codehere 0.1.1

package/dist/infrastructure/security/provider-bias-detector.js

@@ -0,0 +1,164 @@
+/**
+ * Infrastructure: Provider Bias Detector
+ * Detects vendor-specific SDK/API usage that creates vendor lock-in
+ *
+ * Research Finding: LLMs systematically favor Google/Amazon services
+ * This creates structural vendor lock-in and violates neutrality
+ *
+ * Based on research: AI Ethics for Coding Assistants
+ * - Provider bias detected in LLM outputs
+ * - Creates vendor lock-in risk
+ * - Must audit and enforce vendor neutrality
+ */
+/**
+ * Provider-specific patterns
+ * Maps common provider services to vendor names
+ */
+const PROVIDER_PATTERNS = {
+    google: {
+        provider: 'Google Cloud',
+        services: [
+            /@google-cloud\//i,
+            /google\.cloud\./i,
+            /googleapis\.com/i,
+            /firebase/i,
+            /gcp/i,
+            /cloud\.google\.com/i,
+        ],
+    },
+    amazon: {
+        provider: 'Amazon Web Services',
+        services: [
+            /@aws-sdk\//i,
+            /aws\./i,
+            /amazonaws\.com/i,
+            /lambda/i,
+            /s3/i,
+            /dynamodb/i,
+            /@aws-amplify/i,
+        ],
+    },
+    microsoft: {
+        provider: 'Microsoft Azure',
+        services: [
+            /@azure\//i,
+            /azure\./i,
+            /azurewebsites\.net/i,
+            /blob\.core\.windows\.net/i,
+            /@microsoft\/azure/i,
+        ],
+    },
+};
+/**
+ * Provider Bias Detector
+ * Scans code for provider-specific dependencies and flags vendor lock-in risks
+ */
+export class ProviderBiasDetector {
+    allowedProviders; // If set, only these providers are allowed
+    constructor(allowedProviders) {
+        this.allowedProviders = allowedProviders;
+    }
+    /**
+     * Scan code for provider bias
+     */
+    async scan(filepath, code) {
+        const findings = [];
+        const providerCounts = {};
+        // 1. Detect provider-specific services
+        const detectedProviders = this.detectProviders(code);
+        // 2. Count provider usage
+        for (const provider of detectedProviders) {
+            providerCounts[provider] = (providerCounts[provider] || 0) + 1;
+        }
+        // 3. Check for vendor lock-in patterns
+        if (Object.keys(providerCounts).length > 0) {
+            // Check if only one provider is used (lock-in risk)
+            const uniqueProviders = Object.keys(providerCounts);
+            if (uniqueProviders.length === 1 && !this.allowedProviders?.includes(uniqueProviders[0])) {
+                findings.push({
+                    provider: uniqueProviders[0],
+                    service: 'multiple',
+                    filepath,
+                    description: `Code exclusively uses ${uniqueProviders[0]} services, creating vendor lock-in risk`,
+                    recommendation: `Consider vendor-neutral alternatives or multi-cloud architecture to maintain flexibility`,
+                    severity: 'high',
+                });
+            }
+            // Check if provider is not in allowed list
+            if (this.allowedProviders && uniqueProviders.length > 0) {
+                for (const provider of uniqueProviders) {
+                    if (!this.allowedProviders.includes(provider)) {
+                        findings.push({
+                            provider,
+                            service: 'multiple',
+                            filepath,
+                            description: `Provider ${provider} is not in allowed providers list`,
+                            recommendation: `Use an allowed provider or update policy to allow ${provider}`,
+                            severity: 'critical',
+                        });
+                    }
+                }
+            }
+        }
+        // 4. Check for provider-specific hardcoding
+        const hardcodedServices = this.detectHardcodedServices(code);
+        for (const service of hardcodedServices) {
+            findings.push({
+                provider: service.provider,
+                service: service.name,
+                filepath,
+                description: `Hardcoded ${service.provider} service: ${service.name}`,
+                recommendation: `Use environment variables or configuration to make service provider configurable`,
+                severity: 'medium',
+            });
+        }
+        const criticalCount = findings.filter(f => f.severity === 'critical').length;
+        return {
+            findings,
+            totalFindings: findings.length,
+            criticalCount,
+            providerSummary: providerCounts,
+            passed: criticalCount === 0,
+        };
+    }
+    /**
+     * Detect provider-specific services in code
+     */
+    detectProviders(code) {
+        const providers = [];
+        for (const [key, { provider, services }] of Object.entries(PROVIDER_PATTERNS)) {
+            for (const pattern of services) {
+                if (pattern.test(code)) {
+                    providers.push(provider);
+                    break; // Found this provider, move to next
+                }
+            }
+        }
+        return [...new Set(providers)]; // Remove duplicates
+    }
+    /**
+     * Detect hardcoded service endpoints/configurations
+     */
+    detectHardcodedServices(code) {
+        const hardcoded = [];
+        // Hardcoded endpoints
+        const endpointPatterns = [
+            { pattern: /https?:\/\/.*\.amazonaws\.com/i, provider: 'Amazon Web Services', name: 'AWS endpoint' },
+            { pattern: /https?:\/\/.*\.googleapis\.com/i, provider: 'Google Cloud', name: 'Google API endpoint' },
+            { pattern: /https?:\/\/.*\.azurewebsites\.net/i, provider: 'Microsoft Azure', name: 'Azure endpoint' },
+        ];
+        for (const { pattern, provider, name } of endpointPatterns) {
+            if (pattern.test(code)) {
+                hardcoded.push({ provider, name });
+            }
+        }
+        return hardcoded;
+    }
+    /**
+     * Set allowed providers (enforces vendor neutrality policy)
+     */
+    setAllowedProviders(providers) {
+        this.allowedProviders = providers;
+    }
+}
+//# sourceMappingURL=provider-bias-detector.js.map

