erosolar-cli 1.5.4 → 1.5.5

package/dist/security/strategic-operations.js

@@ -0,0 +1,276 @@
+/**
+ * Strategic Operations Framework
+ *
+ * Provides strategic operations capabilities for comprehensive coverage
+ * of companies, countries, and global entities with proper authorization
+ * and geopolitical considerations.
+ *
+ * @license MIT
+ * @author Bo Shang
+ */
+import { globalSecurityIntegration } from './global-security-integration.js';
+import { ComprehensiveTargeting } from './comprehensive-targeting.js';
+export class StrategicOperations {
+    comprehensiveTargeting;
+    activeOperations = new Map();
+    constructor() {
+        this.comprehensiveTargeting = new ComprehensiveTargeting();
+    }
+    /**
+     * Plan a strategic operation
+     */
+    planOperation(targetIdentifier, operationType, objectives) {
+        const target = this.comprehensiveTargeting.getStrategicEntity(targetIdentifier);
+        if (!target) {
+            console.warn(`Target ${targetIdentifier} not found in strategic entities`);
+            return null;
+        }
+        // Validate operation authorization
+        if (!target.authorizedOperations.includes(operationType)) {
+            console.warn(`Operation ${operationType} not authorized for target ${targetIdentifier}`);
+            return null;
+        }
+        const operation = {
+            id: this.generateOperationId(),
+            target,
+            operationType: operationType,
+            objectives,
+            riskAssessment: this.assessRisks(target, operationType),
+            authorization: this.determineAuthorization(target, operationType),
+            constraints: this.determineConstraints(target, operationType)
+        };
+        this.activeOperations.set(operation.id, operation);
+        return operation;
+    }
+    /**
+     * Execute a strategic operation
+     */
+    async executeOperation(operationId, parameters) {
+        const operation = this.activeOperations.get(operationId);
+        if (!operation) {
+            throw new Error(`Operation ${operationId} not found`);
+        }
+        // Validate operation with global security
+        const validation = globalSecurityIntegration.validateGlobalOperation(this.getToolForOperation(operation.operationType), parameters, {
+            type: 'external',
+            target: operation.target.identifier,
+            operation: operation.operationType
+        });
+        if (!validation.allowed) {
+            throw new Error(`Operation validation failed: ${validation.reason}`);
+        }
+        // Log strategic operation
+        this.logStrategicOperation(operation, 'execution_started', parameters);
+        // Execute the operation (simulated - actual tool execution handled by tool runtime)
+        try {
+            const toolName = this.getToolForOperation(operation.operationType);
+            const result = {
+                operationId: operation.id,
+                toolName,
+                parameters,
+                status: 'completed',
+                timestamp: new Date().toISOString()
+            };
+            this.logStrategicOperation(operation, 'execution_completed', { result });
+            return result;
+        }
+        catch (error) {
+            this.logStrategicOperation(operation, 'execution_failed', { error: error instanceof Error ? error.message : String(error) });
+            throw error;
+        }
+    }
+    /**
+     * Get strategic entities by type
+     */
+    getStrategicEntitiesByType(type) {
+        return this.comprehensiveTargeting.getEntitiesByType(type);
+    }
+    /**
+     * Get strategic entities by level
+     */
+    getStrategicEntitiesByLevel(level) {
+        return this.comprehensiveTargeting.getEntitiesByStrategicLevel(level);
+    }
+    /**
+     * Get all strategic entities
+     */
+    getAllStrategicEntities() {
+        return this.comprehensiveTargeting.getAllStrategicEntities();
+    }
+    /**
+     * Generate strategic operations report
+     */
+    generateStrategicReport() {
