@aionlabsai/aion 0.2.0

package/dist/infra/semgrep.js

@@ -0,0 +1,122 @@
+import { spawnSync } from 'child_process';
+const SEMGREP_MAX_BUFFER = 50 * 1024 * 1024;
+function mapSeverity(raw) {
+    switch (raw.toUpperCase()) {
+        case 'ERROR': return 'critical';
+        case 'WARNING': return 'high';
+        case 'INFO': return 'medium';
+        default: return 'low';
+    }
+}
+function mapCategory(checkId, meta) {
+    const id = (checkId + ' ' + (meta ?? '')).toLowerCase();
+    if (/security|injection|xss|sqli|secret|credential|auth|crypto/.test(id))
+        return 'security';
+    if (/perf|performance|memory|cpu|loop/.test(id))
+        return 'performance';
+    if (/test|coverage/.test(id))
+        return 'testing';
+    if (/error|exception|catch|throw/.test(id))
+        return 'error-handling';
+    if (/type|null|undefined/.test(id))
+        return 'types';
+    if (/arch|coupling|depend|import/.test(id))
+        return 'architecture';
+    return 'maintainability';
+}
+function extractJsonObject(text) {
+    let start = -1;
+    let depth = 0;
+    let inString = false;
+    let escaped = false;
+    for (let i = 0; i < text.length; i++) {
+        const ch = text[i];
+        if (escaped) {
+            escaped = false;
+            continue;
+        }
+        if (ch === '\\' && inString) {
+            escaped = true;
+            continue;
+        }
+        if (ch === '"') {
+            inString = !inString;
+            continue;
+        }
+        if (inString)
+            continue;
+        if (ch === '{') {
+            if (depth === 0)
+                start = i;
+            depth++;
+        }
+        else if (ch === '}') {
+            depth--;
+            if (depth === 0 && start !== -1)
+                return text.slice(start, i + 1);
+        }
+    }
+    return null;
+}
+function compact(text, max = 320) {
+    const normalized = text.replace(/\s+/g, ' ').trim();
+    if (normalized.length <= max)
+        return normalized;
+    return `${normalized.slice(0, max)}...`;
+}
+export function parseSemgrepOutput(stdout) {
+    let raw;
+    try {
+        raw = JSON.parse(extractJsonObject(stdout) ?? stdout);
+    }
+    catch {
+        return { findings: [], filesScanned: 0, available: true, error: 'failed to parse semgrep output' };
+    }
+    const findings = (raw.results ?? []).map((r) => ({
+        file: r.path,
+        line: r.start.line,
+        severity: mapSeverity(r.extra.severity),
+        category: mapCategory(r.check_id, r.extra.metadata?.category),
+        finding: compact(`[${r.check_id}] ${r.extra.message}`),
+        recommendation: `Review ${r.path}:${r.start.line} — fix or suppress with \`# nosemgrep\``,
+    }));
+    const scanned = raw.paths?.scanned?.length ?? new Set(findings.map((f) => f.file)).size;
+    return { findings, filesScanned: scanned, available: true };
+}
+export function runSemgrep(cwd) {
+    // Check semgrep is available
+    const check = spawnSync('semgrep', ['--version'], { encoding: 'utf8', maxBuffer: SEMGREP_MAX_BUFFER });
+    if (check.status !== 0) {
+        const error = check.stderr?.slice(0, 200) || check.error?.message || 'semgrep not found';
+        return { findings: [], filesScanned: 0, available: false, error };
+    }
+    const result = spawnSync('semgrep', [
+        'scan',
+        '--config', 'auto',
+        '--json',
+        '--quiet',
+        '--no-rewrite-rule-ids',
+        '--timeout', '60',
+        '--max-memory', '512',
+        '.',
+    ], {
+        cwd,
+        encoding: 'utf8',
+        timeout: 120_000,
+        maxBuffer: SEMGREP_MAX_BUFFER,
+        env: process.env,
+    });
+    if (result.error) {
+        return { findings: [], filesScanned: 0, available: true, error: result.error.message };
+    }
+    if (!result.stdout) {
+        return {
+            findings: [],
+            filesScanned: 0,
+            available: true,
+            error: result.stderr?.slice(0, 200) || 'no output',
+        };
+    }
+    return parseSemgrepOutput(result.stdout);
+}
+//# sourceMappingURL=semgrep.js.map