package/dist/infrastructure/security/provider-bias-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-bias-detector.js","sourceRoot":"","sources":["../../../src/infrastructure/security/provider-bias-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoBH;;;GAGG;AACH,MAAM,iBAAiB,GAA6D;IAClF,MAAM,EAAE;QACN,QAAQ,EAAE,cAAc;QACxB,QAAQ,EAAE;YACR,kBAAkB;YAClB,kBAAkB;YAClB,kBAAkB;YAClB,WAAW;YACX,MAAM;YACN,qBAAqB;SACtB;KACF;IACD,MAAM,EAAE;QACN,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE;YACR,aAAa;YACb,QAAQ;YACR,iBAAiB;YACjB,SAAS;YACT,KAAK;YACL,WAAW;YACX,eAAe;SAChB;KACF;IACD,SAAS,EAAE;QACT,QAAQ,EAAE,iBAAiB;QAC3B,QAAQ,EAAE;YACR,WAAW;YACX,UAAU;YACV,qBAAqB;YACrB,2BAA2B;YAC3B,oBAAoB;SACrB;KACF;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IACvB,gBAAgB,CAAY,CAAC,2CAA2C;IAEhF,YAAY,gBAA2B;QACrC,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,IAAY;QACvC,MAAM,QAAQ,GAA0B,EAAE,CAAC;QAC3C,MAAM,cAAc,GAA2B,EAAE,CAAC;QAElD,uCAAuC;QACvC,MAAM,iBAAiB,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAErD,0BAA0B;QAC1B,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;YACzC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjE,CAAC;QAED,uCAAuC;QACvC,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,oDAAoD;YACpD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACpD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;oBAC5B,OAAO,EAAE,UAAU;oBACnB,QAAQ;oBACR,WAAW,EAAE,yBAAyB,eAAe,CAAC,CAAC,CAAC,yCAAyC;oBACjG,cAAc,EAAE,0FAA0F;oBAC1G,QAAQ,EAAE,MAAM;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,2CAA2C;YAC3C,IAAI,IAAI,CAAC,gBAAgB,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;oBACvC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC9C,QAAQ,CAAC,IAAI,CAAC;4BACZ,QAAQ;4BACR,OAAO,EAAE,UAAU;4BACnB,QAAQ;4BACR,WAAW,EAAE,YAAY,QAAQ,mCAAmC;4BACpE,cAAc,EAAE,qDAAqD,QAAQ,EAAE;4BAC/E,QAAQ,EAAE,UAAU;yBACrB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,MAAM,iBAAiB,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC7D,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,QAAQ;gBACR,WAAW,EAAE,aAAa,OAAO,CAAC,QAAQ,aAAa,OAAO,CAAC,IAAI,EAAE;gBACrE,cAAc,EAAE,kFAAkF;gBAClG,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QAE7E,OAAO;YACL,QAAQ;YACR,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,aAAa;YACb,eAAe,EAAE,cAAc;YAC/B,MAAM,EAAE,aAAa,KAAK,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,IAAY;QAClC,MAAM,SAAS,GAAa,EAAE,CAAC;QAE/B,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC9E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACzB,MAAM,CAAC,oCAAoC;gBAC7C,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,oBAAoB;IACtD,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,IAAY;QAC1C,MAAM,SAAS,GAA8C,EAAE,CAAC;QAEhE,sBAAsB;QACtB,MAAM,gBAAgB,GAAG;YACvB,EAAE,OAAO,EAAE,gCAAgC,EAAE,QAAQ,EAAE,qBAAqB,EAAE,IAAI,EAAE,cAAc,EAAE;YACpG,EAAE,OAAO,EAAE,iCAAiC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,qBAAqB,EAAE;YACrG,EAAE,OAAO,EAAE,oCAAoC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,EAAE;SACvG,CAAC;QAEF,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,gBAAgB,EAAE,CAAC;YAC3D,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,SAAmB;QACrC,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;IACpC,CAAC;CACF"}

