askyara 0.1.0__py3-none-any.whl

askyara/__init__.py

@@ -0,0 +1,3 @@
+"""AskYARA Salesforce Engineering Core Package."""
+
+__version__ = "0.1.0"

askyara/cli.py

@@ -0,0 +1,77 @@
+"""AskYARA Command Line Interface."""
+
+import argparse
+import sys
+from pathlib import Path
+
+from askyara.installer.doctor import run_doctor
+from askyara.tools.project_detector import detect_salesforce_project
+from askyara.tools.git_diff import get_git_diff_summary
+from askyara.core.policy_engine import PolicyEngine
+
+
+def main(argv: list[str] | None = None) -> int:
+    parser = argparse.ArgumentParser(
+        prog="askyara",
+        description="AskYARA Salesforce Engineering — AI Companion & Validator",
+    )
+    subparsers = parser.add_subparsers(dest="command", help="Available subcommands")
+
+    # doctor
+    doctor_parser = subparsers.add_parser("doctor", help="Inspect local environment and tools")
+    doctor_parser.add_argument("--json", action="store_true", help="Output machine-readable JSON")
+
+    # review
+    review_parser = subparsers.add_parser("review", help="Review local Salesforce changes")
+    review_parser.add_argument("--scope", default="git-diff", help="Review scope (git-diff, staged)")
+    review_parser.add_argument("--pack", help="Specific industry rule pack (e.g. omnistudio, fsc, health)")
+    review_parser.add_argument("--format", choices=["markdown", "json"], default="markdown")
+
+    # audit
+    audit_parser = subparsers.add_parser("audit", help="Audit the current Salesforce project")
+    audit_parser.add_argument("--path", default=".", help="Root path of Salesforce project")
+    audit_parser.add_argument("--pack", help="Specific industry rule pack (e.g. omnistudio, fsc, health)")
+
+    args = parser.parse_args(argv)
+
+    repo_root = Path(__file__).resolve().parent.parent.parent
+    defaults_file = repo_root / "rules" / "defaults.yaml"
+    packs_dir = repo_root / "rules" / "packs"
+
+    if args.command == "doctor":
+        return run_doctor(as_json=args.json)
+    elif args.command == "review":
+        project = detect_salesforce_project(Path("."))
+        active_packs = list(project.industry_packs)
+        if args.pack and args.pack not in active_packs:
+            active_packs.append(args.pack)
+
+        policy = PolicyEngine(defaults_file, packs_dir=packs_dir, active_packs=active_packs)
+        print(f"[*] Detected Salesforce Project: {project.root} (Confidence: {project.confidence})")
+        print(f"[*] Active Rule Packs: {', '.join(policy.loaded_packs)}")
+        diff = get_git_diff_summary(Path("."))
+        print(f"[*] Git Status: {len(diff.changed_files)} changed files detected.")
+        print("[*] Local deterministic review complete. Ready for agent synthesis.")
+        return 0
+    elif args.command == "audit":
+        project = detect_salesforce_project(Path(args.path))
+        active_packs = list(project.industry_packs)
+        if args.pack and args.pack not in active_packs:
+            active_packs.append(args.pack)
+
+        policy = PolicyEngine(defaults_file, packs_dir=packs_dir, active_packs=active_packs)
+        print(f"[*] Auditing Salesforce Project at {project.root}")
+        print(f"[*] Active Rule Packs: {', '.join(policy.loaded_packs)}")
+        print(f"[*] Total Active Rules: {len(policy.get_enabled_rules())}")
+        for asset, count in project.asset_counts.items():
+            if count > 0:
+                print(f"[*] {asset.replace('_', ' ').title()}: {count}")
+        print("[*] Project audit complete.")
+        return 0
+    else:
+        parser.print_help()
+        return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

askyara/core/__init__.py

@@ -0,0 +1 @@
+"""Core Domain Package."""

askyara/core/command_registry.py

@@ -0,0 +1,27 @@
+"""Command Registry Loader."""
+
+from pathlib import Path
+from typing import Any
+import yaml
+
+
+class CommandRegistry:
+    def __init__(self, commands_dir: Path) -> None:
+        self.commands_dir = commands_dir
+        self.commands: dict[str, dict[str, Any]] = {}
+        self.load_all()
+
+    def load_all(self) -> None:
+        if not self.commands_dir.exists():
+            return
+        for file in self.commands_dir.glob("*.yaml"):
+            with open(file, "r", encoding="utf-8") as f:
+                data = yaml.safe_load(f)
+                if isinstance(data, dict) and "id" in data:
+                    self.commands[data["id"]] = data
+
+    def get(self, command_id: str) -> dict[str, Any] | None:
+        return self.commands.get(command_id)
+
+    def list_commands(self) -> list[dict[str, Any]]:
+        return list(self.commands.values())

