@stackmemoryai/stackmemory 0.3.9 → 0.3.11

package/dist/skills/recursive-agent-orchestrator.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/skills/recursive-agent-orchestrator.ts"],
-  "sourcesContent": ["/**\n * Recursive Language Model (RLM) Orchestrator for StackMemory\n *\n * Implements recursive task decomposition with parallel Claude API execution\n * Based on \"Recursive Language Models\" paper concepts\n *\n * Key Features:\n * - Parallel subagent execution via Claude API\n * - Automatic test generation and validation\n * - Multi-stage code review and improvement\n * - Large codebase processing through chunking\n * - Full operation transparency\n */\n\nimport { logger } from '../core/monitoring/logger.js';\nimport { FrameManager } from '../core/context/frame-manager.js';\nimport { DualStackManager } from '../core/context/dual-stack-manager.js';\nimport { ContextRetriever } from '../core/retrieval/context-retriever.js';\nimport { PebblesTaskStore } from '../features/tasks/pebbles-task-store.js';\nimport { ParallelExecutor } from '../core/execution/parallel-executor.js';\nimport { RecursiveContextManager } from '../core/context/recursive-context-manager.js';\nimport { ClaudeCodeSubagentClient } from '../integrations/claude-code/subagent-client.js';\nimport type { Frame } from '../core/context/frame-manager.js';\n\n// Subagent types\nexport type SubagentType =\n  | 'planning'\n  | 'code'\n  | 'testing'\n  | 'linting'\n  | 'review'\n  | 'context'\n  | 'publish'\n  | 'improve';\n\n// Subagent configuration\nexport interface SubagentConfig {\n  type: SubagentType;\n  model:\n    | 'claude-3-5-sonnet-latest'\n    | 'claude-3-5-haiku-latest'\n    | 'claude-3-opus-latest';\n  maxTokens: number;\n  temperature: number;\n  systemPrompt: string;\n  capabilities: string[];\n}\n\n// Task decomposition node\nexport interface TaskNode {\n  id: string;\n  type: 'task' | 'parallel' | 'sequential';\n  description: string;\n  agent: SubagentType;\n  dependencies: string[];\n  context: Record<string, any>;\n  children?: TaskNode[];\n  status: 'pending' | 'running' | 'completed' | 'failed';\n  result?: any;\n  error?: Error;\n  attempts: number;\n  startTime?: Date;\n  endTime?: Date;\n  tokens?: number;\n  cost?: number;\n}\n\n// Execution result\nexport interface ExecutionResult {\n  success: boolean;\n  rootNode: TaskNode;\n  totalTokens: number;\n  totalCost: number;\n  duration: number;\n  improvements: string[];\n  testsGenerated: number;\n  issuesFound: number;\n  issuesFixed: number;\n}\n\n// RLM Options\nexport interface RLMOptions {\n  maxParallel?: number;\n  maxRecursionDepth?: number;\n  maxTokensPerAgent?: number;\n  maxTotalCost?: number;\n  timeoutPerAgent?: number;\n  retryFailedAgents?: boolean;\n  shareContextRealtime?: boolean;\n  testGenerationMode?: 'unit' | 'integration' | 'e2e' | 'all';\n  reviewStages?: number;\n  qualityThreshold?: number;\n  verboseLogging?: boolean;\n}\n\n/**\n * Main RLM Orchestrator\n */\nexport class RecursiveAgentOrchestrator {\n  private frameManager: FrameManager;\n  private contextRetriever: ContextRetriever;\n  private taskStore: PebblesTaskStore;\n  private parallelExecutor: ParallelExecutor;\n  private contextManager: RecursiveContextManager;\n  private subagentClient: ClaudeCodeSubagentClient;\n\n  // Subagent configurations\n  private subagentConfigs: Map<SubagentType, SubagentConfig>;\n\n  // Execution tracking\n  private activeExecutions: Map<string, TaskNode> = new Map();\n  private executionHistory: ExecutionResult[] = [];\n\n  // Default options\n  private defaultOptions: Required<RLMOptions> = {\n    maxParallel: 5,\n    maxRecursionDepth: 4,\n    maxTokensPerAgent: 30000,\n    maxTotalCost: 50.0, // Quality over cost\n    timeoutPerAgent: 300,\n    retryFailedAgents: true,\n    shareContextRealtime: true,\n    testGenerationMode: 'all',\n    reviewStages: 3, // Multi-stage review\n    qualityThreshold: 0.85,\n    verboseLogging: true, // Full transparency\n  };\n\n  constructor(\n    frameManager: FrameManager,\n    dualStackManager: DualStackManager,\n    contextRetriever: ContextRetriever,\n    taskStore: PebblesTaskStore\n  ) {\n    this.frameManager = frameManager;\n    this.contextRetriever = contextRetriever;\n    this.taskStore = taskStore;\n\n    // Initialize components\n    this.parallelExecutor = new ParallelExecutor(\n      this.defaultOptions.maxParallel\n    );\n    this.contextManager = new RecursiveContextManager(\n      dualStackManager,\n      contextRetriever\n    );\n    this.subagentClient = new ClaudeCodeSubagentClient();\n\n    // Initialize subagent configurations\n    this.subagentConfigs = this.initializeSubagentConfigs();\n\n    logger.info('RLM Orchestrator initialized', {\n      maxParallel: this.defaultOptions.maxParallel,\n      maxRecursion: this.defaultOptions.maxRecursionDepth,\n      reviewStages: this.defaultOptions.reviewStages,\n    });\n  }\n\n  /**\n   * Initialize subagent configurations with specialized prompts\n   */\n  private initializeSubagentConfigs(): Map<SubagentType, SubagentConfig> {\n    const configs = new Map<SubagentType, SubagentConfig>();\n\n    // Planning Agent - Task decomposer\n    configs.set('planning', {\n      type: 'planning',\n      model: 'claude-3-5-sonnet-latest',\n      maxTokens: 20000,\n      temperature: 0.3,\n      systemPrompt: `You are a Planning Agent specializing in task decomposition.\n        Analyze complex tasks and break them into parallel and sequential subtasks.\n        Create detailed execution plans with clear dependencies.\n        Consider edge cases and potential failures.\n        Output structured task trees with agent assignments.`,\n      capabilities: ['decompose', 'analyze', 'strategize', 'prioritize'],\n    });\n\n    // Code Agent - Implementation specialist\n    configs.set('code', {\n      type: 'code',\n      model: 'claude-3-5-sonnet-latest',\n      maxTokens: 30000,\n      temperature: 0.2,\n      systemPrompt: `You are a Code Agent specializing in implementation.\n        Write clean, maintainable, production-ready code.\n        Follow project conventions and best practices.\n        Include comprehensive error handling.\n        Document complex logic with clear comments.`,\n      capabilities: ['implement', 'refactor', 'optimize', 'document'],\n    });\n\n    // Testing Agent - Test generation and validation\n    configs.set('testing', {\n      type: 'testing',\n      model: 'claude-3-5-sonnet-latest', // High quality for test generation\n      maxTokens: 25000,\n      temperature: 0.1,\n      systemPrompt: `You are a Testing Agent specializing in test generation and validation.\n        Generate comprehensive test suites including:\n        - Unit tests for all functions/methods\n        - Integration tests for API endpoints\n        - E2E tests for critical user flows\n        - Edge cases and error scenarios\n        Ensure 100% code coverage where possible.\n        Validate that all tests pass and are meaningful.`,\n      capabilities: [\n        'generate-tests',\n        'validate',\n        'coverage-analysis',\n        'test-execution',\n      ],\n    });\n\n    // Linting Agent - Code quality enforcer\n    configs.set('linting', {\n      type: 'linting',\n      model: 'claude-3-5-haiku-latest',\n      maxTokens: 15000,\n      temperature: 0,\n      systemPrompt: `You are a Linting Agent specializing in code quality.\n        Check for:\n        - Syntax errors and type issues\n        - Code formatting and style violations\n        - Security vulnerabilities\n        - Performance anti-patterns\n        - Unused imports and dead code\n        Provide actionable fixes for all issues found.`,\n      capabilities: ['lint', 'format', 'type-check', 'security-scan'],\n    });\n\n    // Review Agent - Multi-stage code reviewer\n    configs.set('review', {\n      type: 'review',\n      model: 'claude-3-5-sonnet-latest',\n      maxTokens: 25000,\n      temperature: 0.2,\n      systemPrompt: `You are a Review Agent specializing in multi-stage code review.\n        Perform thorough reviews focusing on:\n        - Architecture and design patterns\n        - Code quality and maintainability\n        - Performance implications\n        - Security considerations\n        - Test coverage adequacy\n        Suggest specific improvements with examples.\n        Rate quality on a 0-1 scale.`,\n      capabilities: [\n        'review',\n        'critique',\n        'suggest-improvements',\n        'quality-scoring',\n      ],\n    });\n\n    // Improvement Agent - Code enhancer\n    configs.set('improve', {\n      type: 'improve',\n      model: 'claude-3-5-sonnet-latest',\n      maxTokens: 30000,\n      temperature: 0.3,\n      systemPrompt: `You are an Improvement Agent specializing in code enhancement.\n        Take reviewed code and implement suggested improvements:\n        - Refactor for better architecture\n        - Optimize performance bottlenecks\n        - Enhance error handling\n        - Improve code clarity and documentation\n        - Add missing test cases\n        Ensure all improvements maintain backward compatibility.`,\n      capabilities: ['enhance', 'refactor', 'optimize', 'polish'],\n    });\n\n    // Context Agent - Information retriever\n    configs.set('context', {\n      type: 'context',\n      model: 'claude-3-5-haiku-latest',\n      maxTokens: 10000,\n      temperature: 0,\n      systemPrompt: `You are a Context Agent specializing in information retrieval.\n        Search and retrieve relevant context from:\n        - Project codebase and documentation\n        - Previous frame history\n        - Similar implementations\n        - Best practices and patterns\n        Provide concise, relevant context for other agents.`,\n      capabilities: ['search', 'retrieve', 'summarize', 'contextualize'],\n    });\n\n    // Publish Agent - Release and deployment\n    configs.set('publish', {\n      type: 'publish',\n      model: 'claude-3-5-haiku-latest',\n      maxTokens: 15000,\n      temperature: 0,\n      systemPrompt: `You are a Publish Agent specializing in release management.\n        Handle:\n        - NPM package publishing\n        - GitHub releases and tagging\n        - Documentation updates\n        - Changelog generation\n        - Deployment automation\n        Ensure all release steps are properly sequenced.