package/dist/infrastructure/security/sandbox-executor.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Infrastructure: Sandbox Executor
+ * Main interface for secure code execution
+ * Routes to appropriate sandbox implementation (Docker/WASM)
+ */
+import { type SandboxResult, type SandboxOptions } from './docker-sandbox.js';
+export interface CodeExecutionRequest {
+    code: string;
+    language: 'javascript' | 'typescript' | 'python' | 'bash';
+    options?: SandboxOptions;
+}
+export declare class SandboxExecutor {
+    private dockerSandbox;
+    private useDocker;
+    constructor();
+    /**
+     * Initialize sandbox executor
+     * Check availability of Docker/WASM
+     */
+    private initialize;
+    /**
+     * Execute code in secure sandbox
+     */
+    execute(request: CodeExecutionRequest): Promise<SandboxResult>;
+    /**
+     * Execute bash command in sandbox
+     */
+    executeBash(command: string, options?: SandboxOptions): Promise<SandboxResult>;
+    /**
+     * Check if sandbox is available
+     */
+    isAvailable(): Promise<boolean>;
+}
+//# sourceMappingURL=sandbox-executor.d.ts.map

package/dist/infrastructure/security/sandbox-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-executor.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/security/sandbox-executor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAiB,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE7F,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC1D,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,SAAS,CAAiB;;IAOlC;;;OAGG;YACW,UAAU;IAQxB;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC;IAoBpE;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IAcpF;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CAGtC"}

