skannr 0.2.2 → 0.2.4

package/ARCHITECTURE.md

@@ -0,0 +1,229 @@
+Skannr: Architecture and Design Decisions
+
+Overview
+
+Skannr is a CLI tool, MCP server, and library that helps developers and AI assistants understand codebases without reading every file. It scans a project, generates compressed structural skeletons of the most relevant files, and returns them ranked by relevance to a natural language question. The output is 96.5% smaller than raw source while retaining all architectural information.
+
+The tool also includes risk analysis (quantifying the downstream impact of a code change) and guard (AI code review against team rules with auto-fix capability).
+
+Core Problem
+
+AI coding assistants are limited by context windows. A typical repo has thousands of files. You cannot paste them all. The assistant sees only what you show it, and guesses the rest.
+
+Existing approaches either dump full files (expensive, noisy) or do keyword search (misses architecturally central files that do not mention the search term directly). Neither approach understands the structural relationships between files.
+
+Skannr solves this by combining three ranking signals with structural compression, so the AI gets the right files in the right format at minimal token cost.
+
+System Architecture
+
+The pipeline is linear and stateless. Each stage takes input from the previous stage and produces output for the next. There is no shared mutable state.
+
+Input (question + root path)
+  > File Scanner (discovers all source files)
+  > Ranker (scores files by relevance using hybrid retrieval)
+  > Skeletonizer (strips function bodies, keeps signatures and types)
+  > Formatter (outputs human text, markdown, or JSON)
+
+Each stage is a separate module. They communicate through typed interfaces, not through side effects.
+
+File Layout
+
+src/
+  cli.ts              Command registration (Commander.js, subcommands)
+  index.ts            Library entry point, orchestrates the pipeline
+  scanner.ts          File discovery with gitignore awareness
+  ranker.ts           Basic keyword relevance scoring
+  ranker-enhanced.ts  Hybrid ranking with dependency graph analysis
+  skeletonizer.ts     Routes files to the correct language adapter
+  formatter.ts        Output formatting (human, markdown, JSON)
+  blast-radius.ts     Risk analysis (diff parsing, graph traversal, scoring)
+  guard/              AI code review module (schema, provider, fix applier)
+  languages/          Language adapters (TypeScript via ts-morph, others via WASM)
+  mcp-server.ts       MCP tool registration for AI assistant integration
+  types.ts            Shared type definitions
+
+Design Decisions
+
+1. Hybrid Retrieval over Pure Keyword Search
+
+Decision: Score files using three signals combined, not just keyword matching.
+
+The three signals:
+  Lexical: keyword frequency in file path and content, with synonym expansion
+  Structural: export density, import relevance, symbol count
+  Dependency graph: how many other files import this file (centrality)
+
+Why: A file named utils.ts might contain the most architecturally important auth logic but never mention the word "auth" in its filename. Pure keyword search misses it. Dependency centrality catches it because everything imports it.
+
+The weights are: lexical 50%, structural 20%, enhanced score 30%, with a dependency boost of 15% blended in. These were tuned empirically against large TypeScript monorepos.
+
+2. AST Skeleton Generation over Summarization
+
+Decision: Generate skeletons by stripping function bodies from the AST, not by asking an LLM to summarize.
+
+Why:
+  Deterministic (same input always produces same output)
+  Fast (milliseconds, not seconds)
+  Free (no API call)
+  Lossless for architecture (all types, signatures, imports, class hierarchies preserved)
+  Only lossy for implementation details (function bodies replaced with a placeholder)
+
+The TypeScript adapter uses ts-morph (a TypeScript compiler API wrapper) which gives perfect AST access. For Python, Go, Rust, and Java, the tool uses web-tree-sitter (WASM compiled grammars) which gives equivalent structural parsing without requiring native C++ compilation.
+
+3. WASM over Native Tree-sitter
+
+Decision: Ship tree-sitter grammars as WASM files instead of native bindings.
+
+Why: Native tree-sitter requires a C++ compiler (Visual Studio on Windows, Xcode on Mac). Most JavaScript developers do not have these installed. The npm install would fail for the majority of users.
+
+WASM grammars are platform-independent. They run everywhere Node.js runs. The tradeoff is slightly slower parsing (roughly 2x), but since we only parse files the ranker already selected as relevant (typically 5-10 files), the total time remains under 2 seconds.
+
+The WASM files add 2MB to the package. This is acceptable because it eliminates a class of installation failures entirely.
+
+4. File-level Dependency Graph (not Symbol-level)
+
+Decision: Track dependencies at file granularity (file A imports file B) not at symbol granularity (function X calls function Y).
+
+Why: Symbol-level call graphs require type resolution, which in turn requires a full project compilation context. TypeScript's type checker can do this but only for TS/JS. Python, Go, Rust, and Java would each need their own type resolver. The engineering cost is disproportionate to the accuracy gain for the primary use case (ranking files by relevance).
+
+File-level import graphs are trivially extractable from any language via regex or AST import node detection. They provide sufficient signal for ranking and risk analysis.
+
+This is documented as a stated limitation. Symbol-level resolution is planned for a future version.
+
+5. Deterministic Risk Scoring over LLM-based Assessment
+
+Decision: Compute risk as a weighted formula with named constants, not by asking an LLM "how risky is this."
+
+The formula:
+  risk = 2.5 * (affected files / total files)
+       + 2.5 * (average centrality of affected files)
+       + 3.5 * (fraction of affected files with no test coverage)
+       + 1.5 * (max hop depth reached / max hops configured)
+
+Why:
+  Deterministic: same diff always produces same score
+  Fast: runs in under 2 seconds with zero API calls
+  CI-gateable: you can block merges on a number, not on an LLM's mood
+  Transparent: the formula is visible, the weights are named constants, the inputs are shown
+  Reproducible: another developer running the same command gets the same result
+
+The untested ratio has the highest weight (3.5 out of 10) because untested downstream code is the strongest signal that a merge is risky. This weighting was a deliberate choice: the number that should most influence whether someone trusts a merge is whether the things it might break have tests.
+
+6. Guard: Structured JSON Contract over Text Parsing
+
+Decision: Enforce schema-validated JSON responses from the LLM. Never parse free text looking for status keywords.
+
+Why: This is a direct response to a known failure mode. Other tools in this space parse LLM responses as raw text, looking for a specific line (like "STATUS: PASSED") at a fixed position. This breaks when providers prepend acknowledgment text ("Sure! Here's my analysis:") before the actual response.
+
+Skannr Guard uses:
+  Gemini API's responseMimeType: 'application/json' (forces JSON output)
+  OpenAI's response_format: { type: 'json_object' } (same)
+  Zod schema validation on every response before using it
+  A JSON extraction fallback that finds the first { to last } regardless of surrounding text
+  One retry with an explicit correction prompt on validation failure
+
+The violation object has a fixed schema. The fixable field is set by the rule definition, not by the LLM. This prevents the LLM from deciding on its own what it can auto-fix.
+
+7. Guard: CLI Auto-detection over Mandatory API Keys
+
+Decision: If the user has Claude Code, Gemini CLI, Kiro, or Ollama installed, use it directly. Do not require a separate API key.
+
+Detection priority:
+  1. claude CLI (uses existing Claude Code authenticated session)
+  2. gemini CLI (uses existing Gemini authenticated session)
+  3. kiro-cli (uses existing Kiro session)
+  4. ollama (local, no auth needed)
+  5. Gemini API (needs GEMINI_API_KEY)
+  6. OpenAI API (needs OPENAI_API_KEY)
+
+Why: The biggest friction in AI-powered dev tools is API key setup. If someone already has a coding agent installed and authenticated, they should not need to configure anything else. The tool should use what is already there.
+
+This mirrors how GGA (gentleman-guardian-angel) works: it shells out to existing CLI tools rather than making its own API calls. The difference is that Skannr Guard also supports direct API calls as a fallback for users who do not have any CLI tool installed.
+
+8. Subcommands over Flags
+
+Decision: Structure the CLI as subcommands (skannr risk, skannr guard, skannr agent) rather than a single command with 20+ flags.
+
+Why: The original CLI had --question, --root, --report, --cache-clear, --cache-stats, --diff, --watch, --mcp, --telemetry-on, --telemetry-off all on one command. Users had to read --help every time to find which flags go together.
+
+Subcommands group related functionality. Each subcommand has only the flags relevant to it. The most common operation (asking a question) takes a bare positional argument:
+
+  skannr "how does auth work?"
+
+No flag needed. The tool should be typeable from memory after seeing it once.
+
+Backward compatibility: all old flags still work. The new commands are aliases, not replacements.
+
+9. Built-in Default Rules over Mandatory Configuration
+
+Decision: Guard works without any rules file. Built-in defaults cover universal best practices.
+
+Default rules: no-any-type, no-console-log, error-handling, no-hardcoded-secrets, function-complexity, unused-imports.
+
+Why: Every extra file a tool requires before it works is friction that prevents adoption. If the user has to create .skannr/rules.json before they can try the tool, most will not try it.
+
+The custom rules file is optional. When present, it overrides defaults. Teams that need domain-specific rules can add them. Everyone else gets reasonable defaults out of the box.
+
+10. MCP as the Integration Layer
+
+Decision: Expose all features as MCP tools (scan_codebase, blast_radius, guard_review) over stdio.
+
+Why: MCP (Model Context Protocol) is the emerging standard for giving AI assistants access to external tools. One protocol works with Cursor, Claude Code, Gemini CLI, VS Code Copilot, and any future MCP-compatible tool.
+
+The alternative would be building separate plugins for each editor. MCP avoids that entirely. One implementation, every tool.
+
+The MCP server and CLI share the same internal functions. There is no code duplication between the two surfaces.
+
+Technology Choices
+
+TypeScript: The project itself is written in TypeScript. This aligns with the primary audience (JavaScript/TypeScript developers) and allows dogfooding the TypeScript adapter on the project itself.
+
+Commander.js: CLI framework. Mature, well-typed, supports subcommands and positional arguments. Already a standard choice in the Node.js ecosystem.
+
+ts-morph: TypeScript/JavaScript AST access. Wraps the TypeScript compiler API with a cleaner interface. Gives perfect type information, symbol extraction, and skeleton generation for TS/JS files.
+
+web-tree-sitter: Multi-language parsing via WASM. No native compilation. Supports 40+ languages via grammar files. We bundle Python, Go, Rust, Java (2MB total).
+
+parse-diff: Unified diff parsing. Small focused library, well-maintained, has types. Used by blast-radius to extract changed files and line ranges from git diffs.
+
+zod: Schema validation for Guard's rules file and LLM response contract. Runtime type checking that integrates with TypeScript's type system.
+
+@modelcontextprotocol/sdk: Official MCP SDK. Handles the stdio transport protocol so we only implement tool logic.
+
+@google/generative-ai: Gemini SDK for Guard's direct API calls and the interactive agent mode.
+
+What is Not Included (and Why)
+
+No vector embeddings: Skannr does not use embeddings or a vector store. The hybrid ranking (lexical + structural + graph centrality) is sufficient for finding relevant files. Embeddings would add a model dependency, increase latency, and require a build step to generate the index.
+
+No persistent index: Each run scans fresh. The cache is keyed by file hash (MD5) and invalidates automatically when files change. A persistent index would be faster for repeated queries on unchanged codebases, but adds complexity around invalidation and stale results.
+
+No UI: Skannr is a CLI tool and MCP server. There is no web dashboard or VS Code extension. The landing page is marketing only. The tool's value is in the terminal and in the AI assistant context window.
+
+No custom language grammars: Adding a new language means adding one config entry (which AST node types represent functions, classes, imports) and one WASM grammar file. We do not write custom parsers per language.
+
+Testing Approach
+
+Jest with ts-jest. Tests are in a flat tests/ directory, named *.test.ts.
+
+Test patterns:
+  Temp directories with real files (not mocks of the filesystem)
+  beforeEach creates fixtures, afterEach cleans up
+  WASM dependencies mocked in tests to avoid loading .wasm files in CI
+  Integration tests run git commands in real temp repos
+
+Coverage areas:
+  Schema validation (valid input accepted, invalid input rejected)
+  Graph traversal (correct hop distances, cycle handling, max-hop limits)
+  Risk scoring (known input/output pairs)
+  Fix scoping (never touches non-fixable violations)
+  Hook installation (append-safe, idempotent, clean uninstall)
+
+Performance Characteristics
+
+Typical query: 1-2 seconds end to end on a 2000-file TypeScript repo
+Risk analysis: under 2 seconds (no API call)
+Guard review: 5-15 seconds (LLM round-trip)
+Package size: 450KB compressed, 2.8MB unpacked
+Memory: under 100MB for typical repos
+No background processes: runs, outputs, exits

