required: true,
+        }),
+        repo: Flags.string({
+            char: 'r',
+            description: 'Repository slug',
+            required: true,
+        }),
+        output: Flags.string({
+            char: 'o',
+            description: 'Output path for .prism-patterns.json',
+            default: '.prism-patterns.json',
+        }),
+        sessions: Flags.integer({
+            char: 's',
+            description: 'Number of most-recent sessions to include',
+            default: 10,
+        }),
+        verbose: Flags.boolean({
+            description: 'Enable verbose logging',
+            default: false,
+        }),
+        'skip-rules': Flags.boolean({
+            description: 'Skip ast-grep rule generation (faster, produces v2 file without rules)',
+            default: false,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(RulesSync);
+        const logger = new Logger(flags.verbose ? LogLevel.debug : LogLevel.warn);
+        try {
+            const db = getDatabase(logger);
+            if (!db) {
+                process.stderr.write('✗ Database unavailable — run at least one review first.\n');
+                this.exit(1);
+                return;
+            }
+            const repo = new SessionRepository(db);
+            const count = repo.getSessionCountForRepo(flags.workspace, flags.repo);
+            if (count === 0) {
+                process.stdout.write(`No review sessions found for ${flags.workspace}/${flags.repo}. Run 'prism review start' first.\n`);
+                this.exit(0);
+                return;
+            }
+            const aggregator = new FindingAggregator(db);
+            const result = aggregator.aggregate({
+                workspace: flags.workspace,
+                repo: flags.repo,
+                sessionLimit: flags.sessions,
+            });
+            if (result.patterns.length === 0) {
+                process.stdout.write(`No recurring patterns found for ${flags.workspace}/${flags.repo} (${result.totalFindings} findings in ${result.sessionCount} sessions).\n`);
+                this.exit(0);
+                return;
+            }
+            let provider;
+            if (!flags['skip-rules']) {
+                try {
+                    // Verify claude CLI is available
+                    const { spawn } = await import('node:child_process');
+                    await new Promise((resolve, reject) => {
+                        const proc = spawn('claude', ['--version'], { stdio: ['pipe', 'pipe', 'pipe'] });
+                        proc.on('error', () => reject(new Error('claude CLI not found')));
+                        proc.on('close', (code) => (code === 0 ? resolve() : reject(new Error(`claude --version exited ${code}`))));
+                    });
+                    // Direct CLI provider — bypasses ClaudeCodeProvider.analyze which expects { findings }
+                    provider = {
+                        analyze: async (systemPrompt, userContent) => {
+                            return new Promise((resolve, reject) => {
+                                const proc = spawn('claude', [
+                                    '-p',
+                                    '--output-format', 'text',
+                                    '--system-prompt', systemPrompt,
+                                    '--no-session-persistence',
+                                    '--model', 'sonnet',
+                                ], { stdio: ['pipe', 'pipe', 'pipe'] });
+                                let stdout = '';
+                                let stderr = '';
+                                proc.stdout.on('data', (chunk) => { stdout += chunk.toString(); });
+                                proc.stderr.on('data', (chunk) => { stderr += chunk.toString(); });
+                                proc.on('error', (err) => reject(err));
+                                proc.on('close', (code) => {
+                                    if (code !== 0)
+                                        reject(new Error(`claude exited with code ${code}: ${stderr}`));
+                                    else
+                                        resolve(stdout.trim());
+                                });
+                                proc.stdin.write(userContent);
+                                proc.stdin.end();
+                            });
+                        },
+                    };
+                }
+                catch {
+                    process.stderr.write('⚠ Claude CLI not available for rule generation. Skipping ast-grep rules.\n');
+                }
+            }
+            const generator = new PatternGenerator();
+            const outputPath = path.resolve(flags.output);
+            const genResult = await generator.generate(result.patterns, {
+                workspace: flags.workspace,
+                repo: flags.repo,
+                outputPath,
+                skipRuleGeneration: flags['skip-rules'] || !provider,
+                ...(provider !== undefined ? { provider } : {}),
+            });
+            process.stdout.write(`✓ Analyzed ${result.totalFindings} findings across ${result.sessionCount} sessions\n` +
+                `✓ Generated ${genResult.patternsCount} patterns → ${genResult.outputPath}\n`);
+            if (flags.verbose && genResult.rulesGenerated > 0) {
+                process.stdout.write(`  Rules generated: ${genResult.rulesGenerated}, skipped: ${genResult.rulesSkipped}\n`);
+            }
+        }
+        catch (error) {
+            if (error instanceof RulesEngineError) {
+                process.stderr.write(`✗ ${error.message}\n`);
+                this.exit(1);
+                return;
+            }
+            const message = error instanceof Error ? error.message : String(error);
+            process.stderr.write(`✗ Unexpected error: ${message}\n`);
+            this.exit(1);
+        }
+    }
+}
+//# sourceMappingURL=sync.js.map

