saasgadget 0.1.0

package/dist/agents/finance-auditor.js

@@ -0,0 +1,73 @@
+import { financeAuditTemplate } from '../prompts/finance-audit.js';
+export class FinanceAuditor {
+    provider;
+    constructor(provider) {
+        this.provider = provider;
+    }
+    getName() {
+        return 'finance-auditor';
+    }
+    getDomain() {
+        return 'finance';
+    }
+    async analyze(context) {
+        const assumptions = [];
+        const signals = [];
+        const { repo } = context;
+        const prompt = [
+            `PERSONA: ${financeAuditTemplate.persona}`,
+            `OBJECTIVE: ${financeAuditTemplate.objective}`,
+            `CONSTRAINTS: ${financeAuditTemplate.constraints}`,
+            `CONTEXT: Analyzing ${repo.owner}/${repo.name} (ref: ${repo.ref})`,
+            `CONFIDENCE RUBRIC: ${financeAuditTemplate.confidence_rubric}`,
+        ].join('\n\n');
+        let rawOutput;
+        try {
+            rawOutput = await this.provider.chat([
+                { role: 'system', content: prompt },
+                {
+                    role: 'user',
+                    content: `Perform a financial audit of ${repo.owner}/${repo.name}. ` +
+                        `Detail level: ${context.detail ?? 'balanced'}. ` +
+                        (context.founderProfile
+                            ? `Founder context available: ${JSON.stringify(context.founderProfile)}`
+                            : 'No founder context provided.') +
+                        (context.scanResult
+                            ? `\n\nPrior scan results available:\n${JSON.stringify(context.scanResult, null, 2).slice(0, 4000)}`
+                            : ''),
+                },
+            ]);
+        }
+        catch {
+            rawOutput = 'Financial audit could not be completed — AI provider unavailable.';
+            assumptions.push({
+                statement: 'AI analysis unavailable — provider returned an error',
+                confidence: 0.1,
+                source: 'agent',
+            });
+        }
+        signals.push({
+            id: `fa-${Date.now()}-001`,
+            category: 'billing',
+            severity: 'info',
+            title: 'Financial Audit Completed',
+            finding: `Financial audit performed for ${repo.owner}/${repo.name}`,
+            evidence: [{ filePath: 'package.json', lineRange: null, content: 'Repository analyzed', toolOutput: null }],
+            ruleAnchored: false,
+            agentConfidence: 0.6,
+            priority: 'next',
+        });
+        assumptions.push({
+            statement: 'Financial data inferred from code — all figures are [ESTIMATED] unless explicitly verified',
+            confidence: 0.4,
+            source: 'agent',
+        });
+        return {
+            findings: signals,
+            assumptions,
+            confidence: 0.6,
+            rawOutput,
+        };
+    }
+}
+//# sourceMappingURL=finance-auditor.js.map

package/dist/agents/finance-auditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finance-auditor.js","sourceRoot":"","sources":["../../src/agents/finance-auditor.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,OAAO,cAAc;IACR,QAAQ,CAAa;IAEtC,YAAY,QAAoB;QAC9B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,SAAS;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB;QACjC,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QAEzB,MAAM,MAAM,GAAG;YACb,YAAY,oBAAoB,CAAC,OAAO,EAAE;YAC1C,cAAc,oBAAoB,CAAC,SAAS,EAAE;YAC9C,gBAAgB,oBAAoB,CAAC,WAAW,EAAE;YAClD,sBAAsB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,GAAG,GAAG;YAClE,sBAAsB,oBAAoB,CAAC,iBAAiB,EAAE;SAC/D,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEf,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE;gBACnC;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,gCAAgC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI;wBAClE,iBAAiB,OAAO,CAAC,MAAM,IAAI,UAAU,IAAI;wBACjD,CAAC,OAAO,CAAC,cAAc;4BACrB,CAAC,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE;4BACxE,CAAC,CAAC,8BAA8B,CAAC;wBACnC,CAAC,OAAO,CAAC,UAAU;4BACjB,CAAC,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE;4BACpG,CAAC,CAAC,EAAE,CAAC;iBACV;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,mEAAmE,CAAC;YAChF,WAAW,CAAC,IAAI,CAAC;gBACf,SAAS,EAAE,sDAAsD;gBACjE,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,MAAM;YAC1B,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,2BAA2B;YAClC,OAAO,EAAE,iCAAiC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE;YACnE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC3G,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,GAAG;YACpB,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QAEH,WAAW,CAAC,IAAI,CAAC;YACf,SAAS,EAAE,4FAA4F;YACvG,UAAU,EAAE,GAAG;YACf,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,WAAW;YACX,UAAU,EAAE,GAAG;YACf,SAAS;SACV,CAAC;IACJ,CAAC;CACF"}