askyara/core/finding_model.py

@@ -0,0 +1,92 @@
+"""Finding and Evidence Data Models."""
+
+from dataclasses import dataclass, field
+from enum import Enum
+from typing import Any
+
+
+class Severity(str, Enum):
+    CRITICAL = "critical"
+    HIGH = "high"
+    MEDIUM = "medium"
+    LOW = "low"
+    INFO = "info"
+
+
+class FindingStatus(str, Enum):
+    CONFIRMED = "confirmed"
+    LIKELY = "likely"
+    NEEDS_REVIEW = "needs_review"
+    DISMISSED = "dismissed"
+
+
+class ValidationStatus(str, Enum):
+    PASSED = "passed"
+    FAILED = "failed"
+    SKIPPED = "skipped"
+    UNAVAILABLE = "unavailable"
+    NOT_RUN = "not_run"
+    NOT_APPLICABLE = "not_applicable"
+
+
+@dataclass
+class EvidenceItem:
+    path: str
+    start_line: int
+    end_line: int | None = None
+    excerpt_hash: str | None = None
+
+    def to_dict(self) -> dict[str, Any]:
+        data: dict[str, Any] = {
+            "path": self.path,
+            "start_line": self.start_line,
+        }
+        if self.end_line is not None:
+            data["end_line"] = self.end_line
+        if self.excerpt_hash:
+            data["excerpt_hash"] = self.excerpt_hash
+        return data
+
+
+@dataclass
+class Finding:
+    id: str
+    title: str
+    severity: Severity
+    category: str
+    status: FindingStatus
+    evidence: list[EvidenceItem]
+    description: str
+    recommendation: str
+    validation_status: ValidationStatus = ValidationStatus.NOT_RUN
+    validation_method: str = "static-analysis-and-review"
+    validation_details: str | None = None
+    impact: str | None = None
+    confidence: float = 1.0
+    schema_version: str = "1.0"
+    rule_id: str | None = None
+    rule_pack: str = "default-salesforce"
+    rule_pack_version: str = "1.0.0"
+
+    def to_dict(self) -> dict[str, Any]:
+        return {
+            "schema_version": self.schema_version,
+            "id": self.id,
+            "title": self.title,
+            "severity": self.severity.value,
+            "category": self.category,
+            "confidence": self.confidence,
+            "status": self.status.value,
+            "evidence": [e.to_dict() for e in self.evidence],
+            "description": self.description,
+            "impact": self.impact or "",
+            "recommendation": self.recommendation,
+            "validation": {
+                "method": self.validation_method,
+                "status": self.validation_status.value,
+                "details": self.validation_details or "",
+            },
+            "rule_id": self.rule_id or "",
+            "rule_pack": self.rule_pack,
+            "rule_pack_version": self.rule_pack_version,
+        }

askyara/core/policy_engine.py

@@ -0,0 +1,63 @@
+"""Policy Engine & Precedence Resolver supporting Modular Industry Packs."""
+
+from pathlib import Path
+from typing import Any
+import yaml
+
+
+class PolicyEngine:
+    def __init__(
+        self,
+        defaults_file: Path,
+        packs_dir: Path | None = None,
+        active_packs: list[str] | None = None,
+    ) -> None:
+        self.defaults_file = defaults_file
+        self.packs_dir = packs_dir
+        self.rules: dict[str, dict[str, Any]] = {}
+        self.loaded_packs: list[str] = ["default-salesforce"]
+        self.load_defaults()
+
+        if packs_dir and active_packs:
+            for pack in active_packs:
+                self.load_pack(pack)
+
+    def load_defaults(self) -> None:
+        if not self.defaults_file.exists():
+            return
+        with open(self.defaults_file, "r", encoding="utf-8") as f:
+            data = yaml.safe_load(f)
+            if isinstance(data, dict) and "rules" in data:
+                for rule in data["rules"]:
+                    if isinstance(rule, dict) and "id" in rule:
+                        self.rules[rule["id"]] = rule
+
+    def load_pack(self, pack_name: str) -> bool:
+        if not self.packs_dir or not self.packs_dir.exists():
+            return False
+
+        # Support name as "omnistudio" or "omnistudio.yaml"
+        clean_name = pack_name[:-5] if pack_name.endswith(".yaml") else pack_name
+        pack_file = self.packs_dir / f"{clean_name}.yaml"
+        if not pack_file.exists():
+            return False
+
+        with open(pack_file, "r", encoding="utf-8") as f:
+            data = yaml.safe_load(f)
+            if isinstance(data, dict) and "rules" in data:
+                for rule in data["rules"]:
+                    if isinstance(rule, dict) and "id" in rule:
+                        self.rules[rule["id"]] = rule
+                if clean_name not in self.loaded_packs:
+                    self.loaded_packs.append(clean_name)
+                return True
+        return False
+
+    def get_rule(self, rule_id: str) -> dict[str, Any] | None:
+        return self.rules.get(rule_id)
+
+    def get_enabled_rules(self) -> list[dict[str, Any]]:
+        return [r for r in self.rules.values() if r.get("enabled", True)]
+
+    def get_rules_by_category(self, category: str) -> list[dict[str, Any]]:
+        return [r for r in self.rules.values() if r.get("category") == category]

