@shepai/cli 1.170.0-pr513.cff27cb → 1.171.0-pr527.e2ee839

package/dist/packages/core/src/infrastructure/di/container.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/src/infrastructure/di/container.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAwJrC;;;;;;GAMG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,SAAS,CAAC,CAgcrE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAED;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/src/infrastructure/di/container.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAuKrC;;;;;;GAMG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,SAAS,CAAC,CAugBrE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAED;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/dist/packages/core/src/infrastructure/di/container.js

@@ -30,6 +30,17 @@ import { DaemonPidService } from '../services/daemon/daemon-pid.service.js';
 import { DeploymentService } from '../services/deployment/deployment.service.js';
 import { AttachmentStorageService } from '../services/attachment-storage.service.js';
 import { GitHubRepositoryService } from '../services/external/github-repository.service.js';
+import { SecurityPolicyService } from '../services/security/security-policy.service.js';
+import { SecurityPolicyFileReader } from '../services/security/security-policy-file-reader.js';
+import { SecurityPolicyValidator } from '../services/security/security-policy-validator.js';
+import { SQLiteSecurityEventRepository } from '../repositories/sqlite-security-event.repository.js';
+import { DependencyRiskEvaluator } from '../services/security/dependency-risk-evaluator.js';
+import { ReleaseIntegrityEvaluator } from '../services/security/release-integrity-evaluator.js';
+// Security use cases
+import { EnforceSecurityUseCase } from '../../application/use-cases/security/enforce-security.use-case.js';
+import { EvaluateSecurityPolicyUseCase } from '../../application/use-cases/security/evaluate-security-policy.use-case.js';
+import { GetSecurityStateUseCase } from '../../application/use-cases/security/get-security-state.use-case.js';
+import { RecordSecurityEventUseCase } from '../../application/use-cases/security/record-security-event.use-case.js';
 import { AgentExecutorFactory } from '../services/agents/common/agent-executor-factory.service.js';
 import { AgentExecutorProvider } from '../services/agents/common/agent-executor-provider.service.js';
 import { StructuredAgentCallerService } from '../services/agents/common/structured-agent-caller.service.js';
@@ -70,7 +81,6 @@ import { ResumeFeatureUseCase } from '../../application/use-cases/features/resum
 import { StartFeatureUseCase } from '../../application/use-cases/features/start-feature.use-case.js';
 import { UpdateFeaturePinnedConfigUseCase } from '../../application/use-cases/features/update-feature-pinned-config.use-case.js';
 import { AdoptBranchUseCase } from '../../application/use-cases/features/adopt-branch.use-case.js';
-import { PromoteExplorationUseCase } from '../../application/use-cases/features/promote/promote-exploration.use-case.js';
 import { GetFeatureArtifactUseCase } from '../../application/use-cases/features/get-feature-artifact.use-case.js';
 import { GetResearchArtifactUseCase } from '../../application/use-cases/features/get-research-artifact.use-case.js';
 import { GetPlanArtifactUseCase } from '../../application/use-cases/features/get-plan-artifact.use-case.js';
@@ -273,6 +283,46 @@ export async function initializeContainer() {
     container.register('ISpecInitializerService', {
         useFactory: () => new SpecInitializerService(),
     });
+    // Register security infrastructure
+    container.register('SecurityPolicyFileReader', {
+        useFactory: () => new SecurityPolicyFileReader(),
+    });
+    container.register('SecurityPolicyValidator', {
+        useFactory: () => new SecurityPolicyValidator(),
+    });
+    container.register('ISecurityPolicyService', {
+        useFactory: (c) => {
+            const fileReader = c.resolve('SecurityPolicyFileReader');
+            const validator = c.resolve('SecurityPolicyValidator');
+            const settingsRepo = c.resolve('ISettingsRepository');
+            return new SecurityPolicyService(fileReader, validator, settingsRepo);
+        },
+    });
+    container.register('ISecurityEventRepository', {
+        useFactory: (c) => {
+            const database = c.resolve('Database');
+            return new SQLiteSecurityEventRepository(database);
+        },
+    });
+    container.register('DependencyRiskEvaluator', {
+        useFactory: () => new DependencyRiskEvaluator(),
+    });
+    container.register('ReleaseIntegrityEvaluator', {
+        useFactory: () => new ReleaseIntegrityEvaluator(),
+    });
+    // Register security use cases
+    container.register(EnforceSecurityUseCase, {
+        useFactory: (c) => new EnforceSecurityUseCase(c.resolve('ISecurityPolicyService'), c.resolve('ISecurityEventRepository'), c.resolve('ISettingsRepository'), c.resolve('DependencyRiskEvaluator'), c.resolve('ReleaseIntegrityEvaluator'), c.resolve('IGitHubRepositoryService')),
+    });
+    container.register(EvaluateSecurityPolicyUseCase, {
+        useFactory: (c) => new EvaluateSecurityPolicyUseCase(c.resolve('ISecurityPolicyService'), c.resolve('ISettingsRepository')),
+    });
+    container.register(GetSecurityStateUseCase, {
+        useFactory: (c) => new GetSecurityStateUseCase(c.resolve('ISecurityEventRepository'), c.resolve('ISettingsRepository')),
+    });
+    container.register(RecordSecurityEventUseCase, {
+        useFactory: (c) => new RecordSecurityEventUseCase(c.resolve('ISecurityEventRepository')),
+    });
     // Register notification services
     const notificationBus = getNotificationBus();
     container.registerInstance('NotificationEventBus', notificationBus);
@@ -312,7 +362,6 @@ export async function initializeContainer() {
     container.registerSingleton(StartFeatureUseCase);
     container.registerSingleton(UpdateFeaturePinnedConfigUseCase);
     container.registerSingleton(AdoptBranchUseCase);
-    container.registerSingleton(PromoteExplorationUseCase);
     container.registerSingleton(GetFeatureArtifactUseCase);
     container.registerSingleton(GetResearchArtifactUseCase);
     container.registerSingleton(GetPlanArtifactUseCase);
@@ -388,9 +437,6 @@ export async function initializeContainer() {
     container.register('StopAgentRunUseCase', {
         useFactory: (c) => c.resolve(StopAgentRunUseCase),
     });
-    container.register('PromoteExplorationUseCase', {
-        useFactory: (c) => c.resolve(PromoteExplorationUseCase),
-    });
     container.register('ApproveAgentRunUseCase', {
         useFactory: (c) => c.resolve(ApproveAgentRunUseCase),
     });
@@ -475,6 +521,12 @@ export async function initializeContainer() {
     container.register('AutoResolveMergedBranchesUseCase', {
         useFactory: (c) => c.resolve(AutoResolveMergedBranchesUseCase),
     });
+    container.register('GetSecurityStateUseCase', {
+        useFactory: (c) => c.resolve(GetSecurityStateUseCase),
+    });
+    container.register('EnforceSecurityUseCase', {
+        useFactory: (c) => c.resolve(EnforceSecurityUseCase),
+    });
     // Register interactive session infrastructure
     container.register('IInteractiveSessionRepository', {
         useFactory: (c) => {