package/dist/agents/gtm-strategist.d.ts

@@ -0,0 +1,14 @@
+/**
+ * GTM Strategist specialist agent — go-to-market strategy, social media marketing.
+ * @module agents/gtm-strategist
+ */
+import type { IAgent, AgentContext, AgentResult } from '../contracts/agent.js';
+import type { AIProvider } from '../lib/ai/provider-factory.js';
+export declare class GtmStrategist implements IAgent {
+    private readonly provider;
+    constructor(provider: AIProvider);
+    getName(): string;
+    getDomain(): string;
+    analyze(context: AgentContext): Promise<AgentResult>;
+}
+//# sourceMappingURL=gtm-strategist.d.ts.map

package/dist/agents/gtm-strategist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gtm-strategist.d.ts","sourceRoot":"","sources":["../../src/agents/gtm-strategist.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAIhE,qBAAa,aAAc,YAAW,MAAM;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAa;gBAE1B,QAAQ,EAAE,UAAU;IAIhC,OAAO,IAAI,MAAM;IAIjB,SAAS,IAAI,MAAM;IAIb,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;CA+D3D"}

package/dist/agents/gtm-strategist.js

@@ -0,0 +1,73 @@
+import { gtmSmmTemplate } from '../prompts/gtm-smm.js';
+export class GtmStrategist {
+    provider;
+    constructor(provider) {
+        this.provider = provider;
+    }
+    getName() {
+        return 'gtm-strategist';
+    }
+    getDomain() {
+        return 'business';
+    }
+    async analyze(context) {
+        const assumptions = [];
+        const signals = [];
+        const { repo } = context;
+        const prompt = [
+            `PERSONA: ${gtmSmmTemplate.persona}`,
+            `OBJECTIVE: ${gtmSmmTemplate.objective}`,
+            `CONSTRAINTS: ${gtmSmmTemplate.constraints}`,
+            `CONTEXT: Analyzing ${repo.owner}/${repo.name} (ref: ${repo.ref})`,
+            `CONFIDENCE RUBRIC: ${gtmSmmTemplate.confidence_rubric}`,
+        ].join('\n\n');
+        let rawOutput;
+        try {
+            rawOutput = await this.provider.chat([
+                { role: 'system', content: prompt },
+                {
+                    role: 'user',
+                    content: `Design a GTM and social media strategy for ${repo.owner}/${repo.name}. ` +
+                        `Detail level: ${context.detail ?? 'balanced'}. ` +
+                        (context.founderProfile
+                            ? `Founder context available: ${JSON.stringify(context.founderProfile)}`
+                            : 'No founder context provided.') +
+                        (context.scanResult
+                            ? `\n\nPrior scan results available:\n${JSON.stringify(context.scanResult, null, 2).slice(0, 4000)}`
+                            : ''),
+                },
+            ]);
+        }
+        catch {
+            rawOutput = 'GTM strategy could not be completed — AI provider unavailable.';
+            assumptions.push({
+                statement: 'AI analysis unavailable — provider returned an error',
+                confidence: 0.1,
+                source: 'agent',
+            });
+        }
+        signals.push({
+            id: `gtm-${Date.now()}-001`,
+            category: 'architecture',
+            severity: 'info',
+            title: 'GTM Strategy Completed',
+            finding: `Go-to-market strategy designed for ${repo.owner}/${repo.name}`,
+            evidence: [{ filePath: 'README.md', lineRange: null, content: 'Repository analyzed', toolOutput: null }],
+            ruleAnchored: false,
+            agentConfidence: 0.65,
+            priority: 'next',
+        });
+        assumptions.push({
+            statement: 'Target audience inferred from product positioning — channel recommendations may need adjustment',
+            confidence: 0.5,
+            source: 'agent',
+        });
+        return {
+            findings: signals,
+            assumptions,
+            confidence: 0.65,
+            rawOutput,
+        };
+    }
+}
+//# sourceMappingURL=gtm-strategist.js.map

