couchloop-eq-mcp 1.0.4 → 1.0.5

package/dist/developer/scanners/xss-detector.js

@@ -0,0 +1,229 @@
+/**
+ * XSS (Cross-Site Scripting) Detector
+ * Scans code for XSS vulnerabilities including:
+ * - innerHTML usage with untrusted data
+ * - Unescaped user input in DOM
+ * - eval() and similar dangerous functions
+ * - Dangerous DOM manipulation patterns
+ */
+export class XssDetector {
+    vulnerabilities = [];
+    /**
+     * Scan code for XSS vulnerabilities
+     */
+    scan(code) {
+        this.vulnerabilities = [];
+        const lines = code.split('\n');
+        lines.forEach((line, idx) => {
+            const lineNum = idx + 1;
+            this.checkInnerHtmlUsage(line, lineNum);
+            this.checkEvalUsage(line, lineNum);
+            this.checkUnescapedDomManipulation(line, lineNum);
+            this.checkDangerousDomMethods(line, lineNum);
+            this.checkReactDangerousHtml(line, lineNum);
+        });
+        return this.vulnerabilities;
+    }
+    /**
+     * Detect innerHTML usage with variables or user input
+     * Pattern: element.innerHTML = userInput
+     * Pattern: element.innerHTML = `content ${userVar}`
+     */
+    checkInnerHtmlUsage(line, lineNum) {
+        const patterns = [
+            /\.innerHTML\s*=\s*[^;]+/g,
+            /\.innerHTML\s*\+=\s*[^;]+/g,
+            /innerHTML\s*=\s*[^;]+/g,
+        ];
+        for (const pattern of patterns) {
+            const matches = Array.from(line.matchAll(pattern));
+            for (const match of matches) {
+                const code = match[0];
+                if (this.isCommentOrString(line, line.indexOf(code)))
+                    continue;
+                // Check if it's using a template literal or variable
+                if (code.includes('${') || code.includes('"') || code.includes("'") || code.includes('`')) {
+                    const column = line.indexOf(code) + 1;
+                    // Extract what's being assigned
+                    const assignmentMatch = code.match(/=\s*(.+)/);
+                    const assignedValue = assignmentMatch?.[1]?.trim() || 'untrustedData';
+                    const severity = code.includes('$') ? 'CRITICAL' : 'HIGH';
+                    this.vulnerabilities.push({
+                        type: 'INNERHTML_XSS',
+                        severity: severity,
+                        line: lineNum,
+                        column: column,
+                        code: code,
+                        issue: `Direct assignment to innerHTML: ${code}. This allows XSS attacks if ${assignedValue} contains user-controlled content.`,
+                        cwe: 'CWE-79: Improper Neutralization of Input During Web Page Generation',
+                        fix: `Use textContent for plain text:\n  element.textContent = userInput;\n\nOr sanitize HTML:\n  import DOMPurify from 'dompurify';\n  element.innerHTML = DOMPurify.sanitize(userInput);\n\nOr use safe methods:\n  element.appendChild(document.createTextNode(userInput));\n  element.insertAdjacentHTML('beforeend', sanitize(userInput));`
+                    });
+                }
+            }
+        }
+    }
+    /**
+     * Detect eval() and similar dangerous functions
+     * Pattern: eval(userInput)
+     * Pattern: Function(userInput)
+     * Pattern: setTimeout(userInput)
+     */
+    checkEvalUsage(line, lineNum) {
+        const patterns = [
+            /\beval\s*\(/gi,
+            /\bFunction\s*\(/gi,
+            /\bsetTimeout\s*\(\s*[^,)]*\$\{/gi,
+            /\bsetInterval\s*\(\s*[^,)]*\$\{/gi,
+            /\bnew\s+Function\s*\(/gi,
+        ];
+        for (const pattern of patterns) {
+            const matches = Array.from(line.matchAll(pattern));
+            for (const match of matches) {
+                const code = match[0];
+                if (this.isCommentOrString(line, line.indexOf(code)))
+                    continue;
+                const column = line.indexOf(code) + 1;
+                const isFunctionConstructor = code.toLowerCase().includes('function');
+                const isSetTimeout = code.toLowerCase().includes('settimeout');
+                let issue = '';
+                let fix = '';
+                if (code.toLowerCase().includes('eval')) {
+                    issue = `Direct use of eval(): ${code}. eval() is dangerous and allows arbitrary code execution.`;
