@triedotdev/mcp 1.0.168 → 1.0.170

package/dist/chunk-SY6KQG44.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/trie/vulnerability-signatures.ts"],"sourcesContent":["/**\n * Vulnerability Signature Database\n * \n * Pre-indexed security patterns using Aho-Corasick for O(n + z) scanning\n * where n = file size, z = number of matches.\n * \n * This is MUCH faster than running 100+ regex patterns on every file.\n * \n * IMPROVEMENTS (v2):\n * - Context-aware pattern matching to reduce false positives\n * - File path exclusions for test/lock files\n * - SQL injection detection only in SQL contexts\n * - Better secret detection avoiding package names/URLs\n */\n\nimport { AhoCorasick, PatternMetadata } from './trie.js';\nimport { isInteractiveMode } from '../utils/progress.js';\n\nexport interface VulnerabilityMatch {\n  pattern: string;\n  line: number;\n  column: number;\n  severity: 'critical' | 'serious' | 'moderate' | 'low';\n  category: string;\n  description: string;\n  cwe?: string;\n  fix: string;\n}\n\n/**\n * Files/patterns to ALWAYS exclude from scanning (never any false positives from these)\n */\nconst ALWAYS_EXCLUDED_FILES = [\n  /vulnerability-signatures\\.[jt]s$/,  // CRITICAL: Never scan ourselves!\n  /vibe-code-signatures\\.[jt]s$/,      // Never scan signature files\n  /legal\\.[jt]s$/,                     // Legal skill contains detection patterns\n  /security-scanner\\.[jt]s$/,          // Security scanner contains patterns\n  /agent-smith\\.[jt]s$/,               // Agent Smith contains patterns\n  /security\\.[jt]s$/,                  // Security skill\n  /privacy\\.[jt]s$/,                   // Privacy skill\n  /soc2\\.[jt]s$/,                      // SOC2 skill\n  /skills[\\/\\\\]built-in[\\/\\\\]/,        // Never scan Trie's own skill implementations\n  /skills[\\/\\\\].*\\.[jt]s$/,            // Never scan any skills directory\n  /trie-agents?[\\/\\\\]src[\\/\\\\]/,       // Never scan Trie's source when installed as dependency\n  /trie-agents?[\\/\\\\]dist[\\/\\\\]/,      // Never scan Trie's dist when installed\n  /package-lock\\.json$/,               // Lock files\n  /yarn\\.lock$/,\n  /pnpm-lock\\.yaml$/,\n  /node_modules[\\/\\\\]/,                // Dependencies\n  /\\.d\\.ts$/,                          // Type definitions\n  /\\.min\\.[jt]s$/,                     // Minified files\n  /dist[\\/\\\\]/,                        // Build output\n  /build[\\/\\\\]/,\n];\n\n/**\n * Files to exclude from non-critical checks (test files, examples, etc.)\n */\nconst EXCLUDED_FILE_PATTERNS = [\n  /\\.test\\.[jt]sx?$/,           // Test files\n  /\\.spec\\.[jt]sx?$/,           // Spec files\n  /__tests__\\//,                // Test directories\n  /\\/test\\//,                   // test/ directory\n  /\\/tests\\//,                  // tests/ directory\n  /\\.stories\\.[jt]sx?$/,        // Storybook files\n  /\\.config\\.[jt]s$/,           // Config files\n  /example/i,                   // Example files\n  /demo/i,                      // Demo files\n  /fixture/i,                   // Test fixtures\n  /mock/i,                      // Mock files\n];\n\n/**\n * Check if a file should be completely excluded from scanning\n */\nexport function shouldAlwaysExcludeFile(filePath: string): boolean {\n  // Normalize path to use forward slashes for consistent matching\n  const normalizedPath = filePath.replace(/\\\\/g, '/');\n  \n  // Check against exclusion patterns\n  if (ALWAYS_EXCLUDED_FILES.some(pattern => pattern.test(normalizedPath))) {\n    return true;\n  }\n  \n  // Also exclude files in Trie's source directories (handles both installed and development)\n  if (normalizedPath.includes('trie') && normalizedPath.includes('/src/')) {\n    return true;\n  }\n  \n  // Exclude specific Trie scanner/skill files by filename (regardless of path)\n  const fileName = normalizedPath.split('/').pop() || '';\n  const TRIE_SCANNER_FILES = [\n    'vulnerability-signatures.ts', 'vulnerability-signatures.js',\n    'vibe-code-signatures.ts', 'vibe-code-signatures.js',\n    'legal.ts', 'legal.js',\n    'security-scanner.ts', 'security-scanner.js',\n    'agent-smith.ts', 'agent-smith.js',\n    'security.ts', 'security.js',\n    'privacy.ts', 'privacy.js',\n    'soc2.ts', 'soc2.js',\n  ];\n  if (TRIE_SCANNER_FILES.includes(fileName)) {\n    // Only exclude if it looks like it's in a skills/trie directory\n    if (normalizedPath.includes('/skills/') || normalizedPath.includes('/trie/')) {\n      return true;\n    }\n  }\n  \n  return false;\n}\n\n/**\n * Check if a file should be excluded from certain checks\n */\nexport function shouldExcludeFile(filePath: string, patternCategory: string): boolean {\n  // CRITICAL: Always exclude signature files - never flag ourselves!\n  if (shouldAlwaysExcludeFile(filePath)) {\n    return true;\n  }\n  \n  // For secrets in test files, we need extra context checking (done elsewhere)\n  // Don't auto-exclude test files for secrets here, let isFalsePositive handle it\n  if (patternCategory === 'secrets' || patternCategory === 'exposed-secrets') {\n    return false;\n  }\n  \n  // Exclude certain file types from non-critical checks\n  return EXCLUDED_FILE_PATTERNS.some(pattern => pattern.test(filePath));\n}\n\n/**\n * SQL-related keywords that indicate a SQL context\n */\nconst SQL_CONTEXT_KEYWORDS = [\n  'SELECT', 'INSERT', 'UPDATE', 'DELETE', 'FROM', 'WHERE', 'JOIN',\n  'query', 'execute', 'sql', 'prisma', 'knex', 'sequelize',\n  'createQueryBuilder', 'rawQuery', '.raw('\n];\n\n/**\n * Check if a line is in a SQL context\n */\nfunction isInSQLContext(line: string, surroundingLines: string[]): boolean {\n  const allContent = [line, ...surroundingLines].join(' ').toLowerCase();\n  return SQL_CONTEXT_KEYWORDS.some(keyword => \n    allContent.includes(keyword.toLowerCase())\n  );\n}\n\n/**\n * Security vulnerability patterns organized by category\n */\nconst VULNERABILITY_PATTERNS: Array<{\n  pattern: string;\n  metadata: PatternMetadata;\n}> = [\n  // ============================================\n  // CRITICAL: Injection vulnerabilities\n  // ============================================\n  {\n    pattern: 'eval(',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'injection',\n      description: 'eval() can execute arbitrary code - potential RCE',\n      cwe: 'CWE-95',\n      fix: 'Use safer alternatives like JSON.parse() or a sandboxed interpreter',\n    },\n  },\n  {\n    pattern: 'new Function(',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'injection',\n      description: 'new Function() can execute arbitrary code',\n      cwe: 'CWE-95',\n      fix: 'Avoid dynamic function creation from user input',\n    },\n  },\n  {\n    pattern: 'exec(',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'injection',\n      description: 'Command execution - potential command injection',\n      cwe: 'CWE-78',\n      fix: 'Use parameterized commands and validate/sanitize all inputs',\n    },\n  },\n  {\n    pattern: 'execSync(',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'injection',\n      description: 'Synchronous command execution - potential injection',\n      cwe: 'CWE-78',\n      fix: 'Use spawn with argument arrays instead of shell strings',\n    },\n  },\n  {\n    pattern: 'spawn(',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'injection',\n      description: 'Process spawn - verify inputs are sanitized',\n      cwe: 'CWE-78',\n      fix: 'Use shell: false and pass arguments as array',\n    },\n  },\n  {\n    pattern: 'child_process',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'injection',\n      description: 'Child process module - review for command injection',\n      cwe: 'CWE-78',\n      fix: 'Validate all inputs passed to child processes',\n    },\n  },\n\n  // ============================================\n  // CRITICAL: SQL Injection patterns\n  // NOTE: ${} is NOT flagged here - we check SQL context in isFalsePositive\n  // ============================================\n  {\n    pattern: 'SELECT * FROM',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'moderate',\n      category: 'sql-injection',\n      description: 'Raw SQL query detected - verify parameterization',\n      cwe: 'CWE-89',\n      fix: 'Use ORM or parameterized queries',\n    },\n  },\n  {\n    pattern: 'INSERT INTO',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'moderate',\n      category: 'sql-injection',\n      description: 'Raw SQL INSERT - verify parameterization',\n      cwe: 'CWE-89',\n      fix: 'Use parameterized queries',\n    },\n  },\n  {\n    pattern: 'DELETE FROM',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'moderate',\n      category: 'sql-injection',\n      description: 'Raw SQL DELETE - verify parameterization',\n      cwe: 'CWE-89',\n      fix: 'Use parameterized queries',\n    },\n  },\n  {\n    pattern: '.raw(`',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'sql-injection',\n      description: 'Raw query with template literal - high injection risk',\n      cwe: 'CWE-89',\n      fix: 'Avoid raw queries with interpolation or use proper escaping',\n    },\n  },\n  {\n    pattern: \".raw('\",\n    metadata: {\n      type: 'vulnerability',\n      severity: 'moderate',\n      category: 'sql-injection',\n      description: 'Raw query method - verify for injection risk',\n      cwe: 'CWE-89',\n      fix: 'Use parameterized queries instead of raw SQL',\n    },\n  },\n  {\n    pattern: '.raw(\"',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'moderate',\n      category: 'sql-injection',\n      description: 'Raw query method - verify for injection risk',\n      cwe: 'CWE-89',\n      fix: 'Use parameterized queries instead of raw SQL',\n    },\n  },\n  {\n    pattern: '`SELECT',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'sql-injection',\n      