@su-record/vibe 2.6.35 → 2.6.41

package/dist/infra/lib/autonomy/PolicyEngine.js

@@ -0,0 +1,208 @@
+import { z } from 'zod';
+import { uuidv7 } from 'uuidv7';
+const PolicyRuleFieldEnum = z.enum(['actionType', 'target', 'riskLevel', 'agentId', 'params']);
+const PolicyRuleOperatorEnum = z.enum(['eq', 'neq', 'contains', 'matches', 'in', 'gt', 'lt']);
+const PolicyRuleSchema = z.object({
+    field: PolicyRuleFieldEnum,
+    operator: PolicyRuleOperatorEnum,
+    value: z.union([z.string(), z.array(z.string()), z.number()]),
+});
+const PolicyActionEnum = z.enum(['block', 'require_confirmation', 'allow']);
+const DEFAULT_POLICIES = [
+    {
+        name: 'deny-force-push',
+        description: 'Block git force push operations',
+        rules: [
+            { field: 'actionType', operator: 'eq', value: 'git_push' },
+            { field: 'params', operator: 'contains', value: 'force' },
+        ],
+        action: 'block',
+        priority: 100,
+    },
+    {
+        name: 'deny-sentinel-modify',
+        description: 'Block modification of sentinel code and configuration',
+        rules: [
+            { field: 'target', operator: 'matches', value: '^src[\\\\/]lib[\\\\/]autonomy[\\\\/]' },
+        ],
+        action: 'block',
+        priority: 100,
+    },
+    {
+        name: 'deny-mass-delete',
+        description: 'Block mass file deletion (5+ files)',
+        rules: [
+            { field: 'actionType', operator: 'eq', value: 'file_delete' },
+            { field: 'riskLevel', operator: 'eq', value: 'HIGH' },
+        ],
+        action: 'block',
+        priority: 90,
+    },
+    {
+        name: 'require-approval-high-risk',
+        description: 'Require owner approval for high-risk actions',
+        rules: [{ field: 'riskLevel', operator: 'eq', value: 'HIGH' }],
+        action: 'require_confirmation',
+        priority: 50,
+    },
+    {
+        name: 'audit-all-actions',
+        description: 'Log all actions to audit store',
+        rules: [],
+        action: 'allow',
+        priority: 0,
+    },
+];
+export class PolicyEngine {
+    db;
+    allPoliciesStmt;
+    constructor(storage) {
+        this.db = storage.getDatabase();
+        this.initTables();
+        this.seedDefaultPolicies();
+        this.allPoliciesStmt = this.db.prepare(`SELECT * FROM policies WHERE enabled = 1 ORDER BY priority DESC, createdAt ASC`);
+    }
+    initTables() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS policies (
+        id TEXT PRIMARY KEY,
+        name TEXT NOT NULL UNIQUE,
+        description TEXT,
+        rules TEXT NOT NULL,
+        action TEXT NOT NULL DEFAULT 'block'
+          CHECK(action IN ('block', 'require_confirmation', 'allow')),
+        priority INTEGER DEFAULT 0,
+        enabled INTEGER DEFAULT 1,
+        version INTEGER DEFAULT 1,
+        createdAt TEXT NOT NULL,
+        updatedAt TEXT NOT NULL
+      );
+    `);
+    }
+    seedDefaultPolicies() {
+        const insertOrIgnore = this.db.prepare(`
+      INSERT OR IGNORE INTO policies (id, name, description, rules, action, priority, enabled, version, createdAt, updatedAt)
+      VALUES (?, ?, ?, ?, ?, ?, 1, 1, ?, ?)