+                    fix = `Never use eval(). If you need to parse JSON:\n  const data = JSON.parse(userInput);\n\nFor dynamic property access:\n  const value = obj[propertyName];\n\nFor expressions, use a safe expression evaluator library.`;
+                }
+                else if (isFunctionConstructor) {
+                    issue = `Function constructor usage: ${code}. Using Function() with user input allows arbitrary code execution.`;
+                    fix = `Use JSON.parse() for data:\n  const data = JSON.parse(userInput);\n\nFor callbacks, use predefined functions:\n  const callbacks = { action1: () => {}, action2: () => {} };\n  callbacks[actionName]?.();`;
+                }
+                else if (isSetTimeout) {
+                    issue = `setTimeout with dynamic code: ${code}. Passing code as string can lead to code injection.`;
+                    fix = `Use a function reference instead:\n  setTimeout(() => { handleAction(data); }, 1000);\n\nOr define callbacks:\n  const handlers = { notify: () => {}, update: () => {} };\n  setTimeout(handlers[actionType], 1000);`;
+                }
+                this.vulnerabilities.push({
+                    type: 'EVAL_XSS',
+                    severity: 'CRITICAL',
+                    line: lineNum,
+                    column: column,
+                    code: code,
+                    issue: issue,
+                    cwe: 'CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code',
+                    fix: fix
+                });
+            }
+        }
+    }
+    /**
+     * Detect unescaped DOM manipulation
+     * Pattern: element.insertAdjacentHTML('beforeend', userInput)
+     * Pattern: document.write(userInput)
+     */
+    checkUnescapedDomManipulation(line, lineNum) {
+        const patterns = [
+            /insertAdjacentHTML\s*\(/gi,
+            /document\.write\s*\(/gi,
+            /document\.writeln\s*\(/gi,
+            /outerHTML\s*=\s*[^;]+/g,
+        ];
+        for (const pattern of patterns) {
+            const matches = Array.from(line.matchAll(pattern));
+            for (const match of matches) {
+                const code = match[0];
+                if (this.isCommentOrString(line, line.indexOf(code)))
+                    continue;
+                const column = line.indexOf(code) + 1;
+                let issue = '';
+                let fix = '';
+                if (code.includes('insertAdjacentHTML')) {
+                    issue = `insertAdjacentHTML with untrusted data: ${code}. Can lead to XSS if data isn't sanitized.`;
+                    fix = `Use insertAdjacentElement instead:\n  const element = document.createElement('div');\n  element.textContent = userInput;\n  target.insertAdjacentElement('beforeend', element);\n\nOr sanitize the HTML:\n  target.insertAdjacentHTML('beforeend', DOMPurify.sanitize(userInput));`;
+                }
+                else if (code.includes('document.write') || code.includes('writeln')) {
+                    issue = `document.write() detected: ${code}. This is dangerous and can cause DOM issues and XSS vulnerabilities.`;
+                    fix = `Use DOM methods instead:\n  const div = document.createElement('div');\n  div.textContent = content;\n  document.body.appendChild(div);\n\nOr use:\n  document.getElementById('target').textContent = content;`;
+                }
+                else if (code.includes('outerHTML')) {
+                    issue = `Direct outerHTML assignment: ${code}. Allows XSS if assigned value contains user input.`;
+                    fix = `Use safer methods:\n  element.replaceWith(newElement);\n  Or sanitize before:\n  element.outerHTML = DOMPurify.sanitize(userInput);`;
+                }
+                this.vulnerabilities.push({
+                    type: 'UNESCAPED_DOM',
+                    severity: 'CRITICAL',
+                    line: lineNum,
+                    column: column,
+                    code: code,
+                    issue: issue,
+                    cwe: 'CWE-79: Improper Neutralization of Input During Web Page Generation',
+                    fix: fix
+                });
+            }
+        }
+    }
+    /**
+     * Detect dangerous DOM methods
+     * Pattern: element.click(userEvent)
+     * Pattern: element.setAttribute('onclick', userInput)
+     */
+    checkDangerousDomMethods(line, lineNum) {
+        const patterns = [
+            /setAttribute\s*\(\s*['"]on\w+['"][^)]*\)/gi,