package/dist/infra/semgrep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semgrep.js","sourceRoot":"","sources":["../../src/infra/semgrep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAU1C,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAiB5C,SAAS,WAAW,CAAC,GAAW;IAC9B,QAAQ,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1B,KAAK,OAAO,CAAC,CAAG,OAAO,UAAU,CAAC;QAClC,KAAK,SAAS,CAAC,CAAC,OAAO,MAAM,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAI,OAAO,QAAQ,CAAC;QAChC,OAAO,CAAC,CAAQ,OAAO,KAAK,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,IAAa;IACjD,MAAM,EAAE,GAAG,CAAC,OAAO,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,IAAI,2DAA2D,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5F,IAAI,kCAAkC,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,aAAa,CAAC;IACtE,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,6BAA6B,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACpE,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,OAAO,CAAC;IACnD,IAAI,6BAA6B,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,cAAc,CAAC;IAClE,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,OAAO,EAAE,CAAC;YAAC,OAAO,GAAG,KAAK,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3C,IAAI,EAAE,KAAK,IAAI,IAAI,QAAQ,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1D,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAAC,QAAQ,GAAG,CAAC,QAAQ,CAAC;YAAC,SAAS;QAAC,CAAC;QACnD,IAAI,QAAQ;YAAE,SAAS;QAEvB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,KAAK,KAAK,CAAC;gBAAE,KAAK,GAAG,CAAC,CAAC;YAC3B,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,GAAG,GAAG,GAAG;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,UAAU,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IAChD,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,IAAI,GAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAqB,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;IACrG,CAAC;IAED,MAAM,QAAQ,GAAmB,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI;QAClB,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;QACvC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC7D,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACtD,cAAc,EAAE,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,yCAAyC;KAC1F,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,6BAA6B;IAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACvG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,mBAAmB,CAAC;QACzF,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CACtB,SAAS,EACT;QACE,MAAM;QACN,UAAU,EAAE,MAAM;QAClB,QAAQ;QACR,SAAS;QACT,uBAAuB;QACvB,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,KAAK;QACrB,GAAG;KACJ,EACD;QACE,GAAG;QACH,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,kBAAkB;QAC7B,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IACzF,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,WAAW;SACnD,CAAC;IACJ,CAAC;IAED,OAAO,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC"}

package/dist/infra/semgrep.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=semgrep.test.d.ts.map

package/dist/infra/semgrep.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semgrep.test.d.ts","sourceRoot":"","sources":["../../src/infra/semgrep.test.ts"],"names":[],"mappings":""}

package/dist/infra/semgrep.test.js

@@ -0,0 +1,39 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { parseSemgrepOutput } from './semgrep.js';
+test('parseSemgrepOutput maps findings and scanned paths', () => {
+    const result = parseSemgrepOutput(JSON.stringify({
+        paths: { scanned: ['src/app.ts', 'src/auth.ts'] },
+        results: [{
+                check_id: 'typescript.express.security.audit.xss',
+                path: 'src/app.ts',
+                start: { line: 42 },
+                extra: {
+                    message: 'Potential XSS',
+                    severity: 'WARNING',
+                    metadata: { category: 'security' },
+                },
+            }],
+    }));
+    assert.equal(result.available, true);
+    assert.equal(result.filesScanned, 2);
+    assert.equal(result.findings.length, 1);
+    assert.equal(result.findings[0]?.severity, 'high');
+    assert.equal(result.findings[0]?.category, 'security');
+});
+test('parseSemgrepOutput reports invalid JSON clearly', () => {
+    const result = parseSemgrepOutput('{not json');
+    assert.equal(result.available, true);
+    assert.equal(result.filesScanned, 0);
+    assert.equal(result.findings.length, 0);
+    assert.equal(result.error, 'failed to parse semgrep output');
+});
+test('parseSemgrepOutput accepts Semgrep status text around JSON', () => {
+    const result = parseSemgrepOutput(`Scan Status
+{"paths":{"scanned":["a.py"]},"results":[]}
+Scan Summary`);
+    assert.equal(result.available, true);
+    assert.equal(result.filesScanned, 1);
+    assert.equal(result.findings.length, 0);
+});
+//# sourceMappingURL=semgrep.test.js.map

