@renseiai/agentfactory 0.8.17 → 0.8.18

package/dist/src/orchestrator/security-scan-event.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Security Scan Event
+ *
+ * Defines the `SecurityScanEvent` type and parsers for extracting structured
+ * vulnerability data from security scanner output (semgrep JSON, npm-audit JSON, etc.).
+ *
+ * The security station template instructs agents to output structured JSON in
+ * fenced code blocks tagged `security-scan-result`. This module parses that output.
+ */
+import { z } from 'zod';
+export interface SecurityScanEvent {
+    type: 'agent.security-scan';
+    scanner: string;
+    severityCounts: {
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+    };
+    totalFindings: number;
+    target: string;
+    scanDurationMs: number;
+    timestamp: string;
+}
+export declare const SecurityScanEventSchema: z.ZodObject<{
+    type: z.ZodLiteral<"agent.security-scan">;
+    scanner: z.ZodString;
+    severityCounts: z.ZodObject<{
+        critical: z.ZodNumber;
+        high: z.ZodNumber;
+        medium: z.ZodNumber;
+        low: z.ZodNumber;
+    }, z.core.$strip>;
+    totalFindings: z.ZodNumber;
+    target: z.ZodString;
+    scanDurationMs: z.ZodNumber;
+    timestamp: z.ZodString;
+}, z.core.$strip>;
+/**
+ * Parse structured security scan results from agent output.
+ *
+ * Looks for fenced code blocks tagged `security-scan-result` and parses
+ * the JSON inside each block. Returns one `SecurityScanEvent` per block.
+ *
+ * Gracefully handles malformed output — returns partial data with zero counts
+ * rather than throwing.
+ */
+export declare function parseSecurityScanOutput(rawOutput: string): SecurityScanEvent[];
+/**
+ * Parse semgrep --json output into a SecurityScanEvent.
+ */
+export declare function parseSemgrepOutput(rawJson: string, target: string, durationMs: number): SecurityScanEvent;
+/**
+ * Parse npm audit --json output into a SecurityScanEvent.
+ */
+export declare function parseNpmAuditOutput(rawJson: string, target: string, durationMs: number): SecurityScanEvent;
+//# sourceMappingURL=security-scan-event.d.ts.map

package/dist/src/orchestrator/security-scan-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scan-event.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/security-scan-event.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,qBAAqB,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/E,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;CAClB;AAMD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;iBAalC,CAAA;AAYF;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAkB9E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,iBAAiB,CA2BzG;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,iBAAiB,CAoD1G"}

