driftdetect-core 0.5.0 → 0.6.1

package/dist/simulation/scorers/security-scorer.js

@@ -0,0 +1,346 @@
+/**
+ * Security Scorer
+ *
+ * Calculates security metrics for an approach using reachability analysis:
+ * - Security risk score
+ * - Data access implications
+ * - Auth implications
+ * - Security warnings
+ *
+ * @module simulation/scorers/security-scorer
+ */
+import { ReachabilityEngine } from '../../call-graph/analysis/reachability.js';
+// ============================================================================
+// Security Scorer
+// ============================================================================
+/**
+ * Scores the security implications of an approach
+ */
+export class SecurityScorer {
+    config;
+    reachabilityEngine = null;
+    constructor(config) {
+        this.config = config;
+        if (config.callGraph) {
+            this.reachabilityEngine = new ReachabilityEngine(config.callGraph);
+        }
+    }
+    /**
+     * Calculate security metrics for an approach
+     */
+    async score(approach) {
+        // If no call graph, estimate from approach metadata
+        if (!this.reachabilityEngine || !this.config.callGraph) {
+            return this.estimateSecurity(approach);
+        }
+        // Analyze data access implications
+        const dataAccessImplications = this.analyzeDataAccess(approach);
+        // Analyze auth implications
+        const authImplications = this.analyzeAuthImplications(approach);
+        // Generate security warnings
+        const warnings = this.generateWarnings(approach, dataAccessImplications, authImplications);
+        // Calculate security risk score
+        const securityRisk = this.calculateSecurityRisk(dataAccessImplications, authImplications, warnings);
+        return {
+            securityRisk,
+            dataAccessImplications,
+            authImplications,
+            warnings,
+        };
+    }
+    // ==========================================================================
+    // Data Access Analysis
+    // ==========================================================================
+    /**
+     * Analyze data access implications of the approach
+     */
+    analyzeDataAccess(approach) {
+        if (!this.reachabilityEngine) {
+            return [];
+        }
+        const implications = [];
+        const seenAccess = new Set();
+        // For each target file, find reachable data
+        for (const file of approach.targetFiles) {
+            // Find functions in this file
+            const functions = this.getFunctionsInFile(file);
+            for (const funcId of functions) {
+                const result = this.reachabilityEngine.getReachableDataFromFunction(funcId, {
+                    maxDepth: this.config.maxDepth ?? 10,
+                    sensitiveOnly: false,
+                });
+                // Collect data access
+                for (const access of result.reachableAccess) {
+                    const key = `${access.access.table}:${access.access.fields.join(',')}:${access.access.operation}`;
+                    if (seenAccess.has(key))
+                        continue;
+                    seenAccess.add(key);
+                    const sensitivity = this.classifySensitivity(access.access.table, access.access.fields);
+                    const implication = {
+                        table: access.access.table,
+                        fields: access.access.fields,
+                        operation: access.access.operation,
+                        sensitivity,
+                    };
+                    const throughFunc = access.path[access.path.length - 1]?.functionName;
+                    if (throughFunc) {
+                        implication.throughFunction = throughFunc;
+                    }
+                    implications.push(implication);
+                }
+            }
+        }
+        return implications;
+    }
+    /**
+     * Get function IDs in a file
+     */
+    getFunctionsInFile(file) {
+        if (!this.config.callGraph)
+            return [];
+        const functions = [];
+        for (const [id, func] of this.config.callGraph.functions) {
+            if (func.file === file) {
+                functions.push(id);
+            }
+        }
+        return functions;
+    }
+    /**
+     * Classify sensitivity of data access
+     */
+    classifySensitivity(table, fields) {
+        const text = `${table} ${fields.join(' ')}`.toLowerCase();
+        if (/password|secret|token|api_key|private_key|auth_token|refresh_token/.test(text)) {
+            return 'credentials';
+        }
+        if (/credit_card|card_number|cvv|bank|account_number|salary|income|payment|billing|stripe/.test(text)) {
+            return 'financial';
+        }
+        if (/diagnosis|medical|health|prescription|insurance|hipaa|patient/.test(text)) {
+            return 'health';
+        }
+        if (/ssn|social_security|email|phone|address|dob|birth|name|user/.test(text)) {
+            return 'pii';
+        }
+        return 'unknown';
+    }
+    // ==========================================================================
+    // Auth Analysis
+    // ==========================================================================
+    /**
+     * Analyze authentication/authorization implications
+     */
+    analyzeAuthImplications(approach) {