package/dist/infra/semgrep.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semgrep.test.js","sourceRoot":"","sources":["../../src/infra/semgrep.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAC/C,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE;QACjD,OAAO,EAAE,CAAC;gBACR,QAAQ,EAAE,uCAAuC;gBACjD,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;gBACnB,KAAK,EAAE;oBACL,OAAO,EAAE,eAAe;oBACxB,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;iBACnC;aACF,CAAC;KACH,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAE/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,MAAM,GAAG,kBAAkB,CAAC;;aAEvB,CAAC,CAAC;IAEb,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC"}

package/dist/infra/tmux.d.ts

@@ -0,0 +1,9 @@
+export declare class TmuxManager {
+    readonly available: boolean;
+    constructor();
+    createSession(sessionName: string): boolean;
+    createWindow(sessionName: string, windowName: string): string | null;
+    writeToPane(target: string, text: string): void;
+    killSession(sessionName: string): void;
+}
+//# sourceMappingURL=tmux.d.ts.map

package/dist/infra/tmux.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tmux.d.ts","sourceRoot":"","sources":["../../src/infra/tmux.ts"],"names":[],"mappings":"AAYA,qBAAa,WAAW;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;;IAM5B,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAM3C,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAOpE,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAQ/C,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;CAIvC"}

package/dist/infra/tmux.js

@@ -0,0 +1,42 @@
+import { spawnSync } from 'child_process';
+function tmux(args) {
+    const result = spawnSync('tmux', args, { encoding: 'utf8' });
+    return { ok: result.status === 0, stdout: result.stdout ?? '' };
+}
+function isTmuxAvailable() {
+    const result = spawnSync('which', ['tmux'], { encoding: 'utf8' });
+    return result.status === 0;
+}
+export class TmuxManager {
+    available;
+    constructor() {
+        this.available = isTmuxAvailable();
+    }
+    createSession(sessionName) {
+        if (!this.available)
+            return false;
+        const { ok } = tmux(['new-session', '-d', '-s', sessionName]);
+        return ok;
+    }
+    createWindow(sessionName, windowName) {
+        if (!this.available)
+            return null;
+        const target = `${sessionName}:${windowName}`;
+        tmux(['new-window', '-t', sessionName, '-n', windowName]);
+        return target;
+    }
+    writeToPane(target, text) {
+        if (!this.available)
+            return;
+        // Send text line by line; each line is a separate send-keys call
+        for (const line of text.split('\n')) {
+            tmux(['send-keys', '-t', target, line, 'Enter']);
+        }
+    }
+    killSession(sessionName) {
+        if (!this.available)
+            return;
+        tmux(['kill-session', '-t', sessionName]);
+    }
+}
+//# sourceMappingURL=tmux.js.map

package/dist/infra/tmux.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tmux.js","sourceRoot":"","sources":["../../src/infra/tmux.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,SAAS,IAAI,CAAC,IAAc;IAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,OAAO,WAAW;IACb,SAAS,CAAU;IAE5B;QACE,IAAI,CAAC,SAAS,GAAG,eAAe,EAAE,CAAC;IACrC,CAAC;IAED,aAAa,CAAC,WAAmB;QAC/B,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAClC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,YAAY,CAAC,WAAmB,EAAE,UAAkB;QAClD,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,MAAM,GAAG,GAAG,WAAW,IAAI,UAAU,EAAE,CAAC;QAC9C,IAAI,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,WAAW,CAAC,MAAc,EAAE,IAAY;QACtC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,iEAAiE;QACjE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,WAAW,CAAC,WAAmB;QAC7B,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/infra/worktree.d.ts

