saasgadget 0.1.0

package/dist/agents/security-compliance.js

@@ -0,0 +1,87 @@
+import { classifyFindings } from '../mcp/tools/classify-signals.js';
+import { applyBaselineRules, computeRiskScore } from '../mcp/tools/compute-risk-score.js';
+export class SecurityComplianceAgent {
+    provider;
+    constructor(provider) {
+        this.provider = provider;
+    }
+    getName() {
+        return 'security-compliance';
+    }
+    getDomain() {
+        return 'security';
+    }
+    async analyze(context) {
+        const assumptions = [];
+        const allSignals = [];
+        // If scan result exists, extract and enhance security-relevant signals
+        if (context.scanResult && typeof context.scanResult === 'object') {
+            const existingSignals = context.scanResult['signals'];
+            if (Array.isArray(existingSignals)) {
+                const securityDomains = ['security', 'auth'];
+                for (const domain of securityDomains) {
+                    const domainFindings = existingSignals
+                        .filter((s) => s.category === domain)
+                        .map((s) => ({
+                        filePath: s.evidence[0]?.filePath ?? 'unknown',
+                        content: s.finding,
+                        context: s.evidence.map((e) => e.content).join('; '),
+                    }));
+                    if (domainFindings.length > 0) {
+                        const classified = classifyFindings(domainFindings, domain === 'auth' ? 'auth' : 'security');
+                        allSignals.push(...classified.signals);
+                    }
+                }
+            }
+        }
+        // Apply security baseline rules
+        const baseline = applyBaselineRules('security', allSignals);
+        if (baseline.rulesFired.length > 0) {
+            const riskResult = computeRiskScore({
+                domain: 'security',
+                signals: allSignals,
+                rulesBaseline: baseline,
+            });
+            assumptions.push({
+                statement: `Security risk: ${riskResult.finalRisk} (${riskResult.summary})`,
+                confidence: riskResult.confidence,
+                source: 'rule',
+            });
+        }
+        // Try agent enhancement
+        let enhancement = '';
+        try {
+            const signalSummary = allSignals
+                .slice(0, 10)
+                .map((s) => `[${s.severity}] ${s.category}: ${s.finding}`)
+                .join('\n');
+            enhancement = await this.provider.chat([
+                {
+                    role: 'system',
+                    content: 'You are a security specialist. Analyze these signals for OWASP compliance, secret exposure, auth patterns, and input validation. Be concise — 3-5 sentences.',
+                },
+                {
+                    role: 'user',
+                    content: `Repository: ${context.repo.owner}/${context.repo.name}\n\nSecurity signals:\n${signalSummary}\n\nProvide a brief security assessment.`,
+                },
+            ]);
+        }
+        catch {
+            assumptions.push({
+                statement: 'Agent enhancement unavailable — using rule-based security analysis only',
+                confidence: 1.0,
+                source: 'agent',
+            });
+        }
+        const avgConf = allSignals.length > 0
+            ? allSignals.reduce((sum, s) => sum + s.agentConfidence, 0) / allSignals.length
+            : 0.5;
+        return {
+            findings: allSignals,
+            assumptions,
+            confidence: Math.round(avgConf * 100) / 100,
+            rawOutput: enhancement || `Security analysis: ${allSignals.length} signals detected.`,
+        };
+    }
+}
+//# sourceMappingURL=security-compliance.js.map