+        const entities = this.getAllStrategicEntities();
+        const activeOps = Array.from(this.activeOperations.values());
+        const report = [
+            '🎯 Strategic Operations Report',
+            '==============================',
+            `Total Strategic Entities: ${entities.length}`,
+            `Active Operations: ${activeOps.length}`,
+            '',
+            '🏢 Technology Companies:',
+            ...this.getStrategicEntitiesByType('company').map(entity => `  • ${entity.identifier} [${entity.strategicLevel}] - ${entity.geopolitical.jurisdiction}`),
+            '',
+            '🌍 Countries:',
+            ...this.getStrategicEntitiesByType('country').map(entity => `  • ${entity.identifier} [${entity.strategicLevel}] - ${entity.geopolitical.alliances.join(', ')}`),
+            '',
+            '🤝 Strategic Alliances:',
+            ...this.getStrategicEntitiesByType('alliance').map(entity => `  • ${entity.identifier} [${entity.strategicLevel}]`),
+            '',
+            '⚡ Critical Infrastructure:',
+            '  • Global Power Grid [critical]',
+            '  • Global Financial System [critical]',
+            '  • Global Communications [critical]',
+            '  • Global Transportation [high]',
+            '  • Global Healthcare [high]',
+            '',
+            '📊 Strategic Distribution:',
+            `  Critical: ${this.getStrategicEntitiesByLevel('critical').length}`,
+            `  High: ${this.getStrategicEntitiesByLevel('high').length}`,
+            `  Medium: ${this.getStrategicEntitiesByLevel('medium').length}`,
+            `  Low: ${this.getStrategicEntitiesByLevel('low').length}`,
+            '',
+            '🔐 Security Classifications:',
+            `  Public: ${entities.filter(e => e.securityClassification === 'public').length}`,
+            `  Restricted: ${entities.filter(e => e.securityClassification === 'restricted').length}`,
+            `  Confidential: ${entities.filter(e => e.securityClassification === 'confidential').length}`,
+            `  Secret: ${entities.filter(e => e.securityClassification === 'secret').length}`
+        ];
+        if (activeOps.length > 0) {
+            report.push('', '🚀 Active Operations:');
+            activeOps.forEach(op => {
+                report.push(`  • ${op.id}: ${op.operationType} on ${op.target.identifier} [${op.riskAssessment.overallRisk} risk]`);
+            });
+        }
+        return report.join('\n');
+    }
+    /**
+     * Assess risks for an operation
+     */
+    assessRisks(target, _operationType) {
+        // Simplified risk assessment - in practice this would be more sophisticated
+        let geopoliticalRisk = 'low';
+        let operationalRisk = 'low';
+        let legalRisk = 'low';
+        // Geopolitical risk based on alliances and sanctions
+        if (target.geopolitical.sanctions.length > 0) {
+            geopoliticalRisk = 'high';
+        }
+        else if (target.geopolitical.alliances.includes('NATO') || target.geopolitical.alliances.includes('Five Eyes')) {
+            geopoliticalRisk = 'medium';
+        }
+        // Operational risk based on strategic level
+        if (target.strategicLevel === 'critical') {
+            operationalRisk = 'high';
+        }
+        else if (target.strategicLevel === 'high') {
+            operationalRisk = 'medium';
+        }
+        // Legal risk based on security classification
+        if (target.securityClassification === 'secret') {
+            legalRisk = 'critical';
+        }
+        else if (target.securityClassification === 'confidential') {
+            legalRisk = 'high';
+        }
+        else if (target.securityClassification === 'restricted') {
+            legalRisk = 'medium';
+        }
+        // Overall risk is the highest of the three
+        const overallRisk = [geopoliticalRisk, operationalRisk, legalRisk].reduce((highest, current) => {
+            const riskLevels = { low: 0, medium: 1, high: 2, critical: 3 };
+            return riskLevels[current] > riskLevels[highest] ? current : highest;
