atlas-pipeline-mcp 1.0.23 → 1.0.26

package/dist/tools/security-scanner.js

@@ -0,0 +1,290 @@
+/**
+ * Atlas Server - Advanced Security & Vulnerability Scanner\n *
+ * Enterprise-grade security analysis for frontend applications
+ * - Dependency vulnerability scanning
+ * - Code-level security vulnerabilities
+ * - XSS/CSRF/Injection prevention
+ * - Authentication/Authorization issues
+ * - API security recommendations
+ * - Data exposure risks
+ *
+ * @module security-scanner
+ * @author Nishant Unavane
+ * @version 1.0.0
+ */
+import { getActiveProvider, isNoLLMMode } from '../providers/index.js';
+import { logger, createTimer } from '../utils.js';
+import { z } from 'zod';
+// ============================================================================
+// Validation Schema
+// ============================================================================
+const SecurityScanRequestSchema = z.object({
+    codeBase: z.string().optional(),
+    dependencies: z.array(z.string()).optional(),
+    apiEndpoints: z.array(z.object({
+        method: z.string(),
+        path: z.string(),
+        authentication: z.string(),
+        inputValidation: z.string().optional(),
+        rateLimit: z.string().optional(),
+    })).optional(),
+    authMethod: z.string().optional(),
+    dataHandling: z.string().optional(),
+    frameworks: z.array(z.string()).optional(),
+    environmentVariables: z.array(z.string()).optional(),
+});
+// ============================================================================
+// Security Scanning
+// ============================================================================
+/**
+ * Perform comprehensive security scan
+ */
+export async function scanSecurity(request) {
+    const timer = createTimer();
+    SecurityScanRequestSchema.parse(request);
+    logger.info({ frameworks: request.frameworks }, 'Starting security scan');
+    const vulnerabilities = await findVulnerabilities(request);
+    const riskScore = calculateRiskScore(vulnerabilities);
+    const recommendations = generateRecommendations(vulnerabilities, request);
+    const compliance = assessCompliance(request);
+    logger.info({ vulnerabilityCount: vulnerabilities.length, riskScore, timeMs: timer.elapsed() }, 'Security scan complete');
+    return {
+        vulnerabilities,
+        riskScore,
+        riskLevel: riskScore >= 80 ? 'critical'
+            : riskScore >= 60 ? 'high'
+                : riskScore >= 40 ? 'medium'
+                    : 'low',
+        summary: generateScanSummary(vulnerabilities),
+        recommendations,
+        complianceStatus: compliance,
+        generatedAt: new Date().toISOString(),
+    };
+}
+/**
+ * Find vulnerabilities in codebase
+ */
+async function findVulnerabilities(request) {
+    if (!isNoLLMMode()) {
+        try {
+            return await scanWithAI(request);
+        }
+        catch (error) {
+            logger.warn({ error }, 'AI scan failed, using heuristic scanning');
+            return heuristicScan(request);
+        }
+    }
+    return heuristicScan(request);
+}
+/**
+ * AI-powered security scanning
+ */
+async function scanWithAI(request) {
+    const provider = await getActiveProvider();
+    const prompt = `You are a senior security engineer. Scan this frontend application for vulnerabilities:
+
+${request.codeBase ? `Code:\n${request.codeBase}` : ''}
+${request.frameworks?.length ? `Frameworks: ${request.frameworks.join(', ')}` : ''}
+${request.authMethod ? `Auth: ${request.authMethod}` : ''}
+${request.dataHandling ? `Data Handling: ${request.dataHandling}` : ''}
+
+Identify:
+1. XSS vulnerabilities
+2. CSRF issues
+3. Injection attacks
+4. Insecure authentication
+5. Data exposure risks
+6. API security issues
+7. Dependency vulnerabilities
+
+For each, provide:
+- Severity level
+- Impact
+- Remediation steps
+- Exploitability`;
+    const result = await provider.completeJson(prompt);
+    return result.data || [];
+}
+/**
+ * Heuristic security scanning
+ */
+function heuristicScan(request) {
+    const vulnerabilities = [];
+    // Check for common vulnerabilities
+    if (request.codeBase) {
+        if (request.codeBase.includes('innerHTML') && !request.codeBase.includes('DOMPurify')) {