package/dist/commands/rules/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../../src/commands/rules/sync.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAE3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,OAAO;IAC5C,MAAM,CAAC,WAAW,GAAG,mDAAmD,CAAC;IAEzE,MAAM,CAAC,QAAQ,GAAG;QAChB,oDAAoD;QACpD,2FAA2F;QAC3F,kEAAkE;QAClE,iEAAiE;KAClE,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG;QACb,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,0BAA0B;YACvC,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,iBAAiB;YAC9B,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,sCAAsC;YACnD,OAAO,EAAE,sBAAsB;SAChC,CAAC;QACF,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC;YACtB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,2CAA2C;YACxD,OAAO,EAAE,EAAE;SACZ,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;YACrB,WAAW,EAAE,wBAAwB;YACrC,OAAO,EAAE,KAAK;SACf,CAAC;QACF,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC;YAC1B,WAAW,EAAE,wEAAwE;YACrF,OAAO,EAAE,KAAK;SACf,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE1E,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;gBAClF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvE,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gCAAgC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,qCAAqC,CACnG,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,YAAY,EAAE,KAAK,CAAC,QAAQ;aAC7B,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mCAAmC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,aAAa,gBAAgB,MAAM,CAAC,YAAY,eAAe,CAC5I,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YAED,IAAI,QAAiC,CAAC;YAEtC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,iCAAiC;oBACjC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;oBACrD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;wBAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;wBACjF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;wBAClE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC9G,CAAC,CAAC,CAAC;oBAEH,uFAAuF;oBACvF,QAAQ,GAAG;wBACT,OAAO,EAAE,KAAK,EAAE,YAAoB,EAAE,WAAmB,EAAE,EAAE;4BAC3D,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gCAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE;oCAC3B,IAAI;oCACJ,iBAAiB,EAAE,MAAM;oCACzB,iBAAiB,EAAE,YAAY;oCAC/B,0BAA0B;oCAC1B,SAAS,EAAE,QAAQ;iCACpB,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gCAExC,IAAI,MAAM,GAAG,EAAE,CAAC;gCAChB,IAAI,MAAM,GAAG,EAAE,CAAC;gCAChB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gCAC3E,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gCAC3E,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gCAC9C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;oCACxB,IAAI,IAAI,KAAK,CAAC;wCAAE,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC;;wCAC3E,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gCAC9B,CAAC,CAAC,CAAC;gCACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gCAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;4BACnB,CAAC,CAAC,CAAC;wBACL,CAAC;qBACF,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAC;gBACrG,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAC1D,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU;gBACV,kBAAkB,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ;gBACpD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAC;YAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,cAAc,MAAM,CAAC,aAAa,oBAAoB,MAAM,CAAC,YAAY,aAAa;gBACtF,eAAe,SAAS,CAAC,aAAa,eAAe,SAAS,CAAC,UAAU,IAAI,CAC9E,CAAC;YAEF,IAAI,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,SAAS,CAAC,cAAc,cAAc,SAAS,CAAC,YAAY,IAAI,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,OAAO,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC"}