`,\n      capabilities: ['publish-npm', 'github-release', 'deploy', 'document'],\n    });\n\n    return configs;\n  }\n\n  /**\n   * Execute a task with recursive decomposition\n   */\n  async execute(\n    task: string,\n    context: Record<string, any>,\n    options?: RLMOptions\n  ): Promise<ExecutionResult> {\n    const opts = { ...this.defaultOptions, ...options };\n    const executionId = this.generateExecutionId();\n    const startTime = Date.now();\n\n    logger.info('Starting RLM execution', {\n      executionId,\n      task: task.slice(0, 100),\n      options: opts,\n    });\n\n    try {\n      // Create root frame for execution\n      const rootFrame = await this.createExecutionFrame(executionId, task);\n\n      // Step 1: Planning - Decompose task into subtasks\n      const rootNode = await this.planTask(task, context, opts);\n      this.activeExecutions.set(executionId, rootNode);\n\n      // Log execution tree for transparency\n      if (opts.verboseLogging) {\n        this.logExecutionTree(rootNode);\n      }\n\n      // Step 2: Execute task tree recursively with parallelization\n      await this.executeTaskTree(rootNode, context, opts, 0);\n\n      // Step 3: Multi-stage review and improvement\n      const improvements = await this.performMultiStageReview(\n        rootNode,\n        opts.reviewStages,\n        opts.qualityThreshold\n      );\n\n      // Step 4: Aggregate results\n      const result: ExecutionResult = {\n        success: rootNode.status === 'completed',\n        rootNode,\n        totalTokens: this.calculateTotalTokens(rootNode),\n        totalCost: this.calculateTotalCost(rootNode),\n        duration: Date.now() - startTime,\n        improvements,\n        testsGenerated: this.countGeneratedTests(rootNode),\n        issuesFound: this.countIssuesFound(rootNode),\n        issuesFixed: this.countIssuesFixed(rootNode),\n      };\n\n      // Store execution history\n      this.executionHistory.push(result);\n\n      // Update frame with results\n      await this.updateExecutionFrame(rootFrame, result);\n\n      logger.info('RLM execution completed', {\n        executionId,\n        success: result.success,\n        duration: result.duration,\n        totalCost: result.totalCost,\n        testsGenerated: result.testsGenerated,\n        improvements: improvements.length,\n      });\n\n      return result;\n    } catch (error) {\n      logger.error('RLM execution failed', { executionId, error });\n      throw error;\n    } finally {\n      this.activeExecutions.delete(executionId);\n    }\n  }\n\n  /**\n   * Plan task decomposition\n   */\n  private async planTask(\n    task: string,\n    context: Record<string, any>,\n    options: Required<RLMOptions>\n  ): Promise<TaskNode> {\n    // Call planning agent using Claude Code Task tool\n    const response = await this.subagentClient.executeSubagent({\n      type: 'planning',\n      task: task,\n      context: {\n        ...context,\n        requirements: options,\n      },\n    });\n\n    // Parse response into task tree\n    const taskTree = this.parseTaskTree(JSON.stringify(response.result));\n\n    // Add automatic test generation nodes\n    this.injectTestGenerationNodes(taskTree, options.testGenerationMode);\n\n    // Add review stages\n    this.injectReviewStages(taskTree, options.reviewStages);\n\n    return taskTree;\n  }\n\n  /**\n   * Execute task tree recursively with parallelization\n   */\n  private async executeTaskTree(\n    node: TaskNode,\n    context: Record<string, any>,\n    options: Required<RLMOptions>,\n    depth: number\n  ): Promise<void> {\n    // Check recursion depth\n    if (depth >= options.maxRecursionDepth) {\n      logger.warn('Max recursion depth reached', { nodeId: node.id, depth });\n      node.status = 'failed';\n      node.error = new Error('Max recursion depth exceeded');\n      return;\n    }\n\n    // Log execution start for transparency\n    if (options.verboseLogging) {\n      logger.info(`Executing node: ${node.description}`, {\n        id: node.id,\n        type: node.type,\n        agent: node.agent,\n        depth,\n      });\n    }\n\n    node.status = 'running';\n    node.startTime = new Date();\n\n    try {\n      if (node.type === 'parallel' && node.children) {\n        // Execute children in parallel\n        await this.parallelExecutor.executeParallel(\n          node.children,\n          async (child) => {\n            await this.executeTaskTree(child, context, options, depth + 1);\n          }\n        );\n      } else if (node.type === 'sequential' && node.children) {\n        // Execute children sequentially\n        for (const child of node.children) {\n          await this.executeTaskTree(child, context, options, depth + 1);\n\n          // Pass results to next child\n          if (child.result) {\n            context[`${child.id}_result`] = child.result;\n          }\n        }\n      } else {\n        // Leaf node - execute with appropriate agent\n        await this.executeLeafNode(node, context, options);\n      }\n\n      node.status = 'completed';\n    } catch (error) {\n      logger.error(`Node execution failed: ${node.description}`, { error });\n\n      if (options.retryFailedAgents && node.attempts < 3) {\n        node.attempts++;\n        logger.info(`Retrying node: ${node.description}`, {\n          attempt: node.attempts,\n        });\n        await this.executeTaskTree(node, context, options, depth);\n      } else {\n        node.status = 'failed';\n        node.error = error as Error;\n      }\n    } finally {\n      node.endTime = new Date();\n\n      // Log completion for transparency\n      if (options.verboseLogging) {\n        const duration = node.endTime.getTime() - node.startTime!.getTime();\n        logger.info(`Completed node: ${node.description}`, {\n          id: node.id,\n          status: node.status,\n          duration,\n          tokens: node.tokens,\n          cost: node.cost,\n        });\n      }\n    }\n  }\n\n  /**\n   * Execute a leaf node with the appropriate agent\n   */\n  private async executeLeafNode(\n    node: TaskNode,\n    context: Record<string, any>,\n    options: Required<RLMOptions>\n  ): Promise<void> {\n    const agentConfig = this.subagentConfigs.get(node.agent)!;\n\n    // Prepare agent-specific context\n    const agentContext = await this.contextManager.prepareAgentContext(\n      node.agent,\n      context,\n      options.maxTokensPerAgent\n    );\n\n    // Build task description for agent\n    const taskDescription = this.buildAgentPrompt(node, agentContext);\n\n    // Call agent via Claude Code Task tool\n    const response = await this.subagentClient.executeSubagent({\n      type: node.agent,\n      task: taskDescription,\n      context: agentContext,\n    });\n\n    // Process agent response\n    node.result = response.result;\n    node.tokens =\n      response.tokens || this.estimateTokens(JSON.stringify(response));\n    node.cost = this.calculateNodeCost(node.tokens, agentConfig.model);\n\n    // Share results with other agents if real-time sharing is enabled\n    if (options.shareContextRealtime) {\n      await this.shareAgentResults(node);\n    }\n  }\n\n  /**\n   * Perform multi-stage review and improvement\n   */\n  private async performMultiStageReview(\n    rootNode: TaskNode,\n    stages: number,\n    qualityThreshold: number\n  ): Promise<string[]> {\n    const improvements: string[] = [];\n    let currentQuality = 0;\n\n    for (let stage = 1; stage <= stages; stage++) {\n      logger.info(`Starting review stage ${stage}/${stages}`);\n\n      // Review stage\n      const reviewNode: TaskNode = {\n        id: `review-stage-${stage}`,\n        type: 'task',\n        description: `Review stage ${stage}`,\n        agent: 'review',\n        dependencies: [],\n        context: { rootNode, stage },\n        status: 'pending',\n        attempts: 0,\n      };\n\n      // Execute review via Claude Code subagent\n      const reviewResponse = await this.subagentClient.executeSubagent({\n        type: 'review',\n        task: `Review stage ${stage}: Analyze code quality and suggest improvements`,\n        context: { rootNode, stage },\n      });\n\n      reviewNode.result = reviewResponse.result;\n      reviewNode.status = reviewResponse.success ? 'completed' : 'failed';\n\n      const reviewResult = reviewResponse.result as {\n        quality: number;\n        issues: string[];\n        suggestions: string[];\n      };\n\n      currentQuality = reviewResult.quality;\n      improvements.push(...reviewResult.suggestions);\n\n      logger.info(`Review stage ${stage} complete`, {\n        quality: currentQuality,\n        issues: reviewResult.issues.length,\n        suggestions: reviewResult.suggestions.length,\n      });\n\n      // If quality meets threshold, stop\n      if (currentQuality >= qualityThreshold) {\n        logger.info(\n          `Quality threshold met: ${currentQuality} >= ${qualityThreshold}`\n        );\n        break;\n      }\n\n      // Improvement stage\n      if (stage < stages) {\n        const improveNode: TaskNode = {\n          id: `improve-stage-${stage}`,\n          type: 'task',\n          description: `Improvement stage ${stage}`,\n          agent: 'improve',\n          dependencies: [reviewNode.id],\n          context: { reviewResult, rootNode },\n          status: 'pending',\n          attempts: 0,\n        };\n\n        // Execute improvement via Claude Code subagent\n        const improveResponse = await this.subagentClient.executeSubagent({\n          type: 'improve',\n          task: `Improvement stage ${stage}: Implement suggested improvements`,\n          context: { reviewResult, rootNode },\n        });\n\n        improveNode.result = improveResponse.result;\n        improveNode.status = improveResponse.success ? 'completed' : 'failed';\n\n        // Apply improvements to root node\n        this.applyImprovements(rootNode, improveNode.result);\n      }\n    }\n\n    return improvements;\n  }\n\n  /**\n   * Helper methods\n   */\n\n  private generateExecutionId(): string {\n    return `rlm-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;\n  }\n\n  private async createExecutionFrame(\n    executionId: string,\n    task: string\n  ): Promise<Frame> {\n    return this.frameManager.pushFrame({\n      name: `RLM: ${task.slice(0, 50)}`,\n      type: 'rlm-execution',\n      metadata: { executionId },\n    });\n  }\n\n  private async updateExecutionFrame(\n    frame: Frame,\n    result: ExecutionResult\n  ): Promise<void> {\n    frame.outputs = [\n      {\n        type: 'rlm-result',\n        content: JSON.stringify(result, null, 2),\n      },\n    ];\n    frame.state = result.success ? 'completed' : 'failed';\n  }\n\n  private logExecutionTree(node: TaskNode, depth: number = 0): void {\n    const indent = '  '.repeat(depth);\n    const status =\n      node.status === 'completed'\n        ? '\u2713'\n        : node.status === 'failed'\n          ? '\u2717'\n          : node.status === 'running'\n            ? '\u27F3'\n            : '\u25CB';\n\n    console.log(`${indent}${status} ${node.description} [${node.agent}]`);\n\n    if (node.children) {\n      for (const child of node.children) {\n        this.logExecutionTree(child, depth + 1);\n      }\n    }\n  }\n\n  private parseTaskTree(_response: string): TaskNode {\n    // Parse LLM response into structured task tree\n    // This would need sophisticated parsing logic\n    // For now, return a mock structure\n    return {\n      id: 'root',\n      type: 'sequential',\n      description: 'Root task',\n      agent: 'planning',\n      dependencies: [],\n      context: {},\n      status: 'pending',\n      attempts: 0,\n      children: [],\n    };\n  }\n\n  private injectTestGenerationNodes(node: TaskNode, _mode: string): void {\n    // Inject test generation nodes based on mode\n    if (!node.children) return;\n\n    const testNode: TaskNode = {\n      id: `${node.id}-test`,\n      type: 'task',\n      description: `Generate ${_mode} tests for ${node.description}`,\n      agent: 'testing',\n      dependencies: [node.id],\n      context: { testMode: _mode },\n      status: 'pending',\n      attempts: 0,\n    };\n\n    node.children.push(testNode);\n  }\n\n  private injectReviewStages(_node: TaskNode, _stages: number): void {\n    // Inject review stages into task tree\n    // Implementation would add review nodes at appropriate points\n  }\n\n  private buildAgentPrompt(node: TaskNode, context: any): string {\n    return `\n      Task: ${node.description}\n      \n      Context:\n      ${JSON.stringify(context, null, 2)}\n      \n      Previous Results:\n      ${JSON.stringify(\n        node.dependencies.map((id) => this.activeExecutions.get(id)?.result),\n        null,\n        2\n      )}\n      \n      Please complete this task following your specialized role.