package/dist/src/orchestrator/security-scan-event.js

@@ -0,0 +1,192 @@
+/**
+ * Security Scan Event
+ *
+ * Defines the `SecurityScanEvent` type and parsers for extracting structured
+ * vulnerability data from security scanner output (semgrep JSON, npm-audit JSON, etc.).
+ *
+ * The security station template instructs agents to output structured JSON in
+ * fenced code blocks tagged `security-scan-result`. This module parses that output.
+ */
+import { z } from 'zod';
+// ---------------------------------------------------------------------------
+// Zod Schema
+// ---------------------------------------------------------------------------
+export const SecurityScanEventSchema = z.object({
+    type: z.literal('agent.security-scan'),
+    scanner: z.string().min(1),
+    severityCounts: z.object({
+        critical: z.number().int().nonnegative(),
+        high: z.number().int().nonnegative(),
+        medium: z.number().int().nonnegative(),
+        low: z.number().int().nonnegative(),
+    }),
+    totalFindings: z.number().int().nonnegative(),
+    target: z.string().min(1),
+    scanDurationMs: z.number().nonnegative(),
+    timestamp: z.string().min(1),
+});
+// ---------------------------------------------------------------------------
+// Structured output parser (from agent fenced code blocks)
+// ---------------------------------------------------------------------------
+/**
+ * Regex to extract JSON from ```security-scan-result fenced code blocks.
+ * The agent outputs one block per scanner run.
+ */
+const FENCED_BLOCK_RE = /```security-scan-result\s*\n([\s\S]*?)```/g;
+/**
+ * Parse structured security scan results from agent output.
+ *
+ * Looks for fenced code blocks tagged `security-scan-result` and parses
+ * the JSON inside each block. Returns one `SecurityScanEvent` per block.
+ *
+ * Gracefully handles malformed output — returns partial data with zero counts
+ * rather than throwing.
+ */
+export function parseSecurityScanOutput(rawOutput) {
+    const events = [];
+    const now = new Date().toISOString();
+    for (const match of rawOutput.matchAll(FENCED_BLOCK_RE)) {
+        const jsonStr = match[1]?.trim();
+        if (!jsonStr)
+            continue;
+        try {
+            const parsed = JSON.parse(jsonStr);
+            const event = buildEventFromParsed(parsed, now);
+            events.push(event);
+        }
+        catch {
+            // Malformed JSON — skip this block
+        }
+    }
+    return events;
+}
+/**
+ * Parse semgrep --json output into a SecurityScanEvent.
+ */
+export function parseSemgrepOutput(rawJson, target, durationMs) {
+    const now = new Date().toISOString();
+    try {
+        const parsed = JSON.parse(rawJson);
+        const results = Array.isArray(parsed.results) ? parsed.results : [];
+        const counts = { critical: 0, high: 0, medium: 0, low: 0 };
+        for (const result of results) {
+            const severity = (result.extra?.severity ?? result.severity ?? '').toLowerCase();
+            if (severity === 'error' || severity === 'critical')
+                counts.critical++;
+            else if (severity === 'warning' || severity === 'high')
+                counts.high++;
+            else if (severity === 'medium' || severity === 'info')
+                counts.medium++;
+            else
+                counts.low++;
+        }
+        return {
+            type: 'agent.security-scan',
+            scanner: 'semgrep',
+            severityCounts: counts,
+            totalFindings: results.length,
+            target,
+            scanDurationMs: durationMs,
+            timestamp: now,
+        };
+    }
+    catch {
+        return emptyEvent('semgrep', target, durationMs, now);
+    }
+}
+/**
+ * Parse npm audit --json output into a SecurityScanEvent.
+ */
+export function parseNpmAuditOutput(rawJson, target, durationMs) {
+    const now = new Date().toISOString();
+    try {
+        const parsed = JSON.parse(rawJson);
+        const counts = { critical: 0, high: 0, medium: 0, low: 0 };
+        let totalFindings = 0;
+        // npm audit v2 format (npm 7+)
+        if (parsed.vulnerabilities && typeof parsed.vulnerabilities === 'object') {
+            for (const vuln of Object.values(parsed.vulnerabilities)) {
+                const severity = (vuln.severity ?? '').toLowerCase();
+                if (severity === 'critical')
+                    counts.critical++;
+                else if (severity === 'high')
+                    counts.high++;
+                else if (severity === 'moderate' || severity === 'medium')
+                    counts.medium++;
+                else if (severity === 'low')
+                    counts.low++;
+                totalFindings++;
+            }
+        }
+        // npm audit v1 format (npm 6)
+        else if (parsed.advisories && typeof parsed.advisories === 'object') {
+            for (const advisory of Object.values(parsed.advisories)) {
+                const severity = (advisory.severity ?? '').toLowerCase();
+                if (severity === 'critical')
+                    counts.critical++;
+                else if (severity === 'high')
+                    counts.high++;
+                else if (severity === 'moderate' || severity === 'medium')
+                    counts.medium++;
+                else if (severity === 'low')
+                    counts.low++;
+                totalFindings++;
+            }
+        }
+        // pnpm audit format (metadata.vulnerabilities summary)
+        else if (parsed.metadata?.vulnerabilities) {
+            const v = parsed.metadata.vulnerabilities;
+            counts.critical = v.critical ?? 0;
+            counts.high = v.high ?? 0;
+            counts.medium = v.moderate ?? v.medium ?? 0;
+            counts.low = v.low ?? 0;
+            totalFindings = counts.critical + counts.high + counts.medium + counts.low;
+        }
+        return {
+            type: 'agent.security-scan',
+            scanner: 'npm-audit',
+            severityCounts: counts,
+            totalFindings,
+            target,
+            scanDurationMs: durationMs,
+            timestamp: now,
+        };
+    }
+    catch {
+        return emptyEvent('npm-audit', target, durationMs, now);
+    }
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function buildEventFromParsed(parsed, timestamp) {
+    const obj = parsed;
+    const severityCounts = obj.severityCounts;
+    const counts = {
+        critical: Math.max(0, Number(severityCounts?.critical) || 0),
+        high: Math.max(0, Number(severityCounts?.high) || 0),
+        medium: Math.max(0, Number(severityCounts?.medium) || 0),
+        low: Math.max(0, Number(severityCounts?.low) || 0),
+    };
+    const total = counts.critical + counts.high + counts.medium + counts.low;
+    return {
+        type: 'agent.security-scan',
+        scanner: String(obj.scanner || 'unknown'),
+        severityCounts: counts,
+        totalFindings: Math.max(0, Number(obj.totalFindings) || total),
+        target: String(obj.target || 'unknown'),
+        scanDurationMs: Math.max(0, Number(obj.scanDurationMs) || 0),
+        timestamp,
+    };
+}
+function emptyEvent(scanner, target, durationMs, timestamp) {
+    return {
+        type: 'agent.security-scan',
+        scanner,
+        severityCounts: { critical: 0, high: 0, medium: 0, low: 0 },
+        totalFindings: 0,
+        target,
+        scanDurationMs: durationMs,
+        timestamp,
+    };
+}