+            /\.on\w+\s*=\s*[^;]+\$\{/g,
+            /\[['"]on\w+['"]\]\s*=\s*[^;]+/g,
+        ];
+        for (const pattern of patterns) {
+            const matches = Array.from(line.matchAll(pattern));
+            for (const match of matches) {
+                const code = match[0];
+                if (this.isCommentOrString(line, line.indexOf(code)))
+                    continue;
+                const column = line.indexOf(code) + 1;
+                this.vulnerabilities.push({
+                    type: 'DANGEROUS_DOM_METHOD',
+                    severity: 'CRITICAL',
+                    line: lineNum,
+                    column: column,
+                    code: code,
+                    issue: `Setting event handler with user input: ${code}. This allows JavaScript injection through event handlers.`,
+                    cwe: 'CWE-79: Improper Neutralization of Input During Web Page Generation',
+                    fix: `Use addEventListener instead:\n  element.addEventListener('click', (e) => handleEvent(e, userData));\n\nOr use data attributes with safe event handlers:\n  element.setAttribute('data-action', actionName);\n  element.addEventListener('click', () => handler(element.dataset.action));`
+                });
+            }
+        }
+    }
+    /**
+     * Detect React dangerouslySetInnerHTML usage
+     * Pattern: dangerouslySetInnerHTML={{ __html: userInput }}
+     */
+    checkReactDangerousHtml(line, lineNum) {
+        if (!line.includes('dangerouslySetInnerHTML'))
+            return;
+        const pattern = /dangerouslySetInnerHTML\s*=\s*\{\s*__html\s*:\s*[^}]+\}/g;
+        const matches = Array.from(line.matchAll(pattern));
+        for (const match of matches) {
+            const code = match[0];
+            if (this.isCommentOrString(line, line.indexOf(code)))
+                continue;
+            const column = line.indexOf(code) + 1;
+            // Extract what's being assigned
+            const valueMatch = code.match(/__html\s*:\s*(.+)/);
+            const value = valueMatch?.[1]?.trim() || 'value';
+            this.vulnerabilities.push({
+                type: 'REACT_DANGEROUSHTML',
+                severity: code.includes('$') ? 'CRITICAL' : 'HIGH',
+                line: lineNum,
+                column: column,
+                code: code,
+                issue: `React dangerouslySetInnerHTML usage: ${code}. This is dangerous and can lead to XSS if ${value} contains user-controlled content.`,
+                cwe: 'CWE-79: Improper Neutralization of Input During Web Page Generation',
+                fix: `Use React's built-in escaping:\n  <div>{userInput}</div>\n\nFor safe HTML rendering, sanitize first:\n  import DOMPurify from 'dompurify';\n  <div dangerouslySetInnerHTML={{ __html: DOMPurify.sanitize(userInput) }} />\n\nOr use a React component library that handles sanitization.`
+            });
+        }
+    }
+    /**
+     * Check if position is inside a comment or string
+     */
+    isCommentOrString(line, position) {
+        const beforePos = line.substring(0, position);
+        return beforePos.includes('//') || beforePos.includes('/*');
+    }
+}
+//# sourceMappingURL=xss-detector.js.map

package/dist/developer/scanners/xss-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xss-detector.js","sourceRoot":"","sources":["../../../src/developer/scanners/xss-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH,MAAM,OAAO,WAAW;IACd,eAAe,GAAuB,EAAE,CAAC;IAEjD;;OAEG;IACH,IAAI,CAAC,IAAY;QACf,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC1B,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC,6BAA6B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACK,mBAAmB,CAAC,IAAY,EAAE,OAAe;QACvD,MAAM,QAAQ,GAAG;YACf,0BAA0B;YAC1B,4BAA4B;YAC5B,wBAAwB;SACzB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAEnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBAE/D,qDAAqD;gBACrD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAEtC,gCAAgC;oBAChC,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBAC/C,MAAM,aAAa,GAAG,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,eAAe,CAAC;oBAEtE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;oBAE1D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;wBACxB,IAAI,EAAE,eAAe;wBACrB,QAAQ,EAAE,QAA+B;wBACzC,IAAI,EAAE,OAAO;wBACb,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,IAAI;wBACV,KAAK,EAAE,mCAAmC,IAAI,gCAAgC,aAAa