package/dist/agents/security-compliance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-compliance.js","sourceRoot":"","sources":["../../src/agents/security-compliance.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAE1F,MAAM,OAAO,uBAAuB;IACjB,QAAQ,CAAa;IAEtC,YAAY,QAAoB;QAC9B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED,SAAS;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB;QACjC,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,uEAAuE;QACvE,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACjE,MAAM,eAAe,GAAI,OAAO,CAAC,UAAsC,CAAC,SAAS,CAAC,CAAC;YACnF,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;gBACnC,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,MAAM,CAAU,CAAC;gBACtD,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;oBACrC,MAAM,cAAc,GAAI,eAA4B;yBACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;yBACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACX,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,SAAS;wBAC9C,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;qBACrD,CAAC,CAAC,CAAC;oBAEN,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC9B,MAAM,UAAU,GAAG,gBAAgB,CAAC,cAAc,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;wBAC7F,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;oBACzC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,gBAAgB,CAAC;gBAClC,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,UAAU;gBACnB,aAAa,EAAE,QAAQ;aACxB,CAAC,CAAC;YAEH,WAAW,CAAC,IAAI,CAAC;gBACf,SAAS,EAAE,kBAAkB,UAAU,CAAC,SAAS,KAAK,UAAU,CAAC,OAAO,GAAG;gBAC3E,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC;QAED,wBAAwB;QACxB,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,UAAU;iBAC7B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBACzD,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACrC;oBACE,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,8JAA8J;iBACxK;gBACD;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,eAAe,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,0BAA0B,aAAa,0CAA0C;iBACjJ;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,CAAC,IAAI,CAAC;gBACf,SAAS,EAAE,yEAAyE;gBACpF,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC;YACnC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM;YAC/E,CAAC,CAAC,GAAG,CAAC;QAER,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,GAAG;YAC3C,SAAS,EAAE,WAAW,IAAI,sBAAsB,UAAU,CAAC,MAAM,oBAAoB;SACtF,CAAC;IACJ,CAAC;CACF"}

package/dist/agents/skeptic-reviewer.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Skeptic Reviewer agent — challenges assumptions, flags overconfidence.
+ * @module agents/skeptic-reviewer
+ */
+import type { IAgent, AgentContext, AgentResult } from '../contracts/agent.js';
+import type { AIProvider } from '../lib/ai/provider-factory.js';
+export declare class SkepticReviewer implements IAgent {
+    private readonly provider;
+    constructor(provider: AIProvider);
+    getName(): string;
+    getDomain(): string;
+    analyze(context: AgentContext): Promise<AgentResult>;
+}
+//# sourceMappingURL=skeptic-reviewer.d.ts.map

package/dist/agents/skeptic-reviewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skeptic-reviewer.d.ts","sourceRoot":"","sources":["../../src/agents/skeptic-reviewer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAGhE,qBAAa,eAAgB,YAAW,MAAM;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAa;gBAE1B,QAAQ,EAAE,UAAU;IAIhC,OAAO,IAAI,MAAM;IAIjB,SAAS,IAAI,MAAM;IAIb,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;CAsD3D"}

package/dist/agents/skeptic-reviewer.js

@@ -0,0 +1,65 @@
+export class SkepticReviewer {
+    provider;
+    constructor(provider) {
+        this.provider = provider;
+    }
+    getName() {
+        return 'skeptic-reviewer';
+    }
+    getDomain() {
+        return 'quality-assurance';
+    }
+    async analyze(context) {
+        const assumptions = [];
+        const findings = [];
+        // The skeptic reviews the scanResult (which is the artifact being reviewed)
+        const artifact = context.scanResult;
+        if (!artifact || typeof artifact !== 'object') {
+            return {
+                findings: [],
+                assumptions: [{
+                        statement: 'No artifact provided for skeptic review',
+                        confidence: 1.0,
+                        source: 'agent',
+                    }],
+                confidence: 0,
+                rawOutput: 'No artifact available to review.',
+            };
+        }
+        // Try LLM-enhanced review
+        let review = '';
+        try {
+            const artifactSummary = JSON.stringify(artifact).slice(0, 3000);
+            review = await this.provider.chat([
+                {
+                    role: 'system',
+                    content: `You are "Skeptic Sam," a constructive contrarian analyst. Review the provided analysis artifact and:
+1. Identify 2-5 claims that may be overconfident or unsupported
+2. Flag any assumptions that lack evidence
+3. Provide counterpoints where the analysis may have blind spots
+4. Suggest specific revisions to strengthen the report
+
+Be constructive — the goal is to improve quality, not tear down the work. If the analysis is solid, say so with few challenges.`,
+                },
+                {
+                    role: 'user',
+                    content: `Review this analysis artifact:\n\n${artifactSummary}`,
+                },
+            ]);
+        }
+        catch {
+            assumptions.push({
+                statement: 'LLM-enhanced skeptic review unavailable — returning deterministic review only',
+                confidence: 1.0,
+                source: 'agent',
+            });
+        }
+        return {
+            findings,
+            assumptions,
+            confidence: 0.7,
+            rawOutput: review || 'Deterministic skeptic review completed. No LLM enhancement available.',
+        };
+    }
+}
+//# sourceMappingURL=skeptic-reviewer.js.map