+            vulnerabilities.push({
+                id: 'XSS-001',
+                title: 'Potential XSS via innerHTML',
+                severity: 'high',
+                type: 'xss',
+                description: 'Using innerHTML without sanitization can lead to XSS attacks',
+                affectedArea: 'HTML rendering',
+                impact: 'Attackers can execute arbitrary JavaScript in user browsers',
+                remediation: 'Use textContent instead or use DOMPurify for sanitization',
+                exploitability: 'high',
+            });
+        }
+        if (request.codeBase.includes('eval(') || request.codeBase.includes('Function(')) {
+            vulnerabilities.push({
+                id: 'INJ-001',
+                title: 'Code Injection via eval()',
+                severity: 'critical',
+                type: 'injection',
+                description: 'Using eval() is extremely dangerous',
+                affectedArea: 'Dynamic code execution',
+                impact: 'Complete application compromise',
+                remediation: 'Never use eval(). Use JSON.parse() or alternatives.',
+                exploitability: 'high',
+            });
+        }
+        if (request.codeBase.includes('localStorage') && !request.codeBase.includes('secure')) {
+            vulnerabilities.push({
+                id: 'SEC-001',
+                title: 'Sensitive data in localStorage',
+                severity: 'high',
+                type: 'insecure-data-storage',
+                description: 'localStorage is not secure for sensitive data',
+                affectedArea: 'Data storage',
+                impact: 'User credentials and tokens can be stolen via XSS',
+                remediation: 'Use httpOnly cookies for auth tokens. Only store non-sensitive data.',
+                exploitability: 'high',
+            });
+        }
+    }
+    // Check dependencies for known vulnerabilities
+    if (request.dependencies?.includes('lodash@<4.17.21')) {
+        vulnerabilities.push({
+            id: 'DEP-001',
+            title: 'Vulnerable lodash version',
+            severity: 'medium',
+            type: 'dependency-vulnerability',
+            description: 'lodash < 4.17.21 has prototype pollution vulnerability',
+            affectedArea: 'Dependency',
+            cveId: 'CVE-2021-23337',
+            impact: 'Code execution, DoS',
+            remediation: 'Update lodash to >= 4.17.21',
+            exploitability: 'medium',
+        });
+    }
+    // Check API endpoints
+    if (request.apiEndpoints) {
+        for (const endpoint of request.apiEndpoints) {
+            if (endpoint.authentication === 'none' && endpoint.path.includes('admin')) {
+                vulnerabilities.push({
+                    id: 'API-001',
+                    title: 'Unprotected admin endpoint',
+                    severity: 'critical',
+                    type: 'broken-access-control',
+                    description: `Admin endpoint ${endpoint.path} has no authentication`,
+                    affectedArea: endpoint.path,
+                    impact: 'Unauthorized access to admin functions',
+                    remediation: 'Require authentication and authorization checks',
+                    exploitability: 'high',
+                });
+            }
+            if (!endpoint.rateLimit) {
+                vulnerabilities.push({
+                    id: 'API-002',
+                    title: 'Missing rate limiting',
+                    severity: 'medium',
+                    type: 'security-misconfiguration',
+                    description: `Endpoint ${endpoint.path} has no rate limiting`,
+                    affectedArea: endpoint.path,
+                    impact: 'Brute force attacks, DoS',
+                    remediation: 'Implement rate limiting per IP/user',
+                    exploitability: 'medium',
+                });
+            }
+        }
+    }
+    return vulnerabilities;
+}
+/**
+ * Calculate overall risk score
+ */
+function calculateRiskScore(vulnerabilities) {
+    let score = 0;
+    for (const vuln of vulnerabilities) {
+        const severityScore = vuln.severity === 'critical' ? 30