askyara/core/report_formatter.py

@@ -0,0 +1,36 @@
+"""Markdown and JSON Report Formatter."""
+
+import json
+from typing import Any
+from askyara.core.finding_model import Finding
+
+
+class ReportFormatter:
+    @staticmethod
+    def to_json(findings: list[Finding], metadata: dict[str, Any] | None = None) -> str:
+        payload = {
+            "metadata": metadata or {},
+            "total_findings": len(findings),
+            "findings": [f.to_dict() for f in findings],
+        }
+        return json.dumps(payload, indent=2)
+
+    @staticmethod
+    def to_markdown(findings: list[Finding], title: str = "AskYARA Review Report") -> str:
+        lines: list[str] = [f"# {title}", "", f"**Total Findings:** {len(findings)}", ""]
+        if not findings:
+            lines.append("Looks good. No issues found. Ship.")
+            return "\n".join(lines)
+
+        for i, f in enumerate(findings, 1):
+            lines.append(f"### {i}. [{f.severity.value.upper()}] {f.title}")
+            loc_str = ", ".join(f"`{e.path}:{e.start_line}`" for e in f.evidence)
+            lines.append(f"- **Location:** {loc_str}")
+            lines.append(f"- **Problem:** {f.description}")
+            if f.impact:
+                lines.append(f"- **Impact:** {f.impact}")
+            lines.append(f"- **Recommendation:** {f.recommendation}")
+            lines.append(f"- **Validation Status:** `{f.validation_status.value}`")
+            lines.append("")
+
+        return "\n".join(lines)

askyara/installer/__init__.py

@@ -0,0 +1 @@
+"""Installer Package."""

askyara/installer/doctor.py

@@ -0,0 +1,50 @@
+"""Environment and Diagnostic Health Check (`askyara doctor`)."""
+
+import json
+from pathlib import Path
+from askyara.tools.tool_registry import discover_tools
+from askyara.tools.project_detector import detect_salesforce_project
+
+
+def run_doctor(as_json: bool = False) -> int:
+    tools = discover_tools()
+    project = detect_salesforce_project(Path("."))
+
+    report = {
+        "status": "healthy",
+        "project": {
+            "root": project.root,
+            "confidence": project.confidence,
+            "markers": project.detected_markers,
+            "package_directories": project.package_directories,
+            "asset_counts": project.asset_counts,
+            "industry_packs": project.industry_packs,
+        },
+        "tooling": {name: {"available": t.available, "version": t.version} for name, t in tools.items()},
+    }
+
+    if as_json:
+        print(json.dumps(report, indent=2))
+        return 0
+
+    print("==================================================")
+    print("           AskYARA Environment Doctor             ")
+    print("==================================================")
+    print(f"Project Root       : {project.root}")
+    print(f"Salesforce Project : {'Yes' if project.confidence > 0.5 else 'Not detected'}")
+    print(f"Detected Markers   : {', '.join(project.detected_markers) if project.detected_markers else 'None'}")
+    print(f"Industry Clouds    : {', '.join(project.industry_packs) if project.industry_packs else 'None (Core Salesforce)'}")
+    print(f"Package Dirs       : {', '.join(project.package_directories) if project.package_directories else 'None'}")
+    print("--------------------------------------------------")
+    print("Asset Counts:")
+    for asset, count in project.asset_counts.items():
+        if count > 0:
+            print(f"  - {asset:<26}: {count}")
+    print("--------------------------------------------------")
+    print("Tooling Discovery:")
+    for name, t in tools.items():
+        status_str = f"Found ({t.version})" if t.available else "Missing / Not Installed"
+        print(f"  - {name:<26}: {status_str}")
+    print("==================================================")
+
+    return 0