description: 'SQL in template literal - check for injection',\n      cwe: 'CWE-89',\n      fix: 'Use parameterized queries with placeholders',\n    },\n  },\n  {\n    pattern: '`INSERT',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'sql-injection',\n      description: 'SQL INSERT in template literal - check for injection',\n      cwe: 'CWE-89',\n      fix: 'Use parameterized queries with placeholders',\n    },\n  },\n  {\n    pattern: '`UPDATE',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'sql-injection',\n      description: 'SQL UPDATE in template literal - check for injection',\n      cwe: 'CWE-89',\n      fix: 'Use parameterized queries with placeholders',\n    },\n  },\n  {\n    pattern: '`DELETE',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'sql-injection',\n      description: 'SQL DELETE in template literal - check for injection',\n      cwe: 'CWE-89',\n      fix: 'Use parameterized queries with placeholders',\n    },\n  },\n\n  // ============================================\n  // CRITICAL: XSS vulnerabilities\n  // ============================================\n  {\n    pattern: 'innerHTML',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'xss',\n      description: 'innerHTML can inject malicious scripts',\n      cwe: 'CWE-79',\n      fix: 'Use textContent or sanitize HTML with DOMPurify',\n    },\n  },\n  {\n    pattern: 'outerHTML',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'xss',\n      description: 'outerHTML can inject malicious scripts',\n      cwe: 'CWE-79',\n      fix: 'Avoid outerHTML with user input',\n    },\n  },\n  {\n    pattern: 'document.write',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'xss',\n      description: 'document.write can inject malicious content',\n      cwe: 'CWE-79',\n      fix: 'Use DOM methods like createElement instead',\n    },\n  },\n  {\n    pattern: 'dangerouslySetInnerHTML',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'xss',\n      description: 'React dangerouslySetInnerHTML - XSS risk',\n      cwe: 'CWE-79',\n      fix: 'Sanitize with DOMPurify before using',\n    },\n  },\n  {\n    pattern: 'v-html',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'xss',\n      description: 'Vue v-html directive - XSS risk',\n      cwe: 'CWE-79',\n      fix: 'Sanitize content or use v-text',\n    },\n  },\n  {\n    pattern: '[innerHTML]',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'xss',\n      description: 'Angular innerHTML binding - XSS risk',\n      cwe: 'CWE-79',\n      fix: 'Use Angular DomSanitizer',\n    },\n  },\n\n  // ============================================\n  // CRITICAL: Hardcoded secrets\n  // More specific patterns to reduce false positives\n  // ============================================\n  {\n    pattern: \"password = '\",\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'secrets',\n      description: 'Hardcoded password in string',\n      cwe: 'CWE-798',\n      fix: 'Use environment variables or secret management',\n    },\n  },\n  {\n    pattern: 'password = \"',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'secrets',\n      description: 'Hardcoded password in string',\n      cwe: 'CWE-798',\n      fix: 'Use environment variables or secret management',\n    },\n  },\n  {\n    pattern: \"password: '\",\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'secrets',\n      description: 'Hardcoded password in config',\n      cwe: 'CWE-798',\n      fix: 'Use environment variables or secret management',\n    },\n  },\n  {\n    pattern: 'password: \"',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'secrets',\n      description: 'Hardcoded password in config',\n      cwe: 'CWE-798',\n      fix: 'Use environment variables or secret management',\n    },\n  },\n  {\n    pattern: \"api_key = '\",\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'secrets',\n      description: 'Hardcoded API key',\n      cwe: 'CWE-798',\n      fix: 'Use environment variables',\n    },\n  },\n  {\n    pattern: 'api_key = \"',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'secrets',\n      description: 'Hardcoded API key',\n      cwe: 'CWE-798',\n      fix: 'Use environment variables',\n    },\n  },\n  {\n    pattern: \"apiKey: '\",\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'secrets',\n      description: 'Hardcoded API key in config',\n      cwe: 'CWE-798',\n      fix: 'Use environment variables',\n    },\n  },\n  {\n    pattern: 'apiKey: \"',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'secrets',\n      description: 'Hardcoded API key in config',\n      cwe: 'CWE-798',\n      fix: 'Use environment variables',\n    },\n  },\n  {\n    pattern: \"secret = '\",\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'secrets',\n      description: 'Hardcoded secret',\n      cwe: 'CWE-798',\n      fix: 'Use environment variables or secret management',\n    },\n  },\n  {\n    pattern: 'secret = \"',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'secrets',\n      description: 'Hardcoded secret',\n      cwe: 'CWE-798',\n      fix: 'Use environment variables or secret management',\n    },\n  },\n  {\n    pattern: 'AWS_SECRET_ACCESS_KEY=',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'secrets',\n      description: 'AWS secret key assignment',\n      cwe: 'CWE-798',\n      fix: 'Use IAM roles or AWS Secrets Manager',\n    },\n  },\n  {\n    pattern: \"'Bearer \",\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'secrets',\n      description: 'Hardcoded bearer token in string',\n      cwe: 'CWE-798',\n      fix: 'Use environment variables for tokens',\n    },\n  },\n  {\n    pattern: '\"Bearer ',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'secrets',\n      description: 'Hardcoded bearer token in string',\n      cwe: 'CWE-798',\n      fix: 'Use environment variables for tokens',\n    },\n  },\n\n  // ============================================\n  // SERIOUS: Authentication issues\n  // ============================================\n  {\n    pattern: 'password ==',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'auth',\n      description: 'Plain text password comparison',\n      cwe: 'CWE-256',\n      fix: 'Use bcrypt.compare() or similar secure comparison',\n    },\n  },\n  {\n    pattern: 'password ===',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'auth',\n      description: 'Plain text password comparison',\n      cwe: 'CWE-256',\n      fix: 'Use bcrypt.compare() or similar secure comparison',\n    },\n  },\n  {\n    pattern: 'MD5(',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'crypto',\n      description: 'MD5 is cryptographically broken',\n      cwe: 'CWE-328',\n      fix: 'Use SHA-256 or bcrypt for passwords',\n    },\n  },\n  {\n    pattern: 'md5(',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'crypto',\n      description: 'MD5 is cryptographically broken',\n      cwe: 'CWE-328',\n      fix: 'Use SHA-256 or bcrypt for passwords',\n    },\n  },\n  {\n    pattern: 'SHA1(',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'moderate',\n      category: 'crypto',\n      description: 'SHA1 is deprecated for security use',\n      cwe: 'CWE-328',\n      fix: 'Use SHA-256 or stronger',\n    },\n  },\n  {\n    pattern: 'sha1(',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'moderate',\n      category: 'crypto',\n      description: 'SHA1 is deprecated for security use',\n      cwe: 'CWE-328',\n      fix: 'Use SHA-256 or stronger',\n    },\n  },\n  {\n    pattern: 'Math.random()',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'crypto',\n      description: 'Math.random() is not cryptographically secure',\n      cwe: 'CWE-338',\n      fix: 'Use crypto.randomBytes() or crypto.getRandomValues()',\n    },\n  },\n\n  // ============================================\n  // SERIOUS: Insecure configurations\n  // ============================================\n  {\n    pattern: 'cors: true',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'moderate',\n      category: 'config',\n      description: 'CORS enabled - verify origin restrictions',\n      cwe: 'CWE-942',\n      fix: 'Specify allowed origins explicitly',\n    },\n  },\n  {\n    pattern: \"origin: '*'\",\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'config',\n      description: 'CORS allows all origins',\n      cwe: 'CWE-942',\n      fix: 'Restrict to specific trusted origins',\n    },\n  },\n  {\n    pattern: 'origin: \"*\"',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'config',\n      description: 'CORS allows all origins',\n      cwe: 'CWE-942',\n      fix: 'Restrict to specific trusted origins',\n    },\n  },\n  {\n    pattern: 'secure: false',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'config',\n      description: 'Insecure cookie/connection setting',\n      cwe: 'CWE-614',\n      fix: 'Set secure: true in production',\n    },\n  },\n  {\n    pattern: 'httpOnly: false',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'config',\n      description: 'Cookie accessible to JavaScript',\n      cwe: 'CWE-1004',\n      fix: 'Set httpOnly: true to prevent XSS cookie theft',\n    },\n  },\n  {\n    pattern: 'rejectUnauthorized: false',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'config',\n      description: 'TLS certificate validation disabled',\n      cwe: 'CWE-295',\n      fix: 'Enable certificate validation in production',\n    },\n  },\n  {\n    pattern: 'NODE_TLS_REJECT_UNAUTHORIZED',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'critical',\n      category: 'config',\n      description: 'TLS validation may be disabled',\n      cwe: 'CWE-295',\n      fix: 'Never disable TLS validation in production',\n    },\n  },\n\n  // ============================================\n  // MODERATE: Common bugs and issues\n  // ============================================\n  {\n    pattern: '.forEach(async',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'serious',\n      category: 'async',\n      description: 'async forEach does not await - unexpected behavior',\n      cwe: 'CWE-703',\n      fix: 'Use for...of loop or Promise.all(arr.map())',\n    },\n  },\n  {\n    pattern: 'JSON.parse(',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'moderate',\n      category: 'error-handling',\n      description: 'JSON.parse can throw - needs try/catch',\n      cwe: 'CWE-755',\n      fix: 'Wrap in try/catch block',\n    },\n  },\n  {\n    pattern: 'atob(',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'low',\n      category: 'encoding',\n      description: 'atob can throw on invalid input',\n      cwe: 'CWE-755',\n      fix: 'Wrap in try/catch and validate input',\n    },\n  },\n\n  // ============================================\n  // Privacy & Compliance patterns\n  // ============================================\n  {\n    pattern: 'console.log(',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'low',\n      category: 'logging',\n      description: 'Console logging - may leak sensitive data',\n      cwe: 'CWE-532',\n      fix: 'Remove or replace with proper logging in production',\n    },\n  },\n  {\n    pattern: 'localStorage.setItem',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'moderate',\n      category: 'storage',\n      description: 'localStorage is accessible to XSS attacks',\n      cwe: 'CWE-922',\n      fix: 'Avoid storing sensitive data in localStorage',\n    },\n  },\n  {\n    pattern: 'sessionStorage.setItem',\n    metadata: {\n      type: 'vulnerability',\n      severity: 'moderate',\n      category: 'storage',\n      description: 'sessionStorage is accessible to XSS attacks',\n      cwe: 'CWE-922',\n      fix: 'Avoid storing sensitive data in sessionStorage',\n    },\n  },\n];\n\n/**\n * Build the vulnerability signature trie\n * Called once at startup, then O(1) access\n */\nlet vulnerabilityTrie: AhoCorasick<PatternMetadata> | null = null;\n\nexport function getVulnerabilityTrie(): AhoCorasick<PatternMetadata> {\n  if (!vulnerabilityTrie) {\n    vulnerabilityTrie = new AhoCorasick<PatternMetadata>();\n    \n    for (const { pattern, metadata } of VULNERABILITY_PATTERNS) {\n      vulnerabilityTrie.addPattern(pattern, metadata, metadata);\n    }\n    \n    vulnerabilityTrie.build();\n    if (!isInteractiveMode()) {\n      console.error(`   Loaded ${VULNERABILITY_PATTERNS.length} vulnerability signatures into trie`);\n    }\n  }\n  \n  return vulnerabilityTrie;\n}\n\n/**\n * Scan code for vulnerabilities using the trie\n * O(n + z) where n = code length, z = number of matches\n */\nexport function scanForVulnerabilities(code: string, filePath: string): VulnerabilityMatch[] {\n  // CRITICAL: Skip files that should never be scanned\n  if (shouldAlwaysExcludeFile(filePath)) {\n    return [];\n  }\n  \n  const trie = getVulnerabilityTrie();\n  const rawMatches = trie.search(code);\n  const lines = code.split('\\n');\n  \n  // Deduplicate and filter false positives\n  const matches: VulnerabilityMatch[] = [];\n  const seen = new Set<string>();\n  \n  for (const match of rawMatches) {\n    // Create unique key for deduplication\n    const key = `${match.line}:${match.pattern}`;\n    if (seen.has(key)) continue;\n    seen.add(key);\n    \n    const meta = match.metadata!;\n    \n    // Check file exclusions\n    if (shouldExcludeFile(filePath, meta.category || '')) continue;\n    \n    // Filter out false positives\n    if (isFalsePositive(code, match, filePath, lines)) continue;\n    \n    const vulnMatch: VulnerabilityMatch = {\n      pattern: match.pattern,\n      line: match.line,\n      column: match.column,\n      severity: meta.severity as any,\n      category: meta.category || 'unknown',\n      description: meta.description || '',\n      fix: meta.fix || '',\n    };\n    if (meta.cwe !== undefined) {\n      vulnMatch.cwe = meta.cwe;\n    }\n    matches.push(vulnMatch);\n  }\n  \n  return matches;\n}\n\n/**\n * Get surrounding lines for context analysis\n */\nfunction getSurroundingLines(lines: string[], lineNum: number, range: number = 3): string[] {\n  const start = Math.max(0, lineNum - range - 1);\n  const end = Math.min(lines.length, lineNum + range);\n  return lines.slice(start, end);\n}\n\n/**\n * Filter out common false positives with enhanced context awareness\n */\nfunction isFalsePositive(_code: string, match: any, filePath: string, lines: string[]): boolean {\n  const line = lines[match.line - 1] || '';\n  const trimmedLine = line.trim();\n  const pattern = match.pattern;\n  const category = match.metadata?.category || '';\n  \n  // ============================================\n  // CRITICAL: Skip signature/pattern definition files\n  // ============================================\n  if (filePath.includes('signature') || \n      filePath.includes('patterns') ||\n      filePath.includes('rules')) {\n    // If the line contains 'pattern:' or 'pattern =' it's a definition, not a vulnerability\n    if (/pattern\\s*[:=]/.test(line)) {\n      return true;\n    }\n  }\n  \n  // Skip if line is a pattern string definition (in any file)\n  // e.g., pattern: \"password = '\", or { pattern: 'secret' }\n  if (/^\\s*(pattern|regex|rule|signature)\\s*[:=]/.test(trimmedLine)) {\n    return true;\n  }\n  \n  // ============================================\n  // CRITICAL: Skip test files entirely for most patterns\n  // ============================================\n  if (isTestFile(filePath)) {\n    // Test files can have intentional bad code for testing detection\n    // Only flag REAL secrets (actual API keys that look real)\n    if (category === 'secrets') {\n      // Skip if it's clearly test/mock data\n      if (/test|mock|fake|dummy|example|fixture|sample|placeholder/i.test(line)) {\n        return true;\n      }\n      // Skip generic fake values like \"password123\", \"secret_test\", etc.\n      if (/'[a-z_]*password[a-z_0-9]*'|\"[a-z_]*password[a-z_0-9]*\"|'[a-z_]*secret[a-z_0-9]*'|\"[a-z_]*secret[a-z_0-9]*\"/i.test(line)) {\n        return true;\n      }\n      // Skip obviously fake API keys (short or with placeholder patterns)\n      if (/sk-[a-z0-9]{10,20}\"|'sk-[a-z0-9]{10,20}'|api[_-]?key.*['\"][a-z0-9_-]{5,30}['\"]/i.test(line)) {\n        return true;\n      }\n    }\n    // For non-secrets, skip all test file findings\n    return true;\n  }\n  \n  // ============================================\n  // SKIP: Comments and documentation\n  // ============================================\n  if (trimmedLine.startsWith('//') || \n      trimmedLine.startsWith('*') || \n      trimmedLine.startsWith('/*') ||\n      trimmedLine.startsWith('#') ||\n      trimmedLine.startsWith('<!--')) {\n    return true;\n  }\n  \n  // Skip JSDoc and documentation blocks\n  if (/^\\s*\\*\\s/.test(line) || /@(param|returns|example|description|see|link)/i.test(line)) {\n    return true;\n  }\n  \n  // Skip description/fix/metadata strings (common in config objects)\n  if (/^\\s*(description|fix|message|help|hint|reason|why)\\s*[:=]/.test(trimmedLine)) {\n    return true;\n  }\n  \n  // ============================================\n  // SKIP: Type definitions and interfaces\n  // ============================================\n  if (/^\\s*(interface|type|export\\s+interface|export\\s+type)\\s/.test(line)) {\n    return true;\n  }\n  \n  // Skip TypeScript type annotations (e.g., password: string)\n  if (/:\\s*(string|number|boolean|any|unknown|null|undefined|void)\\s*(;|,|\\)|$)/.test(line)) {\n    return true;\n  }\n  \n  // Skip interface/type property definitions\n  if (/^\\s*\\w+\\s*\\??\\s*:\\s*(string|number|boolean|any)/.test(trimmedLine)) {\n    return true;\n  }\n  \n  // ============================================\n  // SKIP: Environment variable reads (not hardcoded)\n  // ============================================\n  if (/process\\.env|import\\.meta\\.env|getenv|os\\.environ|Deno\\.env|\\.env\\.|config\\.\\w+|settings\\.\\w+/.test(line)) {\n    return true;\n  }\n  \n  // ============================================\n  // SKIP: Lock files and package metadata\n  // ============================================\n  if (filePath.endsWith('package-lock.json') || \n      filePath.endsWith('yarn.lock') ||\n      filePath.endsWith('pnpm-lock.yaml') ||\n      filePath.includes('node_modules/')) {\n    return true;\n  }\n  \n  // ============================================\n  // SKIP: String in object definition (metadata, not code)\n  // ============================================\n  // Lines like: severity: 'critical', or category: 'secrets'\n  if (/^\\s*(severity|category|type|level|priority|cwe|owasp)\\s*:\\s*['\"]/.test(trimmedLine)) {\n    return true;\n  }\n  \n  // ============================================\n  // Category-specific false positive detection\n  // ============================================\n  \n  // SQL Injection: Only flag in SQL contexts\n  if (category === 'sql-injection') {\n    const surroundingLines = getSurroundingLines(lines, match.line);\n    if (!isInSQLContext(line, surroundingLines)) {\n      return true;\n    }\n  }\n  \n  // Secrets: Very strict detection to avoid false positives\n  if (category === 'secrets' || category === 'auth') {\n    // Skip function parameters (function foo(password: string))\n    if (/\\(\\s*[^)]*\\w+\\s*:\\s*(string|any)/.test(line)) {\n      return true;\n    }\n    // Skip object destructuring ({ password })\n    if (/\\{\\s*\\w*password\\w*\\s*(,|\\}|:)/.test(line) && !/'|\"|`/.test(line.split(/password/i)[1] || '')) {\n      return true;\n    }\n    // Skip when reading from env or config\n    if (/=\\s*(process\\.env|config\\.