package/dist/packages/core/src/infrastructure/persistence/sqlite/mappers/feature.mapper.d.ts

@@ -32,9 +32,7 @@ export interface FeatureRow {
     related_artifacts: string;
     agent_run_id: string | null;
     spec_path: string | null;
-    mode: string;
-    iteration_count: number;
-    max_iterations: number | null;
+    fast: number;
     push: number;
     open_pr: number;
     fork_and_pr: number;

package/dist/packages/core/src/infrastructure/persistence/sqlite/mappers/feature.mapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feature.mapper.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/persistence/sqlite/mappers/feature.mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wCAAwC,CAAC;AAItE;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB,IAAI,EAAE,MAAM,CAAC;IAEb,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAE9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAElC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAElC,WAAW,EAAE,MAAM,CAAC;IAEpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,UAAU,CAgEvD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAsErD"}
+{"version":3,"file":"feature.mapper.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/persistence/sqlite/mappers/feature.mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wCAAwC,CAAC;AAGtE;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB,IAAI,EAAE,MAAM,CAAC;IAEb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAElC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAElC,WAAW,EAAE,MAAM,CAAC;IAEpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,UAAU,CA6DvD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAmErD"}

package/dist/packages/core/src/infrastructure/persistence/sqlite/mappers/feature.mapper.js

