appsec-agent 2.7.0 → 3.0.1

package/README.md

@@ -98,24 +98,6 @@ The agents can be configured through environment variables and configuration fil
 
 Configuration file: `conf/appsec_agent.yaml`
 
-### Optional: LLM failover (Anthropic → OpenAI)
-
-**Failover is off by default.** The agent uses Anthropic only unless you enable failover. When enabled, if the Anthropic call fails (e.g. API outage or rate limit), the agent will retry using the OpenAI API so the parent app gets a single response path.
-
-To enable failover, set:
-
-- `FAILOVER_ENABLED`: set to `true` to enable (default is disabled).
-- `OPENAI_API_KEY`: your OpenAI API key (required when failover is enabled).
-- `OPENAI_BASE_URL`: (optional) custom OpenAI endpoint.
-- `OPENAI_FALLBACK_MODEL`: (optional) model to use for fallback (e.g. `gpt-4o`); default is `gpt-4o`.
-
-**CLI overrides env overrides config.** You can use:
-
-- `--failover`: enable failover for this run.
-- `--openai-api-key <key>`: OpenAI API key for this run (overrides `OPENAI_API_KEY`).
-
-When failover runs, all agents (simple query, code reviewer, threat modeler, diff reviewer) use the same prompt and system message; tooled agents do not run tools on the fallback path. The response shape is unchanged so the parent app is unaffected.
-
 ## 🤖 Available Agents
 
 ### Simple Query Agent (`simple_query_agent`)
@@ -291,6 +273,63 @@ $ npx agent-run -r pr_adversary --adversarial-context candidates.json --diff-con
 
 - **`--experiment-enabled`:** adds stricter false-positive instructions for this pass; for `pr_reviewer`, also tightens the initial diff review when your integrator passes this flag.
 
+#### Full-repo adversarial false-positive filter (`fp_adversary`, v2.8.0)
+
+The Lane-2 counterpart to `pr_adversary`: where `pr_adversary` re-filters PR-scoped findings, `fp_adversary` operates over a whole repository's first-pass `code_reviewer` findings and emits a per-finding **verdict** (`confirm` or `dismiss`) with a numeric 0–1 confidence and a concrete rationale. The output shape is a dedicated `fp_adversary_report` (distinct from `security_review_report`) so the parent app can route low-confidence dismissals to a "pre-dismissed" UI state and auto-dismiss only above an operator-configured confidence threshold.
+
+```bash
+# Full-repo false-positive filter — same --adversarial-context flag, distinct input/output schema.
+$ npx agent-run -r fp_adversary --adversarial-context fp_in.json -s ./repo -f json \
+  -o fp_adversary_report.json
+```
+
+**Input shape** (`findings[].fingerprint` is the round-trip key; the four posture fields and `similar_dismissed` precedent array are all optional but recommended):
+
+```json
+{
+  "findings": [
+    {
+      "fingerprint": "fp-sha256-of-cwe-file-snippet-line",
+      "id": "SEC-001",
+      "title": "SQL injection",
+      "file": "src/db.ts",
+      "description": "…",
+      "severity": "HIGH",
+      "confidence": "MEDIUM",
+      "cwe_id": "CWE-89"
+    }
+  ],
+  "project_summary": "A Next.js SaaS app",
+  "security_context": "Prisma ORM with parameterized queries",
+  "deployment_context": "Vercel, multi-tenant",
+  "developer_context": "PHI handling rules apply to user_data",
+  "similar_dismissed": [
+    { "fingerprint": "fp-old", "file": "src/db.ts", "cwe": "CWE-89", "dismissal_reason": "Prisma parameterized query" }
+  ],
+  "metadata": { "project_name": "parent-app" }
+}
+```
+
+**Output shape:**
+
+```json
+{
+  "fp_adversary_report": {
+    "verdicts": [
+      {
+        "fingerprint": "fp-sha256-of-cwe-file-snippet-line",
+        "verdict": "dismiss",
+        "confidence": 0.92,
+        "rationale": "Prisma parameterized query mitigates; no concrete bypass path observed.",
+        "cost_usd_estimate": 0.001
+      }
+    ]
+  }
+}
+```
+
+`fp_adversary` is MCP-aware: passing `--mcp-server-url` exposes `queryFindingsHistory`, `queryImportGraph`, `queryCodebaseGraph`, and `queryRuntimeEnrichment` at runtime so the agent can verify reachability before confirming.