+        const implications = [];
+        // Check if approach affects auth-related code
+        const authKeywords = ['auth', 'login', 'session', 'token', 'jwt', 'permission', 'role', 'guard'];
+        for (const file of approach.targetFiles) {
+            const fileLower = file.toLowerCase();
+            for (const keyword of authKeywords) {
+                if (fileLower.includes(keyword)) {
+                    implications.push(`Modifies auth-related file: ${file}`);
+                    break;
+                }
+            }
+        }
+        // Check strategy-specific auth implications
+        if (approach.strategy === 'guard' || approach.strategy === 'policy') {
+            implications.push('Implements authorization logic');
+        }
+        if (approach.strategy === 'middleware') {
+            implications.push('May intercept requests before auth checks');
+        }
+        // Check if approach is for auth-related task
+        if (approach.followsPatterns?.some(p => p.toLowerCase().includes('auth'))) {
+            implications.push('Follows authentication/authorization patterns');
+        }
+        return implications;
+    }
+    // ==========================================================================
+    // Warning Generation
+    // ==========================================================================
+    /**
+     * Generate security warnings
+     */
+    generateWarnings(approach, dataAccess, authImplications) {
+        const warnings = [];
+        // Warn about credential access
+        const credentialAccess = dataAccess.filter(d => d.sensitivity === 'credentials');
+        if (credentialAccess.length > 0) {
+            warnings.push({
+                type: 'credential-access',
+                message: `Approach may access ${credentialAccess.length} credential field(s)`,
+                severity: 'critical',
+                recommendation: 'Ensure proper encryption and access controls',
+            });
+        }
+        // Warn about financial data
+        const financialAccess = dataAccess.filter(d => d.sensitivity === 'financial');
+        if (financialAccess.length > 0) {
+            warnings.push({
+                type: 'financial-data',
+                message: `Approach may access ${financialAccess.length} financial field(s)`,
+                severity: 'high',
+                recommendation: 'Ensure PCI-DSS compliance',
+            });
+        }
+        // Warn about health data
+        const healthAccess = dataAccess.filter(d => d.sensitivity === 'health');
+        if (healthAccess.length > 0) {
+            warnings.push({
+                type: 'health-data',
+                message: `Approach may access ${healthAccess.length} health-related field(s)`,
+                severity: 'high',
+                recommendation: 'Ensure HIPAA compliance',
+            });
+        }
+        // Warn about PII
+        const piiAccess = dataAccess.filter(d => d.sensitivity === 'pii');
+        if (piiAccess.length > 0) {
+            warnings.push({
+                type: 'pii-access',
+                message: `Approach may access ${piiAccess.length} PII field(s)`,
+                severity: 'medium',
+                recommendation: 'Ensure GDPR/privacy compliance',
+            });
+        }
+        // Warn about auth modifications
+        if (authImplications.length > 0) {
+            warnings.push({
+                type: 'auth-modification',
+                message: 'Approach modifies authentication/authorization code',
+                severity: 'high',
+                recommendation: 'Review security implications carefully',
+            });
+        }
+        // Warn about distributed changes
+        if (approach.strategy === 'distributed' || approach.strategy === 'per-function') {
+            warnings.push({
+                type: 'distributed-security',
+                message: 'Distributed approach may have inconsistent security enforcement',
+                severity: 'medium',
+                recommendation: 'Consider centralized security checks',
+            });
+        }
+        // Warn about write operations
+        const writeOps = dataAccess.filter(d => d.operation === 'write' || d.operation === 'delete');
+        if (writeOps.length > 0) {
+            warnings.push({
+                type: 'data-modification',
+                message: `Approach may modify/delete data in ${writeOps.length} location(s)`,
+                severity: 'medium',
+                recommendation: 'Ensure proper validation and audit logging',
+            });
+        }
+        return warnings;
+    }
+    // ==========================================================================
+    // Risk Calculation
+    // ==========================================================================
+    /**
+     * Calculate overall security risk score (0-100)
+     */
+    calculateSecurityRisk(dataAccess, authImplications, warnings) {
+        let score = 0;
+        // Score based on data sensitivity
+        for (const access of dataAccess) {
+            switch (access.sensitivity) {
+                case 'credentials':
+                    score += 25;
+                    break;
+                case 'financial':
+                    score += 20;
+                    break;
+                case 'health':
+                    score += 18;
