@su-record/vibe 3.0.0 → 3.2.0

package/dist/infra/lib/autonomy/ProactiveAnalyzer.js

@@ -1,236 +0,0 @@
-const DEBOUNCE_MS = 500;
-// ── SecurityScanner ────────────────────────────
-const HARDCODED_SECRET_RE = /\b(api[_-]?key|secret|password|token)\s*[:=]\s*["'][^"']{8,}["']/gi;
-const DYNAMIC_SQL_RE = /\b(query|exec|execute|prepare)\s*\(\s*[`'"].*\$\{/gi;
-const XSS_PATTERNS_RE = /\b(innerHTML|dangerouslySetInnerHTML)\s*[=:]/gi;
-export class SecurityScanner {
-    name = 'SecurityScanner';
-    shouldRun(trigger) {
-        return trigger === 'file_changed' || trigger === 'manual';
-    }
-    async analyze(context) {
-        if (!context.fileContent)
-            return [];
-        const suggestions = [];
-        if (HARDCODED_SECRET_RE.test(context.fileContent)) {
-            HARDCODED_SECRET_RE.lastIndex = 0;
-            suggestions.push({
-                type: 'security',
-                title: `Hardcoded secret detected in ${context.filePath ?? 'unknown'}`,
-                description: 'Hardcoded secrets should be moved to environment variables or secret management.',
-                priority: 1,
-                evidence: { filePath: context.filePath, pattern: 'hardcoded_secret' },
-                suggestedAction: 'Move secrets to .env file or secret manager',
-                riskLevel: 'HIGH',
-            });
-        }
-        if (DYNAMIC_SQL_RE.test(context.fileContent)) {
-            DYNAMIC_SQL_RE.lastIndex = 0;
-            suggestions.push({
-                type: 'security',
-                title: `Dynamic SQL construction in ${context.filePath ?? 'unknown'}`,
-                description: 'Dynamic SQL construction is vulnerable to SQL injection. Use parameterized queries.',
-                priority: 1,
-                evidence: { filePath: context.filePath, pattern: 'dynamic_sql' },
-                suggestedAction: 'Use parameterized queries instead',
-                riskLevel: 'HIGH',
-            });
-        }
-        if (XSS_PATTERNS_RE.test(context.fileContent)) {
-            XSS_PATTERNS_RE.lastIndex = 0;
-            suggestions.push({
-                type: 'security',
-                title: `XSS vulnerability pattern in ${context.filePath ?? 'unknown'}`,
-                description: 'Using innerHTML or dangerouslySetInnerHTML can lead to XSS vulnerabilities.',
-                priority: 2,
-                evidence: { filePath: context.filePath, pattern: 'xss' },
-                suggestedAction: 'Use safe rendering methods and sanitize user input',
-                riskLevel: 'MEDIUM',
-            });
-        }
-        return suggestions;
-    }
-}
-// ── PerformanceDetector ────────────────────────
-export class PerformanceDetector {
-    name = 'PerformanceDetector';
-    shouldRun(trigger) {
-        return trigger === 'session_start' || trigger === 'manual';
-    }
-    async analyze(context) {
-        if (!context.fileContent)
-            return [];
-        const suggestions = [];
-        // Detect N+1 query pattern (loop + query)
-        if (/for\s*\(.*\)\s*\{[^}]*\.(query|find|get|select)\s*\(/gs.test(context.fileContent)) {
-            suggestions.push({
-                type: 'performance',
-                title: `Potential N+1 query in ${context.filePath ?? 'unknown'}`,
-                description: 'Database query inside a loop may cause N+1 performance issues.',
-                priority: 2,
-                evidence: { filePath: context.filePath, pattern: 'n_plus_1' },
-                suggestedAction: 'Use batch queries or joins instead',
-            });
-        }
-        return suggestions;
-    }
-}
-// ── QualityChecker ──────────────────────────────
-const TODO_RE = /\/\/\s*TODO\b/g;
-const HIGH_COMPLEXITY_RE = /(?:if|else|for|while|switch|catch|&&|\|\|)/g;
-export class QualityChecker {
-    name = 'QualityChecker';
-    shouldRun(trigger) {
-        return trigger === 'file_changed' || trigger === 'build_complete' || trigger === 'manual';
-    }
-    async analyze(context) {
-        if (!context.fileContent)
-            return [];
-        const suggestions = [];
-        // Check for abandoned TODOs
-        const todoMatches = context.fileContent.match(TODO_RE);
-        if (todoMatches && todoMatches.length > 3) {
-            suggestions.push({
-                type: 'quality',
-                title: `${todoMatches.length} TODOs in ${context.filePath ?? 'unknown'}`,
-                description: `Found ${todoMatches.length} TODO comments that may need attention.`,
-                priority: 3,
-                evidence: { filePath: context.filePath, todoCount: todoMatches.length },
