@phosphor-dom/sentinel-ai 0.1.0

package/dist/core/knowledge-base.js

@@ -0,0 +1,87 @@
+export class KnowledgeBase {
+    entries = new Map();
+    constructor() {
+        this.seed();
+    }
+    seed() {
+        this.add({
+            id: "owasp-sqli",
+            framework: "OWASP",
+            title: "SQL Injection",
+            content: "SQL injection occurs when untrusted data is sent to an interpreter as part of a command or query.",
+            references: ["https://owasp.org/www-community/attacks/SQL_Injection"],
+            tags: ["owasp-top10", "injection", "database"],
+        });
+        this.add({
+            id: "owasp-xss",
+            framework: "OWASP",
+            title: "Cross-Site Scripting (XSS)",
+            content: "XSS allows attackers to inject client-side scripts into web pages viewed by other users.",
+            references: ["https://owasp.org/www-community/attacks/xss/"],
+            tags: ["owasp-top10", "xss", "client-side"],
+        });
+        this.add({
+            id: "cwe-79",
+            framework: "CWE",
+            title: "CWE-79: Improper Neutralization of Input During Web Page Generation",
+            content: "The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output.",
+            references: ["https://cwe.mitre.org/data/definitions/79.html"],
+            tags: ["cwe", "xss", "injection"],
+        });
+        this.add({
+            id: "cwe-89",
+            framework: "CWE",
+            title: "CWE-89: Improper Neutralization of Special Elements used in an SQL Command",
+            content: "The software constructs all or part of an SQL command using externally-influenced input.",
+            references: ["https://cwe.mitre.org/data/definitions/89.html"],
+            tags: ["cwe", "sqli", "injection"],
+        });
+        this.add({
+            id: "mitre-t1190",
+            framework: "MITRE-ATTACK",
+            title: "Exploit Public-Facing Application",
+            content: "Adversaries may exploit a weakness in an Internet-facing computer or program.",
+            references: ["https://attack.mitre.org/techniques/T1190/"],
+            tags: ["mitre-attack", "initial-access", "exploit"],
+        });
+    }
+    add(entry) {
+        this.entries.set(entry.id, entry);
+    }
+    search(query, framework) {
+        const q = query.toLowerCase();
+        return Array.from(this.entries.values()).filter((e) => {
+            if (framework && e.framework !== framework)
+                return false;
+            return (e.title.toLowerCase().includes(q) ||
+                e.content.toLowerCase().includes(q) ||
+                e.tags.some((t) => t.includes(q)));
+        });
+    }
+    enrich(findingType) {
+        const entry = Array.from(this.entries.values()).find((e) => e.tags.some((t) => findingType.toLowerCase().includes(t)) ||
+            findingType.toLowerCase().includes(e.id));
+        if (!entry)
+            return undefined;
+        return {
+            entryId: entry.id,
+            findingType,
+            description: entry.content,
+            mitigations: this.getMitigations(entry),
+            references: entry.references,
+        };
+    }
+    getMitigations(entry) {
+        const mitigations = {
+            "owasp-sqli": ["Use parameterized queries", "Implement input validation", "Use ORM frameworks"],
+            "owasp-xss": ["Implement Content Security Policy", "Escape all user input", "Use HTTP-only cookies"],
+            "cwe-79": ["Validate and sanitize all input", "Use output encoding", "Implement CSP headers"],
+            "cwe-89": ["Use prepared statements", "Apply least privilege to DB accounts", "Implement input validation"],
+        };
+        return mitigations[entry.id] || ["Review security best practices for this vulnerability type"];
+    }
+    getAll() {
+        return Array.from(this.entries.values());
+    }
+}
+//# sourceMappingURL=knowledge-base.js.map

