sandstream-kit 1.0.0

package/dist/config.d.ts

@@ -0,0 +1,233 @@
+export interface ToolConfig {
+    [name: string]: string;
+}
+export interface ServiceConfig {
+    login: string;
+    check: string;
+    link?: string;
+    [key: string]: string | undefined;
+}
+export interface SecretKeyConfig {
+    source: "1password" | "env" | "eas" | "config" | "dotenvx" | "infisical" | "bitwarden" | "doppler" | "vault" | "aws-sm" | "gcp-sm" | "azure-kv";
+    ref?: string;
+    value?: string;
+    name?: string;
+    /** HashiCorp Vault: KV v2 path (e.g. "secret/data/myapp/db") */
+    vault_path?: string;
+    /** HashiCorp Vault: field inside the secret object */
+    vault_field?: string;
+    /** AWS Secrets Manager: explicit region override (else AWS_REGION) */
+    aws_region?: string;
+    /** GCP Secret Manager: project (else env GCP_PROJECT/GOOGLE_CLOUD_PROJECT) */
+    gcp_project?: string;
+    /** GCP Secret Manager: version label (default "latest") */
+    gcp_version?: string;
+    /** Azure Key Vault: vault name (else env AZURE_KEYVAULT_NAME) */
+    azure_vault?: string;
+}
+export interface InfisicalConfig {
+    project_id?: string;
+    environment?: string;
+    path?: string;
+}
+export interface SecretsConfig {
+    store?: "bitwarden" | "1password" | "env" | "dotenvx" | "doppler" | "infisical" | "vault" | "aws-sm" | "gcp-sm" | "azure-kv";
+    template?: string;
+    keys?: Record<string, SecretKeyConfig>;
+    infisical?: InfisicalConfig;
+}
+export interface SkillsConfig {
+    registry?: string;
+    required?: Record<string, string>;
+    optional?: Record<string, string>;
+}
+/**
+ * Web search provider configuration
+ * Allows agents to use local or alternative search providers
+ */
+export interface WebSearchConfig {
+    provider?: "brave" | "searxng" | "google" | "custom";
+    url?: string;
+    apiKey?: string;
+}
+/**
+ * Environment-specific access permissions
+ * Parsed from [governance.access.dev], [governance.access.staging], [governance.access.prod]
+ */
+export interface EnvironmentAccess {
+    read: boolean;
+    write: boolean;
+    delete: boolean;
+}
+/**
+ * Access control configuration per environment
+ * Parsed from [governance.access]
+ */
+export interface GovernanceAccessConfig {
+    dev?: EnvironmentAccess;
+    staging?: EnvironmentAccess;
+    prod?: EnvironmentAccess;
+}
+/**
+ * Agent identification and budget limits
+ * Parsed from [governance.agent]
+ */
+export interface GovernanceAgentConfig {
+    id?: string;
+    name?: string;
+    max_tokens_per_day?: number;
+    max_operations_per_hour?: number;
+}
+/**
+ * Audit logging configuration
+ * Parsed from [governance.audit]
+ */
+/**
+ * Per-MCP-server configuration declared in `.kit.toml [mcp.<name>]`.
+ * Each block describes one MCP kit may auth against + the scopes the
+ * operator pre-approves for that workspace.
+ */
+export interface McpServerConfig {
+    /** Vendor URL — e.g. https://mcp.sentry.dev, mcp.stripe.com, etc. */
+    url?: string;
+    /** Region hint (us / eu / self-hosted). */
+    region?: string;
+    /** Scopes the operator declares kit can request. */
+    scopes?: string[];
+    /** Optional project/team scope tightener. */
+    project?: string;
+    /** Optional team-id scope tightener. */
+    team?: string;
+}
+export interface McpConfig {
+    [name: string]: McpServerConfig;
+}
+/**
+ * Agent-write pre-approval policy. Declares which sensitive vendor ops the
+ * operator pre-authorizes for this repo. Classifiers / agents reading
+ * `KIT_POLICY_HASH` know which ops are explicit-OK vs require fresh
+ * confirmation. See docs/THREAT_MODEL.md + src/policy.ts.