package/dist/agents/skeptic-reviewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skeptic-reviewer.js","sourceRoot":"","sources":["../../src/agents/skeptic-reviewer.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,eAAe;IACT,QAAQ,CAAa;IAEtC,YAAY,QAAoB;QAC9B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,SAAS;QACP,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAqB;QACjC,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO;gBACL,QAAQ,EAAE,EAAE;gBACZ,WAAW,EAAE,CAAC;wBACZ,SAAS,EAAE,yCAAyC;wBACpD,UAAU,EAAE,GAAG;wBACf,MAAM,EAAE,OAAO;qBAChB,CAAC;gBACF,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,kCAAkC;aAC9C,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAChE,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAChC;oBACE,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE;;;;;;gIAM6G;iBACvH;gBACD;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,qCAAqC,eAAe,EAAE;iBAChE;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,CAAC,IAAI,CAAC;gBACf,SAAS,EAAE,+EAA+E;gBAC1F,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,QAAQ;YACR,WAAW;YACX,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,MAAM,IAAI,uEAAuE;SAC7F,CAAC;IACJ,CAAC;CACF"}

package/dist/agents/skills-directory.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Agent skills directory — static registry of agent capabilities.
+ * PTC Pattern P6: Agent Skills — document and advertise agent specializations.
+ * @module agents/skills-directory
+ */
+export interface AgentSkill {
+    agentName: string;
+    skillName: string;
+    description: string;
+    inputTypes: string[];
+    outputTypes: string[];
+    domains: string[];
+    toolsUsed: string[];
+}
+/**
+ * Static registry of all agent skills and their capabilities.
+ * Agents can query this to understand what other agents can do.
+ */
+export declare const AGENT_SKILLS: AgentSkill[];
+/**
+ * Find agents that can handle a given domain.
+ */
+export declare function findAgentsByDomain(domain: string): AgentSkill[];
+/**
+ * Find agents that use a specific tool.
+ */
+export declare function findAgentsByTool(toolName: string): AgentSkill[];
+/**
+ * Find agents that can produce a specific output type.
+ */
+export declare function findAgentsByOutput(outputType: string): AgentSkill[];
+/**
+ * Get the full skill set for a named agent.
+ */
+export declare function getAgentSkills(agentName: string): AgentSkill[];
+//# sourceMappingURL=skills-directory.d.ts.map

package/dist/agents/skills-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-directory.d.ts","sourceRoot":"","sources":["../../src/agents/skills-directory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,UAAU,EAyEpC,CAAC;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE,CAE/D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,CAE/D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,EAAE,CAEnE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,EAAE,CAE9D"}