package/dist/config/config-manager.d.ts

@@ -0,0 +1,14 @@
+import type { PrismConfig } from '../types/index.js';
+import type { ModelProvider } from '../types/provider.js';
+export declare class ConfigManager {
+    private config;
+    private readonly configDir;
+    private readonly configFilePath;
+    constructor(configDir?: string);
+    load(): PrismConfig;
+    get<K extends keyof PrismConfig>(key: K): PrismConfig[K];
+    set<K extends keyof PrismConfig>(key: K, value: PrismConfig[K]): void;
+    resolveAnthropicKey(): string | null;
+    resolveProvider(modelOverride?: string): ModelProvider;
+}
+//# sourceMappingURL=config-manager.d.ts.map

package/dist/config/config-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-manager.d.ts","sourceRoot":"","sources":["../../src/config/config-manager.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAS1D,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;gBAE5B,SAAS,CAAC,EAAE,MAAM;IAO9B,IAAI,IAAI,WAAW;IAgBnB,GAAG,CAAC,CAAC,SAAS,MAAM,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;IAIxD,GAAG,CAAC,CAAC,SAAS,MAAM,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI;IAmBrE,mBAAmB,IAAI,MAAM,GAAG,IAAI;IAMpC,eAAe,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,aAAa;CA6BvD"}

package/dist/config/config-manager.js

@@ -0,0 +1,85 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { getConfigDir, getConfigPath, ensureConfigDir } from '../utils/paths.js';
+import { AnthropicProvider } from '../ai/providers/anthropic-provider.js';
+import { ClaudeCodeProvider } from '../ai/providers/claude-code-provider.js';
+const DEFAULTS = {
+    defaultModel: 'claude-opus-4-5',
+    maxDiffLines: 5000,
+};
+export class ConfigManager {
+    config = {};
+    configDir;
+    configFilePath;
+    constructor(configDir) {
+        this.configDir = configDir ?? getConfigDir();
+        this.configFilePath = configDir
+            ? path.join(configDir, 'config.json')
+            : getConfigPath();
+    }
+    load() {
+        let fileConfig = {};
+        if (fs.existsSync(this.configFilePath)) {
+            try {
+                const raw = fs.readFileSync(this.configFilePath, 'utf8');
+                fileConfig = JSON.parse(raw);
+            }
+            catch {
+                // Silently fall back to defaults if config is unparseable
+            }
+        }
+        this.config = { ...DEFAULTS, ...fileConfig };
+        return this.config;
+    }
+    get(key) {
+        return this.config[key];
+    }
+    set(key, value) {
+        this.config[key] = value;
+        // Persist to disk
+        ensureConfigDir();
+        const existing = fs.existsSync(this.configFilePath)
+            ? (() => {
+                try {
+                    return JSON.parse(fs.readFileSync(this.configFilePath, 'utf8'));
+                }
+                catch {
+                    return {};
+                }
+            })()
+            : {};
+        const updated = { ...existing, [key]: value };
+        fs.writeFileSync(this.configFilePath, JSON.stringify(updated, null, 2), 'utf8');
+    }
+    resolveAnthropicKey() {
+        const envKey = process.env['ANTHROPIC_API_KEY'];
+        if (envKey)
+            return envKey;
+        return this.config.anthropicApiKey ?? null;
+    }
+    resolveProvider(modelOverride) {
+        const model = modelOverride ?? this.config.defaultModel;
+        const explicitProvider = this.config.provider;
+        // Build params without undefined values (exactOptionalPropertyTypes)
+        const anthropicParams = (apiKey) => model ? { apiKey, model } : { apiKey };
+        const claudeCodeParams = () => model ? { model } : {};
+        if (explicitProvider === 'anthropic') {
+            const apiKey = this.resolveAnthropicKey();
+            if (!apiKey) {
+                throw new Error('Provider set to "anthropic" but no API key found. Set ANTHROPIC_API_KEY or run: prism config set anthropic-api-key <key>');
+            }
+            return new AnthropicProvider(anthropicParams(apiKey));
+        }
+        if (explicitProvider === 'claude-code') {
+            return new ClaudeCodeProvider(claudeCodeParams());
+        }
+        // Auto-detect: prefer API key, fall back to Claude Code
+        const apiKey = this.resolveAnthropicKey();
+        if (apiKey) {
+            return new AnthropicProvider(anthropicParams(apiKey));
+        }
+        // Fall back to Claude Code CLI
+        return new ClaudeCodeProvider(claudeCodeParams());
+    }
+}
+//# sourceMappingURL=config-manager.js.map