package/README.md

@@ -1,260 +1,209 @@
-# Skannr
-
-A CLI tool and MCP server that helps AI agents understand **any codebase**.
-It scans files, generates compressed structural "skeletons", and ranks results
-using hybrid retrieval — reducing token usage by ~96% vs full file scans.
-
-## How It Works
-
-1. You point it at any repo with `--root /path/to/repo`
-2. It auto-detects the language (TypeScript, JavaScript, Python, or generic fallback)
-3. It auto-discovers your project's modules from the folder structure
-4. For your question, it ranks the most relevant files using lexical + structural + dependency-graph analysis
-5. It strips function bodies from files (keeping types, signatures, imports)
-6. Returns compact skeletons an AI can reason over without blowing the context window
-
-## Install
-
-```bash
-npm install -g skannr
-```
-
-## Usage
-
-### CLI
-
-```bash
-# Basic
-skannr --question "how does authentication work?" --root /path/to/any/repo
-
-# Limit results
-skannr --question "database connection setup" --root . --limit 5
-
-# Focus on specific modules (auto-discovered if not specified)
-skannr --question "permission checks" --root . --modules auth,middleware
-
-# Force language
-skannr --question "class structure" --root /path/to/python/project --lang python
-
-# Interactive agent mode
-skannr-agent --root /path/to/repo
-
-# Cache management
-skannr --cache-stats
-skannr --cache-clear
-skannr --question "..." --skip-cache
-
-# Output: human (default), markdown, or json
-skannr --question "..." --root . --format markdown
-skannr --question "..." --root . --format json
-
-# Repository health report (JSON on stdout)
-skannr --report --root .
-
-# Re-run analysis when files change (debounced; uses fresh analysis each pass)
-skannr --question "..." --root . --watch
-```
-
-### Watch mode (`--watch`)
-
-Use `--watch` when you want Skannr to stay running and **re-analyze after relevant file changes** (large repos you edit often). Changes under common build/vendor dirs are ignored (`node_modules`, `.git`, `dist`, etc.). Press **Ctrl+C** to stop.
-
-Each run bypasses the analysis cache so results reflect the tree as it is now.
-
-### Anonymous telemetry (opt-in)
-
-Telemetry is **off unless you enable it** (or accept deferred opt-in — see below). It sends **only which CLI flags were used** — never your question text, file paths, or code.
-
-- Enable: `skannr --telemetry-on`
-- Disable: `skannr --telemetry-off`
-
-Settings are stored under `~/.skannr/config.json`. The first time you run an analyze command with no config yet, Skannr may show a short notice; you can opt in or out anytime with the flags above.
-
-If you take no action, telemetry may turn on automatically **after 7 days** from that notice unless you explicitly disabled it with `--telemetry-off`.
-
-## MCP Server
-
-`skannr` ships with a built-in MCP server. One-time setup per AI tool:
-
-### Cursor
-
-`~/.cursor/mcp.json`:
-
-```json
-{
-  "mcpServers": {
-    "skannr": {
-      "command": "npx",
-      "args": ["-y", "skannr", "--mcp"]
-    }
-  }
-}
-```
-
-### Claude Desktop / Claude Code
-
-`~/Library/Application Support/Claude/claude_desktop_config.json`:
-
-```json
-{
-  "mcpServers": {
-    "skannr": {
-      "command": "npx",
-      "args": ["-y", "skannr", "--mcp"]
-    }
-  }
-}
-```
-
-### Gemini CLI
-
-`~/.gemini/config.json`:
-
-```json
-{
-  "mcpServers": {
-    "skannr": {
-      "command": "npx",
-      "args": ["-y", "skannr", "--mcp"]
-    }
-  }
-}
-```
-
-Alternatively run the dedicated binary: `skannr-mcp` (same stdio server).
-
-## Config File (optional)
-
-Drop a `code-analyzer.config.json` in your repo root:
-
-```json
-{
-  "modules": {
-    "auth": ["src/auth", "lib/auth"],
-    "api": ["src/api", "src/routes"]
-  },
-  "exclude": ["**/generated/**", "**/migrations/**"],
-  "extensions": [".ts", ".js"],
-  "defaultLimit": 10
-}
-```
-
-## Supported Languages
-
-| Language | Skeleton Support |
-|---|---|
-| TypeScript / TSX | Full AST (ts-morph) |
-| JavaScript / JSX | Full AST (ts-morph) |
-| Python | Regex-based (signatures + types) |
-| Others | First 50 lines (generic fallback) |
-
-## Performance
-
-Benchmarked on large TypeScript monorepo:
-
-| Metric | Result |
-|---|---|
-| Token Reduction vs Full Scan | ~96.5% |
-| Token Reduction vs Top-N | ~78.2% |
-| Avg keyword coverage | ~75% |
-| Directory diversity (top-5) | ~80% |
-| Average execution time | ~1.2s |
-
-## Interactive Agent Commands
-
-```
-/help              Show all commands
-/files             List retrieved files
-/symbols <query>   Search for symbols
-/symbol <id>       Get full implementation
-/deps <file>       Show imports for a file
-/refresh           Re-analyze with new context
-/stats             Show mapping statistics
-/exit              Quit
-```
-
-## Blast Radius
-
-Analyze the downstream impact and risk of a code change. Given a git diff,
-blast-radius identifies which files are affected, how central they are in the
-dependency graph, and whether they have test coverage.
-
-**Limitation (v1):** Traversal is computed at file granularity — "file A
-imports file B" — not at function-call level. Function-level resolution is
-planned for a future version.
-
-### CLI
-
-```bash
-# Analyze working tree changes vs HEAD (default)
-skannr blast-radius --root .
-
-# Analyze a specific diff file, 3 hops deep
-skannr blast-radius --root . --diff changes.patch --hops 3
-
-# JSON output for CI pipelines
-skannr blast-radius --root . --json
-```
-
-Sample terminal output:
-
-```
-  Blast Radius Analysis (2-hop traversal)
-  ──────────────────────────────────────────────────
-
-  Risk Score: 5.8/10
-  Risk 5.8/10 (moderate): 1 file(s) changed, 4 downstream affected, 3 untested.
-
-  Changed files:
-    src/auth/session.ts
-
-  Changed symbols:
-    function validateToken (src/auth/session.ts)
-
-  Hop 1 (2 files):
-    src/middleware/auth-guard.ts  centrality=0.85 [NO TEST]
-    src/api/login.ts              centrality=0.60
-
-  Hop 2 (2 files):
-    src/routes/index.ts           centrality=0.45 [NO TEST]