,oCAAoC;wBAC/H,GAAG,EAAE,qEAAqE;wBAC1E,GAAG,EAAE,2UAA2U;qBACjV,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,cAAc,CAAC,IAAY,EAAE,OAAe;QAClD,MAAM,QAAQ,GAAG;YACf,eAAe;YACf,mBAAmB;YACnB,kCAAkC;YAClC,mCAAmC;YACnC,yBAAyB;SAC1B,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAEnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBAE/D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtC,MAAM,qBAAqB,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACtE,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAE/D,IAAI,KAAK,GAAG,EAAE,CAAC;gBACf,IAAI,GAAG,GAAG,EAAE,CAAC;gBAEb,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxC,KAAK,GAAG,yBAAyB,IAAI,4DAA4D,CAAC;oBAClG,GAAG,GAAG,sNAAsN,CAAC;gBAC/N,CAAC;qBAAM,IAAI,qBAAqB,EAAE,CAAC;oBACjC,KAAK,GAAG,+BAA+B,IAAI,qEAAqE,CAAC;oBACjH,GAAG,GAAG,4MAA4M,CAAC;gBACrN,CAAC;qBAAM,IAAI,YAAY,EAAE,CAAC;oBACxB,KAAK,GAAG,iCAAiC,IAAI,sDAAsD,CAAC;oBACpG,GAAG,GAAG,sNAAsN,CAAC;gBAC/N,CAAC;gBAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,UAAU;oBACpB,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,KAAK;oBACZ,GAAG,EAAE,6EAA6E;oBAClF,GAAG,EAAE,GAAG;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,6BAA6B,CAAC,IAAY,EAAE,OAAe;QACjE,MAAM,QAAQ,GAAG;YACf,2BAA2B;YAC3B,wBAAwB;YACxB,0BAA0B;YAC1B,wBAAwB;SACzB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAEnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBAE/D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAEtC,IAAI,KAAK,GAAG,EAAE,CAAC;gBACf,IAAI,GAAG,GAAG,EAAE,CAAC;gBAEb,IAAI,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;oBACxC,KAAK,GAAG,2CAA2C,IAAI,4CAA4C,CAAC;oBACpG,GAAG,GAAG,oRAAoR,CAAC;gBAC7R,CAAC;qBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBACvE,KAAK,GAAG,8BAA8B,IAAI,uEAAuE,CAAC;oBAClH,GAAG,GAAG,gNAAgN,CAAC;gBACzN,CAAC;qBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;oBACtC,KAAK,GAAG,gCAAgC,IAAI,qDAAqD,CAAC;oBAClG,GAAG,GAAG,qIAAqI,CAAC;gBAC9I,CAAC;gBAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,eAAe;oBACrB,QAAQ,EAAE,UAAU;oBACpB,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,KAAK;oBACZ,GAAG,EAAE,qEAAqE;oBAC1E,GAAG,EAAE,GAAG;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,wBAAwB,CAAC,IAAY,EAAE,OAAe;QAC5D,MAAM,QAAQ,GAAG;YACf,4CAA4C;YAC5C,0BAA0B;YAC1B,gCAAgC;SACjC,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAEnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBAE/D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAEtC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;oBACxB,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ,EAAE,UAAU;oBACpB,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,0CAA0C,IAAI,4DAA4D;oBACjH,GAAG,EAAE,qEAAqE;oBAC1E,GAAG,EAAE,2RAA2R;iBACjS,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,uBAAuB,CAAC,IAAY,EAAE,OAAe;QAC3D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC;YAAE,OAAO;QAEtD,MAAM,OAAO,GAAG,0DAA0D,CAAC;QAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAEnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAAE,SAAS;YAE/D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEtC,gCAAgC;YAChC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC;YAEjD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;gBACxB,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;gBAClD,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,wCAAwC,IAAI,8CAA8C,KAAK,oCAAoC;gBAC1I,GAAG,EAAE,qEAAqE;gBAC1E,GAAG,EAAE,0RAA0R;aAChS,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,IAAY,EAAE,QAAgB;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC;CACF"}

package/dist/developer/types/ai-errors.d.ts

@@ -0,0 +1,34 @@
+/**
+ * AI Error Pattern Catalog
+ * Common mistakes AI agents make when writing code
+ */
+export interface AIErrorPattern {
+    id: string;
+    name: string;
+    category: 'build' | 'syntax' | 'logic' | 'security' | 'performance' | 'architecture';
+    description: string;
+    frequency: 'very-common' | 'common' | 'occasional' | 'rare';
+    impact: 'critical' | 'high' | 'medium' | 'low';
+    examples: string[];
+    detection: string;
+    prevention: string;
+    autoFixable: boolean;
+}
+/**
+ * Catalog of documented AI coding errors
+ * Based on real-world observations of AI agent failures
+ */
+export declare const AI_ERROR_CATALOG: AIErrorPattern[];
+/**
+ * Get AI errors by category
+ */
+export declare function getErrorsByCategory(category: AIErrorPattern['category']): AIErrorPattern[];
+/**
+ * Get high-impact errors that should be prevented first