package/dist/infrastructure/security/sandbox-executor.js

@@ -0,0 +1,64 @@
+/**
+ * Infrastructure: Sandbox Executor
+ * Main interface for secure code execution
+ * Routes to appropriate sandbox implementation (Docker/WASM)
+ */
+import { DockerSandbox } from './docker-sandbox.js';
+export class SandboxExecutor {
+    dockerSandbox;
+    useDocker = true; // Default to Docker
+    constructor() {
+        this.dockerSandbox = new DockerSandbox();
+        this.initialize();
+    }
+    /**
+     * Initialize sandbox executor
+     * Check availability of Docker/WASM
+     */
+    async initialize() {
+        const dockerAvailable = await this.dockerSandbox.isAvailable();
+        if (!dockerAvailable) {
+            console.warn('⚠️  Docker not available. Sandbox execution will be limited.');
+            this.useDocker = false;
+        }
+    }
+    /**
+     * Execute code in secure sandbox
+     */
+    async execute(request) {
+        if (!this.useDocker) {
+            // Fallback: Return error if Docker not available
+            return {
+                success: false,
+                output: '',
+                error: 'Docker sandbox not available. Please install Docker to enable secure code execution.',
+                exitCode: 1,
+                duration: 0,
+            };
+        }
+        // Route to Docker sandbox
+        return await this.dockerSandbox.execute(request.code, request.language, request.options);
+    }
+    /**
+     * Execute bash command in sandbox
+     */
+    async executeBash(command, options) {
+        if (!this.useDocker) {
+            return {
+                success: false,
+                output: '',
+                error: 'Docker sandbox not available.',
+                exitCode: 1,
+                duration: 0,
+            };
+        }
+        return await this.dockerSandbox.executeBash(command, options);
+    }
+    /**
+     * Check if sandbox is available
+     */
+    async isAvailable() {
+        return await this.dockerSandbox.isAvailable();
+    }
+}
+//# sourceMappingURL=sandbox-executor.js.map

package/dist/infrastructure/security/sandbox-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-executor.js","sourceRoot":"","sources":["../../../src/infrastructure/security/sandbox-executor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAA2C,MAAM,qBAAqB,CAAC;AAQ7F,MAAM,OAAO,eAAe;IAClB,aAAa,CAAgB;IAC7B,SAAS,GAAY,IAAI,CAAC,CAAC,oBAAoB;IAEvD;QACE,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,UAAU;QACtB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;QAC/D,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAC7E,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAA6B;QACzC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,iDAAiD;YACjD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,sFAAsF;gBAC7F,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CACrC,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,OAAO,CAChB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,OAAwB;QACzD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,+BAA+B;gBACtC,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;IAChD,CAAC;CACF"}

package/dist/infrastructure/serialization/toon-serializer.d.ts

@@ -0,0 +1,45 @@
+/**
+ * TOON (Token-Oriented Object Notation) Serializer
+ *
+ * Phase 1: Code Context Serialization for v1.0.0 MVP
+ *
+ * Benefits:
+ * - 30-60% token reduction compared to JSON
+ * - Better LLM parsing accuracy
+ * - Self-documenting structure
+ *
+ * Feature Flag: CODEHERE_USE_TOON (default: false for v1.0.0)
+ */
+import type { CodeChunk } from '../../domain/entities/code-chunk.js';
+/**
+ * Serialize code chunks to TOON format
+ *
+ * TOON format for code chunks:
+ * chunks[N]{filepath,content,score,lineStart,lineEnd}:
+ *   src/auth.ts,function authenticate() {...},0.95,10,60
+ *   src/utils.ts,export function helper() {...},0.87,5,35
+ *
+ * @param chunks Code chunks to serialize
+ * @returns TOON-formatted string, or null if TOON is disabled or library unavailable
+ */
+export declare function serializeCodeChunksToToon(chunks: CodeChunk[]): Promise<string | null>;
+/**
+ * Serialize code chunks to traditional format (fallback)
+ * Used when TOON is disabled or unavailable
+ *
+ * @param chunks Code chunks to serialize
+ * @returns Traditional formatted string
+ */
+export declare function serializeCodeChunksToTraditional(chunks: CodeChunk[]): string;
+/**
+ * Serialize code chunks (TOON if enabled, traditional otherwise)
+ *
+ * @param chunks Code chunks to serialize
+ * @returns Formatted string (TOON or traditional)
+ */
+export declare function serializeCodeChunks(chunks: CodeChunk[]): Promise<string>;
+/**
+ * Check if TOON is available and enabled
+ */
+export declare function isToonAvailable(): Promise<boolean>;
+//# sourceMappingURL=toon-serializer.d.ts.map

package/dist/infrastructure/serialization/toon-serializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toon-serializer.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/serialization/toon-serializer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AA+BrE;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmC3F;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAI5E;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAO9E;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAMxD"}