-    src/api/admin.ts              centrality=0.30 [NO TEST]
-
-  Formula inputs:
-    affected_count (normalized): 0.080
-    avg_centrality:              0.550
-    untested_ratio:              0.750
-    hop_spread (normalized):     1.000
-```
-
-### MCP
-
-The `blast_radius` tool is exposed via the same MCP server (`skannr --mcp`).
-
-Input schema:
-
-```json
-{
-  "root": "/path/to/repo",
-  "diff": "<optional unified diff content>",
-  "hops": 2
-}
-```
-
-If `diff` is omitted, the tool runs `git diff HEAD` in the given root.
-The output is the same JSON structure as `skannr blast-radius --json`.
-
-### Risk Score Formula
-
-```
-risk = 2.5 × normalizedAffectedCount
-     + 2.5 × avgCentrality
-     + 3.5 × untestedRatio
-     + 1.5 × normalizedMaxHopSpread
-```
-
-| Input | Range | Meaning |
-|-------|-------|---------|
-| normalizedAffectedCount | 0–1 | Affected files / total project files |
-| avgCentrality | 0–1 | Mean in-degree centrality of affected files |
-| untestedRatio | 0–1 | Fraction of affected files with no test file |
-| normalizedMaxHopSpread | 0–1 | Deepest hop reached / max configured hops |
+# Skannr
+
+A CLI tool and MCP server that helps developers and AI assistants understand any codebase. Scans files, generates compressed structural skeletons, and ranks results using hybrid retrieval. Reduces token usage by 96.5% vs full file reads.
+
+## Install
+
+```bash
+npm install -g skannr
+```
+
+Or use without installing:
+
+```bash
+npx skannr "how does auth work?"
+```
+
+## Usage
+
+### Ask about any codebase
+
+```bash
+skannr "how does authentication work?"
+skannr "database queries" -n 5
+skannr "API endpoints" --json
+skannr "class structure" --lang python
+```
+
+No config needed. Auto-detects language and module structure.
+
+### Risk analysis
+
+Check the downstream impact of your changes before pushing:
+
+```bash
+skannr risk
+skannr risk --json
+skannr risk -n 3
+skannr risk --diff feature.patch
+```
+
+Walks the dependency graph, finds affected files, flags untested code, gives you a 0-10 score. No LLM, no API key, runs in under 2 seconds.
+
+### Guard (AI code review)
+
+Reviews staged changes against coding rules at the symbol level:
+
+```bash
+git add .
+skannr guard
+skannr guard --fix
+skannr guard --fix --dry-run
+skannr guard --pr-mode
+skannr guard --json
+```
+
+Auto-detects your coding agent (Claude, Gemini, Kiro, Ollama). No API key needed if you already have one installed. Works out of the box with built-in rules.
+
+Install as a pre-commit hook:
+
+```bash
+skannr guard install
+skannr guard uninstall
+```
+
+Custom rules (optional):
+
+```json
+// .skannr/rules.json
+{
+  "rules": [
+    {
+      "id": "no-mutations",
+      "description": "Do not mutate function arguments",
+      "severity": "high",
+      "fixable": false,
+      "category": "functional"
+    }
+  ]
+}
+```
+
+### Other commands
+
+```bash
+skannr report          # repo health summary (JSON)
+skannr agent           # interactive exploration mode
+skannr cache stats     # cache hit rate
+skannr cache clear     # wipe cache
+```
+
+## Supported Languages
+
+| Language | Support | Method |
+|---|---|---|
+| TypeScript / TSX | Full AST | ts-morph |
+| JavaScript / JSX | Full AST | ts-morph |
+| Python | Full AST | tree-sitter WASM |
+| Go | Full AST | tree-sitter WASM |
+| Rust | Full AST | tree-sitter WASM |
+| Java | Full AST | tree-sitter WASM |
+| Others | Basic | First 50 lines fallback |
+
+No native build tools required. WASM grammars run everywhere npm runs.
+
+## MCP Server
+
+Exposes three tools: `scan_codebase`, `blast_radius`, `guard_review`.
+
+One-time setup for your AI tool:
+
+```json
+{
+  "mcpServers": {
+    "skannr": {
+      "command": "npx",
+      "args": ["-y", "skannr", "--mcp"]
+    }
+  }
+}
+```
+
+Works with Cursor, Claude Code, Gemini CLI, Kiro, VS Code Copilot, and any MCP-compatible tool.
+
+After setup, just ask your assistant:
+- "How does auth work in this repo?"
+- "Review my staged changes"
+- "What's the risk of my current diff?"
+
+## Risk Score Formula
+
+```
+risk = 2.5 x (affected files / total files)
+     + 2.5 x (avg centrality of affected files)
+     + 3.5 x (% of affected files with no tests)
+     + 1.5 x (max hop reached / max hops configured)
+```
+
+Deterministic. Same diff always produces the same score. CI-gateable:
+
+```bash
+RISK=$(skannr risk --json | jq '.riskScore')
+if [ $(echo "$RISK > 7" | bc -l) -eq 1 ]; then exit 1; fi
+```
+
+## Guard Providers
+
+Guard auto-detects in this order (no config needed):
+
+1. `claude` CLI (uses your existing session)
+2. `gemini` CLI (uses your existing session)
+3. `kiro-cli` (uses your existing session)
+4. `ollama` (local, no auth)
+5. Gemini API (set `GEMINI_API_KEY`)
+6. OpenAI API (set `OPENAI_API_KEY`)
+
+Override with `SKANNR_GUARD_PROVIDER` env var or `.skannr/guard.json`.
+
+## Config File (optional)
+
+```json
+// code-analyzer.config.json (project root)
+{
+  "modules": {
+    "auth": ["src/auth", "lib/auth"],
+    "api": ["src/api", "src/routes"]
+  },
+  "exclude": ["**/generated/**", "**/migrations/**"],
+  "extensions": [".ts", ".js"],
+  "defaultLimit": 10
+}
+```
+
+## Performance
+
+| Metric | Result |
+|---|---|
+| Token reduction vs full scan | 96.5% |
+| Typical query time | 1-2 seconds |
+| Risk analysis | under 2 seconds (no API call) |
+| Guard review | 5-15 seconds (LLM round-trip) |
+| Package size | 450KB compressed |
+
+## Interactive Agent
+
+```bash
+skannr agent
+```
+
+Commands inside the agent:
+
+```
+/files             List retrieved files
+/symbols <query>   Search for symbols
+/symbol <id>       Get full implementation
+/deps <file>       Show imports for a file
+/refresh           Re-analyze with new context
+/stats             Show mapping statistics
+/exit              Quit
+```
+
+Requires `GEMINI_API_KEY` for the interactive agent mode.
+
+## Architecture
+
+See [ARCHITECTURE.md](./ARCHITECTURE.md) for design decisions, technology choices, and the reasoning behind each one.
+
+## License
+
+MIT