package/dist/agents/skills-directory.js

@@ -0,0 +1,108 @@
+/**
+ * Agent skills directory — static registry of agent capabilities.
+ * PTC Pattern P6: Agent Skills — document and advertise agent specializations.
+ * @module agents/skills-directory
+ */
+/**
+ * Static registry of all agent skills and their capabilities.
+ * Agents can query this to understand what other agents can do.
+ */
+export const AGENT_SKILLS = [
+    {
+        agentName: 'code-inspector',
+        skillName: 'repository-analysis',
+        description: 'Analyze source code for patterns, anti-patterns, and SaaS indicators',
+        inputTypes: ['repo-path', 'file-list', 'scan-result'],
+        outputTypes: ['signals', 'findings', 'code-metrics'],
+        domains: ['code-health', 'security', 'auth', 'billing', 'tenancy'],
+        toolsUsed: ['scan_saas_repo', 'classify_signals'],
+    },
+    {
+        agentName: 'security-compliance',
+        skillName: 'security-audit',
+        description: 'Audit security posture including auth, encryption, and vulnerability detection',
+        inputTypes: ['repo-path', 'scan-result', 'signals'],
+        outputTypes: ['signals', 'risk-assessment', 'compliance-report'],
+        domains: ['security', 'auth'],
+        toolsUsed: ['scan_saas_repo', 'compute_risk_score'],
+    },
+    {
+        agentName: 'business-analyst',
+        skillName: 'business-viability',
+        description: 'Assess SaaS business model viability, market positioning, and growth potential',
+        inputTypes: ['scan-result', 'competitor-data', 'financial-data'],
+        outputTypes: ['viability-report', 'market-analysis', 'recommendations'],
+        domains: ['business'],
+        toolsUsed: ['generate_report_pack', 'scrape_competitor'],
+    },
+    {
+        agentName: 'finance-auditor',
+        skillName: 'financial-audit',
+        description: 'Audit financial infrastructure including billing integration and revenue tracking',
+        inputTypes: ['scan-result', 'financial-data'],
+        outputTypes: ['financial-report', 'billing-assessment'],
+        domains: ['finance', 'billing'],
+        toolsUsed: ['generate_report_pack'],
+    },
+    {
+        agentName: 'competitor-tracker',
+        skillName: 'competitive-intelligence',
+        description: 'Extract and analyze competitor data from public sources',
+        inputTypes: ['urls', 'competitor-names'],
+        outputTypes: ['competitor-profiles', 'feature-comparison', 'pricing-analysis'],
+        domains: ['business'],
+        toolsUsed: ['scrape_competitor'],
+    },
+    {
+        agentName: 'gtm-strategist',
+        skillName: 'go-to-market',
+        description: 'Develop go-to-market and social media marketing strategies',
+        inputTypes: ['business-context', 'competitor-data', 'market-data'],
+        outputTypes: ['gtm-plan', 'marketing-strategy', 'channel-recommendations'],
+        domains: ['business'],
+        toolsUsed: ['generate_report_pack'],
+    },
+    {
+        agentName: 'skeptic-reviewer',
+        skillName: 'skeptic-review',
+        description: 'Challenge optimistic assumptions and flag overconfidence in reports',
+        inputTypes: ['report-pack', 'artifact'],
+        outputTypes: ['challenges', 'counterpoints', 'overconfidence-flags'],
+        domains: ['code-health', 'business', 'security', 'finance'],
+        toolsUsed: ['run_skeptic_review'],
+    },
+    {
+        agentName: 'orchestrator',
+        skillName: 'task-orchestration',
+        description: 'Decompose tasks, route to specialists, merge outputs',
+        inputTypes: ['task-request', 'agent-context'],
+        outputTypes: ['merged-results', 'report-packs'],
+        domains: ['orchestration'],
+        toolsUsed: ['generate_report_pack', 'generate_plan'],
+    },
+];
+/**
+ * Find agents that can handle a given domain.
+ */
+export function findAgentsByDomain(domain) {
+    return AGENT_SKILLS.filter((s) => s.domains.includes(domain));
+}
+/**
+ * Find agents that use a specific tool.
+ */
+export function findAgentsByTool(toolName) {
+    return AGENT_SKILLS.filter((s) => s.toolsUsed.includes(toolName));
+}
+/**
+ * Find agents that can produce a specific output type.
+ */
+export function findAgentsByOutput(outputType) {
+    return AGENT_SKILLS.filter((s) => s.outputTypes.includes(outputType));
+}
+/**
+ * Get the full skill set for a named agent.
+ */
+export function getAgentSkills(agentName) {
+    return AGENT_SKILLS.filter((s) => s.agentName === agentName);
+}
+//# sourceMappingURL=skills-directory.js.map

