@phosphor-dom/sentinel-ai 0.1.0

package/README.md

@@ -0,0 +1,111 @@
+# Sentinel AI
+
+**Multi-agent Security Engineering Platform powered by AI**
+
+Sentinel AI is a distributed, event-driven framework for automated security auditing. It orchestrates specialized AI agents to perform reconnaissance, infrastructure scanning, web security analysis, code auditing, CVE correlation, threat modeling, and professional report generation.
+
+## Features
+
+- **8 specialized AI agents** — Orchestrator, Recon, Infrastructure, Web Security, Code Audit, CVE Intelligence, Threat Modeling, Report
+- **Event-driven architecture** — pub/sub event bus for inter-agent communication
+- **Multi-provider AI** — works with OpenAI, Anthropic, Google, DeepSeek, and any OpenAI-compatible provider
+- **Memory tiers** — working, session, long-term, and semantic memory
+- **Correlation engine** — cross-agent attack chain detection
+- **Risk analysis** — CVSS + EPSS + exploitability scoring
+- **Plugin system** — extensible with Nmap, Nuclei, Semgrep, Trivy, Gitleaks, ZAP
+- **Professional reports** — Markdown with executive summary, risk matrix, evidence mapping, remediation plan
+
+## Installation
+
+```bash
+npm install @phosphor-dom/sentinel-ai
+
+bun add @phosphor-dom/sentinel-ai
+
+import { SentinelOrchestrator } from "@phosphor-dom/sentinel-ai"
+import { EventBus } from "@phosphor-dom/sentinel-ai/core/event-bus"
+import { MemoryManager } from "@phosphor-dom/sentinel-ai/core/memory-manager"
+
+const orchestrator = new SentinelOrchestrator()
+const bus = new EventBus()
+const memory = new MemoryManager()
+
+// Subscribe to events
+bus.subscribe("VulnerabilityDetected", (event) => {
+  console.log("Vulnerability found:", event.payload)
+})
+
+// Run an audit
+await orchestrator.runAudit({
+  target: "example.com",
+  targetType: "domain",
+  description: "Security audit of example.com",
+})
+```
+
+## Architecture
+
+```
+Orchestrator
+├── Recon Agent          (DNS, WHOIS, subdomains, fingerprinting)
+├── Infrastructure Agent (ports, TLS, certificates, misconfigs)
+├── Web Security Agent   (OWASP Top 10, HTTP headers, JWT, APIs)
+├── Code Audit Agent     (SAST, secrets, dependencies, IaC)
+├── CVE Intelligence     (CVE/CWE/CVSS/EPSS correlation)
+├── Threat Modeling      (STRIDE, attack trees, risk analysis)
+└── Report Agent         (MD/DOCX/PDF professional reports)
+```
+
+## Event System
+
+Every agent communicates through the Event Bus:
+
+```typescript
+bus.publish({
+  id: crypto.randomUUID(),
+  timestamp: new Date().toISOString(),
+  type: "ReconCompleted",
+  source: "recon-agent",
+  target: "orchestrator",
+  priority: "normal",
+  payload: { /* findings */ },
+})
+```
+
+## Provider Abstraction
+
+Sentinel AI supports any AI provider. Route by capability:
+
+```typescript
+const provider = new ProviderAbstraction()
+provider.register({
+  name: "anthropic",
+  models: ["claude-sonnet-4"],
+  roles: { precision: "claude-sonnet-4", writing: "claude-sonnet-4" },
+  priority: 1,
+})
+
+const response = await provider.complete("precision", {
+  messages: [{ role: "user", content: "Analyze this code for vulnerabilities..." }],
+})
+```
+
+## Plugin System
+
+```typescript
+const plugins = new PluginManager()
+plugins.register({
+  name: "nmap",
+  version: "1.0",
+  capabilities: ["port-scan", "service-detection"],
+  inputs: ["target_ip", "ports"],
+  outputs: ["open_ports", "services"],
+  permissions: { network: ["target_ip"] },
+})
+
+const result = await plugins.execute("nmap", { target_ip: "10.0.0.1" })
+```
+
+## License
+
+MIT