|options\\.|settings\\.|env\\.)/.test(line)) {\n      return true;\n    }\n    // Skip variable declarations without string literals\n    if (/password\\s*[=:](?!\\s*['\"`])/.test(line)) {\n      return true;\n    }\n    // Skip if it's reading from another variable\n    if (/password\\s*=\\s*\\w+(\\.|$)/.test(line) && !/'|\"|`/.test(line)) {\n      return true;\n    }\n    // Skip error messages and logging about passwords\n    if (/error|message|log|warn|info|debug|throw|new Error/i.test(line)) {\n      return true;\n    }\n    // Skip regex patterns for password validation\n    if (/regex|RegExp|\\/.*password.*\\//i.test(line)) {\n      return true;\n    }\n  }\n  \n  // Logging: Skip in development/debug contexts\n  if (category === 'logging') {\n    // console.error is often intentional\n    if (pattern === 'console.error(' || pattern === 'console.warn(') {\n      return true;\n    }\n    // Skip if in catch block (error logging)\n    if (/catch|error|err\\b/.test(line)) {\n      return true;\n    }\n  }\n  \n  // Config patterns: Skip legitimate security config\n  if (category === 'config') {\n    // Skip when setting secure values\n    if (/secure:\\s*true/.test(line) || /httpOnly:\\s*true/.test(line)) {\n      return true;\n    }\n    // Skip environment-based config\n    if (/NODE_ENV|process\\.env|production|development/.test(line)) {\n      return true;\n    }\n    // Skip conditional configs\n    if (/if\\s*\\(|ternary|\\?.*:/.test(line)) {\n      return true;\n    }\n  }\n  \n  // Crypto: Skip in contexts where weak crypto is acceptable\n  if (category === 'crypto') {\n    // MD5/SHA1 for non-security purposes (checksums, cache keys)\n    if (/checksum|hash.*file|etag|cache.*key|fingerprint|integrity|content.*hash/i.test(line)) {\n      return true;\n    }\n    // Math.random for non-crypto purposes (UI, games, etc.)\n    if (pattern === 'Math.random()') {\n      // Only flag if in security context\n      if (!/token|secret|password|key|auth|session|csrf|nonce/i.test(line)) {\n        return true;\n      }\n    }\n  }\n  \n  // Async: forEach async is sometimes intentional\n  if (category === 'async') {\n    // Skip if there's a comment indicating it's intentional\n    if (/\\/\\/.*intentional|\\/\\/.*fire.?and.?forget|\\/\\/.*parallel/i.test(line)) {\n      return true;\n    }\n  }\n  \n  // ============================================\n  // SKIP: Validation/check patterns (not vulnerabilities)\n  // ============================================\n  // Skip password validation logic\n  if (/password.*length|validate.*password|check.*password|verify.*password|is.*valid/i.test(line)) {\n    return true;\n  }\n  \n  // Skip comparison against hashed values\n  if (/bcrypt|argon|scrypt|pbkdf|compare.*hash|hash.*compare|verify.*hash/i.test(line)) {\n    return true;\n  }\n  \n  // Skip schema definitions (Zod, Yup, etc.)\n  if (/z\\.|yup\\.|joi\\.|schema|validation|validator/i.test(line)) {\n    return true;\n  }\n  \n  // ============================================\n  // SKIP: Imports and requires\n  // ============================================\n  if (/^\\s*(import|require|from)\\s/.test(trimmedLine)) {\n    return true;\n  }\n  \n  // ============================================\n  // SKIP: Example/Demo files\n  // ============================================\n  if (/example|demo|sample|tutorial|readme/i.test(filePath)) {\n    return true;\n  }\n  \n  return false;\n}\n\n/**\n * Check if file is a test file\n */\nfunction isTestFile(filePath: string): boolean {\n  return /\\.(test|spec)\\.[jt]sx?$/.test(filePath) ||\n         /__tests__\\//.test(filePath) ||\n         /test\\//.test(filePath) ||\n         /tests\\//.test(filePath) ||\n         /\\.stories\\.[jt]sx?$/.test(filePath);\n}\n\n/**\n * Get vulnerability statistics\n */\nexport function getVulnerabilityStats(): { total: number; byCategory: Record<string, number>; bySeverity: Record<string, number> } {\n  const byCategory: Record<string, number> = {};\n  const bySeverity: Record<string, number> = {};\n  \n  for (const { metadata } of VULNERABILITY_PATTERNS) {\n    const cat = metadata.category || 'unknown';\n    const sev = metadata.severity || 'unknown';\n    byCategory[cat] = (byCategory[cat] || 0) + 1;\n    bySeverity[sev] = (bySeverity[sev] || 0) + 1;\n  }\n  \n  return {\n    total: VULNERABILITY_PATTERNS.length,\n    byCategory,\n    bySeverity,\n  };\n}\n\n"],"mappings":";;;;;;;;AAgCA,IAAM,wBAAwB;AAAA,EAC5B;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AACF;AAKA,IAAM,yBAAyB;AAAA,EAC7B;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AACF;AAKO,SAAS,wBAAwB,UAA2B;AAEjE,QAAM,iBAAiB,SAAS,QAAQ,OAAO,GAAG;AAGlD,MAAI,sBAAsB,KAAK,aAAW,QAAQ,KAAK,cAAc,CAAC,GAAG;AACvE,WAAO;AAAA,EACT;AAGA,MAAI,eAAe,SAAS,MAAM,KAAK,eAAe,SAAS,OAAO,GAAG;AACvE,WAAO;AAAA,EACT;AAGA,QAAM,WAAW,eAAe,MAAM,GAAG,EAAE,IAAI,KAAK;AACpD,QAAM,qBAAqB;AAAA,IACzB;AAAA,IAA+B;AAAA,IAC/B;AAAA,IAA2B;AAAA,IAC3B;AAAA,IAAY;AAAA,IACZ;AAAA,IAAuB;AAAA,IACvB;AAAA,IAAkB;AAAA,IAClB;AAAA,IAAe;AAAA,IACf;AAAA,IAAc;AAAA,IACd;AAAA,IAAW;AAAA,EACb;AACA,MAAI,mBAAmB,SAAS,QAAQ,GAAG;AAEzC,QAAI,eAAe,SAAS,UAAU,KAAK,eAAe,SAAS,QAAQ,GAAG;AAC5E,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AACT;AAKO,SAAS,kBAAkB,UAAkB,iBAAkC;AAEpF,MAAI,wBAAwB,QAAQ,GAAG;AACrC,WAAO;AAAA,EACT;AAIA,MAAI,oBAAoB,aAAa,oBAAoB,mBAAmB;AAC1E,WAAO;AAAA,EACT;AAGA,SAAO,uBAAuB,KAAK,aAAW,QAAQ,KAAK,QAAQ,CAAC;AACtE;AAKA,IAAM,uBAAuB;AAAA,EAC3B;AAAA,EAAU;AAAA,EAAU;AAAA,EAAU;AAAA,EAAU;AAAA,EAAQ;AAAA,EAAS;AAAA,EACzD;AAAA,EAAS;AAAA,EAAW;AAAA,EAAO;AAAA,EAAU;AAAA,EAAQ;AAAA,EAC7C;AAAA,EAAsB;AAAA,EAAY;AACpC;AAKA,SAAS,eAAe,MAAc,kBAAqC;AACzE,QAAM,aAAa,CAAC,MAAM,GAAG,gBAAgB,EAAE,KAAK,GAAG,EAAE,YAAY;AACrE,SAAO,qBAAqB;AAAA,IAAK,aAC/B,WAAW,SAAS,QAAQ,YAAY,CAAC;AAAA,EAC3C;AACF;AAKA,IAAM,yBAGD;AAAA;AAAA;AAAA;AAAA,EAIH;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA;AAAA,IACE,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,aAAa;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AAAA,EACF;AACF;AAMA,IAAI,oBAAyD;AAEtD,SAAS,uBAAqD;AACnE,MAAI,CAAC,mBAAmB;AACtB,wBAAoB,IAAI,YAA6B;AAErD,eAAW,EAAE,SAAS,SAAS,KAAK,wBAAwB;AAC1D,wBAAkB,WAAW,SAAS,UAAU,QAAQ;AAAA,IAC1D;AAEA,sBAAkB,MAAM;AACxB,QAAI,CAAC,kBAAkB,GAAG;AACxB,cAAQ,MAAM,aAAa,uBAAuB,MAAM,qCAAqC;AAAA,IAC/F;AAAA,EACF;AAEA,SAAO;AACT;AAMO,SAAS,uBAAuB,MAAc,UAAwC;AAE3F,MAAI,wBAAwB,QAAQ,GAAG;AACrC,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,OAAO,qBAAqB;AAClC,QAAM,aAAa,KAAK,OAAO,IAAI;AACnC,QAAM,QAAQ,KAAK,MAAM,IAAI;AAG7B,QAAM,UAAgC,CAAC;AACvC,QAAM,OAAO,oBAAI,IAAY;AAE7B,aAAW,SAAS,YAAY;AAE9B,UAAM,MAAM,GAAG,MAAM,IAAI,IAAI,MAAM,OAAO;AAC1C,QAAI,KAAK,IAAI,GAAG,EAAG;AACnB,SAAK,IAAI,GAAG;AAEZ,UAAM,OAAO,MAAM;AAGnB,QAAI,kBAAkB,UAAU,KAAK,YAAY,EAAE,EAAG;AAGtD,QAAI,gBAAgB,MAAM,OAAO,UAAU,KAAK,EAAG;AAEnD,UAAM,YAAgC;AAAA,MACpC,SAAS,MAAM;AAAA,MACf,MAAM,MAAM;AAAA,MACZ,QAAQ,MAAM;AAAA,MACd,UAAU,KAAK;AAAA,MACf,UAAU,KAAK,YAAY;AAAA,MAC3B,aAAa,KAAK,eAAe;AAAA,MACjC,KAAK,KAAK,OAAO;AAAA,IACnB;AACA,QAAI,KAAK,QAAQ,QAAW;AAC1B,gBAAU,MAAM,KAAK;AAAA,IACvB;AACA,YAAQ,KAAK,SAAS;AAAA,EACxB;AAEA,SAAO;AACT;AAKA,SAAS,oBAAoB,OAAiB,SAAiB,QAAgB,GAAa;AAC1F,QAAM,QAAQ,KAAK,IAAI,GAAG,UAAU,QAAQ,CAAC;AAC7C,QAAM,MAAM,KAAK,IAAI,MAAM,QAAQ,UAAU,KAAK;AAClD,SAAO,MAAM,MAAM,OAAO,GAAG;AAC/B;AAKA,SAAS,gBAAgB,OAAe,OAAY,UAAkB,OAA0B;AAC9F,QAAM,OAAO,MAAM,MAAM,OAAO,CAAC,KAAK;AACtC,QAAM,cAAc,KAAK,KAAK;AAC9B,QAAM,UAAU,MAAM;AACtB,QAAM,WAAW,MAAM,UAAU,YAAY;AAK7C,MAAI,SAAS,SAAS,WAAW,KAC7B,SAAS,SAAS,UAAU,KAC5B,SAAS,SAAS,OAAO,GAAG;AAE9B,QAAI,iBAAiB,KAAK,IAAI,GAAG;AAC/B,aAAO;AAAA,IACT;AAAA,EACF;AAIA,MAAI,4CAA4C,KAAK,WAAW,GAAG;AACjE,WAAO;AAAA,EACT;AAKA,MAAI,WAAW,QAAQ,GAAG;AAGxB,QAAI,aAAa,WAAW;AAE1B,UAAI,2DAA2D,KAAK,IAAI,GAAG;AACzE,eAAO;AAAA,MACT;AAEA,UAAI,+GAA+G,KAAK,IAAI,GAAG;AAC7H,eAAO;AAAA,MACT;AAEA,UAAI,kFAAkF,KAAK,IAAI,GAAG;AAChG,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAKA,MAAI,YAAY,WAAW,IAAI,KAC3B,YAAY,WAAW,GAAG,KAC1B,YAAY,WAAW,IAAI,KAC3B,YAAY,WAAW,GAAG,KAC1B,YAAY,WAAW,MAAM,GAAG;AAClC,WAAO;AAAA,EACT;AAGA,MAAI,WAAW,KAAK,IAAI,KAAK,iDAAiD,KAAK,IAAI,GAAG;AACxF,WAAO;AAAA,EACT;AAGA,MAAI,4DAA4D,KAAK,WAAW,GAAG;AACjF,WAAO;AAAA,EACT;AAKA,MAAI,0DAA0D,KAAK,IAAI,GAAG;AACxE,WAAO;AAAA,EACT;AAGA,MAAI,2EAA2E,KAAK,IAAI,GAAG;AACzF,WAAO;AAAA,EACT;AAGA,MAAI,kDAAkD,KAAK,WAAW,GAAG;AACvE,WAAO;AAAA,EACT;AAKA,MAAI,gGAAgG,KAAK,IAAI,GAAG;AAC9G,WAAO;AAAA,EACT;AAKA,MAAI,SAAS,SAAS,mBAAmB,KACrC,SAAS,SAAS,WAAW,KAC7B,SAAS,SAAS,gBAAgB,KAClC,SAAS,SAAS,eAAe,GAAG;AACtC,WAAO;AAAA,EACT;AAMA,MAAI,mEAAmE,KAAK,WAAW,GAAG;AACxF,WAAO;AAAA,EACT;AAOA,MAAI,aAAa,iBAAiB;AAChC,UAAM,mBAAmB,oBAAoB,OAAO,MAAM,IAAI;AAC9D,QAAI,CAAC,eAAe,MAAM,gBAAgB,GAAG;AAC3C,aAAO;AAAA,IACT;AAAA,EACF;AAGA,MAAI,aAAa,aAAa,aAAa,QAAQ;AAEjD,QAAI,mCAAmC,KAAK,IAAI,GAAG;AACjD,aAAO;AAAA,IACT;AAEA,QAAI,iCAAiC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,MAAM,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG;AAClG,aAAO;AAAA,IACT;AAEA,QAAI,yDAAyD,KAAK,IAAI,GAAG;AACvE,aAAO;AAAA,IACT;AAEA,QAAI,8BAA8B,KAAK,IAAI,GAAG;AAC5C,aAAO;AAAA,IACT;AAEA,QAAI,2BAA2B,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,GAAG;AAChE,aAAO;AAAA,IACT;AAEA,QAAI,qDAAqD,KAAK,IAAI,GAAG;AACnE,aAAO;AAAA,IACT;AAEA,QAAI,iCAAiC,KAAK,IAAI,GAAG;AAC/C,aAAO;AAAA,IACT;AAAA,EACF;AAGA,MAAI,aAAa,WAAW;AAE1B,QAAI,YAAY,oBAAoB,YAAY,iBAAiB;AAC/D,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,KAAK,IAAI,GAAG;AAClC,aAAO;AAAA,IACT;AAAA,EACF;AAGA,MAAI,aAAa,UAAU;AAEzB,QAAI,iBAAiB,KAAK,IAAI,KAAK,mBAAmB,KAAK,IAAI,GAAG;AAChE,aAAO;AAAA,IACT;AAEA,QAAI,+CAA+C,KAAK,IAAI,GAAG;AAC7D,aAAO;AAAA,IACT;AAEA,QAAI,wBAAwB,KAAK,IAAI,GAAG;AACtC,aAAO;AAAA,IACT;AAAA,EACF;AAGA,MAAI,aAAa,UAAU;AAEzB,QAAI,2EAA2E,KAAK,IAAI,GAAG;AACzF,aAAO;AAAA,IACT;AAEA,QAAI,YAAY,iBAAiB;AAE/B,UAAI,CAAC,qDAAqD,KAAK,IAAI,GAAG;AACpE,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAGA,MAAI,aAAa,SAAS;AAExB,QAAI,4DAA4D,KAAK,IAAI,GAAG;AAC1E,aAAO;AAAA,IACT;AAAA,EACF;AAMA,MAAI,kFAAkF,KAAK,IAAI,GAAG;AAChG,WAAO;AAAA,EACT;AAGA,MAAI,sEAAsE,KAAK,IAAI,GAAG;AACpF,WAAO;AAAA,EACT;AAGA,MAAI,+CAA+C,KAAK,IAAI,GAAG;AAC7D,WAAO;AAAA,EACT;AAKA,MAAI,8BAA8B,KAAK,WAAW,GAAG;AACnD,WAAO;AAAA,EACT;AAKA,MAAI,uCAAuC,KAAK,QAAQ,GAAG;AACzD,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAKA,SAAS,WAAW,UAA2B;AAC7C,SAAO,0BAA0B,KAAK,QAAQ,KACvC,cAAc,KAAK,QAAQ,KAC3B,SAAS,KAAK,QAAQ,KACtB,UAAU,KAAK,QAAQ,KACvB,sBAAsB,KAAK,QAAQ;AAC5C;AAKO,SAAS,wBAAmH;AACjI,QAAM,aAAqC,CAAC;AAC5C,QAAM,aAAqC,CAAC;AAE5C,aAAW,EAAE,SAAS,KAAK,wBAAwB;AACjD,UAAM,MAAM,SAAS,YAAY;AACjC,UAAM,MAAM,SAAS,YAAY;AACjC,eAAW,GAAG,KAAK,WAAW,GAAG,KAAK,KAAK;AAC3C,eAAW,GAAG,KAAK,WAAW,GAAG,KAAK,KAAK;AAAA,EAC7C;AAEA,SAAO;AAAA,IACL,OAAO,uBAAuB;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-T63OHG4Q.js

