@jwikman/bc-code-intelligence-mcp 1.5.7-dev.1

package/dist/security/access-control.js

@@ -0,0 +1,353 @@
+/**
+ * Security & Access Control System
+ *
+ * Enterprise-grade security features including authentication, authorization,
+ * rate limiting, input validation, and audit logging for production deployments.
+ */
+import { createHash } from 'crypto';
+import { EventEmitter } from 'events';
+export class SecurityManager extends EventEmitter {
+    config;
+    apiKeys = new Map();
+    rateLimitBuckets = new Map();
+    activeSessions = new Map();
+    auditLog = [];
+    trustedSourceCache = new Map();
+    constructor(config) {
+        super();
+        this.config = config;
+        this.startPeriodicCleanup();
+        if (config.enable_audit_logging) {
+            console.log('🔒 Security manager initialized with audit logging');
+        }
+        else {
+            console.log('🔒 Security manager initialized');
+        }
+    }
+    /**
+     * Authenticate request and validate permissions
+     */
+    async authenticateRequest(apiKey, requestOrigin, ipAddress, requiredPermissions = []) {
+        const context = {
+            api_key: apiKey,
+            origin: requestOrigin,
+            ip_address: ipAddress
+        };
+        try {
+            // Check if authentication is required
+            if (this.config.enable_authentication) {
+                if (!apiKey) {
+                    this.auditSecurityEvent('auth_failure', 'medium', context, { reason: 'missing_api_key' });
+                    return { success: false, error: 'API key required' };
+                }
+                // Validate API key
+                const keyInfo = this.apiKeys.get(apiKey);
+                if (!keyInfo) {
+                    this.auditSecurityEvent('auth_failure', 'high', context, { reason: 'invalid_api_key' });
+                    return { success: false, error: 'Invalid API key' };
+                }
+                // Update last used timestamp
+                keyInfo.last_used = Date.now();
+                // Check permissions
+                const hasPermissions = requiredPermissions.every(perm => keyInfo.permissions.includes(perm));
+                if (!hasPermissions) {
+                    this.auditSecurityEvent('access_denied', 'medium', context, {
+                        reason: 'insufficient_permissions',
+                        required: requiredPermissions,
+                        available: keyInfo.permissions
+                    });
+                    return { success: false, error: 'Insufficient permissions' };
+                }
+                context.permissions = keyInfo.permissions;
+            }
+            else {
+                context.permissions = ['*']; // Full access when authentication disabled
+            }
+            // Validate origin if configured
+            if (this.config.allowed_origins && requestOrigin) {
+                const isAllowed = this.config.allowed_origins.some(origin => origin === '*' || origin === requestOrigin || requestOrigin.endsWith(origin));
+                if (!isAllowed) {
+                    this.auditSecurityEvent('access_denied', 'high', context, { reason: 'unauthorized_origin' });
+                    return { success: false, error: 'Origin not allowed' };
+                }
+            }
+            // Create user context
+            const userContext = {
+                user_id: this.generateUserId(apiKey, ipAddress),
+                api_key: apiKey,
+                permissions: context.permissions,
+                rate_limit_remaining: this.getRemainingRequests(context.user_id || ipAddress || 'anonymous'),
+                session_expires: Date.now() + (this.config.session_timeout_minutes * 60 * 1000),
+                origin: requestOrigin,
+                ip_address: ipAddress
+            };
+            this.auditSecurityEvent('auth_success', 'low', userContext, { permissions: userContext.permissions });
+            return { success: true, userContext };
+        }
+        catch (error) {
+            this.auditSecurityEvent('auth_failure', 'high', context, {
+                error: error instanceof Error ? error.message : String(error)
+            });
+            return { success: false, error: 'Authentication failed' };
+        }
+    }
+    /**
+     * Check rate limits for a user/IP
+     */
+    checkRateLimit(identifier) {
+        if (!this.config.enable_rate_limiting) {
+            return {
+                requests_made: 0,
+                requests_remaining: this.config.max_requests_per_minute,
+                reset_time: Date.now() + 60000,
+                is_limited: false
+            };
+        }
+        const now = Date.now();