+ */
+export declare function getCriticalErrors(): AIErrorPattern[];
+/**
+ * Get auto-fixable errors
+ */
+export declare function getAutoFixableErrors(): AIErrorPattern[];
+//# sourceMappingURL=ai-errors.d.ts.map

package/dist/developer/types/ai-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-errors.d.ts","sourceRoot":"","sources":["../../../src/developer/types/ai-errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,GAAG,cAAc,CAAC;IACrF,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,aAAa,GAAG,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAC;IAC5D,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAC/C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,cAAc,EAkP5C,CAAC;AAEF;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,cAAc,EAAE,CAE1F;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,EAAE,CAKpD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,cAAc,EAAE,CAEvD"}

package/dist/developer/types/ai-errors.js

@@ -0,0 +1,271 @@
+/**
+ * AI Error Pattern Catalog
+ * Common mistakes AI agents make when writing code
+ */
+/**
+ * Catalog of documented AI coding errors
+ * Based on real-world observations of AI agent failures
+ */
+export const AI_ERROR_CATALOG = [
+    {
+        id: 'build-context-blindness',
+        name: 'Build Context Blindness',
+        category: 'build',
+        description: 'AI attempts to build/run code without understanding project configuration',
+        frequency: 'very-common',
+        impact: 'high',
+        examples: [
+            'Forgetting .js extensions in TypeScript ESM projects',
+            'Using require() in ESM modules',
+            'Using import in CommonJS without transpilation',
+            'Assuming npm when project uses yarn/pnpm'
+        ],
+        detection: 'Check tsconfig.json moduleResolution and package.json type field',
+        prevention: 'Run build context detection before any code generation',
+        autoFixable: true
+    },
+    {
+        id: 'package-hallucination',
+        name: 'Package Hallucination',
+        category: 'syntax',
+        description: 'AI suggests packages that don\'t exist (24% of the time)',
+        frequency: 'very-common',
+        impact: 'high',
+        examples: [
+            'import { SuperChart } from "react-super-charts"  // doesn\'t exist',
+            'import reqeusts  // typo of "requests"',
+            'from beautifulsoup import BeautifulSoup  // should be beautifulsoup4'
+        ],
+        detection: 'Real-time package registry validation',
+        prevention: 'Validate all package names against npm/pypi/maven registries',
+        autoFixable: true
+    },
+    {
+        id: 'async-await-confusion',
+        name: 'Async/Await Confusion',
+        category: 'logic',
+        description: 'AI forgets to await async functions or marks sync functions as async',
+        frequency: 'very-common',
+        impact: 'high',
+        examples: [
+            'const data = fetch(url);  // Missing await',
+            'async function getValue() { return 5; }  // Unnecessary async',
+            'promises.forEach(async (p) => await p);  // Doesn\'t wait'
+        ],
+        detection: 'AST analysis for Promise-returning functions without await',
+        prevention: 'Track async context and validate Promise handling',
+        autoFixable: true
+    },
+    {
+        id: 'sql-injection-prone',
+        name: 'SQL Injection Vulnerability',
+        category: 'security',
+        description: 'AI generates SQL queries vulnerable to injection',
+        frequency: 'common',
+        impact: 'critical',
+        examples: [
+            'db.query(`SELECT * FROM users WHERE id = ${userId}`)',
+            'connection.execute("DELETE FROM " + tableName)',
+            'WHERE name = \'" + userName + "\'"'
+        ],
+        detection: 'Pattern matching for string concatenation in SQL',
+        prevention: 'Force parameterized queries, block string concatenation',
+        autoFixable: true
+    },
+    {
+        id: 'hardcoded-secrets',
+        name: 'Hardcoded Secrets',
+        category: 'security',
+        description: 'AI puts API keys, passwords, and secrets directly in code',
+        frequency: 'common',
+        impact: 'critical',
+        examples: [
+            'const API_KEY = "sk-1234567890abcdef"',
+            'password: "admin123"',
+            'mongodb://user:pass@localhost/db'