package/dist/agents/skills-directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-directory.js","sourceRoot":"","sources":["../../src/agents/skills-directory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAYH;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC;QACE,SAAS,EAAE,gBAAgB;QAC3B,SAAS,EAAE,qBAAqB;QAChC,WAAW,EAAE,sEAAsE;QACnF,UAAU,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC;QACrD,WAAW,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,CAAC;QACpD,OAAO,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;QAClE,SAAS,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;KAClD;IACD;QACE,SAAS,EAAE,qBAAqB;QAChC,SAAS,EAAE,gBAAgB;QAC3B,WAAW,EAAE,gFAAgF;QAC7F,UAAU,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC;QACnD,WAAW,EAAE,CAAC,SAAS,EAAE,iBAAiB,EAAE,mBAAmB,CAAC;QAChE,OAAO,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;QAC7B,SAAS,EAAE,CAAC,gBAAgB,EAAE,oBAAoB,CAAC;KACpD;IACD;QACE,SAAS,EAAE,kBAAkB;QAC7B,SAAS,EAAE,oBAAoB;QAC/B,WAAW,EAAE,gFAAgF;QAC7F,UAAU,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;QAChE,WAAW,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,CAAC;QACvE,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,SAAS,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;KACzD;IACD;QACE,SAAS,EAAE,iBAAiB;QAC5B,SAAS,EAAE,iBAAiB;QAC5B,WAAW,EAAE,mFAAmF;QAChG,UAAU,EAAE,CAAC,aAAa,EAAE,gBAAgB,CAAC;QAC7C,WAAW,EAAE,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;QACvD,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;QAC/B,SAAS,EAAE,CAAC,sBAAsB,CAAC;KACpC;IACD;QACE,SAAS,EAAE,oBAAoB;QAC/B,SAAS,EAAE,0BAA0B;QACrC,WAAW,EAAE,yDAAyD;QACtE,UAAU,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC;QACxC,WAAW,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,CAAC;QAC9E,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,SAAS,EAAE,CAAC,mBAAmB,CAAC;KACjC;IACD;QACE,SAAS,EAAE,gBAAgB;QAC3B,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,4DAA4D;QACzE,UAAU,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,CAAC;QAClE,WAAW,EAAE,CAAC,UAAU,EAAE,oBAAoB,EAAE,yBAAyB,CAAC;QAC1E,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,SAAS,EAAE,CAAC,sBAAsB,CAAC;KACpC;IACD;QACE,SAAS,EAAE,kBAAkB;QAC7B,SAAS,EAAE,gBAAgB;QAC3B,WAAW,EAAE,qEAAqE;QAClF,UAAU,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC;QACvC,WAAW,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,sBAAsB,CAAC;QACpE,OAAO,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC;QAC3D,SAAS,EAAE,CAAC,oBAAoB,CAAC;KAClC;IACD;QACE,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,oBAAoB;QAC/B,WAAW,EAAE,sDAAsD;QACnE,UAAU,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;QAC7C,WAAW,EAAE,CAAC,gBAAgB,EAAE,cAAc,CAAC;QAC/C,OAAO,EAAE,CAAC,eAAe,CAAC;QAC1B,SAAS,EAAE,CAAC,sBAAsB,EAAE,eAAe,CAAC;KACrD;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AAC/D,CAAC"}

package/dist/cli/commands/auth.d.ts

@@ -0,0 +1,8 @@
+/**
+ * auth command — authenticate via GitHub Copilot token, store credential.
+ * @module cli/commands/auth
+ */
+import type { CommandFlags } from './types.js';
+export declare const USAGE = "\nUsage: saasgadget auth <subcommand>\n\nSubcommands:\n  login                Authenticate via GitHub token resolution chain\n  logout               Remove stored credentials\n  status               Check current authentication status\n  -h, --help           Show this help message\n";
+export declare function execute(args: string[], flags: CommandFlags): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/cli/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAe/C,eAAO,MAAM,KAAK,gSAQjB,CAAC;AAqDF,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBhF"}