\n    `;\n  }\n\n  private estimateTokens(text: string): number {\n    // Rough estimation: 1 token \u2248 4 characters\n    return Math.ceil(text.length / 4);\n  }\n\n  private async shareAgentResults(_node: TaskNode): Promise<void> {\n    // Share results with other agents via Redis or shared context\n    logger.debug('Sharing agent results', { nodeId: _node.id });\n  }\n\n  private applyImprovements(_rootNode: TaskNode, improvements: any): void {\n    // Apply improvements to the task tree\n    logger.debug('Applying improvements', { improvements });\n  }\n\n  private calculateTotalTokens(node: TaskNode): number {\n    let total = node.tokens || 0;\n    if (node.children) {\n      for (const child of node.children) {\n        total += this.calculateTotalTokens(child);\n      }\n    }\n    return total;\n  }\n\n  private calculateTotalCost(node: TaskNode): number {\n    let total = node.cost || 0;\n    if (node.children) {\n      for (const child of node.children) {\n        total += this.calculateTotalCost(child);\n      }\n    }\n    return total;\n  }\n\n  private calculateNodeCost(tokens: number, model: string): number {\n    // Pricing per 1M tokens (approximate)\n    const pricing: Record<string, number> = {\n      'claude-3-5-sonnet-latest': 15.0,\n      'claude-3-5-haiku-latest': 1.0,\n      'claude-3-opus-latest': 75.0,\n    };\n    return (tokens / 1000000) * (pricing[model] || 10);\n  }\n\n  private countGeneratedTests(node: TaskNode): number {\n    let count = 0;\n    if (node.agent === 'testing' && node.result?.tests) {\n      count += node.result.tests.length;\n    }\n    if (node.children) {\n      for (const child of node.children) {\n        count += this.countGeneratedTests(child);\n      }\n    }\n    return count;\n  }\n\n  private countIssuesFound(node: TaskNode): number {\n    let count = 0;\n    if (\n      (node.agent === 'review' || node.agent === 'linting') &&\n      node.result?.issues\n    ) {\n      count += node.result.issues.length;\n    }\n    if (node.children) {\n      for (const child of node.children) {\n        count += this.countIssuesFound(child);\n      }\n    }\n    return count;\n  }\n\n  private countIssuesFixed(node: TaskNode): number {\n    let count = 0;\n    if (node.agent === 'improve' && node.result?.fixed) {\n      count += node.result.fixed.length;\n    }\n    if (node.children) {\n      for (const child of node.children) {\n        count += this.countIssuesFixed(child);\n      }\n    }\n    return count;\n  }\n}\n"],
+  "sourcesContent": ["/**\n * Recursive Language Model (RLM) Orchestrator for StackMemory\n *\n * Implements recursive task decomposition with parallel Claude API execution\n * Based on \"Recursive Language Models\" paper concepts\n *\n * Key Features:\n * - Parallel subagent execution via Claude API\n * - Automatic test generation and validation\n * - Multi-stage code review and improvement\n * - Large codebase processing through chunking\n * - Full operation transparency\n */\n\nimport { logger } from '../core/monitoring/logger.js';\nimport { FrameManager } from '../core/context/frame-manager.js';\nimport { DualStackManager } from '../core/context/dual-stack-manager.js';\nimport { ContextRetriever } from '../core/retrieval/context-retriever.js';\nimport { LinearTaskManager } from '../features/tasks/linear-task-manager.js';\nimport { ParallelExecutor } from '../core/execution/parallel-executor.js';\nimport { RecursiveContextManager } from '../core/context/recursive-context-manager.js';\nimport { ClaudeCodeSubagentClient } from '../integrations/claude-code/subagent-client.js';\nimport type { Frame } from '../core/context/frame-manager.js';\n\n// Subagent types\nexport type SubagentType =\n  | 'planning'\n  | 'code'\n  | 'testing'\n  | 'linting'\n  | 'review'\n  | 'context'\n  | 'publish'\n  | 'improve';\n\n// Subagent configuration\nexport interface SubagentConfig {\n  type: SubagentType;\n  model:\n    | 'claude-3-5-sonnet-latest'\n    | 'claude-3-5-haiku-latest'\n    | 'claude-3-opus-latest';\n  maxTokens: number;\n  temperature: number;\n  systemPrompt: string;\n  capabilities: string[];\n}\n\n// Task decomposition node\nexport interface TaskNode {\n  id: string;\n  type: 'task' | 'parallel' | 'sequential';\n  description: string;\n  agent: SubagentType;\n  dependencies: string[];\n  context: Record<string, any>;\n  children?: TaskNode[];\n  status: 'pending' | 'running' | 'completed' | 'failed';\n  result?: any;\n  error?: Error;\n  attempts: number;\n  startTime?: Date;\n  endTime?: Date;\n  tokens?: number;\n  cost?: number;\n}\n\n// Execution result\nexport interface ExecutionResult {\n  success: boolean;\n  rootNode: TaskNode;\n  totalTokens: number;\n  totalCost: number;\n  duration: number;\n  improvements: string[];\n  testsGenerated: number;\n  issuesFound: number;\n  issuesFixed: number;\n}\n\n// RLM Options\nexport interface RLMOptions {\n  maxParallel?: number;\n  maxRecursionDepth?: number;\n  maxTokensPerAgent?: number;\n  maxTotalCost?: number;\n  timeoutPerAgent?: number;\n  retryFailedAgents?: boolean;\n  shareContextRealtime?: boolean;\n  testGenerationMode?: 'unit' | 'integration' | 'e2e' | 'all';\n  reviewStages?: number;\n  qualityThreshold?: number;\n  verboseLogging?: boolean;\n}\n\n/**\n * Main RLM Orchestrator\n */\nexport class RecursiveAgentOrchestrator {\n  private frameManager: FrameManager;\n  private contextRetriever: ContextRetriever;\n  private taskStore: LinearTaskManager;\n  private parallelExecutor: ParallelExecutor;\n  private contextManager: RecursiveContextManager;\n  private subagentClient: ClaudeCodeSubagentClient;\n\n  // Subagent configurations\n  private subagentConfigs: Map<SubagentType, SubagentConfig>;\n\n  // Execution tracking\n  private activeExecutions: Map<string, TaskNode> = new Map();\n  private executionHistory: ExecutionResult[] = [];\n\n  // Default options\n  private defaultOptions: Required<RLMOptions> = {\n    maxParallel: 5,\n    maxRecursionDepth: 4,\n    maxTokensPerAgent: 30000,\n    maxTotalCost: 50.0, // Quality over cost\n    timeoutPerAgent: 300,\n    retryFailedAgents: true,\n    shareContextRealtime: true,\n    testGenerationMode: 'all',\n    reviewStages: 3, // Multi-stage review\n    qualityThreshold: 0.85,\n    verboseLogging: true, // Full transparency\n  };\n\n  constructor(\n    frameManager: FrameManager,\n    dualStackManager: DualStackManager,\n    contextRetriever: ContextRetriever,\n    taskStore: LinearTaskManager\n  ) {\n    this.frameManager = frameManager;\n    this.contextRetriever = contextRetriever;\n    this.taskStore = taskStore;\n\n    // Initialize components\n    this.parallelExecutor = new ParallelExecutor(\n      this.defaultOptions.maxParallel\n    );\n    this.contextManager = new RecursiveContextManager(\n      dualStackManager,\n      contextRetriever\n    );\n    this.subagentClient = new ClaudeCodeSubagentClient();\n\n    // Initialize subagent configurations\n    this.subagentConfigs = this.initializeSubagentConfigs();\n\n    logger.info('RLM Orchestrator initialized', {\n      maxParallel: this.defaultOptions.maxParallel,\n      maxRecursion: this.defaultOptions.maxRecursionDepth,\n      reviewStages: this.defaultOptions.reviewStages,\n    });\n  }\n\n  /**\n   * Initialize subagent configurations with specialized prompts\n   */\n  private initializeSubagentConfigs(): Map<SubagentType, SubagentConfig> {\n    const configs = new Map<SubagentType, SubagentConfig>();\n\n    // Planning Agent - Task decomposer\n    configs.set('planning', {\n      type: 'planning',\n      model: 'claude-3-5-sonnet-latest',\n      maxTokens: 20000,\n      temperature: 0.3,\n      systemPrompt: `You are a Planning Agent specializing in task decomposition.\n        Analyze complex tasks and break them into parallel and sequential subtasks.\n        Create detailed execution plans with clear dependencies.\n        Consider edge cases and potential failures.\n        Output structured task trees with agent assignments.`,\n      capabilities: ['decompose', 'analyze', 'strategize', 'prioritize'],\n    });\n\n    // Code Agent - Implementation specialist\n    configs.set('code', {\n      type: 'code',\n      model: 'claude-3-5-sonnet-latest',\n      maxTokens: 30000,\n      temperature: 0.2,\n      systemPrompt: `You are a Code Agent specializing in implementation.\n        Write clean, maintainable, production-ready code.\n        Follow project conventions and best practices.\n        Include comprehensive error handling.\n        Document complex logic with clear comments.`,\n      capabilities: ['implement', 'refactor', 'optimize', 'document'],\n    });\n\n    // Testing Agent - Test generation and validation\n    configs.set('testing', {\n      type: 'testing',\n      model: 'claude-3-5-sonnet-latest', // High quality for test generation\n      maxTokens: 25000,\n      temperature: 0.1,\n      systemPrompt: `You are a Testing Agent specializing in test generation and validation.\n        Generate comprehensive test suites including:\n        - Unit tests for all functions/methods\n        - Integration tests for API endpoints\n        - E2E tests for critical user flows\n        - Edge cases and error scenarios\n        Ensure 100% code coverage where possible.\n        Validate that all tests pass and are meaningful.`,\n      capabilities: [\n        'generate-tests',\n        'validate',\n        'coverage-analysis',\n        'test-execution',\n      ],\n    });\n\n    // Linting Agent - Code quality enforcer\n    configs.set('linting', {\n      type: 'linting',\n      model: 'claude-3-5-haiku-latest',\n      maxTokens: 15000,\n      temperature: 0,\n      systemPrompt: `You are a Linting Agent specializing in code quality.\n        Check for:\n        - Syntax errors and type issues\n        - Code formatting and style violations\n        - Security vulnerabilities\n        - Performance anti-patterns\n        - Unused imports and dead code\n        Provide actionable fixes for all issues found.`,\n      capabilities: ['lint', 'format', 'type-check', 'security-scan'],\n    });\n\n    // Review Agent - Multi-stage code reviewer\n    configs.set('review', {\n      type: 'review',\n      model: 'claude-3-5-sonnet-latest',\n      maxTokens: 25000,\n      temperature: 0.2,\n      systemPrompt: `You are a Review Agent specializing in multi-stage code review.\n        Perform thorough reviews focusing on:\n        - Architecture and design patterns\n        - Code quality and maintainability\n        - Performance implications\n        - Security considerations\n        - Test coverage adequacy\n        Suggest specific improvements with examples.\n        Rate quality on a 0-1 scale.`,\n      capabilities: [\n        'review',\n        'critique',\n        'suggest-improvements',\n        'quality-scoring',\n      ],\n    });\n\n    // Improvement Agent - Code enhancer\n    configs.set('improve', {\n      type: 'improve',\n      model: 'claude-3-5-sonnet-latest',\n      maxTokens: 30000,\n      temperature: 0.3,\n      systemPrompt: `You are an Improvement Agent specializing in code enhancement.