@@ -1,440 +0,0 @@
-import {
-  BackupManager,
-  safeParseAndValidate
-} from "./chunk-EFWVF6TI.js";
-import {
-  atomicWriteJSON
-} from "./chunk-43X6JBEM.js";
-import {
-  getTrieDirectory
-} from "./chunk-VVITXIHN.js";
-
-// src/agent/insight-store.ts
-import { mkdir, readFile } from "fs/promises";
-import { existsSync } from "fs";
-import { join } from "path";
-import { z } from "zod";
-var InsightDetailsSchema = z.object({
-  affectedFiles: z.array(z.string()).optional(),
-  issueBreakdown: z.record(z.string(), z.number()).optional(),
-  examples: z.array(z.string()).optional(),
-  trend: z.enum(["improving", "stable", "worsening"]).optional(),
-  comparison: z.string().optional(),
-  resolvedCount: z.number().optional(),
-  resolvedIssues: z.array(z.object({
-    file: z.string(),
-    line: z.number().optional(),
-    issue: z.string(),
-    agent: z.string(),
-    resolvedAt: z.string().optional()
-  })).optional(),
-  summary: z.string().optional(),
-  // Hypothesis-related fields
-  hypothesis: z.string().optional(),
-  testCriteria: z.string().optional(),
-  confidence: z.number().optional(),
-  // Pattern-related fields
-  patternsCount: z.number().optional(),
-  topPattern: z.string().optional()
-});
-var InsightSchema = z.object({
-  id: z.string(),
-  type: z.enum(["observation", "warning", "suggestion", "celebration", "question"]),
-  message: z.string(),
-  context: z.string().optional(),
-  suggestedAction: z.string().optional(),
-  actionCommand: z.string().optional(),
-  relatedIssues: z.array(z.string()),
-  priority: z.number().min(1).max(10),
-  timestamp: z.number(),
-  dismissed: z.boolean(),
-  category: z.enum(["security", "quality", "performance", "pattern", "progress", "general"]),
-  details: InsightDetailsSchema.optional()
-});
-var InsightStoreDataSchema = z.object({
-  version: z.literal(1),
-  insights: z.array(InsightSchema),
-  cooldowns: z.record(z.string(), z.number()),
-  // insightKey -> timestamp
-  dismissedIds: z.array(z.string()),
-  // Track dismissed insight IDs permanently
-  lastUpdated: z.string()
-});
-var InsightStore = class _InsightStore {
-  projectPath;
-  data;
-  loaded = false;
-  dirty = false;
-  // Default cooldown periods (in ms)
-  static COOLDOWNS = {
-    "pre-push-warning": 6e4,
-    // 1 min between pre-push warnings
-    "security-warning": 3e4,
-    // 30s between security warnings
-    "new-issues": 3e4,
-    // 30s between new issue observations
-    "celebration": 6e4,
-    // 1 min between celebrations
-    "pattern-suggestion": 12e4,
-    // 2 min between pattern suggestions
-    "accessibility-visual-qa": 3e5,
-    // 5 min between visual QA suggestions
-    "goal-suggestion": 3e5,
-    // 5 min between goal suggestions
-    "risk-prediction": 18e4,
-    // 3 min between risk predictions
-    "hypothesis-update": 6e5,
-    // 10 min between hypothesis updates
-    "auto-escalation": 3e5
-    // 5 min between auto-escalations
-  };
-  constructor(projectPath) {
-    this.projectPath = projectPath;
-    this.data = this.createEmptyData();
-  }
-  /**
-   * Get the storage file path
-   */
-  getStorePath() {
-    return join(getTrieDirectory(this.projectPath), "memory", "insights.json");
-  }
-  /**
-   * Create empty data structure
-   */
-  createEmptyData() {
-    return {
-      version: 1,
-      insights: [],
-      cooldowns: {},
-      dismissedIds: [],
-      lastUpdated: (/* @__PURE__ */ new Date()).toISOString()
-    };
-  }
-  /**
-   * Load insights from disk
-   * 
-   * If the file is corrupted, attempts recovery from backup.
-   * Returns empty data if no valid file/backup exists.
-   */
-  async load() {
-    if (this.loaded) {
-      return this.data;
-    }
-    const storePath = this.getStorePath();
-    try {
-      if (existsSync(storePath)) {
-        const content = await readFile(storePath, "utf-8");
-        const result = safeParseAndValidate(content, InsightStoreDataSchema);
-        if (result.success) {
-          this.data = result.data;
-          this.loaded = true;
-          this.deduplicateInsights();
-          return this.data;
-        }
-        console.error(`   Insight store corrupted: ${result.error}`);
-        const backupManager = new BackupManager(storePath);
-        if (await backupManager.recoverFromBackup()) {
-          console.error("   Recovered from backup");
-          const recovered = await readFile(storePath, "utf-8");
-          const recoveredResult = safeParseAndValidate(recovered, InsightStoreDataSchema);
-          if (recoveredResult.success) {
-            this.data = recoveredResult.data;
-            this.loaded = true;
-            this.deduplicateInsights();
-            return this.data;
-          }
-        }
-        console.error("   No valid backup found, starting fresh");
-      }
-    } catch (error) {
-      console.error(`   Could not load insight store: ${error}`);
-    }
-    this.data = this.createEmptyData();
-    this.loaded = true;
-    return this.data;
-  }
-  /**
-   * Deduplicate existing insights on load
-   * Keeps the most recent instance of each unique insight
-   */
-  deduplicateInsights() {
-    const seen = /* @__PURE__ */ new Map();
-    const toRemove = [];
-    for (let i = 0; i < this.data.insights.length; i++) {
-      const insight = this.data.insights[i];
-      if (!insight) continue;
-      const contentKey = this.getContentKey(insight);
-      if (seen.has(contentKey)) {
-        toRemove.push(i);
-      } else {
-        seen.set(contentKey, i);
-      }
-    }
-    if (toRemove.length > 0) {
-      for (let i = toRemove.length - 1; i >= 0; i--) {
-        const idx = toRemove[i];
-        if (idx !== void 0) {
-          this.data.insights.splice(idx, 1);
-        }
-      }
-      this.dirty = true;
-    }
-  }
-  /**
-   * Save insights to disk
-   * 
-   * Creates backup before writing, uses atomic write.
-   */
-  async save() {
-    if (!this.dirty && this.loaded) {
-      return;
-    }
-    const storePath = this.getStorePath();
-    const memoryDir = join(getTrieDirectory(this.projectPath), "memory");
-    await mkdir(memoryDir, { recursive: true });
-    const backupManager = new BackupManager(storePath);
-    await backupManager.createBackup();
-    this.data.lastUpdated = (/* @__PURE__ */ new Date()).toISOString();
-    await atomicWriteJSON(storePath, this.data);
-    this.dirty = false;
-  }
-  /**
-   * Generate a content-based key for deduplication
-   * Insights with the same content key are considered duplicates
-   */
-  getContentKey(insight) {
-    const normalizedMessage = insight.message.replace(/\d+/g, "N").toLowerCase().trim();
-    return `${insight.type}:${insight.category}:${normalizedMessage}`;
-  }
-  /**
-   * Add an insight to the store
-   * 
-   * Checks for duplicates using both insight ID and content similarity.
-   * If a similar insight already exists (same type, category, and normalized message),
-   * updates its timestamp instead of creating a duplicate.
-   * Respects cooldowns to prevent insight spam.
-   */
-  async addInsight(insight) {
-    await this.load();
-    if (this.data.insights.some((i) => i.id === insight.id)) {
-      return false;
-    }
-    if (this.data.dismissedIds.includes(insight.id)) {
-      return false;
-    }
-    const contentKey = this.getContentKey(insight);
-    const existingIndex = this.data.insights.findIndex(
-      (i) => !i.dismissed && this.getContentKey(i) === contentKey
-    );
-    if (existingIndex >= 0) {
-      const existing = this.data.insights[existingIndex];
-      if (existing) {
-        existing.timestamp = insight.timestamp;
-        existing.message = insight.message;
-        existing.details = insight.details;
-        existing.relatedIssues = insight.relatedIssues;
-        existing.suggestedAction = insight.suggestedAction;
-        this.data.insights.splice(existingIndex, 1);
-        this.data.insights.unshift(existing);
-        this.dirty = true;
-        await this.save();
-      }
-      return false;
-    }
-    this.data.insights.unshift(insight);
-    if (this.data.insights.length > 100) {
-      this.data.insights = this.data.insights.slice(0, 100);
-    }
-    this.dirty = true;
-    await this.save();
-    return true;
-  }
-  /**
-   * Check if a cooldown has expired for an insight type
-   */
-  canCreateInsight(insightKey) {
-    const lastTime = this.data.cooldowns[insightKey];
-    const cooldown = _InsightStore.COOLDOWNS[insightKey] || 3e4;
-    if (!lastTime) return true;
-    return Date.now() - lastTime > cooldown;
-  }
-  /**
-   * Mark that an insight type was created (set cooldown)
-   */
-  async markInsightCreated(insightKey) {
-    await this.load();
-    this.data.cooldowns[insightKey] = Date.now();
-    this.dirty = true;
-    await this.save();
-  }
-  /**
-   * Get active (non-dismissed) insights
-   * 
-   * Returns insights sorted by priority (highest first),
-   * limited to the specified count.