-                suggestedAction: 'Review and resolve TODO items',
-            });
-        }
-        // Check complexity (rough heuristic)
-        const lines = context.fileContent.split('\n');
-        const complexityMatches = context.fileContent.match(HIGH_COMPLEXITY_RE);
-        if (complexityMatches && lines.length > 0) {
-            const density = complexityMatches.length / lines.length;
-            if (density > 0.3) {
-                suggestions.push({
-                    type: 'quality',
-                    title: `High complexity in ${context.filePath ?? 'unknown'}`,
-                    description: `Complexity density ${(density * 100).toFixed(0)}% exceeds threshold.`,
-                    priority: 2,
-                    evidence: { filePath: context.filePath, complexityDensity: density },
-                    suggestedAction: 'Consider refactoring to reduce complexity',
-                });
-            }
-        }
-        return suggestions;
-    }
-}
-// ── DependencyMonitor ───────────────────────────
-export class DependencyMonitor {
-    name = 'DependencyMonitor';
-    shouldRun(trigger) {
-        return trigger === 'scheduled' || trigger === 'manual';
-    }
-    async analyze(context) {
-        if (!context.fileContent)
-            return [];
-        // Parse package.json for basic checks
-        try {
-            const pkg = JSON.parse(context.fileContent);
-            const suggestions = [];
-            const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
-            // Check for wildcard versions
-            for (const [name, version] of Object.entries(allDeps)) {
-                if (version === '*' || version === 'latest') {
-                    suggestions.push({
-                        type: 'dependency',
-                        title: `Unpinned dependency: ${name}`,
-                        description: `${name} uses '${version}' version which is not pinned.`,
-                        priority: 2,
-                        evidence: { package: name, version },
-                        suggestedAction: `Pin ${name} to a specific version`,
-                    });
-                }
-            }
-            return suggestions;
-        }
-        catch {
-            return [];
-        }
-    }
-}
-// ── ProactiveAnalyzer (Orchestrator) ────────────
-export class ProactiveAnalyzer {
-    modules;
-    store;
-    eventBus;
-    debounceTimers = new Map();
-    constructor(deps) {
-        this.store = deps.store;
-        this.eventBus = deps.eventBus;
-        this.modules = deps.modules ?? [
-            new SecurityScanner(),
-            new PerformanceDetector(),
-            new QualityChecker(),
-            new DependencyMonitor(),
-        ];
-    }
-    async analyze(context) {
-        if (context.filePath && context.trigger === 'file_changed') {
-            return this.analyzeDebounced(context);
-        }
-        return this.runAnalysis(context);
-    }
-    getModules() {
-        return this.modules;
-    }
-    clearDebounce() {
-        for (const timer of this.debounceTimers.values()) {
-            clearTimeout(timer);
-        }
-        this.debounceTimers.clear();
-    }
-    analyzeDebounced(context) {
-        const key = context.filePath;
-        const existing = this.debounceTimers.get(key);
-        if (existing)
-            clearTimeout(existing);
-        return new Promise((resolve) => {
-            this.debounceTimers.set(key, setTimeout(async () => {
-                this.debounceTimers.delete(key);
-                const results = await this.runAnalysis(context);
-                resolve(results);
-            }, DEBOUNCE_MS));
-        });
-    }
-    async runAnalysis(context) {
-        const allSuggestions = [];
-        for (const mod of this.modules) {
-            if (!mod.shouldRun(context.trigger))
-                continue;
-            try {
-                const suggestions = await mod.analyze(context);
-                for (const s of suggestions) {
-                    this.store.create({
-                        ...s,
-                        sourceModule: mod.name,
-                    });
-                    allSuggestions.push(s);
-                }
-            }
-            catch {
-                // Module failure should not break analysis
-            }
-        }
-        if (allSuggestions.length > 0) {
-            this.emitSuggestionCreated(allSuggestions.length, context.trigger);
-        }
-        return allSuggestions;
-    }
-    emitSuggestionCreated(count, trigger) {
-        try {
-            this.eventBus.emit('suggestion_created', {
-                eventType: 'suggestion_created',
