saasgadget 0.1.0

package/dist/session/sdk-hooks.js

@@ -0,0 +1,56 @@
+/**
+ * Copilot SDK session hooks — permission enforcement, audit logging, tool guards.
+ * @module session/sdk-hooks
+ */
+import { auditLog } from '../lib/audit-logger.js';
+/** FR-001: enforce guided mode by default. */
+export async function onPermissionRequest(ctx, permission) {
+    await auditLog(ctx.sessionId, 'permission_request', { permission, mode: ctx.approvalMode });
+    return ctx.approvalMode === 'yolo';
+}
+/** FR-011: log tool invocations before execution. Constitution IV: deny shell/bash. */
+export async function onPreToolUse(ctx, toolName, args) {
+    await auditLog(ctx.sessionId, 'tool_pre_use', { toolName, args });
+    // Constitution IV: deny shell/bash execution by default
+    const deniedTools = ['shell', 'bash', 'exec', 'terminal', 'run_command'];
+    if (deniedTools.some((d) => toolName.toLowerCase().includes(d))) {
+        await auditLog(ctx.sessionId, 'tool_denied', { toolName, reason: 'Shell execution denied by policy' });
+        return { allow: false, reason: 'Shell/bash execution denied by default (Constitution Principle IV).' };
+    }
+    return { allow: true };
+}
+/** FR-011: log tool result status and elapsed time. */
+export async function onPostToolUse(ctx, toolName, result) {
+    await auditLog(ctx.sessionId, 'tool_post_use', {
+        toolName,
+        isError: result.isError ?? false,
+        elapsedMs: result.elapsedMs,
+    });
+}
+/** Constitution II: structured audit entry on session start. */
+export async function onSessionStart(ctx) {
+    await auditLog(ctx.sessionId, 'session_start', {
+        taskType: ctx.taskType,
+        approvalMode: ctx.approvalMode,
+        timestamp: new Date().toISOString(),
+    });
+}
+/** Constitution II: structured audit entry on session end. */
+export async function onSessionEnd(ctx, summary) {
+    await auditLog(ctx.sessionId, 'session_end', {
+        taskType: ctx.taskType,
+        tokensUsed: summary.tokensUsed,
+        finalState: summary.finalState,
+        timestamp: new Date().toISOString(),
+    });
+}
+/** Constitution II: structured audit entry on error. */
+export async function onErrorOccurred(ctx, error) {
+    await auditLog(ctx.sessionId, 'error_occurred', {
+        errorType: error.type,
+        errorMessage: error.message,
+        errorContext: error.context,
+        timestamp: new Date().toISOString(),
+    });
+}
+//# sourceMappingURL=sdk-hooks.js.map

package/dist/session/sdk-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-hooks.js","sourceRoot":"","sources":["../../src/session/sdk-hooks.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAQlD,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAmB,EACnB,UAAkB;IAElB,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,oBAAoB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5F,OAAO,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC;AACrC,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAmB,EACnB,QAAgB,EAChB,IAA6B;IAE7B,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAElE,wDAAwD;IACxD,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACzE,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qEAAqE,EAAE,CAAC;IACzG,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAmB,EACnB,QAAgB,EAChB,MAAgD;IAEhD,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE;QAC7C,QAAQ;QACR,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;QAChC,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB;IACtD,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE;QAC7C,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAmB,EACnB,OAAmD;IAEnD,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE;QAC3C,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAmB,EACnB,KAA0E;IAE1E,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE;QAC9C,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC"}

package/dist/session/session-manager.d.ts

@@ -0,0 +1,42 @@
+import type { ISessionManager, RepoRef } from '../contracts/session-manager.js';
+import type { Session, SessionState } from '../schemas/session.js';
+export declare class SessionManager implements ISessionManager {
+    create(params: {
+        userId: string;
+        taskType: Session['taskType'];
+        repo: string;
+        ref: string;
+        sourceMode: Session['sourceMode'];
+        approvalMode: Session['approvalMode'];
+        tokenBudget: number;
+        toolProfile: string;
+    }): Promise<Session>;
+    get(sessionId: string): Promise<Session | null>;
+    update(session: Session): Promise<void>;
+    /**
+     * Transition session state with validation.
+     * Throws if the transition is not allowed by the lifecycle rules.
+     */
+    transition(sessionId: string, newState: SessionState, reason?: string): Promise<Session>;
+    /**
+     * Create a checkpoint capturing current session progress.
+     */
+    createCheckpoint(session: Session, summary: string, completedSteps?: string[]): Promise<void>;
+    /**
+     * Complete a session with cleanup.
+     * Sets state to 'completed' and saves final checkpoint.
+     */
+    complete(sessionId: string, summary?: string): Promise<void>;
+    /**
+     * Transition to error state with diagnostic info.
+     */
+    markError(sessionId: string, errorMessage: string): Promise<void>;
+    delete(sessionId: string): Promise<void>;
+    list(): Promise<Session[]>;
+    findLatestScan(repo: string): Promise<Record<string, unknown> | null>;
+    addRepos(sessionId: string, repos: RepoRef[]): Promise<Session>;
+    removeRepo(sessionId: string, repo: string): Promise<Session>;
+    listRepos(sessionId: string): Promise<RepoRef[]>;
+    findSessionsByRepo(repo: string): Promise<Session[]>;
+}
+//# sourceMappingURL=session-manager.d.ts.map

package/dist/session/session-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/session/session-manager.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAsBnE,qBAAa,cAAe,YAAW,eAAe;IAC9C,MAAM,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAClC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QACtC,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,OAAO,CAAC;IAoCd,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAS/C,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C;;;OAGG;IACG,UAAU,CACd,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,YAAY,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC;IAuBnB;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,MAAM,EACf,cAAc,CAAC,EAAE,MAAM,EAAE,GACxB,OAAO,CAAC,IAAI,CAAC;IAahB;;;OAGG;IACG,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBlE;;OAEG;IACG,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBjE,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAmB1B,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAmBrE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAoB/D,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAc7D,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAYhD,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;CAQ3D"}

package/dist/session/session-manager.js

@@ -0,0 +1,236 @@
+/**
+ * Session manager — ISessionManager implementation with JSON file persistence.
+ * @module session/session-manager
+ */
+import { readFile, writeFile, readdir, mkdir, rm } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { SessionSchema } from '../schemas/session.js';
+import { SessionError } from '../lib/errors.js';
+const SESSIONS_DIR = join(homedir(), '.saasgadget', 'sessions');
+function sessionDir(sessionId) {
+    return join(SESSIONS_DIR, sessionId);
+}
+function sessionFile(sessionId) {
+    return join(sessionDir(sessionId), 'session.json');
+}
+/** Valid state transitions for session lifecycle. */
+const VALID_TRANSITIONS = {
+    active: ['suspended', 'completed', 'error'],
+    suspended: ['active'],
+    error: ['active'],
+    completed: [],
+};
+export class SessionManager {
+    async create(params) {
+        const timestamp = Date.now();
+        const sessionId = `${params.userId}-${params.taskType}-${timestamp}`;
+        const session = SessionSchema.parse({
+            sessionId,
+            userId: params.userId,
+            taskType: params.taskType,
+            state: 'active',
+            repo: params.repo,
+            ref: params.ref,
+            sourceMode: params.sourceMode,
+            approvalMode: params.approvalMode,
+            tokenBudget: params.tokenBudget,
+            tokensUsed: {
+                scanData: 0,
+                conversationHistory: 0,
+                toolResults: 0,
+                reservedOutput: 0,
+                total: 0,
+            },
+            toolProfile: params.toolProfile,
+            checkpoints: [],
+            conversationHistory: [],
+            createdAt: new Date().toISOString(),
+            updatedAt: new Date().toISOString(),
+            resumeToken: null,
+        });
+        const dir = sessionDir(sessionId);
+        await mkdir(dir, { recursive: true });
+        await writeFile(sessionFile(sessionId), JSON.stringify(session, null, 2), 'utf-8');
+        return session;
+    }
+    async get(sessionId) {
+        try {
+            const raw = await readFile(sessionFile(sessionId), 'utf-8');
+            return SessionSchema.parse(JSON.parse(raw));
+        }
+        catch {
+            return null;
+        }
+    }
+    async update(session) {
+        const validated = SessionSchema.parse({
+            ...session,
+            updatedAt: new Date().toISOString(),
+        });
+        await writeFile(sessionFile(session.sessionId), JSON.stringify(validated, null, 2), 'utf-8');
+    }
+    /**
+     * Transition session state with validation.
+     * Throws if the transition is not allowed by the lifecycle rules.
+     */
+    async transition(sessionId, newState, reason) {
+        const session = await this.get(sessionId);
+        if (!session) {
+            throw new SessionError(`Session not found: ${sessionId}`);
+        }
+        const allowed = VALID_TRANSITIONS[session.state];
+        if (!allowed.includes(newState)) {
+            throw new SessionError(`Invalid state transition: ${session.state} → ${newState}. ` +
+                `Allowed transitions from '${session.state}': [${allowed.join(', ')}]`);
+        }
+        session.state = newState;
+        if (reason) {
+            // Store transition reason in a checkpoint
+            await this.createCheckpoint(session, `State → ${newState}: ${reason}`);
+        }
+        await this.update(session);
+        return session;
+    }
+    /**
+     * Create a checkpoint capturing current session progress.
+     */
+    async createCheckpoint(session, summary, completedSteps) {
+        const checkpoint = {
+            id: `chk-${Date.now()}`,
+            timestamp: new Date().toISOString(),
+            summary,
+            tokensUsed: session.tokensUsed.total,
+            completedSteps: completedSteps ?? [],
+        };
+        session.checkpoints.push(checkpoint);
+        session.resumeToken = checkpoint.id;
+        await this.update(session);
+    }
+    /**
+     * Complete a session with cleanup.
+     * Sets state to 'completed' and saves final checkpoint.
+     */
+    async complete(sessionId, summary) {
+        const session = await this.get(sessionId);
+        if (!session)
+            return;
+        try {
+            await this.createCheckpoint(session, summary ?? 'Session completed');
+            session.state = 'completed';
+            await this.update(session);
+        }
+        catch (err) {
+            // Best-effort: mark as error if cleanup itself fails
+            session.state = 'error';
+            await this.update(session).catch(() => { });
+            throw err;
+        }
+    }
+    /**
+     * Transition to error state with diagnostic info.
+     */
+    async markError(sessionId, errorMessage) {
+        const session = await this.get(sessionId);
+        if (!session)
+            return;
+        session.state = 'error';
+        session.checkpoints.push({
+            id: `chk-err-${Date.now()}`,
+            timestamp: new Date().toISOString(),
+            summary: `Error: ${errorMessage}`,
+            tokensUsed: session.tokensUsed.total,
+            completedSteps: [],
+        });
+        session.resumeToken = session.checkpoints.at(-1)?.id ?? '';
+        await this.update(session);
+    }
+    async delete(sessionId) {
+        try {
+            await rm(sessionDir(sessionId), { recursive: true, force: true });
+        }
+        catch {
+            // Already deleted
+        }
+    }
+    async list() {
+        try {
+            await mkdir(SESSIONS_DIR, { recursive: true });
+            const entries = await readdir(SESSIONS_DIR, { withFileTypes: true });
+            const sessions = [];
+            for (const entry of entries) {
+                if (entry.isDirectory()) {
+                    const session = await this.get(entry.name);
+                    if (session)
+                        sessions.push(session);
+                }
+            }
+            return sessions.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+        }
+        catch {
+            return [];
+        }
+    }
+    async findLatestScan(repo) {
+        const sessions = await this.list();
+        const scanSession = sessions.find((s) => s.taskType === 'scan' && s.repo === repo && s.state === 'completed');
+        if (!scanSession)
+            return null;
+        try {
+            const resultPath = join(sessionDir(scanSession.sessionId), 'scan-result.json');
+            const raw = await readFile(resultPath, 'utf-8');
+            return JSON.parse(raw);
+        }
+        catch {
+            return null;
+        }
+    }
+    // ─── Multi-Repo Methods (v2) ───────────────────────────
+    async addRepos(sessionId, repos) {
+        const session = await this.get(sessionId);
+        if (!session)
+            throw new SessionError(`Session not found: ${sessionId}`);
+        const existing = session.additionalRepos ?? [];
+        for (const repo of repos) {
+            if (repo.repo === session.repo &&
+                repo.ref === session.ref)
+                continue; // Skip if it's the primary repo
+            if (existing.some((r) => r.repo === repo.repo))
+                continue; // Already tracked
+            existing.push(repo);
+        }
+        session.additionalRepos = existing;
+        session.updatedAt = new Date().toISOString();
+        await this.update(session);
+        return session;
+    }
+    async removeRepo(sessionId, repo) {
+        const session = await this.get(sessionId);
+        if (!session)
+            throw new SessionError(`Session not found: ${sessionId}`);
+        if (repo === session.repo) {
+            throw new SessionError('Cannot remove the primary repo. Use delete() to remove the session.');
+        }
+        session.additionalRepos = (session.additionalRepos ?? []).filter((r) => r.repo !== repo);
+        session.updatedAt = new Date().toISOString();
+        await this.update(session);
+        return session;
+    }
+    async listRepos(sessionId) {
+        const session = await this.get(sessionId);
+        if (!session)
+            throw new SessionError(`Session not found: ${sessionId}`);
+        const primary = {
+            repo: session.repo,
+            ref: session.ref,
+            sourceMode: session.sourceMode,
+        };
+        return [primary, ...(session.additionalRepos ?? [])];
+    }
+    async findSessionsByRepo(repo) {
+        const sessions = await this.list();
+        return sessions.filter((s) => s.repo === repo ||
+            (s.additionalRepos ?? []).some((r) => r.repo === repo));
+    }
+}
+//# sourceMappingURL=session-manager.js.map

package/dist/session/session-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.js","sourceRoot":"","sources":["../../src/session/session-manager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGlC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;AAEhE,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;AACrD,CAAC;AAED,qDAAqD;AACrD,MAAM,iBAAiB,GAAyC;IAC9D,MAAM,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC;IAC3C,SAAS,EAAE,CAAC,QAAQ,CAAC;IACrB,KAAK,EAAE,CAAC,QAAQ,CAAC;IACjB,SAAS,EAAE,EAAE;CACd,CAAC;AAEF,MAAM,OAAO,cAAc;IACzB,KAAK,CAAC,MAAM,CAAC,MASZ;QACC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;QAErE,MAAM,OAAO,GAAY,aAAa,CAAC,KAAK,CAAC;YAC3C,SAAS;YACT,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,mBAAmB,EAAE,CAAC;gBACtB,WAAW,EAAE,CAAC;gBACd,cAAc,EAAE,CAAC;gBACjB,KAAK,EAAE,CAAC;aACT;YACD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,EAAE;YACf,mBAAmB,EAAE,EAAE;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,MAAM,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAEnF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5D,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC;YACpC,GAAG,OAAO;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QACH,MAAM,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/F,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CACd,SAAiB,EACjB,QAAsB,EACtB,MAAe;QAEf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,YAAY,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,YAAY,CACpB,6BAA6B,OAAO,CAAC,KAAK,MAAM,QAAQ,IAAI;gBAC5D,6BAA6B,OAAO,CAAC,KAAK,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvE,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;QACzB,IAAI,MAAM,EAAE,CAAC;YACX,0CAA0C;YAC1C,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,QAAQ,KAAK,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CACpB,OAAgB,EAChB,OAAe,EACf,cAAyB;QAEzB,MAAM,UAAU,GAAG;YACjB,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO;YACP,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK;YACpC,cAAc,EAAE,cAAc,IAAI,EAAE;SACrC,CAAC;QACF,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,OAAgB;QAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,IAAI,mBAAmB,CAAC,CAAC;YACrE,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC;YAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qDAAqD;YACrD,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;YACxB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC3C,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,YAAoB;QACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;QACxB,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;YACvB,EAAE,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,UAAU,YAAY,EAAE;YACjC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK;YACpC,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QACH,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,MAAM,QAAQ,GAAc,EAAE,CAAC;YAE/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3C,IAAI,OAAO;wBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YAED,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,CAC3E,CAAC;QAEF,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,0DAA0D;IAE1D,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,KAAgB;QAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;QAExE,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IACE,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;gBAC1B,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;gBACxB,SAAS,CAAC,gCAAgC;YAC5C,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,kBAAkB;YAC5E,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAED,OAAO,CAAC,eAAe,GAAG,QAAQ,CAAC;QACnC,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,IAAY;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;QAExE,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;YAC1B,MAAM,IAAI,YAAY,CAAC,qEAAqE,CAAC,CAAC;QAChG,CAAC;QAED,OAAO,CAAC,eAAe,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACzF,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,YAAY,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;QAExE,MAAM,OAAO,GAAY;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC;QACF,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,IAAY;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,QAAQ,CAAC,MAAM,CACpB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,IAAI;YACf,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CACzD,CAAC;IACJ,CAAC;CACF"}

package/dist/session/token-tracker.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Token tracker — budget management with category breakdown and compaction triggers.
+ * @module session/token-tracker
+ */
+import type { TokenUsage } from '../schemas/session.js';
+export interface TokenTrackerOptions {
+    budget: number;
+    warningThreshold: number;
+    blockThreshold: number;
+}
+export declare class TokenTracker {
+    private usage;
+    private readonly budget;
+    private readonly warningThreshold;
+    private readonly blockThreshold;
+    private warningEmitted;
+    constructor(options: TokenTrackerOptions);
+    /** Record token usage in a specific category. */
+    add(category: keyof Omit<TokenUsage, 'total'>, tokens: number): void;
+    /** Get current usage snapshot. */
+    getUsage(): TokenUsage;
+    /** Get remaining budget. */
+    remaining(): number;
+    /** Check if compaction should be triggered. */
+    needsCompaction(): boolean;
+    /** Reduce a category after compaction. */
+    reduce(category: keyof Omit<TokenUsage, 'total'>, amount: number): void;
+    /** Format a CLI summary with visual progress bar. */
+    formatSummary(): string;
+}
+//# sourceMappingURL=token-tracker.d.ts.map

package/dist/session/token-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-tracker.d.ts","sourceRoot":"","sources":["../../src/session/token-tracker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAa;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,cAAc,CAAS;gBAEnB,OAAO,EAAE,mBAAmB;IAaxC,iDAAiD;IACjD,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAqBpE,kCAAkC;IAClC,QAAQ,IAAI,UAAU;IAItB,4BAA4B;IAC5B,SAAS,IAAI,MAAM;IAInB,+CAA+C;IAC/C,eAAe,IAAI,OAAO;IAI1B,0CAA0C;IAC1C,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAQvE,qDAAqD;IACrD,aAAa,IAAI,MAAM;CASxB"}

package/dist/session/token-tracker.js

@@ -0,0 +1,66 @@
+import { BudgetExhaustedError } from '../lib/errors.js';
+export class TokenTracker {
+    usage;
+    budget;
+    warningThreshold;
+    blockThreshold;
+    warningEmitted = false;
+    constructor(options) {
+        this.budget = options.budget;
+        this.warningThreshold = options.warningThreshold;
+        this.blockThreshold = options.blockThreshold;
+        this.usage = {
+            scanData: 0,
+            conversationHistory: 0,
+            toolResults: 0,
+            reservedOutput: 0,
+            total: 0,
+        };
+    }
+    /** Record token usage in a specific category. */
+    add(category, tokens) {
+        this.usage[category] += tokens;
+        this.usage.total = this.usage.scanData
+            + this.usage.conversationHistory
+            + this.usage.toolResults
+            + this.usage.reservedOutput;
+        if (this.usage.total >= this.budget * this.blockThreshold) {
+            throw new BudgetExhaustedError(`Token budget hard limit reached: ${this.usage.total} / ${this.budget} (${Math.round(this.blockThreshold * 100)}% threshold).`);
+        }
+        if (!this.warningEmitted && this.usage.total >= this.budget * this.warningThreshold) {
+            this.warningEmitted = true;
+            console.warn(`⚠️  Token budget warning: ${this.usage.total.toLocaleString()} / ${this.budget.toLocaleString()} used (${Math.round((this.usage.total / this.budget) * 100)}%)`);
+        }
+    }
+    /** Get current usage snapshot. */
+    getUsage() {
+        return { ...this.usage };
+    }
+    /** Get remaining budget. */
+    remaining() {
+        return Math.max(0, this.budget - this.usage.total);
+    }
+    /** Check if compaction should be triggered. */
+    needsCompaction() {
+        return this.usage.total >= this.budget * this.warningThreshold;
+    }
+    /** Reduce a category after compaction. */
+    reduce(category, amount) {
+        this.usage[category] = Math.max(0, this.usage[category] - amount);
+        this.usage.total = this.usage.scanData
+            + this.usage.conversationHistory
+            + this.usage.toolResults
+            + this.usage.reservedOutput;
+    }
+    /** Format a CLI summary with visual progress bar. */
+    formatSummary() {
+        const pct = Math.min(1, this.usage.total / this.budget);
+        const barWidth = 20;
+        const filled = Math.round(pct * barWidth);
+        const empty = barWidth - filled;
+        const bar = '█'.repeat(filled) + '░'.repeat(empty);
+        const pctStr = `${Math.round(pct * 100)}%`;
+        return `[${bar}] ${pctStr}  Tokens: ${this.usage.total.toLocaleString()} / ${this.budget.toLocaleString()}`;
+    }
+}
+//# sourceMappingURL=token-tracker.js.map

package/dist/session/token-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-tracker.js","sourceRoot":"","sources":["../../src/session/token-tracker.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAQxD,MAAM,OAAO,YAAY;IACf,KAAK,CAAa;IACT,MAAM,CAAS;IACf,gBAAgB,CAAS;IACzB,cAAc,CAAS;IAChC,cAAc,GAAG,KAAK,CAAC;IAE/B,YAAY,OAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG;YACX,QAAQ,EAAE,CAAC;YACX,mBAAmB,EAAE,CAAC;YACtB,WAAW,EAAE,CAAC;YACd,cAAc,EAAE,CAAC;YACjB,KAAK,EAAE,CAAC;SACT,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,GAAG,CAAC,QAAyC,EAAE,MAAc;QAC3D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ;cAClC,IAAI,CAAC,KAAK,CAAC,mBAAmB;cAC9B,IAAI,CAAC,KAAK,CAAC,WAAW;cACtB,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QAE9B,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1D,MAAM,IAAI,oBAAoB,CAC5B,oCAAoC,IAAI,CAAC,KAAK,CAAC,KAAK,MAAM,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,eAAe,CAC/H,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACpF,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,OAAO,CAAC,IAAI,CACV,6BAA6B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CACjK,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,4BAA4B;IAC5B,SAAS;QACP,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,+CAA+C;IAC/C,eAAe;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC;IACjE,CAAC;IAED,0CAA0C;IAC1C,MAAM,CAAC,QAAyC,EAAE,MAAc;QAC9D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ;cAClC,IAAI,CAAC,KAAK,CAAC,mBAAmB;cAC9B,IAAI,CAAC,KAAK,CAAC,WAAW;cACtB,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;IAChC,CAAC;IAED,qDAAqD;IACrD,aAAa;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QAChC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;QAC3C,OAAO,IAAI,GAAG,KAAK,MAAM,aAAa,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;IAC9G,CAAC;CACF"}

package/package.json

@@ -0,0 +1,80 @@
+{
+  "name": "saasgadget",
+  "version": "0.1.0",
+  "description": "CLI tool for solo SaaS founders — scan repos, generate audit reports, plan changes, and manage MCP servers",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "saasgadget": "dist/index.js",
+    "sg": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE.md"
+  ],
+  "keywords": [
+    "saas",
+    "cli",
+    "audit",
+    "scan",
+    "report",
+    "mcp",
+    "copilot",
+    "founder",
+    "devtools"
+  ],
+  "author": "WxZRD Media <support@saasgadget.io>",
+  "license": "MIT",
+  "homepage": "https://saasgadget.io",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wxzrd21614/SaaSGadgetCLI.git",
+    "directory": "packages/cli"
+  },
+  "bugs": {
+    "url": "https://github.com/wxzrd21614/SaaSGadgetCLI/issues"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/index.ts",
+    "start": "node dist/index.js",
+    "prepublishOnly": "pnpm run build",
+    "test": "vitest run",
+    "test:unit": "vitest run tests/unit/",
+    "test:contract": "vitest run tests/contract/",
+    "test:integration": "vitest run tests/integration/",
+    "test:watch": "vitest",
+    "lint": "eslint src/",
+    "lint:fix": "eslint src/ tests/ --fix",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@github/copilot-sdk": "^0.1.0",
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    "@saasgadget/shared": "workspace:*",
+    "cheerio": "^1.2.0",
+    "duck-duck-scrape": "^2.2.0",
+    "express": "^5.0.0",
+    "natural": "^8.0.0",
+    "node-fetch": "^3.3.0",
+    "zod": "^4.3.0"
+  },
+  "optionalDependencies": {
+    "@napi-rs/keyring": "^1.2.0"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.25",
+    "jsdom": "^28.1.0",
+    "tsx": "^4.19.0"
+  }
+}