@@ -35,11 +35,8 @@ export function toDatabase(feature) {
         related_artifacts: JSON.stringify(feature.relatedArtifacts),
         agent_run_id: feature.agentRunId ?? null,
         spec_path: feature.specPath ?? null,
-        // Feature mode
-        mode: feature.mode,
-        // Iteration tracking
-        iteration_count: feature.iterationCount,
-        max_iterations: feature.maxIterations ?? null,
+        // Fast mode flag
+        fast: feature.fast ? 1 : 0,
         // Flatten workflow flags to individual columns
         push: feature.push ? 1 : 0,
         open_pr: feature.openPr ? 1 : 0,
@@ -106,11 +103,8 @@ export function fromDatabase(row) {
         ...(row.plan != null && { plan: JSON.parse(row.plan) }),
         ...(row.agent_run_id != null && { agentRunId: row.agent_run_id }),
         ...(row.spec_path != null && { specPath: row.spec_path }),
-        // Feature mode
-        mode: row.mode,
-        // Iteration tracking
-        iterationCount: row.iteration_count ?? 0,
-        ...(row.max_iterations != null && { maxIterations: row.max_iterations }),
+        // Fast mode flag
+        fast: row.fast === 1,
         // Assemble workflow flags from flat columns
         push: row.push === 1,
         openPr: row.open_pr === 1,

package/dist/packages/core/src/infrastructure/persistence/sqlite/mappers/security-event.mapper.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Security Event Database Mapper
+ *
+ * Maps between SecurityEvent domain objects and SQLite database rows.
+ *
+ * Mapping Rules:
+ * - TypeScript objects (camelCase) <-> SQL columns (snake_case)
+ * - Dates stored as ISO 8601 strings (matching settings pattern)
+ * - Optional fields stored as NULL when missing
+ * - Enum values stored as string values
+ */
+import type { SecurityEvent } from '../../../../domain/generated/output.js';
+/**
+ * Database row type matching the security_events table schema.
+ * Uses snake_case column names.
+ */
+export interface SecurityEventRow {
+    id: string;
+    repository_path: string;
+    feature_id: string | null;
+    severity: string;
+    category: string;
+    disposition: string;
+    actor: string | null;
+    message: string | null;
+    remediation_summary: string | null;
+    created_at: string;
+}
+/**
+ * Maps SecurityEvent domain object to database row.
+ *
+ * @param event - SecurityEvent domain object
+ * @returns Database row object with snake_case columns
+ */
+export declare function toDatabase(event: SecurityEvent): SecurityEventRow;
+/**
+ * Maps database row to SecurityEvent domain object.
+ * Converts ISO strings back to Date objects.
+ *
+ * @param row - Database row with snake_case columns
+ * @returns SecurityEvent domain object with camelCase properties
+ */
+export declare function fromDatabase(row: SecurityEventRow): SecurityEvent;
+//# sourceMappingURL=security-event.mapper.d.ts.map

package/dist/packages/core/src/infrastructure/persistence/sqlite/mappers/security-event.mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-event.mapper.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/persistence/sqlite/mappers/security-event.mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAO5E;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,aAAa,GAAG,gBAAgB,CAcjE;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,aAAa,CAgBjE"}

package/dist/packages/core/src/infrastructure/persistence/sqlite/mappers/security-event.mapper.js