package/dist/core/context-compression.d.ts

@@ -0,0 +1,21 @@
+export interface CompressionConfig {
+    maxTokensPerAgent: number;
+    slidingWindowSize: number;
+    summaryRetention: number;
+    dedupEnabled: boolean;
+    relevanceThreshold: number;
+}
+export interface CompressedContext {
+    originalTokens: number;
+    compressedTokens: number;
+    content: string;
+    strategy: string;
+}
+export declare class ContextCompression {
+    private config;
+    configure(config: Partial<CompressionConfig>): void;
+    compress(content: string, context: string[]): CompressedContext;
+    private deduplicate;
+    private relevanceFilter;
+}
+//# sourceMappingURL=context-compression.d.ts.map

package/dist/core/context-compression.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-compression.d.ts","sourceRoot":"","sources":["../../src/core/context-compression.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;IACxB,YAAY,EAAE,OAAO,CAAA;IACrB,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;IACxB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAMb;IAED,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI;IAInD,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,iBAAiB;IA6B/D,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,eAAe;CAWxB"}

package/dist/core/context-compression.js

@@ -0,0 +1,62 @@
+export class ContextCompression {
+    config = {
+        maxTokensPerAgent: 32000,
+        slidingWindowSize: 24000,
+        summaryRetention: 8000,
+        dedupEnabled: true,
+        relevanceThreshold: 0.3,
+    };
+    configure(config) {
+        Object.assign(this.config, config);
+    }
+    compress(content, context) {
+        let processed = content;
+        const strategies = [];
+        if (this.config.dedupEnabled) {
+            const before = processed.length;
+            processed = this.deduplicate(processed);
+            if (processed.length < before)
+                strategies.push("dedup");
+        }
+        processed = this.relevanceFilter(processed, context);
+        strategies.push("relevance_rank");
+        if (processed.length > this.config.slidingWindowSize) {
+            processed = processed.slice(0, this.config.slidingWindowSize);
+            strategies.push("sliding_window");
+        }
+        const originalTokens = Math.ceil(content.length / 4);
+        const compressedTokens = Math.ceil(processed.length / 4);
+        return {
+            originalTokens,
+            compressedTokens,
+            content: processed,
+            strategy: strategies.join("+"),
+        };
+    }
+    deduplicate(content) {
+        const lines = content.split("\n");
+        const seen = new Set();
+        const result = [];
+        for (const line of lines) {
+            const trimmed = line.trim();
+            if (!trimmed || seen.has(trimmed))
+                continue;
+            seen.add(trimmed);
+            result.push(line);
+        }
+        return result.join("\n");
+    }
+    relevanceFilter(content, context) {
+        if (context.length === 0)
+            return content;
+        const terms = context.flatMap((c) => c.toLowerCase().split(/\s+/));
+        const lines = content.split("\n");
+        return lines
+            .filter((line) => {
+            const lower = line.toLowerCase();
+            return terms.some((t) => lower.includes(t));
+        })
+            .join("\n");
+    }
+}
+//# sourceMappingURL=context-compression.js.map

package/dist/core/context-compression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-compression.js","sourceRoot":"","sources":["../../src/core/context-compression.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,kBAAkB;IACrB,MAAM,GAAsB;QAClC,iBAAiB,EAAE,KAAK;QACxB,iBAAiB,EAAE,KAAK;QACxB,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,IAAI;QAClB,kBAAkB,EAAE,GAAG;KACxB,CAAA;IAED,SAAS,CAAC,MAAkC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACpC,CAAC;IAED,QAAQ,CAAC,OAAe,EAAE,OAAiB;QACzC,IAAI,SAAS,GAAG,OAAO,CAAA;QACvB,MAAM,UAAU,GAAa,EAAE,CAAA;QAE/B,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAA;YAC/B,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;YACvC,IAAI,SAAS,CAAC,MAAM,GAAG,MAAM;gBAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACzD,CAAC;QAED,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QACpD,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAEjC,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACrD,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;YAC7D,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QACnC,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QACpD,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QAExD,OAAO;YACL,cAAc;YACd,gBAAgB;YAChB,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;SAC/B,CAAA;IACH,CAAC;IAEO,WAAW,CAAC,OAAe;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YAC3B,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAQ;YAC3C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAEO,eAAe,CAAC,OAAe,EAAE,OAAiB;QACxD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAA;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACjC,OAAO,KAAK;aACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACf,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;YAChC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7C,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAA;IACf,CAAC;CACF"}