package/dist/src/orchestrator/security-scan-event.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security-scan-event.test.d.ts.map

package/dist/src/orchestrator/security-scan-event.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scan-event.test.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/security-scan-event.test.ts"],"names":[],"mappings":""}

package/dist/src/orchestrator/security-scan-event.test.js

@@ -0,0 +1,219 @@
+import { describe, it, expect } from 'vitest';
+import { parseSecurityScanOutput, parseSemgrepOutput, parseNpmAuditOutput, SecurityScanEventSchema, } from './security-scan-event.js';
+describe('parseSecurityScanOutput', () => {
+    it('parses a single security-scan-result fenced block', () => {
+        const output = `
+Some agent text here.
+
+\`\`\`security-scan-result
+{
+  "scanner": "semgrep",
+  "severityCounts": { "critical": 0, "high": 2, "medium": 5, "low": 12 },
+  "totalFindings": 19,
+  "target": "repo:org/project",
+  "scanDurationMs": 45000
+}
+\`\`\`
+
+More text after.
+`;
+        const events = parseSecurityScanOutput(output);
+        expect(events).toHaveLength(1);
+        expect(events[0].type).toBe('agent.security-scan');
+        expect(events[0].scanner).toBe('semgrep');
+        expect(events[0].severityCounts.high).toBe(2);
+        expect(events[0].totalFindings).toBe(19);
+        expect(events[0].target).toBe('repo:org/project');
+        expect(events[0].scanDurationMs).toBe(45000);
+        expect(events[0].timestamp).toBeTruthy();
+    });
+    it('parses multiple security-scan-result blocks', () => {
+        const output = `
+\`\`\`security-scan-result
+{
+  "scanner": "semgrep",
+  "severityCounts": { "critical": 1, "high": 0, "medium": 0, "low": 0 },
+  "totalFindings": 1,
+  "target": "src/",
+  "scanDurationMs": 10000
+}
+\`\`\`
+
+\`\`\`security-scan-result
+{
+  "scanner": "npm-audit",
+  "severityCounts": { "critical": 0, "high": 3, "medium": 2, "low": 1 },
+  "totalFindings": 6,
+  "target": "package.json",
+  "scanDurationMs": 5000
+}
+\`\`\`
+`;
+        const events = parseSecurityScanOutput(output);
+        expect(events).toHaveLength(2);
+        expect(events[0].scanner).toBe('semgrep');
+        expect(events[1].scanner).toBe('npm-audit');
+    });
+    it('returns empty array for output with no fenced blocks', () => {
+        const events = parseSecurityScanOutput('No security scan results here.');
+        expect(events).toHaveLength(0);
+    });
+    it('skips malformed JSON blocks gracefully', () => {
+        const output = `
+\`\`\`security-scan-result
+{ this is not valid json }
+\`\`\`
+
+\`\`\`security-scan-result
+{
+  "scanner": "semgrep",
+  "severityCounts": { "critical": 0, "high": 0, "medium": 0, "low": 0 },
+  "totalFindings": 0,
+  "target": ".",
+  "scanDurationMs": 1000
+}
+\`\`\`
+`;
+        const events = parseSecurityScanOutput(output);
+        expect(events).toHaveLength(1);
+        expect(events[0].scanner).toBe('semgrep');
+    });
+    it('handles missing fields with defaults', () => {
+        const output = `
+\`\`\`security-scan-result
+{
+  "scanner": "custom-tool"
+}
+\`\`\`
+`;
+        const events = parseSecurityScanOutput(output);
+        expect(events).toHaveLength(1);
+        expect(events[0].scanner).toBe('custom-tool');
+        expect(events[0].severityCounts).toEqual({ critical: 0, high: 0, medium: 0, low: 0 });
+        expect(events[0].totalFindings).toBe(0);
+        expect(events[0].target).toBe('unknown');
+    });
+});
+describe('parseSemgrepOutput', () => {
+    it('parses semgrep --json output', () => {
+        const semgrepJson = JSON.stringify({
+            results: [
+                { extra: { severity: 'ERROR' }, check_id: 'rule1' },
+                { extra: { severity: 'WARNING' }, check_id: 'rule2' },
+                { extra: { severity: 'WARNING' }, check_id: 'rule3' },
+                { extra: { severity: 'INFO' }, check_id: 'rule4' },
+            ],
+        });
+        const event = parseSemgrepOutput(semgrepJson, 'src/', 30000);
+        expect(event.type).toBe('agent.security-scan');
+        expect(event.scanner).toBe('semgrep');
+        expect(event.severityCounts.critical).toBe(1);
+        expect(event.severityCounts.high).toBe(2);