+
 **Input file shape** (minimum per finding: `id`, `title`, `file`, `description`):
 
 ```json

package/conf/appsec_agent.yaml

@@ -55,6 +55,19 @@ default: &default
       output_format: "json"
       max_turns: 15
       verbose: True
+  fp_adversary:
+    options:
+      # v2.8.0 / parent app full-repo Phase 2.5: full-tree adversarial false-positive
+      # filter that emits per-finding (fingerprint, verdict, confidence, rationale)
+      # verdicts so the parent app can route low-confidence dismissals to a
+      # pre_dismissed UI state and auto-dismiss only above the operator-configured
+      # threshold. Structured posture inputs (project_summary, security_context,
+      # deployment_context, developer_context) come in via --adversarial-context
+      # and are weighted ahead of any extra integrator context.
+      system_prompt: "You are a senior application security engineer performing an adversarial false-positive review on a full-repository security scan. For each candidate finding, return a verdict (confirm or dismiss) with a numeric 0.0-1.0 confidence and a concrete rationale. Weight the supplied project posture (security context, deployment context, developer guidance) when assessing each finding. Use Read/Grep and any available MCP tools (queryImportGraph, queryCodebaseGraph, queryRuntimeEnrichment) to verify reachability before confirming. Dismiss only when you can name the specific mitigation, the reachability gap, or the test-only nature of the code."
+      output_format: "json"
+      max_turns: 15
+      verbose: True
   context_extractor:
     options:
       output_format: "json"

package/dist/bin/agent-run.js

@@ -75,9 +75,7 @@ program
     .option('--diff-max-files <n>', 'Max files to include in PR review; rest skipped. Overrides config.')
     .option('--diff-exclude <pattern>', 'Exclude path pattern (repeatable). Overrides config.', (v, acc) => { acc.push(v); return acc; }, [])
     .option('-m, --model <model>', 'Claude model: family alias (sonnet, opus, haiku), SDK model ID (claude-sonnet-4-6), or version prefix (sonnet-4-6) - default to "opus"', 'opus')
-    .option('-F, --failover', 'Enable failover to OpenAI when Anthropic fails (optional feature, off by default). Overrides FAILOVER_ENABLED env.')
-    .option('-K, --openai-api-key <key>', 'OpenAI API key for failover (overrides OPENAI_API_KEY env). Only used when failover is enabled.')
-    .option('-U, --openai-base-url <url>', 'OpenAI API base URL for failover (overrides OPENAI_BASE_URL env). Only used when failover is enabled.')
+    .option('--provider <provider>', 'Model provider: claude (default) or codex (opt-in; all roles via RoleSpec)', 'claude')
     .option('--max-turns <n>', 'Max agent turns (tool-use iterations). Overrides per-role default.')
     .option('--no-tools', 'Disable Read/Grep tools for single-turn analysis (use with --diff-context for fastest mode)')
     .option('--mcp-server-url <url>', 'URL of a parent-app-managed per-scan MCP server exposing queryFindingsHistory / queryImportGraph / queryRuntimeEnrichment / queryCodebaseGraph (v2.4.0 wire + v2.7.0 fourth tool). When set, agents call these tools live instead of (or in addition to) the front-loaded JSON paths.')
@@ -119,26 +117,25 @@ if (options.anthropicApiKey) {
 if (options.anthropicBaseUrl) {
     process.env.ANTHROPIC_BASE_URL = options.anthropicBaseUrl;
 }
-// Failover: CLI overrides env. Set env so adapter reads them.