package/dist/agents/gtm-strategist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gtm-strategist.js","sourceRoot":"","sources":["../../src/agents/gtm-strategist.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,OAAO,aAAa;IACP,QAAQ,CAAa;IAEtC,YAAY,QAAoB;QAC9B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,SAAS;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB;QACjC,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QAEzB,MAAM,MAAM,GAAG;YACb,YAAY,cAAc,CAAC,OAAO,EAAE;YACpC,cAAc,cAAc,CAAC,SAAS,EAAE;YACxC,gBAAgB,cAAc,CAAC,WAAW,EAAE;YAC5C,sBAAsB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,GAAG,GAAG;YAClE,sBAAsB,cAAc,CAAC,iBAAiB,EAAE;SACzD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEf,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE;gBACnC;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,8CAA8C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI;wBAChF,iBAAiB,OAAO,CAAC,MAAM,IAAI,UAAU,IAAI;wBACjD,CAAC,OAAO,CAAC,cAAc;4BACrB,CAAC,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE;4BACxE,CAAC,CAAC,8BAA8B,CAAC;wBACnC,CAAC,OAAO,CAAC,UAAU;4BACjB,CAAC,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE;4BACpG,CAAC,CAAC,EAAE,CAAC;iBACV;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,gEAAgE,CAAC;YAC7E,WAAW,CAAC,IAAI,CAAC;gBACf,SAAS,EAAE,sDAAsD;gBACjE,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,MAAM;YAC3B,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,wBAAwB;YAC/B,OAAO,EAAE,sCAAsC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE;YACxE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YACxG,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;YACrB,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QAEH,WAAW,CAAC,IAAI,CAAC;YACf,SAAS,EAAE,iGAAiG;YAC5G,UAAU,EAAE,GAAG;YACf,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,WAAW;YACX,UAAU,EAAE,IAAI;YAChB,SAAS;SACV,CAAC;IACJ,CAAC;CACF"}

package/dist/agents/orchestrator.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Orchestrator agent — task decomposition, specialist routing, output merging.
+ * @module agents/orchestrator
+ */
+import type { IAgent, AgentContext, AgentResult } from '../contracts/agent.js';
+import type { IAgentInvoker } from '../contracts/agent-invoker.js';
+import type { IConfigStore } from '../contracts/config-store.js';
+import { SDKClient } from './sdk-client.js';
+import type { PTCExecutor } from '../mcp/ptc-executor.js';
+/**
+ * Orchestrator implements both IAgent (for direct analysis) and
+ * IAgentInvoker (for MCP tool → agent routing).
+ */
+export declare class Orchestrator implements IAgent, IAgentInvoker {
+    private readonly agents;
+    private readonly configStore;
+    private sdkClient;
+    private ptcExecutor;
+    private toolCallCount;
+    constructor(configStore: IConfigStore);
+    /** Register a specialist agent. */
+    registerAgent(agent: IAgent): void;
+    /** Attach a PTC executor for programmatic tool calling. */
+    setPTCExecutor(executor: PTCExecutor): void;
+    /** Get current cumulative tool call count for PTC threshold check. */
+    getToolCallCount(): number;
+    /** Check if PTC should activate based on accumulated tool calls. */
+    shouldUsePTC(): boolean;
+    getName(): string;
+    getDomain(): string;
+    /**
+     * Resolve the routing table for a given task type.
+     * Reads agents.routing from config per-invocation (not cached at startup).
+     */
+    private resolveRouting;
+    /**
+     * IAgentInvoker.invoke — route tasks to specialist agents.
+     * Uses parallel execution via Promise.allSettled when multiple agents are routed.
+     */
+    invoke(taskType: string, context: AgentContext, _options?: Record<string, unknown>): Promise<AgentResult>;
+    /**
+     * IAgent.analyze — direct orchestrator analysis (delegates to invoke).
+     */
+    analyze(context: AgentContext): Promise<AgentResult>;
+    /**
+     * Merge results from multiple specialist agents.
+     */
+    private mergeResults;
+    /** Provide the SDK client to specialist agents that need it. */
+    getSDKClient(): SDKClient | null;
+}
+//# sourceMappingURL=orchestrator.d.ts.map