package/dist/core/knowledge-base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge-base.js","sourceRoot":"","sources":["../../src/core/knowledge-base.ts"],"names":[],"mappings":"AAiBA,MAAM,OAAO,aAAa;IAChB,OAAO,GAAyB,IAAI,GAAG,EAAE,CAAA;IAEjD;QACE,IAAI,CAAC,IAAI,EAAE,CAAA;IACb,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,GAAG,CAAC;YACP,EAAE,EAAE,YAAY;YAChB,SAAS,EAAE,OAAO;YAClB,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,mGAAmG;YAC5G,UAAU,EAAE,CAAC,uDAAuD,CAAC;YACrE,IAAI,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,UAAU,CAAC;SAC/C,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC;YACP,EAAE,EAAE,WAAW;YACf,SAAS,EAAE,OAAO;YAClB,KAAK,EAAE,4BAA4B;YACnC,OAAO,EAAE,0FAA0F;YACnG,UAAU,EAAE,CAAC,8CAA8C,CAAC;YAC5D,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,aAAa,CAAC;SAC5C,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC;YACP,EAAE,EAAE,QAAQ;YACZ,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,qEAAqE;YAC5E,OAAO,EAAE,oHAAoH;YAC7H,UAAU,EAAE,CAAC,gDAAgD,CAAC;YAC9D,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC;SAClC,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC;YACP,EAAE,EAAE,QAAQ;YACZ,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,4EAA4E;YACnF,OAAO,EAAE,0FAA0F;YACnG,UAAU,EAAE,CAAC,gDAAgD,CAAC;YAC9D,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC;SACnC,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC;YACP,EAAE,EAAE,aAAa;YACjB,SAAS,EAAE,cAAc;YACzB,KAAK,EAAE,mCAAmC;YAC1C,OAAO,EAAE,+EAA+E;YACxF,UAAU,EAAE,CAAC,4CAA4C,CAAC;YAC1D,IAAI,EAAE,CAAC,cAAc,EAAE,gBAAgB,EAAE,SAAS,CAAC;SACpD,CAAC,CAAA;IACJ,CAAC;IAED,GAAG,CAAC,KAAc;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,SAAkB;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;QAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACpD,IAAI,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAA;YACxD,OAAO,CACL,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACjC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACnC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAClC,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,CAAC,WAAmB;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC1D,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAC/C,CAAA;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAA;QAE5B,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,WAAW;YACX,WAAW,EAAE,KAAK,CAAC,OAAO;YAC1B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;YACvC,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAA;IACH,CAAC;IAED,cAAc,CAAC,KAAc;QAC3B,MAAM,WAAW,GAA6B;YAC5C,YAAY,EAAE,CAAC,2BAA2B,EAAE,4BAA4B,EAAE,oBAAoB,CAAC;YAC/F,WAAW,EAAE,CAAC,mCAAmC,EAAE,uBAAuB,EAAE,uBAAuB,CAAC;YACpG,QAAQ,EAAE,CAAC,iCAAiC,EAAE,qBAAqB,EAAE,uBAAuB,CAAC;YAC7F,QAAQ,EAAE,CAAC,yBAAyB,EAAE,sCAAsC,EAAE,4BAA4B,CAAC;SAC5G,CAAA;QACD,OAAO,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAA;IAChG,CAAC;IAED,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1C,CAAC;CACF"}

package/dist/core/memory-manager.d.ts

@@ -0,0 +1,25 @@
+export type MemoryTier = "working" | "session" | "long-term" | "semantic";
+export interface MemoryEntry<T = unknown> {
+    id: string;
+    tier: MemoryTier;
+    agent: string;
+    key: string;
+    data: T;
+    timestamp: number;
+    ttl?: number;
+}
+export declare class MemoryManager {
+    private stores;
+    private expiryTimers;
+    constructor();
+    write<T>(tier: MemoryTier, agent: string, key: string, data: T, ttlMs?: number): void;
+    read<T>(tier: MemoryTier, agent: string, key: string): T | undefined;
+    search<T>(tier: MemoryTier, query: Partial<{
+        agent: string;
+        key: string;
+    }>): MemoryEntry<T>[];
+    delete(tier: MemoryTier, agent: string, key: string): void;
+    clearTier(tier: MemoryTier): void;
+    clearAgent(agent: string): void;
+}
+//# sourceMappingURL=memory-manager.d.ts.map

package/dist/core/memory-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-manager.d.ts","sourceRoot":"","sources":["../../src/core/memory-manager.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,CAAA;AAEzE,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IACtC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,UAAU,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,CAAC,CAAA;IACP,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAuD;IACrE,OAAO,CAAC,YAAY,CAAwD;;IAQ5E,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAoBrF,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS;IAKpE,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE;IAY7F,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAU1D,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAIjC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAmBhC"}