-   */
-  getActiveInsights(limit = 5) {
-    return this.data.insights.filter((i) => !i.dismissed).sort((a, b) => b.priority - a.priority).slice(0, limit);
-  }
-  /**
-   * Get all insights (including dismissed)
-   */
-  getAllInsights() {
-    return [...this.data.insights];
-  }
-  /**
-   * Dismiss an insight by ID
-   */
-  async dismissInsight(insightId) {
-    await this.load();
-    const insight = this.data.insights.find((i) => i.id === insightId);
-    if (!insight) {
-      return false;
-    }
-    insight.dismissed = true;
-    if (!this.data.dismissedIds.includes(insightId)) {
-      this.data.dismissedIds.push(insightId);
-      if (this.data.dismissedIds.length > 500) {
-        this.data.dismissedIds = this.data.dismissedIds.slice(-500);
-      }
-    }
-    this.dirty = true;
-    await this.save();
-    return true;
-  }
-  /**
-   * Remove an insight entirely
-   */
-  async removeInsight(insightId) {
-    await this.load();
-    const index = this.data.insights.findIndex((i) => i.id === insightId);
-    if (index === -1) {
-      return false;
-    }
-    this.data.insights.splice(index, 1);
-    this.dirty = true;
-    await this.save();
-    return true;
-  }
-  /**
-   * Clear all cooldowns
-   */
-  async clearCooldowns() {
-    await this.load();
-    this.data.cooldowns = {};
-    this.dirty = true;
-    await this.save();
-  }
-  /**
-   * Get insight by ID
-   */
-  getInsight(insightId) {
-    return this.data.insights.find((i) => i.id === insightId);
-  }
-  /**
-   * Update an existing insight
-   */
-  async updateInsight(insightId, updates) {
-    await this.load();
-    const insight = this.data.insights.find((i) => i.id === insightId);
-    if (!insight) {
-      return false;
-    }
-    Object.assign(insight, updates);
-    this.dirty = true;
-    await this.save();
-    return true;
-  }
-  /**
-   * Get insights by category
-   */
-  getInsightsByCategory(category) {
-    return this.data.insights.filter((i) => i.category === category && !i.dismissed);
-  }
-  /**
-   * Get insights by type
-   */
-  getInsightsByType(type) {
-    return this.data.insights.filter((i) => i.type === type && !i.dismissed);
-  }
-  /**
-   * Get insights from the last N hours
-   */
-  getRecentInsights(hours = 24) {
-    const cutoff = Date.now() - hours * 60 * 60 * 1e3;
-    return this.data.insights.filter((i) => i.timestamp >= cutoff);
-  }
-  /**
-   * Get statistics about insights
-   */
-  getStats() {
-    const stats = {
-      total: this.data.insights.length,
-      active: 0,
-      dismissed: 0,
-      byCategory: {},
-      byType: {}
-    };
-    for (const insight of this.data.insights) {
-      if (insight.dismissed) {
-        stats.dismissed++;
-      } else {
-        stats.active++;
-      }
-      stats.byCategory[insight.category] = (stats.byCategory[insight.category] || 0) + 1;
-      stats.byType[insight.type] = (stats.byType[insight.type] || 0) + 1;
-    }
-    return stats;
-  }
-  /**
-   * Prune old insights (older than N days)
-   */
-  async pruneOldInsights(daysToKeep = 30) {
-    await this.load();
-    const cutoff = Date.now() - daysToKeep * 24 * 60 * 60 * 1e3;
-    const originalCount = this.data.insights.length;
-    this.data.insights = this.data.insights.filter((i) => i.timestamp >= cutoff);
-    const pruned = originalCount - this.data.insights.length;
-    if (pruned > 0) {
-      this.dirty = true;
-      await this.save();
-    }
-    return pruned;
-  }
-  /**
-   * Check if the store has been loaded
-   */
-  isLoaded() {
-    return this.loaded;
-  }
-  /**
-   * Force reload from disk
-   */
-  async reload() {
-    this.loaded = false;
-    this.dirty = false;
-    return this.load();
-  }
-};
-var insightStores = /* @__PURE__ */ new Map();
-function getInsightStore(projectPath) {
-  let store = insightStores.get(projectPath);
-  if (!store) {
-    store = new InsightStore(projectPath);
-    insightStores.set(projectPath, store);
-  }
-  return store;
-}
-function clearInsightStores() {
-  insightStores.clear();
-}
-
-export {
-  InsightDetailsSchema,
-  InsightSchema,
-  InsightStoreDataSchema,
-  InsightStore,
-  getInsightStore,
-  clearInsightStores
-};
-//# sourceMappingURL=chunk-T63OHG4Q.js.map

package/dist/chunk-T63OHG4Q.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/agent/insight-store.ts"],"sourcesContent":["/**\n * Insight Store - Persistent storage for insights\n * \n * Persists to: .trie/memory/insights.json\n * \n * Features:\n * - Insight persistence across restarts\n * - Cooldown state persistence (prevents duplicate insights)\n * - Dismissed insight tracking\n * - Atomic writes with backup rotation\n * - Zod validation for data integrity\n */\n\nimport { mkdir, readFile } from 'fs/promises';\nimport { existsSync } from 'fs';\nimport { join } from 'path';\nimport { getTrieDirectory } from '../utils/workspace.js';\nimport { z } from 'zod';\nimport { atomicWriteJSON } from '../utils/atomic-write.js';\nimport { BackupManager } from '../utils/backup-manager.js';\nimport { safeParseAndValidate } from '../memory/validation.js';\n\n// ============================================================================\n// Schemas\n// ============================================================================\n\n/**\n * Schema for insight details\n */\nexport const InsightDetailsSchema = z.object({\n  affectedFiles: z.array(z.string()).optional(),\n  issueBreakdown: z.record(z.string(), z.number()).optional(),\n  examples: z.array(z.string()).optional(),\n  trend: z.enum(['improving', 'stable', 'worsening']).optional(),\n  comparison: z.string().optional(),\n  resolvedCount: z.number().optional(),\n  resolvedIssues: z.array(z.object({\n    file: z.string(),\n    line: z.number().optional(),\n    issue: z.string(),\n    agent: z.string(),\n    resolvedAt: z.string().optional(),\n  })).optional(),\n  summary: z.string().optional(),\n  // Hypothesis-related fields\n  hypothesis: z.string().optional(),\n  testCriteria: z.string().optional(),\n  confidence: z.number().optional(),\n  // Pattern-related fields\n  patternsCount: z.number().optional(),\n  topPattern: z.string().optional(),\n});\n\n/**\n * Schema for an insight\n */\nexport const InsightSchema = z.object({\n  id: z.string(),\n  type: z.enum(['observation', 'warning', 'suggestion', 'celebration', 'question']),\n  message: z.string(),\n  context: z.string().optional(),\n  suggestedAction: z.string().optional(),\n  actionCommand: z.string().optional(),\n  relatedIssues: z.array(z.string()),\n  priority: z.number().min(1).max(10),\n  timestamp: z.number(),\n  dismissed: z.boolean(),\n  category: z.enum(['security', 'quality', 'performance', 'pattern', 'progress', 'general']),\n  details: InsightDetailsSchema.optional(),\n});\n\nexport type Insight = z.infer<typeof InsightSchema>;\n\n/**\n * Schema for the entire insight store file\n */\nexport const InsightStoreDataSchema = z.object({\n  version: z.literal(1),\n  insights: z.array(InsightSchema),\n  cooldowns: z.record(z.string(), z.number()), // insightKey -> timestamp\n  dismissedIds: z.array(z.string()), // Track dismissed insight IDs permanently\n  lastUpdated: z.string(),\n});\n\nexport type InsightStoreData = z.infer<typeof InsightStoreDataSchema>;\n\n// ============================================================================\n// InsightStore Class\n// ============================================================================\n\n/**\n * Persistent store for insights\n * \n * Usage:\n * ```typescript\n * const store = new InsightStore(projectPath);\n * await store.load();\n * \n * await store.addInsight(insight);\n * const active = store.getActiveInsights();\n * await store.dismissInsight(insightId);\n * ```\n */\nexport class InsightStore {\n  private projectPath: string;\n  private data: InsightStoreData;\n  private loaded: boolean = false;\n  private dirty: boolean = false;\n  \n  // Default cooldown periods (in ms)\n  static readonly COOLDOWNS: Record<string, number> = {\n    'pre-push-warning': 60000,       // 1 min between pre-push warnings\n    'security-warning': 30000,       // 30s between security warnings\n    'new-issues': 30000,             // 30s between new issue observations\n    'celebration': 60000,            // 1 min between celebrations\n    'pattern-suggestion': 120000,    // 2 min between pattern suggestions\n    'accessibility-visual-qa': 300000, // 5 min between visual QA suggestions\n    'goal-suggestion': 300000,       // 5 min between goal suggestions\n    'risk-prediction': 180000,       // 3 min between risk predictions\n    'hypothesis-update': 600000,     // 10 min between hypothesis updates\n    'auto-escalation': 300000,       // 5 min between auto-escalations\n  };\n  \n  constructor(projectPath: string) {\n    this.projectPath = projectPath;\n    this.data = this.createEmptyData();\n  }\n  \n  /**\n   * Get the storage file path\n   */\n  private getStorePath(): string {\n    return join(getTrieDirectory(this.projectPath), 'memory', 'insights.json');\n  }\n  \n  /**\n   * Create empty data structure\n   */\n  private createEmptyData(): InsightStoreData {\n    return {\n      version: 1,\n      insights: [],\n      cooldowns: {},\n      dismissedIds: [],\n      lastUpdated: new Date().toISOString(),\n    };\n  }\n  \n  /**\n   * Load insights from disk\n   * \n   * If the file is corrupted, attempts recovery from backup.\n   * Returns empty data if no valid file/backup exists.