+        }, 'low');
+        return {
+            geopoliticalRisk,
+            operationalRisk,
+            legalRisk,
+            overallRisk
+        };
+    }
+    /**
+     * Determine authorization requirements
+     */
+    determineAuthorization(target, _operationType) {
+        const level = target.strategicLevel === 'critical' ? 'analysis' : 'research';
+        const approvals = ['security_team'];
+        let legalReview = false;
+        let seniorLeadership = false;
+        if (target.strategicLevel === 'critical') {
+            approvals.push('director_level');
+            legalReview = true;
+        }
+        if (target.securityClassification === 'secret' || target.securityClassification === 'confidential') {
+            approvals.push('legal_department');
+            legalReview = true;
+        }
+        if (target.strategicLevel === 'critical' && target.securityClassification === 'secret') {
+            seniorLeadership = true;
+            approvals.push('senior_leadership');
+        }
+        return {
+            level,
+            approvals,
+            legalReview,
+            seniorLeadership
+        };
+    }
+    /**
+     * Determine operational constraints
+     */
+    determineConstraints(target, _operationType) {
+        const constraints = {
+            legalRestrictions: ['responsible_disclosure']
+        };
+        if (target.strategicLevel === 'critical') {
+            constraints.timeWindow = 'business_hours_only';
+            constraints.resourceLimits = ['monitored_execution', 'limited_scope'];
+        }
+        if (target.securityClassification === 'secret') {
+            constraints.legalRestrictions.push('classified_handling', 'need_to_know_basis');
+            constraints.ethicalConsiderations = ['national_security_implications'];
+        }
+        if (target.geopolitical.sanctions.length > 0) {
+            constraints.legalRestrictions.push('sanctions_compliance');
+        }
+        return constraints;
+    }
+    /**
+     * Get appropriate tool for operation type
+     */
+    getToolForOperation(operationType) {
+        const toolMap = {
+            'security_analysis': 'WebFetch',
+            'vulnerability_assessment': 'WebSearch',
+            'threat_intelligence': 'WebSearch',
+            'defensive_research': 'WebFetch',
+            'compliance_audit': 'WebFetch'
+        };
+        return toolMap[operationType] || 'WebSearch';
+    }
+    /**
+     * Generate unique operation ID
+     */
+    generateOperationId() {
+        return `STRAT-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
+    }
+    /**
+     * Log strategic operation
+     */
+    logStrategicOperation(operation, status, details) {
+        console.log(`🎯 Strategic Operation ${operation.id}: ${status}`);
+        console.log(`   Target: ${operation.target.identifier}`);
+        console.log(`   Type: ${operation.operationType}`);
+        console.log(`   Risk: ${operation.riskAssessment.overallRisk}`);
+        if (Object.keys(details).length > 0) {
+            console.log(`   Details: ${JSON.stringify(details)}`);
+        }
+        console.log('');
+    }
+}
+/**
+ * Global strategic operations instance
+ */
+export const strategicOperations = new StrategicOperations();
+//# sourceMappingURL=strategic-operations.js.map

package/dist/security/strategic-operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategic-operations.js","sourceRoot":"","sources":["../../src/security/strategic-operations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAwB,MAAM,8BAA8B,CAAC;AAkC5F,MAAM,OAAO,mBAAmB;IACtB,sBAAsB,CAAyB;IAC/C,gBAAgB,GAAoC,IAAI,GAAG,EAAE,CAAC;IAEtE;QACE,IAAI,CAAC,sBAAsB,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,gBAAwB,EAAE,aAAqB,EAAE,UAAoB;QACjF,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,UAAU,gBAAgB,kCAAkC,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,aAAa,aAAa,8BAA8B,gBAAgB,EAAE,CAAC,CAAC;YACzF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAuB;YACpC,EAAE,EAAE,IAAI,CAAC,mBAAmB,EAAE