package/dist/agents/orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../../src/agents/orchestrator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAgB1D;;;GAGG;AACH,qBAAa,YAAa,YAAW,MAAM,EAAE,aAAa;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;IAC3C,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,aAAa,CAAK;gBAEd,WAAW,EAAE,YAAY;IAIrC,mCAAmC;IACnC,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIlC,2DAA2D;IAC3D,cAAc,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI;IAI3C,sEAAsE;IACtE,gBAAgB,IAAI,MAAM;IAI1B,oEAAoE;IACpE,YAAY,IAAI,OAAO;IAIvB,OAAO,IAAI,MAAM;IAIjB,SAAS,IAAI,MAAM;IAInB;;;OAGG;YACW,cAAc;IAa5B;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,YAAY,EACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,WAAW,CAAC;IAyEvB;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAI1D;;OAEG;IACH,OAAO,CAAC,YAAY;IA6BpB,gEAAgE;IAChE,YAAY,IAAI,SAAS,GAAG,IAAI;CAGjC"}

package/dist/agents/orchestrator.js

@@ -0,0 +1,174 @@
+import { SDKClient } from './sdk-client.js';
+// --- Default static routing table ---
+const DEFAULT_ROUTING = {
+    'tech-audit': ['code-inspector', 'security-compliance'],
+    'business-viability': ['business-analyst'],
+    'financial-audit': ['finance-auditor'],
+    'pitch-deck': ['business-analyst', 'gtm-strategist'],
+    'smm-gtm': ['gtm-strategist'],
+    'competitor-intel': ['business-analyst', 'competitor-tracker'],
+    'scan': ['code-inspector'],
+    'plan': ['code-inspector'],
+    'fix': ['code-inspector'],
+};
+/**
+ * Orchestrator implements both IAgent (for direct analysis) and
+ * IAgentInvoker (for MCP tool → agent routing).
+ */
+export class Orchestrator {
+    agents = new Map();
+    configStore;
+    sdkClient = null;
+    ptcExecutor = null;
+    toolCallCount = 0;
+    constructor(configStore) {
+        this.configStore = configStore;
+    }
+    /** Register a specialist agent. */
+    registerAgent(agent) {
+        this.agents.set(agent.getName(), agent);
+    }
+    /** Attach a PTC executor for programmatic tool calling. */
+    setPTCExecutor(executor) {
+        this.ptcExecutor = executor;
+    }
+    /** Get current cumulative tool call count for PTC threshold check. */
+    getToolCallCount() {
+        return this.toolCallCount;
+    }
+    /** Check if PTC should activate based on accumulated tool calls. */
+    shouldUsePTC() {
+        return this.ptcExecutor !== null && this.ptcExecutor.shouldActivate(this.toolCallCount);
+    }
+    getName() {
+        return 'orchestrator';
+    }
+    getDomain() {
+        return 'orchestration';
+    }
+    /**
+     * Resolve the routing table for a given task type.
+     * Reads agents.routing from config per-invocation (not cached at startup).
+     */
+    async resolveRouting(taskType) {
+        try {
+            const agentsConfig = await this.configStore.get('agents');
+            const routing = agentsConfig.routing;
+            if (routing && routing[taskType]) {
+                return routing[taskType];
+            }
+        }
+        catch {
+            // Config read failure — fall back to defaults
+        }
+        return DEFAULT_ROUTING[taskType] ?? ['code-inspector'];
+    }
+    /**
+     * IAgentInvoker.invoke — route tasks to specialist agents.
+     * Uses parallel execution via Promise.allSettled when multiple agents are routed.
+     */
+    async invoke(taskType, context, _options) {
+        const agentNames = await this.resolveRouting(taskType);
+        const results = [];
+        // Initialize SDK client for this invocation if not already active
+        if (!this.sdkClient) {
+            this.sdkClient = new SDKClient({
+                sessionId: context.sessionId,
+                taskType,
+                approvalMode: context.toolProfile.name === 'run' ? 'yolo' : 'guided',