-if (options.failover !== undefined) {
-    process.env.FAILOVER_ENABLED = options.failover ? 'true' : 'false';
-}
-if (options.openaiApiKey !== undefined) {
-    console.warn('⚠️  SECURITY WARNING: OpenAI API key provided via command line argument.');
-    console.warn('   For better security, use the OPENAI_API_KEY environment variable instead.\n');
-    process.env.OPENAI_API_KEY = options.openaiApiKey;
-}
-if (options.openaiBaseUrl !== undefined) {
-    process.env.OPENAI_BASE_URL = options.openaiBaseUrl;
+const providerId = (options.provider ?? 'claude').toLowerCase().trim();
+if (providerId !== 'claude' && providerId !== 'codex') {
+    console.error(`Error: Invalid provider "${options.provider}". Valid values: claude, codex`);
+    process.exit(1);
 }
-// Validate model option: accept family aliases, SDK model IDs, or version prefixes
+process.env.AGENT_PROVIDER = providerId;
+// Validate model option: provider-aware (Claude aliases/IDs vs Codex/OpenAI ids)
 const FAMILY_ALIASES = ['sonnet', 'opus', 'haiku'];
 const model = options.model.toLowerCase().trim();
-const isValidModel = FAMILY_ALIASES.includes(model)
+const isClaudeModel = FAMILY_ALIASES.includes(model)
     || model.startsWith('claude-')
     || FAMILY_ALIASES.some(f => model.startsWith(`${f}-`));
+const isCodexModel = model.startsWith('gpt-') || model.startsWith('o');
+const isValidModel = providerId === 'codex' ? (isCodexModel || isClaudeModel) : isClaudeModel;
 if (!isValidModel) {
-    console.error(`Error: Invalid model "${options.model}". Valid formats: family alias (sonnet, opus, haiku), SDK model ID (claude-sonnet-4-6), or version prefix (sonnet-4-6)`);
+    const hint = providerId === 'codex'
+        ? 'Codex/OpenAI id (gpt-*, o*) or Claude alias (sonnet, opus, haiku)'
+        : 'family alias (sonnet, opus, haiku), SDK model ID (claude-sonnet-4-6), or version prefix (sonnet-4-6)';
+    console.error(`Error: Invalid model "${options.model}". Valid formats for ${providerId}: ${hint}`);
     process.exit(1);
 }
 // Prepare args (chunking: CLI overrides config; main will merge with conf)
@@ -246,11 +243,12 @@ if (args.mcp_server_url) {
         'pr_reviewer',
         'code_reviewer',
         'pr_adversary',
+        'fp_adversary',
         'finding_validator',
         'code_fixer',
     ]);
     if (!mcpAwareRoles.has(args.role)) {
-        console.warn('⚠️  Warning: --mcp-server-url is only consumed by pr_reviewer / code_reviewer / pr_adversary / finding_validator / code_fixer.');
+        console.warn('⚠️  Warning: --mcp-server-url is only consumed by pr_reviewer / code_reviewer / pr_adversary / fp_adversary / finding_validator / code_fixer.');
         console.warn(`   Current role: ${args.role}. The MCP server config will be ignored.\n`);
     }
 }

package/dist/bin/agent-run.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-run.js","sourceRoot":"","sources":["../../bin/agent-run.ts"],"names":[],"mappings":";;AACA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2CAA6B;AAC7B,yCAAoC;AAEpC,yCAAyC;AACzC,0FAA0F;AAC1F,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;AAChH,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;AAC9D,MAAM,EAAE,wBAAwB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAEnG,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,uCAAuC,CAAC;KACpD,MAAM,CAAC,mBAAmB,EAAE,gFAAgF,CAAC;KAC7G,MAAM,CAAC,yBAAyB,EAAE,wDAAwD,EAAE,aAAa,CAAC;KAC1G,MAAM,CAAC,mBAAmB,EAAE,0GAA0G,EAAE,oBAAoB,CAAC;KAC7J,MAAM,CAAC,qBAAqB,EAAE,wEAAwE,CAAC;KACvG,MAAM,CAAC,0BAA0B,EAAE,gFAAgF,CAAC;KACpH,MAAM,CAAC,8BAA8B,EAAE,uEAAuE,EAAE,UAAU,CAAC;KAC3H,MAAM,CAAC,+BAA+B,EAAE,sEAAsE,CAAC;KAC/G,MAAM,CAAC,gCAAgC,EAAE,4EAA4E,CAAC;KACtH,MAAM,CAAC,yBAAyB,EAAE,8GAA8G,CAAC;KACjJ,MAAM,CAAC,uBAAuB,EAAE,gFAAgF,CAAC;KACjH,MAAM,CAAC,sBAAsB,EAAE,yEAAyE,CAAC;KACzG,MAAM,CAAC,qBAAqB,EAAE,8EAA8E,CAAC;KAC7G,MAAM,CAAC,yBAAyB,EAAE,mFAAmF,CAAC;KACtH,MAAM,CACL,8BAA8B,EAC9B,mGAAmG,CACpG;KACA,MAAM,CACL,+BAA+B,EAC/B,gHAAgH,CACjH;KACA,MAAM,CACL,qCAAqC,EACrC,kIAAkI,CACnI;KACA,MAAM,CACL,iCAAiC,EACjC,4LAA4L,CAC7L;KACA,MAAM,CACL,iBAAiB,EACjB,4JAA4J,CAC7J;KACA,MAAM,CACL,sBAAsB,EACtB,sGAAsG,CACvG;KACA,MAAM,CAAC,0BAA0B,EAAE,sFAAsF,CAAC;KAC1H,MAAM,CAAC,uBAAuB,EAAE,wEAAwE,CAAC;KACzG,MAAM,CAAC,wBAAwB,EAAE,oDAAoD,CAAC;KACtF,MAAM,CAAC,sBAAsB,EAAE,oEAAoE,CAAC;KACpG,MAAM,CAAC,0BAA0B,EAAE,sDAAsD,EAAE,CAAC,CAAS,EAAE,GAAa,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;KAC1J,MAAM,CAAC,qBAAqB,EAAE,wIAAwI,EAAE,MAAM,CAAC;KAC/K,MAAM,CAAC,gBAAgB,EAAE,oHAAoH,CAAC;KAC9I,MAAM,CAAC,4BAA4B,EAAE,iGAAiG,CAAC;KACvI,MAAM,CAAC,6BAA6B,EAAE,uGAAuG,CAAC;KAC9I,MAAM,CAAC,iBAAiB,EAAE,oEAAoE,CAAC;KAC/F,MAAM,CAAC,YAAY,EAAE,6FAA6F,CAAC;KACnH,MAAM,CACL,wBAAwB,EACxB,uRAAuR,CACxR;KACA,MAAM,CACL,0BAA0B,EAC1B,uUAAuU,CACxU;KACA,MAAM,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;KACtD,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC;KAC1C,MAAM,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;AAE3C,OAAO,CAAC,KAAK,EAAE,CAAC;AAEhB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;AAE/B,sBAAsB;AACtB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACpB,gBAAgB,EAAE,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,sCAAsC;AACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAE1F,OAAO,CAAC,GAAG,CAAC,6CAA6C,EAAE,QAAQ,CAAC,CAAC;AACrE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AAErD,IAAI,CAAC,QAAQ,EAAE,CAAC;IACd,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;AAEpE,yBAAyB;AACzB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IACvB,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,uEAAuE;AACvE,yFAAyF;AACzF,0EAA0E;AAC1E,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAC5B,OAAO,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IAClF,OAAO,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;IAC7F,OAAO,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;IAClG,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;AAC1D,CAAC;AACD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,CAAC;AAC5D,CAAC;AAED,8DAA8D;AAC9D,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AACrE,CAAC;AACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IACzF,OAAO,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;AACpD,CAAC;AACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;AACtD,CAAC;AAED,mFAAmF;AACnF,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACjD,MAAM,YAAY,GAAG,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC;OAC9C,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;OAC3B,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACzD,IAAI,CAAC,YAAY,EAAE,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,yBAAyB,OAAO,CAAC,KAAK,wHAAwH,CAAC,CAAC;IAC9K,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,2EAA2E;AAC3E,MAAM,SAAS,GAAG,wBAAwB,CAAC;IACzC,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,aAAa,EAAE,OAAO,CAAC,aAAa;CACrC,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG;IACX,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,WAAW,EAAE,OAAO,CAAC,WAAW;IAChC,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,WAAW,EAAE,OAAO,CAAC,WAAW;IAChC,aAAa,EAAE,OAAO,CAAC,aAAa;IACpC,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,YAAY,EAAE,OAAO,CAAC,WAAW;IACjC,WAAW,EAAE,OAAO,CAAC,UAAU;IAC/B,UAAU,EAAE,OAAO,CAAC,SAAS;IAC7B,cAAc,EAAE,OAAO,CAAC,aAAa;IACrC,eAAe,EAAE,OAAO,CAAC,cAAc;IACvC,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;IAC/C,oBAAoB,EAAE,OAAO,CAAC,kBAAkB;IAChD,0BAA0B,EAAE,OAAO,CAAC,wBAAwB;IAC5D,sBAAsB,EAAE,OAAO,CAAC,oBAAoB;IACpD,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,kBAAkB,EAAE,OAAO,CAAC,iBAAiB,KAAK,IAAI;IACtD,KAAK,EAAE,KAAK;IACZ,yBAAyB,EAAE,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;IAChH,gBAAgB,EAAE,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;IACzG,cAAc,EAAE,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;IACnG,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;IACpH,SAAS,EAAE,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;IACtF,QAAQ,EAAE,OAAO,CAAC,OAAO,KAAK,IAAI;IAClC,GAAG,SAAS;CACb,CAAC;AAEF,0BAA0B;AAC1B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,+DAA+D;AAC/D,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;QACrG,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,qCAAqC,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,0EAA0E;AAC1E,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;QAC1G,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,+BAA+B,6CAA6C,CAAC,CAAC;QACpJ,OAAO,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,kEAAkE;AAClE,qEAAqE;AACrE,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,wCAAwC,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvF,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;QAChH,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,+BAA+B,mDAAmD,CAAC,CAAC;QAC1J,OAAO,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,kEAAkE;AAClE,sEAAsE;AACtE,gCAAgC;AAChC,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;QAC5G,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,+BAA+B,+CAA+C,CAAC,CAAC;QACtJ,OAAO,CAAC,IAAI,CAAC,+FAA+F,CAAC,CAAC;IAChH,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,oEAAoE;AACpE,eAAe;AACf,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,IAAI,KAAK,8BAA8B,EAAE,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,oCAAoC,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,iEAAiE;AACjE,wEAAwE;AACxE,qEAAqE;AACrE,uEAAuE;AACvE,mDAAmD;AACnD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;QAC5B,aAAa;QACb,eAAe;QACf,cAAc;QACd,mBAAmB;QACnB,YAAY;KACb,CAAC,CAAC;IACH,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,gIAAgI,CAAC,CAAC;QAC/I,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,4CAA4C,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;KAAM,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;IAChC,uEAAuE;IACvE,oEAAoE;IACpE,8BAA8B;IAC9B,OAAO,CAAC,IAAI,CACV,yHAAyH,CAC1H,CAAC;AACJ,CAAC;AAED,oBAAoB;AACpB,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;IAC1C,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"agent-run.js","sourceRoot":"","sources":["../../bin/agent-run.ts"],"names":[],"mappings":";;AACA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2CAA6B;AAC7B,yCAAoC;AAEpC,yCAAyC;AACzC,0FAA0F;AAC1F,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;AAChH,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;AAC9D,MAAM,EAAE,wBAAwB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC,CAAC;AAEnG,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,uCAAuC,CAAC;KACpD,MAAM,CAAC,mBAAmB,EAAE,gFAAgF,CAAC;KAC7G,MAAM,CAAC,yBAAyB,EAAE,wDAAwD,EAAE,aAAa,CAAC;KAC1G,MAAM,CAAC,mBAAmB,EAAE,0GAA0G,EAAE,oBAAoB,CAAC;KAC7J,MAAM,CAAC,qBAAqB,EAAE,wEAAwE,CAAC;KACvG,MAAM,CAAC,0BAA0B,EAAE,gFAAgF,CAAC;KACpH,MAAM,CAAC,8BAA8B,EAAE,uEAAuE,EAAE,UAAU,CAAC;KAC3H,MAAM,CAAC,+BAA+B,EAAE,sEAAsE,CAAC;KAC/G,MAAM,CAAC,gCAAgC,EAAE,4EAA4E,CAAC;KACtH,MAAM,CAAC,yBAAyB,EAAE,8GAA8G,CAAC;KACjJ,MAAM,CAAC,uBAAuB,EAAE,gFAAgF,CAAC;KACjH,MAAM,CAAC,sBAAsB,EAAE,yEAAyE,CAAC;KACzG,MAAM,CAAC,qBAAqB,EAAE,8EAA8E,CAAC;KAC7G,MAAM,CAAC,yBAAyB,EAAE,mFAAmF,CAAC;KACtH,MAAM,CACL,8BAA8B,EAC9B,mGAAmG,CACpG;KACA,MAAM,CACL,+BAA+B,EAC/B,gHAAgH,CACjH;KACA,MAAM,CACL,qCAAqC,EACrC,kIAAkI,CACnI;KACA,MAAM,CACL,iCAAiC,EACjC,4LAA4L,CAC7L;KACA,MAAM,CACL,iBAAiB,EACjB,4JAA4J,CAC7J;KACA,MAAM,CACL,sBAAsB,EACtB,sGAAsG,CACvG;KACA,MAAM,CAAC,0BAA0B,EAAE,sFAAsF,CAAC;KAC1H,MAAM,CAAC,uBAAuB,EAAE,wEAAwE,CAAC;KACzG,MAAM,CAAC,wBAAwB,EAAE,oDAAoD,CAAC;KACtF,MAAM,CAAC,sBAAsB,EAAE,oEAAoE,CAAC;KACpG,MAAM,CAAC,0BAA0B,EAAE,sDAAsD,EAAE,CAAC,CAAS,EAAE,GAAa,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;KAC1J,MAAM,CAAC,qBAAqB,EAAE,wIAAwI,EAAE,MAAM,CAAC;KAC/K,MAAM,CACL,uBAAuB,EACvB,4EAA4E,EAC5E,QAAQ,CACT;KACA,MAAM,CAAC,iBAAiB,EAAE,oEAAoE,CAAC;KAC/F,MAAM,CAAC,YAAY,EAAE,6FAA6F,CAAC;KACnH,MAAM,CACL,wBAAwB,EACxB,uRAAuR,CACxR;KACA,MAAM,CACL,0BAA0B,EAC1B,uUAAuU,CACxU;KACA,MAAM,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;KACtD,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC;KAC1C,MAAM,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;AAE3C,OAAO,CAAC,KAAK,EAAE,CAAC;AAEhB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;AAE/B,sBAAsB;AACtB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACpB,gBAAgB,EAAE,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,sCAAsC;AACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAE1F,OAAO,CAAC,GAAG,CAAC,6CAA6C,EAAE,QAAQ,CAAC,CAAC;AACrE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AAErD,IAAI,CAAC,QAAQ,EAAE,CAAC;IACd,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;AAEpE,yBAAyB;AACzB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IACvB,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;IAC3D,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,uEAAuE;AACvE,yFAAyF;AACzF,0EAA0E;AAC1E,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAC5B,OAAO,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IAClF,OAAO,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;IAC7F,OAAO,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;IAClG,