+ *
+ * Example:
+ *   [policy.agent_writes]
+ *   sentry = ["resolve_issue", "create_release"]
+ *   supabase = ["rotate_jwt", "list_projects"]
+ *   vercel = ["env_set", "trigger_deploy"]
+ *   stripe = []  # all writes still gated
+ */
+export interface PolicyAgentWritesConfig {
+    [vendor: string]: string[];
+}
+export interface PolicyConfig {
+    agent_writes?: PolicyAgentWritesConfig;
+    /** Force read-only mode for this repo. Same effect as `--read-only` flag. */
+    default_mode?: "read-write" | "read-only";
+}
+export interface GovernanceAuditConfig {
+    enabled?: boolean;
+    log_file?: string;
+    log_level?: "debug" | "info" | "warn" | "error";
+    include_secrets?: boolean;
+    /**
+     * Ship audit events to KIT_REMOTE_URL in addition to the local JSONL.
+     * Default false — audit-log is local-first per docs/THREAT_MODEL.md. The
+     * first remote-push attempt emits a loud stderr notice so operators know
+     * data is leaving the machine.
+     */
+    remote?: boolean;
+}
+/**
+ * Approval gate configuration for destructive operations
+ * Parsed from [governance.approval]
+ */
+export interface GovernanceApprovalConfig {
+    destructive_operations?: string[];
+    production_writes?: boolean;
+    secret_rotations?: boolean;
+    approval_timeout?: number;
+}
+/**
+ * Secret lifecycle management configuration
+ * Parsed from [governance.secrets]
+ */
+export interface GovernanceSecretsConfig {
+    check_expiration?: boolean;
+    warn_days_before_expiry?: number;
+    rotate_on_expiry?: boolean;
+    revoke_on_agent_disable?: boolean;
+}
+/**
+ * Emergency access revocation configuration
+ * Parsed from [governance.revocation]
+ */
+export interface GovernanceRevocationConfig {
+    enabled?: boolean;
+    check_interval?: number;
+    revocation_endpoint?: string;
+}
+/**
+ * Complete governance configuration
+ * Parsed from [governance] and sub-sections
+ * See GOVERNANCE.md for complete documentation
+ */
+export interface GovernanceConfig {
+    enabled?: boolean;
+    environment?: "dev" | "staging" | "prod";
+    access?: GovernanceAccessConfig;
+    agent?: GovernanceAgentConfig;
+    audit?: GovernanceAuditConfig;
+    approval?: GovernanceApprovalConfig;
+    secrets?: GovernanceSecretsConfig;
+    revocation?: GovernanceRevocationConfig;
+}
+/**
+ * Git hooks configuration
+ * Parsed from [hooks]
+ */
+export interface HooksConfig {
+    "pre-commit"?: string[];
+    "pre-push"?: string[];
+    "post-commit"?: string[];
+    "post-merge"?: string[];
+    [hookName: string]: string[] | undefined;
+}
+/** Per-environment overrides — a partial kitConfig without nested env sections */
+export interface EnvOverride {
+    tools?: ToolConfig;
+    services?: Record<string, ServiceConfig>;
+    secrets?: SecretsConfig;
+    skills?: SkillsConfig;
+    governance?: GovernanceConfig;
+}
+export interface kitConfig {
+    tools?: ToolConfig;
+    services?: Record<string, ServiceConfig>;
+    secrets?: SecretsConfig;
+    skills?: SkillsConfig;
+    governance?: GovernanceConfig;
+    hooks?: HooksConfig;
+    web?: {
+        search?: WebSearchConfig;
+    };
+    /** Named environment overrides: [env.staging.*], [env.production.*] */
+    env?: Record<string, EnvOverride>;
+    /** Declared MCP-server connections. See McpConfig + src/mcp-orchestrator.ts. */
+    mcp?: McpConfig;
+    /** Agent-write pre-approval policy. See PolicyConfig + src/policy.ts. */
+    policy?: PolicyConfig;
+}
+/**
+ * Detect the active environment name from CLI args, env vars, or NODE_ENV.