package/dist/infrastructure/serialization/toon-serializer.js

@@ -0,0 +1,119 @@
+/**
+ * TOON (Token-Oriented Object Notation) Serializer
+ *
+ * Phase 1: Code Context Serialization for v1.0.0 MVP
+ *
+ * Benefits:
+ * - 30-60% token reduction compared to JSON
+ * - Better LLM parsing accuracy
+ * - Self-documenting structure
+ *
+ * Feature Flag: CODEHERE_USE_TOON (default: false for v1.0.0)
+ */
+let toonLib = null;
+/**
+ * Lazy load TOON library (only if feature flag is enabled)
+ */
+async function getToonLib() {
+    if (toonLib === null) {
+        try {
+            // Dynamic import for ES modules - use eval to avoid TypeScript compile-time error when package isn't installed
+            // This allows the code to compile even if @toon-format/toon is not installed
+            const toonModulePath = '@toon-format/toon';
+            // eslint-disable-next-line @typescript-eslint/no-implied-eval
+            const toonModule = await import(/* @ts-ignore */ toonModulePath);
+            toonLib = toonModule;
+        }
+        catch (error) {
+            // TOON library not installed or feature disabled
+            return null;
+        }
+    }
+    return toonLib;
+}
+/**
+ * Check if TOON is enabled via feature flag
+ */
+function isToonEnabled() {
+    return process.env.CODEHERE_USE_TOON === 'true' || process.env.CODEHERE_USE_TOON === '1';
+}
+/**
+ * Serialize code chunks to TOON format
+ *
+ * TOON format for code chunks:
+ * chunks[N]{filepath,content,score,lineStart,lineEnd}:
+ *   src/auth.ts,function authenticate() {...},0.95,10,60
+ *   src/utils.ts,export function helper() {...},0.87,5,35
+ *
+ * @param chunks Code chunks to serialize
+ * @returns TOON-formatted string, or null if TOON is disabled or library unavailable
+ */
+export async function serializeCodeChunksToToon(chunks) {
+    if (!isToonEnabled() || chunks.length === 0) {
+        return null;
+    }
+    const toon = await getToonLib();
+    if (!toon) {
+        return null;
+    }
+    try {
+        // Convert code chunks to array of objects for TOON encoding
+        const chunksData = chunks.map(chunk => ({
+            filepath: chunk.filepath,
+            content: chunk.content,
+            score: chunk.score || 1.0,
+            lineStart: chunk.lineStart || 0,
+            lineEnd: chunk.lineEnd || 0,
+        }));
+        // Encode to TOON format
+        // TOON library exports: { encode, decode } or default export
+        const toonData = { chunks: chunksData };
+        const encodeFn = toon.encode || toon.default?.encode || (typeof toon === 'function' ? toon : null);
+        if (!encodeFn || typeof encodeFn !== 'function') {
+            throw new Error('TOON encode function not found in module');
+        }
+        const toonString = encodeFn(toonData, { delimiter: '\t' });
+        return toonString;
+    }
+    catch (error) {
+        // If TOON encoding fails, return null to fall back to JSON
+        console.warn('[TOON] Encoding failed, falling back to JSON:', error instanceof Error ? error.message : String(error));
+        return null;
+    }
+}
+/**
+ * Serialize code chunks to traditional format (fallback)
+ * Used when TOON is disabled or unavailable
+ *
+ * @param chunks Code chunks to serialize
+ * @returns Traditional formatted string
+ */
+export function serializeCodeChunksToTraditional(chunks) {
+    return chunks
+        .map((chunk, idx) => `[Chunk ${idx + 1} from ${chunk.filepath}]\n${chunk.content}`)
+        .join('\n\n---\n\n');
+}
+/**
+ * Serialize code chunks (TOON if enabled, traditional otherwise)
+ *
+ * @param chunks Code chunks to serialize
+ * @returns Formatted string (TOON or traditional)
+ */
+export async function serializeCodeChunks(chunks) {
+    const toonResult = await serializeCodeChunksToToon(chunks);
+    if (toonResult !== null) {
+        return toonResult;
+    }
+    return serializeCodeChunksToTraditional(chunks);
+}
+/**
+ * Check if TOON is available and enabled
+ */
+export async function isToonAvailable() {
+    if (!isToonEnabled()) {
+        return false;
+    }
+    const lib = await getToonLib();
+    return lib !== null;
+}
+//# sourceMappingURL=toon-serializer.js.map