+        ],
+        detection: 'Regex patterns for common secret formats',
+        prevention: 'Replace with environment variables automatically',
+        autoFixable: true
+    },
+    {
+        id: 'file-path-assumption',
+        name: 'File Path Assumption',
+        category: 'logic',
+        description: 'AI assumes file paths that don\'t exist or uses wrong separators',
+        frequency: 'very-common',
+        impact: 'medium',
+        examples: [
+            'fs.readFile("C:\\\\Users\\\\data.txt")  // Windows path on Unix',
+            'import data from "../../../config"  // Wrong relative depth',
+            'require("./src/utils")  // Path doesn\'t exist'
+        ],
+        detection: 'File system validation before file operations',
+        prevention: 'Use path.join() and validate paths exist',
+        autoFixable: true
+    },
+    {
+        id: 'infinite-loop-risk',
+        name: 'Infinite Loop Risk',
+        category: 'logic',
+        description: 'AI creates loops without proper exit conditions',
+        frequency: 'occasional',
+        impact: 'high',
+        examples: [
+            'while (true) { if (condition) break; }  // Break might never occur',
+            'for (let i = 0; i < arr.length; i--) // Wrong increment',
+            'do { value = getValue(); } while (value);  // No guarantee of falsy'
+        ],
+        detection: 'Static analysis for loop termination conditions',
+        prevention: 'Add maximum iteration limits and timeout checks',
+        autoFixable: false
+    },
+    {
+        id: 'type-mismatch-blindness',
+        name: 'Type Mismatch Blindness',
+        category: 'syntax',
+        description: 'AI ignores TypeScript types or creates type errors',
+        frequency: 'very-common',
+        impact: 'medium',
+        examples: [
+            'function add(a: number, b: number) { return a + b; } add("1", "2")',
+            'const user: User = { namn: "John" }  // Typo in property name',
+            'return null;  // Function expects string, not null'
+        ],
+        detection: 'TypeScript compiler API for type checking',
+        prevention: 'Run tsc --noEmit before suggesting code',
+        autoFixable: true
+    },
+    {
+        id: 'over-engineering',
+        name: 'Over-Engineering Simple Tasks',
+        category: 'architecture',
+        description: 'AI creates unnecessarily complex solutions for simple problems',
+        frequency: 'common',
+        impact: 'low',
+        examples: [
+            '// To check if number is even:\nclass EvenChecker { constructor() {} check(n) { return n % 2 === 0; }}',
+            'Creating 5 abstraction layers for a 10-line script',
+            'Using design patterns where a simple function would suffice'
+        ],
+        detection: 'Complexity metrics vs problem scope analysis',
+        prevention: 'Suggest simpler alternatives when complexity exceeds threshold',
+        autoFixable: false
+    },
+    {
+        id: 'api-version-mismatch',
+        name: 'API Version Mismatch',
+        category: 'syntax',
+        description: 'AI uses deprecated or future API features',
+        frequency: 'common',
+        impact: 'medium',
+        examples: [
+            'React.createClass({})  // Deprecated in React 16+',
+            'document.querySelector().showModal()  // Not in all browsers',
+            'Python 2 print statement in Python 3 code'
+        ],
+        detection: 'Version-aware API compatibility checking',
+        prevention: 'Check package.json versions and target environments',
+        autoFixable: true
+    },
+    {
+        id: 'resource-leak',
+        name: 'Resource Leak',
+        category: 'performance',
+        description: 'AI forgets to close files, connections, or clean up resources',
+        frequency: 'common',
+        impact: 'high',
+        examples: [
+            'const file = fs.openSync(path);  // Never closed',
+            'setInterval(() => {}, 1000);  // Never cleared',
+            'eventEmitter.on("data", handler);  // Never removed'
+        ],
+        detection: 'Track resource allocation and disposal patterns',
+        prevention: 'Auto-add cleanup code, use try-finally blocks',
+        autoFixable: true
+    },
+    {
+        id: 'mutation-of-immutable',
+        name: 'Mutating Immutable Data',
+        category: 'logic',