+            : vuln.severity === 'high' ? 20
+                : vuln.severity === 'medium' ? 10
+                    : 3;
+        const exploitabilityScore = vuln.exploitability === 'high' ? 1
+            : vuln.exploitability === 'medium' ? 0.7
+                : 0.3;
+        score += severityScore * exploitabilityScore;
+    }
+    return Math.min(score, 100);
+}
+/**
+ * Generate remediation recommendations
+ */
+function generateRecommendations(vulnerabilities, request) {
+    const recommendations = [];
+    // Add recommendations based on vulnerabilities
+    if (vulnerabilities.some(v => v.type === 'xss')) {
+        recommendations.push({
+            priority: 'critical',
+            category: 'XSS Prevention',
+            recommendation: 'Implement Content Security Policy (CSP) headers',
+            implementation: 'Set CSP headers that restrict script sources',
+            effort: '2-4 hours',
+            benefit: 'Blocks inline scripts and untrusted external scripts',
+        });
+    }
+    if (vulnerabilities.some(v => v.type === 'dependency-vulnerability')) {
+        recommendations.push({
+            priority: 'high',
+            category: 'Dependency Management',
+            recommendation: 'Implement automated dependency updates',
+            implementation: 'Use Dependabot or Renovate for automated PRs',
+            effort: '1 hour setup',
+            benefit: 'Stay ahead of known vulnerabilities',
+        });
+    }
+    recommendations.push({
+        priority: 'high',
+        category: 'Security Testing',
+        recommendation: 'Add SAST (Static Application Security Testing)',
+        implementation: 'Integrate tools like Snyk, SonarQube, or ESLint security plugins',
+        effort: '4-8 hours',
+        benefit: 'Catch vulnerabilities during development',
+    });
+    recommendations.push({
+        priority: 'medium',
+        category: 'Security Headers',
+        recommendation: 'Implement security headers',
+        implementation: 'Add X-Frame-Options, X-Content-Type-Options, Strict-Transport-Security',
+        effort: '2 hours',
+        benefit: 'Prevent clickjacking and MIME sniffing attacks',
+    });
+    return recommendations;
+}
+/**
+ * Assess compliance status
+ */
+function assessCompliance(request) {
+    return {
+        gdpr: 'partial',
+        ccpa: 'partial',
+        hipaa: 'non-compliant',
+        pciDss: 'partial',
+        owasp: 'Top 10 vulnerabilities may be present - full audit recommended',
+    };
+}
+/**
+ * Generate scan summary
+ */
+function generateScanSummary(vulnerabilities) {
+    const critical = vulnerabilities.filter(v => v.severity === 'critical').length;
+    const high = vulnerabilities.filter(v => v.severity === 'high').length;
+    const medium = vulnerabilities.filter(v => v.severity === 'medium').length;
+    return `Security scan found ${vulnerabilities.length} issues: ${critical} critical, ${high} high, ${medium} medium. ` +
+        (critical > 0 ? 'URGENT: Address critical vulnerabilities immediately.' : 'Review and remediate high-severity issues.');
+}
+// ============================================================================
+// Export
+// ============================================================================
+export default scanSecurity;
+//# sourceMappingURL=security-scanner.js.map

package/dist/tools/security-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scanner.js","sourceRoot":"","sources":["../../src/tools/security-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA+ExB,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;QAC1B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACd,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAEH,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAA4B;IAE5B,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAE5B,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEzC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAE1E,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,uBAAuB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE7C,MAAM,CAAC,IAAI,CACT,EAAE,kBAAkB,EAAE,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAClF,wBAAwB,CACzB,CAAC;IAEF,OAAO;QACL,eAAe;QACf,