@build-astron-co/nimbus 0.2.0 → 0.4.0

package/dist/src/agent/subagents/infra.js

@@ -0,0 +1,52 @@
+/**
+ * Infrastructure Analysis Subagent
+ *
+ * Reads IaC files, discovers cloud resources, detects drift, and estimates
+ * costs. Uses a mid-tier model for deeper reasoning on infrastructure
+ * configurations.
+ *
+ * @module agent/subagents/infra
+ */
+import { Subagent } from './base';
+import { readFileTool, globTool, grepTool, listDirTool } from '../../tools/schemas/standard';
+import { cloudDiscoverTool, costEstimateTool, driftDetectTool } from '../../tools/schemas/devops';
+// ---------------------------------------------------------------------------
+// Configuration
+// ---------------------------------------------------------------------------
+const infraConfig = {
+    name: 'infra',
+    description: 'Infrastructure analysis — reads IaC files, discovers cloud resources, detects drift, estimates costs.',
+    systemPrompt: `You are an infrastructure analysis subagent. You specialize in cloud infrastructure.
+
+Your capabilities:
+- Read Terraform, Kubernetes, and Helm configuration files
+- Discover cloud resources (AWS, GCP, Azure)
+- Detect infrastructure drift
+- Estimate costs
+
+Rules:
+- Analyze thoroughly but efficiently
+- Report findings with specific file paths and line numbers
+- Flag any security concerns or misconfigurations
+- Do NOT make changes — analysis only
+- Do NOT spawn further subagents`,
+    tools: [
+        readFileTool,
+        globTool,
+        grepTool,
+        listDirTool,
+        cloudDiscoverTool,
+        costEstimateTool,
+        driftDetectTool,
+    ],
+    model: 'anthropic/claude-sonnet-4-20250514',
+    maxTurns: 20,
+};
+// ---------------------------------------------------------------------------
+// Factory
+// ---------------------------------------------------------------------------
+/** Create a new infrastructure analysis subagent instance. */
+export function createInfraSubagent() {
+    return new Subagent(infraConfig);
+}
+export { infraConfig };

package/dist/src/agent/subagents/security.js

@@ -0,0 +1,60 @@
+/**
+ * Security Scanning Subagent
+ *
+ * Scans codebases for vulnerabilities, leaked secrets, and
+ * misconfigurations. Reports findings with severity levels and
+ * remediation guidance.
+ *
+ * @module agent/subagents/security
+ */
+import { Subagent } from './base';
+import { readFileTool, globTool, grepTool, listDirTool } from '../../tools/schemas/standard';
+// ---------------------------------------------------------------------------
+// Security Patterns
+// ---------------------------------------------------------------------------
+/**
+ * Common security anti-patterns the subagent is instructed to scan for.
+ * These are embedded in the system prompt so the LLM knows what to look for.
+ */
+const SECURITY_PATTERNS = [
+    'AWS access keys (AKIA...)',
+    'Private keys (.pem, .key)',
+    'Hardcoded passwords',
+    'Open security groups (0.0.0.0/0)',
+    'Unencrypted S3 buckets',
+    'Missing HTTPS/TLS',
+    'SQL injection vectors',
+    'XSS vulnerabilities',
+    'Exposed secrets in env files',
+    'Overly permissive IAM policies',
+];
+// ---------------------------------------------------------------------------
+// Configuration
+// ---------------------------------------------------------------------------
+const securityConfig = {
+    name: 'security',
+    description: 'Security auditor — scans for vulnerabilities, leaked secrets, and misconfigurations.',
+    systemPrompt: `You are a security auditor subagent. You scan codebases for security issues.
+
+Scan for:
+${SECURITY_PATTERNS.map(p => `- ${p}`).join('\n')}
+
+Rules:
+- Search systematically — use grep for patterns, glob to find config files
+- Report findings with severity levels (CRITICAL, HIGH, MEDIUM, LOW)
+- Include file paths and line numbers for every finding
+- Suggest remediation steps
+- Do NOT modify any files
+- Do NOT spawn further subagents`,
+    tools: [readFileTool, globTool, grepTool, listDirTool],
+    model: 'anthropic/claude-sonnet-4-20250514',
+    maxTurns: 20,
+};
+// ---------------------------------------------------------------------------
+// Factory
+// ---------------------------------------------------------------------------
+/** Create a new security scanning subagent instance. */
+export function createSecuritySubagent() {
+    return new Subagent(securityConfig);
+}
+export { securityConfig };