\n   */\n  async load(): Promise<InsightStoreData> {\n    if (this.loaded) {\n      return this.data;\n    }\n    \n    const storePath = this.getStorePath();\n    \n    try {\n      if (existsSync(storePath)) {\n        const content = await readFile(storePath, 'utf-8');\n        const result = safeParseAndValidate(content, InsightStoreDataSchema);\n        \n        if (result.success) {\n          this.data = result.data;\n          this.loaded = true;\n          // Deduplicate any existing duplicate insights\n          this.deduplicateInsights();\n          return this.data;\n        }\n        \n        // Validation failed - attempt recovery from backup\n        console.error(`   Insight store corrupted: ${result.error}`);\n        const backupManager = new BackupManager(storePath);\n        \n        if (await backupManager.recoverFromBackup()) {\n          console.error('   Recovered from backup');\n          const recovered = await readFile(storePath, 'utf-8');\n          const recoveredResult = safeParseAndValidate(recovered, InsightStoreDataSchema);\n          if (recoveredResult.success) {\n            this.data = recoveredResult.data;\n            this.loaded = true;\n            // Deduplicate any existing duplicate insights\n            this.deduplicateInsights();\n            return this.data;\n          }\n        }\n        \n        console.error('   No valid backup found, starting fresh');\n      }\n    } catch (error) {\n      // File doesn't exist or recovery failed - start fresh\n      console.error(`   Could not load insight store: ${error}`);\n    }\n    \n    this.data = this.createEmptyData();\n    this.loaded = true;\n    return this.data;\n  }\n  \n  /**\n   * Deduplicate existing insights on load\n   * Keeps the most recent instance of each unique insight\n   */\n  private deduplicateInsights(): void {\n    const seen = new Map<string, number>(); // contentKey -> index of first occurrence\n    const toRemove: number[] = [];\n    \n    // Process from newest to oldest (insights are sorted by recency)\n    for (let i = 0; i < this.data.insights.length; i++) {\n      const insight = this.data.insights[i];\n      if (!insight) continue;\n      \n      const contentKey = this.getContentKey(insight);\n      \n      if (seen.has(contentKey)) {\n        // This is a duplicate - mark for removal\n        toRemove.push(i);\n      } else {\n        seen.set(contentKey, i);\n      }\n    }\n    \n    // Remove duplicates (reverse order to preserve indices)\n    if (toRemove.length > 0) {\n      for (let i = toRemove.length - 1; i >= 0; i--) {\n        const idx = toRemove[i];\n        if (idx !== undefined) {\n          this.data.insights.splice(idx, 1);\n        }\n      }\n      this.dirty = true;\n    }\n  }\n  \n  /**\n   * Save insights to disk\n   * \n   * Creates backup before writing, uses atomic write.\n   */\n  async save(): Promise<void> {\n    if (!this.dirty && this.loaded) {\n      return; // No changes to save\n    }\n    \n    const storePath = this.getStorePath();\n    const memoryDir = join(getTrieDirectory(this.projectPath), 'memory');\n    \n    // Ensure directory exists\n    await mkdir(memoryDir, { recursive: true });\n    \n    // Create backup before writing\n    const backupManager = new BackupManager(storePath);\n    await backupManager.createBackup();\n    \n    // Update timestamp\n    this.data.lastUpdated = new Date().toISOString();\n    \n    // Atomic write\n    await atomicWriteJSON(storePath, this.data);\n    \n    this.dirty = false;\n  }\n  \n  /**\n   * Generate a content-based key for deduplication\n   * Insights with the same content key are considered duplicates\n   */\n  private getContentKey(insight: Insight): string {\n    // Normalize the message by removing specific numbers/counts that might vary slightly\n    // e.g., \"Found 30 security issues\" and \"Found 31 security issues\" are the same insight\n    const normalizedMessage = insight.message\n      .replace(/\\d+/g, 'N')  // Replace all numbers with N\n      .toLowerCase()\n      .trim();\n    \n    return `${insight.type}:${insight.category}:${normalizedMessage}`;\n  }\n  \n  /**\n   * Add an insight to the store\n   * \n   * Checks for duplicates using both insight ID and content similarity.\n   * If a similar insight already exists (same type, category, and normalized message),\n   * updates its timestamp instead of creating a duplicate.\n   * Respects cooldowns to prevent insight spam.\n   */\n  async addInsight(insight: Insight): Promise<boolean> {\n    await this.load();\n    \n    // Check if already exists by ID\n    if (this.data.insights.some(i => i.id === insight.id)) {\n      return false;\n    }\n    \n    // Check if ID was previously dismissed (don't re-add)\n    if (this.data.dismissedIds.includes(insight.id)) {\n      return false;\n    }\n    \n    // Check for content-based duplicates (same type, category, similar message)\n    const contentKey = this.getContentKey(insight);\n    const existingIndex = this.data.insights.findIndex(i => \n      !i.dismissed && this.getContentKey(i) === contentKey\n    );\n    \n    if (existingIndex >= 0) {\n      // Update existing insight instead of adding duplicate\n      const existing = this.data.insights[existingIndex];\n      if (existing) {\n        // Update with new data but keep the original ID\n        existing.timestamp = insight.timestamp;\n        existing.message = insight.message; // Update with current counts\n        existing.details = insight.details; // Update details\n        existing.relatedIssues = insight.relatedIssues;\n        existing.suggestedAction = insight.suggestedAction;\n        \n        // Move to front of list\n        this.data.insights.splice(existingIndex, 1);\n        this.data.insights.unshift(existing);\n        \n        this.dirty = true;\n        await this.save();\n      }\n      return false; // Return false to indicate no new insight was created\n    }\n    \n    // Add to front of list\n    this.data.insights.unshift(insight);\n    \n    // Keep only last 100 insights\n    if (this.data.insights.length > 100) {\n      this.data.insights = this.data.insights.slice(0, 100);\n    }\n    \n    this.dirty = true;\n    await this.save();\n    \n    return true;\n  }\n  \n  /**\n   * Check if a cooldown has expired for an insight type\n   */\n  canCreateInsight(insightKey: string): boolean {\n    const lastTime = this.data.cooldowns[insightKey];\n    const cooldown = InsightStore.COOLDOWNS[insightKey] || 30000;\n    \n    if (!lastTime) return true;\n    return Date.now() - lastTime > cooldown;\n  }\n  \n  /**\n   * Mark that an insight type was created (set cooldown)\n   */\n  async markInsightCreated(insightKey: string): Promise<void> {\n    await this.load();\n    this.data.cooldowns[insightKey] = Date.now();\n    this.dirty = true;\n    await this.save();\n  }\n  \n  /**\n   * Get active (non-dismissed) insights\n   * \n   * Returns insights sorted by priority (highest first),\n   * limited to the specified count.\n   */\n  getActiveInsights(limit: number = 5): Insight[] {\n    return this.data.insights\n      .filter(i => !i.dismissed)\n      .sort((a, b) => b.priority - a.priority)\n      .slice(0, limit);\n  }\n  \n  /**\n   * Get all insights (including dismissed)\n   */\n  getAllInsights(): Insight[] {\n    return [...this.data.insights];\n  }\n  \n  /**\n   * Dismiss an insight by ID\n   */\n  async dismissInsight(insightId: string): Promise<boolean> {\n    await this.load();\n    \n    const insight = this.data.insights.find(i => i.id === insightId);\n    if (!insight) {\n      return false;\n    }\n    \n    insight.dismissed = true;\n    \n    // Track permanently dismissed IDs\n    if (!this.data.dismissedIds.includes(insightId)) {\n      this.data.dismissedIds.push(insightId);\n      \n      // Keep only last 500 dismissed IDs\n      if (this.data.dismissedIds.length > 500) {\n        this.data.dismissedIds = this.data.dismissedIds.slice(-500);\n      }\n    }\n    \n    this.dirty = true;\n    await this.save();\n    \n    return true;\n  }\n  \n  /**\n   * Remove an insight entirely\n   */\n  async removeInsight(insightId: string): Promise<boolean> {\n    await this.load();\n    \n    const index = this.data.insights.findIndex(i => i.id === insightId);\n    if (index === -1) {\n      return false;\n    }\n    \n    this.data.insights.splice(index, 1);\n    this.dirty = true;\n    await this.save();\n    \n    return true;\n  }\n  \n  /**\n   * Clear all cooldowns\n   */\n  async clearCooldowns(): Promise<void> {\n    await this.load();\n    this.data.cooldowns = {};\n    this.dirty = true;\n    await this.save();\n  }\n  \n  /**\n   * Get insight by ID\n   */\n  getInsight(insightId: string): Insight | undefined {\n    return this.data.insights.find(i => i.id === insightId);\n  }\n  \n  /**\n   * Update an existing insight\n   */\n  async updateInsight(insightId: string, updates: Partial<Insight>): Promise<boolean> {\n    await this.load();\n    \n    const insight = this.data.insights.find(i => i.id === insightId);\n    if (!insight) {\n      return false;\n    }\n    \n    Object.assign(insight, updates);\n    this.dirty = true;\n    await this.save();\n    \n    return true;\n  }\n  \n  /**\n   * Get insights by category\n   */\n  getInsightsByCategory(category: Insight['category']): Insight[] {\n    return this.data.insights.filter(i => i.category === category && !i.dismissed);\n  }\n  \n  /**\n   * Get insights by type\n   */\n  getInsightsByType(type: Insight['type']): Insight[] {\n    return this.data.insights.filter(i => i.type === type && !i.dismissed);\n  }\n  \n  /**\n   * Get insights from the last N hours\n   */\n  getRecentInsights(hours: number = 24): Insight[] {\n    const cutoff = Date.now() - (hours * 60 * 60 * 1000);\n    return this.data.insights.filter(i => i.timestamp >= cutoff);\n  }\n  \n  /**\n   * Get statistics about insights\n   */\n  getStats(): {\n    total: number;\n    active: number;\n    dismissed: number;\n    byCategory: Record<string, number>;\n    byType: Record<string, number>;\n  } {\n    const stats = {\n      total: this.data.insights.length,\n      active: 0,\n      dismissed: 0,\n      byCategory: {} as Record<string, number>,\n      byType: {} as Record<string, number>,\n    };\n    \n    for (const insight of this.data.insights) {\n      if (insight.dismissed) {\n        stats.dismissed++;\n      } else {\n        stats.active++;\n      }\n      \n      stats.byCategory[insight.category] = (stats.byCategory[insight.category] || 0) + 1;\n      stats.byType[insight.type] = (stats.byType[insight.type] || 0) + 1;\n    }\n    \n    return stats;\n  }\n  \n  /**\n   * Prune old insights (older than N days)\n   */\n  