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;AAC1D,CAAC;AACD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACvE,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;IACtD,OAAO,CAAC,KAAK,CAAC,4BAA4B,OAAO,CAAC,QAAQ,gCAAgC,CAAC,CAAC;IAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,UAAU,CAAC;AAExC,iFAAiF;AACjF,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACjD,MAAM,aAAa,GACjB,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC;OAC3B,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;OAC3B,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACzD,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACvE,MAAM,YAAY,GAAG,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;AAC9F,IAAI,CAAC,YAAY,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG,UAAU,KAAK,OAAO;QACjC,CAAC,CAAC,mEAAmE;QACrE,CAAC,CAAC,sGAAsG,CAAC;IAC3G,OAAO,CAAC,KAAK,CAAC,yBAAyB,OAAO,CAAC,KAAK,wBAAwB,UAAU,KAAK,IAAI,EAAE,CAAC,CAAC;IACnG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,2EAA2E;AAC3E,MAAM,SAAS,GAAG,wBAAwB,CAAC;IACzC,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,aAAa,EAAE,OAAO,CAAC,aAAa;CACrC,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG;IACX,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,WAAW,EAAE,OAAO,CAAC,WAAW;IAChC,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,WAAW,EAAE,OAAO,CAAC,WAAW;IAChC,aAAa,EAAE,OAAO,CAAC,aAAa;IACpC,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,YAAY,EAAE,OAAO,CAAC,WAAW;IACjC,WAAW,EAAE,OAAO,CAAC,UAAU;IAC/B,UAAU,EAAE,OAAO,CAAC,SAAS;IAC7B,cAAc,EAAE,OAAO,CAAC,aAAa;IACrC,eAAe,EAAE,OAAO,CAAC,cAAc;IACvC,mBAAmB,EAAE,OAAO,CAAC,kBAAkB;IAC/C,oBAAoB,EAAE,OAAO,CAAC,kBAAkB;IAChD,0BAA0B,EAAE,OAAO,CAAC,wBAAwB;IAC5D,sBAAsB,EAAE,OAAO,CAAC,oBAAoB;IACpD,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,kBAAkB,EAAE,OAAO,CAAC,iBAAiB,KAAK,IAAI;IACtD,KAAK,EAAE,KAAK;IACZ,yBAAyB,EAAE,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;IAChH,gBAAgB,EAAE,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;IACzG,cAAc,EAAE,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;IACnG,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;IACpH,SAAS,EAAE,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;IACtF,QAAQ,EAAE,OAAO,CAAC,OAAO,KAAK,IAAI;IAClC,GAAG,SAAS;CACb,CAAC;AAEF,0BAA0B;AAC1B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,+DAA+D;AAC/D,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;QACrG,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,qCAAqC,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,0EAA0E;AAC1E,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;QAC1G,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,+BAA+B,6CAA6C,CAAC,CAAC;QACpJ,OAAO,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,kEAAkE;AAClE,qEAAqE;AACrE,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,wCAAwC,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvF,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;QAChH,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,+BAA+B,mDAAmD,CAAC,CAAC;QAC1J,OAAO,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,kEAAkE;AAClE,sEAAsE;AACtE,gCAAgC;AAChC,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;QAC5G,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,+BAA+B,+CAA+C,CAAC,CAAC;QACtJ,OAAO,CAAC,IAAI,CAAC,+FAA+F,CAAC,CAAC;IAChH,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,oEAAoE;AACpE,eAAe;AACf,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,IAAI,KAAK,8BAA8B,EAAE,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,oCAAoC,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,iEAAiE;AACjE,wEAAwE;AACxE,qEAAqE;AACrE,uEAAuE;AACvE,mDAAmD;AACnD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;QAC5B,aAAa;QACb,eAAe;QACf,cAAc;QACd,cAAc;QACd,mBAAmB;QACnB,YAAY;KACb,CAAC,CAAC;IACH,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,+IAA+I,CAAC,CAAC;QAC9J,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,4CAA4C,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;KAAM,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;IAChC,uEAAuE;IACvE,oEAAoE;IACpE,8BAA8B;IAC9B,OAAO,CAAC,IAAI,CACV,yHAAyH,CAC1H,CAAC;AACJ,CAAC;AAED,oBAAoB;AACpB,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;IAC1C,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/conf/appsec_agent.yaml

@@ -55,6 +55,19 @@ default: &default