+        expect(event.severityCounts.medium).toBe(1);
+        expect(event.severityCounts.low).toBe(0);
+        expect(event.totalFindings).toBe(4);
+        expect(event.target).toBe('src/');
+        expect(event.scanDurationMs).toBe(30000);
+    });
+    it('handles empty results array', () => {
+        const event = parseSemgrepOutput(JSON.stringify({ results: [] }), '.', 0);
+        expect(event.totalFindings).toBe(0);
+        expect(event.severityCounts).toEqual({ critical: 0, high: 0, medium: 0, low: 0 });
+    });
+    it('returns empty event for malformed input', () => {
+        const event = parseSemgrepOutput('not json', '.', 0);
+        expect(event.scanner).toBe('semgrep');
+        expect(event.totalFindings).toBe(0);
+    });
+});
+describe('parseNpmAuditOutput', () => {
+    it('parses npm audit v2 format', () => {
+        const auditJson = JSON.stringify({
+            vulnerabilities: {
+                lodash: { severity: 'critical' },
+                express: { severity: 'high' },
+                debug: { severity: 'moderate' },
+                chalk: { severity: 'low' },
+            },
+        });
+        const event = parseNpmAuditOutput(auditJson, 'package.json', 5000);
+        expect(event.scanner).toBe('npm-audit');
+        expect(event.severityCounts.critical).toBe(1);
+        expect(event.severityCounts.high).toBe(1);
+        expect(event.severityCounts.medium).toBe(1);
+        expect(event.severityCounts.low).toBe(1);
+        expect(event.totalFindings).toBe(4);
+    });
+    it('parses npm audit v1 format (advisories)', () => {
+        const auditJson = JSON.stringify({
+            advisories: {
+                '1': { severity: 'high' },
+                '2': { severity: 'high' },
+            },
+        });
+        const event = parseNpmAuditOutput(auditJson, 'package.json', 3000);
+        expect(event.severityCounts.high).toBe(2);
+        expect(event.totalFindings).toBe(2);
+    });
+    it('parses pnpm audit metadata format', () => {
+        const auditJson = JSON.stringify({
+            metadata: {
+                vulnerabilities: {
+                    critical: 0,
+                    high: 1,
+                    moderate: 3,
+                    low: 5,
+                },
+            },
+        });
+        const event = parseNpmAuditOutput(auditJson, 'package.json', 2000);
+        expect(event.severityCounts.critical).toBe(0);
+        expect(event.severityCounts.high).toBe(1);
+        expect(event.severityCounts.medium).toBe(3);
+        expect(event.severityCounts.low).toBe(5);
+        expect(event.totalFindings).toBe(9);
+    });
+    it('returns empty event for malformed input', () => {
+        const event = parseNpmAuditOutput('not json', '.', 0);
+        expect(event.scanner).toBe('npm-audit');
+        expect(event.totalFindings).toBe(0);
+    });
+});
+describe('SecurityScanEventSchema', () => {
+    it('validates a correct event', () => {
+        const event = {
+            type: 'agent.security-scan',
+            scanner: 'semgrep',
+            severityCounts: { critical: 0, high: 0, medium: 0, low: 0 },
+            totalFindings: 0,
+            target: '.',
+            scanDurationMs: 1000,
+            timestamp: new Date().toISOString(),
+        };
+        expect(() => SecurityScanEventSchema.parse(event)).not.toThrow();
+    });
+    it('rejects negative severity counts', () => {
+        const event = {
+            type: 'agent.security-scan',
+            scanner: 'semgrep',
+            severityCounts: { critical: -1, high: 0, medium: 0, low: 0 },
+            totalFindings: 0,
+            target: '.',
+            scanDurationMs: 1000,
+            timestamp: new Date().toISOString(),
+        };
+        expect(() => SecurityScanEventSchema.parse(event)).toThrow();
+    });
+    it('rejects missing scanner', () => {
+        const event = {
+            type: 'agent.security-scan',
+            scanner: '',
+            severityCounts: { critical: 0, high: 0, medium: 0, low: 0 },
+            totalFindings: 0,
+            target: '.',
+            scanDurationMs: 1000,
+            timestamp: new Date().toISOString(),
+        };
+        expect(() => SecurityScanEventSchema.parse(event)).toThrow();
+    });
+});