@@ -0,0 +1,55 @@
+/**
+ * Security Event Database Mapper
+ *
+ * Maps between SecurityEvent domain objects and SQLite database rows.
+ *
+ * Mapping Rules:
+ * - TypeScript objects (camelCase) <-> SQL columns (snake_case)
+ * - Dates stored as ISO 8601 strings (matching settings pattern)
+ * - Optional fields stored as NULL when missing
+ * - Enum values stored as string values
+ */
+/**
+ * Maps SecurityEvent domain object to database row.
+ *
+ * @param event - SecurityEvent domain object
+ * @returns Database row object with snake_case columns
+ */
+export function toDatabase(event) {
+    return {
+        id: event.id,
+        repository_path: event.repositoryPath,
+        feature_id: event.featureId ?? null,
+        severity: event.severity,
+        category: event.category,
+        disposition: event.disposition,
+        actor: event.actor ?? null,
+        message: event.message ?? null,
+        remediation_summary: event.remediationSummary ?? null,
+        created_at: event.createdAt instanceof Date ? event.createdAt.toISOString() : String(event.createdAt),
+    };
+}
+/**
+ * Maps database row to SecurityEvent domain object.
+ * Converts ISO strings back to Date objects.
+ *
+ * @param row - Database row with snake_case columns
+ * @returns SecurityEvent domain object with camelCase properties
+ */
+export function fromDatabase(row) {
+    return {
+        id: row.id,
+        repositoryPath: row.repository_path,
+        severity: row.severity,
+        category: row.category,
+        disposition: row.disposition,
+        createdAt: new Date(row.created_at),
+        updatedAt: new Date(row.created_at),
+        ...(row.feature_id !== null && { featureId: row.feature_id }),
+        ...(row.actor !== null && { actor: row.actor }),
+        ...(row.message !== null && { message: row.message }),
+        ...(row.remediation_summary !== null && {
+            remediationSummary: row.remediation_summary,
+        }),
+    };
+}

package/dist/packages/core/src/infrastructure/persistence/sqlite/mappers/settings.mapper.d.ts

@@ -71,7 +71,7 @@ export interface SettingsRow {
     workflow_enable_evidence: number;
     workflow_commit_evidence: number;
     hide_ci_status: number;
-    default_mode: string;
+    default_fast_mode: number;
     feature_flag_skills: number;
     feature_flag_env_deploy: number;
     feature_flag_debug: number;
@@ -85,9 +85,11 @@ export interface SettingsRow {
     interactive_agent_max_concurrent_sessions: number;
     auto_archive_delay_minutes: number;
     fab_position_swapped: number;
-    exploration_max_iterations: number | null;
     skill_injection_enabled: number;
     skill_injection_skills: string | null;
+    security_mode: string;
+    security_last_evaluation_at: string | null;
+    security_policy_source: string | null;
 }
 /**
  * Maps Settings domain object to database row.