+        const bucket = this.rateLimitBuckets.get(identifier);
+        // Initialize or reset bucket if needed
+        if (!bucket || now > bucket.reset_time) {
+            const newBucket = {
+                count: 1,
+                reset_time: now + 60000 // 1 minute window
+            };
+            this.rateLimitBuckets.set(identifier, newBucket);
+            return {
+                requests_made: 1,
+                requests_remaining: this.config.max_requests_per_minute - 1,
+                reset_time: newBucket.reset_time,
+                is_limited: false
+            };
+        }
+        // Increment request count
+        bucket.count++;
+        const isLimited = bucket.count > this.config.max_requests_per_minute;
+        if (isLimited) {
+            this.auditSecurityEvent('rate_limit_exceeded', 'medium', { user_id: identifier }, {
+                requests_made: bucket.count,
+                limit: this.config.max_requests_per_minute
+            });
+        }
+        return {
+            requests_made: bucket.count,
+            requests_remaining: Math.max(0, this.config.max_requests_per_minute - bucket.count),
+            reset_time: bucket.reset_time,
+            is_limited: isLimited
+        };
+    }
+    /**
+     * Validate content security for layer sources
+     */
+    async validateContentSecurity(sourceUrl, sourceType, content) {
+        const warnings = [];
+        const blockedContent = [];
+        if (!this.config.enable_content_security) {
+            return { secure: true, warnings: [] };
+        }
+        // Check if source is trusted
+        const isTrusted = await this.isSourceTrusted(sourceUrl);
+        if (!isTrusted) {
+            warnings.push(`Untrusted source: ${sourceUrl}`);
+        }
+        // Scan content for suspicious patterns if provided
+        if (content) {
+            const suspiciousPatterns = [
+                /javascript:/gi,
+                /<script/gi,
+                /eval\s*\(/gi,
+                /document\.cookie/gi,
+                /window\.location/gi,
+                /\$\{.*\}/gi, // Template injection
+                /<%.*%>/gi // Server-side template injection
+            ];
+            for (const pattern of suspiciousPatterns) {
+                const matches = content.match(pattern);
+                if (matches) {
+                    blockedContent.push(...matches);
+                    warnings.push(`Suspicious content pattern detected: ${pattern.toString()}`);
+                }
+            }
+        }
+        // Additional URL validation
+        if (sourceUrl) {
+            // Block localhost and private networks in production
+            if (process.env.NODE_ENV === 'production') {
+                const privatePatterms = [
+                    /localhost/gi,
+                    /127\.0\.0\.1/gi,
+                    /192\.168\./gi,
+                    /10\./gi,
+                    /172\.(1[6-9]|2[0-9]|3[0-1])\./gi
+                ];
+                for (const pattern of privatePatterms) {
+                    if (pattern.test(sourceUrl)) {
+                        warnings.push(`Private network access blocked: ${sourceUrl}`);
+                        break;
+                    }
+                }
+            }
+        }
+        const secure = blockedContent.length === 0;
+        if (!secure) {
+            this.auditSecurityEvent('suspicious_activity', 'high', undefined, {
+                source_url: sourceUrl,
+                source_type: sourceType,
+                blockedContent: blockedContent,
+                warnings
+            });
+        }
+        return { secure, warnings, blockedContent };
+    }
+    /**
+     * Add or update API key with permissions
+     */
+    addApiKey(apiKey, permissions) {
+        const hashedKey = this.hashApiKey(apiKey);
+        this.apiKeys.set(hashedKey, {
+            permissions,
+            created: Date.now(),
+            last_used: 0
+        });
+        this.auditSecurityEvent('auth_success', 'low', undefined, {
+            action: 'api_key_created',
+            permissions,
+            key_hash: hashedKey.substring(0, 8) + '...' // Log partial hash for identification
+        });
+        console.log(`🔑 API key added with permissions: ${permissions.join(', ')}`);
+    }
+    /**
+     * Remove API key
+     */
+    removeApiKey(apiKey) {
+        const hashedKey = this.hashApiKey(apiKey);
+        const removed = this.apiKeys.delete(hashedKey);
+        if (removed) {
+            this.auditSecurityEvent('auth_success', 'low', undefined, {
+                action: 'api_key_removed',
+                key_hash: hashedKey.substring(0, 8) + '...'