package/dist/src/orchestrator/state-recovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state-recovery.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/state-recovery.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACd,UAAU,EACV,mBAAmB,EAEnB,iBAAiB,EAClB,MAAM,kBAAkB,CAAA;AACzB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAQpD;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEzD;AAeD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,SAAS,GAAE,MAAqC,GAC/C,OAAO,CAIT;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAE5E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAEzE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,YAAY,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAEjE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE;IACP,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAA;CACxB,GACL,mBAAmB,CA2ErB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAK7D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAI3E;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,GAC9B,aAAa,GAAG,IAAI,CAWtB;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAIxE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,EAAE,aAAa,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB,GAAG,aAAa,CAmBhB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,aAAa,GACtB,MAAM,CAiBR;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,aAAa,EACpB,KAAK,CAAC,EAAE,UAAU,EAClB,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CA6DR;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CASjE;AAED;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CASnD;AAED;;GAEG;AACH,wBAAgB,6BAA6B,IAAI,MAAM,CAStD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAE1E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAMnF"}
+{"version":3,"file":"state-recovery.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/state-recovery.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACd,UAAU,EACV,mBAAmB,EAEnB,iBAAiB,EAClB,MAAM,kBAAkB,CAAA;AACzB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAQpD;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEzD;AAeD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,cAAc,GAAG,IAAI,EAChC,SAAS,GAAE,MAAqC,GAC/C,OAAO,CAIT;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAE5E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAEzE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,YAAY,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAEjE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE;IACP,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAA;CACxB,GACL,mBAAmB,CA2ErB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAK7D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAI3E;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,GAC9B,aAAa,GAAG,IAAI,CAWtB;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAIxE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,EAAE,aAAa,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB,GAAG,aAAa,CAmBhB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,aAAa,GACtB,MAAM,CAkBR;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,aAAa,EACpB,KAAK,CAAC,EAAE,UAAU,EAClB,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CA6DR;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CASjE;AAED;;GAEG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CASnD;AAED;;GAEG;AACH,wBAAgB,6BAA6B,IAAI,MAAM,CAStD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAE1E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAMnF"}

package/dist/src/orchestrator/state-recovery.js

@@ -231,6 +231,7 @@ export function getTaskListId(issueIdentifier, workType) {
         'qa-coordination': 'QA-COORD',
         'acceptance-coordination': 'AC-COORD',
         merge: 'MRG',
+        security: 'SEC',
     };
     return `${issueIdentifier}-${suffixMap[workType]}`;
 }

package/dist/src/orchestrator/work-types.d.ts

@@ -9,7 +9,7 @@
  * Agent work type — determines prompt template, status transitions,
  * and whether a git worktree is needed.
  */
-export type AgentWorkType = 'research' | 'backlog-creation' | 'development' | 'inflight' | 'inflight-coordination' | 'qa' | 'acceptance' | 'refinement' | 'refinement-coordination' | 'coordination' | 'qa-coordination' | 'acceptance-coordination' | 'merge';
+export type AgentWorkType = 'research' | 'backlog-creation' | 'development' | 'inflight' | 'inflight-coordination' | 'qa' | 'acceptance' | 'refinement' | 'refinement-coordination' | 'coordination' | 'qa-coordination' | 'acceptance-coordination' | 'merge' | 'security';
 /**
  * Workflow status — platform-agnostic string (e.g., 'Started', 'Finished').
  * Concrete values are defined by the issue tracker plugin.

package/dist/src/orchestrator/work-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"work-types.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/work-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,kBAAkB,GAClB,aAAa,GACb,UAAU,GACV,uBAAuB,GACvB,IAAI,GACJ,YAAY,GACZ,YAAY,GACZ,yBAAyB,GACzB,cAAc,GACd,iBAAiB,GACjB,yBAAyB,GACzB,OAAO,CAAA;AAEX;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAA;AAEnC;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC/C,6EAA6E;IAC7E,mBAAmB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;IACzD,sEAAsE;IACtE,sBAAsB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;IAC5D,qDAAqD;IACrD,kBAAkB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;IACxD,oEAAoE;IACpE,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,6CAA6C;IAC7C,0BAA0B,EAAE,WAAW,CAAC,aAAa,CAAC,CAAA;CACvD;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;CAS1B,CAAA;AAEV,MAAM,MAAM,oBAAoB,GAC9B,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,OAAO,uBAAuB,CAAC,CAAA"}
+{"version":3,"file":"work-types.d.ts","sourceRoot":"","sources":["../../../src/orchestrator/work-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,kBAAkB,GAClB,aAAa,GACb,UAAU,GACV,uBAAuB,GACvB,IAAI,GACJ,YAAY,GACZ,YAAY,GACZ,yBAAyB,GACzB,cAAc,GACd,iBAAiB,GACjB,yBAAyB,GACzB,OAAO,GACP,UAAU,CAAA;AAEd;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAA;AAEnC;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC/C,6EAA6E;IAC7E,mBAAmB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;IACzD,sEAAsE;IACtE,sBAAsB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;IAC5D,qDAAqD;IACrD,kBAAkB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;IACxD,oEAAoE;IACpE,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,6CAA6C;IAC7C,0BAA0B,EAAE,WAAW,CAAC,aAAa,CAAC,CAAA;CACvD;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;CAS1B,CAAA;AAEV,MAAM,MAAM,oBAAoB,GAC9B,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,OAAO,uBAAuB,CAAC,CAAA"}