package/dist/packages/core/src/infrastructure/persistence/sqlite/mappers/settings.mapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings.mapper.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/persistence/sqlite/mappers/settings.mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,QAAQ,EAGT,MAAM,wCAAwC,CAAC;AAUhD;;;GAGG;AACH,MAAM,WAAW,WAAW;IAE1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IAInB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IAGtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,uBAAuB,EAAE,MAAM,CAAC;IAGhC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;IAGhC,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IAGtB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAG3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,yBAAyB,EAAE,MAAM,CAAC;IAClC,0BAA0B,EAAE,MAAM,CAAC;IACnC,yBAAyB,EAAE,MAAM,CAAC;IAClC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,4BAA4B,EAAE,MAAM,CAAC;IAGrC,iCAAiC,EAAE,MAAM,CAAC;IAG1C,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IAGzB,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,+BAA+B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtC,+BAA+B,EAAE,MAAM,GAAG,IAAI,CAAC;IAG/C,mBAAmB,EAAE,MAAM,CAAC;IAG5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;IAClC,mCAAmC,EAAE,MAAM,CAAC;IAG5C,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IAGrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0BAA0B,EAAE,MAAM,CAAC;IACnC,yBAAyB,EAAE,MAAM,CAAC;IAClC,4BAA4B,EAAE,MAAM,CAAC;IACrC,+BAA+B,EAAE,MAAM,CAAC;IACxC,sBAAsB,EAAE,MAAM,CAAC;IAE/B,yBAAyB,EAAE,MAAM,CAAC;IAClC,sCAAsC,EAAE,MAAM,CAAC;IAC/C,yCAAyC,EAAE,MAAM,CAAC;IAGlD,0BAA0B,EAAE,MAAM,CAAC;IAGnC,oBAAoB,EAAE,MAAM,CAAC;IAG7B,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAG1C,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,WAAW,CA0H1D;AAiED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,QAAQ,CAiHvD"}
+{"version":3,"file":"settings.mapper.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/persistence/sqlite/mappers/settings.mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,QAAQ,EAGT,MAAM,wCAAwC,CAAC;AAWhD;;;GAGG;AACH,MAAM,WAAW,WAAW;IAE1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IAInB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IAGtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,uBAAuB,EAAE,MAAM,CAAC;IAGhC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,MAAM,CAAC;IAGhC,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IAGtB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAG3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,yBAAyB,EAAE,MAAM,CAAC;IAClC,0BAA0B,EAAE,MAAM,CAAC;IACnC,yBAAyB,EAAE,MAAM,CAAC;IAClC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,4BAA4B,EAAE,MAAM,CAAC;IAGrC,iCAAiC,EAAE,MAAM,CAAC;IAG1C,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IAGzB,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,+BAA+B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtC,+BAA+B,EAAE,MAAM,GAAG,IAAI,CAAC;IAG/C,mBAAmB,EAAE,MAAM,CAAC;IAG5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;IAClC,mCAAmC,EAAE,MAAM,CAAC;IAG5C,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAG1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0BAA0B,EAAE,MAAM,CAAC;IACnC,yBAAyB,EAAE,MAAM,CAAC;IAClC,4BAA4B,EAAE,MAAM,CAAC;IACrC,+BAA+B,EAAE,MAAM,CAAC;IACxC,sBAAsB,EAAE,MAAM,CAAC;IAE/B,yBAAyB,EAAE,MAAM,CAAC;IAClC,sCAAsC,EAAE,MAAM,CAAC;IAC/C,yCAAyC,EAAE,MAAM,CAAC;IAGlD,0BAA0B,EAAE,MAAM,CAAC;IAGnC,oBAAoB,EAAE,MAAM,CAAC;IAG7B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtC,aAAa,EAAE,MAAM,CAAC;IACtB,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,WAAW,CA4H1D;AAiED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,QAAQ,CAyHvD"}

package/dist/packages/core/src/infrastructure/persistence/sqlite/mappers/settings.mapper.js

@@ -82,7 +82,7 @@ export function toDatabase(settings) {
         workflow_enable_evidence: settings.workflow.enableEvidence ? 1 : 0,
         workflow_commit_evidence: settings.workflow.commitEvidence ? 1 : 0,
         hide_ci_status: settings.workflow.hideCiStatus !== false ? 1 : 0,
-        default_mode: settings.workflow.defaultMode ?? 'Fast',
+        default_fast_mode: settings.workflow.defaultFastMode !== false ? 1 : 0,
         // Onboarding (boolean → INTEGER)
         onboarding_complete: settings.onboardingComplete ? 1 : 0,
         // ApprovalGateDefaults (boolean → INTEGER)
@@ -110,13 +110,15 @@ export function toDatabase(settings) {
         auto_archive_delay_minutes: settings.workflow.autoArchiveDelayMinutes ?? 10,
         // FAB layout config (default: not swapped)
         fab_position_swapped: (settings.fabLayout?.swapPosition ?? false) ? 1 : 0,
-        // Exploration max iterations (default: 10)
-        exploration_max_iterations: settings.workflow.explorationMaxIterations ?? null,
         // Skill injection config (default: disabled, no skills)
         skill_injection_enabled: settings.workflow.skillInjection?.enabled ? 1 : 0,
         skill_injection_skills: settings.workflow.skillInjection?.skills?.length
             ? JSON.stringify(settings.workflow.skillInjection.skills)
             : null,
+        // SecurityConfig (default: Advisory mode, no evaluation yet)
+        security_mode: settings.security?.mode ?? 'Advisory',
+        security_last_evaluation_at: settings.security?.lastEvaluationAt ?? null,
+        security_policy_source: settings.security?.policySource ?? null,
     };
 }
 /**
@@ -253,10 +255,7 @@ export function fromDatabase(row) {
             enableEvidence: row.workflow_enable_evidence === 1,
             commitEvidence: row.workflow_commit_evidence === 1,
             hideCiStatus: row.hide_ci_status === 1,
-            defaultMode: row.default_mode ?? 'Fast',
-            ...(row.exploration_max_iterations !== null && {
-                explorationMaxIterations: row.exploration_max_iterations,
-            }),
+            defaultFastMode: (row.default_fast_mode ?? 1) !== 0,
             autoArchiveDelayMinutes: row.auto_archive_delay_minutes ?? 10,
         },
         // FeatureFlags (INTEGER 0/1 → boolean)
@@ -280,6 +279,16 @@ export function fromDatabase(row) {
         fabLayout: {
             swapPosition: (row.fab_position_swapped ?? 0) !== 0,
         },
+        // SecurityConfig (TEXT → string, nullable TEXT → optional string)
+        security: {
+            mode: (row.security_mode ?? 'Advisory'),
+            ...(row.security_last_evaluation_at !== null && {
+                lastEvaluationAt: row.security_last_evaluation_at,
+            }),
+            ...(row.security_policy_source !== null && {
+                policySource: row.security_policy_source,
+            }),
+        },
         // Onboarding (INTEGER → boolean)
         onboardingComplete: row.onboarding_complete === 1,
     };