package/dist/guard/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/guard/provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAgJtF;;;GAGG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,SAAS,EAAE,EAClB,KAAK,EAAE,cAAc,EAAE,GACtB,OAAO,CAAC,cAAc,CAAC,CAiDzB"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/guard/provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AA2OtF;;;GAGG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,SAAS,EAAE,EAClB,KAAK,EAAE,cAAc,EAAE,GACtB,OAAO,CAAC,cAAc,CAAC,CAgEzB"}

package/dist/guard/provider.js

@@ -109,6 +109,82 @@ function extractJson(text) {
     }
     return text.slice(firstBrace, lastBrace + 1);
 }
+/**
+ * Call a CLI-based provider (claude, gemini, kiro).
+ * These use the user's existing authenticated session — no API key needed.
+ */
+async function callCli(command, fullPrompt) {
+    const { execSync } = await Promise.resolve().then(() => __importStar(require('child_process')));
+    const fs = await Promise.resolve().then(() => __importStar(require('fs')));
+    const path = await Promise.resolve().then(() => __importStar(require('path')));
+    const os = await Promise.resolve().then(() => __importStar(require('os')));
+    // Write prompt to a temp file (avoids ARG_MAX limits on large diffs)
+    const tmpFile = path.join(os.tmpdir(), `skannr-guard-${Date.now()}.txt`);
+    fs.writeFileSync(tmpFile, fullPrompt, 'utf-8');
+    try {
+        let result;
+        switch (command) {
+            case 'claude-cli':
+                // Claude CLI accepts prompt via stdin pipe with --print flag
+                result = execSync(`cat "${tmpFile}" | claude --print`, {
+                    encoding: 'utf-8',
+                    timeout: 120_000,
+                    maxBuffer: 10 * 1024 * 1024,
+                });
+                break;
+            case 'gemini-cli':
+                // Gemini CLI accepts prompt via -p flag
+                result = execSync(`gemini -p "$(cat "${tmpFile}")"`, {
+                    encoding: 'utf-8',
+                    timeout: 120_000,
+                    maxBuffer: 10 * 1024 * 1024,
+                });
+                break;
+            case 'kiro-cli':
+                // Kiro CLI accepts prompt via stdin in non-interactive mode
+                result = execSync(`cat "${tmpFile}" | kiro-cli chat --no-interactive "Review and respond with JSON only."`, {
+                    encoding: 'utf-8',
+                    timeout: 120_000,
+                    maxBuffer: 10 * 1024 * 1024,
+                });
+                break;
+            default:
+                throw new Error(`Unknown CLI provider: ${command}`);
+        }
+        return result;
+    }
+    finally {
+        try {
+            fs.unlinkSync(tmpFile);
+        }
+        catch { }
+    }
+}
+/**
+ * Call Ollama local inference.
+ */
+async function callOllama(model, systemPrompt, userPrompt) {
+    const baseUrl = process.env.OLLAMA_BASE_URL || 'http://localhost:11434';
+    const url = `${baseUrl}/api/chat`;
+    const response = await fetch(url, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            model: model || 'llama3',
+            messages: [
+                { role: 'system', content: systemPrompt },
+                { role: 'user', content: userPrompt },
+            ],
+            stream: false,
+            format: 'json',
+        }),
+    });
+    if (!response.ok) {
+        throw new Error(`Ollama error: ${response.status} ${response.statusText}`);
+    }
+    const data = await response.json();
+    return data.message?.content ?? '';
+}
 /**
  * Call Gemini API with structured output enforcement.
  */
@@ -175,9 +251,24 @@ async function runLlmReview(config, rules, units) {
             : `${userPrompt}\n\n[RETRY: Your last response didn't match the required schema. Error: ${lastError}. Return ONLY valid JSON matching the schema.]`;
         let rawResponse;
         try {
-            rawResponse = config.provider === 'openai'
-                ? await callOpenAI(config, systemPrompt, prompt)
-                : await callGemini(config, systemPrompt, prompt);
+            switch (config.provider) {
+                case 'openai':
+                    rawResponse = await callOpenAI(config, systemPrompt, prompt);
+                    break;
+                case 'gemini':
+                    rawResponse = await callGemini(config, systemPrompt, prompt);
+                    break;
+                case 'ollama':
+                    rawResponse = await callOllama(config.model, systemPrompt, prompt);
+                    break;
+                case 'claude-cli':
+                case 'gemini-cli':
+                case 'kiro-cli':
+                    rawResponse = await callCli(config.provider, systemPrompt + '\n\n' + prompt);
+                    break;
+                default:
+                    throw new Error(`Unsupported provider: ${config.provider}`);
+            }
         }
         catch (err) {
             throw new Error(`Provider call failed (${config.provider}): ${err instanceof Error ? err.message : String(err)}`);