+                    break;
+                case 'pii':
+                    score += 10;
+                    break;
+            }
+        }
+        // Score based on auth implications
+        score += authImplications.length * 10;
+        // Score based on warnings
+        for (const warning of warnings) {
+            switch (warning.severity) {
+                case 'critical':
+                    score += 15;
+                    break;
+                case 'high':
+                    score += 10;
+                    break;
+                case 'medium':
+                    score += 5;
+                    break;
+                case 'low':
+                    score += 2;
+                    break;
+            }
+        }
+        return Math.min(100, Math.round(score));
+    }
+    // ==========================================================================
+    // Estimation (when no call graph)
+    // ==========================================================================
+    /**
+     * Estimate security when call graph is not available
+     */
+    estimateSecurity(approach) {
+        const warnings = [];
+        const authImplications = [];
+        // Check file names for security-related code
+        const securityKeywords = ['auth', 'security', 'password', 'token', 'session', 'permission'];
+        for (const file of approach.targetFiles) {
+            const fileLower = file.toLowerCase();
+            for (const keyword of securityKeywords) {
+                if (fileLower.includes(keyword)) {
+                    authImplications.push(`May affect security-related file: ${file}`);
+                    break;
+                }
+            }
+        }
+        // Add general warning
+        if (authImplications.length > 0) {
+            warnings.push({
+                type: 'security-files',
+                message: 'Approach affects security-related files',
+                severity: 'medium',
+                recommendation: 'Review security implications (call graph not available for detailed analysis)',
+            });
+        }
+        // Calculate basic risk score
+        let securityRisk = 0;
+        securityRisk += authImplications.length * 15;
+        securityRisk += approach.targetFiles.length * 2;
+        // Strategy-based risk
+        const strategyRisk = {
+            guard: 20,
+            policy: 20,
+            middleware: 15,
+            interceptor: 15,
+            filter: 10,
+            decorator: 10,
+            wrapper: 10,
+            custom: 15,
+        };
+        securityRisk += strategyRisk[approach.strategy] ?? 5;
+        return {
+            securityRisk: Math.min(100, securityRisk),
+            dataAccessImplications: [],
+            authImplications,
+            warnings,
+        };
+    }
+}
+// ============================================================================
+// Factory Function
+// ============================================================================
+/**
+ * Create a security scorer
+ */
+export function createSecurityScorer(config) {
+    return new SecurityScorer(config);
+}
+//# sourceMappingURL=security-scorer.js.map

package/dist/simulation/scorers/security-scorer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scorer.js","sourceRoot":"","sources":["../../../src/simulation/scorers/security-scorer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAkB/E,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,cAAc;IACR,MAAM,CAAuB;IACtC,kBAAkB,GAA8B,IAAI,CAAC;IAE7D,YAAY,MAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC,kBAAkB,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,QAA4B;QACtC,oDAAoD;QACpD,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,mCAAmC;QACnC,MAAM,sBAAsB,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAEhE,4BAA4B;QAC5B,MAAM,gBAAgB,GAAG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAEhE,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;QAE3F,gCAAgC;QAChC,MAAM,YAAY,GAAG,IAAI,CAAC,qBAAqB,CAC7C,sBAAsB,EACtB,gBAAgB,EAChB,QAAQ,CACT,CAAC;QAEF,OAAO;YACL,YAAY;YACZ,sBAAsB;YACtB,gBAAgB;YAChB,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,uBAAuB;IACvB,6EAA6E;IAE7E;;OAEG;IACK,iBAAiB,CAAC,QAA4B;QACpD,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,YAAY,GAA4B,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QAErC,4CAA4C;QAC5C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxC,8BAA8B;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAEhD,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,MAAM,EAAE;oBAC1E,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE;oBACpC,aAAa,EAAE,KAAK;iBACrB,CAAC,CAAC;gBAEH,sBAAsB;gBACtB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5C,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBAClG,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAClC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAEpB,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAExF,MAAM,WAAW,GAA0B;wBACzC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;wBAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;wBAC5B,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS;wBAClC,WAAW;qBACZ,CAAC;oBAEF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC;oBACtE,IAAI,WAAW,EAAE,CAAC;wBAChB,WAAW,CAAC,eAAe,GAAG,WAAW,CAAC;oBAC5C,CAAC;oBAED,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