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/053-add-security-settings-columns.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Migration 053: Add security settings columns to the settings table.
+ *
+ * Adds three columns for supply-chain security configuration:
+ *  - security_mode          TEXT NOT NULL DEFAULT 'Advisory'
+ *  - security_last_evaluation_at  TEXT (nullable)
+ *  - security_policy_source       TEXT (nullable)
+ *
+ * These columns store the effective security mode, last evaluation
+ * timestamp, and policy source origin for the SecurityConfig model.
+ *
+ * Migration is idempotent: checks column existence before ALTER.
+ */
+import type { MigrationParams } from 'umzug';
+import type Database from 'better-sqlite3';
+export declare function up({ context: db }: MigrationParams<Database.Database>): Promise<void>;
+export declare function down({ context: db }: MigrationParams<Database.Database>): Promise<void>;
+//# sourceMappingURL=053-add-security-settings-columns.d.ts.map

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/053-add-security-settings-columns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"053-add-security-settings-columns.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/persistence/sqlite/migrations/053-add-security-settings-columns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,wBAAsB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAe3F;AAED,wBAAsB,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7F"}

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/053-add-security-settings-columns.js

@@ -0,0 +1,31 @@
+/**
+ * Migration 053: Add security settings columns to the settings table.
+ *
+ * Adds three columns for supply-chain security configuration:
+ *  - security_mode          TEXT NOT NULL DEFAULT 'Advisory'
+ *  - security_last_evaluation_at  TEXT (nullable)
+ *  - security_policy_source       TEXT (nullable)
+ *
+ * These columns store the effective security mode, last evaluation
+ * timestamp, and policy source origin for the SecurityConfig model.
+ *
+ * Migration is idempotent: checks column existence before ALTER.
+ */
+export async function up({ context: db }) {
+    const columns = db.pragma('table_info(settings)');
+    const existingNames = new Set(columns.map((c) => c.name));
+    if (!existingNames.has('security_mode')) {
+        db.exec("ALTER TABLE settings ADD COLUMN security_mode TEXT NOT NULL DEFAULT 'Advisory'");
+    }
+    if (!existingNames.has('security_last_evaluation_at')) {
+        db.exec('ALTER TABLE settings ADD COLUMN security_last_evaluation_at TEXT');
+    }
+    if (!existingNames.has('security_policy_source')) {
+        db.exec('ALTER TABLE settings ADD COLUMN security_policy_source TEXT');
+    }
+}
+export async function down({ context: db }) {
+    // Additive-only migration — columns are nullable/defaulted and ignored
+    // by older code. No-op per LESSONS.md backward compatibility rules.
+    void db;
+}