+    `);
+        const now = new Date().toISOString();
+        const txn = this.db.transaction(() => {
+            for (const policy of DEFAULT_POLICIES) {
+                insertOrIgnore.run(uuidv7(), policy.name, policy.description, JSON.stringify(policy.rules), policy.action, policy.priority, now, now);
+            }
+        });
+        txn();
+    }
+    evaluate(action, riskAssessment) {
+        const policies = this.allPoliciesStmt.all();
+        const matchedPolicies = [];
+        let strictestAction = 'allow';
+        for (const policy of policies) {
+            const rules = this.parseRules(policy.rules);
+            if (rules === null)
+                continue;
+            if (this.matchesAllRules(rules, action, riskAssessment.riskLevel)) {
+                matchedPolicies.push(policy.name);
+                strictestAction = this.stricterAction(strictestAction, policy.action);
+            }
+        }
+        return this.buildDecision(strictestAction, matchedPolicies);
+    }
+    addPolicy(policy) {
+        const id = uuidv7();
+        const now = new Date().toISOString();
+        for (const rule of policy.rules) {
+            PolicyRuleSchema.parse(rule);
+        }
+        this.db
+            .prepare(`INSERT INTO policies (id, name, description, rules, action, priority, enabled, version, createdAt, updatedAt)
+         VALUES (?, ?, ?, ?, ?, ?, 1, 1, ?, ?)`)
+            .run(id, policy.name, policy.description ?? null, JSON.stringify(policy.rules), policy.action, policy.priority ?? 0, now, now);
+        return id;
+    }
+    getPolicyCount() {
+        return this.db.prepare('SELECT COUNT(*) as count FROM policies WHERE enabled = 1').get().count;
+    }
+    parseRules(rulesJson) {
+        try {
+            const parsed = JSON.parse(rulesJson);
+            if (!Array.isArray(parsed))
+                return null;
+            return parsed;
+        }
+        catch {
+            return null;
+        }
+    }
+    matchesAllRules(rules, action, riskLevel) {
+        if (rules.length === 0)
+            return true;
+        return rules.every((rule) => this.evaluateRule(rule, action, riskLevel));
+    }
+    evaluateRule(rule, action, riskLevel) {
+        const fieldValue = this.getFieldValue(rule.field, action, riskLevel);
+        return this.applyOperator(rule.operator, fieldValue, rule.value);
+    }
+    getFieldValue(field, action, riskLevel) {
+        switch (field) {
+            case 'actionType': return action.actionType;
+            case 'target': return action.target;
+            case 'riskLevel': return riskLevel;
+            case 'agentId': return action.agentId;
+            case 'params': return JSON.stringify(action.params ?? {});
+            default: return undefined;
+        }
+    }
+    applyOperator(operator, fieldValue, ruleValue) {
+        if (fieldValue === undefined)
+            return false;
+        const strField = String(fieldValue);
+        switch (operator) {
+            case 'eq': return strField === String(ruleValue);
+            case 'neq': return strField !== String(ruleValue);
+            case 'contains': return strField.includes(String(ruleValue));
+            case 'matches':
+                try {
+                    return new RegExp(String(ruleValue)).test(strField);
+                }
+                catch {
+                    return false;
+                }
+            case 'in': return Array.isArray(ruleValue) && ruleValue.includes(strField);
+            case 'gt': return Number(fieldValue) > Number(ruleValue);
+            case 'lt': return Number(fieldValue) < Number(ruleValue);
+            default: return false;
+        }
+    }
+    stricterAction(current, candidate) {
+        const priority = {
+            block: 2,
+            require_confirmation: 1,
+            allow: 0,
+        };
+        return priority[candidate] > priority[current] ? candidate : current;
+    }
+    buildDecision(action, matchedPolicies) {
+        if (action === 'block') {
+            return {
+                allowed: false,
+                reason: `Blocked by policies: ${matchedPolicies.join(', ')}`,
+                requiredAction: 'block',
+                matchedPolicies,
+            };
+        }
+        if (action === 'require_confirmation') {
+            return {
+                allowed: false,
+                reason: `Owner confirmation required by policies: ${matchedPolicies.join(', ')}`,
+                requiredAction: 'confirm',
+                matchedPolicies,
+            };
+        }
+        return {
+            allowed: true,
+            reason: matchedPolicies.length > 0 ? `Allowed by policies: ${matchedPolicies.join(', ')}` : 'No matching policies',
+            matchedPolicies,
+        };
+    }
+}
+//# sourceMappingURL=PolicyEngine.js.map

package/dist/infra/lib/autonomy/PolicyEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyEngine.js","sourceRoot":"","sources":["../../../../src/infra/lib/autonomy/PolicyEngine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIhC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/F,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE9F,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,mBAAmB;IAC1B,QAAQ,EAAE,sBAAsB;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;CAC9D,CAAC,CAAC;AAIH,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAC,CAAC;AA2B5E,MAAM,gBAAgB,GAMjB;IACH;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE;YACL,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE;YAC1D,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE;SAC1D;QACD,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,GAAG;KACd;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,uDAAuD;QACpE,KAAK,EAAE;YACL,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,sCAAsC,EAAE;SACxF;QACD,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,GAAG;KACd;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,qCAAqC;QAClD,KAAK,EAAE;YACL,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE;YAC7D,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;SACtD;QACD,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,8CAA8C;QAC3D,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC9D,MAAM,EAAE,sBAAsB;QAC9B,QAAQ,EAAE,EAAE;KACb;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,gCAAgC;QAC7C,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,CAAC;KACZ;CACF,CAAC;AAEF,MAAM,OAAO,YAAY;IACN,EAAE,CAAoB;IACtB,eAAe,CAAqB;IAErD,YAAY,OAAwB;QAClC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACpC,gFAAgF,CACjF,CAAC;IACJ,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;KAcZ,CAAC,CAAC;IACL,CAAC;IAEO,mBAAmB;QACzB,MAAM,cAAc,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGtC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACnC,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;gBACtC,cAAc,CAAC,GAAG,CAChB,MAAM,EAAE,EACR,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,WAAW,EAClB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5B,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,EACf,GAAG,EACH,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,EAAE,CAAC;IACR,CAAC;IAED,QAAQ,CACN,MAAwB,EACxB,cAA8B;QAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAiB,CAAC;QAC3D,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,IAAI,eAAe,GAAiB,OAAO,CAAC;QAE5C,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,KAAK,KAAK,IAAI;gBAAE,SAAS;YAC7B,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAClC,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,MAAM,CAAC,MAAsB,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAC9D,CAAC;IAED,SAAS,CAAC,MAMT;QACC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;+CACuC,CACxC;aACA,GAAG,CACF,EAAE,EACF,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,WAAW,IAAI,IAAI,EAC1B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5B,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,IAAI,CAAC,EACpB,GAAG,EACH,GAAG,CACJ,CAAC;QACJ,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,cAAc;QACZ,OACE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,EAGhF,CAAC,KAAK,CAAC;IACV,CAAC;IAEO,UAAU,CAAC,SAAiB;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAY,CAAC;YAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxC,OAAO,MAAsB,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,eAAe,CACrB,KAAmB,EACnB,MAAwB,EACxB,SAAoB;QAEpB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3E,CAAC;IAEO,YAAY,CAClB,IAAgB,EAChB,MAAwB,EACxB,SAAoB;QAEpB,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAEO,aAAa,CACnB,KAAa,EACb,MAAwB,EACxB,SAAoB;QAEpB,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,YAAY,CAAC,CAAC,OAAO,MAAM,CAAC,UAAU,CAAC;YAC5C,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC;YACpC,KAAK,WAAW,CAAC,CAAC,OAAO,SAAS,CAAC;YACnC,KAAK,SAAS,CAAC,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC;YACtC,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC1D,OAAO,CAAC,CAAC,OAAO,SAAS,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,aAAa,CACnB,QAAgB,EAChB,UAAuC,EACvC,SAAqC;QAErC,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAEpC,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,IAAI,CAAC,CAAC,OAAO,QAAQ,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;YACjD,KAAK,KAAK,CAAC,CAAC,OAAO,QAAQ,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;YAClD,KAAK,UAAU,CAAC,CAAC,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7D,KAAK,SAAS;gBACZ,IAAI,CAAC;oBAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,KAAK,CAAC;gBAAC,CAAC;YACtF,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3E,KAAK,IAAI,CAAC,CAAC,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YACzD,KAAK,IAAI,CAAC,CAAC,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,OAAqB,EAAE,SAAuB;QACnE,MAAM,QAAQ,GAAiC;YAC7C,KAAK,EAAE,CAAC;YACR,oBAAoB,EAAE,CAAC;YACvB,KAAK,EAAE,CAAC;SACT,CAAC;QACF,OAAO,QAAQ,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,CAAC;IAEO,aAAa,CAAC,MAAoB,EAAE,eAAyB;QACnE,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,wBAAwB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC5D,cAAc,EAAE,OAAO;gBACvB,eAAe;aAChB,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;YACtC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,4CAA4C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAChF,cAAc,EAAE,SAAS;gBACzB,eAAe;aAChB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,wBAAwB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB;YAClH,eAAe;SAChB,CAAC;IACJ,CAAC;CACF"}

package/dist/infra/lib/autonomy/ProactiveAnalyzer.d.ts

@@ -0,0 +1,61 @@
+import type { EventBus } from './EventBus.js';
+import type { SuggestionStore, CreateSuggestionInput } from './SuggestionStore.js';
+export type AnalysisTrigger = 'file_changed' | 'session_start' | 'build_complete' | 'scheduled' | 'manual';
+export interface AnalysisContext {
+    trigger: AnalysisTrigger;
+    filePath?: string;
+    fileContent?: string;
+    projectRoot?: string;
+}
+export interface Suggestion {
+    type: CreateSuggestionInput['type'];
+    title: string;
+    description: string;
+    priority: number;
+    evidence: Record<string, unknown>;
+    suggestedAction?: string;
+    riskLevel?: string;
+}
+export interface AnalysisModule {
+    readonly name: string;
+    analyze(context: AnalysisContext): Promise<Suggestion[]>;
+    shouldRun(trigger: AnalysisTrigger): boolean;
+}
+export declare class SecurityScanner implements AnalysisModule {
+    readonly name = "SecurityScanner";
+    shouldRun(trigger: AnalysisTrigger): boolean;
+    analyze(context: AnalysisContext): Promise<Suggestion[]>;
+}
+export declare class PerformanceDetector implements AnalysisModule {
+    readonly name = "PerformanceDetector";
+    shouldRun(trigger: AnalysisTrigger): boolean;
+    analyze(context: AnalysisContext): Promise<Suggestion[]>;
+}
+export declare class QualityChecker implements AnalysisModule {
+    readonly name = "QualityChecker";
+    shouldRun(trigger: AnalysisTrigger): boolean;
+    analyze(context: AnalysisContext): Promise<Suggestion[]>;
+}
+export declare class DependencyMonitor implements AnalysisModule {
+    readonly name = "DependencyMonitor";
+    shouldRun(trigger: AnalysisTrigger): boolean;
+    analyze(context: AnalysisContext): Promise<Suggestion[]>;
+}
+export declare class ProactiveAnalyzer {
+    private readonly modules;
+    private readonly store;
+    private readonly eventBus;
+    private readonly debounceTimers;
+    constructor(deps: {
+        store: SuggestionStore;
+        eventBus: EventBus;
+        modules?: AnalysisModule[];
+    });
+    analyze(context: AnalysisContext): Promise<Suggestion[]>;
+    getModules(): ReadonlyArray<AnalysisModule>;
+    clearDebounce(): void;
+    private analyzeDebounced;
+    private runAnalysis;
+    private emitSuggestionCreated;
+}
+//# sourceMappingURL=ProactiveAnalyzer.d.ts.map

package/dist/infra/lib/autonomy/ProactiveAnalyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProactiveAnalyzer.d.ts","sourceRoot":"","sources":["../../../../src/infra/lib/autonomy/ProactiveAnalyzer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAInF,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,eAAe,GAAG,gBAAgB,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE3G,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,eAAe,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACzD,SAAS,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC;CAC9C;AAQD,qBAAa,eAAgB,YAAW,cAAc;IACpD,QAAQ,CAAC,IAAI,qBAAqB;IAElC,SAAS,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO;IAItC,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;CA6C/D;AAID,qBAAa,mBAAoB,YAAW,cAAc;IACxD,QAAQ,CAAC,IAAI,yBAAyB;IAEtC,SAAS,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO;IAItC,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;CAkB/D;AAOD,qBAAa,cAAe,YAAW,cAAc;IACnD,QAAQ,CAAC,IAAI,oBAAoB;IAEjC,SAAS,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO;IAItC,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;CAoC/D;AAID,qBAAa,iBAAkB,YAAW,cAAc;IACtD,QAAQ,CAAC,IAAI,uBAAuB;IAEpC,SAAS,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO;IAItC,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;CA8B/D;AAID,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoD;gBAEvE,IAAI,EAAE;QAChB,KAAK,EAAE,eAAe,CAAC;QACvB,QAAQ,EAAE,QAAQ,CAAC;QACnB,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;KAC5B;IAWK,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAO9D,UAAU,IAAI,aAAa,CAAC,cAAc,CAAC;IAI3C,aAAa,IAAI,IAAI;IAOrB,OAAO,CAAC,gBAAgB;YAiBV,WAAW;IA0BzB,OAAO,CAAC,qBAAqB;CAW9B"}

package/dist/infra/lib/autonomy/ProactiveAnalyzer.js

@@ -0,0 +1,236 @@
+const DEBOUNCE_MS = 500;
+// ── SecurityScanner ────────────────────────────
+const HARDCODED_SECRET_RE = /\b(api[_-]?key|secret|password|token)\s*[:=]\s*["'][^"']{8,}["']/gi;
+const DYNAMIC_SQL_RE = /\b(query|exec|execute|prepare)\s*\(\s*[`'"].*\$\{/gi;
+const XSS_PATTERNS_RE = /\b(innerHTML|dangerouslySetInnerHTML)\s*[=:]/gi;
+export class SecurityScanner {
+    name = 'SecurityScanner';
+    shouldRun(trigger) {
+        return trigger === 'file_changed' || trigger === 'manual';
+    }
+    async analyze(context) {
+        if (!context.fileContent)
+            return [];
+        const suggestions = [];
+        if (HARDCODED_SECRET_RE.test(context.fileContent)) {
+            HARDCODED_SECRET_RE.lastIndex = 0;
+            suggestions.push({
+                type: 'security',
+                title: `Hardcoded secret detected in ${context.filePath ?? 'unknown'}`,
+                description: 'Hardcoded secrets should be moved to environment variables or secret management.',
+                priority: 1,
+                evidence: { filePath: context.filePath, pattern: 'hardcoded_secret' },
+                suggestedAction: 'Move secrets to .env file or secret manager',
+                riskLevel: 'HIGH',
+            });
+        }
+        if (DYNAMIC_SQL_RE.test(context.fileContent)) {
+            DYNAMIC_SQL_RE.lastIndex = 0;
+            suggestions.push({
+                type: 'security',
+                title: `Dynamic SQL construction in ${context.filePath ?? 'unknown'}`,
+                description: 'Dynamic SQL construction is vulnerable to SQL injection. Use parameterized queries.',
+                priority: 1,
+                evidence: { filePath: context.filePath, pattern: 'dynamic_sql' },
+                suggestedAction: 'Use parameterized queries instead',
+                riskLevel: 'HIGH',
+            });
+        }
+        if (XSS_PATTERNS_RE.test(context.fileContent)) {
+            XSS_PATTERNS_RE.lastIndex = 0;
+            suggestions.push({
+                type: 'security',
+                title: `XSS vulnerability pattern in ${context.filePath ?? 'unknown'}`,
+                description: 'Using innerHTML or dangerouslySetInnerHTML can lead to XSS vulnerabilities.',
+                priority: 2,
+                evidence: { filePath: context.filePath, pattern: 'xss' },
+                suggestedAction: 'Use safe rendering methods and sanitize user input',
+                riskLevel: 'MEDIUM',
+            });
+        }
+        return suggestions;
+    }
+}
+// ── PerformanceDetector ────────────────────────
+export class PerformanceDetector {
+    name = 'PerformanceDetector';
+    shouldRun(trigger) {
+        return trigger === 'session_start' || trigger === 'manual';
+    }
+    async analyze(context) {
+        if (!context.fileContent)
+            return [];
+        const suggestions = [];
+        // Detect N+1 query pattern (loop + query)
+        if (/for\s*\(.*\)\s*\{[^}]*\.(query|find|get|select)\s*\(/gs.test(context.fileContent)) {
+            suggestions.push({
+                type: 'performance',
+                title: `Potential N+1 query in ${context.filePath ?? 'unknown'}`,
+                description: 'Database query inside a loop may cause N+1 performance issues.',
+                priority: 2,
+                evidence: { filePath: context.filePath, pattern: 'n_plus_1' },
+                suggestedAction: 'Use batch queries or joins instead',
+            });
+        }
+        return suggestions;
+    }
+}
+// ── QualityChecker ──────────────────────────────
+const TODO_RE = /\/\/\s*TODO\b/g;
+const HIGH_COMPLEXITY_RE = /(?:if|else|for|while|switch|catch|&&|\|\|)/g;
+export class QualityChecker {
+    name = 'QualityChecker';
+    shouldRun(trigger) {
+        return trigger === 'file_changed' || trigger === 'build_complete' || trigger === 'manual';
+    }
+    async analyze(context) {
+        if (!context.fileContent)
+            return [];
+        const suggestions = [];
+        // Check for abandoned TODOs
+        const todoMatches = context.fileContent.match(TODO_RE);
+        if (todoMatches && todoMatches.length > 3) {
+            suggestions.push({
+                type: 'quality',
+                title: `${todoMatches.length} TODOs in ${context.filePath ?? 'unknown'}`,
+                description: `Found ${todoMatches.length} TODO comments that may need attention.`,
+                priority: 3,
+                evidence: { filePath: context.filePath, todoCount: todoMatches.length },
+                suggestedAction: 'Review and resolve TODO items',
+            });
+        }
+        // Check complexity (rough heuristic)
+        const lines = context.fileContent.split('\n');
+        const complexityMatches = context.fileContent.match(HIGH_COMPLEXITY_RE);
+        if (complexityMatches && lines.length > 0) {
+            const density = complexityMatches.length / lines.length;
+            if (density > 0.3) {
+                suggestions.push({
+                    type: 'quality',
+                    title: `High complexity in ${context.filePath ?? 'unknown'}`,
+                    description: `Complexity density ${(density * 100).toFixed(0)}% exceeds threshold.`,
+                    priority: 2,
+                    evidence: { filePath: context.filePath, complexityDensity: density },
+                    suggestedAction: 'Consider refactoring to reduce complexity',
+                });
+            }
+        }
+        return suggestions;
+    }
+}
+// ── DependencyMonitor ───────────────────────────
+export class DependencyMonitor {
+    name = 'DependencyMonitor';
+    shouldRun(trigger) {
+        return trigger === 'scheduled' || trigger === 'manual';
+    }
+    async analyze(context) {
+        if (!context.fileContent)
+            return [];
+        // Parse package.json for basic checks
+        try {
+            const pkg = JSON.parse(context.fileContent);
+            const suggestions = [];
+            const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+            // Check for wildcard versions
+            for (const [name, version] of Object.entries(allDeps)) {
+                if (version === '*' || version === 'latest') {
+                    suggestions.push({
+                        type: 'dependency',
+                        title: `Unpinned dependency: ${name}`,
+                        description: `${name} uses '${version}' version which is not pinned.`,
+                        priority: 2,
+                        evidence: { package: name, version },
+                        suggestedAction: `Pin ${name} to a specific version`,
+                    });
+                }
+            }
+            return suggestions;
+        }
+        catch {
+            return [];
+        }
+    }
+}
+// ── ProactiveAnalyzer (Orchestrator) ────────────
+export class ProactiveAnalyzer {
+    modules;
+    store;
+    eventBus;
+    debounceTimers = new Map();
+    constructor(deps) {
+        this.store = deps.store;
+        this.eventBus = deps.eventBus;
+        this.modules = deps.modules ?? [
+            new SecurityScanner(),
+            new PerformanceDetector(),
+            new QualityChecker(),
+            new DependencyMonitor(),
+        ];
+    }
+    async analyze(context) {
+        if (context.filePath && context.trigger === 'file_changed') {
+            return this.analyzeDebounced(context);
+        }
+        return this.runAnalysis(context);
+    }
+    getModules() {
+        return this.modules;
+    }
+    clearDebounce() {
+        for (const timer of this.debounceTimers.values()) {
+            clearTimeout(timer);
+        }
+        this.debounceTimers.clear();
+    }
+    analyzeDebounced(context) {
+        const key = context.filePath;
+        const existing = this.debounceTimers.get(key);
+        if (existing)
+            clearTimeout(existing);
+        return new Promise((resolve) => {
+            this.debounceTimers.set(key, setTimeout(async () => {
+                this.debounceTimers.delete(key);
+                const results = await this.runAnalysis(context);
+                resolve(results);
+            }, DEBOUNCE_MS));
+        });
+    }
+    async runAnalysis(context) {
+        const allSuggestions = [];
+        for (const mod of this.modules) {
+            if (!mod.shouldRun(context.trigger))
+                continue;
+            try {
+                const suggestions = await mod.analyze(context);
+                for (const s of suggestions) {
+                    this.store.create({
+                        ...s,
+                        sourceModule: mod.name,
+                    });
+                    allSuggestions.push(s);
+                }
+            }
+            catch {
+                // Module failure should not break analysis
+            }
+        }
+        if (allSuggestions.length > 0) {
+            this.emitSuggestionCreated(allSuggestions.length, context.trigger);
+        }
+        return allSuggestions;
+    }
+    emitSuggestionCreated(count, trigger) {
+        try {
+            this.eventBus.emit('suggestion_created', {
+                eventType: 'suggestion_created',
+                payload: { count, trigger },
+                sourceAgentId: 'proactive-analyzer',
+            });
+        }
+        catch {
+            // Non-critical
+        }
+    }
+}
+//# sourceMappingURL=ProactiveAnalyzer.js.map

package/dist/infra/lib/autonomy/ProactiveAnalyzer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProactiveAnalyzer.js","sourceRoot":"","sources":["../../../../src/infra/lib/autonomy/ProactiveAnalyzer.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,GAAG,GAAG,CAAC;AA2BxB,kDAAkD;AAElD,MAAM,mBAAmB,GAAG,oEAAoE,CAAC;AACjG,MAAM,cAAc,GAAG,qDAAqD,CAAC;AAC7E,MAAM,eAAe,GAAG,gDAAgD,CAAC;AAEzE,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,iBAAiB,CAAC;IAElC,SAAS,CAAC,OAAwB;QAChC,OAAO,OAAO,KAAK,cAAc,IAAI,OAAO,KAAK,QAAQ,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,OAAO,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,mBAAmB,CAAC,SAAS,GAAG,CAAC,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,gCAAgC,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE;gBACtE,WAAW,EAAE,kFAAkF;gBAC/F,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE;gBACrE,eAAe,EAAE,6CAA6C;gBAC9D,SAAS,EAAE,MAAM;aAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC;YAC7B,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,+BAA+B,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE;gBACrE,WAAW,EAAE,qFAAqF;gBAClG,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE;gBAChE,eAAe,EAAE,mCAAmC;gBACpD,SAAS,EAAE,MAAM;aAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,eAAe,CAAC,SAAS,GAAG,CAAC,CAAC;YAC9B,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,gCAAgC,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE;gBACtE,WAAW,EAAE,6EAA6E;gBAC1F,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;gBACxD,eAAe,EAAE,oDAAoD;gBACrE,SAAS,EAAE,QAAQ;aACpB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAED,kDAAkD;AAElD,MAAM,OAAO,mBAAmB;IACrB,IAAI,GAAG,qBAAqB,CAAC;IAEtC,SAAS,CAAC,OAAwB;QAChC,OAAO,OAAO,KAAK,eAAe,IAAI,OAAO,KAAK,QAAQ,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,OAAO,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,0CAA0C;QAC1C,IAAI,wDAAwD,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACvF,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,0BAA0B,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE;gBAChE,WAAW,EAAE,gEAAgE;gBAC7E,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE;gBAC7D,eAAe,EAAE,oCAAoC;aACtD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAED,mDAAmD;AAEnD,MAAM,OAAO,GAAG,gBAAgB,CAAC;AACjC,MAAM,kBAAkB,GAAG,6CAA6C,CAAC;AAEzE,MAAM,OAAO,cAAc;IAChB,IAAI,GAAG,gBAAgB,CAAC;IAEjC,SAAS,CAAC,OAAwB;QAChC,OAAO,OAAO,KAAK,cAAc,IAAI,OAAO,KAAK,gBAAgB,IAAI,OAAO,KAAK,QAAQ,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,OAAO,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,4BAA4B;QAC5B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,GAAG,WAAW,CAAC,MAAM,aAAa,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE;gBACxE,WAAW,EAAE,SAAS,WAAW,CAAC,MAAM,yCAAyC;gBACjF,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE;gBACvE,eAAe,EAAE,+BAA+B;aACjD,CAAC,CAAC;QACL,CAAC;QAED,qCAAqC;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxE,IAAI,iBAAiB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YACxD,IAAI,OAAO,GAAG,GAAG,EAAE,CAAC;gBAClB,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,