\n        Take reviewed code and implement suggested improvements:\n        - Refactor for better architecture\n        - Optimize performance bottlenecks\n        - Enhance error handling\n        - Improve code clarity and documentation\n        - Add missing test cases\n        Ensure all improvements maintain backward compatibility.`,\n      capabilities: ['enhance', 'refactor', 'optimize', 'polish'],\n    });\n\n    // Context Agent - Information retriever\n    configs.set('context', {\n      type: 'context',\n      model: 'claude-3-5-haiku-latest',\n      maxTokens: 10000,\n      temperature: 0,\n      systemPrompt: `You are a Context Agent specializing in information retrieval.\n        Search and retrieve relevant context from:\n        - Project codebase and documentation\n        - Previous frame history\n        - Similar implementations\n        - Best practices and patterns\n        Provide concise, relevant context for other agents.`,\n      capabilities: ['search', 'retrieve', 'summarize', 'contextualize'],\n    });\n\n    // Publish Agent - Release and deployment\n    configs.set('publish', {\n      type: 'publish',\n      model: 'claude-3-5-haiku-latest',\n      maxTokens: 15000,\n      temperature: 0,\n      systemPrompt: `You are a Publish Agent specializing in release management.\n        Handle:\n        - NPM package publishing\n        - GitHub releases and tagging\n        - Documentation updates\n        - Changelog generation\n        - Deployment automation\n        Ensure all release steps are properly sequenced.`,\n      capabilities: ['publish-npm', 'github-release', 'deploy', 'document'],\n    });\n\n    return configs;\n  }\n\n  /**\n   * Execute a task with recursive decomposition\n   */\n  async execute(\n    task: string,\n    context: Record<string, any>,\n    options?: RLMOptions\n  ): Promise<ExecutionResult> {\n    const opts = { ...this.defaultOptions, ...options };\n    const executionId = this.generateExecutionId();\n    const startTime = Date.now();\n\n    logger.info('Starting RLM execution', {\n      executionId,\n      task: task.slice(0, 100),\n      options: opts,\n    });\n\n    try {\n      // Create root frame for execution\n      const rootFrame = await this.createExecutionFrame(executionId, task);\n\n      // Step 1: Planning - Decompose task into subtasks\n      const rootNode = await this.planTask(task, context, opts);\n      this.activeExecutions.set(executionId, rootNode);\n\n      // Log execution tree for transparency\n      if (opts.verboseLogging) {\n        this.logExecutionTree(rootNode);\n      }\n\n      // Step 2: Execute task tree recursively with parallelization\n      await this.executeTaskTree(rootNode, context, opts, 0);\n\n      // Step 3: Multi-stage review and improvement\n      const improvements = await this.performMultiStageReview(\n        rootNode,\n        opts.reviewStages,\n        opts.qualityThreshold\n      );\n\n      // Step 4: Aggregate results\n      const result: ExecutionResult = {\n        success: rootNode.status === 'completed',\n        rootNode,\n        totalTokens: this.calculateTotalTokens(rootNode),\n        totalCost: this.calculateTotalCost(rootNode),\n        duration: Date.now() - startTime,\n        improvements,\n        testsGenerated: this.countGeneratedTests(rootNode),\n        issuesFound: this.countIssuesFound(rootNode),\n        issuesFixed: this.countIssuesFixed(rootNode),\n      };\n\n      // Store execution history\n      this.executionHistory.push(result);\n\n      // Update frame with results\n      await this.updateExecutionFrame(rootFrame, result);\n\n      logger.info('RLM execution completed', {\n        executionId,\n        success: result.success,\n        duration: result.duration,\n        totalCost: result.totalCost,\n        testsGenerated: result.testsGenerated,\n        improvements: improvements.length,\n      });\n\n      return result;\n    } catch (error) {\n      logger.error('RLM execution failed', { executionId, error });\n      throw error;\n    } finally {\n      this.activeExecutions.delete(executionId);\n    }\n  }\n\n  /**\n   * Plan task decomposition\n   */\n  private async planTask(\n    task: string,\n    context: Record<string, any>,\n    options: Required<RLMOptions>\n  ): Promise<TaskNode> {\n    // Call planning agent using Claude Code Task tool\n    const response = await this.subagentClient.executeSubagent({\n      type: 'planning',\n      task: task,\n      context: {\n        ...context,\n        requirements: options,\n      },\n    });\n\n    // Parse response into task tree\n    const taskTree = this.parseTaskTree(JSON.stringify(response.result));\n\n    // Add automatic test generation nodes\n    this.injectTestGenerationNodes(taskTree, options.testGenerationMode);\n\n    // Add review stages\n    this.injectReviewStages(taskTree, options.reviewStages);\n\n    return taskTree;\n  }\n\n  /**\n   * Execute task tree recursively with parallelization\n   */\n  private async executeTaskTree(\n    node: TaskNode,\n    context: Record<string, any>,\n    options: Required<RLMOptions>,\n    depth: number\n  ): Promise<void> {\n    // Check recursion depth\n    if (depth >= options.maxRecursionDepth) {\n      logger.warn('Max recursion depth reached', { nodeId: node.id, depth });\n      node.status = 'failed';\n      node.error = new Error('Max recursion depth exceeded');\n      return;\n    }\n\n    // Log execution start for transparency\n    if (options.verboseLogging) {\n      logger.info(`Executing node: ${node.description}`, {\n        id: node.id,\n        type: node.type,\n        agent: node.agent,\n        depth,\n      });\n    }\n\n    node.status = 'running';\n    node.startTime = new Date();\n\n    try {\n      if (node.type === 'parallel' && node.children) {\n        // Execute children in parallel\n        await this.parallelExecutor.executeParallel(\n          node.children,\n          async (child) => {\n            await this.executeTaskTree(child, context, options, depth + 1);\n          }\n        );\n      } else if (node.type === 'sequential' && node.children) {\n        // Execute children sequentially\n        for (const child of node.children) {\n          await this.executeTaskTree(child, context, options, depth + 1);\n\n          // Pass results to next child\n          if (child.result) {\n            context[`${child.id}_result`] = child.result;\n          }\n        }\n      } else {\n        // Leaf node - execute with appropriate agent\n        await this.executeLeafNode(node, context, options);\n      }\n\n      node.status = 'completed';\n    } catch (error) {\n      logger.error(`Node execution failed: ${node.description}`, { error });\n\n      if (options.retryFailedAgents && node.attempts < 3) {\n        node.attempts++;\n        logger.info(`Retrying node: ${node.description}`, {\n          attempt: node.attempts,\n        });\n        await this.executeTaskTree(node, context, options, depth);\n      } else {\n        node.status = 'failed';\n        node.error = error as Error;\n      }\n    } finally {\n      node.endTime = new Date();\n\n      // Log completion for transparency\n      if (options.verboseLogging) {\n        const duration = node.endTime.getTime() - node.startTime!.getTime();\n        logger.info(`Completed node: ${node.description}`, {\n          id: node.id,\n          status: node.status,\n          duration,\n          tokens: node.tokens,\n          cost: node.cost,\n        });\n      }\n    }\n  }\n\n  /**\n   * Execute a leaf node with the appropriate agent\n   */\n  private async executeLeafNode(\n    node: TaskNode,\n    context: Record<string, any>,\n    options: Required<RLMOptions>\n  ): Promise<void> {\n    const agentConfig = this.subagentConfigs.get(node.agent)!;\n\n    // Prepare agent-specific context\n    const agentContext = await this.contextManager.prepareAgentContext(\n      node.agent,\n      context,\n      options.maxTokensPerAgent\n    );\n\n    // Build task description for agent\n    const taskDescription = this.buildAgentPrompt(node, agentContext);\n\n    // Call agent via Claude Code Task tool\n    const response = await this.subagentClient.executeSubagent({\n      type: node.agent,\n      task: taskDescription,\n      context: agentContext,\n    });\n\n    // Process agent response\n    node.result = response.result;\n    node.tokens =\n      response.tokens || this.estimateTokens(JSON.stringify(response));\n    node.cost = this.calculateNodeCost(node.tokens, agentConfig.model);\n\n    // Share results with other agents if real-time sharing is enabled\n    if (options.shareContextRealtime) {\n      await this.shareAgentResults(node);\n    }\n  }\n\n  /**\n   * Perform multi-stage review and improvement\n   */\n  private async performMultiStageReview(\n    rootNode: TaskNode,\n    stages: number,\n    qualityThreshold: number\n  ): Promise<string[]> {\n    const improvements: string[] = [];\n    let currentQuality = 0;\n\n    for (let stage = 1; stage <= stages; stage++) {\n      logger.info(`Starting review stage ${stage}/${stages}`);\n\n      // Review stage\n      const reviewNode: TaskNode = {\n        id: `review-stage-${stage}`,\n        type: 'task',\n        description: `Review stage ${stage}`,\n        agent: 'review',\n        dependencies: [],\n        context: { rootNode, stage },\n        status: 'pending',\n        attempts: 0,\n      };\n\n      // Execute review via Claude Code subagent\n      const reviewResponse = await this.subagentClient.executeSubagent({\n        type: 'review',\n        task: `Review stage ${stage}: Analyze code quality and suggest improvements`,\n        context: { rootNode, stage },\n      });\n\n      reviewNode.result = reviewResponse.result;\n      reviewNode.status = reviewResponse.success ? 'completed' : 'failed';\n\n      const reviewResult = reviewResponse.result as {\n        quality: number;\n        issues: string[];\n        suggestions: string[];\n      };\n\n      currentQuality = reviewResult.quality;\n      improvements.push(...reviewResult.suggestions);\n\n      logger.info(`Review stage ${stage} complete`, {\n        quality: currentQuality,\n        issues: reviewResult.issues.length,\n        suggestions: reviewResult.suggestions.length,\n      });\n\n      // If quality meets threshold, stop\n      if (currentQuality >= qualityThreshold) {\n        logger.info(\n          `Quality threshold met: ${currentQuality} >= ${qualityThreshold}`\n        );\n        break;\n      }\n\n      // Improvement stage\n      if (stage < stages) {\n        const improveNode: TaskNode = {\n          id: `improve-stage-${stage}`,\n          type: 'task',\n          description: `Improvement stage ${stage}`,\n          agent: 'improve',\n          dependencies: [reviewNode.id],\n          context: { reviewResult, rootNode },\n          status: 'pending',\n          attempts: 0,\n        };\n\n        // Execute improvement via Claude Code subagent\n        const improveResponse = await this.subagentClient.executeSubagent({\n          type: 'improve',\n          task: `Improvement stage ${stage}: Implement suggested improvements`,\n          context: { reviewResult, rootNode },\n        });\n\n        improveNode.result = improveResponse.result;\n        improveNode.status = improveResponse.success ? 