@@ -0,0 +1,9 @@
+export interface WorktreeInfo {
+    path: string;
+    branch: string;
+    head: string;
+}
+export declare function createWorktree(cwd: string, agentName: string, taskId: string): string;
+export declare function removeWorktree(cwd: string, agentName: string, taskId: string): void;
+export declare function listWorktrees(cwd: string): WorktreeInfo[];
+//# sourceMappingURL=worktree.d.ts.map

package/dist/infra/worktree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree.d.ts","sourceRoot":"","sources":["../../src/infra/worktree.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAgBD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAYrF;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CASnF;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,EAAE,CAczD"}

package/dist/infra/worktree.js

@@ -0,0 +1,51 @@
+import { spawnSync } from 'child_process';
+import { join } from 'path';
+import { existsSync } from 'fs';
+function git(cwd, args) {
+    const result = spawnSync('git', args, { cwd, encoding: 'utf8' });
+    return { ok: result.status === 0, stdout: result.stdout ?? '', stderr: result.stderr ?? '' };
+}
+function assertGit(cwd, args) {
+    const result = git(cwd, args);
+    if (!result.ok) {
+        const details = result.stderr.trim() || result.stdout.trim() || 'unknown git error';
+        throw new Error(`git ${args.join(' ')} failed: ${details}`);
+    }
+    return result.stdout;
+}
+export function createWorktree(cwd, agentName, taskId) {
+    const shortId = taskId.slice(0, 8);
+    const name = `${agentName}-${shortId}`;
+    const worktreePath = join(cwd, '.worktrees', name);
+    const branch = `ai/${name}`;
+    if (existsSync(worktreePath))
+        return worktreePath;
+    assertGit(cwd, ['rev-parse', '--verify', 'HEAD']);
+    assertGit(cwd, ['worktree', 'add', worktreePath, '-b', branch, 'HEAD']);
+    return worktreePath;
+}
+export function removeWorktree(cwd, agentName, taskId) {
+    const shortId = taskId.slice(0, 8);
+    const name = `${agentName}-${shortId}`;
+    const worktreePath = join(cwd, '.worktrees', name);
+    if (!existsSync(worktreePath))
+        return;
+    assertGit(cwd, ['worktree', 'remove', '--force', worktreePath]);
+    assertGit(cwd, ['branch', '-D', `ai/${name}`]);
+}
+export function listWorktrees(cwd) {
+    const { ok, stdout } = git(cwd, ['worktree', 'list', '--porcelain']);
+    if (!ok)
+        return [];
+    const entries = stdout.trim().split('\n\n');
+    return entries
+        .filter(Boolean)
+        .map((entry) => {
+        const lines = entry.split('\n');
+        const path = lines[0]?.replace('worktree ', '') ?? '';
+        const head = lines[1]?.replace('HEAD ', '') ?? '';
+        const branch = lines[2]?.replace('branch refs/heads/', '') ?? '';
+        return { path, head, branch };
+    });
+}
+//# sourceMappingURL=worktree.js.map

package/dist/infra/worktree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree.js","sourceRoot":"","sources":["../../src/infra/worktree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAQhC,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc;IACtC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,IAAc;IAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,mBAAmB,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,SAAiB,EAAE,MAAc;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;IAE5B,IAAI,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC;IAElD,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,SAAS,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAExE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,SAAiB,EAAE,MAAc;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;IAEnD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO;IAEtC,SAAS,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,OAAO;SACX,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/prompts/developer.d.ts

@@ -0,0 +1,2 @@
+export declare function buildDeveloperPrompt(): string;
+//# sourceMappingURL=developer.d.ts.map

package/dist/prompts/developer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"developer.d.ts","sourceRoot":"","sources":["../../src/prompts/developer.ts"],"names":[],"mappings":"AAAA,wBAAgB,oBAAoB,IAAI,MAAM,CAkC7C"}

package/dist/prompts/developer.js

@@ -0,0 +1,36 @@
+export function buildDeveloperPrompt() {
+    return `# Role: Developer Agent
+
+You are the Developer in a multi-agent AI engineering system.
+
+## Allowed Tools
+- Read — to understand the current code
+- Edit, Write — to apply the fix
+- Bash — ONLY to run: git diff HEAD (to capture the final diff)
+- NO test execution, NO build commands
+
+## Constraints
+- Apply the MINIMAL fix required — no refactoring, no unrelated changes
+- Do NOT run tests or claim they pass
+- Do NOT claim the fix is verified or the bug is resolved
+- Do NOT make changes outside the files identified in the evidence
+- Do NOT read more than 500 lines from any single file; use focused reads with offset/limit
+
+## Fix Steps
+1. Read the affected files to understand current code, capped at 500 lines per file
+2. Apply the targeted fix using Edit or Write
+3. Run: git diff HEAD to capture the diff
+4. Output the patch JSON
+
+## Output
+Your final response must be ONLY a valid JSON object — no prose, no markdown fences:
+{
+  "filesChanged": string[],
+  "diff": string,
+  "buildCommand": string,
+  "testCommand": string,
+  "description": string,
+  "risksIntroduced": string[]
+}`;
+}
+//# sourceMappingURL=developer.js.map