+            });
+            console.log('🔑 API key removed');
+        }
+        return removed;
+    }
+    /**
+     * Get security audit log
+     */
+    getAuditLog(limit = 100) {
+        return this.auditLog.slice(-limit);
+    }
+    /**
+     * Get security statistics
+     */
+    getSecurityStats() {
+        const auditCounts = this.auditLog.reduce((counts, event) => {
+            counts[event.event_type] = (counts[event.event_type] || 0) + 1;
+            return counts;
+        }, {});
+        const rateLimitedUsers = Array.from(this.rateLimitBuckets.entries())
+            .filter(([_, bucket]) => bucket.count > this.config.max_requests_per_minute)
+            .length;
+        return {
+            active_api_keys: this.apiKeys.size,
+            rate_limited_users: rateLimitedUsers,
+            audit_events: this.auditLog.length,
+            suspicious_activities: auditCounts['suspicious_activity'] || 0,
+            successful_authentications: auditCounts['auth_success'] || 0,
+            failed_authentications: auditCounts['auth_failure'] || 0
+        };
+    }
+    /**
+     * Export security configuration (sanitized)
+     */
+    exportConfig() {
+        const { api_key_required, ...safeConfig } = this.config;
+        return {
+            ...safeConfig,
+            api_keys_configured: this.apiKeys.size
+        };
+    }
+    /**
+     * Shutdown security manager
+     */
+    shutdown() {
+        this.apiKeys.clear();
+        this.rateLimitBuckets.clear();
+        this.activeSessions.clear();
+        this.trustedSourceCache.clear();
+        console.log('🔒 Security manager shutdown complete');
+    }
+    // Private helper methods
+    hashApiKey(apiKey) {
+        return createHash('sha256').update(apiKey).digest('hex');
+    }
+    generateUserId(apiKey, ipAddress) {
+        const identifier = apiKey || ipAddress || 'anonymous';
+        return createHash('md5').update(identifier).digest('hex');
+    }
+    getRemainingRequests(identifier) {
+        const bucket = this.rateLimitBuckets.get(identifier);
+        if (!bucket || Date.now() > bucket.reset_time) {
+            return this.config.max_requests_per_minute;
+        }
+        return Math.max(0, this.config.max_requests_per_minute - bucket.count);
+    }
+    async isSourceTrusted(sourceUrl) {
+        // Check cache first
+        const cached = this.trustedSourceCache.get(sourceUrl);
+        if (cached !== undefined)
+            return cached;
+        // Check against trusted sources list
+        const isTrusted = this.config.trusted_sources.some(trusted => sourceUrl.includes(trusted) || sourceUrl.startsWith(trusted));
+        // Cache result for 1 hour
+        this.trustedSourceCache.set(sourceUrl, isTrusted);
+        setTimeout(() => this.trustedSourceCache.delete(sourceUrl), 3600000);
+        return isTrusted;
+    }
+    auditSecurityEvent(eventType, severity, userContext, details = {}) {
+        if (!this.config.enable_audit_logging)
+            return;
+        const event = {
+            event_type: eventType,
+            timestamp: Date.now(),
+            user_context: userContext,
+            details,
+            severity
+        };
+        this.auditLog.push(event);
+        // Emit event for external listeners
+        this.emit('security_event', event);
+        // Keep audit log within reasonable size
+        if (this.auditLog.length > 10000) {
+            this.auditLog = this.auditLog.slice(-5000); // Keep last 5000 events
+        }
+        // Log critical events immediately
+        if (severity === 'critical' || severity === 'high') {
+            console.warn(`🚨 Security event [${severity.toUpperCase()}]: ${eventType}`, details);
+        }
+    }
+    startPeriodicCleanup() {
+        // Clean up old rate limit buckets and audit logs every hour
+        setInterval(() => {
+            const now = Date.now();
+            // Clean expired rate limit buckets
+            for (const [key, bucket] of this.rateLimitBuckets.entries()) {
+                if (now > bucket.reset_time) {
+                    this.rateLimitBuckets.delete(key);
+                }
+            }
+            // Clean old audit logs based on retention policy
+            if (this.config.enable_audit_logging && this.config.audit_log_retention_days > 0) {
+                const cutoffTime = now - (this.config.audit_log_retention_days * 24 * 60 * 60 * 1000);
+                this.auditLog = this.auditLog.filter(event => event.timestamp > cutoffTime);
+            }
+            // Clean expired sessions
+            for (const [sessionId, session] of this.activeSessions.entries()) {
+                const sessionTimeout = this.config.session_timeout_minutes * 60 * 1000;
+                if (now - session.last_activity > sessionTimeout) {