package/dist/core/correlation-engine.d.ts

@@ -0,0 +1,30 @@
+export interface Finding {
+    id: string;
+    agent: string;
+    type: string;
+    severity: "critical" | "high" | "medium" | "low" | "info";
+    title: string;
+    description: string;
+    cve?: string;
+    cwe?: string;
+    cvss?: number;
+}
+export interface CorrelationRule {
+    name: string;
+    condition: string;
+    severity: "critical" | "high" | "medium" | "low";
+}
+export interface AttackChain {
+    id: string;
+    steps: string[];
+    severity: string;
+    description: string;
+}
+export declare class CorrelationEngine {
+    private rules;
+    addRule(rule: CorrelationRule): void;
+    correlate(findings: Finding[]): AttackChain[];
+    private evaluateRule;
+    private describeChain;
+}
+//# sourceMappingURL=correlation-engine.d.ts.map

package/dist/core/correlation-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"correlation-engine.d.ts","sourceRoot":"","sources":["../../src/core/correlation-engine.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAA;IACzD,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;CACjD;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;CACpB;AAID,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,KAAK,CAKZ;IAED,OAAO,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI;IAIpC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE;IAkB7C,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,aAAa;CAGtB"}

package/dist/core/correlation-engine.js

@@ -0,0 +1,43 @@
+import { uuid } from "../types/event";
+export class CorrelationEngine {
+    rules = [
+        { name: "exposed-db-to-rce", condition: "Infrastructure.open_database + CodeAudit.sqli", severity: "critical" },
+        { name: "expired-cert-to-mitm", condition: "Infrastructure.expired_cert + Recon.active_subdomains", severity: "high" },
+        { name: "weak-tls-to-sensitive-data", condition: "Infrastructure.weak_tls + WebSecurity.sensitive_endpoint", severity: "high" },
+        { name: "dep-to-cve-to-exploit", condition: "CodeAudit.vulnerable_dep + CVEIntelligence.exploit_available", severity: "critical" },
+    ];
+    addRule(rule) {
+        this.rules.push(rule);
+    }
+    correlate(findings) {
+        const chains = [];
+        for (const rule of this.rules) {
+            const match = this.evaluateRule(rule, findings);
+            if (match) {
+                chains.push({
+                    id: uuid(),
+                    steps: match,
+                    severity: rule.severity,
+                    description: this.describeChain(rule, match),
+                });
+            }
+        }
+        return chains;
+    }
+    evaluateRule(rule, findings) {
+        const parts = rule.condition.split("+").map((p) => p.trim());
+        const matched = [];
+        for (const part of parts) {
+            const [source, condition] = part.split(".");
+            const finding = findings.find((f) => f.agent.toLowerCase().includes(source.toLowerCase()) && f.type.toLowerCase().includes(condition.toLowerCase()));
+            if (!finding)
+                return null;
+            matched.push(finding.title);
+        }
+        return matched.length === parts.length ? matched : null;
+    }
+    describeChain(rule, steps) {
+        return `${rule.name}: ${steps.join(" → ")}`;
+    }
+}
+//# sourceMappingURL=correlation-engine.js.map

package/dist/core/correlation-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correlation-engine.js","sourceRoot":"","sources":["../../src/core/correlation-engine.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AAErC,MAAM,OAAO,iBAAiB;IACpB,KAAK,GAAsB;QACjC,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,+CAA+C,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC/G,EAAE,IAAI,EAAE,sBAAsB,EAAE,SAAS,EAAE,uDAAuD,EAAE,QAAQ,EAAE,MAAM,EAAE;QACtH,EAAE,IAAI,EAAE,4BAA4B,EAAE,SAAS,EAAE,0DAA0D,EAAE,QAAQ,EAAE,MAAM,EAAE;QAC/H,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,8DAA8D,EAAE,QAAQ,EAAE,UAAU,EAAE;KACnI,CAAA;IAED,OAAO,CAAC,IAAqB;QAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC;IAED,SAAS,CAAC,QAAmB;QAC3B,MAAM,MAAM,GAAkB,EAAE,CAAA;QAEhC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YAC/C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,IAAI,EAAE;oBACV,KAAK,EAAE,KAAK;oBACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC;iBAC7C,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAEO,YAAY,CAAC,IAAqB,EAAE,QAAmB;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QAC5D,MAAM,OAAO,GAAa,EAAE,CAAA;QAE5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CACtH,CAAA;YACD,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAA;YACzB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC7B,CAAC;QAED,OAAO,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IACzD,CAAC;IAEO,aAAa,CAAC,IAAqB,EAAE,KAAe;QAC1D,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAA;IAC7C,CAAC;CACF"}