askyara/installer/manager.py

@@ -0,0 +1,49 @@
+"""Adapter Installation and Lifecycle Manager."""
+
+import shutil
+from pathlib import Path
+
+
+class AdapterManager:
+    @staticmethod
+    def install_to_project(target_dir: Path, agent: str) -> bool:
+        repo_root = Path(__file__).resolve().parent.parent.parent.parent
+        target_dir = target_dir.resolve()
+
+        if agent == "cursor":
+            dest = target_dir / ".cursor" / "rules"
+            dest.mkdir(parents=True, exist_ok=True)
+            src = repo_root / ".cursor" / "rules" / "askyara.mdc"
+            if src.exists():
+                shutil.copy2(src, dest / "askyara.mdc")
+                return True
+        elif agent == "windsurf":
+            dest = target_dir / ".windsurf" / "rules"
+            dest.mkdir(parents=True, exist_ok=True)
+            src = repo_root / ".windsurf" / "rules" / "askyara.md"
+            if src.exists():
+                shutil.copy2(src, dest / "askyara.md")
+                return True
+        elif agent == "cline":
+            dest = target_dir / ".clinerules"
+            dest.mkdir(parents=True, exist_ok=True)
+            src = repo_root / ".clinerules" / "askyara.md"
+            if src.exists():
+                shutil.copy2(src, dest / "askyara.md")
+                return True
+        elif agent == "kiro":
+            dest = target_dir / ".kiro" / "steering"
+            dest.mkdir(parents=True, exist_ok=True)
+            src = repo_root / ".kiro" / "steering" / "askyara.md"
+            if src.exists():
+                shutil.copy2(src, dest / "askyara.md")
+                return True
+        elif agent == "copilot":
+            dest = target_dir / ".github"
+            dest.mkdir(parents=True, exist_ok=True)
+            src = repo_root / ".github" / "copilot-instructions.md"
+            if src.exists():
+                shutil.copy2(src, dest / "copilot-instructions.md")
+                return True
+
+        return False

askyara/tools/__init__.py

@@ -0,0 +1 @@
+"""Local Inspection Tools Package."""

askyara/tools/git_diff.py

@@ -0,0 +1,46 @@
+"""Git Diff & Status Utility."""
+
+import subprocess
+from dataclasses import dataclass, field
+from pathlib import Path
+
+
+@dataclass
+class GitDiffSummary:
+    is_git_repo: bool
+    changed_files: list[str] = field(default_factory=list)
+    diff_text: str = ""
+
+
+def get_git_diff_summary(repo_root: Path) -> GitDiffSummary:
+    try:
+        status_proc = subprocess.run(
+            ["git", "status", "--porcelain"],
+            cwd=str(repo_root),
+            capture_output=True,
+            text=True,
+            check=False,
+            timeout=10,
+        )
+        if status_proc.returncode != 0:
+            return GitDiffSummary(is_git_repo=False)
+
+        changed: list[str] = []
+        for line in status_proc.stdout.splitlines():
+            line = line.strip()
+            if line and len(line) > 3:
+                changed.append(line[3:])
+
+        diff_proc = subprocess.run(
+            ["git", "diff", "HEAD"],
+            cwd=str(repo_root),
+            capture_output=True,
+            text=True,
+            check=False,
+            timeout=15,
+        )
+        diff_text = diff_proc.stdout if diff_proc.returncode == 0 else ""
+
+        return GitDiffSummary(is_git_repo=True, changed_files=changed, diff_text=diff_text)
+    except (FileNotFoundError, subprocess.TimeoutExpired):
+        return GitDiffSummary(is_git_repo=False)