       output_format: "json"
       max_turns: 15
       verbose: True
+  fp_adversary:
+    options:
+      # v2.8.0 / parent app full-repo Phase 2.5: full-tree adversarial false-positive
+      # filter that emits per-finding (fingerprint, verdict, confidence, rationale)
+      # verdicts so the parent app can route low-confidence dismissals to a
+      # pre_dismissed UI state and auto-dismiss only above the operator-configured
+      # threshold. Structured posture inputs (project_summary, security_context,
+      # deployment_context, developer_context) come in via --adversarial-context
+      # and are weighted ahead of any extra integrator context.
+      system_prompt: "You are a senior application security engineer performing an adversarial false-positive review on a full-repository security scan. For each candidate finding, return a verdict (confirm or dismiss) with a numeric 0.0-1.0 confidence and a concrete rationale. Weight the supplied project posture (security context, deployment context, developer guidance) when assessing each finding. Use Read/Grep and any available MCP tools (queryImportGraph, queryCodebaseGraph, queryRuntimeEnrichment) to verify reachability before confirming. Dismiss only when you can name the specific mitigation, the reachability gap, or the test-only nature of the code."
+      output_format: "json"
+      max_turns: 15
+      verbose: True
   context_extractor:
     options:
       output_format: "json"

package/dist/src/__tests__/mocks/codex_sdk.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Jest stub for @openai/codex-sdk (ESM-only; CI stays mock-only).
+ */
+export declare const Codex: jest.Mock<any, any, any>;
+export type CodexOptions = {
+    codexPathOverride?: string;
+    baseUrl?: string;
+    apiKey?: string;
+    config?: Record<string, unknown>;
+    env?: Record<string, string>;
+};
+export type Input = string | Array<{
+    type: string;
+    text?: string;
+    path?: string;
+}>;
+export type ThreadOptions = Record<string, unknown>;
+export type TurnOptions = {
+    outputSchema?: unknown;
+    signal?: AbortSignal;
+};
+export type ThreadEvent = {
+    type: 'item.updated';
+    item: {
+        id: string;
+        type: string;
+        text?: string;
+    };
+} | {
+    type: 'item.completed';
+    item: {
+        id: string;
+        type: string;
+        text?: string;
+    };
+} | {
+    type: 'turn.completed';
+    usage: {
+        input_tokens: number;
+        output_tokens: number;
+        cached_input_tokens: number;
+        reasoning_output_tokens: number;
+    };
+} | {
+    type: 'turn.failed';
+    error: {
+        message: string;
+    };
+} | {
+    type: 'error';
+    message: string;
+};
+//# sourceMappingURL=codex_sdk.d.ts.map

package/dist/src/__tests__/mocks/codex_sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex_sdk.d.ts","sourceRoot":"","sources":["../../../../src/__tests__/mocks/codex_sdk.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,KAAK,0BAAY,CAAC;AAE/B,MAAM,MAAM,YAAY,GAAG;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEnF,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACpD,MAAM,MAAM,WAAW,GAAG;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,CAAC;AAE3E,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC7E;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,uBAAuB,EAAE,MAAM,CAAC;KACjC,CAAC;CACH,GACD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/src/__tests__/mocks/codex_sdk.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Jest stub for @openai/codex-sdk (ESM-only; CI stays mock-only).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Codex = void 0;
+exports.Codex = jest.fn();
+//# sourceMappingURL=codex_sdk.js.map

package/dist/src/__tests__/mocks/codex_sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex_sdk.js","sourceRoot":"","sources":["../../../../src/__tests__/mocks/codex_sdk.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEU,QAAA,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC"}

package/dist/src/agent_actions.d.ts

@@ -82,13 +82,20 @@ export declare class AgentActions {
      */
     simpleQueryClaudeWithOptions(yourPrompt: string, srcDir?: string | null): Promise<string>;
     /**
-     * Secure code reviewer with options
+     * Secure code reviewer with options.