package/dist/core/event-bus.d.ts

@@ -0,0 +1,16 @@
+import type { SentinelEvent, Unsubscribe, Priority } from "../types/event";
+export declare class EventBus {
+    private handlers;
+    private oneShot;
+    private queue;
+    private processing;
+    private idCounter;
+    subscribe(type: string, handler: (event: SentinelEvent) => void | Promise<void>, priority?: Priority): Unsubscribe;
+    once(type: string, handler: (event: SentinelEvent) => void | Promise<void>): Unsubscribe;
+    publish<T>(event: SentinelEvent<T>): void;
+    private process;
+    private dispatch;
+    drain(): SentinelEvent[];
+    clear(): void;
+}
+//# sourceMappingURL=event-bus.d.ts.map

package/dist/core/event-bus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-bus.d.ts","sourceRoot":"","sources":["../../src/core/event-bus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAS1E,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAyC;IACzD,OAAO,CAAC,OAAO,CAAyC;IACxD,OAAO,CAAC,KAAK,CAAsB;IACnC,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,SAAS,CAAI;IAErB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAE,QAAmB,GAAG,WAAW;IAa5H,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW;IAYxF,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI;YAK3B,OAAO;YASP,QAAQ;IAmBtB,KAAK,IAAI,aAAa,EAAE;IAMxB,KAAK,IAAI,IAAI;CAKd"}

package/dist/core/event-bus.js

@@ -0,0 +1,81 @@
+export class EventBus {
+    handlers = new Map();
+    oneShot = new Map();
+    queue = [];
+    processing = false;
+    idCounter = 0;
+    subscribe(type, handler, priority = "normal") {
+        const id = `sub_${++this.idCounter}`;
+        const entry = { id, type, handler, priority: priorityOrder(priority) };
+        const existing = this.handlers.get(type) || [];
+        existing.push(entry);
+        existing.sort((a, b) => b.priority - a.priority);
+        this.handlers.set(type, existing);
+        return () => {
+            const list = this.handlers.get(type);
+            if (list)
+                this.handlers.set(type, list.filter((h) => h.id !== id));
+        };
+    }
+    once(type, handler) {
+        const id = `once_${++this.idCounter}`;
+        const entry = { id, type, handler, priority: 999 };
+        const existing = this.oneShot.get(type) || [];
+        existing.push(entry);
+        this.oneShot.set(type, existing);
+        return () => {
+            const list = this.oneShot.get(type);
+            if (list)
+                this.oneShot.set(type, list.filter((h) => h.id !== id));
+        };
+    }
+    publish(event) {
+        this.queue.push(event);
+        if (!this.processing)
+            this.process();
+    }
+    async process() {
+        this.processing = true;
+        while (this.queue.length > 0) {
+            const event = this.queue.shift();
+            await this.dispatch(event);
+        }
+        this.processing = false;
+    }
+    async dispatch(event) {
+        const typeHandlers = this.handlers.get(event.type) || [];
+        const wildcardHandlers = this.handlers.get("*") || [];
+        const onceHandlers = this.oneShot.get(event.type) || [];
+        const handlers = [...typeHandlers, ...wildcardHandlers, ...onceHandlers];
+        handlers.sort((a, b) => b.priority - a.priority);
+        for (const entry of handlers) {
+            try {
+                await entry.handler(event);
+            }
+            catch (err) {
+                console.error(`[EventBus] handler ${entry.id} failed for ${event.type}:`, err);
+            }
+        }
+        if (onceHandlers.length > 0)
+            this.oneShot.delete(event.type);
+    }
+    drain() {
+        const remaining = [...this.queue];
+        this.queue = [];
+        return remaining;
+    }
+    clear() {
+        this.handlers.clear();
+        this.oneShot.clear();
+        this.queue = [];
+    }
+}
+function priorityOrder(p) {
+    switch (p) {
+        case "critical": return 4;
+        case "high": return 3;
+        case "normal": return 2;
+        case "low": return 1;
+    }
+}
+//# sourceMappingURL=event-bus.js.map