package/dist/src/providers/types.d.ts

@@ -138,6 +138,7 @@ export interface AgentToolUseEvent {
     toolName: string;
     toolUseId?: string;
     input: Record<string, unknown>;
+    toolCategory?: import('../tools/tool-category.js').ToolCategory;
     raw: unknown;
 }
 /** Tool execution result */

package/dist/src/providers/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/providers/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,qCAAqC;AACrC,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,GAAG,WAAW,GAAG,KAAK,CAAA;AAEhF;;;;;GAKG;AACH;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,sEAAsE;IACtE,wBAAwB,EAAE,OAAO,CAAA;IACjC,oDAAoD;IACpD,qBAAqB,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,0BAA0B;IAC1B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAEhC,yDAAyD;IACzD,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAA;IAEhD,gCAAgC;IAChC,KAAK,CAAC,MAAM,EAAE,gBAAgB,GAAG,WAAW,CAAA;IAE5C,8CAA8C;IAC9C,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,WAAW,CAAA;CACjE;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAA;IACd,sCAAsC;IACtC,GAAG,EAAE,MAAM,CAAA;IACX,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,+CAA+C;IAC/C,eAAe,EAAE,eAAe,CAAA;IAChC,4DAA4D;IAC5D,UAAU,EAAE,OAAO,CAAA;IACnB,wDAAwD;IACxD,cAAc,EAAE,OAAO,CAAA;IACvB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAA;IACpD;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,gCAAgC,EAAE,eAAe,CAAC,CAAA;IACrF;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,iDAAiD;IACjD,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;IACjC;;;OAGG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C;;OAEG;IACH,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,UAAU,GAClB,cAAc,GACd,gBAAgB,GAChB,uBAAuB,GACvB,iBAAiB,GACjB,oBAAoB,GACpB,sBAAsB,GACtB,gBAAgB,GAChB,eAAe,CAAA;AAEnB,yDAAyD;AACzD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,OAAO,CAAA;CACb;AAED,4DAA4D;AAC5D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,OAAO,CAAA;CACb;AAED,4BAA4B;AAC5B,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,gBAAgB,CAAA;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,OAAO,CAAA;CACb;AAED,+BAA+B;AAC/B,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,UAAU,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,GAAG,EAAE,OAAO,CAAA;CACb;AAED,4BAA4B;AAC5B,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,aAAa,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,GAAG,EAAE,OAAO,CAAA;CACb;AAED,qCAAqC;AACrC,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,eAAe,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,GAAG,EAAE,OAAO,CAAA;CACb;AAED,wCAAwC;AACxC,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,sBAAsB;IACtB,IAAI,CAAC,EAAE,aAAa,CAAA;IACpB,GAAG,EAAE,OAAO,CAAA;CACb;AAED,kBAAkB;AAClB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,OAAO,CAAA;CACb;AAED,gCAAgC;AAChC,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/providers/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,qCAAqC;AACrC,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,GAAG,WAAW,GAAG,KAAK,CAAA;AAEhF;;;;;GAKG;AACH;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,sEAAsE;IACtE,wBAAwB,EAAE,OAAO,CAAA;IACjC,oDAAoD;IACpD,qBAAqB,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,0BAA0B;IAC1B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAEhC,yDAAyD;IACzD,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAA;IAEhD,gCAAgC;IAChC,KAAK,CAAC,MAAM,EAAE,gBAAgB,GAAG,WAAW,CAAA;IAE5C,8CAA8C;IAC9C,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,WAAW,CAAA;CACjE;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAA;IACd,sCAAsC;IACtC,GAAG,EAAE,MAAM,CAAA;IACX,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,+CAA+C;IAC/C,eAAe,EAAE,eAAe,CAAA;IAChC,4DAA4D;IAC5D,UAAU,EAAE,OAAO,CAAA;IACnB,wDAAwD;IACxD,cAAc,EAAE,OAAO,CAAA;IACvB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAAA;IACpD;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,gCAAgC,EAAE,eAAe,CAAC,CAAA;IACrF;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,iDAAiD;IACjD,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;IACjC;;;OAGG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C;;OAEG;IACH,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,UAAU,GAClB,cAAc,GACd,gBAAgB,GAChB,uBAAuB,GACvB,iBAAiB,GACjB,oBAAoB,GACpB,sBAAsB,GACtB,gBAAgB,GAChB,eAAe,CAAA;AAEnB,yDAAyD;AACzD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,OAAO,CAAA;CACb;AAED,4DAA4D;AAC5D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,OAAO,CAAA;CACb;AAED,4BAA4B;AAC5B,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,gBAAgB,CAAA;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,OAAO,CAAA;CACb;AAED,+BAA+B;AAC/B,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,UAAU,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,YAAY,CAAC,EAAE,OAAO,2BAA2B,EAAE,YAAY,CAAA;IAC/D,GAAG,EAAE,OAAO,CAAA;CACb;AAED,4BAA4B;AAC5B,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,aAAa,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,GAAG,EAAE,OAAO,CAAA;CACb;AAED,qCAAqC;AACrC,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,eAAe,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,GAAG,EAAE,OAAO,CAAA;CACb;AAED,wCAAwC;AACxC,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,sBAAsB;IACtB,IAAI,CAAC,EAAE,aAAa,CAAA;IACpB,GAAG,EAAE,OAAO,CAAA;CACb;AAED,kBAAkB;AAClB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,OAAO,CAAA;CACb;AAED,gCAAgC;AAChC,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB"}