+                    this.activeSessions.delete(sessionId);
+                }
+            }
+        }, 3600000); // Run every hour
+    }
+}
+//# sourceMappingURL=access-control.js.map

package/dist/security/access-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.js","sourceRoot":"","sources":["../../src/security/access-control.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAA+B,MAAM,QAAQ,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAwCtC,MAAM,OAAO,eAAgB,SAAQ,YAAY;IAOlB;IANrB,OAAO,GAAG,IAAI,GAAG,EAAyE,CAAC;IAC3F,gBAAgB,GAAG,IAAI,GAAG,EAAiD,CAAC;IAC5E,cAAc,GAAG,IAAI,GAAG,EAAuE,CAAC;IAChG,QAAQ,GAAoB,EAAE,CAAC;IAC/B,kBAAkB,GAAG,IAAI,GAAG,EAAmB,CAAC;IAExD,YAA6B,MAAsB;QACjD,KAAK,EAAE,CAAC;QADmB,WAAM,GAAN,MAAM,CAAgB;QAGjD,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE5B,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,MAAe,EACf,aAAsB,EACtB,SAAkB,EAClB,sBAAgC,EAAE;QAElC,MAAM,OAAO,GAAyB;YACpC,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,aAAa;YACrB,UAAU,EAAE,SAAS;SACtB,CAAC;QAEF,IAAI,CAAC;YACH,sCAAsC;YACtC,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;oBAC1F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;gBACvD,CAAC;gBAED,mBAAmB;gBACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;oBACxF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;gBACtD,CAAC;gBAED,6BAA6B;gBAC7B,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAE/B,oBAAoB;gBACpB,MAAM,cAAc,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7F,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE;wBAC1D,MAAM,EAAE,0BAA0B;wBAClC,QAAQ,EAAE,mBAAmB;wBAC7B,SAAS,EAAE,OAAO,CAAC,WAAW;qBAC/B,CAAC,CAAC;oBACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;gBAC/D,CAAC;gBAED,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,2CAA2C;YAC1E,CAAC;YAED,gCAAgC;YAChC,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,aAAa,EAAE,CAAC;gBACjD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAC1D,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,aAAa,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC7E,CAAC;gBAEF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;oBAC7F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;gBACzD,CAAC;YACH,CAAC;YAED,sBAAsB;YACtB,MAAM,WAAW,GAAgB;gBAC/B,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC;gBAC/C,OAAO,EAAE,MAAM;gBACf,WAAW,EAAE,OAAO,CAAC,WAAY;gBACjC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,IAAI,WAAW,CAAC;gBAC5F,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;gBAC/E,MAAM,EAAE,aAAa;gBACrB,UAAU,EAAE,SAAS;aACtB,CAAC;YAEF,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;YAEtG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAExC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE;gBACvD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YAEH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,UAAkB;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACtC,OAAO;gBACL,aAAa,EAAE,CAAC;gBAChB,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB;gBACvD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC9B,UAAU,EAAE,KAAK;aAClB,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAErD,uCAAuC;QACvC,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG;gBAChB,KAAK,EAAE,CAAC;gBACR,UAAU,EAAE,GAAG,GAAG,KAAK,CAAC,kBAAkB;aAC3C,CAAC;YACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAEjD,OAAO;gBACL,aAAa,EAAE,CAAC;gBAChB,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB,GAAG,CAAC;gBAC3D,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,UAAU,EAAE,KAAK;aAClB,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;QAErE,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE;gBAChF,aAAa,EAAE,MAAM,CAAC,KAAK;gBAC3B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,aAAa,EAAE,MAAM,CAAC,KAAK;YAC3B,kBAAkB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB,GAAG,MAAM,CAAC,KAAK,CAAC;YACnF,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,SAAS;SACtB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB,CAC3B,SAAiB,EACjB,UAAkB,EAClB,OAAgB;QAEhB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;YACzC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACxC,CAAC;QAED,6BAA6B;QAC7B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,qBAAqB,SAAS,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,mDAAmD;QACnD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,kBAAkB,GAAG;gBACzB,eAAe;gBACf,WAAW;gBACX,aAAa;gBACb,oBAAoB;gBACpB,oBAAoB;gBACpB,YAAY,EAAE,qBAAqB;gBACnC,UAAU,CAAI,iCAAiC;aAChD,CAAC;YAEF,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACvC,IAAI,OAAO,EAAE,CAAC;oBACZ,cAAc,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;oBAChC,QAAQ,CAAC,IAAI,CAAC,wCAAwC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,SAAS,EAAE,CAAC;YACd,qDAAqD;YACrD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC1C,MAAM,eAAe,GAAG;oBACtB,aAAa;oBACb,gBAAgB;oBAChB,cAAc;oBACd,QAAQ;oBACR,iCAAiC;iBAClC,CAAC;gBAEF,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;oBACtC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC5B,QAAQ,CAAC,IAAI,CAAC,mCAAmC,SAAS,EAAE,CAAC,CAAC;wBAC9D,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC;QAE3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE;gBAChE,UAAU,EAAE,SAAS;gBACrB,WAAW,EAAE,UAAU;gBACvB,cAAc,EAAE,cAAc;gBAC9B,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAc,EAAE,WAAqB;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE;YAC1B,WAAW;YACX,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;YACnB,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE;YACxD,MAAM,EAAE,iBAAiB;YACzB,WAAW;YACX,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,sCAAsC;SACnF,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,sCAAsC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAc;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE/C,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE;gBACxD,MAAM,EAAE,iBAAiB;gBACzB,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;aAC5C,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAgB,GAAG;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,gBAAgB;QAQd,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACzD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC/D,OAAO,MAAM,CAAC;QAChB,CAAC,EAAE,EAA4B,CAAC,CAAC;QAEjC,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;aACjE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;aAC3E,MAAM,CAAC;QAEV,OAAO;YACL,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YAClC,kBAAkB,EAAE,gBAAgB;YACpC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAClC,qBAAqB,EAAE,WAAW,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAC9D,0BAA0B,EAAE,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC;YAC5D,sBAAsB,EAAE,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC;SACzD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY;QACV,MAAM,EAAE,gBAAgB,EAAE,GAAG,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAExD,OAAO;YACL,GAAG,UAAU;YACb,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;SACvC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAEhC,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;IAED,yBAAyB;IAEjB,UAAU,CAAC,MAAc;QAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAEO,cAAc,CAAC,MAAe,EAAE,SAAkB;QACxD,MAAM,UAAU,GAAG,MAAM,IAAI,SAAS,IAAI,WAAW,CAAC;QACtD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAEO,oBAAoB,CAAC,UAAkB;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,SAAiB;QAC7C,oBAAoB;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAExC,qCAAqC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAC3D,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAC7D,CAAC;QAEF,0BAA0B;QAC1B,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAClD,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QAErE,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,kBAAkB,CACxB,SAAsC,EACtC,QAAmC,EACnC,WAAkC,EAClC,UAA+B,EAAE;QAEjC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB;YAAE,OAAO;QAE9C,MAAM,KAAK,GAAkB;YAC3B,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,YAAY,EAAE,WAAW;YACzB,OAAO;YACP,QAAQ;SACT,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE1B,oCAAoC;QACpC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QAEnC,wCAAwC;QACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB;QACtE,CAAC;QAED,kCAAkC;QAClC,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,WAAW,EAAE,MAAM,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAEO,oBAAoB;QAC1B,4DAA4D;QAC5D,WAAW,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAEvB,mCAAmC;YACnC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC5D,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;oBAC5B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;YAED,iDAAiD;YACjD,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,IAAI,CAAC,MAAM,CAAC,wBAAwB,GAAG,CAAC,EAAE,CAAC;gBACjF,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;gBACtF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC;YAC9E,CAAC;YAED,yBAAyB;YACzB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;gBACjE,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;gBACvE,IAAI,GAAG,GAAG,OAAO,CAAC,aAAa,GAAG,cAAc,EAAE,CAAC;oBACjD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QAEH,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB;IAChC,CAAC;CACF"}

package/dist/services/code-analysis-service.d.ts

@@ -0,0 +1,72 @@
+import { CodeAnalysisParams, CodeAnalysisResult } from '../types/bc-knowledge.js';
+import { KnowledgeService } from './knowledge-service.js';
+/**
+ * AL Code Analysis Service
+ *
+ * Analyzes AL code for performance issues, anti-patterns, and optimization
+ * opportunities. Dynamically loads patterns from the layered knowledge system.