package/dist/core/event-bus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-bus.js","sourceRoot":"","sources":["../../src/core/event-bus.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,QAAQ;IACX,QAAQ,GAAgC,IAAI,GAAG,EAAE,CAAA;IACjD,OAAO,GAAgC,IAAI,GAAG,EAAE,CAAA;IAChD,KAAK,GAAoB,EAAE,CAAA;IAC3B,UAAU,GAAG,KAAK,CAAA;IAClB,SAAS,GAAG,CAAC,CAAA;IAErB,SAAS,CAAC,IAAY,EAAE,OAAuD,EAAE,WAAqB,QAAQ;QAC5G,MAAM,EAAE,GAAG,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;QACpC,MAAM,KAAK,GAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAA;QACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;QAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACjC,OAAO,GAAG,EAAE;YACV,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACpC,IAAI,IAAI;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QACpE,CAAC,CAAA;IACH,CAAC;IAED,IAAI,CAAC,IAAY,EAAE,OAAuD;QACxE,MAAM,EAAE,GAAG,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;QACrC,MAAM,KAAK,GAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAA;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAC7C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAChC,OAAO,GAAG,EAAE;YACV,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACnC,IAAI,IAAI;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QACnE,CAAC,CAAA;IACH,CAAC;IAED,OAAO,CAAI,KAAuB;QAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtB,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IACtC,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAG,CAAA;YACjC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC5B,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,KAAK,CAAA;IACzB,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,KAAoB;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QACrD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAEvD,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,gBAAgB,EAAE,GAAG,YAAY,CAAC,CAAA;QACxE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;QAEhD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,sBAAsB,KAAK,CAAC,EAAE,eAAe,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAA;YAChF,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9D,CAAC;IAED,KAAK;QACH,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QACjC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAA;QACf,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;QACrB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACpB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAA;IACjB,CAAC;CACF;AAED,SAAS,aAAa,CAAC,CAAW;IAChC,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,UAAU,CAAC,CAAC,OAAO,CAAC,CAAA;QACzB,KAAK,MAAM,CAAC,CAAC,OAAO,CAAC,CAAA;QACrB,KAAK,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAA;QACvB,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,CAAA;IACtB,CAAC;AACH,CAAC"}

package/dist/core/evidence-manager.d.ts

@@ -0,0 +1,27 @@
+export interface Evidence {
+    id: string;
+    type: "http_response" | "code_snippet" | "scan_output" | "log" | "screenshot";
+    source: string;
+    target: string;
+    timestamp: string;
+    data: Record<string, unknown>;
+    hash: string;
+    tags: string[];
+    relatedFindings: string[];
+}
+export declare class EvidenceManager {
+    private store;
+    private findingLinks;
+    storeEvidence(evidence: Evidence): void;
+    get(id: string): Evidence | undefined;
+    find(query: Partial<{
+        type: string;
+        source: string;
+        target: string;
+        tag: string;
+    }>): Evidence[];
+    link(findingId: string, evidenceId: string): void;
+    getEvidenceForFinding(findingId: string): Evidence[];
+    exportSession(sessionId: string): Evidence[];
+}
+//# sourceMappingURL=evidence-manager.d.ts.map

package/dist/core/evidence-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-manager.d.ts","sourceRoot":"","sources":["../../src/core/evidence-manager.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,eAAe,GAAG,cAAc,GAAG,aAAa,GAAG,KAAK,GAAG,YAAY,CAAA;IAC7E,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,eAAe,EAAE,MAAM,EAAE,CAAA;CAC1B;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,YAAY,CAAsC;IAE1D,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAIvC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAIrC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,QAAQ,EAAE;IAU/F,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAMjD,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,EAAE;IAMpD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,EAAE;CAG7C"}

package/dist/core/evidence-manager.js

@@ -0,0 +1,38 @@
+export class EvidenceManager {
+    store = new Map();
+    findingLinks = new Map();
+    storeEvidence(evidence) {
+        this.store.set(evidence.id, evidence);
+    }
+    get(id) {
+        return this.store.get(id);
+    }
+    find(query) {
+        return Array.from(this.store.values()).filter((e) => {
+            if (query.type && e.type !== query.type)
+                return false;
+            if (query.source && e.source !== query.source)
+                return false;
+            if (query.target && !e.target.includes(query.target))
+                return false;
+            if (query.tag && !e.tags.includes(query.tag))
+                return false;
+            return true;
+        });
+    }
+    link(findingId, evidenceId) {
+        const existing = this.findingLinks.get(findingId) || new Set();
+        existing.add(evidenceId);
+        this.findingLinks.set(findingId, existing);
+    }
+    getEvidenceForFinding(findingId) {
+        const ids = this.findingLinks.get(findingId);
+        if (!ids)
+            return [];
+        return Array.from(ids).map((id) => this.store.get(id)).filter(Boolean);
+    }
+    exportSession(sessionId) {
+        return Array.from(this.store.values()).filter((e) => e.tags.includes(sessionId));
+    }
+}
+//# sourceMappingURL=evidence-manager.js.map