'completed' : 'failed';\n\n        // Apply improvements to root node\n        this.applyImprovements(rootNode, improveNode.result);\n      }\n    }\n\n    return improvements;\n  }\n\n  /**\n   * Helper methods\n   */\n\n  private generateExecutionId(): string {\n    return `rlm-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;\n  }\n\n  private async createExecutionFrame(\n    executionId: string,\n    task: string\n  ): Promise<Frame> {\n    return this.frameManager.pushFrame({\n      name: `RLM: ${task.slice(0, 50)}`,\n      type: 'rlm-execution',\n      metadata: { executionId },\n    });\n  }\n\n  private async updateExecutionFrame(\n    frame: Frame,\n    result: ExecutionResult\n  ): Promise<void> {\n    frame.outputs = [\n      {\n        type: 'rlm-result',\n        content: JSON.stringify(result, null, 2),\n      },\n    ];\n    frame.state = result.success ? 'completed' : 'failed';\n  }\n\n  private logExecutionTree(node: TaskNode, depth: number = 0): void {\n    const indent = '  '.repeat(depth);\n    const status =\n      node.status === 'completed'\n        ? '\u2713'\n        : node.status === 'failed'\n          ? '\u2717'\n          : node.status === 'running'\n            ? '\u27F3'\n            : '\u25CB';\n\n    console.log(`${indent}${status} ${node.description} [${node.agent}]`);\n\n    if (node.children) {\n      for (const child of node.children) {\n        this.logExecutionTree(child, depth + 1);\n      }\n    }\n  }\n\n  private parseTaskTree(_response: string): TaskNode {\n    // Parse LLM response into structured task tree\n    // This would need sophisticated parsing logic\n    // For now, return a mock structure\n    return {\n      id: 'root',\n      type: 'sequential',\n      description: 'Root task',\n      agent: 'planning',\n      dependencies: [],\n      context: {},\n      status: 'pending',\n      attempts: 0,\n      children: [],\n    };\n  }\n\n  private injectTestGenerationNodes(node: TaskNode, _mode: string): void {\n    // Inject test generation nodes based on mode\n    if (!node.children) return;\n\n    const testNode: TaskNode = {\n      id: `${node.id}-test`,\n      type: 'task',\n      description: `Generate ${_mode} tests for ${node.description}`,\n      agent: 'testing',\n      dependencies: [node.id],\n      context: { testMode: _mode },\n      status: 'pending',\n      attempts: 0,\n    };\n\n    node.children.push(testNode);\n  }\n\n  private injectReviewStages(_node: TaskNode, _stages: number): void {\n    // Inject review stages into task tree\n    // Implementation would add review nodes at appropriate points\n  }\n\n  private buildAgentPrompt(node: TaskNode, context: any): string {\n    return `\n      Task: ${node.description}\n      \n      Context:\n      ${JSON.stringify(context, null, 2)}\n      \n      Previous Results:\n      ${JSON.stringify(\n        node.dependencies.map((id) => this.activeExecutions.get(id)?.result),\n        null,\n        2\n      )}\n      \n      Please complete this task following your specialized role.\n    `;\n  }\n\n  private estimateTokens(text: string): number {\n    // Rough estimation: 1 token \u2248 4 characters\n    return Math.ceil(text.length / 4);\n  }\n\n  private async shareAgentResults(_node: TaskNode): Promise<void> {\n    // Share results with other agents via Redis or shared context\n    logger.debug('Sharing agent results', { nodeId: _node.id });\n  }\n\n  private applyImprovements(_rootNode: TaskNode, improvements: any): void {\n    // Apply improvements to the task tree\n    logger.debug('Applying improvements', { improvements });\n  }\n\n  private calculateTotalTokens(node: TaskNode): number {\n    let total = node.tokens || 0;\n    if (node.children) {\n      for (const child of node.children) {\n        total += this.calculateTotalTokens(child);\n      }\n    }\n    return total;\n  }\n\n  private calculateTotalCost(node: TaskNode): number {\n    let total = node.cost || 0;\n    if (node.children) {\n      for (const child of node.children) {\n        total += this.calculateTotalCost(child);\n      }\n    }\n    return total;\n  }\n\n  private calculateNodeCost(tokens: number, model: string): number {\n    // Pricing per 1M tokens (approximate)\n    const pricing: Record<string, number> = {\n      'claude-3-5-sonnet-latest': 15.0,\n      'claude-3-5-haiku-latest': 1.0,\n      'claude-3-opus-latest': 75.0,\n    };\n    return (tokens / 1000000) * (pricing[model] || 10);\n  }\n\n  private countGeneratedTests(node: TaskNode): number {\n    let count = 0;\n    if (node.agent === 'testing' && node.result?.tests) {\n      count += node.result.tests.length;\n    }\n    if (node.children) {\n      for (const child of node.children) {\n        count += this.countGeneratedTests(child);\n      }\n    }\n    return count;\n  }\n\n  private countIssuesFound(node: TaskNode): number {\n    let count = 0;\n    if (\n      (node.agent === 'review' || node.agent === 'linting') &&\n      node.result?.issues\n    ) {\n      count += node.result.issues.length;\n    }\n    if (node.children) {\n      for (const child of node.children) {\n        count += this.countIssuesFound(child);\n      }\n    }\n    return count;\n  }\n\n  private countIssuesFixed(node: TaskNode): number {\n    let count = 0;\n    if (node.agent === 'improve' && node.result?.fixed) {\n      count += node.result.fixed.length;\n    }\n    if (node.children) {\n      for (const child of node.children) {\n        count += this.countIssuesFixed(child);\n      }\n    }\n    return count;\n  }\n}\n"],
   "mappings": "AAcA,SAAS,cAAc;AAKvB,SAAS,wBAAwB;AACjC,SAAS,+BAA+B;AACxC,SAAS,gCAAgC;AA6ElC,MAAM,2BAA2B;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA;AAAA,EAGA,mBAA0C,oBAAI,IAAI;AAAA,EAClD,mBAAsC,CAAC;AAAA;AAAA,EAGvC,iBAAuC;AAAA,IAC7C,aAAa;AAAA,IACb,mBAAmB;AAAA,IACnB,mBAAmB;AAAA,IACnB,cAAc;AAAA;AAAA,IACd,iBAAiB;AAAA,IACjB,mBAAmB;AAAA,IACnB,sBAAsB;AAAA,IACtB,oBAAoB;AAAA,IACpB,cAAc;AAAA;AAAA,IACd,kBAAkB;AAAA,IAClB,gBAAgB;AAAA;AAAA,EAClB;AAAA,EAEA,YACE,cACA,kBACA,kBACA,WACA;AACA,SAAK,eAAe;AACpB,SAAK,mBAAmB;AACxB,SAAK,YAAY;AAGjB,SAAK,mBAAmB,IAAI;AAAA,MAC1B,KAAK,eAAe;AAAA,IACtB;AACA,SAAK,iBAAiB,IAAI;AAAA,MACxB;AAAA,MACA;AAAA,IACF;AACA,SAAK,iBAAiB,IAAI,yBAAyB;AAGnD,SAAK,kBAAkB,KAAK,0BAA0B;AAEtD,WAAO,KAAK,gCAAgC;AAAA,MAC1C,aAAa,KAAK,eAAe;AAAA,MACjC,cAAc,KAAK,eAAe;AAAA,MAClC,cAAc,KAAK,eAAe;AAAA,IACpC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKQ,4BAA+D;AACrE,UAAM,UAAU,oBAAI,IAAkC;AAGtD,YAAQ,IAAI,YAAY;AAAA,MACtB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,aAAa;AAAA,MACb,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA,MAKd,cAAc,CAAC,aAAa,WAAW,cAAc,YAAY;AAAA,IACnE,CAAC;AAGD,YAAQ,IAAI,QAAQ;AAAA,MAClB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,aAAa;AAAA,MACb,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA,MAKd,cAAc,CAAC,aAAa,YAAY,YAAY,UAAU;AAAA,IAChE,CAAC;AAGD,YAAQ,IAAI,WAAW;AAAA,MACrB,MAAM;AAAA,MACN,OAAO;AAAA;AAAA,MACP,WAAW;AAAA,MACX,aAAa;AAAA,MACb,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQd,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AAGD,YAAQ,IAAI,WAAW;AAAA,MACrB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,aAAa;AAAA,MACb,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQd,cAAc,CAAC,QAAQ,UAAU,cAAc,eAAe;AAAA,IAChE,CAAC;AAGD,YAAQ,IAAI,UAAU;AAAA,MACpB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,aAAa;AAAA,MACb,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASd,cAAc;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AAGD,YAAQ,IAAI,WAAW;AAAA,MACrB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,aAAa;AAAA,MACb,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQd,cAAc,CAAC,WAAW,YAAY,YAAY,QAAQ;AAAA,IAC5D,CAAC;AAGD,YAAQ,IAAI,WAAW;AAAA,MACrB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,aAAa;AAAA,MACb,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOd,cAAc,CAAC,UAAU,YAAY,aAAa,eAAe;AAAA,IACnE,CAAC;AAGD,YAAQ,IAAI,WAAW;AAAA,MACrB,MAAM;AAAA,MACN,OAAO;AAAA,MACP,WAAW;AAAA,MACX,aAAa;AAAA,MACb,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQd,cAAc,CAAC,eAAe,kBAAkB,UAAU,UAAU;AAAA,IACtE,CAAC;AAED,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QACJ,MACA,SACA,SAC0B;AAC1B,UAAM,OAAO,EAAE,GAAG,KAAK,gBAAgB,GAAG,QAAQ;AAClD,UAAM,cAAc,KAAK,oBAAoB;AAC7C,UAAM,YAAY,KAAK,IAAI;AAE3B,WAAO,KAAK,0BAA0B;AAAA,MACpC;AAAA,MACA,MAAM,KAAK,MAAM,GAAG,GAAG;AAAA,MACvB,SAAS;AAAA,IACX,CAAC;AAED,QAAI;AAEF,YAAM,YAAY,MAAM,KAAK,qBAAqB,aAAa,IAAI;AAGnE,YAAM,WAAW,MAAM,KAAK,SAAS,MAAM,SAAS,IAAI;AACxD,WAAK,iBAAiB,IAAI,aAAa,QAAQ;AAG/C,UAAI,KAAK,gBAAgB;AACvB,aAAK,iBAAiB,QAAQ;AAAA,MAChC;AAGA,YAAM,KAAK,gBAAgB,UAAU,SAAS,MAAM,CAAC;AAGrD,YAAM,eAAe,MAAM,KAAK;AAAA,QAC9B;AAAA,QACA,KAAK;AAAA,QACL,KAAK;AAAA,MACP;AAGA,YAAM,SAA0B;AAAA,QAC9B,SAAS,SAAS,WAAW;AAAA,QAC7B;AAAA,QACA,aAAa,KAAK,qBAAqB,QAAQ;AAAA,QAC/C,WAAW,KAAK,mBAAmB,QAAQ;AAAA,QAC3C,UAAU,KAAK,IAAI,IAAI;AAAA,QACvB;AAAA,QACA,gBAAgB,KAAK,oBAAoB,QAAQ;AAAA,QACjD,aAAa,KAAK,iBAAiB,QAAQ;AAAA,QAC3C,aAAa,KAAK,iBAAiB,QAAQ;AAAA,MAC7C;AAGA,WAAK,iBAAiB,KAAK,MAAM;AAGjC,YAAM,KAAK,qBAAqB,WAAW,MAAM;AAEjD,aAAO,KAAK,2BAA2B;AAAA,QACrC;AAAA,QACA,SAAS,OAAO;AAAA,QAChB,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,QAClB,gBAAgB,OAAO;AAAA,QACvB,cAAc,aAAa;AAAA,MAC7B,CAAC;AAED,aAAO;AAAA,IACT,SAAS,OAAO;AACd,aAAO,MAAM,wBAAwB,EAAE,aAAa,MAAM,CAAC;AAC3D,YAAM;AAAA,IACR,UAAE;AACA,WAAK,iBAAiB,OAAO,WAAW;AAAA,IAC1C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,SACZ,MACA,SACA,SACmB;AAEnB,UAAM,WAAW,MAAM,KAAK,eAAe,gBAAgB;AAAA,MACzD,MAAM;AAAA,MACN;AAAA,MACA,SAAS;AAAA,QACP,GAAG;AAAA,QACH,cAAc;AAAA,MAChB;AAAA,IACF,CAAC;AAGD,UAAM,WAAW,KAAK,cAAc,KAAK,UAAU,SAAS,MAAM,CAAC;AAGnE,SAAK,0BAA0B,UAAU,QAAQ,kBAAkB;AAGnE,SAAK,mBAAmB,UAAU,QAAQ,YAAY;AAEtD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,gBACZ,MACA,SACA,SACA,OACe;AAEf,QAAI,SAAS,QAAQ,mBAAmB;AACtC,aAAO,KAAK,+BAA+B,EAAE,QAAQ,KAAK,IAAI,MAAM,CAAC;AACrE,WAAK,SAAS;AACd,WAAK,QAAQ,IAAI,MAAM,8BAA8B;AACrD;AAAA,IACF;AAGA,QAAI,QAAQ,gBAAgB;AAC1B,aAAO,KAAK,mBAAmB,KAAK,WAAW,IAAI;AAAA,QACjD,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,OAAO,KAAK;AAAA,QACZ;AAAA,MACF,CAAC;AAAA,IACH;AAEA,SAAK,SAAS;AACd,SAAK,YAAY,oBAAI,KAAK;AAE1B,QAAI;AACF,UAAI,KAAK,SAAS,cAAc,KAAK,UAAU;AAE7C,cAAM,KAAK,iBAAiB;AAAA,UAC1B,KAAK;AAAA,UACL,OAAO,UAAU;AACf,kBAAM,KAAK,gBAAgB,OAAO,SAAS,SAAS,QAAQ,CAAC;AAAA,UAC/D;AAAA,QACF;AAAA,MACF,WAAW,KAAK,SAAS,gBAAgB,KAAK,UAAU;AAEtD,mBAAW,SAAS,KAAK,UAAU;AACjC,gBAAM,KAAK,gBAAgB,OAAO,SAAS,SAAS,QAAQ,CAAC;AAG7D,cAAI,MAAM,QAAQ;AAChB,oBAAQ,GAAG,MAAM,EAAE,SAAS,IAAI,MAAM;AAAA,UACxC;AAAA,QACF;AAAA,MACF,OAAO;AAEL,cAAM,KAAK,gBAAgB,MAAM,SAAS,OAAO;AAAA,MACnD;AAEA,WAAK,SAAS;AAAA,IAChB,SAAS,OAAO;AACd,aAAO,MAAM,0BAA0B,KAAK,WAAW,IAAI,EAAE,MAAM,CAAC;AAEpE,UAAI,QAAQ,qBAAqB,KAAK,WAAW,GAAG;AAClD,aAAK;AACL,eAAO,KAAK,kBAAkB,KAAK,WAAW,IAAI;AAAA,UAChD,SAAS,KAAK;AAAA,QAChB,CAAC;AACD,cAAM,KAAK,gBAAgB,MAAM,SAAS,SAAS,KAAK;AAAA,MAC1D,OAAO;AACL,aAAK,SAAS;AACd,aAAK,QAAQ;AAAA,MACf;AAAA,IACF,UAAE;AACA,WAAK,UAAU,oBAAI,KAAK;AAGxB,UAAI,QAAQ,gBAAgB;AAC1B,cAAM,WAAW,KAAK,QAAQ,QAAQ,IAAI,KAAK,UAAW,QAAQ;AAClE,eAAO,KAAK,mBAAmB,KAAK,WAAW,IAAI;AAAA,UACjD,IAAI,KAAK;AAAA,UACT,QAAQ,KAAK;AAAA,UACb;AAAA,UACA,QAAQ,KAAK;AAAA,UACb,MAAM,KAAK;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,gBACZ,MACA,SACA,SACe;AACf,UAAM,cAAc,KAAK,gBAAgB,IAAI,KAAK,KAAK;AAGvD,UAAM,eAAe,MAAM,KAAK,eAAe;AAAA,MAC7C,KAAK;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,IACV;AAGA,UAAM,kBAAkB,KAAK,iBAAiB,MAAM,YAAY;AAGhE