package/dist/cli/commands/auth.js

@@ -0,0 +1,90 @@
+import { login, logout, resolveToken, validateToken } from '../../lib/auth.js';
+import { colorize, bold } from '../tui/colors.js';
+function printHelp() {
+    console.log(`Usage: saasgadget auth <subcommand>
+
+Subcommands:
+  login                Authenticate via GitHub token resolution chain
+  logout               Remove stored credentials
+  status               Check current authentication status
+  -h, --help           Show this help message
+`);
+}
+export const USAGE = `
+Usage: saasgadget auth <subcommand>
+
+Subcommands:
+  login                Authenticate via GitHub token resolution chain
+  logout               Remove stored credentials
+  status               Check current authentication status
+  -h, --help           Show this help message
+`;
+function parseAuthArgs(args) {
+    let subcommand = null;
+    let help = false;
+    for (const arg of args) {
+        if (arg === '--help' || arg === '-h') {
+            help = true;
+        }
+        else if (!arg.startsWith('--')) {
+            subcommand = arg;
+        }
+    }
+    return { subcommand, help };
+}
+async function handleLogin() {
+    console.log(colorize('Authenticating...', 'muted'));
+    const result = await login();
+    console.log(colorize('✓', 'success') + ' Authenticated successfully.');
+    console.log(`  ${colorize('User:', 'muted')} ${bold(result.identity.login)}`);
+    if (result.identity.name) {
+        console.log(`  ${colorize('Name:', 'muted')} ${result.identity.name}`);
+    }
+    console.log(`  ${colorize('Token source:', 'muted')} ${result.source}`);
+    console.log(`  ${colorize('Storage:', 'muted')} ${result.storage === 'keychain' ? 'OS keychain' : 'encrypted file'}`);
+}
+async function handleLogout() {
+    await logout();
+    console.log(colorize('✓', 'success') + ' Credentials removed.');
+}
+async function handleStatus() {
+    try {
+        const tokenInfo = await resolveToken();
+        const identity = await validateToken(tokenInfo.token);
+        console.log(colorize('✓', 'success') + ' Authenticated.');
+        console.log(`  ${colorize('User:', 'muted')} ${bold(identity.login)}`);
+        if (identity.name) {
+            console.log(`  ${colorize('Name:', 'muted')} ${identity.name}`);
+        }
+        console.log(`  ${colorize('Token source:', 'muted')} ${tokenInfo.source}`);
+    }
+    catch {
+        console.log(colorize('✗', 'error') + ' Not authenticated.');
+        console.log(`  Run ${colorize('saasgadget auth login', 'accent')} to authenticate.`);
+    }
+}
+export async function execute(args, flags) {
+    const { subcommand, help } = parseAuthArgs(args);
+    if (help || flags.help) {
+        printHelp();
+        return;
+    }
+    switch (subcommand) {
+        case 'login':
+            await handleLogin();
+            break;
+        case 'logout':
+            await handleLogout();
+            break;
+        case 'status':
+            await handleStatus();
+            break;
+        default:
+            if (subcommand) {
+                console.error(`Unknown auth subcommand: ${subcommand}`);
+            }
+            printHelp();
+            break;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/cli/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/cli/commands/auth.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAElD,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;CAOb,CAAC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG;;;;;;;;CAQpB,CAAC;AAEF,SAAS,aAAa,CAAC,IAAc;IACnC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,UAAU,GAAG,GAAG,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;IAE7B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,8BAA8B,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACxH,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,MAAM,EAAE,CAAC;IACf,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,uBAAuB,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEtD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,iBAAiB,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,qBAAqB,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,SAAS,QAAQ,CAAC,uBAAuB,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAc,EAAE,KAAmB;IAC/D,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAEjD,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACvB,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,OAAO;YACV,MAAM,WAAW,EAAE,CAAC;YACpB,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,YAAY,EAAE,CAAC;YACrB,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,YAAY,EAAE,CAAC;YACrB,MAAM;QACR;YACE,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,SAAS,EAAE,CAAC;YACZ,MAAM;IACV,CAAC;AACH,CAAC"}

package/dist/cli/commands/doctor.d.ts

@@ -0,0 +1,10 @@
+/**
+ * doctor command — validate environment readiness.
+ * Checks: token validity, AI backend connectivity, MCP tool availability,
+ * BRAVE_API_KEY presence, operational probe per tool.
+ * @module cli/commands/doctor
+ */
+import type { CommandFlags } from './types.js';
+export declare const USAGE = "\nUsage: saasgadget doctor\n\nValidates environment readiness:\n  - GitHub token validity\n  - AI backend connectivity\n  - MCP tool availability (listing + operational probe)\n  - Brave Search API key (optional)\n\nExit codes:\n  0 = all required checks pass\n  1 = one or more required checks fail\n";
+export declare function execute(args: string[], flags: CommandFlags): Promise<void>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/cli/commands/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/doctor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAuB/C,eAAO,MAAM,KAAK,kTAYjB,CAAC;AA2LF,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA8ChF"}