package/dist/core/memory-manager.js

@@ -0,0 +1,80 @@
+export class MemoryManager {
+    stores = new Map();
+    expiryTimers = new Map();
+    constructor() {
+        for (const tier of ["working", "session", "long-term", "semantic"]) {
+            this.stores.set(tier, new Map());
+        }
+    }
+    write(tier, agent, key, data, ttlMs) {
+        const entry = {
+            id: `${agent}:${key}`,
+            tier,
+            agent,
+            key,
+            data,
+            timestamp: Date.now(),
+            ttl: ttlMs,
+        };
+        const store = this.stores.get(tier);
+        store.set(entry.id, entry);
+        if (ttlMs) {
+            const existing = this.expiryTimers.get(entry.id);
+            if (existing)
+                clearTimeout(existing);
+            this.expiryTimers.set(entry.id, setTimeout(() => store.delete(entry.id), ttlMs));
+        }
+    }
+    read(tier, agent, key) {
+        const entry = this.stores.get(tier)?.get(`${agent}:${key}`);
+        return entry?.data;
+    }
+    search(tier, query) {
+        const store = this.stores.get(tier);
+        if (!store)
+            return [];
+        const results = [];
+        for (const entry of Array.from(store.values())) {
+            if (query.agent && entry.agent !== query.agent)
+                continue;
+            if (query.key && !entry.key.includes(query.key))
+                continue;
+            results.push(entry);
+        }
+        return results;
+    }
+    delete(tier, agent, key) {
+        const id = `${agent}:${key}`;
+        this.stores.get(tier)?.delete(id);
+        const timer = this.expiryTimers.get(id);
+        if (timer) {
+            clearTimeout(timer);
+            this.expiryTimers.delete(id);
+        }
+    }
+    clearTier(tier) {
+        this.stores.get(tier)?.clear();
+    }
+    clearAgent(agent) {
+        const tiers = ["working", "session", "long-term", "semantic"];
+        for (const tier of tiers) {
+            const store = this.stores.get(tier);
+            if (!store)
+                continue;
+            const toDelete = [];
+            store.forEach((entry, id) => {
+                if (entry.agent === agent)
+                    toDelete.push(id);
+            });
+            for (const id of toDelete) {
+                store.delete(id);
+                const timer = this.expiryTimers.get(id);
+                if (timer) {
+                    clearTimeout(timer);
+                    this.expiryTimers.delete(id);
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=memory-manager.js.map

package/dist/core/memory-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-manager.js","sourceRoot":"","sources":["../../src/core/memory-manager.ts"],"names":[],"mappings":"AAYA,MAAM,OAAO,aAAa;IAChB,MAAM,GAA8C,IAAI,GAAG,EAAE,CAAA;IAC7D,YAAY,GAA+C,IAAI,GAAG,EAAE,CAAA;IAE5E;QACE,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAiB,EAAE,CAAC;YACnF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAED,KAAK,CAAI,IAAgB,EAAE,KAAa,EAAE,GAAW,EAAE,IAAO,EAAE,KAAc;QAC5E,MAAM,KAAK,GAAmB;YAC5B,EAAE,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE;YACrB,IAAI;YACJ,KAAK;YACL,GAAG;YACH,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,GAAG,EAAE,KAAK;SACX,CAAA;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAE,CAAA;QACpC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAoB,CAAC,CAAA;QAEzC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAChD,IAAI,QAAQ;gBAAE,YAAY,CAAC,QAAQ,CAAC,CAAA;YACpC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;QAClF,CAAC;IACH,CAAC;IAED,IAAI,CAAI,IAAgB,EAAE,KAAa,EAAE,GAAW;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAA;QAC3D,OAAO,KAAK,EAAE,IAAqB,CAAA;IACrC,CAAC;IAED,MAAM,CAAI,IAAgB,EAAE,KAA8C;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAA;QACrB,MAAM,OAAO,GAAqB,EAAE,CAAA;QACpC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC/C,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;gBAAE,SAAQ;YACxD,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;gBAAE,SAAQ;YACzD,OAAO,CAAC,IAAI,CAAC,KAAuB,CAAC,CAAA;QACvC,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,MAAM,CAAC,IAAgB,EAAE,KAAa,EAAE,GAAW;QACjD,MAAM,EAAE,GAAG,GAAG,KAAK,IAAI,GAAG,EAAE,CAAA;QAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACvC,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC;IAED,SAAS,CAAC,IAAgB;QACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAA;IAChC,CAAC;IAED,UAAU,CAAC,KAAa;QACtB,MAAM,KAAK,GAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;QAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACnC,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACpB,MAAM,QAAQ,GAAa,EAAE,CAAA;YAC7B,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC1B,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC9C,CAAC,CAAC,CAAA;YACF,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC1B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBAChB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBACvC,IAAI,KAAK,EAAE,CAAC;oBACV,YAAY,CAAC,KAAK,CAAC,CAAA;oBACnB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/core/orchestrator.d.ts