package/dist/guard/provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/guard/provider.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuJH,oCAqDC;AA1MD,qCAAgD;AAGhD,sEAAsE;AACtE,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAkB;IAC3C,MAAM,SAAS,GAAG,KAAK;SACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,aAAa,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;SACjF,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO;QACL,6FAA6F;QAC7F,sFAAsF;QACtF,EAAE;QACF,QAAQ;QACR,SAAS;QACT,EAAE;QACF,yDAAyD;QACzD,GAAG;QACH,8MAA8M;QAC9M,8BAA8B;QAC9B,oBAAoB;QACpB,GAAG;QACH,EAAE;QACF,YAAY;QACZ,gDAAgD;QAChD,4EAA4E;QAC5E,iFAAiF;QACjF,uDAAuD;QACvD,gFAAgF;QAChF,0EAA0E;KAC3E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,KAAuB;IAC9C,MAAM,KAAK,GAAa,CAAC,sCAAsC,CAAC,CAAC;IAEjE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,UAAU,OAAO,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,oEAAoE;QACpE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,4CAA4C;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CACvB,MAAmB,EACnB,YAAoB,EACpB,UAAkB;IAElB,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,uBAAuB,GAAC,CAAC;IAErE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,CAAC;QACrC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,gBAAgB,EAAE;YAChB,gBAAgB,EAAE,kBAAkB;SACrC;KACF,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC;QACzC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAC3D,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE;KACvE,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CACvB,MAAmB,EACnB,YAAoB,EACpB,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,2BAA2B,CAAC;IAC9D,MAAM,GAAG,GAAG,GAAG,OAAO,mBAAmB,CAAC;IAE1C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;SAC3C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;gBACzC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;aACtC;YACD,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;YACxC,WAAW,EAAE,GAAG;SACjB,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;IAC1C,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;AACnD,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,YAAY,CAChC,MAAmB,EACnB,KAAkB,EAClB,KAAuB;IAEvB,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAE1C,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC;YAC1B,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,GAAG,UAAU,2EAA2E,SAAS,gDAAgD,CAAC;QAEtJ,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ;gBACxC,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC;gBAChD,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,CAAC,QAAQ,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACjG,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,6BAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAEtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,wDAAwD;gBACxD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,OAAO,CAAC,CAAC;oBAC3D,IAAI,IAAI,EAAE,CAAC;wBACT,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;oBACnC,CAAC;gBACH,CAAC;gBACD,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAED,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,MAAM,IAAI,KAAK,CAAC,+CAA+C,WAAW,GAAG,CAAC,cAAc,SAAS,EAAE,CAAC,CAAC;AAC3G,CAAC"}
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/guard/provider.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkPH,oCAoEC;AApTD,qCAAgD;AAGhD,sEAAsE;AACtE,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAkB;IAC3C,MAAM,SAAS,GAAG,KAAK;SACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,aAAa,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;SACjF,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO;QACL,6FAA6F;QAC7F,sFAAsF;QACtF,EAAE;QACF,QAAQ;QACR,SAAS;QACT,EAAE;QACF,yDAAyD;QACzD,GAAG;QACH,8MAA8M;QAC9M,8BAA8B;QAC9B,oBAAoB;QACpB,GAAG;QACH,EAAE;QACF,YAAY;QACZ,gDAAgD;QAChD,4EAA4E;QAC5E,iFAAiF;QACjF,uDAAuD;QACvD,gFAAgF;QAChF,0EAA0E;KAC3E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,KAAuB;IAC9C,MAAM,KAAK,GAAa,CAAC,sCAAsC,CAAC,CAAC;IAEjE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,UAAU,OAAO,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,oEAAoE;QACpE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,4CAA4C;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,OAAO,CACpB,OAAe,EACf,UAAkB;IAElB,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,eAAe,GAAC,CAAC;IACnD,MAAM,EAAE,GAAG,wDAAa,IAAI,GAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,wDAAa,MAAM,GAAC,CAAC;IAClC,MAAM,EAAE,GAAG,wDAAa,IAAI,GAAC,CAAC;IAE9B,qEAAqE;IACrE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAE/C,IAAI,CAAC;QACH,IAAI,MAAc,CAAC;QAEnB,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,YAAY;gBACf,6DAA6D;gBAC7D,MAAM,GAAG,QAAQ,CAAC,QAAQ,OAAO,oBAAoB,EAAE;oBACrD,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;iBAC5B,CAAC,CAAC;gBACH,MAAM;YAER,KAAK,YAAY;gBACf,wCAAwC;gBACxC,MAAM,GAAG,QAAQ,CAAC,qBAAqB,OAAO,KAAK,EAAE;oBACnD,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;iBAC5B,CAAC,CAAC;gBACH,MAAM;YAER,KAAK,UAAU;gBACb,4DAA4D;gBAC5D,MAAM,GAAG,QAAQ,CAAC,QAAQ,OAAO,yEAAyE,EAAE;oBAC1G,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,OAAO;oBAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;iBAC5B,CAAC,CAAC;gBACH,MAAM;YAER;gBACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CACvB,KAAa,EACb,YAAoB,EACpB,UAAkB;IAElB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,wBAAwB,CAAC;IACxE,MAAM,GAAG,GAAG,GAAG,OAAO,WAAW,CAAC;IAElC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,KAAK,IAAI,QAAQ;YACxB,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;gBACzC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;aACtC;YACD,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,MAAM;SACf,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;IAC1C,OAAO,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CACvB,MAAmB,EACnB,YAAoB,EACpB,UAAkB;IAElB,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,uBAAuB,GAAC,CAAC;IAErE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,CAAC;QACrC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,gBAAgB,EAAE;YAChB,gBAAgB,EAAE,kBAAkB;SACrC;KACF,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC;QACzC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAC3D,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE;KACvE,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CACvB,MAAmB,EACnB,YAAoB,EACpB,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,2BAA2B,CAAC;IAC9D,MAAM,GAAG,GAAG,GAAG,OAAO,mBAAmB,CAAC;IAE1C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;SAC3C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;gBACzC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;aACtC;YACD,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;YACxC,WAAW,EAAE,GAAG;SACjB,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;IAC1C,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;AACnD,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,YAAY,CAChC,MAAmB,EACnB,KAAkB,EAClB,KAAuB;IAEvB,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAE1C,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC;YAC1B,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,GAAG,UAAU,2EAA2E,SAAS,gDAAgD,CAAC;QAEtJ,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACxB,KAAK,QAAQ;oBACX,WAAW,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;oBAC7D,MAAM;gBACR,KAAK,QAAQ;oBACX,WAAW,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;oBAC7D,MAAM;gBACR,KAAK,QAAQ;oBACX,WAAW,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;oBACnE,MAAM;gBACR,KAAK,YAAY,CAAC;gBAClB,KAAK,YAAY,CAAC;gBAClB,KAAK,UAAU;oBACb,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC;oBAC7E,MAAM;gBACR;oBACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,CAAC,QAAQ,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACjG,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,6BAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAEtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,wDAAwD;gBACxD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,OAAO,CAAC,CAAC;oBAC3D,IAAI,IAAI,EAAE,CAAC;wBACT,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;oBACnC,CAAC;gBACH,CAAC;gBACD,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAED,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,MAAM,IAAI,KAAK,CAAC,+CAA+C,WAAW,GAAG,CAAC,cAAc,SAAS,EAAE,CAAC,CAAC;AAC3G,CAAC"}