package/dist/infrastructure/serialization/toon-serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toon-serializer.js","sourceRoot":"","sources":["../../../src/infrastructure/serialization/toon-serializer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,IAAI,OAAO,GAAQ,IAAI,CAAC;AAExB;;GAEG;AACH,KAAK,UAAU,UAAU;IACvB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,+GAA+G;YAC/G,6EAA6E;YAC7E,MAAM,cAAc,GAAG,mBAAmB,CAAC;YAC3C,8DAA8D;YAC9D,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;YACjE,OAAO,GAAG,UAAU,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iDAAiD;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,GAAG,CAAC;AAC3F,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAAmB;IACjE,IAAI,CAAC,aAAa,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,4DAA4D;QAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,GAAG;YACzB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC;SAC5B,CAAC,CAAC,CAAC;QAEJ,wBAAwB;QACxB,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAI,IAAY,CAAC,MAAM,IAAK,IAAY,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrH,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3D,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2DAA2D;QAC3D,OAAO,CAAC,IAAI,CAAC,+CAA+C,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAAmB;IAClE,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,GAAG,GAAG,CAAC,SAAS,KAAK,CAAC,QAAQ,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;SAClF,IAAI,CAAC,aAAa,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAmB;IAC3D,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,gCAAgC,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,OAAO,GAAG,KAAK,IAAI,CAAC;AACtB,CAAC"}

package/dist/infrastructure/storage/embeddings-path.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Infrastructure: Embeddings Path Helper
+ * Determines per-codebase embeddings database path
+ */
+export interface EmbeddingsPathInfo {
+    root: string;
+    dbPath: string;
+    cacheDir: string;
+}
+/**
+ * Get embeddings database path for a specific codebase
+ * Uses codebase root detection to ensure per-repo isolation
+ *
+ * @param cwd - Current working directory (defaults to process.cwd())
+ * @returns Object with root path, database path, and cache directory
+ */
+export declare function getEmbeddingsDbPath(cwd?: string): EmbeddingsPathInfo;
+//# sourceMappingURL=embeddings-path.d.ts.map

package/dist/infrastructure/storage/embeddings-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embeddings-path.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/storage/embeddings-path.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAsB,GAAG,kBAAkB,CAoCnF"}

package/dist/infrastructure/storage/embeddings-path.js

@@ -0,0 +1,47 @@
+/**
+ * Infrastructure: Embeddings Path Helper
+ * Determines per-codebase embeddings database path
+ */
+import { join } from 'path';
+import { existsSync, mkdirSync } from 'fs';
+import { findCodebaseRoot } from '../../domain/services/codebase-detector.js';
+import { getConfigManager } from '../config/config-manager.js';
+/**
+ * Get embeddings database path for a specific codebase
+ * Uses codebase root detection to ensure per-repo isolation
+ *
+ * @param cwd - Current working directory (defaults to process.cwd())
+ * @returns Object with root path, database path, and cache directory
+ */
+export function getEmbeddingsDbPath(cwd = process.cwd()) {
+    const config = getConfigManager();
+    const codebaseInfo = findCodebaseRoot(cwd);
+    if (!codebaseInfo) {
+        // Fallback to cwd if codebase root can't be determined
+        const root = cwd;
+        const cacheDir = config.getCacheDir(root);
+        const embeddingsDir = config.getEmbeddingsDir(root);
+        const dbPath = join(embeddingsDir, 'embeddings.sqlite');
+        // Ensure cache directory exists
+        if (!existsSync(cacheDir)) {
+            mkdirSync(cacheDir, { recursive: true });
+        }
+        if (!existsSync(embeddingsDir)) {
+            mkdirSync(embeddingsDir, { recursive: true });
+        }
+        return { root, dbPath, cacheDir };
+    }
+    const root = codebaseInfo.rootPath;
+    const cacheDir = config.getCacheDir(root);
+    const embeddingsDir = config.getEmbeddingsDir(root);
+    const dbPath = join(embeddingsDir, 'embeddings.sqlite');
+    // Ensure cache directory exists
+    if (!existsSync(cacheDir)) {
+        mkdirSync(cacheDir, { recursive: true });
+    }
+    if (!existsSync(embeddingsDir)) {
+        mkdirSync(embeddingsDir, { recursive: true });
+    }
+    return { root, dbPath, cacheDir };
+}
+//# sourceMappingURL=embeddings-path.js.map