askyara/tools/project_detector.py

@@ -0,0 +1,154 @@
+"""Salesforce Project & Industry Cloud Detector."""
+
+import json
+from dataclasses import dataclass, field
+from pathlib import Path
+
+
+@dataclass
+class SalesforceProjectProfile:
+    id: str
+    root: str
+    detected_markers: list[str] = field(default_factory=list)
+    confidence: float = 0.0
+    package_directories: list[str] = field(default_factory=list)
+    asset_counts: dict[str, int] = field(default_factory=dict)
+    industry_packs: list[str] = field(default_factory=list)
+
+
+def detect_salesforce_project(target_dir: Path) -> SalesforceProjectProfile:
+    markers: list[str] = []
+    package_dirs: list[str] = []
+    confidence = 0.0
+    asset_counts: dict[str, int] = {
+        "apex_class": 0,
+        "apex_trigger": 0,
+        "lwc_bundle": 0,
+        "flow": 0,
+        "omni_data_transform": 0,
+        "omni_integration_procedure": 0,
+        "flex_card": 0,
+    }
+    industry_packs: list[str] = []
+
+    sfdx_config = target_dir / "sfdx-project.json"
+    if sfdx_config.is_file():
+        markers.append("sfdx-project.json")
+        confidence += 0.7
+        try:
+            with open(sfdx_config, "r", encoding="utf-8") as f:
+                data = json.load(f)
+                for entry in data.get("packageDirectories", []):
+                    if "path" in entry:
+                        package_dirs.append(entry["path"])
+        except Exception:
+            pass
+
+    force_app = target_dir / "force-app"
+    if force_app.is_dir():
+        markers.append("force-app")
+        confidence = min(1.0, confidence + 0.3)
+        if "force-app" not in package_dirs:
+            package_dirs.append("force-app")
+
+    # Search paths
+    search_dirs = [target_dir / p for p in package_dirs] if package_dirs else [target_dir]
+
+    for base in search_dirs:
+        if not base.exists():
+            continue
+
+        # Standard Core Assets
+        all_cls = list(base.glob("**/*.cls"))
+        all_triggers = list(base.glob("**/*.trigger"))
+        all_flows = list(base.glob("**/*.flow-meta.xml"))
+
+        asset_counts["apex_class"] += len(all_cls)
+        asset_counts["apex_trigger"] += len(all_triggers)
+        asset_counts["flow"] += len(all_flows)
+
+        lwc_dir = base / "main" / "default" / "lwc"
+        if lwc_dir.is_dir():
+            asset_counts["lwc_bundle"] += len([d for d in lwc_dir.iterdir() if d.is_dir()])
+
+        # OmniStudio Metadata Detection
+        odt_count = len(list(base.glob("**/omniDataTransforms*/**/*.json"))) + len(list(base.glob("**/omniDataTransforms*/**/*.xml")))
+        oip_count = len(list(base.glob("**/omniIntegrationProcedures*/**/*.json"))) + len(list(base.glob("**/omniIntegrationProcedures*/**/*.xml")))
+        fc_count = len(list(base.glob("**/flexCards*/**/*.json"))) + len(list(base.glob("**/flexCards*/**/*.xml")))
+        
+        # Also check for sfdx-omnistudio in json files
+        omni_json_hits = 0
+        for jf in list(base.glob("**/*.json"))[:20]:
+            try:
+                txt = jf.read_text(encoding="utf-8", errors="ignore")
+                if "sfdx-omnistudio" in txt or "omniDataTransforms" in str(jf):
+                    omni_json_hits += 1
+            except Exception:
+                pass
+
+        asset_counts["omni_data_transform"] += odt_count + (1 if omni_json_hits > 0 and odt_count == 0 else 0)
+        asset_counts["omni_integration_procedure"] += oip_count
+        asset_counts["flex_card"] += fc_count
+
+        if odt_count > 0 or oip_count > 0 or fc_count > 0 or omni_json_hits > 0:
+            if "omnistudio" not in industry_packs:
+                industry_packs.append("omnistudio")
+                markers.append("omnistudio-metadata")
+
+        # Industry Cloud Namespaces & Object Signature Scanning
+        all_paths_str = " ".join([str(p) for p in base.glob("**/*")])
+
+        # Scan code text of Apex classes for industry namespace signatures
+        sample_code = ""
+        for code_file in (all_cls + all_triggers)[:25]:
+            try:
+                sample_code += " " + code_file.read_text(encoding="utf-8", errors="ignore")[:2000]
+            except Exception:
+                pass
+
+        combined_search_space = all_paths_str + " " + sample_code
+
+        if "FinServ" in combined_search_space or any(base.glob("**/FinServ__*")):
+            if "financial-services-cloud" not in industry_packs:
+                industry_packs.append("financial-services-cloud")
+                markers.append("fsc-namespace")
+
+        if "HealthCloud" in combined_search_space or any(base.glob("**/HealthCloudGA__*")):
+            if "health-cloud" not in industry_packs:
+                industry_packs.append("health-cloud")
+                markers.append("health-cloud-namespace")
+
+        if "SalesAgreement" in combined_search_space or "AdvAcctForecast" in combined_search_space:
+            if "manufacturing-cloud" not in industry_packs:
+                industry_packs.append("manufacturing-cloud")
+                markers.append("manufacturing-cloud-markers")
+
+        if "RetailStore" in combined_search_space or "AssessmentTask" in combined_search_space:
+            if "consumer-goods-cloud" not in industry_packs:
+                industry_packs.append("consumer-goods-cloud")
+                markers.append("consumer-goods-markers")
+
+        if "Vehicle" in combined_search_space:
+            if "automotive-cloud" not in industry_packs:
+                industry_packs.append("automotive-cloud")
+                markers.append("automotive-markers")
+
+        if "Premise" in combined_search_space or "ServicePoint" in combined_search_space:
+            if "energy-utilities-cloud" not in industry_packs:
+                industry_packs.append("energy-utilities-cloud")
+                markers.append("energy-utilities-markers")
+
+        if "BusinessLicense" in combined_search_space or "RegulatoryTransaction" in combined_search_space:
+            if "public-sector-solutions" not in industry_packs:
+                industry_packs.append("public-sector-solutions")
+                markers.append("public-sector-markers")
+
+    return SalesforceProjectProfile(
+        id=f"project:local:{target_dir.resolve().name}",
+        root=str(target_dir.resolve()),
+        detected_markers=markers,
+        confidence=confidence,
+        package_directories=package_dirs,
+        asset_counts=asset_counts,
+        industry_packs=industry_packs,
+    )