,UAAM,WAAW,MAAM,KAAK,eAAe,gBAAgB;AAAA,MACzD,MAAM,KAAK;AAAA,MACX,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAGD,SAAK,SAAS,SAAS;AACvB,SAAK,SACH,SAAS,UAAU,KAAK,eAAe,KAAK,UAAU,QAAQ,CAAC;AACjE,SAAK,OAAO,KAAK,kBAAkB,KAAK,QAAQ,YAAY,KAAK;AAGjE,QAAI,QAAQ,sBAAsB;AAChC,YAAM,KAAK,kBAAkB,IAAI;AAAA,IACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,wBACZ,UACA,QACA,kBACmB;AACnB,UAAM,eAAyB,CAAC;AAChC,QAAI,iBAAiB;AAErB,aAAS,QAAQ,GAAG,SAAS,QAAQ,SAAS;AAC5C,aAAO,KAAK,yBAAyB,KAAK,IAAI,MAAM,EAAE;AAGtD,YAAM,aAAuB;AAAA,QAC3B,IAAI,gBAAgB,KAAK;AAAA,QACzB,MAAM;AAAA,QACN,aAAa,gBAAgB,KAAK;AAAA,QAClC,OAAO;AAAA,QACP,cAAc,CAAC;AAAA,QACf,SAAS,EAAE,UAAU,MAAM;AAAA,QAC3B,QAAQ;AAAA,QACR,UAAU;AAAA,MACZ;AAGA,YAAM,iBAAiB,MAAM,KAAK,eAAe,gBAAgB;AAAA,QAC/D,MAAM;AAAA,QACN,MAAM,gBAAgB,KAAK;AAAA,QAC3B,SAAS,EAAE,UAAU,MAAM;AAAA,MAC7B,CAAC;AAED,iBAAW,SAAS,eAAe;AACnC,iBAAW,SAAS,eAAe,UAAU,cAAc;AAE3D,YAAM,eAAe,eAAe;AAMpC,uBAAiB,aAAa;AAC9B,mBAAa,KAAK,GAAG,aAAa,WAAW;AAE7C,aAAO,KAAK,gBAAgB,KAAK,aAAa;AAAA,QAC5C,SAAS;AAAA,QACT,QAAQ,aAAa,OAAO;AAAA,QAC5B,aAAa,aAAa,YAAY;AAAA,MACxC,CAAC;AAGD,UAAI,kBAAkB,kBAAkB;AACtC,eAAO;AAAA,UACL,0BAA0B,cAAc,OAAO,gBAAgB;AAAA,QACjE;AACA;AAAA,MACF;AAGA,UAAI,QAAQ,QAAQ;AAClB,cAAM,cAAwB;AAAA,UAC5B,IAAI,iBAAiB,KAAK;AAAA,UAC1B,MAAM;AAAA,UACN,aAAa,qBAAqB,KAAK;AAAA,UACvC,OAAO;AAAA,UACP,cAAc,CAAC,WAAW,EAAE;AAAA,UAC5B,SAAS,EAAE,cAAc,SAAS;AAAA,UAClC,QAAQ;AAAA,UACR,UAAU;AAAA,QACZ;AAGA,cAAM,kBAAkB,MAAM,KAAK,eAAe,gBAAgB;AAAA,UAChE,MAAM;AAAA,UACN,MAAM,qBAAqB,KAAK;AAAA,UAChC,SAAS,EAAE,cAAc,SAAS;AAAA,QACpC,CAAC;AAED,oBAAY,SAAS,gBAAgB;AACrC,oBAAY,SAAS,gBAAgB,UAAU,cAAc;AAG7D,aAAK,kBAAkB,UAAU,YAAY,MAAM;AAAA,MACrD;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMQ,sBAA8B;AACpC,WAAO,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,EACpE;AAAA,EAEA,MAAc,qBACZ,aACA,MACgB;AAChB,WAAO,KAAK,aAAa,UAAU;AAAA,MACjC,MAAM,QAAQ,KAAK,MAAM,GAAG,EAAE,CAAC;AAAA,MAC/B,MAAM;AAAA,MACN,UAAU,EAAE,YAAY;AAAA,IAC1B,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,qBACZ,OACA,QACe;AACf,UAAM,UAAU;AAAA,MACd;AAAA,QACE,MAAM;AAAA,QACN,SAAS,KAAK,UAAU,QAAQ,MAAM,CAAC;AAAA,MACzC;AAAA,IACF;AACA,UAAM,QAAQ,OAAO,UAAU,cAAc;AAAA,EAC/C;AAAA,EAEQ,iBAAiB,MAAgB,QAAgB,GAAS;AAChE,UAAM,SAAS,KAAK,OAAO,KAAK;AAChC,UAAM,SACJ,KAAK,WAAW,cACZ,WACA,KAAK,WAAW,WACd,WACA,KAAK,WAAW,YACd,WACA;AAEV,YAAQ,IAAI,GAAG,MAAM,GAAG,MAAM,IAAI,KAAK,WAAW,KAAK,KAAK,KAAK,GAAG;AAEpE,QAAI,KAAK,UAAU;AACjB,iBAAW,SAAS,KAAK,UAAU;AACjC,aAAK,iBAAiB,OAAO,QAAQ,CAAC;AAAA,MACxC;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,cAAc,WAA6B;AAIjD,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,aAAa;AAAA,MACb,OAAO;AAAA,MACP,cAAc,CAAC;AAAA,MACf,SAAS,CAAC;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,UAAU,CAAC;AAAA,IACb;AAAA,EACF;AAAA,EAEQ,0BAA0B,MAAgB,OAAqB;AAErE,QAAI,CAAC,KAAK,SAAU;AAEpB,UAAM,WAAqB;AAAA,MACzB,IAAI,GAAG,KAAK,EAAE;AAAA,MACd,MAAM;AAAA,MACN,aAAa,YAAY,KAAK,cAAc,KAAK,WAAW;AAAA,MAC5D,OAAO;AAAA,MACP,cAAc,CAAC,KAAK,EAAE;AAAA,MACtB,SAAS,EAAE,UAAU,MAAM;AAAA,MAC3B,QAAQ;AAAA,MACR,UAAU;AAAA,IACZ;AAEA,SAAK,SAAS,KAAK,QAAQ;AAAA,EAC7B;AAAA,EAEQ,mBAAmB,OAAiB,SAAuB;AAAA,EAGnE;AAAA,EAEQ,iBAAiB,MAAgB,SAAsB;AAC7D,WAAO;AAAA,cACG,KAAK,WAAW;AAAA;AAAA;AAAA,QAGtB,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AAAA;AAAA;AAAA,QAGhC,KAAK;AAAA,MACL,KAAK,aAAa,IAAI,CAAC,OAAO,KAAK,iBAAiB,IAAI,EAAE,GAAG,MAAM;AAAA,MACnE;AAAA,MACA;AAAA,IACF,CAAC;AAAA;AAAA;AAAA;AAAA,EAIL;AAAA,EAEQ,eAAe,MAAsB;AAE3C,WAAO,KAAK,KAAK,KAAK,SAAS,CAAC;AAAA,EAClC;AAAA,EAEA,MAAc,kBAAkB,OAAgC;AAE9D,WAAO,MAAM,yBAAyB,EAAE,QAAQ,MAAM,GAAG,CAAC;AAAA,EAC5D;AAAA,EAEQ,kBAAkB,WAAqB,cAAyB;AAEtE,WAAO,MAAM,yBAAyB,EAAE,aAAa,CAAC;AAAA,EACxD;AAAA,EAEQ,qBAAqB,MAAwB;AACnD,QAAI,QAAQ,KAAK,UAAU;AAC3B,QAAI,KAAK,UAAU;AACjB,iBAAW,SAAS,KAAK,UAAU;AACjC,iBAAS,KAAK,qBAAqB,KAAK;AAAA,MAC1C;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,mBAAmB,MAAwB;AACjD,QAAI,QAAQ,KAAK,QAAQ;AACzB,QAAI,KAAK,UAAU;AACjB,iBAAW,SAAS,KAAK,UAAU;AACjC,iBAAS,KAAK,mBAAmB,KAAK;AAAA,MACxC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,kBAAkB,QAAgB,OAAuB;AAE/D,UAAM,UAAkC;AAAA,MACtC,4BAA4B;AAAA,MAC5B,2BAA2B;AAAA,MAC3B,wBAAwB;AAAA,IAC1B;AACA,WAAQ,SAAS,OAAY,QAAQ,KAAK,KAAK;AAAA,EACjD;AAAA,EAEQ,oBAAoB,MAAwB;AAClD,QAAI,QAAQ;AACZ,QAAI,KAAK,UAAU,aAAa,KAAK,QAAQ,OAAO;AAClD,eAAS,KAAK,OAAO,MAAM;AAAA,IAC7B;AACA,QAAI,KAAK,UAAU;AACjB,iBAAW,SAAS,KAAK,UAAU;AACjC,iBAAS,KAAK,oBAAoB,KAAK;AAAA,MACzC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,iBAAiB,MAAwB;AAC/C,QAAI,QAAQ;AACZ,SACG,KAAK,UAAU,YAAY,KAAK,UAAU,cAC3C,KAAK,QAAQ,QACb;AACA,eAAS,KAAK,OAAO,OAAO;AAAA,IAC9B;AACA,QAAI,KAAK,UAAU;AACjB,iBAAW,SAAS,KAAK,UAAU;AACjC,iBAAS,KAAK,iBAAiB,KAAK;AAAA,MACtC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,iBAAiB,MAAwB;AAC/C,QAAI,QAAQ;AACZ,QAAI,KAAK,UAAU,aAAa,KAAK,QAAQ,OAAO;AAClD,eAAS,KAAK,OAAO,MAAM;AAAA,IAC7B;AACA,QAAI,KAAK,UAAU;AACjB,iBAAW,SAAS,KAAK,UAAU;AACjC,iBAAS,KAAK,iBAAiB,KAAK;AAAA,MACtC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;",
   "names": []
 }

package/dist/skills/security-secrets-scanner.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { execSync } from "child_process";
+import { execFileSync } from "child_process";
 import fs from "fs";
 import { glob } from "glob";
 const SECRET_PATTERNS = [
@@ -172,11 +172,26 @@ if (!${varName}) {
     console.log("\u{1F50D} Checking git history for secrets...\n");
     try {
       for (const pattern of SECRET_PATTERNS) {
-        const command = `git log -p --all -G"${pattern.pattern.source}" --format="%H %s" | head -20`;
-        const result = execSync(command, {
-          encoding: "utf-8",
-          stdio: "pipe"
-        }).trim();
+        let result;
+        try {
+          const gitOutput = execFileSync(
+            "git",
+            [
+              "log",
+              "-p",
+              "--all",
+              `-G${pattern.pattern.source}`,
+              "--format=%H %s"
+            ],
+            {
+              encoding: "utf-8",
+              stdio: "pipe"
+            }
+          );
+          result = gitOutput.split("\n").slice(0, 20).join("\n").trim();
+        } catch {
+          continue;
+        }
         if (result) {
           console.log(`\u26A0\uFE0F  Found ${pattern.name} in git history:`);
           console.log(result.split("\n").slice(0, 3).join("\n"));

package/dist/skills/security-secrets-scanner.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/skills/security-secrets-scanner.ts"],
-  "sourcesContent": ["#!/usr/bin/env node\n\n/**\n * Security Secrets Scanner Skill\n * Detects and fixes hardcoded secrets in code files\n */\n\nimport { execSync } from 'child_process';\nimport fs from 'fs';\nimport { glob } from 'glob';\n\ninterface SecretPattern {\n  pattern: RegExp;\n  name: string;\n  envVar: string;\n}\n\nconst SECRET_PATTERNS: SecretPattern[] = [\n  {\n    pattern: /lin_api_[a-zA-Z0-9]{40}/,\n    name: 'Linear API Key',\n    envVar: 'LINEAR_API_KEY',\n  },\n  {\n    pattern: /lin_oauth_[a-zA-Z0-9]{64}/,\n    name: 'Linear OAuth Token',\n    envVar: 'LINEAR_OAUTH_TOKEN',\n  },\n  {\n    pattern: /sk-[a-zA-Z0-9]{48}/,\n    name: 'OpenAI API Key',\n    envVar: 'OPENAI_API_KEY',\n  },\n  { pattern: /npm_[a-zA-Z0-9]{36}/, name: 'NPM Token', envVar: 'NPM_TOKEN' },\n  {\n    pattern: /ghp_[a-zA-Z0-9]{36}/,\n    name: 'GitHub Token',\n    envVar: 'GITHUB_TOKEN',\n  },\n  {\n    pattern: /ghs_[a-zA-Z0-9]{36}/,\n    name: 'GitHub Secret',\n    envVar: 'GITHUB_SECRET',\n  },\n  {\n    pattern: /pk_live_[a-zA-Z0-9]{24,}/,\n    name: 'Stripe Live Key',\n    envVar: 'STRIPE_LIVE_KEY',\n  },\n  {\n    pattern: /sk_live_[a-zA-Z0-9]{24,}/,\n    name: 'Stripe Secret Key',\n    envVar: 'STRIPE_SECRET_KEY',\n  },\n];\n\nexport class SecuritySecretsScanner {\n  private detectedSecrets: Map<string, Set<string>> = new Map();\n\n  /**\n   * Scan files for hardcoded secrets\n   */\n  async scanForSecrets(\n    patterns: string[] = [\n      '**/*.js',\n      '**/*.ts',\n      '**/*.jsx',\n      '**/*.tsx',\n      '**/*.sh',\n    ]\n  ): Promise<void> {\n    console.log('\uD83D\uDD0D Scanning for hardcoded secrets...\\n');\n\n    for (const pattern of patterns) {\n      const files = await glob(pattern, {\n        ignore: ['node_modules/**', 'dist/**', 'build/**', '.git/**'],\n      });\n\n      for (const file of files) {\n        await this.scanFile(file);\n      }\n    }\n\n    this.reportFindings();\n  }\n\n  /**\n   * Scan a single file for secrets\n   */\n  private async scanFile(filePath: string): Promise<void> {\n    const content = fs.readFileSync(filePath, 'utf-8');\n    const lines = content.split('\\n');\n\n    lines.forEach((line, index) => {\n      for (const secretPattern of SECRET_PATTERNS) {\n        if (secretPattern.pattern.test(line)) {\n          if (!this.detectedSecrets.has(filePath)) {\n            this.detectedSecrets.set(filePath, new Set());\n          }\n          const secrets = this.detectedSecrets.get(filePath);\n          if (secrets) {\n            secrets.add(\n              `Line ${index + 1}: ${secretPattern.name} detected (use ${secretPattern.envVar})`\n            );\n          }\n        }\n      }\n    });\n  }\n\n  /**\n   * Report findings\n   */\n  private reportFindings(): void {\n    if (this.detectedSecrets.size === 0) {\n      console.log('\u2705 No hardcoded secrets detected!\\n');\n      return;\n    }\n\n    console.log(\n      `\u26A0\uFE0F  Found hardcoded secrets in ${this.detectedSecrets.size} files:\\n`\n    );\n\n    for (const [file, secrets] of this.detectedSecrets) {\n      console.log(`\uD83D\uDCC4 ${file}:`);\n      for (const secret of secrets) {\n        console.log(`   ${secret}`);\n      }\n      console.log();\n    }\n\n    console.log('\uD83D\uDCDD How to fix:');\n    console.log('1. Replace hardcoded values with process.env.VARIABLE_NAME');\n    console.log('2. Add \"import \\'dotenv/config\\'\" at the top of the file');\n    console.log('3. Add the actual values to your .env file');\n    console.log('4. Never commit .env files to git\\n');\n  }\n\n  /**\n   * Auto-fix secrets in files\n   */\n  async autoFix(): Promise<void> {\n    console.log('\uD83D\uDD27 Auto-fixing hardcoded secrets...\\n');\n\n    for (const [filePath] of this.detectedSecrets) {\n      let content = fs.readFileSync(filePath, 'utf-8');\n      let modified = false;\n\n      // Add dotenv import if it's a JS/TS file and doesn't have it\n      if (\n        (filePath.endsWith('.js') || filePath.endsWith('.ts')) &&\n        !content.includes('dotenv/config') &&\n        !content.includes(\"require('dotenv')\")\n      ) {\n        // Add after shebang if present, otherwise at the top\n        if (content.startsWith('#!/')) {\n          const firstNewline = content.indexOf('\\n');\n          content =\n            content.slice(0, firstNewline + 1) +\n            \"\\nimport 'dotenv/config';\\n\" +\n            content.slice(firstNewline + 1);\n        } else {\n          content = \"import 'dotenv/config';\\n\\n\" + content;\n        }\n        modified = true;\n      }\n\n      // Replace secrets with environment variables\n      for (const pattern of SECRET_PATTERNS) {\n        const regex = new RegExp(\n          `(['\"\\`])(${pattern.pattern.source})(['\"\\`])`,\n          'g'\n        );\n        const replacement = `process.env.${pattern.envVar}`;\n\n        if (regex.test(content)) {\n          content = content.replace(regex, replacement);\n          modified = true;\n\n          // Add error checking after the variable definition\n          const varPattern = new RegExp(\n            `const\\\\s+(\\\\w+)\\\\s*=\\\\s*process\\\\.env\\\\.