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/054-create-security-events-table.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Migration 054: Create security_events table.
+ *
+ * Creates the security_events table for persisting security audit events
+ * (policy violations, approval decisions, enforcement outcomes).
+ *
+ * Columns:
+ *  - id                 TEXT PRIMARY KEY
+ *  - repository_path    TEXT NOT NULL
+ *  - feature_id         TEXT (nullable)
+ *  - severity           TEXT NOT NULL
+ *  - category           TEXT NOT NULL
+ *  - disposition        TEXT NOT NULL
+ *  - actor              TEXT (nullable)
+ *  - message            TEXT (nullable)
+ *  - remediation_summary TEXT (nullable)
+ *  - created_at         TEXT NOT NULL
+ *
+ * Indexes:
+ *  - idx_security_events_repo_created  ON (repository_path, created_at)
+ *  - idx_security_events_feature       ON (feature_id)
+ *
+ * Migration is idempotent: uses IF NOT EXISTS on CREATE TABLE and indexes.
+ */
+import type { MigrationParams } from 'umzug';
+import type Database from 'better-sqlite3';
+export declare function up({ context: db }: MigrationParams<Database.Database>): Promise<void>;
+export declare function down({ context: db }: MigrationParams<Database.Database>): Promise<void>;
+//# sourceMappingURL=054-create-security-events-table.d.ts.map

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/054-create-security-events-table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"054-create-security-events-table.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/persistence/sqlite/migrations/054-create-security-events-table.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,wBAAsB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAyB3F;AAED,wBAAsB,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7F"}

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/054-create-security-events-table.js

@@ -0,0 +1,53 @@
+/**
+ * Migration 054: Create security_events table.
+ *
+ * Creates the security_events table for persisting security audit events
+ * (policy violations, approval decisions, enforcement outcomes).
+ *
+ * Columns:
+ *  - id                 TEXT PRIMARY KEY
+ *  - repository_path    TEXT NOT NULL
+ *  - feature_id         TEXT (nullable)
+ *  - severity           TEXT NOT NULL
+ *  - category           TEXT NOT NULL
+ *  - disposition        TEXT NOT NULL
+ *  - actor              TEXT (nullable)
+ *  - message            TEXT (nullable)
+ *  - remediation_summary TEXT (nullable)
+ *  - created_at         TEXT NOT NULL
+ *
+ * Indexes:
+ *  - idx_security_events_repo_created  ON (repository_path, created_at)
+ *  - idx_security_events_feature       ON (feature_id)
+ *
+ * Migration is idempotent: uses IF NOT EXISTS on CREATE TABLE and indexes.
+ */
+export async function up({ context: db }) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS security_events (
+      id TEXT PRIMARY KEY,
+      repository_path TEXT NOT NULL,
+      feature_id TEXT,
+      severity TEXT NOT NULL,
+      category TEXT NOT NULL,
+      disposition TEXT NOT NULL,
+      actor TEXT,
+      message TEXT,
+      remediation_summary TEXT,
+      created_at TEXT NOT NULL
+    )
+  `);
+    db.exec(`
+    CREATE INDEX IF NOT EXISTS idx_security_events_repo_created
+    ON security_events(repository_path, created_at)
+  `);
+    db.exec(`
+    CREATE INDEX IF NOT EXISTS idx_security_events_feature
+    ON security_events(feature_id)
+  `);
+}
+export async function down({ context: db }) {
+    // Additive-only migration — table is new and ignored by older code.
+    // No-op per LESSONS.md backward compatibility rules.
+    void db;
+}

package/dist/packages/core/src/infrastructure/repositories/sqlite-feature.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite-feature.repository.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/src/infrastructure/repositories/sqlite-feature.repository.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,6EAA6E,CAAC;AACrF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAOhE;;;GAGG;AACH,qBACa,uBAAwB,YAAW,kBAAkB;IACpD,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAE5C,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAwCvC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAW7C,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAcvD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAazE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAa7E,IAAI,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IA8BtD,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAQpD,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAyDvC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAK5C"}
+{"version":3,"file":"sqlite-feature.repository.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/src/infrastructure/repositories/sqlite-feature.repository.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,6EAA6E,CAAC;AACrF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAOhE;;;GAGG;AACH,qBACa,uBAAwB,YAAW,kBAAkB;IACpD,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAE5C,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAwCvC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAW7C,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAcvD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAazE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAa7E,IAAI,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IA8BtD,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAQpD,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAuDvC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAK5C"}

package/dist/packages/core/src/infrastructure/repositories/sqlite-feature.repository.js