+ * Resolution order:
+ *   1. --env=<name> CLI flag
+ *   2. KIT_ENV environment variable
+ *   3. NODE_ENV (development→dev, production→prod, test→test)
+ *   4. "dev" default
+ */
+export declare function resolveActiveEnvironment(cliArgs?: string[]): string;
+/**
+ * Merge a base kitConfig with an environment-specific override.
+ * Override values take precedence; missing override keys fall back to base.
+ */
+export declare function mergeEnvironmentConfig(base: kitConfig, override: EnvOverride): kitConfig;
+export declare function loadConfig(path: string, envName?: string): Promise<kitConfig>;

package/dist/config.js

@@ -0,0 +1,255 @@
+import { readFile } from "node:fs/promises";
+import { parse } from "smol-toml";
+import { z } from "zod";
+// ─── Zod validation schemas ──────────────────────────────────────────────────
+// Use .passthrough() at every level for forward compatibility: unknown keys
+// are allowed (no error), but wrong types on known keys are caught.
+const SecretKeyConfigSchema = z
+    .object({
+    source: z.enum([
+        "1password",
+        "env",
+        "eas",
+        "config",
+        "dotenvx",
+        "infisical",
+        "bitwarden",
+        "doppler",
+        "vault",
+        "aws-sm",
+        "gcp-sm",
+        "azure-kv",
+    ]),
+    ref: z.string().optional(),
+    value: z.string().optional(),
+    name: z.string().optional(),
+    vault_path: z.string().optional(),
+    vault_field: z.string().optional(),
+    aws_region: z.string().optional(),
+    gcp_project: z.string().optional(),
+    gcp_version: z.string().optional(),
+    azure_vault: z.string().optional(),
+})
+    .passthrough();
+const SecretsConfigSchema = z
+    .object({
+    store: z
+        .enum([
+        "bitwarden",
+        "1password",
+        "env",
+        "dotenvx",
+        "doppler",
+        "infisical",
+        "vault",
+        "aws-sm",
+        "gcp-sm",
+        "azure-kv",
+    ])
+        .optional(),
+    template: z.string().optional(),
+    keys: z.record(z.string(), SecretKeyConfigSchema).optional(),
+    infisical: z
+        .object({
+        project_id: z.string().optional(),
+        environment: z.string().optional(),
+        path: z.string().optional(),
+    })
+        .passthrough()
+        .optional(),
+})
+    .passthrough();
+const ServiceConfigSchema = z
+    .object({
+    login: z.string(),
+    check: z.string(),
+    link: z.string().optional(),
+})
+    .passthrough();
+const SkillsConfigSchema = z
+    .object({
+    registry: z.string().optional(),
+    required: z.record(z.string(), z.string()).optional(),
+    optional: z.record(z.string(), z.string()).optional(),
+})
+    .passthrough();
+const GovernanceConfigSchema = z
+    .object({
+    enabled: z.boolean().optional(),
+    environment: z.enum(["dev", "staging", "prod"]).optional(),
+    access: z
+        .object({
+        dev: z
+            .object({ read: z.boolean(), write: z.boolean(), delete: z.boolean() })
+            .passthrough()
+            .optional(),
+        staging: z
+            .object({ read: z.boolean(), write: z.boolean(), delete: z.boolean() })
+            .passthrough()
+            .optional(),
+        prod: z
+            .object({ read: z.boolean(), write: z.boolean(), delete: z.boolean() })
+            .passthrough()
+            .optional(),
+    })
+        .passthrough()
+        .optional(),
+    agent: z
+        .object({
+        id: z.string().optional(),
+        name: z.string().optional(),
+        max_tokens_per_day: z.number().optional(),
+        max_operations_per_hour: z.number().optional(),
+    })
+        .passthrough()
+        .optional(),
+    audit: z
+        .object({
+        enabled: z.boolean().optional(),
+        log_file: z.string().optional(),
+        log_level: z.enum(["debug", "info", "warn", "error"]).optional(),
+        include_secrets: z.boolean().optional(),
+    })
+        .passthrough()
+        .optional(),
+    approval: z
+        .object({