@@ -0,0 +1,43 @@
+import { EventBus } from "./event-bus";
+import { ProviderAbstraction } from "./provider-abstraction";
+import { MemoryManager } from "./memory-manager";
+import { InterAgentCommunication } from "./inter-agent-communication";
+import type { Finding } from "../types/agent";
+export interface AuditScope {
+    target: string;
+    targetType: "domain" | "ip" | "url" | "repository";
+    description?: string;
+    agents?: string[];
+}
+export interface AuditPlan {
+    id: string;
+    scope: AuditScope;
+    phases: AuditPhase[];
+    status: "planning" | "in_progress" | "completed" | "failed";
+    findings: Finding[];
+    createdAt: string;
+}
+export interface AuditPhase {
+    name: string;
+    agent: string;
+    status: "pending" | "active" | "completed" | "failed";
+    dependsOn: string[];
+}
+export declare class SentinelOrchestrator {
+    bus: EventBus;
+    providers: ProviderAbstraction;
+    memory: MemoryManager;
+    comms: InterAgentCommunication;
+    private currentPlan;
+    private phaseResults;
+    constructor();
+    runAudit(scope: AuditScope): Promise<AuditPlan>;
+    private createPlan;
+    private executePhase;
+    private getPhaseResults;
+    private registerEventHandlers;
+    private emitPlanUpdated;
+    getPlan(): AuditPlan | null;
+    getFindings(): Finding[];
+}
+//# sourceMappingURL=orchestrator.d.ts.map

package/dist/core/orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../../src/core/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AAGrE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAE7C,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,QAAQ,GAAG,IAAI,GAAG,KAAK,GAAG,YAAY,CAAA;IAClD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,UAAU,CAAA;IACjB,MAAM,EAAE,UAAU,EAAE,CAAA;IACpB,MAAM,EAAE,UAAU,GAAG,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAA;IAC3D,QAAQ,EAAE,OAAO,EAAE,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAA;IACrD,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,qBAAa,oBAAoB;IAC/B,GAAG,EAAE,QAAQ,CAAA;IACb,SAAS,EAAE,mBAAmB,CAAA;IAC9B,MAAM,EAAE,aAAa,CAAA;IACrB,KAAK,EAAE,uBAAuB,CAAA;IAE9B,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,YAAY,CAAkC;;IAUhD,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IA4BrD,OAAO,CAAC,UAAU;YAiCJ,YAAY;IAW1B,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,qBAAqB;IAe7B,OAAO,CAAC,eAAe;IAYvB,OAAO,IAAI,SAAS,GAAG,IAAI;IAI3B,WAAW,IAAI,OAAO,EAAE;CAGzB"}