package/dist/config/config-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-manager.js","sourceRoot":"","sources":["../../src/config/config-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAE7E,MAAM,QAAQ,GAAiE;IAC7E,YAAY,EAAE,iBAAiB;IAC/B,YAAY,EAAE,IAAI;CACnB,CAAC;AAEF,MAAM,OAAO,aAAa;IAChB,MAAM,GAAgB,EAAE,CAAC;IAChB,SAAS,CAAS;IAClB,cAAc,CAAS;IAExC,YAAY,SAAkB;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC;QAC7C,IAAI,CAAC,cAAc,GAAG,SAAS;YAC7B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;YACrC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtB,CAAC;IAED,IAAI;QACF,IAAI,UAAU,GAAgB,EAAE,CAAC;QAEjC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;gBACzD,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,0DAA0D;YAC5D,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,GAAG,CAA8B,GAAM;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,GAAG,CAA8B,GAAM,EAAE,KAAqB;QAC5D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAEzB,kBAAkB;QAClB,eAAe,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAgB,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC;YAC9D,CAAC,CAAC,CAAC,GAAG,EAAE;gBACJ,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAgB,CAAC;gBACjF,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,EAAE;YACN,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;QAC9C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAClF,CAAC;IAED,mBAAmB;QACjB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAChD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED,eAAe,CAAC,aAAsB;QACpC,MAAM,KAAK,GAAG,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAE9C,qEAAqE;QACrE,MAAM,eAAe,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QACnF,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAEtD,IAAI,gBAAgB,KAAK,WAAW,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,0HAA0H,CAAC,CAAC;YAC9I,CAAC;YACD,OAAO,IAAI,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,gBAAgB,KAAK,aAAa,EAAE,CAAC;YACvC,OAAO,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,wDAAwD;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC1C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,+BAA+B;QAC/B,OAAO,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/config/convention-builder.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Build a formatted convention text from an array of convention strings.
+ * Returns undefined if the array is undefined or empty.
+ * Otherwise joins each convention as a bullet point: "- convention".
+ */
+export declare function buildConventionText(conventions?: string[]): string | undefined;
+/**
+ * Load a conventions file from disk, resolved relative to rootPath.
+ * Returns the file content as a string, or undefined if the file does not exist.
+ * Rethrows any other filesystem errors.
+ */
+export declare function loadConventionsFile(filePath: string, rootPath: string): Promise<string | undefined>;
+//# sourceMappingURL=convention-builder.d.ts.map

package/dist/config/convention-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"convention-builder.d.ts","sourceRoot":"","sources":["../../src/config/convention-builder.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAK9E;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU7B"}

package/dist/config/convention-builder.js

@@ -0,0 +1,31 @@
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+/**
+ * Build a formatted convention text from an array of convention strings.
+ * Returns undefined if the array is undefined or empty.
+ * Otherwise joins each convention as a bullet point: "- convention".
+ */
+export function buildConventionText(conventions) {
+    if (conventions === undefined || conventions.length === 0) {
+        return undefined;
+    }
+    return conventions.map((c) => `- ${c}`).join('\n');
+}
+/**
+ * Load a conventions file from disk, resolved relative to rootPath.
+ * Returns the file content as a string, or undefined if the file does not exist.
+ * Rethrows any other filesystem errors.
+ */
+export async function loadConventionsFile(filePath, rootPath) {
+    const resolved = path.resolve(rootPath, filePath);
+    try {
+        return await readFile(resolved, 'utf-8');
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            return undefined;
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=convention-builder.js.map

package/dist/config/convention-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"convention-builder.js","sourceRoot":"","sources":["../../src/config/convention-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAsB;IACxD,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/config/credentials.d.ts