askyara/tools/redaction.py

@@ -0,0 +1,35 @@
+"""Secret, Regulatory, and Industry-Sensitive Token Redactor."""
+
+import re
+
+SECRET_PATTERNS = [
+    re.compile(r"(?i)(bearer\s+[a-zA-Z0-9_\-\.]{20,})"),
+    re.compile(r"(?i)(password\s*[:=]\s*['\"][^'\"]+['\"])"),
+    re.compile(r"(?i)(client_secret\s*[:=]\s*['\"][^'\"]+['\"])"),
+    re.compile(r"(?i)(api[_-]?key\s*[:=]\s*['\"][^'\"]+['\"])"),
+]
+
+# Healthcare HIPAA / PHI Patterns
+PHI_PATTERNS = [
+    re.compile(r"(?i)(mrn\s*[:=]\s*['\"]?[A-Z0-9\-]{6,12}['\"]?)"),
+    re.compile(r"(?i)(npi\s*[:=]\s*['\"]?\d{10}['\"]?)"),
+]
+
+# Financial Services PCI-DSS / PII Patterns
+PCI_PII_PATTERNS = [
+    # 13-19 digit credit card numbers (Visa, MC, Amex)
+    re.compile(r"\b(?:\d{4}[ -]?){3}\d{4}\b"),
+    # SSN (999-99-9999)
+    re.compile(r"\b\d{3}-\d{2}-\d{4}\b"),
+]
+
+
+def redact_secrets(text: str) -> str:
+    redacted = text
+    for pattern in SECRET_PATTERNS:
+        redacted = pattern.sub("[REDACTED_SECRET]", redacted)
+    for pattern in PHI_PATTERNS:
+        redacted = pattern.sub("[REDACTED_PHI]", redacted)
+    for pattern in PCI_PII_PATTERNS:
+        redacted = pattern.sub("[REDACTED_PCI_PII]", redacted)
+    return redacted

askyara/tools/tool_registry.py

@@ -0,0 +1,40 @@
+"""External Tool Discovery."""
+
+import shutil
+import subprocess
+from dataclasses import dataclass
+
+
+@dataclass
+class ToolStatus:
+    name: str
+    available: bool
+    version: str | None = None
+
+
+def check_tool(name: str, version_arg: str = "--version") -> ToolStatus:
+    path = shutil.which(name)
+    if not path:
+        return ToolStatus(name=name, available=False)
+
+    try:
+        proc = subprocess.run(
+            [name, version_arg],
+            capture_output=True,
+            text=True,
+            timeout=5,
+            check=False,
+        )
+        ver = proc.stdout.splitlines()[0].strip() if proc.stdout else None
+        return ToolStatus(name=name, available=True, version=ver)
+    except Exception:
+        return ToolStatus(name=name, available=True, version="unknown")
+
+
+def discover_tools() -> dict[str, ToolStatus]:
+    return {
+        "git": check_tool("git"),
+        "sf": check_tool("sf", "--version"),
+        "sfdx": check_tool("sfdx", "--version"),
+        "python": check_tool("python3", "--version"),
+    }