-                payload: { count, trigger },
-                sourceAgentId: 'proactive-analyzer',
-            });
-        }
-        catch {
-            // Non-critical
-        }
-    }
-}
-//# sourceMappingURL=ProactiveAnalyzer.js.map

package/dist/infra/lib/autonomy/ProactiveAnalyzer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProactiveAnalyzer.js","sourceRoot":"","sources":["../../../../src/infra/lib/autonomy/ProactiveAnalyzer.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,GAAG,GAAG,CAAC;AA2BxB,kDAAkD;AAElD,MAAM,mBAAmB,GAAG,oEAAoE,CAAC;AACjG,MAAM,cAAc,GAAG,qDAAqD,CAAC;AAC7E,MAAM,eAAe,GAAG,gDAAgD,CAAC;AAEzE,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,iBAAiB,CAAC;IAElC,SAAS,CAAC,OAAwB;QAChC,OAAO,OAAO,KAAK,cAAc,IAAI,OAAO,KAAK,QAAQ,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,OAAO,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,mBAAmB,CAAC,SAAS,GAAG,CAAC,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,gCAAgC,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE;gBACtE,WAAW,EAAE,kFAAkF;gBAC/F,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE;gBACrE,eAAe,EAAE,6CAA6C;gBAC9D,SAAS,EAAE,MAAM;aAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC;YAC7B,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,+BAA+B,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE;gBACrE,WAAW,EAAE,qFAAqF;gBAClG,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE;gBAChE,eAAe,EAAE,mCAAmC;gBACpD,SAAS,EAAE,MAAM;aAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,eAAe,CAAC,SAAS,GAAG,CAAC,CAAC;YAC9B,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,gCAAgC,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE;gBACtE,WAAW,EAAE,6EAA6E;gBAC1F,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;gBACxD,eAAe,EAAE,oDAAoD;gBACrE,SAAS,EAAE,QAAQ;aACpB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAED,kDAAkD;AAElD,MAAM,OAAO,mBAAmB;IACrB,IAAI,GAAG,qBAAqB,CAAC;IAEtC,SAAS,CAAC,OAAwB;QAChC,OAAO,OAAO,KAAK,eAAe,IAAI,OAAO,KAAK,QAAQ,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,OAAO,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,0CAA0C;QAC1C,IAAI,wDAAwD,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACvF,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,0BAA0B,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE;gBAChE,WAAW,EAAE,gEAAgE;gBAC7E,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE;gBAC7D,eAAe,EAAE,oCAAoC;aACtD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAED,mDAAmD;AAEnD,MAAM,OAAO,GAAG,gBAAgB,CAAC;AACjC,MAAM,kBAAkB,GAAG,6CAA6C,CAAC;AAEzE,MAAM,OAAO,cAAc;IAChB,IAAI,GAAG,gBAAgB,CAAC;IAEjC,SAAS,CAAC,OAAwB;QAChC,OAAO,OAAO,KAAK,cAAc,IAAI,OAAO,KAAK,gBAAgB,IAAI,OAAO,KAAK,QAAQ,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,OAAO,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,4BAA4B;QAC5B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,GAAG,WAAW,CAAC,MAAM,aAAa,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE;gBACxE,WAAW,EAAE,SAAS,WAAW,CAAC,MAAM,yCAAyC;gBACjF,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE;gBACvE,eAAe,EAAE,+BAA+B;aACjD,CAAC,CAAC;QACL,CAAC;QAED,qCAAqC;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxE,IAAI,iBAAiB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YACxD,IAAI,OAAO,GAAG,GAAG,EAAE,CAAC;gBAClB,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,sBAAsB,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE;oBAC5D,WAAW,EAAE,sBAAsB,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;oBACnF,QAAQ,EAAE,CAAC;oBACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE;oBACpE,eAAe,EAAE,2CAA2C;iBAC7D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAED,mDAAmD;AAEnD,MAAM,OAAO,iBAAiB;IACnB,IAAI,GAAG,mBAAmB,CAAC;IAEpC,SAAS,CAAC,OAAwB;QAChC,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,QAAQ,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,CAAC,OAAO,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QACpC,sCAAsC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAGzC,CAAC;YACF,MAAM,WAAW,GAAiB,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;YAEhE,8BAA8B;YAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtD,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC5C,WAAW,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,YAAY;wBAClB,KAAK,EAAE,wBAAwB,IAAI,EAAE;wBACrC,WAAW,EAAE,GAAG,IAAI,UAAU,OAAO,gCAAgC;wBACrE,QAAQ,EAAE,CAAC;wBACX,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;wBACpC,eAAe,EAAE,OAAO,IAAI,wBAAwB;qBACrD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED,mDAAmD;AAEnD,MAAM,OAAO,iBAAiB;IACX,OAAO,CAAmB;IAC1B,KAAK,CAAkB;IACvB,QAAQ,CAAW;IACnB,cAAc,GAAG,IAAI,GAAG,EAAyC,CAAC;IAEnF,YAAY,IAIX;QACC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI;YAC7B,IAAI,eAAe,EAAE;YACrB,IAAI,mBAAmB,EAAE;YACzB,IAAI,cAAc,EAAE;YACpB,IAAI,iBAAiB,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,aAAa;QACX,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;YACjD,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAEO,gBAAgB,CAAC,OAAwB;QAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,QAAS,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QAErC,OAAO,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,EAAE;YAC3C,IAAI,CAAC,cAAc,CAAC,GAAG,CACrB,GAAG,EACH,UAAU,CAAC,KAAK,IAAI,EAAE;gBACpB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBAChD,OAAO,CAAC,OAAO,CAAC,CAAC;YACnB,CAAC,EAAE,WAAW,CAAC,CAChB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAwB;QAChD,MAAM,cAAc,GAAiB,EAAE,CAAC;QAExC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC9C,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC/C,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;wBAChB,GAAG,CAAC;wBACJ,YAAY,EAAE,GAAG,CAAC,IAAI;qBACvB,CAAC,CAAC;oBACH,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAEO,qBAAqB,CAAC,KAAa,EAAE,OAAwB;QACnE,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBACvC,SAAS,EAAE,oBAAoB;gBAC/B,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;gBAC3B,aAAa,EAAE,oBAAoB;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;CACF"}

package/dist/infra/lib/autonomy/RiskClassifier.d.ts

@@ -1,35 +0,0 @@
-import type { AgentActionEvent, RiskLevel } from './schemas.js';
-export interface RiskAssessment {
-    riskLevel: RiskLevel;
-    score: number;
-    factors: string[];
-    reasoning: string;
-    blocked?: boolean;
-}
-export interface ClassificationContext {
-    recentDeleteCount?: number;
-}
-export interface CustomRiskRule {
-    actionType: string;
-    targetPattern?: string;
-    riskLevel: RiskLevel;
-    condition?: string;
-}
-export declare class RiskClassifier {
-    private readonly customRules;
-    constructor(customRules?: CustomRiskRule[]);
-    classify(action: AgentActionEvent, context?: ClassificationContext): RiskAssessment;
-    private sanitizeAction;
-    private evaluateCustomRules;
-    private evaluateDefaultRules;
-    private classifyFileWrite;
-    private classifyFileDelete;
-    private classifyBashExec;
-    private classifyGitPush;
-    private classifySkillGenerate;
-    private classifyConfigModify;
-    private classifyDependencyInstall;
-    private classifyExternalApiCall;
-    private makeAssessment;
-}
-//# sourceMappingURL=RiskClassifier.d.ts.map

package/dist/infra/lib/autonomy/RiskClassifier.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"RiskClassifier.d.ts","sourceRoot":"","sources":["../../../../src/infra/lib/autonomy/RiskClassifier.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAwBhE,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AASD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;gBAEnC,WAAW,CAAC,EAAE,cAAc,EAAE;IAW1C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,cAAc;IAOnF,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,mBAAmB;IAmB3B,OAAO,CAAC,oBAAoB;IAmB5B,OAAO,CAAC,iBAAiB;IAuBzB,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,qBAAqB;IAW7B,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,yBAAyB;IAIjC,OAAO,CAAC,uBAAuB;IAY/B,OAAO,CAAC,cAAc;CAOvB"}

package/dist/infra/lib/autonomy/RiskClassifier.js

@@ -1,147 +0,0 @@
-import { z } from 'zod';
-const CONTROL_CHAR_RE = /[\u0000-\u001F]/g;
-const SECURITY_FILE_PATTERNS = [
-    /[/\\]auth[/\\]/i,
-    /[/\\]security[/\\]/i,
-    /[/\\]\.env/i,
-    /[/\\]secrets/i,
-];
-const SENTINEL_PROTECTED_RE = /^src[\\/]lib[\\/]autonomy[\\/]/;
-const DANGEROUS_BASH_RE = /\b(rm\s+-rf|kill\s+-9|drop\s+table|truncate|shutdown|reboot|mkfs|dd\s+if=)\b/i;
-const AUTH_CREDENTIAL_RE = /\b(api[_-]?key|secret|token|password|auth|bearer)\b/i;
-const SCORE_DEFAULTS = {
-    LOW: 15,
-    MEDIUM: 50,
-    HIGH: 80,
-};
-const CustomRiskRuleSchema = z.object({
-    actionType: z.string().min(1),
-    targetPattern: z.string().optional(),
-    riskLevel: z.enum(['LOW', 'MEDIUM', 'HIGH']),
-    condition: z.string().optional(),
-});
-export class RiskClassifier {
-    customRules;
-    constructor(customRules) {
-        this.customRules = (customRules ?? []).filter((rule) => {
-            try {
-                CustomRiskRuleSchema.parse(rule);
-                return true;
-            }
-            catch {
-                return false;
-            }
-        });
-    }
-    classify(action, context) {
-        const sanitized = this.sanitizeAction(action);
-        const customResult = this.evaluateCustomRules(sanitized);
-        if (customResult)
-            return customResult;
-        return this.evaluateDefaultRules(sanitized, context);