package/dist/core/orchestrator.js

@@ -0,0 +1,125 @@
+import { EventBus } from "./event-bus";
+import { ProviderAbstraction } from "./provider-abstraction";
+import { MemoryManager } from "./memory-manager";
+import { InterAgentCommunication } from "./inter-agent-communication";
+import { uuid } from "../types/event";
+export class SentinelOrchestrator {
+    bus;
+    providers;
+    memory;
+    comms;
+    currentPlan = null;
+    phaseResults = new Map();
+    constructor() {
+        this.bus = new EventBus();
+        this.providers = new ProviderAbstraction();
+        this.memory = new MemoryManager();
+        this.comms = new InterAgentCommunication(this.bus);
+        this.registerEventHandlers();
+    }
+    async runAudit(scope) {
+        const plan = this.createPlan(scope);
+        this.currentPlan = plan;
+        this.memory.write("session", "orchestrator", "current-plan", plan);
+        this.emitPlanUpdated(plan);
+        for (const phase of plan.phases) {
+            if (phase.status !== "pending")
+                continue;
+            phase.status = "active";
+            this.emitPlanUpdated(plan);
+            try {
+                const result = await this.executePhase(phase, scope);
+                this.phaseResults.set(phase.name, result);
+                phase.status = "completed";
+            }
+            catch (err) {
+                phase.status = "failed";
+                console.error(`Phase ${phase.name} failed:`, err);
+            }
+            this.emitPlanUpdated(plan);
+        }
+        plan.status = plan.phases.every((p) => p.status === "completed") ? "completed" : "failed";
+        this.currentPlan = plan;
+        return plan;
+    }
+    createPlan(scope) {
+        const phases = [
+            { name: "reconnaissance", agent: "sentinel-recon", status: "pending", dependsOn: [] },
+            { name: "infrastructure", agent: "sentinel-infrastructure", status: "pending", dependsOn: ["reconnaissance"] },
+            { name: "web-security", agent: "sentinel-web-security", status: "pending", dependsOn: ["reconnaissance"] },
+            { name: "code-audit", agent: "sentinel-code-audit", status: "pending", dependsOn: [] },
+            { name: "cve-intelligence", agent: "sentinel-cve-intelligence", status: "pending", dependsOn: ["infrastructure", "web-security", "code-audit"] },
+            { name: "threat-modeling", agent: "sentinel-threat-modeling", status: "pending", dependsOn: ["cve-intelligence"] },
+            { name: "reporting", agent: "sentinel-report", status: "pending", dependsOn: ["threat-modeling"] },
+        ];
+        if (scope.agents) {
+            const filtered = phases.filter((p) => scope.agents.includes(p.agent) || scope.agents.includes(p.name));
+            return {
+                id: uuid(),
+                scope,
+                phases: filtered,
+                status: "planning",
+                findings: [],
+                createdAt: new Date().toISOString(),
+            };
+        }
+        return {
+            id: uuid(),
+            scope,
+            phases,
+            status: "planning",
+            findings: [],
+            createdAt: new Date().toISOString(),
+        };
+    }
+    async executePhase(phase, scope) {
+        // In a full implementation, this delegates to the agent via opencode
+        // For now, it stores the task in working memory and returns a stub
+        this.memory.write("working", phase.agent, "current-task", {
+            phase: phase.name,
+            scope,
+            dependencies: this.getPhaseResults(phase.dependsOn),
+        });
+        return { phase: phase.name, status: "delegated" };
+    }
+    getPhaseResults(names) {
+        const results = {};
+        for (const name of names) {
+            const result = this.phaseResults.get(name);
+            if (result)
+                results[name] = result;
+        }
+        return results;
+    }
+    registerEventHandlers() {
+        this.bus.subscribe("VulnerabilityDetected", (event) => {
+            const payload = event.payload;
+            if (this.currentPlan) {
+                this.currentPlan.findings.push(payload);
+                this.memory.write("session", "orchestrator", "findings", this.currentPlan.findings);
+            }
+        });
+        this.bus.subscribe("AgentStatusChanged", (event) => {
+            const payload = event.payload;
+            this.memory.write("working", payload.agent, "status", payload);
+        });
+    }
+    emitPlanUpdated(plan) {
+        this.bus.publish({
+            id: uuid(),
+            timestamp: new Date().toISOString(),
+            type: "PlanUpdated",
+            source: "orchestrator",
+            target: "*",
+            priority: "normal",
+            payload: { planId: plan.id, status: plan.status, phases: plan.phases },
+        });
+    }
+    getPlan() {
+        return this.currentPlan;
+    }
+    getFindings() {
+        return this.currentPlan?.findings || [];
+    }
+}
+//# sourceMappingURL=orchestrator.js.map

package/dist/core/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../src/core/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AAErE,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AA0BrC,MAAM,OAAO,oBAAoB;IAC/B,GAAG,CAAU;IACb,SAAS,CAAqB;IAC9B,MAAM,CAAe;IACrB,KAAK,CAAyB;IAEtB,WAAW,GAAqB,IAAI,CAAA;IACpC,YAAY,GAAyB,IAAI,GAAG,EAAE,CAAA;IAEtD;QACE,IAAI,CAAC,GAAG,GAAG,IAAI,QAAQ,EAAE,CAAA;QACzB,IAAI,CAAC,SAAS,GAAG,IAAI,mBAAmB,EAAE,CAAA;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,EAAE,CAAA;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClD,IAAI,CAAC,qBAAqB,EAAE,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAiB;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,IAAI,CAAC,CAAA;QAClE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;QAE1B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAQ;YACxC,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAA;YACvB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;YAE1B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;gBACpD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;gBACzC,KAAK,CAAC,MAAM,GAAG,WAAW,CAAA;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAA;gBACvB,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,CAAC,IAAI,UAAU,EAAE,GAAG,CAAC,CAAA;YACnD,CAAC;YAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;QAC5B,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAA;QACzF,IAAI,CAAC,WAAW,GAAG,IAAI,CAAA;QACvB,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,UAAU,CAAC,KAAiB;QAClC,MAAM,MAAM,GAAiB;YAC3B,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;YACrF,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,gBAAgB,CAAC,EAAE;YAC9G,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,gBAAgB,CAAC,EAAE;YAC1G,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;YACtF,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,gBAAgB,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE;YAChJ,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,kBAAkB,CAAC,EAAE;YAClH,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,iBAAiB,CAAC,EAAE;SACnG,CAAA;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YACxG,OAAO;gBACL,EAAE,EAAE,IAAI,EAAE;gBACV,KAAK;gBACL,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAA;QACH,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI,EAAE;YACV,KAAK;YACL,MAAM;YACN,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAiB,EAAE,KAAiB;QAC7D,qEAAqE;QACrE,mEAAmE;QACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE;YACxD,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,KAAK;YACL,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC;SACpD,CAAC,CAAA;QACF,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;IACnD,CAAC;IAEO,eAAe,CAAC,KAAe;QACrC,MAAM,OAAO,GAA4B,EAAE,CAAA;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC1C,IAAI,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;QACpC,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAEO,qBAAqB;QAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,CAAC,KAAK,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkB,CAAA;YACxC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;YACrF,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE;YACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAA4C,CAAA;YAClE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;QAChE,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,eAAe,CAAC,IAAe;QACrC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YACf,EAAE,EAAE,IAAI,EAAE;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,GAAG;YACX,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;SACvE,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,WAAW,CAAA;IACzB,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAA;IACzC,CAAC;CACF"}