package/dist/src/templates/registry.test.js

@@ -127,12 +127,13 @@ describe('TemplateRegistry', () => {
     describe('built-in defaults', () => {
         it('loads built-in default templates when useBuiltinDefaults is true', () => {
             const fullRegistry = TemplateRegistry.create({ useBuiltinDefaults: true });
-            // Should have loaded templates for all 13 base work types + 5 strategy templates
+            // Should have loaded templates for all 14 base work types + 5 strategy templates
             const workTypes = fullRegistry.getRegisteredWorkTypes();
-            expect(workTypes.length).toBe(18);
+            expect(workTypes.length).toBe(19);
             expect(workTypes).toContain('development');
             expect(workTypes).toContain('qa');
             expect(workTypes).toContain('coordination');
+            expect(workTypes).toContain('security');
             // Strategy-specific templates
             expect(workTypes).toContain('refinement-context-enriched');
             expect(workTypes).toContain('refinement-decompose');

package/dist/src/templates/types.d.ts

@@ -157,6 +157,7 @@ export declare const AgentWorkTypeSchema: z.ZodEnum<{
     "qa-coordination": "qa-coordination";
     "acceptance-coordination": "acceptance-coordination";
     merge: "merge";
+    security: "security";
 }>;
 export declare const ToolPermissionSchema: z.ZodUnion<readonly [z.ZodObject<{
     shell: z.ZodString;
@@ -181,6 +182,7 @@ export declare const WorkflowTemplateSchema: z.ZodObject<{
             "qa-coordination": "qa-coordination";
             "acceptance-coordination": "acceptance-coordination";
             merge: "merge";
+            security: "security";
         }>;
     }, z.core.$strip>;
     tools: z.ZodOptional<z.ZodObject<{