SAAS;QACT,SAAS,EACP,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU;YAC1B,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM;gBAC1B,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ;oBAC5B,CAAC,CAAC,KAAK;QACX,OAAO,EAAE,mBAAmB,CAAC,eAAe,CAAC;QAC7C,eAAe;QACf,gBAAgB,EAAE,UAAU;QAC5B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,OAA4B;IAE5B,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,OAAO,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,0CAA0C,CAAC,CAAC;YACnE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU,CAAC,OAA4B;IACpD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAE3C,MAAM,MAAM,GAAG;;EAEf,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;EACpD,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;EAChF,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE;EACvD,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;iBAerD,CAAC;IAEhB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAkB,MAAM,CAAC,CAAC;IAEpE,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,OAA4B;IACjD,MAAM,eAAe,GAAoB,EAAE,CAAC;IAE5C,mCAAmC;IACnC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACtF,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,6BAA6B;gBACpC,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,KAAK;gBACX,WAAW,EAAE,8DAA8D;gBAC3E,YAAY,EAAE,gBAAgB;gBAC9B,MAAM,EAAE,6DAA6D;gBACrE,WAAW,EAAE,2DAA2D;gBACxE,cAAc,EAAE,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACjF,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,2BAA2B;gBAClC,QAAQ,EAAE,UAAU;gBACpB,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,qCAAqC;gBAClD,YAAY,EAAE,wBAAwB;gBACtC,MAAM,EAAE,iCAAiC;gBACzC,WAAW,EAAE,qDAAqD;gBAClE,cAAc,EAAE,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtF,eAAe,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,SAAS;gBACb,KAAK,EAAE,gCAAgC;gBACvC,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,uBAAuB;gBAC7B,WAAW,EAAE,+CAA+C;gBAC5D,YAAY,EAAE,cAAc;gBAC5B,MAAM,EAAE,mDAAmD;gBAC3D,WAAW,EAAE,sEAAsE;gBACnF,cAAc,EAAE,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,IAAI,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtD,eAAe,CAAC,IAAI,CAAC;YACnB,EAAE,EAAE,SAAS;YACb,KAAK,EAAE,2BAA2B;YAClC,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,0BAA0B;YAChC,WAAW,EAAE,wDAAwD;YACrE,YAAY,EAAE,YAAY;YAC1B,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,qBAAqB;YAC7B,WAAW,EAAE,6BAA6B;YAC1C,cAAc,EAAE,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB;IACtB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,cAAc,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1E,eAAe,CAAC,IAAI,CAAC;oBACnB,EAAE,EAAE,SAAS;oBACb,KAAK,EAAE,4BAA4B;oBACnC,QAAQ,EAAE,UAAU;oBACpB,IAAI,EAAE,uBAAuB;oBAC7B,WAAW,EAAE,kBAAkB,QAAQ,CAAC,IAAI,wBAAwB;oBACpE,YAAY,EAAE,QAAQ,CAAC,IAAI;oBAC3B,MAAM,EAAE,wCAAwC;oBAChD,WAAW,EAAE,iDAAiD;oBAC9D,cAAc,EAAE,MAAM;iBACvB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACxB,eAAe,CAAC,IAAI,CAAC;oBACnB,EAAE,EAAE,SAAS;oBACb,KAAK,EAAE,uBAAuB;oBAC9B,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,2BAA2B;oBACjC,WAAW,EAAE,YAAY,QAAQ,CAAC,IAAI,uBAAuB;oBAC7D,YAAY,EAAE,QAAQ,CAAC,IAAI;oBAC3B,MAAM,EAAE,0BAA0B;oBAClC,WAAW,EAAE,qCAAqC;oBAClD,cAAc,EAAE,QAAQ;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,eAAgC;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,aAAa,GACjB,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE;YAC/B,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE;gBAC/B,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE;oBACjC,CAAC,CAAC,CAAC,CAAC;QAER,MAAM,mBAAmB,GACvB,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC,CAAC,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG;gBACxC,CAAC,CAAC,GAAG,CAAC;QAEV,KAAK,IAAI,aAAa,GAAG,mBAAmB,CAAC;IAC/C,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,eAAgC,EAChC,OAA4B;IAE5B,MAAM,eAAe,GAA6B,EAAE,CAAC;IAErD,+CAA+C;IAC/C,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChD,eAAe,CAAC,IAAI,CAAC;YACnB,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,gBAAgB;YAC1B,cAAc,EAAE,iDAAiD;YACjE,cAAc,EAAE,8CAA8C;YAC9D,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAAC,EAAE,CAAC;QACrE,eAAe,CAAC,IAAI,CAAC;YACnB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,uBAAuB;YACjC,cAAc,EAAE,wCAAwC;YACxD,cAAc,EAAE,8CAA8C;YAC9D,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,qCAAqC;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,IAAI,CAAC;QACnB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,kBAAkB;QAC5B,cAAc,EAAE,gDAAgD;QAChE,cAAc,EAAE,kEAAkE;QAClF,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,0CAA0C;KACpD,CAAC,CAAC;IAEH,eAAe,CAAC,IAAI,CAAC;QACnB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,kBAAkB;QAC5B,cAAc,EAAE,4BAA4B;QAC5C,cAAc,EAAE,wEAAwE;QACxF,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,gDAAgD;KAC1D,CAAC,CAAC;IAEH,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,OAA4B;IACpD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,gEAAgE;KACxE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,eAAgC;IAC3D,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAC/E,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IAE3E,OAAO,uBAAuB,eAAe,CAAC,MAAM,YAAY,QAAQ,cAAc,IAAI,UAAU,MAAM,WAAW;QACnH,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,uDAAuD,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC;AAC5H,CAAC;AAED,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,eAAe,YAAY,CAAC"}

package/dist/tools/senior-mentor.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Atlas Server - Senior Developer Mentor Tool
+ *
+ * Helps junior/mid-level developers think like senior engineers
+ * - Architectural decision analysis
+ * - Code design patterns and trade-offs
+ * - Performance optimization strategies
+ * - Best practices and conventions
+ * - Technical debt assessment
+ *
+ * @module senior-mentor
+ * @author Nishant Unavane
+ * @version 1.0.0
+ */
+export interface SeniorMentorRequest {
+    problem: string;
+    context?: string;
+    code?: string;
+    language?: string;
+    framework?: string;
+    constraints?: string[];
+    desiredOutcome?: string;
+    currentApproach?: string;
+}
+export interface ArchitectureAnalysis {
+    currentApproach: string;
+    issues: ArchitectureIssue[];
+    seniorPerspective: string;
+    alternativeApproaches: AlternativeApproach[];
+    recommendedPath: string;
+    reasoning: string;
+}
+export interface ArchitectureIssue {
+    severity: 'critical' | 'major' | 'minor';
+    title: string;
+    explanation: string;
+    longTermImpact: string;
+}
+export interface AlternativeApproach {
+    name: string;
+    description: string;
+    pros: string[];
+    cons: string[];
+    complexity: 'low' | 'medium' | 'high';
+    scalability: 'poor' | 'good' | 'excellent';
+    maintainability: 'poor' | 'fair' | 'good' | 'excellent';
+    seniorRating: number;
+}
+export interface MentorResult {
+    analysis: ArchitectureAnalysis;
+    seniorLessons: SeniorLesson[];
+    actionItems: ActionItem[];
+    readingRecommendations: Recommendation[];
+    generatedAt: string;
+}
+export interface SeniorLesson {
+    title: string;
+    lesson: string;
+    realWorldExample: string;
+    whenToApply: string;
+}
+export interface ActionItem {
+    priority: 'high' | 'medium' | 'low';
+    action: string;
+    expectedBenefit: string;
+    estimatedEffort: string;
+    timeline: string;
+}
+export interface Recommendation {
+    title: string;
+    author?: string;
+    type: 'article' | 'book' | 'course' | 'talk';
+    relevance: number;
+    url?: string;
+}
+/**
+ * Analyze a problem from a senior developer's perspective
+ */
+export declare function getMentorAnalysis(request: SeniorMentorRequest): Promise<MentorResult>;
+export default getMentorAnalysis;
+//# sourceMappingURL=senior-mentor.d.ts.map

package/dist/tools/senior-mentor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"senior-mentor.d.ts","sourceRoot":"","sources":["../../src/tools/senior-mentor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAUH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,mBAAmB,EAAE,CAAC;IAC7C,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACtC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;IAC3C,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;IACxD,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,sBAAsB,EAAE,cAAc,EAAE,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAqBD;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,CAwBvB;AA+RD,eAAe,iBAAiB,CAAC"}