package/dist/prompts/developer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"developer.js","sourceRoot":"","sources":["../../src/prompts/developer.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,oBAAoB;IAClC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgCP,CAAC;AACH,CAAC"}

package/dist/prompts/explain.d.ts

@@ -0,0 +1,3 @@
+export type ExplainMode = 'explain' | 'impact' | 'onboard';
+export declare function buildExplainPrompt(mode: ExplainMode): string;
+//# sourceMappingURL=explain.d.ts.map

package/dist/prompts/explain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../../src/prompts/explain.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE3D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAsC5D"}

package/dist/prompts/explain.js

@@ -0,0 +1,38 @@
+export function buildExplainPrompt(mode) {
+    if (mode === 'explain') {
+        return `You are a senior software engineer explaining code to a teammate.
+Given a file and its context (imports, importers, symbols, hotspot score), explain:
+1. What this module does and its primary responsibility
+2. Why it is important (based on fanIn — how many other modules depend on it)
+3. Its key functions/classes and what they do
+4. Potential risks or issues you observe
+5. How you would refactor it if needed
+
+Be concrete. Reference actual function names and patterns you see. Do NOT invent anything not in the context.
+Output in clear prose with section headers. Keep it under 400 words.`;
+    }
+    if (mode === 'impact') {
+        return `You are a senior software engineer performing impact analysis.
+Given a file and a list of files that import it (direct dependents) and their dependents (transitive),
+explain:
+1. What breaks immediately if this file's API changes
+2. Which modules have the highest coupling risk
+3. Which tests would fail
+4. The blast radius: how many total modules are affected
+5. Safe refactoring strategy to reduce the blast radius
+
+Be specific. Reference actual file names and dependency chains. Output in clear prose under 300 words.`;
+    }
+    // onboard
+    return `You are a senior engineer writing an onboarding guide for a new developer joining the project.
+Given the repository structure, hotspot files, entry points, and architecture patterns:
+1. Explain what this project does in 2-3 sentences
+2. Describe the main architectural layers and their directories
+3. Identify the 3-5 most important files a new developer must understand first
+4. Describe the main data flow: how a request enters and what happens
+5. List 3-5 things to avoid or be careful about
+
+Be concrete and practical. Focus on what helps someone be productive in week 1.
+Output in clear markdown with headers. Keep it under 500 words.`;
+}
+//# sourceMappingURL=explain.js.map

package/dist/prompts/explain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.js","sourceRoot":"","sources":["../../src/prompts/explain.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,kBAAkB,CAAC,IAAiB;IAClD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;;;;;;;;;qEAS0D,CAAC;IACpE,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO;;;;;;;;;uGAS4F,CAAC;IACtG,CAAC;IAED,UAAU;IACV,OAAO;;;;;;;;;gEASuD,CAAC;AACjE,CAAC"}

package/dist/prompts/investigator.d.ts

@@ -0,0 +1,3 @@
+export type InvestigatorDomain = 'backend' | 'frontend' | 'bug-history';
+export declare function buildInvestigatorPrompt(domain: InvestigatorDomain): string;
+//# sourceMappingURL=investigator.d.ts.map

package/dist/prompts/investigator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigator.d.ts","sourceRoot":"","sources":["../../src/prompts/investigator.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,UAAU,GAAG,aAAa,CAAC;AAQxE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAuC1E"}