+        destructive_operations: z.array(z.string()).optional(),
+        production_writes: z.boolean().optional(),
+        secret_rotations: z.boolean().optional(),
+        approval_timeout: z.number().optional(),
+    })
+        .passthrough()
+        .optional(),
+    secrets: z
+        .object({
+        check_expiration: z.boolean().optional(),
+        warn_days_before_expiry: z.number().optional(),
+        rotate_on_expiry: z.boolean().optional(),
+        revoke_on_agent_disable: z.boolean().optional(),
+    })
+        .passthrough()
+        .optional(),
+    revocation: z
+        .object({
+        enabled: z.boolean().optional(),
+        check_interval: z.number().optional(),
+        revocation_endpoint: z.string().optional(),
+    })
+        .passthrough()
+        .optional(),
+})
+    .passthrough();
+const HooksConfigSchema = z.record(z.string(), z.array(z.string()).optional()).optional();
+const WebConfigSchema = z
+    .object({
+    search: z
+        .object({
+        provider: z.enum(["brave", "searxng", "google", "custom"]).optional(),
+        url: z.string().optional(),
+        apiKey: z.string().optional(),
+    })
+        .passthrough()
+        .optional(),
+})
+    .passthrough()
+    .optional();
+// Known top-level section names — used to detect typos
+const KNOWN_SECTIONS = new Set([
+    "tools", "services", "secrets", "skills", "governance", "hooks", "web", "setup", "env",
+]);
+const kitConfigSchema = z
+    .object({
+    tools: z.record(z.string(), z.string()).optional(),
+    services: z.record(z.string(), ServiceConfigSchema).optional(),
+    secrets: SecretsConfigSchema.optional(),
+    skills: SkillsConfigSchema.optional(),
+    governance: GovernanceConfigSchema.optional(),
+    hooks: HooksConfigSchema,
+    web: WebConfigSchema,
+    setup: z
+        .object({
+        install: z.string().optional(),
+        migrate: z.string().optional(),
+        seed: z.string().optional(),
+        verify: z.string().optional(),
+    })
+        .passthrough()
+        .optional(),
+})
+    .passthrough(); // allow unknown top-level keys (warn, not error)
+/**
+ * Format Zod validation errors into human-readable messages.
+ */
+function formatValidationErrors(errors) {
+    return errors
+        .map((issue) => {
+        const path = issue.path.length > 0 ? issue.path.join(".") : "(root)";
+        return `  • ${path}: ${issue.message}`;
+    })
+        .join("\n");
+}
+/**
+ * Detect the active environment name from CLI args, env vars, or NODE_ENV.
+ * Resolution order:
+ *   1. --env=<name> CLI flag
+ *   2. KIT_ENV environment variable
+ *   3. NODE_ENV (development→dev, production→prod, test→test)
+ *   4. "dev" default
+ */
+export function resolveActiveEnvironment(cliArgs = process.argv.slice(2)) {
+    const flag = cliArgs.find((a) => a.startsWith("--env="));
+    if (flag)
+        return flag.split("=")[1];
+    if (process.env.KIT_ENV)
+        return process.env.KIT_ENV;
+    const nodeEnv = process.env.NODE_ENV;
+    if (nodeEnv === "production")
+        return "prod";
+    if (nodeEnv === "development")
+        return "dev";
+    if (nodeEnv)
+        return nodeEnv;
+    return "dev";
+}
+/**
+ * Merge a base kitConfig with an environment-specific override.
+ * Override values take precedence; missing override keys fall back to base.
+ */
+export function mergeEnvironmentConfig(base, override) {
+    return {
+        ...base,
+        tools: override.tools ?? base.tools,
+        services: override.services
+            ? { ...(base.services ?? {}), ...override.services }
+            : base.services,
+        secrets: override.secrets ?? base.secrets,
+        skills: override.skills ?? base.skills,
+        governance: override.governance ?? base.governance,
+    };
+}
+export async function loadConfig(path, envName) {
+    const content = await readFile(path, "utf-8");
+    const raw = parse(content);
+    // Validate — surface friendly errors for wrong types, invalid enum values, etc.
