<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — CISO Advisory Consulting

## Agent Tools

| Tool | Description |
|---|---|
| Engagement Scoper | `scope_engagement(org, type, weeks)` — Define advisory parameters |
| Program Auditor | `audit_program(scores)` — Assess program maturity |
| Recommendation Engine | `generate_recommendations(gaps)` — Prioritized actions |

## CLI Usage

```bash
# Scope engagement
node agent.js scope --org "Acme" --type program_audit --weeks 4

# Audit program
node agent.js audit --scores '{"governance": 2, "detection": 1}'

# Get recommendations
node agent.js recommend --gaps '{"detection": 1, "governance": 2}'
```

## Output Format

All commands return JSON with the following structure:

```json
{
  "action": "<command_name>",
  "...": "command-specific fields"
}
```

## Error Handling

- Invalid input returns `{"error": "description"}` with non-zero exit code
- JSON parsing errors are caught and reported with context
- Missing required arguments trigger argparse help display