+                tokenBudget: context.tokenBudget,
+                toolProfile: context.toolProfile,
+            });
+        }
+        try {
+            await this.sdkClient.start();
+            // Parallel execution when multiple agents are routed
+            const agentEntries = agentNames.map((name) => ({
+                name,
+                agent: this.agents.get(name) ?? null,
+            }));
+            const settled = await Promise.allSettled(agentEntries.map(async ({ name, agent }) => {
+                if (!agent) {
+                    return {
+                        findings: [],
+                        assumptions: [{
+                                statement: `Agent "${name}" not registered — skipped`,
+                                confidence: 1.0,
+                                source: 'agent',
+                            }],
+                        confidence: 0,
+                        rawOutput: `Agent "${name}" is not available.`,
+                    };
+                }
+                return agent.analyze(context);
+            }));
+            for (const outcome of settled) {
+                if (outcome.status === 'fulfilled') {
+                    results.push(outcome.value);
+                }
+                else {
+                    results.push({
+                        findings: [],
+                        assumptions: [{
+                                statement: `Agent failed: ${outcome.reason instanceof Error ? outcome.reason.message : String(outcome.reason)}`,
+                                confidence: 1.0,
+                                source: 'agent',
+                            }],
+                        confidence: 0,
+                        rawOutput: `Agent error: ${outcome.reason instanceof Error ? outcome.reason.message : String(outcome.reason)}`,
+                    });
+                }
+            }
+            // Track cumulative tool calls for PTC threshold
+            this.toolCallCount += agentNames.length;
+        }
+        finally {
+            const totalTokens = results.reduce((sum, r) => {
+                // Estimate tokens from raw output length
+                return sum + Math.ceil(r.rawOutput.length / 4);
+            }, 0);
+            await this.sdkClient.stop('completed', totalTokens);
+            this.sdkClient = null;
+        }
+        return this.mergeResults(results);
+    }
+    /**
+     * IAgent.analyze — direct orchestrator analysis (delegates to invoke).
+     */
+    async analyze(context) {
+        return this.invoke('scan', context);
+    }
+    /**
+     * Merge results from multiple specialist agents.
+     */
+    mergeResults(results) {
+        const allFindings = [];
+        const allAssumptions = [];
+        const rawParts = [];
+        let totalConfidence = 0;
+        for (const result of results) {
+            allFindings.push(...result.findings);
+            allAssumptions.push(...result.assumptions);
+            rawParts.push(result.rawOutput);
+            totalConfidence += result.confidence;
+        }
+        // Deduplicate signals by ID
+        const uniqueFindings = new Map();
+        for (const f of allFindings) {
+            if (!uniqueFindings.has(f.id)) {
+                uniqueFindings.set(f.id, f);
+            }
+        }
+        return {
+            findings: Array.from(uniqueFindings.values()),
+            assumptions: allAssumptions,
+            confidence: results.length > 0 ? totalConfidence / results.length : 0,
+            rawOutput: rawParts.join('\n\n---\n\n'),
+        };
+    }
+    /** Provide the SDK client to specialist agents that need it. */
+    getSDKClient() {
+        return this.sdkClient;
+    }
+}
+//# sourceMappingURL=orchestrator.js.map

package/dist/agents/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../src/agents/orchestrator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,uCAAuC;AAEvC,MAAM,eAAe,GAA6B;IAChD,YAAY,EAAE,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;IACvD,oBAAoB,EAAE,CAAC,kBAAkB,CAAC;IAC1C,iBAAiB,EAAE,CAAC,iBAAiB,CAAC;IACtC,YAAY,EAAE,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;IACpD,SAAS,EAAE,CAAC,gBAAgB,CAAC;IAC7B,kBAAkB,EAAE,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;IAC9D,MAAM,EAAE,CAAC,gBAAgB,CAAC;IAC1B,MAAM,EAAE,CAAC,gBAAgB,CAAC;IAC1B,KAAK,EAAE,CAAC,gBAAgB,CAAC;CAC1B,CAAC;AAEF;;;GAGG;AACH,MAAM,OAAO,YAAY;IACN,MAAM,GAAwB,IAAI,GAAG,EAAE,CAAC;IACxC,WAAW,CAAe;IACnC,SAAS,GAAqB,IAAI,CAAC;IACnC,WAAW,GAAuB,IAAI,CAAC;IACvC,aAAa,GAAG,CAAC,CAAC;IAE1B,YAAY,WAAyB;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,mCAAmC;IACnC,aAAa,CAAC,KAAa;QACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,2DAA2D;IAC3D,cAAc,CAAC,QAAqB;QAClC,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC;IAC9B,CAAC;IAED,sEAAsE;IACtE,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,oEAAoE;IACpE,YAAY;QACV,OAAO,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO;QACL,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,SAAS;QACP,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,cAAc,CAAC,QAAgB;QAC3C,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;YACrC,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;QACD,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,OAAqB,EACrB,QAAkC;QAElC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,OAAO,GAAkB,EAAE,CAAC;QAElC,kEAAkE;QAClE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC;gBAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,QAAQ;gBACR,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBACpE,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAE7B,qDAAqD;YACrD,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7C,IAAI;gBACJ,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI;aACrC,CAAC,CAAC,CAAC;YAEJ,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;gBACzC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO;wBACL,QAAQ,EAAE,EAAE;wBACZ,WAAW,EAAE,CAAC;gCACZ,SAAS,EAAE,UAAU,IAAI,4BAA4B;gCACrD,UAAU,EAAE,GAAG;gCACf,MAAM,EAAE,OAAgB;6BACzB,CAAC;wBACF,UAAU,EAAE,CAAC;wBACb,SAAS,EAAE,UAAU,IAAI,qBAAqB;qBACzB,CAAC;gBAC1B,CAAC;gBACD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC,CAAC,CACH,CAAC;YAEF,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;gBAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBACnC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC;wBACX,QAAQ,EAAE,EAAE;wBACZ,WAAW,EAAE,CAAC;gCACZ,SAAS,EAAE,iBAAiB,OAAO,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;gCAC/G,UAAU,EAAE,GAAG;gCACf,MAAM,EAAE,OAAO;6BAChB,CAAC;wBACF,UAAU,EAAE,CAAC;wBACb,SAAS,EAAE,gBAAgB,OAAO,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;qBAC/G,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,gDAAgD;YAChD,IAAI,CAAC,aAAa,IAAI,UAAU,CAAC,MAAM,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;gBAC5C,yCAAyC;gBACzC,OAAO,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACjD,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAAqB;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,OAAsB;QACzC,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,cAAc,GAAiB,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,eAAe,GAAG,CAAC,CAAC;QAExB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,cAAc,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,eAAe,IAAI,MAAM,CAAC,UAAU,CAAC;QACvC,CAAC;QAED,4BAA4B;QAC5B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9B,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YAC7C,WAAW,EAAE,cAAc;YAC3B,UAAU,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;SACxC,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/agents/sdk-client.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Copilot SDK client — session management and tool invocation.
+ * @module agents/sdk-client
+ */
+import type { AIProvider, ProviderConfig } from '../lib/ai/provider-factory.js';
+export interface SDKClientOptions {
+    sessionId: string;
+    taskType: string;
+    approvalMode: 'guided' | 'yolo';
+    tokenBudget: number;
+    toolProfile: {
+        name: string;
+        allowedTools: string[];
+        requireApproval: string[];
+        description: string;
+    };
+    /** AI provider name (default: 'copilot'). */
+    provider?: string;
+    /** Provider config for BYOK (api key, model override). */
+    providerConfig?: ProviderConfig;
+    /** Fallback chain of provider names to try in order. */
+    fallbackChain?: string[];
+}
+export interface SDKChatMessage {
+    role: 'system' | 'user' | 'assistant';
+    content: string;
+}
+/**
+ * Copilot SDK client wrapper — manages AI provider session with hooks.
+ * Constitution Principle XI: client.stop() in try/finally.
+ */
+export declare class SDKClient {
+    private readonly provider;
+    private readonly hookCtx;
+    private readonly options;
+    private started;
+    constructor(options: SDKClientOptions);
+    /** Start the SDK session. */
+    start(): Promise<void>;
+    /** Send a chat message with system context and get a response. */
+    chat(userMessage: string, additionalContext?: string): Promise<string>;
+    /** Stop the SDK session. */
+    stop(finalState: string, tokensUsed: number): Promise<void>;
+    getProvider(): AIProvider;
+    getSessionId(): string;
+    getToolProfile(): SDKClientOptions['toolProfile'];
+}
+//# sourceMappingURL=sdk-client.d.ts.map