sBAAsB,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE;oBAC5D,WAAW,EAAE,sBAAsB,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;oBACnF,QAAQ,EAAE,CAAC;oBACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE;oBACpE,eAAe,EAAE,2CAA2C;iBAC7D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAED,mDAAmD;AAEnD,MAAM,OAAO,iBAAiB;IACnB,IAAI,GAAG,mBAAmB,CAAC;IAEpC,SAAS,CAAC,OAAwB;QAChC,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,QAAQ,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,OAAO,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QACpC,sCAAsC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAGzC,CAAC;YACF,MAAM,WAAW,GAAiB,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;YAEhE,8BAA8B;YAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtD,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC5C,WAAW,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,YAAY;wBAClB,KAAK,EAAE,wBAAwB,IAAI,EAAE;wBACrC,WAAW,EAAE,GAAG,IAAI,UAAU,OAAO,gCAAgC;wBACrE,QAAQ,EAAE,CAAC;wBACX,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;wBACpC,eAAe,EAAE,OAAO,IAAI,wBAAwB;qBACrD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED,mDAAmD;AAEnD,MAAM,OAAO,iBAAiB;IACX,OAAO,CAAmB;IAC1B,KAAK,CAAkB;IACvB,QAAQ,CAAW;IACnB,cAAc,GAAG,IAAI,GAAG,EAAyC,CAAC;IAEnF,YAAY,IAIX;QACC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI;YAC7B,IAAI,eAAe,EAAE;YACrB,IAAI,mBAAmB,EAAE;YACzB,IAAI,cAAc,EAAE;YACpB,IAAI,iBAAiB,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,aAAa;QACX,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAEO,gBAAgB,CAAC,OAAwB;QAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,QAAS,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QAErC,OAAO,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,EAAE;YAC3C,IAAI,CAAC,cAAc,CAAC,GAAG,CACrB,GAAG,EACH,UAAU,CAAC,KAAK,IAAI,EAAE;gBACpB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBAChD,OAAO,CAAC,OAAO,CAAC,CAAC;YACnB,CAAC,EAAE,WAAW,CAAC,CAChB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAwB;QAChD,MAAM,cAAc,GAAiB,EAAE,CAAC;QAExC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC9C,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC/C,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;wBAChB,GAAG,CAAC;wBACJ,YAAY,EAAE,GAAG,CAAC,IAAI;qBACvB,CAAC,CAAC;oBACH,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAEO,qBAAqB,CAAC,KAAa,EAAE,OAAwB;QACnE,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBACvC,SAAS,EAAE,oBAAoB;gBAC/B,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;gBAC3B,aAAa,EAAE,oBAAoB;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;CACF"}

package/dist/infra/lib/autonomy/RiskClassifier.d.ts

@@ -0,0 +1,35 @@
+import type { AgentActionEvent, RiskLevel } from './schemas.js';
+export interface RiskAssessment {
+    riskLevel: RiskLevel;
+    score: number;
+    factors: string[];
+    reasoning: string;
+    blocked?: boolean;
+}
+export interface ClassificationContext {
+    recentDeleteCount?: number;
+}
+export interface CustomRiskRule {
+    actionType: string;
+    targetPattern?: string;
+    riskLevel: RiskLevel;
+    condition?: string;
+}
+export declare class RiskClassifier {
+    private readonly customRules;
+    constructor(customRules?: CustomRiskRule[]);
+    classify(action: AgentActionEvent, context?: ClassificationContext): RiskAssessment;
+    private sanitizeAction;
+    private evaluateCustomRules;
+    private evaluateDefaultRules;
+    private classifyFileWrite;
+    private classifyFileDelete;
+    private classifyBashExec;
+    private classifyGitPush;
+    private classifySkillGenerate;
+    private classifyConfigModify;
+    private classifyDependencyInstall;
+    private classifyExternalApiCall;
+    private makeAssessment;
+}
+//# sourceMappingURL=RiskClassifier.d.ts.map

package/dist/infra/lib/autonomy/RiskClassifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RiskClassifier.d.ts","sourceRoot":"","sources":["../../../../src/infra/lib/autonomy/RiskClassifier.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAwBhE,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AASD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;gBAEnC,WAAW,CAAC,EAAE,cAAc,EAAE;IAW1C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,cAAc;IAOnF,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,mBAAmB;IAmB3B,OAAO,CAAC,oBAAoB;IAmB5B,OAAO,CAAC,iBAAiB;IAuBzB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,qBAAqB;IAW7B,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,yBAAyB;IAIjC,OAAO,CAAC,uBAAuB;IAY/B,OAAO,CAAC,cAAc;CAOvB"}