,IAAY;QACrC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC;QAEtC,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;YACzD,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACvB,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,mBAAmB,CACzB,KAAa,EACb,MAAgB;QAEhB,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;QAE1D,IAAI,oEAAoE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpF,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,IAAI,sFAAsF,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtG,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,+DAA+D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/E,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,6DAA6D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,6EAA6E;IAC7E,gBAAgB;IAChB,6EAA6E;IAE7E;;OAEG;IACK,uBAAuB,CAAC,QAA4B;QAC1D,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,8CAA8C;QAC9C,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAEjG,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;gBACnC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAChC,YAAY,CAAC,IAAI,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;oBACzD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpE,YAAY,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YACvC,YAAY,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;QAED,6CAA6C;QAC7C,IAAI,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC1E,YAAY,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,6EAA6E;IAC7E,qBAAqB;IACrB,6EAA6E;IAE7E;;OAEG;IACK,gBAAgB,CACtB,QAA4B,EAC5B,UAAmC,EACnC,gBAA0B;QAE1B,MAAM,QAAQ,GAAsB,EAAE,CAAC;QAEvC,+BAA+B;QAC/B,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,aAAa,CAAC,CAAC;QACjF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,uBAAuB,gBAAgB,CAAC,MAAM,sBAAsB;gBAC7E,QAAQ,EAAE,UAAU;gBACpB,cAAc,EAAE,8CAA8C;aAC/D,CAAC,CAAC;QACL,CAAC;QAED,4BAA4B;QAC5B,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QAC9E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,uBAAuB,eAAe,CAAC,MAAM,qBAAqB;gBAC3E,QAAQ,EAAE,MAAM;gBAChB,cAAc,EAAE,2BAA2B;aAC5C,CAAC,CAAC;QACL,CAAC;QAED,yBAAyB;QACzB,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC;QACxE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,uBAAuB,YAAY,CAAC,MAAM,0BAA0B;gBAC7E,QAAQ,EAAE,MAAM;gBAChB,cAAc,EAAE,yBAAyB;aAC1C,CAAC,CAAC;QACL,CAAC;QAED,iBAAiB;QACjB,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC;QAClE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,uBAAuB,SAAS,CAAC,MAAM,eAAe;gBAC/D,QAAQ,EAAE,QAAQ;gBAClB,cAAc,EAAE,gCAAgC;aACjD,CAAC,CAAC;QACL,CAAC;QAED,gCAAgC;QAChC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,qDAAqD;gBAC9D,QAAQ,EAAE,MAAM;gBAChB,cAAc,EAAE,wCAAwC;aACzD,CAAC,CAAC;QACL,CAAC;QAED,iCAAiC;QACjC,IAAI,QAAQ,CAAC,QAAQ,KAAK,aAAa,IAAI,QAAQ,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;YAChF,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,iEAAiE;gBAC1E,QAAQ,EAAE,QAAQ;gBAClB,cAAc,EAAE,sCAAsC;aACvD,CAAC,CAAC;QACL,CAAC;QAED,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;QAC7F,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,sCAAsC,QAAQ,CAAC,MAAM,cAAc;gBAC5E,QAAQ,EAAE,QAAQ;gBAClB,cAAc,EAAE,4CAA4C;aAC7D,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,6EAA6E;IAC7E,mBAAmB;IACnB,6EAA6E;IAE7E;;OAEG;IACK,qBAAqB,CAC3B,UAAmC,EACnC,gBAA0B,EAC1B,QAA2B;QAE3B,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,kCAAkC;QAClC,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,QAAQ,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC3B,KAAK,aAAa;oBAChB,KAAK,IAAI,EAAE,CAAC;oBACZ,MAAM;gBACR,KAAK,WAAW;oBACd,KAAK,IAAI,EAAE,CAAC;oBACZ,MAAM;gBACR,KAAK,QAAQ;oBACX,KAAK,IAAI,EAAE,CAAC;oBACZ,MAAM;gBACR,KAAK,KAAK;oBACR,KAAK,IAAI,EAAE,CAAC;oBACZ,MAAM;YACV,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,KAAK,IAAI,gBAAgB,CAAC,MAAM,GAAG,EAAE,CAAC;QAEtC,0BAA0B;QAC1B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACzB,KAAK,UAAU;oBACb,KAAK,IAAI,EAAE,CAAC;oBACZ,MAAM;gBACR,KAAK,MAAM;oBACT,KAAK,IAAI,EAAE,CAAC;oBACZ,MAAM;gBACR,KAAK,QAAQ;oBACX,KAAK,IAAI,CAAC,CAAC;oBACX,MAAM;gBACR,KAAK,KAAK;oBACR,KAAK,IAAI,CAAC,CAAC;oBACX,MAAM;YACV,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,6EAA6E;IAC7E,kCAAkC;IAClC,6EAA6E;IAE7E;;OAEG;IACK,gBAAgB,CAAC,QAA4B;QACnD,MAAM,QAAQ,GAAsB,EAAE,CAAC;QACvC,MAAM,gBAAgB,GAAa,EAAE,CAAC;QAEtC,6CAA6C;QAC7C,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QAC5F,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;gBACvC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAChC,gBAAgB,CAAC,IAAI,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;oBACnE,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,yCAAyC;gBAClD,QAAQ,EAAE,QAAQ;gBAClB,cAAc,EAAE,+EAA+E;aAChG,CAAC,CAAC;QACL,CAAC;QAED,6BAA6B;QAC7B,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,YAAY,IAAI,gBAAgB,CAAC,MAAM,GAAG,EAAE,CAAC;QAC7C,YAAY,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;QAEhD,sBAAsB;QACtB,MAAM,YAAY,GAA2B;YAC3C,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;SACX,CAAC;QACF,YAAY,IAAI,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAErD,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC;YACzC,sBAAsB,EAAE,EAAE;YAC1B,gBAAgB;YAChB,QAAQ;SACT,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAC/D,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/simulation/simulation-engine.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Simulation Engine
+ *
+ * Main orchestrator for the Speculative Execution Engine.