package/dist/core/evidence-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-manager.js","sourceRoot":"","sources":["../../src/core/evidence-manager.ts"],"names":[],"mappings":"AAYA,MAAM,OAAO,eAAe;IAClB,KAAK,GAA0B,IAAI,GAAG,EAAE,CAAA;IACxC,YAAY,GAA6B,IAAI,GAAG,EAAE,CAAA;IAE1D,aAAa,CAAC,QAAkB;QAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;IACvC,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC3B,CAAC;IAED,IAAI,CAAC,KAA6E;QAChF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAClD,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAA;YACrD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAA;YAC3D,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAA;YAClE,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAA;YAC1D,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAC,SAAiB,EAAE,UAAkB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAE,CAAA;QAC9D,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACxB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IAC5C,CAAC;IAED,qBAAqB,CAAC,SAAiB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC5C,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAA;QACnB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAe,CAAA;IACtF,CAAC;IAED,aAAa,CAAC,SAAiB;QAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;IAClF,CAAC;CACF"}

package/dist/core/inter-agent-communication.d.ts

@@ -0,0 +1,41 @@
+import { EventBus } from "./event-bus";
+export type ContextRequestPayload = {
+    query: string;
+    requester: string;
+    target: string;
+    type: string;
+};
+export type ContextResponsePayload = {
+    requestId: string;
+    data: unknown;
+};
+export type TaskDelegationPayload = {
+    taskId: string;
+    task: string;
+    params: Record<string, unknown>;
+};
+export type TaskResultPayload = {
+    taskId: string;
+    result: unknown;
+    status: "completed" | "failed";
+    error?: string;
+};
+export type ValidationRequestPayload = {
+    findingId: string;
+    finding: unknown;
+    requester: string;
+};
+export type ValidationResponsePayload = {
+    findingId: string;
+    valid: boolean;
+    confidence: number;
+    notes?: string;
+};
+export declare class InterAgentCommunication {
+    private bus;
+    constructor(bus: EventBus);
+    requestContext(target: string, query: string, type: string): Promise<unknown>;
+    delegateTask(target: string, task: string, params: Record<string, unknown>): Promise<unknown>;
+    requestValidation(target: string, findingId: string, finding: unknown): Promise<ValidationResponsePayload>;
+}
+//# sourceMappingURL=inter-agent-communication.d.ts.map

package/dist/core/inter-agent-communication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inter-agent-communication.d.ts","sourceRoot":"","sources":["../../src/core/inter-agent-communication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAGtC,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,OAAO,CAAA;CACd,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,OAAO,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,qBAAa,uBAAuB;IACtB,OAAO,CAAC,GAAG;gBAAH,GAAG,EAAE,QAAQ;IAE3B,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAsB7E,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB7F,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAoBjH"}

package/dist/core/inter-agent-communication.js

@@ -0,0 +1,68 @@
+import { uuid } from "../types/event";
+export class InterAgentCommunication {
+    bus;
+    constructor(bus) {
+        this.bus = bus;
+    }
+    async requestContext(target, query, type) {
+        return new Promise((resolve, reject) => {
+            const requestId = uuid();
+            const timeout = setTimeout(() => reject(new Error(`Context request to ${target} timed out`)), 30000);
+            this.bus.once(`ContextResponse:${requestId}`, (event) => {
+                clearTimeout(timeout);
+                resolve(event.payload.data);
+            });
+            this.bus.publish({
+                id: requestId,
+                timestamp: new Date().toISOString(),
+                type: "ContextRequest",
+                source: "orchestrator",
+                target,
+                priority: "normal",
+                payload: { query, requester: "orchestrator", target, type },
+            });
+        });
+    }
+    async delegateTask(target, task, params) {
+        return new Promise((resolve, reject) => {
+            const taskId = uuid();
+            const timeout = setTimeout(() => reject(new Error(`Task delegation to ${target} timed out`)), 300000);
+            this.bus.once(`TaskResult:${taskId}`, (event) => {
+                clearTimeout(timeout);
+                const payload = event.payload;
+                if (payload.status === "failed")
+                    reject(new Error(payload.error));
+                else
+                    resolve(payload.result);
+            });
+            this.bus.publish({
+                id: taskId,
+                timestamp: new Date().toISOString(),
+                type: "TaskDelegation",
+                source: "orchestrator",
+                target,
+                priority: "high",
+                payload: { taskId, task, params },
+            });
+        });
+    }
+    async requestValidation(target, findingId, finding) {
+        return new Promise((resolve, reject) => {
+            const timeout = setTimeout(() => reject(new Error(`Validation request to ${target} timed out`)), 60000);
+            this.bus.once(`ValidationResponse:${findingId}`, (event) => {
+                clearTimeout(timeout);
+                resolve(event.payload);
+            });
+            this.bus.publish({
+                id: uuid(),
+                timestamp: new Date().toISOString(),
+                type: "ValidationRequest",
+                source: "orchestrator",
+                target,
+                priority: "normal",
+                payload: { findingId, finding, requester: "orchestrator" },
+            });
+        });
+    }
+}
+//# sourceMappingURL=inter-agent-communication.js.map