+     *
+     * v2.8.0 (B5a fix): MCP params are now threaded through to
+     * `getCodeReviewerOptions` so the SDK gets the per-scan MCP server config
+     * for full-repo `code_reviewer` runs. Previously the spawn accepted
+     * `--mcp-server-name` argv but the agent options never wired the URL,
+     * leaving the agent without `queryCodebaseGraph` / `queryImportGraph` /
+     * `queryRuntimeEnrichment` / `queryFindingsHistory` access.
      */
     codeReviewerWithOptions(userPrompt: string): Promise<string>;
     /**
      * Threat modeler agent with options
      */
-    threatModelerAgentWithOptions(userPrompt: string): Promise<string>;
+    threatModelerAgentWithOptions(userPrompt: string, srcDir?: string | null): Promise<string>;
     /**
      * Code fixer agent with structured JSON output.
      * Returns the structured fix JSON and prints cost to stdout.
@@ -118,6 +125,19 @@ export declare class AgentActions {
      * `learned_guidance_synthesis_runs.cost_usd` column.
      */
     learnedGuidanceSynthesizerWithOptions(userPrompt: string): Promise<string>;
+    /**
+     * fp_adversary (v2.8.0 / parent app full-repo Phase 2.5): batch false-positive
+     * filter over first-pass code_reviewer findings. Emits structured JSON
+     * matching `FP_ADVERSARY_REPORT_SCHEMA` with per-finding
+     * `(fingerprint, verdict, confidence, rationale, cost_usd_estimate?)`.
+     *
+     * The Claude Agent SDK's `total_cost_usd` is threaded onto every emitted
+     * verdict as `cost_usd_estimate` so the parent app can run a
+     * deterministic cost-cap accumulator without re-counting tokens. When
+     * the SDK omits cost (e.g. error path), the field is absent and the
+     * parent app falls back to a conservative per-finding estimate.
+     */
+    fpAdversaryWithOptions(userPrompt: string, srcDir?: string | null): Promise<string>;
     /**
      * pr_adversary: batch adversarial pass over candidate findings (structured security report out).
      */

package/dist/src/agent_actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent_actions.d.ts","sourceRoot":"","sources":["../../src/agent_actions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGrC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yGAAyG;IACzG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,6FAA6F;IAC7F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,yGAAyG;IACzG,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,gJAAgJ;IAChJ,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,+GAA+G;IAC/G,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;OAaG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAOD,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,IAAI,CAAY;IACxB,OAAO,CAAC,mBAAmB,CAA2B;gBAC1C,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS;IAMtE;;OAEG;IACG,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAiJ/F;;OAEG;IACG,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAiHlE;;OAEG;IACG,6BAA6B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA4DxE;;;OAGG;IACG,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IA2DvF;;;OAGG;IACG,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAqDxF;;;OAGG;IACG,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAqDtE;;;OAGG;IACG,2BAA2B,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IA2D9F;;;;;;;OAOG;IACG,qCAAqC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAsEhF;;OAEG;IACG,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IA6DzF;;;;OAIG;IACG,uBAAuB,CAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,EACxD,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC;CAsInB"}
+{"version":3,"file":"agent_actions.d.ts","sourceRoot":"","sources":["../../src/agent_actions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGrC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yGAAyG;IACzG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,6FAA6F;IAC7F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,yGAAyG;IACzG,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,gJAAgJ;IAChJ,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,+GAA+G;IAC/G,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;OAaG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAOD,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,IAAI,CAAY;IACxB,OAAO,CAAC,mBAAmB,CAA2B;gBAC1C,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS;IAMtE;;OAEG;IACG,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAiJ/F;;;;;;;;;OASG;IACG,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuHlE;;OAEG;IACG,6BAA6B,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IA4EhG;;;OAGG;IACG,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IA2DvF;;;OAGG;IACG,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAqDxF;;;OAGG;IACG,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAqDtE;;;OAGG;IACG,2BAA2B,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IA2D9F;;;;;;;OAOG;IACG,qCAAqC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAsEhF;;;;;;;;;;;OAWG;IACG,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAyFzF;;OAEG;IACG,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IA6DzF;;;;OAIG;IACG,uBAAuB,CAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EACtB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,EACxD,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC;CAsInB"}