package/dist/infrastructure/storage/embeddings-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embeddings-path.js","sourceRoot":"","sources":["../../../src/infrastructure/storage/embeddings-path.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAQ/D;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC7D,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,uDAAuD;QACvD,MAAM,IAAI,GAAG,GAAG,CAAC;QACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;QAExD,gCAAgC;QAChC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/B,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IAExD,gCAAgC;IAChC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACpC,CAAC"}

package/dist/infrastructure/storage/memory-stream-service.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Infrastructure: MemoryStreamService
+ * Manages episodic memory with 3-factor scoring
+ */
+import { SQLiteMemoryRepository } from './sqlite-memory-repository.js';
+import type { Memory } from '../../domain/entities/memory.js';
+import type { IAIService } from '../../domain/interfaces/ai-service.interface.js';
+export declare class MemoryStreamService {
+    private repository;
+    private retriever;
+    private aiService;
+    private embeddingCache;
+    constructor(repository: SQLiteMemoryRepository, aiService: IAIService);
+    /**
+     * Store observation
+     */
+    recordObservation(description: string, metadata?: any, codebaseId?: string, codebasePath?: string): Promise<void>;
+    /**
+     * Store reflection
+     */
+    recordReflection(description: string, trajectory: any, reward: number, errors: string[], codebaseId?: string, codebasePath?: string): Promise<void>;
+    /**
+     * Store plan
+     */
+    recordPlan(description: string, plan: any, codebaseId?: string, codebasePath?: string): Promise<void>;
+    /**
+     * Retrieve relevant memories with optional reranking
+     * Uses two-stage retrieval: initial recall → rerank precision
+     * Performance: Uses embedding cache to avoid redundant API calls
+     */
+    retrieve(query: string, limit?: number, useRerank?: boolean): Promise<Memory[]>;
+    /**
+     * Retrieve relevant memories for a specific codebase
+     * Filters memories by codebaseId before retrieval
+     * Performance: Uses embedding cache to avoid redundant API calls
+     */
+    retrieveByCodebase(query: string, codebaseId: string, limit?: number, useRerank?: boolean): Promise<Memory[]>;
+    /**
+     * Update memory access time
+     */
+    updateAccess(memory: Memory): Promise<void>;
+    /**
+     * Calculate importance score (1-10)
+     */
+    private calculateImportance;
+}
+//# sourceMappingURL=memory-stream-service.d.ts.map

package/dist/infrastructure/storage/memory-stream-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-stream-service.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/storage/memory-stream-service.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,OAAO,KAAK,EAAE,MAAM,EAAc,MAAM,iCAAiC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iDAAiD,CAAC;AAGlF,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,cAAc,CAAuB;gBAEjC,UAAU,EAAE,sBAAsB,EAAE,SAAS,EAAE,UAAU;IAMrE;;OAEG;IACG,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBvH;;OAEG;IACG,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBzJ;;OAEG;IACG,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB3G;;;;OAIG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,EAAE,SAAS,GAAE,OAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA6C/F;;;;OAIG;IACG,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,EAAE,SAAS,GAAE,OAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA8C7H;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjD;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAoB5B"}