${pattern.envVar}`\n          );\n          const match = content.match(varPattern);\n          if (match) {\n            const varName = match[1];\n            const checkCode =\n              `\\nif (!${varName}) {\\n` +\n              `  console.error('\u274C ${pattern.envVar} environment variable not set');\\n` +\n              `  console.log('Please set ${pattern.envVar} in your .env file or export it in your shell');\\n` +\n              `  process.exit(1);\\n}\\n`;\n\n            // Insert after the variable declaration\n            const insertPos = content.indexOf(match[0]) + match[0].length;\n            content =\n              content.slice(0, insertPos) +\n              checkCode +\n              content.slice(insertPos);\n          }\n        }\n      }\n\n      if (modified) {\n        fs.writeFileSync(filePath, content);\n        console.log(`\u2705 Fixed ${filePath}`);\n      }\n    }\n\n    console.log('\\n\uD83D\uDCCB Next steps:');\n    console.log('1. Review the changes');\n    console.log('2. Add actual values to .env file');\n    console.log('3. Test that everything still works');\n    console.log('4. Commit the fixes\\n');\n  }\n\n  /**\n   * Check git history for secrets\n   */\n  async checkGitHistory(): Promise<void> {\n    console.log('\uD83D\uDD0D Checking git history for secrets...\\n');\n\n    try {\n      for (const pattern of SECRET_PATTERNS) {\n        const command = `git log -p --all -G\"${pattern.pattern.source}\" --format=\"%H %s\" | head -20`;\n        const result = execSync(command, {\n          encoding: 'utf-8',\n          stdio: 'pipe',\n        }).trim();\n\n        if (result) {\n          console.log(`\u26A0\uFE0F  Found ${pattern.name} in git history:`);\n          console.log(result.split('\\n').slice(0, 3).join('\\n'));\n          console.log('...\\n');\n        }\n      }\n\n      console.log('\uD83D\uDCDD To clean git history:');\n      console.log('1. Use BFG Repo-Cleaner: bfg --replace-text passwords.txt');\n      console.log('2. Or interactive rebase: git rebase -i <commit>');\n      console.log('3. Or allow via GitHub: Check push error for allow URLs\\n');\n    } catch {\n      console.log('Could not check git history');\n    }\n  }\n\n  /**\n   * Generate pre-commit hook\n   */\n  generatePreCommitHook(): void {\n    const hookContent = `#!/bin/sh\n# Pre-commit hook to check for hardcoded secrets\n\necho \"\uD83D\uDD0D Checking for hardcoded secrets...\"\n\n# Patterns to check\npatterns=(\n  \"lin_api_[a-zA-Z0-9]{40}\"\n  \"lin_oauth_[a-zA-Z0-9]{64}\"\n  \"sk-[a-zA-Z0-9]{48}\"\n  \"npm_[a-zA-Z0-9]{36}\"\n  \"ghp_[a-zA-Z0-9]{36}\"\n  \"pk_live_[a-zA-Z0-9]{24,}\"\n  \"sk_live_[a-zA-Z0-9]{24,}\"\n)\n\n# Check staged files\nfor pattern in \"\\${patterns[@]}\"; do\n  if git diff --staged --no-color | grep -E \"$pattern\"; then\n    echo \"\u274C Found hardcoded secret matching: $pattern\"\n    echo \"Please use environment variables instead!\"\n    exit 1\n  fi\ndone\n\necho \"\u2705 No hardcoded secrets detected\"\nexit 0\n`;\n\n    const hookPath = '.git/hooks/pre-commit';\n    fs.writeFileSync(hookPath, hookContent);\n    fs.chmodSync(hookPath, '755');\n\n    console.log('\u2705 Generated pre-commit hook at .git/hooks/pre-commit');\n    console.log(\n      'This will prevent committing hardcoded secrets in the future.\\n'\n    );\n  }\n}\n\n// CLI usage\n\nif (import.meta.url === `file://${process.argv[1]}`) {\n  const scanner = new SecuritySecretsScanner();\n  const command = process.argv[2];\n\n  (async () => {\n    switch (command) {\n      case 'scan':\n        await scanner.scanForSecrets();\n        break;\n      case 'fix':\n        await scanner.scanForSecrets();\n        await scanner.autoFix();\n        break;\n      case 'history':\n        await scanner.checkGitHistory();\n        break;\n      case 'hook':\n        scanner.generatePreCommitHook();\n        break;\n      default:\n        console.log('Usage: security-secrets-scanner [scan|fix|history|hook]');\n        console.log('  scan    - Scan for hardcoded secrets');\n        console.log('  fix     - Auto-fix hardcoded secrets');\n        console.log('  history - Check git history for secrets');\n        console.log('  hook    - Generate pre-commit hook');\n    }\n  })();\n}\n"],
-  "mappings": ";AAOA,SAAS,gBAAgB;AACzB,OAAO,QAAQ;AACf,SAAS,YAAY;AAQrB,MAAM,kBAAmC;AAAA,EACvC;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA,EACA,EAAE,SAAS,uBAAuB,MAAM,aAAa,QAAQ,YAAY;AAAA,EACzE;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AACF;AAEO,MAAM,uBAAuB;AAAA,EAC1B,kBAA4C,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA,EAK5D,MAAM,eACJ,WAAqB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GACe;AACf,YAAQ,IAAI,+CAAwC;AAEpD,eAAW,WAAW,UAAU;AAC9B,YAAM,QAAQ,MAAM,KAAK,SAAS;AAAA,QAChC,QAAQ,CAAC,mBAAmB,WAAW,YAAY,SAAS;AAAA,MAC9D,CAAC;AAED,iBAAW,QAAQ,OAAO;AACxB,cAAM,KAAK,SAAS,IAAI;AAAA,MAC1B;AAAA,IACF;AAEA,SAAK,eAAe;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,SAAS,UAAiC;AACtD,UAAM,UAAU,GAAG,aAAa,UAAU,OAAO;AACjD,UAAM,QAAQ,QAAQ,MAAM,IAAI;AAEhC,UAAM,QAAQ,CAAC,MAAM,UAAU;AAC7B,iBAAW,iBAAiB,iBAAiB;AAC3C,YAAI,cAAc,QAAQ,KAAK,IAAI,GAAG;AACpC,cAAI,CAAC,KAAK,gBAAgB,IAAI,QAAQ,GAAG;AACvC,iBAAK,gBAAgB,IAAI,UAAU,oBAAI,IAAI,CAAC;AAAA,UAC9C;AACA,gBAAM,UAAU,KAAK,gBAAgB,IAAI,QAAQ;AACjD,cAAI,SAAS;AACX,oBAAQ;AAAA,cACN,QAAQ,QAAQ,CAAC,KAAK,cAAc,IAAI,kBAAkB,cAAc,MAAM;AAAA,YAChF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKQ,iBAAuB;AAC7B,QAAI,KAAK,gBAAgB,SAAS,GAAG;AACnC,cAAQ,IAAI,yCAAoC;AAChD;AAAA,IACF;AAEA,YAAQ;AAAA,MACN,4CAAkC,KAAK,gBAAgB,IAAI;AAAA;AAAA,IAC7D;AAEA,eAAW,CAAC,MAAM,OAAO,KAAK,KAAK,iBAAiB;AAClD,cAAQ,IAAI,aAAM,IAAI,GAAG;AACzB,iBAAW,UAAU,SAAS;AAC5B,gBAAQ,IAAI,MAAM,MAAM,EAAE;AAAA,MAC5B;AACA,cAAQ,IAAI;AAAA,IACd;AAEA,YAAQ,IAAI,uBAAgB;AAC5B,YAAQ,IAAI,4DAA4D;AACxE,YAAQ,IAAI,wDAA0D;AACtE,YAAQ,IAAI,4CAA4C;AACxD,YAAQ,IAAI,qCAAqC;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,UAAyB;AAC7B,YAAQ,IAAI,8CAAuC;AAEnD,eAAW,CAAC,QAAQ,KAAK,KAAK,iBAAiB;AAC7C,UAAI,UAAU,GAAG,aAAa,UAAU,OAAO;AAC/C,UAAI,WAAW;AAGf,WACG,SAAS,SAAS,KAAK,KAAK,SAAS,SAAS,KAAK,MACpD,CAAC,QAAQ,SAAS,eAAe,KACjC,CAAC,QAAQ,SAAS,mBAAmB,GACrC;AAEA,YAAI,QAAQ,WAAW,KAAK,GAAG;AAC7B,gBAAM,eAAe,QAAQ,QAAQ,IAAI;AACzC,oBACE,QAAQ,MAAM,GAAG,eAAe,CAAC,IACjC,gCACA,QAAQ,MAAM,eAAe,CAAC;AAAA,QAClC,OAAO;AACL,oBAAU,gCAAgC;AAAA,QAC5C;AACA,mBAAW;AAAA,MACb;AAGA,iBAAW,WAAW,iBAAiB;AACrC,cAAM,QAAQ,IAAI;AAAA,UAChB,YAAY,QAAQ,QAAQ,MAAM;AAAA,UAClC;AAAA,QACF;AACA,cAAM,cAAc,eAAe,QAAQ,MAAM;AAEjD,YAAI,MAAM,KAAK,OAAO,GAAG;AACvB,oBAAU,QAAQ,QAAQ,OAAO,WAAW;AAC5C,qBAAW;AAGX,gBAAM,aAAa,IAAI;AAAA,YACrB,2CAA2C,QAAQ,MAAM;AAAA,UAC3D;AACA,gBAAM,QAAQ,QAAQ,MAAM,UAAU;AACtC,cAAI,OAAO;AACT,kBAAM,UAAU,MAAM,CAAC;AACvB,kBAAM,YACJ;AAAA,OAAU,OAAO;AAAA,0BACK,QAAQ,MAAM;AAAA,4BACP,QAAQ,MAAM;AAAA;AAAA;AAAA;AAI7C,kBAAM,YAAY,QAAQ,QAAQ,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,EAAE;AACvD,sBACE,QAAQ,MAAM,GAAG,SAAS,IAC1B,YACA,QAAQ,MAAM,SAAS;AAAA,UAC3B;AAAA,QACF;AAAA,MACF;AAEA,UAAI,UAAU;AACZ,WAAG,cAAc,UAAU,OAAO;AAClC,gBAAQ,IAAI,gBAAW,QAAQ,EAAE;AAAA,MACnC;AAAA,IACF;AAEA,YAAQ,IAAI,yBAAkB;AAC9B,YAAQ,IAAI,uBAAuB;AACnC,YAAQ,IAAI,mCAAmC;AAC/C,YAAQ,IAAI,qCAAqC;AACjD,YAAQ,IAAI,uBAAuB;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBAAiC;AACrC,YAAQ,IAAI,iDAA0C;AAEtD,QAAI;AACF,iBAAW,WAAW,iBAAiB;AACrC,cAAM,UAAU,uBAAuB,QAAQ,QAAQ,MAAM;AAC7D,cAAM,SAAS,SAAS,SAAS;AAAA,UAC/B,UAAU;AAAA,UACV,OAAO;AAAA,QACT,CAAC,EAAE,KAAK;AAER,YAAI,QAAQ;AACV,kBAAQ,IAAI,uBAAa,QAAQ,IAAI,kBAAkB;AACvD,kBAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC;AACrD,kBAAQ,IAAI,OAAO;AAAA,QACrB;AAAA,MACF;AAEA,cAAQ,IAAI,iCAA0B;AACtC,cAAQ,IAAI,2DAA2D;AACvE,cAAQ,IAAI,kDAAkD;AAC9D,cAAQ,IAAI,2DAA2D;AAAA,IACzE,QAAQ;AACN,cAAQ,IAAI,6BAA6B;AAAA,IAC3C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,wBAA8B;AAC5B,UAAM,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6BpB,UAAM,WAAW;AACjB,OAAG,cAAc,UAAU,WAAW;AACtC,OAAG,UAAU,UAAU,KAAK;AAE5B,YAAQ,IAAI,2DAAsD;AAClE,YAAQ;AAAA,MACN;AAAA,IACF;AAAA,EACF;AACF;AAIA,IAAI,YAAY,QAAQ,UAAU,QAAQ,KAAK,CAAC,CAAC,IAAI;AACnD,QAAM,UAAU,IAAI,uBAAuB;AAC3C,QAAM,UAAU,QAAQ,KAAK,CAAC;AAE9B,GAAC,YAAY;AACX,YAAQ,SAAS;AAAA,MACf,KAAK;AACH,cAAM,QAAQ,eAAe;AAC7B;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,eAAe;AAC7B,cAAM,QAAQ,QAAQ;AACtB;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,gBAAgB;AAC9B;AAAA,MACF,KAAK;AACH,gBAAQ,sBAAsB;AAC9B;AAAA,MACF;AACE,gBAAQ,IAAI,yDAAyD;AACrE,gBAAQ,IAAI,wCAAwC;AACpD,gBAAQ,IAAI,wCAAwC;AACpD,gBAAQ,IAAI,2CAA2C;AACvD,gBAAQ,IAAI,sCAAsC;AAAA,IACtD;AAAA,EACF,GAAG;AACL;",
+  "sourcesContent": ["#!/usr/bin/env node\n\n/**\n * Security Secrets Scanner Skill\n * Detects and fixes hardcoded secrets in code files\n */\n\nimport { execFileSync } from 'child_process';\nimport fs from 'fs';\nimport { glob } from 'glob';\n\ninterface SecretPattern {\n  pattern: RegExp;\n  name: string;\n  envVar: string;\n}\n\nconst SECRET_PATTERNS: SecretPattern[] = [\n  {\n    pattern: /lin_api_[a-zA-Z0-9]{40}/,\n    name: 'Linear API Key',\n    envVar: 'LINEAR_API_KEY',\n  },\n  {\n    pattern: /lin_oauth_[a-zA-Z0-9]{64}/,\n    name: 'Linear OAuth Token',\n    envVar: 'LINEAR_OAUTH_TOKEN',\n  },\n  {\n    pattern: /sk-[a-zA-Z0-9]{48}/,\n    name: 'OpenAI API Key',\n    envVar: 'OPENAI_API_KEY',\n  },\n  { pattern: /npm_[a-zA-Z0-9]{36}/, name: 'NPM Token', envVar: 'NPM_TOKEN' },\n  {\n    pattern: /ghp_[a-zA-Z0-9]{36}/,\n    name: 'GitHub Token',\n    envVar: 'GITHUB_TOKEN',\n  },\n  {\n    pattern: /ghs_[a-zA-Z0-9]{36}/,\n    name: 'GitHub Secret',\n    envVar: 'GITHUB_SECRET',\n  },\n  {\n    pattern: /pk_live_[a-zA-Z0-9]{24,}/,\n    name: 'Stripe Live Key',\n    envVar: 'STRIPE_LIVE_KEY',\n  },\n  {\n    pattern: /sk_live_[a-zA-Z0-9]{24,}/,\n    name: 'Stripe Secret Key',\n    envVar: 'STRIPE_SECRET_KEY',\n  },\n];\n\nexport class SecuritySecretsScanner {\n  private detectedSecrets: Map<string, Set<string>> = new Map();\n\n  /**\n   * Scan files for hardcoded secrets\n   */\n  async scanForSecrets(\n    patterns: string[] = [\n      '**/*.js',\n      '**/*.ts',\n      '**/*.jsx',\n      '**/*.tsx',\n      '**/*.sh',\n    ]\n  ): Promise<void> {\n    console.log('\uD83D\uDD0D Scanning for hardcoded secrets...\\n');\n\n    for (const pattern of patterns) {\n      const files = await glob(pattern, {\n        ignore: ['node_modules/**', 'dist/**', 'build/**', '.git/**'],\n      });\n\n      for (const file of files) {\n        await this.scanFile(file);\n      }\n    }\n\n    this.reportFindings();\n  }\n\n  /**\n   * Scan a single file for secrets\n   */\n  private async scanFile(filePath: string): Promise<void> {\n    const content = fs.readFileSync(filePath, 'utf-8');\n    const lines = content.split('\\n');\n\n    lines.forEach((line, index) => {\n      for (const secretPattern of SECRET_PATTERNS) {\n        if (secretPattern.pattern.test(line)) {\n          if (!this.detectedSecrets.has(filePath)) {\n            this.detectedSecrets.set(filePath, new Set());\n          }\n          const secrets = this.detectedSecrets.get(filePath);\n          if (secrets) {\n            secrets.add(\n              `Line ${index + 1}: ${secretPattern.name} detected (use ${secretPattern.envVar})`\n            );\n          }\n        }\n      }\n    });\n  }\n\n  /**\n   * Report findings\n   */\n  private reportFindings(): void {\n    if (this.detectedSecrets.size === 0) {\n      console.log('\u2705 No hardcoded secrets detected!