+ */
+export declare class CodeAnalysisService {
+    private knowledgeService;
+    private patternCache;
+    private cacheExpiry;
+    private readonly CACHE_TTL;
+    constructor(knowledgeService: KnowledgeService);
+    /**
+     * Load AL code patterns dynamically from knowledge base
+     */
+    private loadPatterns;
+    /**
+     * Parse regex patterns from YAML (can be strings or array)
+     */
+    private parseRegexPatterns;
+    /**
+     * Fallback patterns if knowledge base is unavailable
+     */
+    private getFallbackPatterns;
+    /**
+     * Analyze AL code for patterns, issues, and optimization opportunities
+     */
+    analyzeCode(params: CodeAnalysisParams): Promise<CodeAnalysisResult>;
+    /**
+     * Detect AL patterns in code using dynamically loaded patterns
+     */
+    private detectPatterns;
+    /**
+     * Filter patterns based on analysis type
+     */
+    private filterPatternsByAnalysisType;
+    /**
+     * Calculate severity of detected issues
+     */
+    private calculateSeverity;
+    /**
+     * Generate improvement suggestions
+     */
+    private generateSuggestion;
+    /**
+     * Find optimization opportunities based on detected patterns
+     */
+    private findOptimizationOpportunities;
+    /**
+     * Suggest relevant topics based on code analysis
+     */
+    private suggestTopics;
+    /**
+     * Extract meaningful context from code for search
+     */
+    private extractCodeContext;
+    private hasLoopedAggregation;
+    private hasSIFTUsage;
+    private hasMultipleFieldAccess;
+    private hasSetLoadFields;
+    private hasIndividualRecordOperations;
+    private hasManualCalculations;
+    private hasSecurityRisks;
+    private hasCodeQualityIssues;
+    private hasPoorErrorHandling;
+    private hasDataSafetyRisks;
+    private hasArchitectureIssues;
+    private hasUXIssues;
+}
+//# sourceMappingURL=code-analysis-service.d.ts.map

package/dist/services/code-analysis-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-analysis-service.d.ts","sourceRoot":"","sources":["../../src/services/code-analysis-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAInB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D;;;;;GAKG;AACH,qBAAa,mBAAmB;IAKlB,OAAO,CAAC,gBAAgB;IAJpC,OAAO,CAAC,YAAY,CAAgC;IACpD,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiB;gBAEvB,gBAAgB,EAAE,gBAAgB;IAEtD;;OAEG;YACW,YAAY;IAqC1B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAc1B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAwW3B;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAkD1E;;OAEG;YACW,cAAc;IAgB5B;;OAEG;IACH,OAAO,CAAC,4BAA4B;IA4BpC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAmBzB;;OAEG;YACW,kBAAkB;IA4ChC;;OAEG;YACW,6BAA6B;IAkG3C;;OAEG;YACW,aAAa;IAuD3B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAqD1B,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,sBAAsB;IAI9B,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,6BAA6B;IAIrC,OAAO,CAAC,qBAAqB;IAK7B,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,qBAAqB;IAO7B,OAAO,CAAC,WAAW;CAMpB"}