package/dist/src/templates/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/templates/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAGlE,YAAY,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAMlE;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB,YAAY,GACZ,MAAM,CAAA;AAMV;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,IAAI,CAAA;IAChB,IAAI,EAAE,kBAAkB,CAAA;IACxB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAA;QACZ,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,QAAQ,EAAE,aAAa,CAAA;KACxB,CAAA;IACD,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,cAAc,EAAE,CAAA;QACxB,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAA;KAC5B,CAAA;IACD,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAA;CACf;AAMD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,IAAI,CAAA;IAChB,IAAI,EAAE,iBAAiB,CAAA;IACvB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAA;QACZ,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,0EAA0E;QAC1E,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,CAAA;IACD,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;CAChB;AAMD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAClB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAA;IAGvB,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAA;IAGvB,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iDAAiD;IACjD,YAAY,CAAC,EAAE,MAAM,CAAA;IAGrB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gDAAgD;IAChD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,0CAA0C;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,uCAAuC;IACvC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAA;IACjC,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAA;IAGrB,uDAAuD;IACvD,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAA;IAGb,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAA;IAGnB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oFAAoF;IACpF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IAGtB,wEAAwE;IACxE,cAAc,CAAC,EAAE,OAAO,CAAA;IAGxB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kGAAkG;IAClG,cAAc,CAAC,EAAE,MAAM,CAAA;IAGvB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,mGAAmG;IACnG,eAAe,CAAC,EAAE,MAAM,CAAA;IAGxB,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAGtD,iGAAiG;IACjG,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAMD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,oBAAoB,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE,CAAA;CAC9D;AAMD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IAC/F,wDAAwD;IACxD,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAuBD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;EAAqB,CAAA;AAErD,eAAO,MAAM,oBAAoB;;4DAI/B,CAAA;AAEF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAajC,CAAA;AAEF,eAAO,MAAM,qBAAqB;;;;;;;;;iBAShC,CAAA;AAEF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmChC,CAAA;AAMF;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAS3F;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,eAAe,CASzF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/templates/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAGlE,YAAY,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAMlE;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB,YAAY,GACZ,MAAM,CAAA;AAMV;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,IAAI,CAAA;IAChB,IAAI,EAAE,kBAAkB,CAAA;IACxB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAA;QACZ,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,QAAQ,EAAE,aAAa,CAAA;KACxB,CAAA;IACD,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,cAAc,EAAE,CAAA;QACxB,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAA;KAC5B,CAAA;IACD,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAA;CACf;AAMD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,IAAI,CAAA;IAChB,IAAI,EAAE,iBAAiB,CAAA;IACvB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAA;QACZ,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,0EAA0E;QAC1E,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,CAAA;IACD,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;CAChB;AAMD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAClB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAA;IAGvB,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAA;IAGvB,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iDAAiD;IACjD,YAAY,CAAC,EAAE,MAAM,CAAA;IAGrB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gDAAgD;IAChD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,0CAA0C;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,uCAAuC;IACvC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAA;IACjC,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAA;IAGrB,uDAAuD;IACvD,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAA;IAGb,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAA;IAGnB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oFAAoF;IACpF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IAGtB,wEAAwE;IACxE,cAAc,CAAC,EAAE,OAAO,CAAA;IAGxB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kGAAkG;IAClG,cAAc,CAAC,EAAE,MAAM,CAAA;IAGvB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,mGAAmG;IACnG,eAAe,CAAC,EAAE,MAAM,CAAA;IAGxB,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAGtD,iGAAiG;IACjG,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAMD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,oBAAoB,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE,CAAA;CAC9D;AAMD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IAC/F,wDAAwD;IACxD,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAwBD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;EAAqB,CAAA;AAErD,eAAO,MAAM,oBAAoB;;4DAI/B,CAAA;AAEF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAajC,CAAA;AAEF,eAAO,MAAM,qBAAqB;;;;;;;;;iBAShC,CAAA;AAEF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmChC,CAAA;AAMF;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAS3F;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,eAAe,CASzF"}

package/dist/src/templates/types.js

@@ -31,6 +31,7 @@ const WORK_TYPES = [
     'qa-coordination',
     'acceptance-coordination',
     'merge',
+    'security',
 ];
 export const AgentWorkTypeSchema = z.enum(WORK_TYPES);
 export const ToolPermissionSchema = z.union([

package/dist/src/tools/index.d.ts

@@ -1,4 +1,6 @@
 export { ToolRegistry } from './registry.js';
 export type { CreateServersResult } from './registry.js';
 export type { ToolPlugin, ToolPluginContext } from './types.js';
+export { classifyTool } from './tool-category.js';
+export type { ToolCategory } from './tool-category.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,YAAY,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACxD,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,YAAY,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACxD,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/src/tools/index.js

@@ -1 +1,2 @@
 export { ToolRegistry } from './registry.js';
+export { classifyTool } from './tool-category.js';

package/dist/src/tools/tool-category.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Tool category classification based on tool name pattern matching.
+ *
+ * Classifies tools into functional categories for dashboard and analytics use.
+ */
+export type ToolCategory = 'security' | 'testing' | 'build' | 'deploy' | 'research' | 'general';
+/**
+ * Classify a tool into a functional category based on its name.
+ *
+ * Handles both simple tool names (e.g. `Read`, `Bash`) and
+ * MCP-qualified names (e.g. `mcp__af-linear__af_linear_create_issue`).
+ *
+ * Returns `'general'` for tools that don't match any specific category.
+ */
+export declare function classifyTool(toolName: string): ToolCategory;
+//# sourceMappingURL=tool-category.d.ts.map

package/dist/src/tools/tool-category.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-category.d.ts","sourceRoot":"","sources":["../../../src/tools/tool-category.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAA;AAwC/F;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,CAU3D"}