@@ -0,0 +1,14 @@
+export interface LoadedCredentials {
+    username: string;
+    password: string;
+}
+export declare class CredentialManager {
+    /** Optional override for config directory (used in tests). */
+    private readonly configDir;
+    private readonly credPath;
+    constructor(configDir?: string);
+    save(username: string, password: string): Promise<void>;
+    load(): Promise<LoadedCredentials | null>;
+    delete(): boolean;
+}
+//# sourceMappingURL=credentials.d.ts.map

package/dist/config/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/config/credentials.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,iBAAiB;IAC5B,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,SAAS,CAAC,EAAE,MAAM;IAOxB,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBvD,IAAI,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAsC/C,MAAM,IAAI,OAAO;CAWlB"}

package/dist/config/credentials.js

@@ -0,0 +1,85 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { deriveKey, encrypt, decrypt } from './encryption.js';
+import { getCredentialsPath, getConfigDir } from '../utils/paths.js';
+export class CredentialManager {
+    /** Optional override for config directory (used in tests). */
+    configDir;
+    credPath;
+    constructor(configDir) {
+        this.configDir = configDir ?? getConfigDir();
+        this.credPath = configDir
+            ? path.join(configDir, 'credentials.json')
+            : getCredentialsPath();
+    }
+    async save(username, password) {
+        // Ensure the directory exists
+        fs.mkdirSync(this.configDir, { recursive: true, mode: 0o700 });
+        const key = await deriveKey(this.configDir);
+        const { encrypted, iv, authTag } = encrypt(password, key);
+        const stored = {
+            username,
+            encryptedPassword: encrypted,
+            iv,
+            authTag,
+            createdAt: new Date().toISOString(),
+        };
+        fs.writeFileSync(this.credPath, JSON.stringify(stored, null, 2), { mode: 0o600 });
+    }
+    async load() {
+        if (!fs.existsSync(this.credPath)) {
+            return null;
+        }
+        let raw;
+        try {
+            raw = fs.readFileSync(this.credPath, 'utf8');
+        }
+        catch (err) {
+            throw new Error(`Failed to read credentials file: ${err.message}`);
+        }
+        let stored;
+        try {
+            stored = JSON.parse(raw);
+        }
+        catch {
+            throw new Error('Credentials file contains invalid JSON — try logging in again');
+        }
+        if (!isStoredCredentials(stored)) {
+            throw new Error('Credentials file has invalid structure — try logging in again');
+        }
+        const key = await deriveKey(this.configDir);
+        let password;
+        try {
+            password = decrypt(stored.encryptedPassword, stored.iv, stored.authTag, key);
+        }
+        catch (err) {
+            throw new Error(`Failed to decrypt credentials — try logging in again: ${err.message}`);
+        }
+        return {
+            username: stored.username,
+            password,
+        };
+    }
+    delete() {
+        if (!fs.existsSync(this.credPath)) {
+            return false;
+        }
+        try {
+            fs.unlinkSync(this.credPath);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+function isStoredCredentials(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const v = value;
+    return (typeof v['username'] === 'string' &&
+        typeof v['encryptedPassword'] === 'string' &&
+        typeof v['iv'] === 'string' &&
+        typeof v['authTag'] === 'string');
+}
+//# sourceMappingURL=credentials.js.map