package/dist/guard/rules-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules-loader.d.ts","sourceRoot":"","sources":["../../src/guard/rules-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAwDtD,+FAA+F;AAC/F,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,CAwBnD;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CA2BzD"}
+{"version":3,"file":"rules-loader.d.ts","sourceRoot":"","sources":["../../src/guard/rules-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAwDtD,+FAA+F;AAC/F,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,CAwBnD;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CA8BzD"}

package/dist/guard/rules-loader.js

@@ -42,7 +42,6 @@ exports.loadGuardConfig = loadGuardConfig;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const schema_1 = require("./schema");
-const schema_2 = require("./schema");
 /** Default locations to search for the rules file. */
 const RULES_PATHS = [
     '.skannr/rules.json',
@@ -130,18 +129,70 @@ function loadGuardConfig(root) {
         }
     }
     // Env vars override file config
-    const provider = (process.env.SKANNR_GUARD_PROVIDER || rawConfig.provider || 'gemini');
-    const model = (process.env.SKANNR_GUARD_MODEL || rawConfig.model || 'gemini-2.0-flash-exp');
+    const explicitProvider = process.env.SKANNR_GUARD_PROVIDER || rawConfig.provider;
+    const model = (process.env.SKANNR_GUARD_MODEL || rawConfig.model || '');
     const apiKey = process.env.SKANNR_GUARD_API_KEY
         || process.env.GEMINI_API_KEY
         || process.env.OPENAI_API_KEY
         || rawConfig.apiKey;
     const baseUrl = process.env.OPENAI_BASE_URL || rawConfig.baseUrl;
-    const result = schema_2.GuardConfigSchema.safeParse({ provider, model, apiKey, baseUrl });
-    if (!result.success) {
-        throw new Error(`Invalid guard config: ${result.error.issues.map((i) => i.message).join(', ')}`);
+    // Auto-detect provider if not explicitly set
+    const provider = explicitProvider || autoDetectProvider(apiKey);
+    return {
+        provider: provider,
+        model: model || getDefaultModel(provider),
+        apiKey,
+        baseUrl,
+    };
+}
+/**
+ * Auto-detect the best available provider.
+ * Priority: existing CLI tools (free, already authenticated) > API keys.
+ */
+function autoDetectProvider(apiKey) {
+    const { execSync } = require('child_process');
+    // Check for CLI tools first (no API key needed)
+    const cliChecks = [
+        ['claude', 'claude-cli'],
+        ['gemini', 'gemini-cli'],
+        ['kiro-cli', 'kiro-cli'],
+    ];
+    for (const [cmd, provider] of cliChecks) {
+        try {
+            execSync(`${cmd} --version`, { stdio: 'ignore', timeout: 3000 });
+            return provider;
+        }
+        catch {
+            // Not available, try next
+        }
+    }
+    // Check for Ollama (local, no key needed)
+    try {
+        execSync('ollama --version', { stdio: 'ignore', timeout: 3000 });
+        return 'ollama';
+    }
+    catch {
+        // Not available
+    }
+    // Fall back to API-based providers if key is available
+    if (apiKey) {
+        if (process.env.GEMINI_API_KEY)
+            return 'gemini';
+        if (process.env.OPENAI_API_KEY)
+            return 'openai';
+        return 'gemini'; // default API provider
+    }
+    // Nothing found — default to gemini-cli and let it fail with a clear error
+    return 'gemini-cli';
+}
+/** Get the default model for a provider. */
+function getDefaultModel(provider) {
+    switch (provider) {
+        case 'gemini': return 'gemini-2.0-flash-exp';
+        case 'openai': return 'gpt-4o';
+        case 'ollama': return 'llama3';
+        default: return ''; // CLI providers don't need a model specified
     }
-    return result.data;
 }
 /** Find the first existing rules file in the project. */
 function findRulesFile(root) {

package/dist/guard/rules-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules-loader.js","sourceRoot":"","sources":["../../src/guard/rules-loader.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8DH,8BAwBC;AAGD,0CA2BC;AAlHD,uCAAyB;AACzB,2CAA6B;AAC7B,qCAA2C;AAE3C,qCAA6C;AAE7C,sDAAsD;AACtD,MAAM,WAAW,GAAG;IAClB,oBAAoB;IACpB,oBAAoB;IACpB,mBAAmB;CACpB,CAAC;AAEF,qEAAqE;AACrE,MAAM,aAAa,GAAgB;IACjC;QACE,EAAE,EAAE,aAAa;QACjB,WAAW,EAAE,2EAA2E;QACxF,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,aAAa;KACxB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,0FAA0F;QACvG,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,cAAc;KACzB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,oFAAoF;QACjG,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,aAAa;KACxB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,WAAW,EAAE,gGAAgG;QAC7G,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,WAAW,EAAE,oFAAoF;QACjG,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,iBAAiB;KAC5B;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,wBAAwB;QACrC,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,cAAc;KACzB;CACF,CAAC;AAEF,+FAA+F;AAC/F,SAAgB,SAAS,CAAC,IAAY;IACpC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,MAAe,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,MAAM,GAAG,wBAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,OAAO,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,SAAgB,eAAe,CAAC,IAAY;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAE5D,IAAI,SAAS,GAA4B,EAAE,CAAC;IAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS,CAAC,QAAQ,IAAI,QAAQ,CAAW,CAAC;IACjG,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,SAAS,CAAC,KAAK,IAAI,sBAAsB,CAAW,CAAC;IACtG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB;WAC1C,OAAO,CAAC,GAAG,CAAC,cAAc;WAC1B,OAAO,CAAC,GAAG,CAAC,cAAc;WACzB,SAAS,CAAC,MAA6B,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAK,SAAS,CAAC,OAA8B,CAAC;IAEzF,MAAM,MAAM,GAAG,0BAAiB,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,OAAO,MAAM,CAAC,IAAmB,CAAC;AACpC,CAAC;AAED,yDAAyD;AACzD,SAAS,aAAa,CAAC,IAAY;IACjC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"rules-loader.js","sourceRoot":"","sources":["../../src/guard/rules-loader.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8DH,8BAwBC;AAGD,0CA8BC;AArHD,uCAAyB;AACzB,2CAA6B;AAC7B,qCAA2C;AAI3C,sDAAsD;AACtD,MAAM,WAAW,GAAG;IAClB,oBAAoB;IACpB,oBAAoB;IACpB,mBAAmB;CACpB,CAAC;AAEF,qEAAqE;AACrE,MAAM,aAAa,GAAgB;IACjC;QACE,EAAE,EAAE,aAAa;QACjB,WAAW,EAAE,2EAA2E;QACxF,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,aAAa;KACxB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,0FAA0F;QACvG,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,cAAc;KACzB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,oFAAoF;QACjG,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,aAAa;KACxB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,WAAW,EAAE,gGAAgG;QAC7G,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,WAAW,EAAE,oFAAoF;QACjG,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,iBAAiB;KAC5B;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,wBAAwB;QACrC,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,cAAc;KACzB;CACF,CAAC;AAEF,+FAA+F;AAC/F,SAAgB,SAAS,CAAC,IAAY;IACpC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,MAAe,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,MAAM,GAAG,wBAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,OAAO,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,SAAgB,eAAe,CAAC,IAAY;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAE5D,IAAI,SAAS,GAA4B,EAAE,CAAC;IAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS,CAAC,QAA8B,CAAC;IACvG,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,SAAS,CAAC,KAAK,IAAI,EAAE,CAAW,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB;WAC1C,OAAO,CAAC,GAAG,CAAC,cAAc;WAC1B,OAAO,CAAC,GAAG,CAAC,cAAc;WACzB,SAAS,CAAC,MAA6B,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAK,SAAS,CAAC,OAA8B,CAAC;IAEzF,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAEhE,OAAO;QACL,QAAQ,EAAE,QAAmC;QAC7C,KAAK,EAAE,KAAK,IAAI,eAAe,CAAC,QAAQ,CAAC;QACzC,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,MAAe;IACzC,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAE9C,gDAAgD;IAChD,MAAM,SAAS,GAA4B;QACzC,CAAC,QAAQ,EAAE,YAAY,CAAC;QACxB,CAAC,QAAQ,EAAE,YAAY,CAAC;QACxB,CAAC,UAAU,EAAE,UAAU,CAAC;KACzB,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,QAAQ,CAAC,GAAG,GAAG,YAAY,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,IAAI,CAAC;QACH,QAAQ,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;IAED,uDAAuD;IACvD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;YAAE,OAAO,QAAQ,CAAC;QAChD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;YAAE,OAAO,QAAQ,CAAC;QAChD,OAAO,QAAQ,CAAC,CAAC,uBAAuB;IAC1C,CAAC;IAED,2EAA2E;IAC3E,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,4CAA4C;AAC5C,SAAS,eAAe,CAAC,QAAgB;IACvC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,OAAO,sBAAsB,CAAC;QAC7C,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC/B,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC/B,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,6CAA6C;IACnE,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,SAAS,aAAa,CAAC,IAAY;IACjC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/guard/schema.d.ts