package/dist/core/inter-agent-communication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inter-agent-communication.js","sourceRoot":"","sources":["../../src/core/inter-agent-communication.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AAwCrC,MAAM,OAAO,uBAAuB;IACd;IAApB,YAAoB,GAAa;QAAb,QAAG,GAAH,GAAG,CAAU;IAAG,CAAC;IAErC,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,KAAa,EAAE,IAAY;QAC9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,SAAS,GAAG,IAAI,EAAE,CAAA;YACxB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,MAAM,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;YAEpG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,SAAS,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;gBACtD,YAAY,CAAC,OAAO,CAAC,CAAA;gBACrB,OAAO,CAAE,KAAK,CAAC,OAAkC,CAAC,IAAI,CAAC,CAAA;YACzD,CAAC,CAAC,CAAA;YAEF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACf,EAAE,EAAE,SAAS;gBACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,cAAc;gBACtB,MAAM;gBACN,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAA2B;aACrF,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,IAAY,EAAE,MAA+B;QAC9E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,EAAE,CAAA;YACrB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,MAAM,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YAErG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC9C,YAAY,CAAC,OAAO,CAAC,CAAA;gBACrB,MAAM,OAAO,GAAG,KAAK,CAAC,OAA4B,CAAA;gBAClD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;oBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;;oBAC5D,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC9B,CAAC,CAAC,CAAA;YAEF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACf,EAAE,EAAE,MAAM;gBACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,cAAc;gBACtB,MAAM;gBACN,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAA2B;aAC3D,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,SAAiB,EAAE,OAAgB;QACzE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,MAAM,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;YAEvG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,SAAS,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;gBACzD,YAAY,CAAC,OAAO,CAAC,CAAA;gBACrB,OAAO,CAAC,KAAK,CAAC,OAAoC,CAAC,CAAA;YACrD,CAAC,CAAC,CAAA;YAEF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACf,EAAE,EAAE,IAAI,EAAE;gBACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,IAAI,EAAE,mBAAmB;gBACzB,MAAM,EAAE,cAAc;gBACtB,MAAM;gBACN,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAA8B;aACvF,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/core/knowledge-base.d.ts

@@ -0,0 +1,26 @@
+export interface KbEntry {
+    id: string;
+    framework: string;
+    title: string;
+    content: string;
+    references: string[];
+    tags: string[];
+}
+export interface KbEnrichment {
+    entryId: string;
+    findingType: string;
+    description: string;
+    mitigations: string[];
+    references: string[];
+}
+export declare class KnowledgeBase {
+    private entries;
+    constructor();
+    private seed;
+    add(entry: KbEntry): void;
+    search(query: string, framework?: string): KbEntry[];
+    enrich(findingType: string): KbEnrichment | undefined;
+    getMitigations(entry: KbEntry): string[];
+    getAll(): KbEntry[];
+}
+//# sourceMappingURL=knowledge-base.d.ts.map

package/dist/core/knowledge-base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge-base.d.ts","sourceRoot":"","sources":["../../src/core/knowledge-base.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,IAAI,EAAE,MAAM,EAAE,CAAA;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAAkC;;IAMjD,OAAO,CAAC,IAAI;IA2CZ,GAAG,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAIzB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE;IAYpD,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAgBrD,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE;IAUxC,MAAM,IAAI,OAAO,EAAE;CAGpB"}