@@ -32,7 +32,7 @@ let SQLiteFeatureRepository = class SQLiteFeatureRepository {
         id, name, slug, description, user_query, repository_path, branch,
         lifecycle, messages, plan, related_artifacts,
         agent_run_id, spec_path,
-        mode, iteration_count, max_iterations,
+        fast,
         push, open_pr, fork_and_pr, commit_specs,
         ci_watch_enabled, enable_evidence, commit_evidence,
         auto_merge, allow_prd, allow_plan, allow_merge,
@@ -47,7 +47,7 @@ let SQLiteFeatureRepository = class SQLiteFeatureRepository {
         @id, @name, @slug, @description, @user_query, @repository_path, @branch,
         @lifecycle, @messages, @plan, @related_artifacts,
         @agent_run_id, @spec_path,
-        @mode, @iteration_count, @max_iterations,
+        @fast,
         @push, @open_pr, @fork_and_pr, @commit_specs,
         @ci_watch_enabled, @enable_evidence, @commit_evidence,
         @auto_merge, @allow_prd, @allow_plan, @allow_merge,
@@ -140,9 +140,7 @@ let SQLiteFeatureRepository = class SQLiteFeatureRepository {
         related_artifacts = @related_artifacts,
         agent_run_id = @agent_run_id,
         spec_path = @spec_path,
-        mode = @mode,
-        iteration_count = @iteration_count,
-        max_iterations = @max_iterations,
+        fast = @fast,
         push = @push,
         open_pr = @open_pr,
         fork_and_pr = @fork_and_pr,

package/dist/packages/core/src/infrastructure/repositories/sqlite-security-event.repository.d.ts

@@ -0,0 +1,24 @@
+/**
+ * SQLite Security Event Repository Implementation
+ *
+ * Implements ISecurityEventRepository using SQLite database.
+ * Uses prepared statements to prevent SQL injection.
+ * Supports 90-day retention cleanup.
+ */
+import type Database from 'better-sqlite3';
+import type { ISecurityEventRepository, SecurityEventQueryOptions } from '../../application/ports/output/repositories/security-event.repository.interface.js';
+import type { SecurityEvent } from '../../domain/generated/output.js';
+/**
+ * SQLite implementation of ISecurityEventRepository.
+ * Manages SecurityEvent persistence with repository-scoped queries.
+ */
+export declare class SQLiteSecurityEventRepository implements ISecurityEventRepository {
+    private readonly db;
+    constructor(db: Database.Database);
+    save(event: SecurityEvent): Promise<void>;
+    findByRepository(repositoryPath: string, options?: SecurityEventQueryOptions): Promise<SecurityEvent[]>;
+    findByFeature(featureId: string, options?: SecurityEventQueryOptions): Promise<SecurityEvent[]>;
+    deleteOlderThan(date: Date): Promise<number>;
+    count(repositoryPath: string): Promise<number>;
+}
+//# sourceMappingURL=sqlite-security-event.repository.d.ts.map

package/dist/packages/core/src/infrastructure/repositories/sqlite-security-event.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-security-event.repository.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/src/infrastructure/repositories/sqlite-security-event.repository.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EACV,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,oFAAoF,CAAC;AAC5F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAOtE;;;GAGG;AACH,qBACa,6BAA8B,YAAW,wBAAwB;IAChE,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAE5C,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBzC,gBAAgB,CACpB,cAAc,EAAE,MAAM,EACtB,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,aAAa,EAAE,CAAC;IA2BrB,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,aAAa,EAAE,CAAC;IA2BrB,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAM5C,KAAK,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAOrD"}