askyara-0.1.0.dist-info/METADATA

@@ -0,0 +1,145 @@
+Metadata-Version: 2.4
+Name: askyara
+Version: 0.1.0
+Summary: Salesforce-native AI engineering companion and multi-agent toolkit
+Author: AskYARA Engineering Team
+License-Expression: Apache-2.0
+License-File: LICENSE
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Quality Assurance
+Requires-Python: >=3.11
+Requires-Dist: jsonschema>=4.20.0
+Requires-Dist: pyyaml>=6.0
+Provides-Extra: dev
+Requires-Dist: pytest-cov>=4.1.0; extra == 'dev'
+Requires-Dist: pytest>=8.0.0; extra == 'dev'
+Requires-Dist: ruff>=0.3.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# AskYARA Salesforce Engineering
+
+> **Salesforce-native AI engineering companion and multi-agent toolkit.**  
+> Understands Apex, LWC, Flows, Salesforce metadata, governor limits, security, and project architecture.
+
+AskYARA brings Salesforce engineering intelligence directly into your favorite coding agent—whether you use **Cursor**, **Claude Code**, **GitHub Copilot**, **Windsurf**, **Cline**, **Kiro**, or **Codex**.
+
+---
+
+## Key Capabilities
+
+- **Platform-Aware Review (`/askyara-review`):** Inspects changed files, surrounding callers, governor limits (SOQL/DML in loops), CRUD/FLS access, and asynchronous boundaries.
+- **Repository Audit (`/askyara-audit`):** Scans the whole Salesforce DX project for anti-patterns, missing tests, and architectural technical debt.
+- **Evidence-Backed Findings:** Every reported issue includes the file path, exact line numbers, severity, rationale, and recommended fix.
+- **Deterministic Local Tools:** Interfaces with Git, Salesforce CLI (`sf`), and Salesforce Code Analyzer / PMD when installed.
+- **Zero Cloud Requirement:** Local-first, privacy-preserving, and read-only by default.
+
+---
+
+## Quickstart
+
+### 1. Install into Your Coding Agent
+
+See [INSTALL.md](INSTALL.md) for agent-specific instructions.
+
+For **Claude Code**:
+```bash
+# In Claude Code CLI or Desktop
+/plugin install askyara
+```
+
+For **GitHub Copilot**:
+```bash
+# Workspace instruction file
+cp .github/copilot-instructions.md your-project/.github/copilot-instructions.md
+```
+
+For **Cursor / Windsurf / Cline / Kiro**:
+Copy the matching rule into your workspace:
+```bash
+# Cursor
+cp .cursor/rules/askyara.mdc your-project/.cursor/rules/
+
+# Windsurf
+cp .windsurf/rules/askyara.md your-project/.windsurf/rules/
+
+# Cline
+cp .clinerules/askyara.md your-project/.clinerules/
+
+# Kiro
+cp .kiro/steering/askyara.md your-project/.kiro/steering/
+```
+
+### 2. Run AskYARA CLI Directly
+
+```bash
+# Verify installation and discover local Salesforce tools
+askyara doctor
+
+# Review local changes in an SFDX project
+askyara review
+```
+
+---
+
+## Commands
+
+| Command | What it does |
+| :--- | :--- |
+| `/askyara [query]` | Ask questions about the current Salesforce project: architecture, Apex classes, LWC components, Flows, and metadata structure. |
+| `/askyara-review` | Review the current diff like a Salesforce Technical Architect: governor limits (SOQL/DML in loops), CRUD/FLS security, sharing context, bulkification, and test quality. Name a target to narrow or widen: `uncommitted`, `staged`, `branch`, or a PR link. |
+| `/askyara-audit` | Comprehensive quality, security, and architecture audit of the whole Salesforce DX repository, ranked by what to fix first. |
+| `/askyara-security` | Focused security audit: sharing models (`with sharing`), CRUD/FLS enforcement, dynamic SOQL injection, and secret/credential exposure. |
+| `/askyara-test` | Identify missing test coverage, test quality flaws (missing assertions), and generate bulk test scenarios. |
+| `/askyara-help` | Quick reference for available commands, installed skills, and diagnostic status. |
+
+Commands need a skill-capable host (Claude Code, Codex, Devin CLI, Github Copilot, Kiro, Cline, Windsurf). In Claude Code and hosts with slash-command support, invoke them directly as `/askyara-review`. In namespaced plugin environments, they are available as `/askyara:askyara-review`. The instruction-only adapters (Cursor's rule file, Windsurf, Cline, Copilot and Kiro `AGENTS.md`) apply the always-on Salesforce engineering rules across all prompts without requiring slash commands.
+
+---
+
+
+## Salesforce Industries Support
+
+AskYARA includes modular **Industry Capability Packs** that bring domain-aware architecture and review rules to specialized Salesforce clouds:
+
+- **OmniStudio (`omnistudio`):** DataRaptor Turbo Extract enforcement, unindexed filter warnings, and Integration Procedure Loop Block limits.
+- **Financial Services Cloud (`financial-services-cloud`):** Synchronous RBL rollup limits, Compliant Information Barriers (CIB), Person Account handling.
+- **Health Cloud (`health-cloud`):** HIPAA/PHI debug log masking, FHIR CodeSet standard mappings, and Care Team data boundaries.
+- **Manufacturing Cloud (`manufacturing-cloud`):** Data Processing Engine (DPE) forecast delegation, Sales Agreement row-locking prevention.
+- **Consumer Goods / CPG (`consumer-goods-cloud`):** Mobile in-store sync conflict resolution, Trade Promotion Management (TPM) budget calculation boundaries.
+- **Automotive Cloud (`automotive-cloud`):** Telematics anti-patterns (Data Cloud vs sObjects), warranty claim idempotency.
+- **Energy & Utilities (`energy-utilities-cloud`):** Tariff rating callouts in loops, Premise-to-ServicePoint hierarchy checks.
+- **Public Sector Solutions (`public-sector-solutions`):** Citizen data isolation, Guest User security, BRE Decision Matrix coverage.
+
+### Examples: Using AskYARA with Industry Clouds
+
+AskYARA **auto-detects** industry metadata (e.g. `FinServ__`, `HealthCloudGA__`, `omniDataTransforms/`, `SalesAgreement`). You can also specify packs explicitly:
+
+```bash
+# Verify detected industry clouds and active rule packs
+askyara doctor
+
+# Review local changes with a specific industry pack
+askyara review --pack omnistudio
+
+# Audit repository against Financial Services Cloud rules
+askyara audit --pack financial-services-cloud
+```
+
+**In your Coding Agent (Cursor, Claude Code, Copilot, Antigravity):**
+- *OmniStudio:* `/askyara "Review the newly added ClaimSubmission Integration Procedure and DataRaptors for scalability"`
+- *Financial Services:* `/askyara-review` (evaluates Rollup By Lookup limits and CIB ethical walls)
+- *Health Cloud:* `/askyara-security` (verifies zero PHI leakage and FHIR CodeSet compliance)
+- *Manufacturing:* `/askyara-review` (verifies forecast updates are dispatched to Data Processing Engine jobs)
+
+See the full [Salesforce Industries Guide](docs/product/industries-guide.md) for detailed checklists and finding examples.
+
+---
+
+## License
+
+Licensed under the [Apache License, Version 2.0](LICENSE).