package/dist/core/plugin-manager.d.ts

@@ -0,0 +1,26 @@
+export interface PluginManifest {
+    name: string;
+    version: string;
+    capabilities: string[];
+    inputs: string[];
+    outputs: string[];
+    permissions: Record<string, string[]>;
+}
+export interface PluginResult {
+    plugin: string;
+    status: "completed" | "failed" | "timeout";
+    output: Record<string, unknown>;
+    duration: number;
+}
+export declare class PluginManager {
+    private plugins;
+    private results;
+    register(manifest: PluginManifest): void;
+    get(name: string): PluginManifest | undefined;
+    list(): PluginManifest[];
+    execute(name: string, params: Record<string, unknown>): Promise<PluginResult>;
+    private runWithTimeout;
+    private runPlugin;
+    getHistory(): PluginResult[];
+}
+//# sourceMappingURL=plugin-manager.d.ts.map

package/dist/core/plugin-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-manager.d.ts","sourceRoot":"","sources":["../../src/core/plugin-manager.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAA;IAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAAyC;IACxD,OAAO,CAAC,OAAO,CAAuC;IAEtD,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI;IAIxC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI7C,IAAI,IAAI,cAAc,EAAE;IAIlB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;YA2BrE,cAAc;YAMd,SAAS;IASvB,UAAU,IAAI,YAAY,EAAE;CAG7B"}

package/dist/core/plugin-manager.js

@@ -0,0 +1,57 @@
+export class PluginManager {
+    plugins = new Map();
+    results = new Map();
+    register(manifest) {
+        this.plugins.set(manifest.name, manifest);
+    }
+    get(name) {
+        return this.plugins.get(name);
+    }
+    list() {
+        return Array.from(this.plugins.values());
+    }
+    async execute(name, params) {
+        const plugin = this.plugins.get(name);
+        if (!plugin)
+            throw new Error(`Plugin "${name}" not registered`);
+        const start = Date.now();
+        try {
+            const output = await this.runWithTimeout(plugin, params, 30000);
+            const result = {
+                plugin: name,
+                status: "completed",
+                output,
+                duration: Date.now() - start,
+            };
+            this.results.set(`${name}_${Date.now()}`, result);
+            return result;
+        }
+        catch (err) {
+            const result = {
+                plugin: name,
+                status: err instanceof Error && err.message === "timeout" ? "timeout" : "failed",
+                output: { error: String(err) },
+                duration: Date.now() - start,
+            };
+            this.results.set(`${name}_${Date.now()}`, result);
+            return result;
+        }
+    }
+    async runWithTimeout(plugin, params, ms) {
+        const timeout = new Promise((_, reject) => setTimeout(() => reject(new Error("timeout")), ms));
+        const execution = this.runPlugin(plugin, params);
+        return Promise.race([execution, timeout]);
+    }
+    async runPlugin(plugin, params) {
+        // Plugin execution stub - actual tool execution delegated to opencode tool system
+        return {
+            plugin: plugin.name,
+            params,
+            message: `Plugin ${plugin.name} execution delegated to sandbox`,
+        };
+    }
+    getHistory() {
+        return Array.from(this.results.values());
+    }
+}
+//# sourceMappingURL=plugin-manager.js.map

package/dist/core/plugin-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-manager.js","sourceRoot":"","sources":["../../src/core/plugin-manager.ts"],"names":[],"mappings":"AAgBA,MAAM,OAAO,aAAa;IAChB,OAAO,GAAgC,IAAI,GAAG,EAAE,CAAA;IAChD,OAAO,GAA8B,IAAI,GAAG,EAAE,CAAA;IAEtD,QAAQ,CAAC,QAAwB;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC3C,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,MAA+B;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,kBAAkB,CAAC,CAAA;QAE/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;YAC/D,MAAM,MAAM,GAAiB;gBAC3B,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,WAAW;gBACnB,MAAM;gBACN,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAA;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;YACjD,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAiB;gBAC3B,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;gBAChF,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;gBAC9B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAA;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;YACjD,OAAO,MAAM,CAAA;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAAsB,EAAE,MAA+B,EAAE,EAAU;QAC9F,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACrG,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;IAC3C,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAsB,EAAE,MAA+B;QAC7E,kFAAkF;QAClF,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,MAAM;YACN,OAAO,EAAE,UAAU,MAAM,CAAC,IAAI,iCAAiC;SAChE,CAAA;IACH,CAAC;IAED,UAAU;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1C,CAAC;CACF"}

package/dist/core/provider-abstraction.d.ts

@@ -0,0 +1,41 @@
+export type ModelRole = "fast" | "balanced" | "precision" | "reasoning" | "writing";
+export interface ProviderRequest {
+    messages: {
+        role: "system" | "user" | "assistant";
+        content: string;
+    }[];
+    model?: string;
+    temperature?: number;
+    maxTokens?: number;
+    stream?: boolean;
+}
+export interface ProviderResponse {
+    content: string;
+    model: string;
+    provider: string;
+    tokens: {
+        input: number;
+        output: number;
+    };
+}
+export interface ProviderConfig {
+    name: string;
+    apiKey?: string;
+    baseUrl?: string;
+    models: string[];
+    roles: Partial<Record<ModelRole, string>>;
+    priority: number;
+}
+export declare class ProviderAbstraction {
+    private providers;
+    private fallbackChain;
+    register(config: ProviderConfig): void;
+    complete(role: ModelRole, request: ProviderRequest): Promise<ProviderResponse>;
+    stream(role: ModelRole, request: ProviderRequest): AsyncGenerator<string>;
+    private resolveProvider;
+    private callProvider;
+}
+export declare class NoProviderAvailable extends Error {
+    constructor(role: ModelRole);
+}
+//# sourceMappingURL=provider-abstraction.d.ts.map

package/dist/core/provider-abstraction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-abstraction.d.ts","sourceRoot":"","sources":["../../src/core/provider-abstraction.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,CAAA;AAEnF,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE;QAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACtE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;IACzC,QAAQ,EAAE,MAAM,CAAA;CACjB;AAUD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,aAAa,CAA8C;IAEnE,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IAKhC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAQ7E,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC;IAShF,OAAO,CAAC,eAAe;YAsBT,YAAY;CAU3B;AAED,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,IAAI,EAAE,SAAS;CAI5B"}

package/dist/core/provider-abstraction.js

@@ -0,0 +1,68 @@
+const ROLE_MODEL_MAP = {
+    fast: ["gpt-4o-mini", "claude-haiku-4-5", "gemini-2.5-flash"],
+    balanced: ["gpt-4o", "claude-sonnet-4", "gemini-2.5-pro"],
+    precision: ["claude-sonnet-4", "gpt-4o", "deepseek-r1"],
+    reasoning: ["o4-mini", "deepseek-r1", "claude-sonnet-4"],
+    writing: ["claude-sonnet-4", "gpt-4o", "gemini-2.5-pro"],
+};
+export class ProviderAbstraction {
+    providers = [];
+    fallbackChain = ["precision", "balanced", "fast"];
+    register(config) {
+        this.providers.push(config);
+        this.providers.sort((a, b) => b.priority - a.priority);
+    }
+    async complete(role, request) {
+        const modelName = request.model || ROLE_MODEL_MAP[role][0];
+        const provider = this.resolveProvider(modelName, role);
+        if (!provider)
+            throw new NoProviderAvailable(role);
+        return this.callProvider(provider, modelName, request);
+    }
+    async *stream(role, request) {
+        const modelName = request.model || ROLE_MODEL_MAP[role][0];
+        const provider = this.resolveProvider(modelName, role);
+        if (!provider)
+            throw new NoProviderAvailable(role);
+        const response = await this.callProvider(provider, modelName, { ...request, stream: true });
+        yield response.content;
+    }
+    resolveProvider(modelName, role) {
+        const exact = this.providers.find((p) => p.models.includes(modelName));
+        if (exact)
+            return exact;
+        const roleModels = ROLE_MODEL_MAP[role];
+        for (const model of roleModels) {
+            const found = this.providers.find((p) => p.models.includes(model));
+            if (found)
+                return found;
+        }
+        const fallbackRoles = this.fallbackChain.slice(this.fallbackChain.indexOf(role) + 1);
+        for (const fallbackRole of fallbackRoles) {
+            const fallbackModels = ROLE_MODEL_MAP[fallbackRole] || [];
+            for (const model of fallbackModels) {
+                const found = this.providers.find((p) => p.models.includes(model));
+                if (found)
+                    return found;
+            }
+        }
+        return this.providers[0];
+    }
+    async callProvider(provider, model, request) {
+        // In production, this routes to the actual provider API
+        // For now, returns a stub that works with opencode's built-in provider resolution
+        return {
+            content: "",
+            model,
+            provider: provider.name,
+            tokens: { input: 0, output: 0 },
+        };
+    }
+}
+export class NoProviderAvailable extends Error {
+    constructor(role) {
+        super(`No provider available for role: ${role}`);
+        this.name = "NoProviderAvailable";
+    }
+}
+//# sourceMappingURL=provider-abstraction.js.map