-    }
-    sanitizeAction(action) {
-        return {
-            ...action,
-            agentId: action.agentId.replace(CONTROL_CHAR_RE, ''),
-            target: action.target.replace(CONTROL_CHAR_RE, ''),
-        };
-    }
-    evaluateCustomRules(action) {
-        for (const rule of this.customRules) {
-            if (rule.actionType !== action.actionType)
-                continue;
-            if (rule.targetPattern) {
-                try {
-                    if (!new RegExp(rule.targetPattern, 'i').test(action.target))
-                        continue;
-                }
-                catch {
-                    continue;
-                }
-            }
-            return this.makeAssessment(rule.riskLevel, [`Custom rule matched: ${rule.actionType}`], `Custom rule override for ${rule.actionType}`);
-        }
-        return null;
-    }
-    evaluateDefaultRules(action, context) {
-        const handlers = {
-            file_write: () => this.classifyFileWrite(action),
-            file_delete: () => this.classifyFileDelete(action, context),
-            bash_exec: () => this.classifyBashExec(action),
-            git_push: () => this.classifyGitPush(action),
-            skill_generate: () => this.classifySkillGenerate(action),
-            config_modify: () => this.classifyConfigModify(action),
-            dependency_install: () => this.classifyDependencyInstall(),
-            external_api_call: () => this.classifyExternalApiCall(action),
-        };
-        const handler = handlers[action.actionType];
-        if (handler)
-            return handler();
-        return this.makeAssessment('LOW', [], `Unknown action type: ${action.actionType}`);
-    }
-    classifyFileWrite(action) {
-        const normalized = action.target.replace(/\\/g, '/').replace(/^\.\//, '');
-        if (SENTINEL_PROTECTED_RE.test(normalized)) {
-            return {
-                riskLevel: 'HIGH',
-                score: 100,
-                factors: ['Sentinel protected file modification attempted'],
-                reasoning: 'Modifying files in src/lib/autonomy/ is blocked',
-                blocked: true,
-            };
-        }
-        for (const pattern of SECURITY_FILE_PATTERNS) {
-            if (pattern.test(action.target)) {
-                return this.makeAssessment('HIGH', [`Security-sensitive file: ${action.target}`], 'Security file modification requires elevated risk level');
-            }
-        }
-        return this.makeAssessment('LOW', [], 'Standard file write operation');
-    }
-    classifyFileDelete(action, context) {
-        if (context?.recentDeleteCount !== undefined && context.recentDeleteCount >= 5) {
-            return this.makeAssessment('HIGH', [`Mass delete detected: ${context.recentDeleteCount} files in last 60s`], 'Mass file deletion detected');
-        }
-        return this.makeAssessment('MEDIUM', [], 'File deletion operation');
-    }
-    classifyBashExec(action) {
-        if (DANGEROUS_BASH_RE.test(action.target)) {
-            return this.makeAssessment('HIGH', [`Dangerous command detected in: ${action.target}`], 'Bash command contains dangerous patterns');
-        }
-        return this.makeAssessment('MEDIUM', [], 'Standard bash execution');
-    }
-    classifyGitPush(action) {
-        const paramsStr = JSON.stringify(action.params ?? {});
-        const combined = `${action.target} ${paramsStr}`;
-        if (/--force\b/.test(combined) || /["']?force["']?\s*:\s*true/.test(paramsStr)) {
-            return this.makeAssessment('HIGH', ['Force push detected'], 'Git force push requires elevated risk level');
-        }
-        return this.makeAssessment('HIGH', [], 'Git push operation');
-    }
-    classifySkillGenerate(action) {
-        if (/\brule\b/i.test(action.target)) {
-            return this.makeAssessment('MEDIUM', ['Rule generation detected'], 'Skill generation involving rules');
-        }
-        return this.makeAssessment('LOW', [], 'Standard skill generation');
-    }
-    classifyConfigModify(action) {
-        if (/\bsentinel\b/i.test(action.target)) {
-            return this.makeAssessment('HIGH', ['Sentinel configuration modification'], 'Modifying sentinel configuration requires elevated risk level');
-        }
-        return this.makeAssessment('MEDIUM', [], 'Configuration modification');
-    }
-    classifyDependencyInstall() {
-        return this.makeAssessment('MEDIUM', [], 'Dependency installation');
-    }
-    classifyExternalApiCall(action) {
-        const paramsStr = JSON.stringify(action.params ?? {});
-        if (AUTH_CREDENTIAL_RE.test(paramsStr)) {
-            return this.makeAssessment('HIGH', ['Authentication credentials detected in API call'], 'External API call with authentication');
-        }
-        return this.makeAssessment('LOW', [], 'Standard external API call');
-    }
-    makeAssessment(riskLevel, factors, reasoning) {
-        return { riskLevel, score: SCORE_DEFAULTS[riskLevel], factors, reasoning };
-    }
-}
-//# sourceMappingURL=RiskClassifier.js.map

package/dist/infra/lib/autonomy/RiskClassifier.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"RiskClassifier.js","sourceRoot":"","sources":["../../../../src/infra/lib/autonomy/RiskClassifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C,MAAM,sBAAsB,GAA0B;IACpD,iBAAiB;IACjB,qBAAqB;IACrB,aAAa;IACb,eAAe;CAChB,CAAC;AAEF,MAAM,qBAAqB,GAAG,gCAAgC,CAAC;AAE/D,MAAM,iBAAiB,GACrB,+EAA+E,CAAC;AAElF,MAAM,kBAAkB,GAAG,sDAAsD,CAAC;AAElF,MAAM,cAAc,GAA8B;IAChD,GAAG,EAAE,EAAE;IACP,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,EAAE;CACT,CAAC;AAqBF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,OAAO,cAAc;IACR,WAAW,CAAmB;IAE/C,YAAY,WAA8B;QACxC,IAAI,CAAC,WAAW,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACrD,IAAI,CAAC;gBACH,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,MAAwB,EAAE,OAA+B;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,YAAY;YAAE,OAAO,YAAY,CAAC;QACtC,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAEO,cAAc,CAAC,MAAwB;QAC7C,OAAO;YACL,GAAG,MAAM;YACT,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;YACpD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SACnD,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,MAAwB;QAClD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;gBAAE,SAAS;YACpD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;wBAAE,SAAS;gBACzE,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CACxB,IAAI,CAAC,SAAS,EACd,CAAC,wBAAwB,IAAI,CAAC,UAAU,EAAE,CAAC,EAC3C,4BAA4B,IAAI,CAAC,UAAU,EAAE,CAC9C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,oBAAoB,CAC1B,MAAwB,EACxB,OAA+B;QAE/B,MAAM,QAAQ,GAAyC;YACrD,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAChD,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC;YAC3D,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAC9C,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YAC5C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;YACxD,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;YACtD,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAC1D,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC;SAC9D,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,OAAO;YAAE,OAAO,OAAO,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,wBAAwB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACrF,CAAC;IAEO,iBAAiB,CAAC,MAAwB;QAChD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,OAAO;gBACL,SAAS,EAAE,MAAM;gBACjB,KAAK,EAAE,GAAG;gBACV,OAAO,EAAE,CAAC,gDAAgD,CAAC;gBAC3D,SAAS,EAAE,iDAAiD;gBAC5D,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,OAAO,IAAI,CAAC,cAAc,CACxB,MAAM,EACN,CAAC,4BAA4B,MAAM,CAAC,MAAM,EAAE,CAAC,EAC7C,yDAAyD,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,+BAA+B,CAAC,CAAC;IACzE,CAAC;IAEO,kBAAkB,CACxB,MAAwB,EACxB,OAA+B;QAE/B,IAAI,OAAO,EAAE,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,iBAAiB,IAAI,CAAC,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC,cAAc,CACxB,MAAM,EACN,CAAC,yBAAyB,OAAO,CAAC,iBAAiB,oBAAoB,CAAC,EACxE,6BAA6B,CAC9B,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;IACtE,CAAC;IAEO,gBAAgB,CAAC,MAAwB;QAC/C,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,cAAc,CACxB,MAAM,EACN,CAAC,kCAAkC,MAAM,CAAC,MAAM,EAAE,CAAC,EACnD,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;IACtE,CAAC;IAEO,eAAe,CAAC,MAAwB;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QACjD,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC,cAAc,CACxB,MAAM,EACN,CAAC,qBAAqB,CAAC,EACvB,6CAA6C,CAC9C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC/D,CAAC;IAEO,qBAAqB,CAAC,MAAwB;QACpD,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,cAAc,CACxB,QAAQ,EACR,CAAC,0BAA0B,CAAC,EAC5B,kCAAkC,CACnC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,2BAA2B,CAAC,CAAC;IACrE,CAAC;IAEO,oBAAoB,CAAC,MAAwB;QACnD,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,cAAc,CACxB,MAAM,EACN,CAAC,qCAAqC,CAAC,EACvC,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACzE,CAAC;IAEO,yBAAyB;QAC/B,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;IACtE,CAAC;IAEO,uBAAuB,CAAC,MAAwB;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,cAAc,CACxB,MAAM,EACN,CAAC,iDAAiD,CAAC,EACnD,uCAAuC,CACxC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACtE,CAAC;IAEO,cAAc,CACpB,SAAoB,EACpB,OAAiB,EACjB,SAAiB;QAEjB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC7E,CAAC;CACF"}

package/dist/infra/lib/autonomy/SecuritySentinel.d.ts

@@ -1,51 +0,0 @@
-import type Database from 'better-sqlite3';
-import type { AgentActionEvent, RiskLevel } from './schemas.js';
-import type { EventBus } from './EventBus.js';
-import type { AuditStore } from './AuditStore.js';
-import { RiskClassifier } from './RiskClassifier.js';
-import type { CustomRiskRule } from './RiskClassifier.js';
-import { PolicyEngine } from './PolicyEngine.js';
-import type { PolicyDecision } from './PolicyEngine.js';
-export interface InterceptResult {
-    allowed: boolean;
-    riskLevel: RiskLevel;
-    policyDecision: PolicyDecision;
-    auditId: string;
-}
-interface StorageProvider {
-    getDatabase(): Database.Database;
-}
-export interface SentinelDeps {
-    storage: StorageProvider;
-    eventBus: EventBus;
-    auditStore: AuditStore;
-    projectRoot?: string;
-    customRules?: CustomRiskRule[];
-}
-export declare class SecuritySentinel {
-    private static instance;
-    private readonly classifier;
-    private readonly policyEngine;
-    private readonly eventBus;
-    private readonly auditStore;
-    private readonly db;
-    private readonly projectRoot;
-    private readonly recentDeleteStmt;
-    private constructor();
-    static getInstance(deps: SentinelDeps): SecuritySentinel;
-    static resetInstance(): void;
-    intercept(action: AgentActionEvent): InterceptResult;
-    isImmutable(): boolean;
-    getSentinelFiles(): ReadonlyArray<string>;
-    getClassifier(): RiskClassifier;
-    getPolicyEngine(): PolicyEngine;
-    private normalizeAction;
-    private normalizePath;
-    private buildContext;
-    private blockedDecision;
-    private emitPolicyCheck;
-    private recordAudit;
-}
-export declare function isSentinelProtectedPath(target: string): boolean;
-export {};
-//# sourceMappingURL=SecuritySentinel.d.ts.map

package/dist/infra/lib/autonomy/SecuritySentinel.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SecuritySentinel.d.ts","sourceRoot":"","sources":["../../../../src/infra/lib/autonomy/SecuritySentinel.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAkB,cAAc,EAAyB,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAiBxD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,eAAe;IACvB,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,eAAe,CAAC;IACzB,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC;CAChC;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAiC;IAExD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiB;IAC5C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;IACvC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IAEtD,OAAO;IAaP,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,gBAAgB;IAOxD,MAAM,CAAC,aAAa,IAAI,IAAI;IAI5B,SAAS,CAAC,MAAM,EAAE,gBAAgB,GAAG,eAAe;IAmCpD,WAAW,IAAI,OAAO;IAItB,gBAAgB,IAAI,aAAa,CAAC,MAAM,CAAC;IAIzC,aAAa,IAAI,cAAc;IAI/B,eAAe,IAAI,YAAY;IAI/B,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,eAAe;IAuBvB,OAAO,CAAC,WAAW;CAsBpB;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAG/D"}

package/dist/infra/lib/autonomy/SecuritySentinel.js

@@ -1,162 +0,0 @@
-import { resolve, relative } from 'path';
-import { realpathSync } from 'fs';
-import { RiskClassifier } from './RiskClassifier.js';
-import { PolicyEngine } from './PolicyEngine.js';
-const SENTINEL_PATH_PREFIX = 'src/lib/autonomy/';
-const SENTINEL_FILES = [
-    'src/lib/autonomy/RiskClassifier.ts',
-    'src/lib/autonomy/PolicyEngine.ts',
-    'src/lib/autonomy/SecuritySentinel.ts',
-    'src/lib/autonomy/EventBus.ts',
-    'src/lib/autonomy/AuditStore.ts',
-    'src/lib/autonomy/EventOutbox.ts',
-    'src/lib/autonomy/schemas.ts',
-    'src/lib/autonomy/index.ts',
-];
-const RECENT_DELETE_WINDOW_MS = 60_000;
-export class SecuritySentinel {
-    static instance = null;
-    classifier;
-    policyEngine;
-    eventBus;
-    auditStore;
-    db;
-    projectRoot;
-    recentDeleteStmt;
-    constructor(deps) {
-        this.classifier = new RiskClassifier(deps.customRules);
-        this.policyEngine = new PolicyEngine(deps.storage);
-        this.eventBus = deps.eventBus;
-        this.auditStore = deps.auditStore;
-        this.db = deps.storage.getDatabase();
-        this.projectRoot = deps.projectRoot ?? process.cwd();
-        this.recentDeleteStmt = this.db.prepare(`SELECT COUNT(*) as count FROM audit_events
-       WHERE agentId = ? AND actionType = 'file_delete' AND createdAt >= ?`);
-    }
-    static getInstance(deps) {
-        if (!SecuritySentinel.instance) {
-            SecuritySentinel.instance = new SecuritySentinel(deps);
-        }
-        return SecuritySentinel.instance;
-    }
-    static resetInstance() {