askyara-0.1.0.dist-info/RECORD

@@ -0,0 +1,20 @@
+askyara/__init__.py,sha256=QhwLNnm1lwMkgF8YdagUbL-5-7OO-zMJ-q8F8Nt1C4k,74
+askyara/cli.py,sha256=YESWmekjJtAhH2lQxCxLKibVlmV8gkHHNtzdG5qEszg,3436
+askyara/core/__init__.py,sha256=NjMpnEQeA6kEGb65IFiediUTzgetFgZ-DA7eK8fyxPA,27
+askyara/core/command_registry.py,sha256=ynoYEQk8T3YoMF6la-1Lfb4ScEkL35rv7UWSaQNzq7c,853
+askyara/core/finding_model.py,sha256=a2bbKMlpJitAGpmT_yRvRfOZmcvxQsLJtna9NAfrwQQ,2543
+askyara/core/policy_engine.py,sha256=ws61GFLorm2OZWq3pdm5znNN2cXgIh5LYXA4KiYFdCA,2351
+askyara/core/report_formatter.py,sha256=V7J5N3gLgkA3QBOlmb8MU0WMte2Y39BU9fXQDdno_d4,1416
+askyara/installer/__init__.py,sha256=TU42vE3y4Thn0dy-E2uHMQN5JNu2NLRzCl9KZfOcIZk,25
+askyara/installer/doctor.py,sha256=M4j-Bldr5EgxE9801eC2bL7rhwnXxdkhquyqy7f5-Ew,2172
+askyara/installer/manager.py,sha256=Nq3OcQD3aAjPmI-wUBWZdbOYgld0368Pq9g6KauZSbY,1901
+askyara/tools/__init__.py,sha256=x-_uHwpCw4rm5fmPY88EHt8Eo8HQylCK8N6ffCoPN3s,38
+askyara/tools/git_diff.py,sha256=XLHhbOWTIzd-xRQlu8dFEP34PQVHKb-IzFDlKv7rg-A,1348
+askyara/tools/project_detector.py,sha256=_sZy-Uv5Ier7GnSHxs9pLNLkpXcZwls8MvFFBNYEcYw,6360
+askyara/tools/redaction.py,sha256=ImxaGVDA-ZOwg9SLxe8PV6c9sLOOXi0Ql_Kgpr-xBbw,1136
+askyara/tools/tool_registry.py,sha256=ySvH4cB9WOCuS_9Qk9rMLH0sSCP6_YCi7fN7hMlkJXQ,1043
+askyara-0.1.0.dist-info/METADATA,sha256=7dUfWiLmh801ET7e2q_2-mBbMDN7o06CBto-v-HV6NI,6897
+askyara-0.1.0.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+askyara-0.1.0.dist-info/entry_points.txt,sha256=UzbmEN0237DlgLj3cG4WUcKySEu7iBSnQLU51fHIaHM,45
+askyara-0.1.0.dist-info/licenses/LICENSE,sha256=FcUyRljJ99LLfqP1fotCeJEMXKYYQEzf2ufgjHtHhTg,5236
+askyara-0.1.0.dist-info/RECORD,,

askyara-0.1.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.27.0
+Root-Is-Purelib: true
+Tag: py3-none-any

askyara-0.1.0.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+askyara = askyara.cli:main

askyara-0.1.0.dist-info/licenses/LICENSE

@@ -0,0 +1,100 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work.
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      patent license to make, have made, use, offer to sell, sell, import,
+      and otherwise transfer the Work.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work; and
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND.
+
+   8. Limitation of Liability. In no event and under no legal theory
+      shall any Contributor be liable to You for damages, including any
+      direct, indirect, special, incidental, or consequential damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations.