Refactor code structure for improved readability and maintainability

src/Cli/StellaOps.Cli/Services/BackendOperationsClient.cs

@@ -20,6 +20,7 @@ using StellaOps.Auth.Client;
 using StellaOps.Cli.Configuration;
 using StellaOps.Cli.Services.Models;
 using StellaOps.Cli.Services.Models.AdvisoryAi;
+using StellaOps.Cli.Services.Models.Bun;
 using StellaOps.Cli.Services.Models.Ruby;
 using StellaOps.Cli.Services.Models.Transport;
 
@@ -960,6 +961,50 @@ internal sealed class BackendOperationsClient : IBackendOperationsClient
         };
     }
 
+    public async Task<BunPackageInventory?> GetBunPackagesAsync(string scanId, CancellationToken cancellationToken)
+    {
+        EnsureBackendConfigured();
+
+        if (string.IsNullOrWhiteSpace(scanId))
+        {
+            throw new ArgumentException("Scan identifier is required.", nameof(scanId));
+        }
+
+        var encodedScanId = Uri.EscapeDataString(scanId);
+        using var request = CreateRequest(HttpMethod.Get, $"api/scans/{encodedScanId}/bun-packages");
+        await AuthorizeRequestAsync(request, cancellationToken).ConfigureAwait(false);
+
+        using var response = await _httpClient.SendAsync(request, cancellationToken).ConfigureAwait(false);
+        if (response.StatusCode == HttpStatusCode.NotFound)
+        {
+            return null;
+        }
+
+        if (!response.IsSuccessStatusCode)
+        {
+            var failure = await CreateFailureMessageAsync(response, cancellationToken).ConfigureAwait(false);
+            throw new InvalidOperationException(failure);
+        }
+
+        var inventory = await response.Content
+            .ReadFromJsonAsync<BunPackageInventory>(SerializerOptions, cancellationToken)
+            .ConfigureAwait(false);
+
+        if (inventory is null)
+        {
+            throw new InvalidOperationException("Bun package response payload was empty.");
+        }
+
+        var normalizedScanId = string.IsNullOrWhiteSpace(inventory.ScanId) ? scanId : inventory.ScanId;
+        var packages = inventory.Packages ?? Array.Empty<BunPackageItem>();
+
+        return inventory with
+        {
+            ScanId = normalizedScanId,
+            Packages = packages
+        };
+    }
+
     public async Task<AdvisoryPipelinePlanResponseModel> CreateAdvisoryPipelinePlanAsync(
         AdvisoryAiTaskType taskType,
         AdvisoryPipelinePlanRequestModel request,

src/Cli/StellaOps.Cli/Services/IBackendOperationsClient.cs

@@ -5,6 +5,7 @@ using System.Threading.Tasks;
 using StellaOps.Cli.Configuration;
 using StellaOps.Cli.Services.Models;
 using StellaOps.Cli.Services.Models.AdvisoryAi;
+using StellaOps.Cli.Services.Models.Bun;
 using StellaOps.Cli.Services.Models.Ruby;
 
 namespace StellaOps.Cli.Services;
@@ -51,6 +52,8 @@ internal interface IBackendOperationsClient
 
     Task<RubyPackageInventoryModel?> GetRubyPackagesAsync(string scanId, CancellationToken cancellationToken);
 
+    Task<BunPackageInventory?> GetBunPackagesAsync(string scanId, CancellationToken cancellationToken);
+
     Task<AdvisoryPipelinePlanResponseModel> CreateAdvisoryPipelinePlanAsync(AdvisoryAiTaskType taskType, AdvisoryPipelinePlanRequestModel request, CancellationToken cancellationToken);
 
     Task<AdvisoryPipelineOutputModel?> TryGetAdvisoryPipelineOutputAsync(string cacheKey, AdvisoryAiTaskType taskType, string profile, CancellationToken cancellationToken);

src/Cli/StellaOps.Cli/Services/Models/Bun/BunPackageModels.cs

@@ -0,0 +1,23 @@
+using System;
+using System.Collections.Generic;
+using System.Text.Json.Serialization;
+
+namespace StellaOps.Cli.Services.Models.Bun;
+
+internal sealed record BunPackageItem(
+    [property: JsonPropertyName("name")] string Name,
+    [property: JsonPropertyName("version")] string? Version,
+    [property: JsonPropertyName("source")] string? Source,
+    [property: JsonPropertyName("resolved")] string? Resolved,
+    [property: JsonPropertyName("integrity")] string? Integrity,
+    [property: JsonPropertyName("isDev")] bool? IsDev,
+    [property: JsonPropertyName("isDirect")] bool? IsDirect,
+    [property: JsonPropertyName("isPatched")] bool? IsPatched,
+    [property: JsonPropertyName("customRegistry")] string? CustomRegistry,
+    [property: JsonPropertyName("metadata")] IDictionary<string, string?>? Metadata);
+
+internal sealed record BunPackageInventory(
+    [property: JsonPropertyName("scanId")] string ScanId,
+    [property: JsonPropertyName("imageDigest")] string? ImageDigest,
+    [property: JsonPropertyName("generatedAt")] DateTimeOffset? GeneratedAt,
+    [property: JsonPropertyName("packages")] IReadOnlyList<BunPackageItem> Packages);