+    const result = kitConfigSchema.safeParse(raw);
+    if (!result.success) {
+        const formatted = formatValidationErrors(result.error.issues);
+        throw new Error(`Invalid .kit.toml:\n${formatted}`);
+    }
+    // Warn about unknown top-level sections (likely typos like [tolls] vs [tools])
+    for (const key of Object.keys(raw)) {
+        if (!KNOWN_SECTIONS.has(key)) {
+            console.warn(`Warning: unknown section [${key}] in .kit.toml (known: ${[...KNOWN_SECTIONS].join(", ")})`);
+        }
+    }
+    const base = result.data;
+    // Apply environment override if requested and available
+    const activeEnv = envName ?? resolveActiveEnvironment();
+    const override = base.env?.[activeEnv];
+    if (override && activeEnv !== "dev") {
+        return mergeEnvironmentConfig(base, override);
+    }
+    return base;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAwQxB,gFAAgF;AAChF,4EAA4E;AAC5E,oEAAoE;AAEpE,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;QACb,WAAW;QACX,KAAK;QACL,KAAK;QACL,QAAQ;QACR,SAAS;QACT,WAAW;QACX,WAAW;QACX,SAAS;QACT,OAAO;QACP,QAAQ;QACR,QAAQ;QACR,UAAU;KACX,CAAC;IACF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC;SACL,IAAI,CAAC;QACJ,WAAW;QACX,WAAW;QACX,KAAK;QACL,SAAS;QACT,SAAS;QACT,WAAW;QACX,OAAO;QACP,QAAQ;QACR,QAAQ;QACR,UAAU;KACX,CAAC;SACD,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IAC5D,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;CACd,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,GAAG,EAAE,CAAC;aACH,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;aACtE,WAAW,EAAE;aACb,QAAQ,EAAE;QACb,OAAO,EAAE,CAAC;aACP,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;aACtE,WAAW,EAAE;aACb,QAAQ,EAAE;QACb,IAAI,EAAE,CAAC;aACJ,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;aACtE,WAAW,EAAE;aACb,QAAQ,EAAE;KACd,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACzC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/C,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChE,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtD,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACzC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACxC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;IACb,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACxC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9C,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACxC,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAChD,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;IACb,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC3C,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;CACd,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAE1F,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;QACrE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;CACd,CAAC;KACD,WAAW,EAAE;KACb,QAAQ,EAAE,CAAC;AAEd,uDAAuD;AACvD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;CACvF,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IAC9D,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACvC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC7C,KAAK,EAAE,iBAAiB;IACxB,GAAG,EAAE,eAAe;IACpB,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;CACd,CAAC;KACD,WAAW,EAAE,CAAC,CAAC,iDAAiD;AAEnE;;GAEG;AACH,SAAS,sBAAsB,CAAC,MAAoB;IAClD,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrE,OAAO,OAAO,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IACzC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAAoB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpC,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IAEpD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IACrC,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC;IAC5C,IAAI,OAAO,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAe,EAAE,QAAqB;IAC3E,OAAO;QACL,GAAG,IAAI;QACP,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK;QACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YACzB,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE;YACpD,CAAC,CAAC,IAAI,CAAC,QAAQ;QACjB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;QACzC,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;QACtC,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,OAAgB;IAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAA4B,CAAC;IAEtD,gFAAgF;IAChF,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAE9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,+EAA+E;IAC/E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,6BAA6B,GAAG,0BAA0B,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAA4B,CAAC;IAEjD,wDAAwD;IACxD,MAAM,SAAS,GAAG,OAAO,IAAI,wBAAwB,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,QAAQ,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACpC,OAAO,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,38 @@
+import { detectStack } from "./stack-detector.js";
+import type { kitConfig } from "./config.js";
+export interface ProjectContext {
+    projectName: string;
+    kitVersion: string;
+    detectedStack: Awaited<ReturnType<typeof detectStack>>;
+    activeEnvironment: string;
+    tools: Array<{
+        name: string;
+        required: string | null;
+        installed: string | null;
+        ok: boolean;
+    }>;
+    services: Array<{
+        name: string;
+        authenticated: boolean;
+        output?: string;
+    }>;
+    secrets: {
+        templateExists: boolean | null;
+        keys: Array<{
+            name: string;
+            available: boolean;
+            detail?: string;
+        }>;
+    };
+    locks: Array<{
+        category: string;
+        exists: boolean;
+        inSync: boolean;
+        detail: string;
+    }>;
+}
+/**
+ * Gather comprehensive project context for AI agents.