package/dist/config/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/config/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAmB,kBAAkB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAQtF,MAAM,OAAO,iBAAiB;IAC5B,8DAA8D;IAC7C,SAAS,CAAS;IAClB,QAAQ,CAAS;IAElC,YAAY,SAAkB;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC;QAC7C,IAAI,CAAC,QAAQ,GAAG,SAAS;YACvB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC;YAC1C,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,QAAgB;QAC3C,8BAA8B;QAC9B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAE/D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAsB;YAChC,QAAQ;YACR,iBAAiB,EAAE,SAAS;YAC5B,EAAE;YACF,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oCAAqC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE5C,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,yDAA0D,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACrG,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ;QACjC,OAAO,CAAC,CAAC,mBAAmB,CAAC,KAAK,QAAQ;QAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ;QAC3B,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,CACjC,CAAC;AACJ,CAAC"}

package/dist/config/encryption.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Derives a 32-byte AES key from the machine secret via PBKDF2.
+ */
+export declare function deriveKey(configDir: string): Promise<Buffer>;
+export interface EncryptedPayload {
+    encrypted: string;
+    iv: string;
+    authTag: string;
+}
+/**
+ * Encrypts plaintext using AES-256-GCM.
+ * Returns hex-encoded encrypted, iv, and authTag.
+ */
+export declare function encrypt(plaintext: string, key: Buffer): EncryptedPayload;
+/**
+ * Decrypts an AES-256-GCM ciphertext.
+ * Throws if the authTag is invalid (tampered data).
+ */
+export declare function decrypt(encrypted: string, iv: string, authTag: string, key: Buffer): string;
+//# sourceMappingURL=encryption.d.ts.map

package/dist/config/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../src/config/encryption.ts"],"names":[],"mappings":"AAoDA;;GAEG;AACH,wBAAsB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQlE;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAUxE;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAQ3F"}

package/dist/config/encryption.js

@@ -0,0 +1,94 @@
+import crypto from 'node:crypto';
+import { execSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+const STATIC_SALT = 'prism-cli-v1-salt-2024';
+const PBKDF2_ITERATIONS = 100000;
+const KEY_LENGTH = 32;
+const KEY_DIGEST = 'sha512';
+/**
+ * Reads the machine's unique ID.
+ * - Windows: registry MachineGuid
+ * - Linux: /etc/machine-id
+ * - Fallback: random bytes stored in <configDir>/.key (mode 0600)
+ */
+function readMachineSecret(configDir) {
+    if (process.platform === 'win32') {
+        try {
+            const output = execSync('reg query "HKLM\\SOFTWARE\\Microsoft\\Cryptography" /v MachineGuid', { timeout: 5000, encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] });
+            const match = /MachineGuid\s+REG_SZ\s+([^\r\n]+)/.exec(output);
+            if (match?.[1]) {
+                return match[1].trim();
+            }
+        }
+        catch {
+            // fall through to fallback
+        }
+    }
+    else if (process.platform === 'linux') {
+        try {
+            const id = fs.readFileSync('/etc/machine-id', 'utf8').trim();
+            if (id)
+                return id;
+        }
+        catch {
+            // fall through to fallback
+        }
+    }
+    // Fallback: .key file in config dir
+    const keyFile = path.join(configDir, '.key');
+    try {
+        const existing = fs.readFileSync(keyFile, 'utf8').trim();
+        if (existing)
+            return existing;
+    }
+    catch {
+        // file doesn't exist yet
+    }
+    const newSecret = crypto.randomBytes(32).toString('hex');
+    fs.writeFileSync(keyFile, newSecret, { mode: 0o600 });
+    return newSecret;
+}
+/**
+ * Derives a 32-byte AES key from the machine secret via PBKDF2.
+ */
+export async function deriveKey(configDir) {
+    const secret = readMachineSecret(configDir);
+    return new Promise((resolve, reject) => {
+        crypto.pbkdf2(secret, STATIC_SALT, PBKDF2_ITERATIONS, KEY_LENGTH, KEY_DIGEST, (err, key) => {
+            if (err)
+                reject(err);
+            else
+                resolve(key);
+        });
+    });
+}
+/**
+ * Encrypts plaintext using AES-256-GCM.
+ * Returns hex-encoded encrypted, iv, and authTag.
+ */
+export function encrypt(plaintext, key) {
+    const iv = crypto.randomBytes(12);
+    const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
+    const encrypted = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+    const authTag = cipher.getAuthTag();
+    return {
+        encrypted: encrypted.toString('hex'),
+        iv: iv.toString('hex'),
+        authTag: authTag.toString('hex'),
+    };
+}
+/**
+ * Decrypts an AES-256-GCM ciphertext.
+ * Throws if the authTag is invalid (tampered data).
+ */
+export function decrypt(encrypted, iv, authTag, key) {
+    const decipher = crypto.createDecipheriv('aes-256-gcm', key, Buffer.from(iv, 'hex'));
+    decipher.setAuthTag(Buffer.from(authTag, 'hex'));
+    const decrypted = Buffer.concat([
+        decipher.update(Buffer.from(encrypted, 'hex')),
+        decipher.final(),
+    ]);
+    return decrypted.toString('utf8');
+}
+//# sourceMappingURL=encryption.js.map