package/dist/prompts/investigator.js

@@ -0,0 +1,46 @@
+const DOMAIN_FOCUS = {
+    backend: 'Focus on server-side code: APIs, database queries, authentication, business logic, background jobs.',
+    frontend: 'Focus on client-side code: UI components, state management, network requests, rendering logic.',
+    'bug-history': 'Focus on git history, past incidents, and known failure patterns. Use Bash to run: git log --oneline -50, git log --grep="<keyword>" -10',
+};
+export function buildInvestigatorPrompt(domain) {
+    return `# Role: Investigator Agent — ${domain}
+
+You are an Investigator in a multi-agent AI engineering system.
+
+## Domain Focus
+${DOMAIN_FOCUS[domain]}
+
+## Allowed Tools
+- Read, Grep, Glob — to explore code
+- Bash — ONLY for read-only commands: grep, find, git log, git blame, cat, ls
+- NO Write or Edit
+
+## Constraints
+- Do NOT modify any files
+- Do NOT suggest fixes or implementations
+- Do NOT claim reproduced: true without concrete evidence (real logs or stack trace)
+- Do NOT set confidence > 80 without both a stack trace AND a file+line reference
+- If no evidence found: reproduced: false, confidence < 30
+- Do NOT read more than 500 lines from any single file; use focused reads with offset/limit
+
+## Investigation Steps
+1. Read the files listed in the plan, capped at 500 lines per file
+2. Use Grep to find error patterns, exception handling, edge cases
+3. Use Bash (git log, git blame) to check recent changes
+4. Look for the specific condition that causes the bug
+5. Output evidence JSON
+
+## Output
+Your final response must be ONLY a valid JSON object — no prose, no markdown fences:
+{
+  "reproduced": boolean,
+  "confidence": number (0-100),
+  "logs": string[],
+  "stackTrace": string | null,
+  "files": [{ "path": string, "line": number, "snippet": string }],
+  "rootCause": string | null,
+  "summary": string
+}`;
+}
+//# sourceMappingURL=investigator.js.map

package/dist/prompts/investigator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigator.js","sourceRoot":"","sources":["../../src/prompts/investigator.ts"],"names":[],"mappings":"AAEA,MAAM,YAAY,GAAuC;IACvD,OAAO,EAAE,qGAAqG;IAC9G,QAAQ,EAAE,gGAAgG;IAC1G,aAAa,EAAE,0IAA0I;CAC1J,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,MAA0B;IAChE,OAAO,gCAAgC,MAAM;;;;;EAK7C,YAAY,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgCpB,CAAC;AACH,CAAC"}

package/dist/prompts/planner.d.ts

@@ -0,0 +1,2 @@
+export declare function buildPlannerPrompt(): string;
+//# sourceMappingURL=planner.d.ts.map

package/dist/prompts/planner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.d.ts","sourceRoot":"","sources":["../../src/prompts/planner.ts"],"names":[],"mappings":"AAAA,wBAAgB,kBAAkB,IAAI,MAAM,CAmC3C"}

package/dist/prompts/planner.js

@@ -0,0 +1,37 @@
+export function buildPlannerPrompt() {
+    return `# Role: Planner Agent
+
+You are the Planner in a multi-agent AI engineering system.
+
+## Allowed Tools
+- Read, Glob, Grep — to explore the codebase
+- NO Write, Edit, or Bash
+
+## Constraints
+- Do NOT modify any files
+- Do NOT write code
+- Do NOT claim anything is fixed
+- Do NOT read more than 500 lines from any single file; use focused reads with offset/limit
+
+## Task
+Explore the project structure, understand the bug or task, identify the relevant modules and files, and produce a structured plan.
+
+Steps:
+1. Use Glob to get the project file tree
+2. Use Grep to find relevant code patterns
+3. Use Read to inspect key files, capped at 500 lines per file
+4. Output the plan JSON
+
+## Output
+Your final response must be ONLY a valid JSON object — no prose, no markdown fences:
+{
+  "taskId": string,
+  "summary": string,
+  "phases": [{ "name": string, "description": string, "targetFiles": string[], "agentType": "investigator"|"developer"|"reviewer"|"qa"|"security" }],
+  "riskLevel": "low"|"medium"|"high",
+  "estimatedFiles": string[],
+  "constraints": string[],
+  "relevantModules": string[]
+}`;
+}
+//# sourceMappingURL=planner.js.map

package/dist/prompts/planner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.js","sourceRoot":"","sources":["../../src/prompts/planner.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,kBAAkB;IAChC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiCP,CAAC;AACH,CAAC"}