+ * Coordinates approach generation, scoring, and ranking.
+ *
+ * @module simulation/simulation-engine
+ */
+import type { CallGraph } from '../call-graph/types.js';
+import type { IPatternService } from '../patterns/service.js';
+import type { SimulationTask, SimulationResult, SimulationOptions, ScoringWeights } from './types.js';
+export interface SimulationEngineConfig {
+    projectRoot: string;
+    callGraph?: CallGraph | undefined;
+    patternService?: IPatternService | undefined;
+    weights?: Partial<ScoringWeights> | undefined;
+    options?: Partial<SimulationOptions> | undefined;
+}
+/**
+ * Main simulation engine that orchestrates the speculative execution
+ */
+export declare class SimulationEngine {
+    private readonly config;
+    private readonly weights;
+    private readonly options;
+    private readonly approachGenerator;
+    private readonly frictionScorer;
+    private readonly impactScorer;
+    private readonly patternAlignmentScorer;
+    private readonly securityScorer;
+    constructor(config: SimulationEngineConfig);
+    /**
+     * Run simulation for a task
+     */
+    simulate(task: SimulationTask): Promise<SimulationResult>;
+    /**
+     * Score a single approach
+     */
+    private scoreApproach;
+    /**
+     * Rank approaches by score
+     */
+    private rankApproaches;
+    /**
+     * Generate tradeoff comparisons between approaches
+     */
+    private generateTradeoffs;
+    /**
+     * Generate comparison text
+     */
+    private generateComparisonText;
+    /**
+     * Generate reasoning for an approach
+     */
+    private generateReasoning;
+    /**
+     * Generate pros and cons
+     */
+    private generateProsAndCons;
+    /**
+     * Collect warnings from scorers
+     */
+    private collectWarnings;
+    /**
+     * Generate next steps
+     */
+    private generateNextSteps;
+    /**
+     * Check constraints satisfaction
+     */
+    private checkConstraints;
+    /**
+     * Generate summary
+     */
+    private generateSummary;
+    /**
+     * Calculate confidence
+     */
+    private calculateConfidence;
+    /**
+     * Create a fallback approach when no strategies are available
+     */
+    private createFallbackApproach;
+}
+/**
+ * Create a simulation engine
+ */
+export declare function createSimulationEngine(config: SimulationEngineConfig): SimulationEngine;
+//# sourceMappingURL=simulation-engine.d.ts.map

package/dist/simulation/simulation-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"simulation-engine.d.ts","sourceRoot":"","sources":["../../src/simulation/simulation-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAqB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EACV,cAAc,EAGd,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EAGf,MAAM,YAAY,CAAC;AAapB,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAClC,cAAc,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC7C,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;CAClD;AAMD;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IAEtD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAyB;IAChE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;gBAEpC,MAAM,EAAE,sBAAsB;IAuD1C;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAoF/D;;OAEG;YACW,aAAa;IAqE3B;;OAEG;IACH,OAAO,CAAC,cAAc;IActB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAuDzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqB9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA4CzB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA4C3B;;OAEG;IACH,OAAO,CAAC,eAAe;IAmBvB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA0BzB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAQxB;;OAEG;IACH,OAAO,CAAC,eAAe;IAuBvB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAyB3B;;OAEG;IACH,OAAO,CAAC,sBAAsB;CAgB/B;AAMD;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,gBAAgB,CAEvF"}