async pruneOldInsights(daysToKeep: number = 30): Promise<number> {\n    await this.load();\n    \n    const cutoff = Date.now() - (daysToKeep * 24 * 60 * 60 * 1000);\n    const originalCount = this.data.insights.length;\n    \n    this.data.insights = this.data.insights.filter(i => i.timestamp >= cutoff);\n    \n    const pruned = originalCount - this.data.insights.length;\n    if (pruned > 0) {\n      this.dirty = true;\n      await this.save();\n    }\n    \n    return pruned;\n  }\n  \n  /**\n   * Check if the store has been loaded\n   */\n  isLoaded(): boolean {\n    return this.loaded;\n  }\n  \n  /**\n   * Force reload from disk\n   */\n  async reload(): Promise<InsightStoreData> {\n    this.loaded = false;\n    this.dirty = false;\n    return this.load();\n  }\n}\n\n// ============================================================================\n// Singleton Management\n// ============================================================================\n\nconst insightStores: Map<string, InsightStore> = new Map();\n\n/**\n * Get the InsightStore for a project (singleton per project)\n */\nexport function getInsightStore(projectPath: string): InsightStore {\n  let store = insightStores.get(projectPath);\n  if (!store) {\n    store = new InsightStore(projectPath);\n    insightStores.set(projectPath, store);\n  }\n  return store;\n}\n\n/**\n * Clear all InsightStore instances (for testing)\n */\nexport function clearInsightStores(): void {\n  insightStores.clear();\n}\n"],"mappings":";;;;;;;;;;;;AAaA,SAAS,OAAO,gBAAgB;AAChC,SAAS,kBAAkB;AAC3B,SAAS,YAAY;AAErB,SAAS,SAAS;AAYX,IAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAC5C,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAC1D,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACvC,OAAO,EAAE,KAAK,CAAC,aAAa,UAAU,WAAW,CAAC,EAAE,SAAS;AAAA,EAC7D,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,gBAAgB,EAAE,MAAM,EAAE,OAAO;AAAA,IAC/B,MAAM,EAAE,OAAO;AAAA,IACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,OAAO,EAAE,OAAO;AAAA,IAChB,OAAO,EAAE,OAAO;AAAA,IAChB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,CAAC,CAAC,EAAE,SAAS;AAAA,EACb,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAE7B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEhC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,YAAY,EAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAKM,IAAM,gBAAgB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,KAAK,CAAC,eAAe,WAAW,cAAc,eAAe,UAAU,CAAC;AAAA,EAChF,SAAS,EAAE,OAAO;AAAA,EAClB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EACjC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAClC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,QAAQ;AAAA,EACrB,UAAU,EAAE,KAAK,CAAC,YAAY,WAAW,eAAe,WAAW,YAAY,SAAS,CAAC;AAAA,EACzF,SAAS,qBAAqB,SAAS;AACzC,CAAC;AAOM,IAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,SAAS,EAAE,QAAQ,CAAC;AAAA,EACpB,UAAU,EAAE,MAAM,aAAa;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AAAA;AAAA,EAC1C,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA;AAAA,EAChC,aAAa,EAAE,OAAO;AACxB,CAAC;AAqBM,IAAM,eAAN,MAAM,cAAa;AAAA,EAChB;AAAA,EACA;AAAA,EACA,SAAkB;AAAA,EAClB,QAAiB;AAAA;AAAA,EAGzB,OAAgB,YAAoC;AAAA,IAClD,oBAAoB;AAAA;AAAA,IACpB,oBAAoB;AAAA;AAAA,IACpB,cAAc;AAAA;AAAA,IACd,eAAe;AAAA;AAAA,IACf,sBAAsB;AAAA;AAAA,IACtB,2BAA2B;AAAA;AAAA,IAC3B,mBAAmB;AAAA;AAAA,IACnB,mBAAmB;AAAA;AAAA,IACnB,qBAAqB;AAAA;AAAA,IACrB,mBAAmB;AAAA;AAAA,EACrB;AAAA,EAEA,YAAY,aAAqB;AAC/B,SAAK,cAAc;AACnB,SAAK,OAAO,KAAK,gBAAgB;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA,EAKQ,eAAuB;AAC7B,WAAO,KAAK,iBAAiB,KAAK,WAAW,GAAG,UAAU,eAAe;AAAA,EAC3E;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAoC;AAC1C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,UAAU,CAAC;AAAA,MACX,WAAW,CAAC;AAAA,MACZ,cAAc,CAAC;AAAA,MACf,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACtC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,OAAkC;AACtC,QAAI,KAAK,QAAQ;AACf,aAAO,KAAK;AAAA,IACd;AAEA,UAAM,YAAY,KAAK,aAAa;AAEpC,QAAI;AACF,UAAI,WAAW,SAAS,GAAG;AACzB,cAAM,UAAU,MAAM,SAAS,WAAW,OAAO;AACjD,cAAM,SAAS,qBAAqB,SAAS,sBAAsB;AAEnE,YAAI,OAAO,SAAS;AAClB,eAAK,OAAO,OAAO;AACnB,eAAK,SAAS;AAEd,eAAK,oBAAoB;AACzB,iBAAO,KAAK;AAAA,QACd;AAGA,gBAAQ,MAAM,+BAA+B,OAAO,KAAK,EAAE;AAC3D,cAAM,gBAAgB,IAAI,cAAc,SAAS;AAEjD,YAAI,MAAM,cAAc,kBAAkB,GAAG;AAC3C,kBAAQ,MAAM,0BAA0B;AACxC,gBAAM,YAAY,MAAM,SAAS,WAAW,OAAO;AACnD,gBAAM,kBAAkB,qBAAqB,WAAW,sBAAsB;AAC9E,cAAI,gBAAgB,SAAS;AAC3B,iBAAK,OAAO,gBAAgB;AAC5B,iBAAK,SAAS;AAEd,iBAAK,oBAAoB;AACzB,mBAAO,KAAK;AAAA,UACd;AAAA,QACF;AAEA,gBAAQ,MAAM,0CAA0C;AAAA,MAC1D;AAAA,IACF,SAAS,OAAO;AAEd,cAAQ,MAAM,oCAAoC,KAAK,EAAE;AAAA,IAC3D;AAEA,SAAK,OAAO,KAAK,gBAAgB;AACjC,SAAK,SAAS;AACd,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,sBAA4B;AAClC,UAAM,OAAO,oBAAI,IAAoB;AACrC,UAAM,WAAqB,CAAC;AAG5B,aAAS,IAAI,GAAG,IAAI,KAAK,KAAK,SAAS,QAAQ,KAAK;AAClD,YAAM,UAAU,KAAK,KAAK,SAAS,CAAC;AACpC,UAAI,CAAC,QAAS;AAEd,YAAM,aAAa,KAAK,cAAc,OAAO;AAE7C,UAAI,KAAK,IAAI,UAAU,GAAG;AAExB,iBAAS,KAAK,CAAC;AAAA,MACjB,OAAO;AACL,aAAK,IAAI,YAAY,CAAC;AAAA,MACxB;AAAA,IACF;AAGA,QAAI,SAAS,SAAS,GAAG;AACvB,eAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,cAAM,MAAM,SAAS,CAAC;AACtB,YAAI,QAAQ,QAAW;AACrB,eAAK,KAAK,SAAS,OAAO,KAAK,CAAC;AAAA,QAClC;AAAA,MACF;AACA,WAAK,QAAQ;AAAA,IACf;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,OAAsB;AAC1B,QAAI,CAAC,KAAK,SAAS,KAAK,QAAQ;AAC9B;AAAA,IACF;AAEA,UAAM,YAAY,KAAK,aAAa;AACpC,UAAM,YAAY,KAAK,iBAAiB,KAAK,WAAW,GAAG,QAAQ;AAGnE,UAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;AAG1C,UAAM,gBAAgB,IAAI,cAAc,SAAS;AACjD,UAAM,cAAc,aAAa;AAGjC,SAAK,KAAK,eAAc,oBAAI,KAAK,GAAE,YAAY;AAG/C,UAAM,gBAAgB,WAAW,KAAK,IAAI;AAE1C,SAAK,QAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,cAAc,SAA0B;AAG9C,UAAM,oBAAoB,QAAQ,QAC/B,QAAQ,QAAQ,GAAG,EACnB,YAAY,EACZ,KAAK;AAER,WAAO,GAAG,QAAQ,IAAI,IAAI,QAAQ,QAAQ,IAAI,iBAAiB;AAAA,EACjE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,WAAW,SAAoC;AACnD,UAAM,KAAK,KAAK;AAGhB,QAAI,KAAK,KAAK,SAAS,KAAK,OAAK,EAAE,OAAO,QAAQ,EAAE,GAAG;AACrD,aAAO;AAAA,IACT;AAGA,QAAI,KAAK,KAAK,aAAa,SAAS,QAAQ,EAAE,GAAG;AAC/C,aAAO;AAAA,IACT;AAGA,UAAM,aAAa,KAAK,cAAc,OAAO;AAC7C,UAAM,gBAAgB,KAAK,KAAK,SAAS;AAAA,MAAU,OACjD,CAAC,EAAE,aAAa,KAAK,cAAc,CAAC,MAAM;AAAA,IAC5C;AAEA,QAAI,iBAAiB,GAAG;AAEtB,YAAM,WAAW,KAAK,KAAK,SAAS,aAAa;AACjD,UAAI,UAAU;AAEZ,iBAAS,YAAY,QAAQ;AAC7B,iBAAS,UAAU,QAAQ;AAC3B,iBAAS,UAAU,QAAQ;AAC3B,iBAAS,gBAAgB,QAAQ;AACjC,iBAAS,kBAAkB,QAAQ;AAGnC,aAAK,KAAK,SAAS,OAAO,eAAe,CAAC;AAC1C,aAAK,KAAK,SAAS,QAAQ,QAAQ;AAEnC,aAAK,QAAQ;AACb,cAAM,KAAK,KAAK;AAAA,MAClB;AACA,aAAO;AAAA,IACT;AAGA,SAAK,KAAK,SAAS,QAAQ,OAAO;AAGlC,QAAI,KAAK,KAAK,SAAS,SAAS,KAAK;AACnC,WAAK,KAAK,WAAW,KAAK,KAAK,SAAS,MAAM,GAAG,GAAG;AAAA,IACtD;AAEA,SAAK,QAAQ;AACb,UAAM,KAAK,KAAK;AAEhB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,iBAAiB,YAA6B;AAC5C,UAAM,WAAW,KAAK,KAAK,UAAU,UAAU;AAC/C,UAAM,WAAW,cAAa,UAAU,UAAU,KAAK;AAEvD,QAAI,CAAC,SAAU,QAAO;AACtB,WAAO,KAAK,IAAI,IAAI,WAAW;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,mBAAmB,YAAmC;AAC1D,UAAM,KAAK,KAAK;AAChB,SAAK,KAAK,UAAU,UAAU,IAAI,KAAK,IAAI;AAC3C,SAAK,QAAQ;AACb,UAAM,KAAK,KAAK;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,kBAAkB,QAAgB,GAAc;AAC9C,WAAO,KAAK,KAAK,SACd,OAAO,OAAK,CAAC,EAAE,SAAS,EACxB,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ,EACtC,MAAM,GAAG,KAAK;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA,EAKA,iBAA4B;AAC1B,WAAO,CAAC,GAAG,KAAK,KAAK,QAAQ;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,eAAe,WAAqC;AACxD,UAAM,KAAK,KAAK;AAEhB,UAAM,UAAU,KAAK,KAAK,SAAS,KAAK,OAAK,EAAE,OAAO,SAAS;AAC/D,QAAI,CAAC,SAAS;AACZ,aAAO;AAAA,IACT;AAEA,YAAQ,YAAY;AAGpB,QAAI,CAAC,KAAK,KAAK,aAAa,SAAS,SAAS,GAAG;AAC/C,WAAK,KAAK,aAAa,KAAK,SAAS;AAGrC,UAAI,KAAK,KAAK,aAAa,SAAS,KAAK;AACvC,aAAK,KAAK,eAAe,KAAK,KAAK,aAAa,MAAM,IAAI;AAAA,MAC5D;AAAA,IACF;AAEA,SAAK,QAAQ;AACb,UAAM,KAAK,KAAK;AAEhB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cAAc,WAAqC;AACvD,UAAM,KAAK,KAAK;AAEhB,UAAM,QAAQ,KAAK,KAAK,SAAS,UAAU,OAAK,EAAE,OAAO,SAAS;AAClE,QAAI,UAAU,IAAI;AAChB,aAAO;AAAA,IACT;AAEA,SAAK,KAAK,SAAS,OAAO,OAAO,CAAC;AAClC,SAAK,QAAQ;AACb,UAAM,KAAK,KAAK;AAEhB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAgC;AACpC,UAAM,KAAK,KAAK;AAChB,SAAK,KAAK,YAAY,CAAC;AACvB,SAAK,QAAQ;AACb,UAAM,KAAK,KAAK;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA,EAKA,WAAW,WAAwC;AACjD,WAAO,KAAK,KAAK,SAAS,KAAK,OAAK,EAAE,OAAO,SAAS;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cAAc,WAAmB,SAA6C;AAClF,UAAM,KAAK,KAAK;AAEhB,UAAM,UAAU,KAAK,KAAK,SAAS,KAAK,OAAK,EAAE,OAAO,SAAS;AAC/D,QAAI,CAAC,SAAS;AACZ,aAAO;AAAA,IACT;AAEA,WAAO,OAAO,SAAS,OAAO;AAC9B,SAAK,QAAQ;AACb,UAAM,KAAK,KAAK;AAEhB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,sBAAsB,UAA0C;AAC9D,WAAO,KAAK,KAAK,SAAS,OAAO,OAAK,EAAE,aAAa,YAAY,CAAC,EAAE,SAAS;AAAA,EAC/E;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAkB,MAAkC;AAClD,WAAO,KAAK,KAAK,SAAS,OAAO,OAAK,EAAE,SAAS,QAAQ,CAAC,EAAE,SAAS;AAAA,EACvE;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAkB,QAAgB,IAAe;AAC/C,UAAM,SAAS,KAAK,IAAI,IAAK,QAAQ,KAAK,KAAK;AAC/C,WAAO,KAAK,KAAK,SAAS,OAAO,OAAK,EAAE,aAAa,MAAM;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA,EAKA,WAME;AACA,UAAM,QAAQ;AAAA,MACZ,OAAO,KAAK,KAAK,SAAS;AAAA,MAC1B,QAAQ;AAAA,MACR,WAAW;AAAA,MACX,YAAY,CAAC;AAAA,MACb,QAAQ,CAAC;AAAA,IACX;AAEA,eAAW,WAAW,KAAK,KAAK,UAAU;AACxC,UAAI,QAAQ,WAAW;AACrB,cAAM;AAAA,MACR,OAAO;AACL,cAAM;AAAA,MACR;AAEA,YAAM,WAAW,QAAQ,QAAQ,KAAK,MAAM,WAAW,QAAQ,QAAQ,KAAK,KAAK;AACjF,YAAM,OAAO,QAAQ,IAAI,KAAK,MAAM,OAAO,QAAQ,IAAI,KAAK,KAAK;AAAA,IACnE;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAiB,aAAqB,IAAqB;AAC/D,UAAM,KAAK,KAAK;AAEhB,UAAM,SAAS,KAAK,IAAI,IAAK,aAAa,KAAK,KAAK,KAAK;AACzD,UAAM,gBAAgB,KAAK,KAAK,SAAS;AAEzC,SAAK,KAAK,WAAW,KAAK,KAAK,SAAS,OAAO,OAAK,EAAE,aAAa,MAAM;AAEzE,UAAM,SAAS,gBAAgB,KAAK,KAAK,SAAS;AAClD,QAAI,SAAS,GAAG;AACd,WAAK,QAAQ;AACb,YAAM,KAAK,KAAK;AAAA,IAClB;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,WAAoB;AAClB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAoC;AACxC,SAAK,SAAS;AACd,SAAK,QAAQ;AACb,WAAO,KAAK,KAAK;AAAA,EACnB;AACF;AAMA,IAAM,gBAA2C,oBAAI,IAAI;AAKlD,SAAS,gBAAgB,aAAmC;AACjE,MAAI,QAAQ,cAAc,IAAI,WAAW;AACzC,MAAI,CAAC,OAAO;AACV,YAAQ,IAAI,aAAa,WAAW;AACpC,kBAAc,IAAI,aAAa,KAAK;AAAA,EACtC;AACA,SAAO;AACT;AAKO,SAAS,qBAA2B;AACzC,gBAAc,MAAM;AACtB;","names":[]}