package/dist/prompts/qa.d.ts

@@ -0,0 +1,2 @@
+export declare function buildQAPrompt(): string;
+//# sourceMappingURL=qa.d.ts.map

package/dist/prompts/qa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qa.d.ts","sourceRoot":"","sources":["../../src/prompts/qa.ts"],"names":[],"mappings":"AAAA,wBAAgB,aAAa,IAAI,MAAM,CAmCtC"}

package/dist/prompts/qa.js

@@ -0,0 +1,37 @@
+export function buildQAPrompt() {
+    return `# Role: QA Agent
+
+You are the QA agent in a multi-agent AI engineering system.
+
+## Allowed Tools
+- Bash — to run build, test, lint commands and attempt reproduction
+- Read — to inspect test output files if needed
+- NO Write or Edit
+
+## Constraints
+- buildOk: true ONLY if the build command actually exits 0
+- testsOk: true ONLY if the test command actually exits 0
+- reproductionStillFails: true means the original bug is STILL present (fix failed)
+- reproductionStillFails: false means the original bug no longer occurs (fix worked)
+- testOutput and buildOutput must contain REAL command output, not summaries
+- Do NOT read more than 500 lines from any single file; use focused reads with offset/limit
+
+## QA Steps
+1. Run the build command with Bash, capture stdout+stderr
+2. Run the test command with Bash, capture stdout+stderr
+3. Attempt to reproduce the original bug based on the reproduction steps
+4. Output the QA result JSON with real outputs
+
+## Output
+Your final response must be ONLY a valid JSON object — no prose, no markdown fences:
+{
+  "buildOk": boolean,
+  "testsOk": boolean,
+  "lintOk": boolean,
+  "reproductionStillFails": boolean,
+  "testOutput": string,
+  "buildOutput": string,
+  "failureReason": string | null
+}`;
+}
+//# sourceMappingURL=qa.js.map

package/dist/prompts/qa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qa.js","sourceRoot":"","sources":["../../src/prompts/qa.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,aAAa;IAC3B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiCP,CAAC;AACH,CAAC"}

package/dist/prompts/reviewer.d.ts

@@ -0,0 +1,2 @@
+export declare function buildReviewerPrompt(): string;
+//# sourceMappingURL=reviewer.d.ts.map

package/dist/prompts/reviewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer.d.ts","sourceRoot":"","sources":["../../src/prompts/reviewer.ts"],"names":[],"mappings":"AAAA,wBAAgB,mBAAmB,IAAI,MAAM,CAkC5C"}

package/dist/prompts/reviewer.js

@@ -0,0 +1,36 @@
+export function buildReviewerPrompt() {
+    return `# Role: Reviewer Agent
+
+You are the Reviewer in a multi-agent AI engineering system.
+
+## Allowed Tools
+- Read, Grep, Glob — to inspect code in context
+- NO Write, Edit, or Bash
+
+## Constraints
+- Do NOT modify any files
+- approved: false if any finding has severity "critical" or "high"
+- blockers must be non-empty when approved is false
+- Do NOT read more than 500 lines from any single file; use focused reads with offset/limit
+
+## Review Personas
+Check the patch through these 10 concise personas:
+backend, frontend, QA, security, DevOps, data, performance, UX, architecture, maintainer.
+
+## Review Steps
+1. Read each changed file to understand context around the diff, capped at 500 lines per file
+2. Check for: regressions, edge cases, null/undefined handling, error paths
+3. Check if the fix actually addresses the root cause
+4. Output the review JSON
+
+## Output
+Your final response must be ONLY a valid JSON object — no prose, no markdown fences:
+{
+  "approved": boolean,
+  "findings": [{ "severity": "critical"|"high"|"medium"|"low"|"info", "file": string, "line": number, "description": string, "suggestion": string }],
+  "regressionRisk": "none"|"low"|"medium"|"high",
+  "summary": string,
+  "blockers": string[]
+}`;
+}
+//# sourceMappingURL=reviewer.js.map

package/dist/prompts/reviewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer.js","sourceRoot":"","sources":["../../src/prompts/reviewer.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,mBAAmB;IACjC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgCP,CAAC;AACH,CAAC"}