+        description: 'AI modifies data that should be immutable',
+        frequency: 'common',
+        impact: 'medium',
+        examples: [
+            'props.user.name = "New Name"  // Mutating React props',
+            'const frozen = Object.freeze({}); frozen.x = 1;',
+            'Redux state.items.push(newItem)  // Direct state mutation'
+        ],
+        detection: 'Track immutable data patterns in framework context',
+        prevention: 'Suggest immutable operations (spread, Object.assign)',
+        autoFixable: true
+    },
+    {
+        id: 'promise-anti-pattern',
+        name: 'Promise Anti-Patterns',
+        category: 'logic',
+        description: 'AI creates promise anti-patterns like the pyramid of doom',
+        frequency: 'common',
+        impact: 'low',
+        examples: [
+            'return new Promise((resolve) => { resolve(asyncFunc()) })',
+            'Nested .then() chains instead of async/await',
+            'Not returning promises in .then() chains'
+        ],
+        detection: 'AST pattern matching for promise anti-patterns',
+        prevention: 'Suggest async/await refactoring',
+        autoFixable: true
+    },
+    {
+        id: 'null-reference-error',
+        name: 'Null/Undefined Reference',
+        category: 'logic',
+        description: 'AI doesn\'t check for null/undefined before accessing properties',
+        frequency: 'very-common',
+        impact: 'high',
+        examples: [
+            'const name = user.profile.name  // user or profile might be null',
+            'array[0].value  // array might be empty',
+            'response.data.items.length  // Multiple unchecked properties'
+        ],
+        detection: 'Static analysis for property access chains',
+        prevention: 'Add optional chaining or null checks',
+        autoFixable: true
+    },
+    {
+        id: 'regex-catastrophic-backtrack',
+        name: 'Regex Catastrophic Backtracking',
+        category: 'performance',
+        description: 'AI creates regex patterns vulnerable to ReDoS attacks',
+        frequency: 'rare',
+        impact: 'critical',
+        examples: [
+            '/(a+)+$/',
+            '/(.*){1,32000}[bc]/',
+            '/^((ab)*)+$/'
+        ],
+        detection: 'Regex complexity analysis for exponential patterns',
+        prevention: 'Simplify regex or use alternative parsing methods',
+        autoFixable: false
+    }
+];
+/**
+ * Get AI errors by category
+ */
+export function getErrorsByCategory(category) {
+    return AI_ERROR_CATALOG.filter(error => error.category === category);
+}
+/**
+ * Get high-impact errors that should be prevented first
+ */
+export function getCriticalErrors() {
+    return AI_ERROR_CATALOG.filter(error => error.impact === 'critical' ||
+        (error.impact === 'high' && error.frequency === 'very-common'));
+}
+/**
+ * Get auto-fixable errors
+ */
+export function getAutoFixableErrors() {
+    return AI_ERROR_CATALOG.filter(error => error.autoFixable);
+}
+//# sourceMappingURL=ai-errors.js.map

package/dist/developer/types/ai-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-errors.js","sourceRoot":"","sources":["../../../src/developer/types/ai-errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAqB;IAChD;QACE,EAAE,EAAE,yBAAyB;QAC7B,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,2EAA2E;QACxF,SAAS,EAAE,aAAa;QACxB,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,sDAAsD;YACtD,gCAAgC;YAChC,gDAAgD;YAChD,0CAA0C;SAC3C;QACD,SAAS,EAAE,kEAAkE;QAC7E,UAAU,EAAE,wDAAwD;QACpE,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,0DAA0D;QACvE,SAAS,EAAE,aAAa;QACxB,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,oEAAoE;YACpE,wCAAwC;YACxC,sEAAsE;SACvE;QACD,SAAS,EAAE,uCAAuC;QAClD,UAAU,EAAE,8DAA8D;QAC1E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,sEAAsE;QACnF,SAAS,EAAE,aAAa;QACxB,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,4CAA4C;YAC5C,+DAA+D;YAC/D,2DAA2D;SAC5D;QACD,SAAS,EAAE,4DAA4D;QACvE,UAAU,EAAE,mDAAmD;QAC/D,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,kDAAkD;QAC/D,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE;YACR,sDAAsD;YACtD,gDAAgD;YAChD,oCAAoC;SACrC;QACD,SAAS,EAAE,kDAAkD;QAC7D,UAAU,EAAE,yDAAyD;QACrE,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,2DAA2D;QACxE,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE;YACR,uCAAuC;YACvC,sBAAsB;YACtB,kCAAkC;SACnC;QACD,SAAS,EAAE,0CAA0C;QACrD,UAAU,EAAE,kDAAkD;QAC9D,