@@ -164,19 +164,19 @@ export declare const ReviewResponseSchema: z.ZodObject<{
     summary: string;
 }>;
 export declare const GuardConfigSchema: z.ZodObject<{
-    provider: z.ZodDefault<z.ZodEnum<["gemini", "openai"]>>;
+    provider: z.ZodDefault<z.ZodEnum<["gemini", "openai", "claude-cli", "gemini-cli", "kiro-cli", "ollama"]>>;
     model: z.ZodDefault<z.ZodString>;
     apiKey: z.ZodOptional<z.ZodString>;
     baseUrl: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     model: string;
-    provider: "gemini" | "openai";
+    provider: "gemini" | "openai" | "claude-cli" | "gemini-cli" | "kiro-cli" | "ollama";
     apiKey?: string | undefined;
     baseUrl?: string | undefined;
 }, {
     apiKey?: string | undefined;
     model?: string | undefined;
-    provider?: "gemini" | "openai" | undefined;
+    provider?: "gemini" | "openai" | "claude-cli" | "gemini-cli" | "kiro-cli" | "ollama" | undefined;
     baseUrl?: string | undefined;
 }>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/guard/schema.js

@@ -45,8 +45,8 @@ exports.ReviewResponseSchema = zod_1.z.object({
 // Guard config schema (optional .skannr/guard.json)
 // ---------------------------------------------------------------------------
 exports.GuardConfigSchema = zod_1.z.object({
-    provider: zod_1.z.enum(['gemini', 'openai']).default('gemini'),
-    model: zod_1.z.string().default('gemini-2.0-flash-exp'),
+    provider: zod_1.z.enum(['gemini', 'openai', 'claude-cli', 'gemini-cli', 'kiro-cli', 'ollama']).default('auto'),
+    model: zod_1.z.string().default(''),
     apiKey: zod_1.z.string().optional(),
     baseUrl: zod_1.z.string().optional(),
 });

package/dist/guard/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/guard/schema.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,6BAAwB;AAExB,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAEjE,QAAA,cAAc,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAE/D,QAAA,UAAU,GAAG,OAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,sBAAc;IACxB,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAC;AAEU,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,kBAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAEjE,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,QAAQ,EAAE,sBAAc;IACxB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,uBAAe,CAAC;IACpC,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEH,8EAA8E;AAC9E,oDAAoD;AACpD,8EAA8E;AAEjE,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACxD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACjD,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/guard/schema.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,6BAAwB;AAExB,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAEjE,QAAA,cAAc,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAE/D,QAAA,UAAU,GAAG,OAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,sBAAc;IACxB,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAC;AAEU,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,kBAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAEjE,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,QAAQ,EAAE,sBAAc;IACxB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,uBAAe,CAAC;IACpC,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEH,8EAA8E;AAC9E,oDAAoD;AACpD,8EAA8E;AAEjE,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAa,CAAC;IAC/G,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC"}

package/dist/guard/types.d.ts

@@ -50,11 +50,11 @@ export interface GuardResult {
 }
 /** Guard configuration (provider, model, etc.). */
 export interface GuardConfig {
-    /** LLM provider: 'gemini' | 'openai' */
-    provider: 'gemini' | 'openai';
+    /** LLM provider: 'gemini' | 'openai' | 'claude-cli' | 'gemini-cli' | 'kiro-cli' | 'ollama' */
+    provider: 'gemini' | 'openai' | 'claude-cli' | 'gemini-cli' | 'kiro-cli' | 'ollama';
     /** Model name (e.g. 'gemini-2.0-flash-exp', 'gpt-4o'). */
     model: string;
-    /** API key (resolved from env if not set). */
+    /** API key (resolved from env if not set). Only needed for 'gemini' and 'openai' providers. */
     apiKey?: string;
     /** OpenAI-compatible base URL (for openai provider). */
     baseUrl?: string;

package/dist/guard/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/guard/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,gDAAgD;AAChD,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9D,kCAAkC;AAClC,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,uCAAuC;AACvC,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,kCAAkC;AAClC,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,cAAc,CAAC;IACzB,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,mDAAmD;AACnD,MAAM,WAAW,WAAW;IAC1B,wCAAwC;IACxC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/guard/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,gDAAgD;AAChD,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9D,kCAAkC;AAClC,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,uCAAuC;AACvC,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,kCAAkC;AAClC,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,cAAc,CAAC;IACzB,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,mDAAmD;AACnD,MAAM,WAAW,WAAW;IAC1B,8FAA8F;IAC9F,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,GAAG,UAAU,GAAG,QAAQ,CAAC;IACpF,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,+FAA+F;IAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skannr",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "A universal tool to analyze any codebase and generate semantic skeletons for AI agents",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/guard/provider.ts

@@ -79,6 +79,97 @@ function extractJson(text: string): string {
   return text.slice(firstBrace, lastBrace + 1);
 }
 