package/dist/agents/sdk-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-client.d.ts","sourceRoot":"","sources":["../../src/agents/sdk-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AA2ChF,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,QAAQ,GAAG,MAAM,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAa;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;IAC3C,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,EAAE,gBAAgB;IAerC,6BAA6B;IACvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,kEAAkE;IAC5D,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0C5E,4BAA4B;IACtB,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQjE,WAAW,IAAI,UAAU;IAIzB,YAAY,IAAI,MAAM;IAItB,cAAc,IAAI,gBAAgB,CAAC,aAAa,CAAC;CAGlD"}

package/dist/agents/sdk-client.js

@@ -0,0 +1,119 @@
+import { getAIProvider, getAIProviderWithFallback } from '../lib/ai/provider-factory.js';
+import { AuthError } from '../lib/errors.js';
+import { onSessionStart, onSessionEnd, onPreToolUse, onPostToolUse, onErrorOccurred, } from '../session/sdk-hooks.js';
+/** System message content per system-message.md prompt outline. */
+const SYSTEM_MESSAGE = `You are "Gadget." You are the Lead Director of Operations in the Operations Department at SaaSGadgetCLI, in partnership with WxZRD Consulting. You will complete your objective efficiently, as to satisfy the customers with their requests.
+
+MOOD: Composed and authoritative. You set the standard that every other agent in this building follows. Steady, reliable, unflappable — the calm voice in every session.
+
+You are a SaaSGadgetCLI specialist agent — an AI-powered analysis tool for solo SaaS founders. You help founders understand, evaluate, and improve their SaaS repositories through structured analysis.
+
+SAFETY RULES (non-negotiable):
+- Default to guided mode: request explicit confirmation before any write action.
+- Never execute destructive operations without approval.
+- Never fabricate data — if information is unavailable, state that explicitly.
+- If a tool call fails, report the failure — do not silently retry with altered parameters.
+
+OUTPUT FORMAT:
+- All analytical outputs MUST produce both JSON data artifact and authored markdown summary.
+- Utility operations (init, auth, doctor, settings, mcp, new, session) are exempt.
+
+TRANSPARENCY REQUIREMENTS:
+- Disclose ALL assumptions in a dedicated "Assumptions" section.
+- Tag each assumption with its source: "rule" | "agent" | "profile" | "inferred".
+- Include data freshness timestamps for any time-sensitive claims.
+
+CONFIDENCE SCORING:
+- Assign a confidence score (0.0-1.0) to every analytical claim.
+- When confidence < 0.5, explicitly flag the finding as uncertain.
+
+TONE:
+- Direct, concise, actionable.
+- Lead with the most important finding first.
+- When delivering bad news, pair it with a concrete next step.`;
+/**
+ * Copilot SDK client wrapper — manages AI provider session with hooks.
+ * Constitution Principle XI: client.stop() in try/finally.
+ */
+export class SDKClient {
+    provider;
+    hookCtx;
+    options;
+    started = false;
+    constructor(options) {
+        this.options = options;
+        // Support fallback chain or single provider selection
+        if (options.fallbackChain && options.fallbackChain.length > 1) {
+            this.provider = getAIProviderWithFallback(options.fallbackChain);
+        }
+        else {
+            this.provider = getAIProvider(options.provider ?? 'copilot', options.providerConfig);
+        }
+        this.hookCtx = {
+            sessionId: options.sessionId,
+            taskType: options.taskType,
+            approvalMode: options.approvalMode,
+        };
+    }
+    /** Start the SDK session. */
+    async start() {
+        await onSessionStart(this.hookCtx);
+        this.started = true;
+    }
+    /** Send a chat message with system context and get a response. */
+    async chat(userMessage, additionalContext) {
+        if (!this.started)
+            await this.start();
+        const messages = [
+            { role: 'system', content: SYSTEM_MESSAGE },
+        ];
+        if (additionalContext) {
+            messages.push({ role: 'system', content: additionalContext });
+        }
+        messages.push({ role: 'user', content: userMessage });
+        const startMs = Date.now();
+        try {
+            const hookResult = await onPreToolUse(this.hookCtx, 'copilot-chat', { userMessage: userMessage.slice(0, 200) });
+            if (!hookResult.allow) {
+                throw new AuthError(`Chat denied: ${hookResult.reason}`, 'Check your approval mode settings or use `--yolo` for auto-approve.');
+            }
+            const response = await this.provider.chat(messages);
+            await onPostToolUse(this.hookCtx, 'copilot-chat', {
+                isError: false,
+                elapsedMs: Date.now() - startMs,
+            });
+            return response;
+        }
+        catch (error) {
+            await onPostToolUse(this.hookCtx, 'copilot-chat', {
+                isError: true,
+                elapsedMs: Date.now() - startMs,
+            });
+            await onErrorOccurred(this.hookCtx, {
+                type: 'sdk-chat-error',
+                message: error instanceof Error ? error.message : String(error),
+                context: {},
+            });
+            throw error;
+        }
+    }
+    /** Stop the SDK session. */
+    async stop(finalState, tokensUsed) {
+        try {
+            await onSessionEnd(this.hookCtx, { tokensUsed, finalState });
+        }
+        finally {
+            this.started = false;
+        }
+    }
+    getProvider() {
+        return this.provider;
+    }
+    getSessionId() {
+        return this.options.sessionId;
+    }
+    getToolProfile() {
+        return this.options.toolProfile;
+    }
+}
+//# sourceMappingURL=sdk-client.js.map