-        SecuritySentinel.instance = null;
-    }
-    intercept(action) {
-        const normalizedAction = this.normalizeAction(action);
-        // Block paths outside project root
-        if (normalizedAction.target.startsWith('..')) {
-            const outsideRisk = {
-                riskLevel: 'HIGH',
-                score: 100,
-                factors: ['Path resolves outside project root'],
-                reasoning: 'Path traversal outside project root is blocked',
-                blocked: true,
-            };
-            const decision = this.blockedDecision(outsideRisk);
-            this.emitPolicyCheck(normalizedAction, outsideRisk, decision);
-            const auditId = this.recordAudit(normalizedAction, outsideRisk, decision);
-            return { allowed: false, riskLevel: 'HIGH', policyDecision: decision, auditId };
-        }
-        const context = this.buildContext(normalizedAction);
-        const risk = this.classifier.classify(normalizedAction, context);
-        const policyDecision = risk.blocked
-            ? this.blockedDecision(risk)
-            : this.policyEngine.evaluate(normalizedAction, risk);
-        this.emitPolicyCheck(normalizedAction, risk, policyDecision);
-        const auditId = this.recordAudit(normalizedAction, risk, policyDecision);
-        return {
-            allowed: policyDecision.allowed,
-            riskLevel: risk.riskLevel,
-            policyDecision,
-            auditId,
-        };
-    }
-    isImmutable() {
-        return true;
-    }
-    getSentinelFiles() {
-        return SENTINEL_FILES;
-    }
-    getClassifier() {
-        return this.classifier;
-    }
-    getPolicyEngine() {
-        return this.policyEngine;
-    }
-    normalizeAction(action) {
-        const normalizedTarget = this.normalizePath(action.target);
-        return { ...action, target: normalizedTarget };
-    }
-    normalizePath(target) {
-        const resolved = resolve(this.projectRoot, target);
-        const rel = relative(this.projectRoot, resolved).replace(/\\/g, '/');
-        if (rel.startsWith('..'))
-            return rel;
-        try {
-            const real = realpathSync(resolved);
-            const realRel = relative(this.projectRoot, real).replace(/\\/g, '/');
-            return realRel.startsWith('..') ? realRel : realRel;
-        }
-        catch {
-            return rel;
-        }
-    }
-    buildContext(action) {
-        if (action.actionType !== 'file_delete')
-            return undefined;
-        const cutoff = new Date(Date.now() - RECENT_DELETE_WINDOW_MS).toISOString();
-        const row = this.recentDeleteStmt.get(action.agentId, cutoff);
-        return { recentDeleteCount: row.count };
-    }
-    blockedDecision(risk) {
-        return {
-            allowed: false,
-            reason: `Sentinel files are protected: ${risk.reasoning}`,
-            requiredAction: 'block',
-            matchedPolicies: ['sentinel-immutability'],
-        };
-    }
-    emitPolicyCheck(action, risk, decision) {
-        try {
-            this.eventBus.emit('policy_check', {
-                actionEvent: {
-                    agentId: action.agentId,
-                    actionType: action.actionType,
-                    target: action.target,
-                    params: action.params,
-                    riskLevel: risk.riskLevel,
-                },
-                policies: decision.matchedPolicies,
-                result: decision.allowed ? 'allowed' : (decision.requiredAction === 'confirm' ? 'needs_confirmation' : 'blocked'),
-                duration: 0,
-            });
-        }
-        catch {
-            // Policy check event emission failure should not break intercept
-        }
-    }
-    recordAudit(action, risk, decision) {
-        const outcome = decision.allowed ? 'allowed' : 'blocked';
-        return this.auditStore.record({
-            correlationId: action.correlationId ?? `sentinel-${Date.now()}`,
-            eventType: 'policy_check',
-            agentId: action.agentId,
-            actionType: action.actionType,
-            riskLevel: risk.riskLevel,
-            payload: {
-                target: action.target,
-                riskScore: risk.score,
-                factors: risk.factors,
-                matchedPolicies: decision.matchedPolicies,
-                reason: decision.reason,
-            },
-            outcome,
-        });
-    }
-}
-export function isSentinelProtectedPath(target) {
-    const normalized = target.replace(/\\/g, '/').replace(/^\.\//, '');
-    return normalized.startsWith(SENTINEL_PATH_PREFIX);
-}
-//# sourceMappingURL=SecuritySentinel.js.map