+/**
+ * Call a CLI-based provider (claude, gemini, kiro).
+ * These use the user's existing authenticated session — no API key needed.
+ */
+async function callCli(
+  command: string,
+  fullPrompt: string,
+): Promise<string> {
+  const { execSync } = await import('child_process');
+  const fs = await import('fs');
+  const path = await import('path');
+  const os = await import('os');
+
+  // Write prompt to a temp file (avoids ARG_MAX limits on large diffs)
+  const tmpFile = path.join(os.tmpdir(), `skannr-guard-${Date.now()}.txt`);
+  fs.writeFileSync(tmpFile, fullPrompt, 'utf-8');
+
+  try {
+    let result: string;
+
+    switch (command) {
+      case 'claude-cli':
+        // Claude CLI accepts prompt via stdin pipe with --print flag
+        result = execSync(`cat "${tmpFile}" | claude --print`, {
+          encoding: 'utf-8',
+          timeout: 120_000,
+          maxBuffer: 10 * 1024 * 1024,
+        });
+        break;
+
+      case 'gemini-cli':
+        // Gemini CLI accepts prompt via -p flag
+        result = execSync(`gemini -p "$(cat "${tmpFile}")"`, {
+          encoding: 'utf-8',
+          timeout: 120_000,
+          maxBuffer: 10 * 1024 * 1024,
+        });
+        break;
+
+      case 'kiro-cli':
+        // Kiro CLI accepts prompt via stdin in non-interactive mode
+        result = execSync(`cat "${tmpFile}" | kiro-cli chat --no-interactive "Review and respond with JSON only."`, {
+          encoding: 'utf-8',
+          timeout: 120_000,
+          maxBuffer: 10 * 1024 * 1024,
+        });
+        break;
+
+      default:
+        throw new Error(`Unknown CLI provider: ${command}`);
+    }
+
+    return result;
+  } finally {
+    try { fs.unlinkSync(tmpFile); } catch {}
+  }
+}
+
+/**
+ * Call Ollama local inference.
+ */
+async function callOllama(
+  model: string,
+  systemPrompt: string,
+  userPrompt: string,
+): Promise<string> {
+  const baseUrl = process.env.OLLAMA_BASE_URL || 'http://localhost:11434';
+  const url = `${baseUrl}/api/chat`;
+
+  const response = await fetch(url, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      model: model || 'llama3',
+      messages: [
+        { role: 'system', content: systemPrompt },
+        { role: 'user', content: userPrompt },
+      ],
+      stream: false,
+      format: 'json',
+    }),
+  });
+
+  if (!response.ok) {
+    throw new Error(`Ollama error: ${response.status} ${response.statusText}`);
+  }
+
+  const data = await response.json() as any;
+  return data.message?.content ?? '';
+}
+
 /**
  * Call Gemini API with structured output enforcement.
  */
@@ -170,9 +261,24 @@ export async function runLlmReview(
 
     let rawResponse: string;
     try {
-      rawResponse = config.provider === 'openai'
-        ? await callOpenAI(config, systemPrompt, prompt)
-        : await callGemini(config, systemPrompt, prompt);
+      switch (config.provider) {
+        case 'openai':
+          rawResponse = await callOpenAI(config, systemPrompt, prompt);
+          break;
+        case 'gemini':
+          rawResponse = await callGemini(config, systemPrompt, prompt);
+          break;
+        case 'ollama':
+          rawResponse = await callOllama(config.model, systemPrompt, prompt);
+          break;
+        case 'claude-cli':
+        case 'gemini-cli':
+        case 'kiro-cli':
+          rawResponse = await callCli(config.provider, systemPrompt + '\n\n' + prompt);
+          break;
+        default:
+          throw new Error(`Unsupported provider: ${config.provider}`);
+      }
     } catch (err) {
       throw new Error(
         `Provider call failed (${config.provider}): ${err instanceof Error ? err.message : String(err)}`,

package/src/guard/rules-loader.ts

@@ -103,20 +103,75 @@ export function loadGuardConfig(root: string): GuardConfig {
   }
 
   // Env vars override file config
-  const provider = (process.env.SKANNR_GUARD_PROVIDER || rawConfig.provider || 'gemini') as string;
-  const model = (process.env.SKANNR_GUARD_MODEL || rawConfig.model || 'gemini-2.0-flash-exp') as string;
+  const explicitProvider = process.env.SKANNR_GUARD_PROVIDER || rawConfig.provider as string | undefined;
+  const model = (process.env.SKANNR_GUARD_MODEL || rawConfig.model || '') as string;
   const apiKey = process.env.SKANNR_GUARD_API_KEY
     || process.env.GEMINI_API_KEY
     || process.env.OPENAI_API_KEY
     || (rawConfig.apiKey as string | undefined);
   const baseUrl = process.env.OPENAI_BASE_URL || (rawConfig.baseUrl as string | undefined);
 
-  const result = GuardConfigSchema.safeParse({ provider, model, apiKey, baseUrl });
-  if (!result.success) {
-    throw new Error(`Invalid guard config: ${result.error.issues.map((i) => i.message).join(', ')}`);
+  // Auto-detect provider if not explicitly set
+  const provider = explicitProvider || autoDetectProvider(apiKey);
+
+  return {
+    provider: provider as GuardConfig['provider'],
+    model: model || getDefaultModel(provider),
+    apiKey,
+    baseUrl,
+  };
+}
+
+/**
+ * Auto-detect the best available provider.
+ * Priority: existing CLI tools (free, already authenticated) > API keys.
+ */
+function autoDetectProvider(apiKey?: string): string {
+  const { execSync } = require('child_process');
+
+  // Check for CLI tools first (no API key needed)
+  const cliChecks: Array<[string, string]> = [
+    ['claude', 'claude-cli'],
+    ['gemini', 'gemini-cli'],
+    ['kiro-cli', 'kiro-cli'],
+  ];
+
+  for (const [cmd, provider] of cliChecks) {
+    try {
+      execSync(`${cmd} --version`, { stdio: 'ignore', timeout: 3000 });
+      return provider;
+    } catch {
+      // Not available, try next
+    }
+  }
+
+  // Check for Ollama (local, no key needed)
+  try {
+    execSync('ollama --version', { stdio: 'ignore', timeout: 3000 });
+    return 'ollama';
+  } catch {
+    // Not available
   }
 
-  return result.data as GuardConfig;
+  // Fall back to API-based providers if key is available
+  if (apiKey) {
+    if (process.env.GEMINI_API_KEY) return 'gemini';
+    if (process.env.OPENAI_API_KEY) return 'openai';
+    return 'gemini'; // default API provider
+  }
+
+  // Nothing found — default to gemini-cli and let it fail with a clear error
+  return 'gemini-cli';
+}
+
+/** Get the default model for a provider. */
+function getDefaultModel(provider: string): string {
+  switch (provider) {
+    case 'gemini': return 'gemini-2.0-flash-exp';
+    case 'openai': return 'gpt-4o';
+    case 'ollama': return 'llama3';
+    default: return ''; // CLI providers don't need a model specified
+  }
 }
 
 /** Find the first existing rules file in the project. */

package/src/guard/schema.ts

@@ -52,8 +52,8 @@ export const ReviewResponseSchema = z.object({
 // ---------------------------------------------------------------------------
 
 export const GuardConfigSchema = z.object({
-  provider: z.enum(['gemini', 'openai']).default('gemini'),
-  model: z.string().default('gemini-2.0-flash-exp'),
+  provider: z.enum(['gemini', 'openai', 'claude-cli', 'gemini-cli', 'kiro-cli', 'ollama']).default('auto' as any),
+  model: z.string().default(''),
   apiKey: z.string().optional(),
   baseUrl: z.string().optional(),
 });

package/src/guard/types.ts

@@ -57,11 +57,11 @@ export interface GuardResult {
 
 /** Guard configuration (provider, model, etc.). */
 export interface GuardConfig {
-  /** LLM provider: 'gemini' | 'openai' */
-  provider: 'gemini' | 'openai';
+  /** LLM provider: 'gemini' | 'openai' | 'claude-cli' | 'gemini-cli' | 'kiro-cli' | 'ollama' */
+  provider: 'gemini' | 'openai' | 'claude-cli' | 'gemini-cli' | 'kiro-cli' | 'ollama';
   /** Model name (e.g. 'gemini-2.0-flash-exp', 'gpt-4o'). */
   model: string;
-  /** API key (resolved from env if not set). */
+  /** API key (resolved from env if not set). Only needed for 'gemini' and 'openai' providers. */
   apiKey?: string;
   /** OpenAI-compatible base URL (for openai provider). */
   baseUrl?: string;