package/dist/config/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../src/config/encryption.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAC7C,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,UAAU,GAAG,QAAQ,CAAC;AAE5B;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CACrB,oEAAoE,EACpE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACrE,CAAC;YACF,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/D,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACf,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACzB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7D,IAAI,EAAE;gBAAE,OAAO,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,SAAiB;IAC/C,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACzF,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAChB,OAAO,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB,EAAE,GAAW;IACpD,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACpC,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QACpC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;KACjC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB,EAAE,EAAU,EAAE,OAAe,EAAE,GAAW;IACjF,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IACrF,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9C,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC;IACH,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/config/repo-config-loader.d.ts

@@ -0,0 +1,34 @@
+import { type RepoConfig } from '../types/repo-config.js';
+import type { PrismConfig } from '../types/config.js';
+export declare class ConfigParseError extends Error {
+    readonly cause?: unknown | undefined;
+    constructor(message: string, cause?: unknown | undefined);
+}
+export declare class ConfigValidationError extends Error {
+    readonly issues: {
+        path: (string | number)[];
+        message: string;
+    }[];
+    constructor(message: string, issues: {
+        path: (string | number)[];
+        message: string;
+    }[]);
+}
+export declare class RepoConfigLoader {
+    /**
+     * Load repo config from the first matching config file in rootPath.
+     * Returns {} if no config file is found.
+     */
+    load(rootPath: string): Promise<RepoConfig>;
+    /**
+     * Parse and validate a YAML string as a RepoConfig.
+     * Throws ConfigParseError on invalid YAML, ConfigValidationError on schema failure.
+     */
+    loadFromString(yaml: string): RepoConfig;
+}
+/**
+ * Merge global PrismConfig with repo-level RepoConfig.
+ * Repo config fields take precedence over global config defaults.
+ */
+export declare function mergeConfigs(global: PrismConfig, repo: RepoConfig): PrismConfig & RepoConfig;
+//# sourceMappingURL=repo-config-loader.d.ts.map

package/dist/config/repo-config-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-config-loader.d.ts","sourceRoot":"","sources":["../../src/config/repo-config-loader.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,qBAAa,gBAAiB,SAAQ,KAAK;aACI,KAAK,CAAC,EAAE,OAAO;gBAAhD,OAAO,EAAE,MAAM,EAAkB,KAAK,CAAC,EAAE,OAAO,YAAA;CAI7D;AAED,qBAAa,qBAAsB,SAAQ,KAAK;aAG5B,MAAM,EAAE;QAAE,IAAI,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE;gBADxE,OAAO,EAAE,MAAM,EACC,MAAM,EAAE;QAAE,IAAI,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE;CAK3E;AAID,qBAAa,gBAAgB;IAC3B;;;OAGG;IACG,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAqBjD;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU;CA8BzC;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,UAAU,GACf,WAAW,GAAG,UAAU,CAkB1B"}