package/dist/core/provider-abstraction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-abstraction.js","sourceRoot":"","sources":["../../src/core/provider-abstraction.ts"],"names":[],"mappings":"AA0BA,MAAM,cAAc,GAAgC;IAClD,IAAI,EAAE,CAAC,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,CAAC;IAC7D,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;IACzD,SAAS,EAAE,CAAC,iBAAiB,EAAE,QAAQ,EAAE,aAAa,CAAC;IACvD,SAAS,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,iBAAiB,CAAC;IACxD,OAAO,EAAE,CAAC,iBAAiB,EAAE,QAAQ,EAAE,gBAAgB,CAAC;CACzD,CAAA;AAED,MAAM,OAAO,mBAAmB;IACtB,SAAS,GAAqB,EAAE,CAAA;IAChC,aAAa,GAAa,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;IAEnE,QAAQ,CAAC,MAAsB;QAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC3B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IACxD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAe,EAAE,OAAwB;QACtD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACtD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAA;QAElD,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;IACxD,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAC,IAAe,EAAE,OAAwB;QACrD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACtD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAA;QAElD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3F,MAAM,QAAQ,CAAC,OAAO,CAAA;IACxB,CAAC;IAEO,eAAe,CAAC,SAAiB,EAAE,IAAe;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;QACtE,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;QACvC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;YAClE,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAA;QACzB,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACpF,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;YACzC,MAAM,cAAc,GAAG,cAAc,CAAC,YAAyB,CAAC,IAAI,EAAE,CAAA;YACtE,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;gBAClE,IAAI,KAAK;oBAAE,OAAO,KAAK,CAAA;YACzB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAwB,EAAE,KAAa,EAAE,OAAwB;QAC1F,wDAAwD;QACxD,kFAAkF;QAClF,OAAO;YACL,OAAO,EAAE,EAAE;YACX,KAAK;YACL,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;SAChC,CAAA;IACH,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,IAAe;QACzB,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAA;QAChD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF"}

package/dist/core/report-generator.d.ts

@@ -0,0 +1,30 @@
+export interface ReportSection {
+    title: string;
+    content: string;
+    subsections?: ReportSection[];
+}
+export interface ReportConfig {
+    companyName: string;
+    author: string;
+    includeRemediationTimeline: boolean;
+    includeEvidenceSnippets: boolean;
+    formats: ("md" | "docx" | "pdf")[];
+}
+export declare class ReportGenerator {
+    private config;
+    configure(config: Partial<ReportConfig>): void;
+    generate(sections: ReportSection[]): Record<string, string>;
+    standardSections(params: {
+        scope: string;
+        findings: unknown[];
+        riskMatrix: Record<string, number>;
+        evidence: unknown[];
+        cves: string[];
+    }): ReportSection[];
+    private generateMarkdown;
+    private executiveSummary;
+    private remediationPlan;
+    exportDocx(markdown: string): Promise<Uint8Array>;
+    exportPdf(markdown: string): Promise<Uint8Array>;
+}
+//# sourceMappingURL=report-generator.d.ts.map

package/dist/core/report-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-generator.d.ts","sourceRoot":"","sources":["../../src/core/report-generator.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,aAAa,EAAE,CAAA;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,0BAA0B,EAAE,OAAO,CAAA;IACnC,uBAAuB,EAAE,OAAO,CAAA;IAChC,OAAO,EAAE,CAAC,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC,EAAE,CAAA;CACnC;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAMb;IAED,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAI9C,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAU3D,gBAAgB,CAAC,MAAM,EAAE;QACvB,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,OAAO,EAAE,CAAA;QACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAClC,QAAQ,EAAE,OAAO,EAAE,CAAA;QACnB,IAAI,EAAE,MAAM,EAAE,CAAA;KACf,GAAG,aAAa,EAAE;IAkCnB,OAAO,CAAC,gBAAgB;IAmBxB,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,eAAe;IAkBjB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAMjD,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAKvD"}