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,kEAAkE;QAC/E,SAAS,EAAE,aAAa;QACxB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE;YACR,iEAAiE;YACjE,6DAA6D;YAC7D,gDAAgD;SACjD;QACD,SAAS,EAAE,+CAA+C;QAC1D,UAAU,EAAE,0CAA0C;QACtD,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,iDAAiD;QAC9D,SAAS,EAAE,YAAY;QACvB,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,oEAAoE;YACpE,yDAAyD;YACzD,qEAAqE;SACtE;QACD,SAAS,EAAE,iDAAiD;QAC5D,UAAU,EAAE,iDAAiD;QAC7D,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,yBAAyB;QAC7B,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,oDAAoD;QACjE,SAAS,EAAE,aAAa;QACxB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE;YACR,oEAAoE;YACpE,+DAA+D;YAC/D,oDAAoD;SACrD;QACD,SAAS,EAAE,2CAA2C;QACtD,UAAU,EAAE,yCAAyC;QACrD,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,cAAc;QACxB,WAAW,EAAE,gEAAgE;QAC7E,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE;YACR,wGAAwG;YACxG,oDAAoD;YACpD,6DAA6D;SAC9D;QACD,SAAS,EAAE,8CAA8C;QACzD,UAAU,EAAE,gEAAgE;QAC5E,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,2CAA2C;QACxD,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE;YACR,mDAAmD;YACnD,8DAA8D;YAC9D,2CAA2C;SAC5C;QACD,SAAS,EAAE,0CAA0C;QACrD,UAAU,EAAE,qDAAqD;QACjE,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,aAAa;QACvB,WAAW,EAAE,+DAA+D;QAC5E,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,kDAAkD;YAClD,gDAAgD;YAChD,qDAAqD;SACtD;QACD,SAAS,EAAE,iDAAiD;QAC5D,UAAU,EAAE,+CAA+C;QAC3D,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,2CAA2C;QACxD,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE;YACR,uDAAuD;YACvD,iDAAiD;YACjD,2DAA2D;SAC5D;QACD,SAAS,EAAE,oDAAoD;QAC/D,UAAU,EAAE,sDAAsD;QAClE,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,2DAA2D;QACxE,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE;YACR,2DAA2D;YAC3D,8CAA8C;YAC9C,0CAA0C;SAC3C;QACD,SAAS,EAAE,gDAAgD;QAC3D,UAAU,EAAE,iCAAiC;QAC7C,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,kEAAkE;QAC/E,SAAS,EAAE,aAAa;QACxB,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE;YACR,kEAAkE;YAClE,yCAAyC;YACzC,8DAA8D;SAC/D;QACD,SAAS,EAAE,4CAA4C;QACvD,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,aAAa;QACvB,WAAW,EAAE,uDAAuD;QACpE,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE;YACR,UAAU;YACV,qBAAqB;YACrB,cAAc;SACf;QACD,SAAS,EAAE,oDAAoD;QAC/D,UAAU,EAAE,mDAAmD;QAC/D,WAAW,EAAE,KAAK;KACnB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAoC;IACtE,OAAO,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,gBAAgB,CAAC,MAAM,CAC5B,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU;QACpC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,aAAa,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AAC7D,CAAC"}

package/dist/developer/types/package.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Package validation types for developer augmentation features
+ */
+export interface PackageInfo {
+    name: string;
+    version?: string;
+    registry: 'npm' | 'pypi' | 'maven' | 'cargo' | 'gem' | 'nuget' | 'go';
+    exists: boolean;
+    latestVersion?: string;
+    deprecated?: boolean;
+    securityIssues?: SecurityIssue[];
+    lastChecked?: Date;
+    warning?: string;
+}
+export interface SecurityIssue {
+    severity: 'low' | 'medium' | 'high' | 'critical';
+    description: string;
+    cve?: string;
+    fixedIn?: string;
+}
+export interface PackageValidationResult {
+    package: PackageInfo;
+    suggestions?: string[];
+    warning?: string;
+    blocked: boolean;
+    reason?: string;
+}
+export interface RegistryValidator {
+    validate(packageName: string, version?: string): Promise<PackageInfo>;
+    search(query: string, limit?: number): Promise<PackageInfo[]>;
+}
+//# sourceMappingURL=package.d.ts.map

package/dist/developer/types/package.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.d.ts","sourceRoot":"","sources":["../../../src/developer/types/package.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC;IACtE,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,WAAW,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;CAC/D"}

package/dist/developer/types/package.js

@@ -0,0 +1,5 @@
+/**
+ * Package validation types for developer augmentation features
+ */
+export {};
+//# sourceMappingURL=package.js.map

package/dist/developer/types/package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.js","sourceRoot":"","sources":["../../../src/developer/types/package.ts"],"names":[],"mappings":"AAAA;;GAEG"}