+ * Reuses existing check functions to build a structured view of the project.
+ */
+export declare function gatherProjectContext(config: kitConfig, cwd: string): Promise<ProjectContext>;

package/dist/context.js

@@ -0,0 +1,86 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { detectStack } from "./stack-detector.js";
+import { checkTools } from "./check-tools.js";
+import { checkServices } from "./check-services.js";
+import { checkSecrets } from "./check-secrets.js";
+import { checkLockFiles } from "./check-lock.js";
+import { resolveActiveEnvironment } from "./config.js";
+/**
+ * Gather comprehensive project context for AI agents.
+ * Reuses existing check functions to build a structured view of the project.
+ */
+export async function gatherProjectContext(config, cwd) {
+    const kitVersion = getkitVersion(cwd);
+    const activeEnv = resolveActiveEnvironment();
+    const stack = await detectStack(cwd);
+    // Extract project name from package.json or use directory name
+    let projectName = "unknown";
+    try {
+        const pkgPath = join(cwd, "package.json");
+        const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+        projectName = pkg.name || "unknown";
+    }
+    catch {
+        // Use fallback
+    }
+    // Gather tool checks
+    const toolResults = config.tools ? await checkTools(config.tools) : [];
+    const tools = toolResults.map((t) => ({
+        name: t.name,
+        required: t.required ?? null,
+        installed: t.installed ?? null,
+        ok: t.ok,
+    }));
+    // Gather service checks
+    const serviceResults = config.services ? await checkServices(config.services) : [];
+    const services = serviceResults.map((s) => ({
+        name: s.name,
+        authenticated: s.authenticated,
+        output: s.output,
+    }));
+    // Gather secrets checks
+    const secretResults = config.secrets
+        ? await checkSecrets(config.secrets)
+        : { templateExists: null, keys: [] };
+    const secrets = {
+        templateExists: secretResults.templateExists,
+        keys: secretResults.keys.map((k) => ({
+            name: k.name,
+            available: k.available,
+            detail: k.detail,
+        })),
+    };
+    // Gather lock file checks
+    const lockResults = await checkLockFiles(config);
+    const locks = lockResults.map((l) => ({
+        category: l.category,
+        exists: l.exists,
+        inSync: l.inSync,
+        detail: l.detail,
+    }));
+    return {
+        projectName,
+        kitVersion,
+        detectedStack: stack,
+        activeEnvironment: activeEnv,
+        tools,
+        services,
+        secrets,
+        locks,
+    };
+}
+/**
+ * Get the current kit version from package.json.
+ */
+function getkitVersion(cwd) {
+    try {
+        const pkgPath = join(cwd, "..", "..", "package.json");
+        const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
+        return pkg.version ?? "unknown";
+    }
+    catch {
+        return "unknown";
+    }
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAmCvD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAiB,EACjB,GAAW;IAEX,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IAErC,+DAA+D;IAC/D,IAAI,WAAW,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAsB,CAAC;QAC5E,WAAW,GAAG,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IAED,qBAAqB;IACrB,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;QAC5B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;QAC9B,EAAE,EAAE,CAAC,CAAC,EAAE;KACT,CAAC,CAAC,CAAC;IAEJ,wBAAwB;IACxB,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC,CAAC,CAAC;IAEJ,wBAAwB;IACxB,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO;QAClC,CAAC,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC;QACpC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG;QACd,cAAc,EAAE,aAAa,CAAC,cAAc;QAC5C,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC;KACJ,CAAC;IAEF,0BAA0B;IAC1B,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,WAAW;QACX,UAAU;QACV,aAAa,EAAE,KAAK;QACpB,iBAAiB,EAAE,SAAS;QAC5B,KAAK;QACL,QAAQ;QACR,OAAO;QACP,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAyB,CAAC;QAC/E,OAAO,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}