\\n');\n      return;\n    }\n\n    console.log(\n      `\u26A0\uFE0F  Found hardcoded secrets in ${this.detectedSecrets.size} files:\\n`\n    );\n\n    for (const [file, secrets] of this.detectedSecrets) {\n      console.log(`\uD83D\uDCC4 ${file}:`);\n      for (const secret of secrets) {\n        console.log(`   ${secret}`);\n      }\n      console.log();\n    }\n\n    console.log('\uD83D\uDCDD How to fix:');\n    console.log('1. Replace hardcoded values with process.env.VARIABLE_NAME');\n    console.log('2. Add \"import \\'dotenv/config\\'\" at the top of the file');\n    console.log('3. Add the actual values to your .env file');\n    console.log('4. Never commit .env files to git\\n');\n  }\n\n  /**\n   * Auto-fix secrets in files\n   */\n  async autoFix(): Promise<void> {\n    console.log('\uD83D\uDD27 Auto-fixing hardcoded secrets...\\n');\n\n    for (const [filePath] of this.detectedSecrets) {\n      let content = fs.readFileSync(filePath, 'utf-8');\n      let modified = false;\n\n      // Add dotenv import if it's a JS/TS file and doesn't have it\n      if (\n        (filePath.endsWith('.js') || filePath.endsWith('.ts')) &&\n        !content.includes('dotenv/config') &&\n        !content.includes(\"require('dotenv')\")\n      ) {\n        // Add after shebang if present, otherwise at the top\n        if (content.startsWith('#!/')) {\n          const firstNewline = content.indexOf('\\n');\n          content =\n            content.slice(0, firstNewline + 1) +\n            \"\\nimport 'dotenv/config';\\n\" +\n            content.slice(firstNewline + 1);\n        } else {\n          content = \"import 'dotenv/config';\\n\\n\" + content;\n        }\n        modified = true;\n      }\n\n      // Replace secrets with environment variables\n      for (const pattern of SECRET_PATTERNS) {\n        const regex = new RegExp(\n          `(['\"\\`])(${pattern.pattern.source})(['\"\\`])`,\n          'g'\n        );\n        const replacement = `process.env.${pattern.envVar}`;\n\n        if (regex.test(content)) {\n          content = content.replace(regex, replacement);\n          modified = true;\n\n          // Add error checking after the variable definition\n          const varPattern = new RegExp(\n            `const\\\\s+(\\\\w+)\\\\s*=\\\\s*process\\\\.env\\\\.${pattern.envVar}`\n          );\n          const match = content.match(varPattern);\n          if (match) {\n            const varName = match[1];\n            const checkCode =\n              `\\nif (!${varName}) {\\n` +\n              `  console.error('\u274C ${pattern.envVar} environment variable not set');\\n` +\n              `  console.log('Please set ${pattern.envVar} in your .env file or export it in your shell');\\n` +\n              `  process.exit(1);\\n}\\n`;\n\n            // Insert after the variable declaration\n            const insertPos = content.indexOf(match[0]) + match[0].length;\n            content =\n              content.slice(0, insertPos) +\n              checkCode +\n              content.slice(insertPos);\n          }\n        }\n      }\n\n      if (modified) {\n        fs.writeFileSync(filePath, content);\n        console.log(`\u2705 Fixed ${filePath}`);\n      }\n    }\n\n    console.log('\\n\uD83D\uDCCB Next steps:');\n    console.log('1. Review the changes');\n    console.log('2. Add actual values to .env file');\n    console.log('3. Test that everything still works');\n    console.log('4. Commit the fixes\\n');\n  }\n\n  /**\n   * Check git history for secrets\n   */\n  async checkGitHistory(): Promise<void> {\n    console.log('\uD83D\uDD0D Checking git history for secrets...\\n');\n\n    try {\n      for (const pattern of SECRET_PATTERNS) {\n        // Use execFileSync to safely pass arguments\n        let result: string;\n        try {\n          const gitOutput = execFileSync(\n            'git',\n            [\n              'log',\n              '-p',\n              '--all',\n              `-G${pattern.pattern.source}`,\n              '--format=%H %s',\n            ],\n            {\n              encoding: 'utf-8',\n              stdio: 'pipe',\n            }\n          );\n\n          // Manually limit output to first 20 lines for safety\n          result = gitOutput.split('\\n').slice(0, 20).join('\\n').trim();\n        } catch {\n          // Git command failed, skip this pattern\n          continue;\n        }\n\n        if (result) {\n          console.log(`\u26A0\uFE0F  Found ${pattern.name} in git history:`);\n          console.log(result.split('\\n').slice(0, 3).join('\\n'));\n          console.log('...\\n');\n        }\n      }\n\n      console.log('\uD83D\uDCDD To clean git history:');\n      console.log('1. Use BFG Repo-Cleaner: bfg --replace-text passwords.txt');\n      console.log('2. Or interactive rebase: git rebase -i <commit>');\n      console.log('3. Or allow via GitHub: Check push error for allow URLs\\n');\n    } catch {\n      console.log('Could not check git history');\n    }\n  }\n\n  /**\n   * Generate pre-commit hook\n   */\n  generatePreCommitHook(): void {\n    const hookContent = `#!/bin/sh\n# Pre-commit hook to check for hardcoded secrets\n\necho \"\uD83D\uDD0D Checking for hardcoded secrets...\"\n\n# Patterns to check\npatterns=(\n  \"lin_api_[a-zA-Z0-9]{40}\"\n  \"lin_oauth_[a-zA-Z0-9]{64}\"\n  \"sk-[a-zA-Z0-9]{48}\"\n  \"npm_[a-zA-Z0-9]{36}\"\n  \"ghp_[a-zA-Z0-9]{36}\"\n  \"pk_live_[a-zA-Z0-9]{24,}\"\n  \"sk_live_[a-zA-Z0-9]{24,}\"\n)\n\n# Check staged files\nfor pattern in \"\\${patterns[@]}\"; do\n  if git diff --staged --no-color | grep -E \"$pattern\"; then\n    echo \"\u274C Found hardcoded secret matching: $pattern\"\n    echo \"Please use environment variables instead!\"\n    exit 1\n  fi\ndone\n\necho \"\u2705 No hardcoded secrets detected\"\nexit 0\n`;\n\n    const hookPath = '.git/hooks/pre-commit';\n    fs.writeFileSync(hookPath, hookContent);\n    fs.chmodSync(hookPath, '755');\n\n    console.log('\u2705 Generated pre-commit hook at .git/hooks/pre-commit');\n    console.log(\n      'This will prevent committing hardcoded secrets in the future.\\n'\n    );\n  }\n}\n\n// CLI usage\n\nif (import.meta.url === `file://${process.argv[1]}`) {\n  const scanner = new SecuritySecretsScanner();\n  const command = process.argv[2];\n\n  (async () => {\n    switch (command) {\n      case 'scan':\n        await scanner.scanForSecrets();\n        break;\n      case 'fix':\n        await scanner.scanForSecrets();\n        await scanner.autoFix();\n        break;\n      case 'history':\n        await scanner.checkGitHistory();\n        break;\n      case 'hook':\n        scanner.generatePreCommitHook();\n        break;\n      default:\n        console.log('Usage: security-secrets-scanner [scan|fix|history|hook]');\n        console.log('  scan    - Scan for hardcoded secrets');\n        console.log('  fix     - Auto-fix hardcoded secrets');\n        console.log('  history - Check git history for secrets');\n        console.log('  hook    - Generate pre-commit hook');\n    }\n  })();\n}\n"],
+  "mappings": ";AAOA,SAAS,oBAAoB;AAC7B,OAAO,QAAQ;AACf,SAAS,YAAY;AAQrB,MAAM,kBAAmC;AAAA,EACvC;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA,EACA,EAAE,SAAS,uBAAuB,MAAM,aAAa,QAAQ,YAAY;AAAA,EACzE;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AACF;AAEO,MAAM,uBAAuB;AAAA,EAC1B,kBAA4C,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA,EAK5D,MAAM,eACJ,WAAqB;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GACe;AACf,YAAQ,IAAI,+CAAwC;AAEpD,eAAW,WAAW,UAAU;AAC9B,YAAM,QAAQ,MAAM,KAAK,SAAS;AAAA,QAChC,QAAQ,CAAC,mBAAmB,WAAW,YAAY,SAAS;AAAA,MAC9D,CAAC;AAED,iBAAW,QAAQ,OAAO;AACxB,cAAM,KAAK,SAAS,IAAI;AAAA,MAC1B;AAAA,IACF;AAEA,SAAK,eAAe;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,SAAS,UAAiC;AACtD,UAAM,UAAU,GAAG,aAAa,UAAU,OAAO;AACjD,UAAM,QAAQ,QAAQ,MAAM,IAAI;AAEhC,UAAM,QAAQ,CAAC,MAAM,UAAU;AAC7B,iBAAW,iBAAiB,iBAAiB;AAC3C,YAAI,cAAc,QAAQ,KAAK,IAAI,GAAG;AACpC,cAAI,CAAC,KAAK,gBAAgB,IAAI,QAAQ,GAAG;AACvC,iBAAK,gBAAgB,IAAI,UAAU,oBAAI,IAAI,CAAC;AAAA,UAC9C;AACA,gBAAM,UAAU,KAAK,gBAAgB,IAAI,QAAQ;AACjD,cAAI,SAAS;AACX,oBAAQ;AAAA,cACN,QAAQ,QAAQ,CAAC,KAAK,cAAc,IAAI,kBAAkB,cAAc,MAAM;AAAA,YAChF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKQ,iBAAuB;AAC7B,QAAI,KAAK,gBAAgB,SAAS,GAAG;AACnC,cAAQ,IAAI,yCAAoC;AAChD;AAAA,IACF;AAEA,YAAQ;AAAA,MACN,4CAAkC,KAAK,gBAAgB,IAAI;AAAA;AAAA,IAC7D;AAEA,eAAW,CAAC,MAAM,OAAO,KAAK,KAAK,iBAAiB;AAClD,cAAQ,IAAI,aAAM,IAAI,GAAG;AACzB,iBAAW,UAAU,SAAS;AAC5B,gBAAQ,IAAI,MAAM,MAAM,EAAE;AAAA,MAC5B;AACA,cAAQ,IAAI;AAAA,IACd;AAEA,YAAQ,IAAI,uBAAgB;AAC5B,YAAQ,IAAI,4DAA4D;AACxE,YAAQ,IAAI,wDAA0D;AACtE,YAAQ,IAAI,4CAA4C;AACxD,YAAQ,IAAI,qCAAqC;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,UAAyB;AAC7B,YAAQ,IAAI,8CAAuC;AAEnD,eAAW,CAAC,QAAQ,KAAK,KAAK,iBAAiB;AAC7C,UAAI,UAAU,GAAG,aAAa,UAAU,OAAO;AAC/C,UAAI,WAAW;AAGf,WACG,SAAS,SAAS,KAAK,KAAK,SAAS,SAAS,KAAK,MACpD,CAAC,QAAQ,SAAS,eAAe,KACjC,CAAC,QAAQ,SAAS,mBAAmB,GACrC;AAEA,YAAI,QAAQ,WAAW,KAAK,GAAG;AAC7B,gBAAM,eAAe,QAAQ,QAAQ,IAAI;AACzC,oBACE,QAAQ,MAAM,GAAG,eAAe,CAAC,IACjC,gCACA,QAAQ,MAAM,eAAe,CAAC;AAAA,QAClC,OAAO;AACL,oBAAU,gCAAgC;AAAA,QAC5C;AACA,mBAAW;AAAA,MACb;AAGA,iBAAW,WAAW,iBAAiB;AACrC,cAAM,QAAQ,IAAI;AAAA,UAChB,YAAY,QAAQ,QAAQ,MAAM;AAAA,UAClC;AAAA,QACF;AACA,cAAM,cAAc,eAAe,QAAQ,MAAM;AAEjD,YAAI,MAAM,KAAK,OAAO,GAAG;AACvB,oBAAU,QAAQ,QAAQ,OAAO,WAAW;AAC5C,qBAAW;AAGX,gBAAM,aAAa,IAAI;AAAA,YACrB,2CAA2C,QAAQ,MAAM;AAAA,UAC3D;AACA,gBAAM,QAAQ,QAAQ,MAAM,UAAU;AACtC,cAAI,OAAO;AACT,kBAAM,UAAU,MAAM,CAAC;AACvB,kBAAM,YACJ;AAAA,OAAU,OAAO;AAAA,0BACK,QAAQ,MAAM;AAAA,4BACP,QAAQ,MAAM;AAAA;AAAA;AAAA;AAI7C,kBAAM,YAAY,QAAQ,QAAQ,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,EAAE;AACvD,sBACE,QAAQ,MAAM,GAAG,SAAS,IAC1B,YACA,QAAQ,MAAM,SAAS;AAAA,UAC3B;AAAA,QACF;AAAA,MACF;AAEA,UAAI,UAAU;AACZ,WAAG,cAAc,UAAU,OAAO;AAClC,gBAAQ,IAAI,gBAAW,QAAQ,EAAE;AAAA,MACnC;AAAA,IACF;AAEA,YAAQ,IAAI,yBAAkB;AAC9B,YAAQ,IAAI,uBAAuB;AACnC,YAAQ,IAAI,mCAAmC;AAC/C,YAAQ,IAAI,qCAAqC;AACjD,YAAQ,IAAI,uBAAuB;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBAAiC;AACrC,YAAQ,IAAI,iDAA0C;AAEtD,QAAI;AACF,iBAAW,WAAW,iBAAiB;AAErC,YAAI;AACJ,YAAI;AACF,gBAAM,YAAY;AAAA,YAChB;AAAA,YACA;AAAA,cACE;AAAA,cACA;AAAA,cACA;AAAA,cACA,KAAK,QAAQ,QAAQ,MAAM;AAAA,cAC3B;AAAA,YACF;AAAA,YACA;AAAA,cACE,UAAU;AAAA,cACV,OAAO;AAAA,YACT;AAAA,UACF;AAGA,mBAAS,UAAU,MAAM,IAAI,EAAE,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,EAAE,KAAK;AAAA,QAC9D,QAAQ;AAEN;AAAA,QACF;AAEA,YAAI,QAAQ;AACV,kBAAQ,IAAI,uBAAa,QAAQ,IAAI,kBAAkB;AACvD,kBAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC;AACrD,kBAAQ,IAAI,OAAO;AAAA,QACrB;AAAA,MACF;AAEA,cAAQ,IAAI,iCAA0B;AACtC,cAAQ,IAAI,2DAA2D;AACvE,cAAQ,IAAI,kDAAkD;AAC9D,cAAQ,IAAI,2DAA2D;AAAA,IACzE,QAAQ;AACN,cAAQ,IAAI,6BAA6B;AAAA,IAC3C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,wBAA8B;AAC5B,UAAM,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6BpB,UAAM,WAAW;AACjB,OAAG,cAAc,UAAU,WAAW;AACtC,OAAG,UAAU,UAAU,KAAK;AAE5B,YAAQ,IAAI,2DAAsD;AAClE,YAAQ;AAAA,MACN;AAAA,IACF;AAAA,EACF;AACF;AAIA,IAAI,YAAY,QAAQ,UAAU,QAAQ,KAAK,CAAC,CAAC,IAAI;AACnD,QAAM,UAAU,IAAI,uBAAuB;AAC3C,QAAM,UAAU,QAAQ,KAAK,CAAC;AAE9B,GAAC,YAAY;AACX,YAAQ,SAAS;AAAA,MACf,KAAK;AACH,cAAM,QAAQ,eAAe;AAC7B;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,eAAe;AAC7B,cAAM,QAAQ,QAAQ;AACtB;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,gBAAgB;AAC9B;AAAA,MACF,KAAK;AACH,gBAAQ,sBAAsB;AAC9B;AAAA,MACF;AACE,gBAAQ,IAAI,yDAAyD;AACrE,gBAAQ,IAAI,wCAAwC;AACpD,gBAAQ,IAAI,wCAAwC;AACpD,gBAAQ,IAAI,2CAA2C;AACvD,gBAAQ,IAAI,sCAAsC;AAAA,IACtD;AAAA,EACF,GAAG;AACL;",
   "names": []
 }