package/dist/agents/sdk-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-client.js","sourceRoot":"","sources":["../../src/agents/sdk-client.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EACL,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,eAAe,GAChB,MAAM,yBAAyB,CAAC;AAEjC,mEAAmE;AACnE,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;+DA4BwC,CAAC;AA0BhE;;;GAGG;AACH,MAAM,OAAO,SAAS;IACH,QAAQ,CAAa;IACrB,OAAO,CAAiB;IACxB,OAAO,CAAmB;IACnC,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,OAAyB;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,sDAAsD;QACtD,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,OAAO,GAAG;YACb,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,KAAK,CAAC,KAAK;QACT,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,iBAA0B;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAEtC,MAAM,QAAQ,GAAqB;YACjC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE;SAC5C,CAAC;QAEF,IAAI,iBAAiB,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAEtD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAChH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,SAAS,CAAC,gBAAgB,UAAU,CAAC,MAAM,EAAE,EAAE,qEAAqE,CAAC,CAAC;YAClI,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAEpD,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE;gBAChD,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;aAChC,CAAC,CAAC;YAEH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE;gBAChD,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;aAChC,CAAC,CAAC;YACH,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE;gBAClC,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC/D,OAAO,EAAE,EAAE;aACZ,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,KAAK,CAAC,IAAI,CAAC,UAAkB,EAAE,UAAkB;QAC/C,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;IAChC,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;IAClC,CAAC;CACF"}

package/dist/agents/security-compliance.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Security & Compliance specialist agent — OWASP, secrets, auth patterns.
+ * @module agents/security-compliance
+ */
+import type { IAgent, AgentContext, AgentResult } from '../contracts/agent.js';
+import type { AIProvider } from '../lib/ai/provider-factory.js';
+export declare class SecurityComplianceAgent implements IAgent {
+    private readonly provider;
+    constructor(provider: AIProvider);
+    getName(): string;
+    getDomain(): string;
+    analyze(context: AgentContext): Promise<AgentResult>;
+}
+//# sourceMappingURL=security-compliance.d.ts.map

package/dist/agents/security-compliance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-compliance.d.ts","sourceRoot":"","sources":["../../src/agents/security-compliance.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAKhE,qBAAa,uBAAwB,YAAW,MAAM;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAa;gBAE1B,QAAQ,EAAE,UAAU;IAIhC,OAAO,IAAI,MAAM;IAIjB,SAAS,IAAI,MAAM;IAIb,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;CA+E3D"}