;YAC9B,MAAM;YACN,aAAa,EAAE,aAAoB;YACnC,UAAU;YACV,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC;YACvD,aAAa,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,aAAa,CAAC;YACjE,WAAW,EAAE,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC;SAC9D,CAAC;QAEF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACnD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,UAAmC;QAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,aAAa,WAAW,YAAY,CAAC,CAAC;QACxD,CAAC;QAED,0CAA0C;QAC1C,MAAM,UAAU,GAAG,yBAAyB,CAAC,uBAAuB,CAClE,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,aAAa,CAAC,EACjD,UAAU,EACV;YACE,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU;YACnC,SAAS,EAAE,SAAS,CAAC,aAAa;SACnC,CACF,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC;QAEvE,oFAAoF;QACpF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG;gBACb,WAAW,EAAE,SAAS,CAAC,EAAE;gBACzB,QAAQ;gBACR,UAAU;gBACV,MAAM,EAAE,WAAW;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YAEF,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACzE,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7H,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,0BAA0B,CAAC,IAAY;QACrC,OAAO,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,2BAA2B,CAAC,KAAa;QACvC,OAAO,IAAI,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,uBAAuB;QACrB,OAAO,IAAI,CAAC,sBAAsB,CAAC,uBAAuB,EAAE,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,uBAAuB;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG;YACb,gCAAgC;YAChC,gCAAgC;YAChC,6BAA6B,QAAQ,CAAC,MAAM,EAAE;YAC9C,sBAAsB,SAAS,CAAC,MAAM,EAAE;YACxC,EAAE;YACF,0BAA0B;YAC1B,GAAG,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CACzD,OAAO,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,cAAc,OAAO,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,CAC5F;YACD,EAAE;YACF,eAAe;YACf,GAAG,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CACzD,OAAO,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,cAAc,OAAO,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpG;YACD,EAAE;YACF,yBAAyB;YACzB,GAAG,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAC1D,OAAO,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,cAAc,GAAG,CACtD;YACD,EAAE;YACF,4BAA4B;YAC5B,kCAAkC;YAClC,wCAAwC;YACxC,sCAAsC;YACtC,kCAAkC;YAClC,8BAA8B;YAC9B,EAAE;YACF,4BAA4B;YAC5B,eAAe,IAAI,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE;YACpE,WAAW,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;YAC5D,aAAa,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE;YAChE,UAAU,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE;YAC1D,EAAE;YACF,8BAA8B;YAC9B,aAAa,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,KAAK,QAAQ,CAAC,CAAC,MAAM,EAAE;YACjF,iBAAiB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,KAAK,YAAY,CAAC,CAAC,MAAM,EAAE;YACzF,mBAAmB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,KAAK,cAAc,CAAC,CAAC,MAAM,EAAE;YAC7F,aAAa,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sBAAsB,KAAK,QAAQ,CAAC,CAAC,MAAM,EAAE;SAClF,CAAC;QAEF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACzC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;gBACrB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,aAAa,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,EAAE,CAAC,cAAc,CAAC,WAAW,QAAQ,CAAC,CAAC;YACtH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,MAAuB,EAAE,cAAsB;QACjE,4EAA4E;QAC5E,IAAI,gBAAgB,GAA2C,KAAK,CAAC;QACrE,IAAI,eAAe,GAA2C,KAAK,CAAC;QACpE,IAAI,SAAS,GAA2C,KAAK,CAAC;QAE9D,qDAAqD;QACrD,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,gBAAgB,GAAG,MAAM,CAAC;QAC5B,CAAC;aAAM,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACjH,gBAAgB,GAAG,QAAQ,CAAC;QAC9B,CAAC;QAED,4CAA4C;QAC5C,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YACzC,eAAe,GAAG,MAAM,CAAC;QAC3B,CAAC;aAAM,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;YAC5C,eAAe,GAAG,QAAQ,CAAC;QAC7B,CAAC;QAED,8CAA8C;QAC9C,IAAI,MAAM,CAAC,sBAAsB,KAAK,QAAQ,EAAE,CAAC;YAC/C,SAAS,GAAG,UAAU,CAAC;QACzB,CAAC;aAAM,IAAI,MAAM,CAAC,sBAAsB,KAAK,cAAc,EAAE,CAAC;YAC5D,SAAS,GAAG,MAAM,CAAC;QACrB,CAAC;aAAM,IAAI,MAAM,CAAC,sBAAsB,KAAK,YAAY,EAAE,CAAC;YAC1D,SAAS,GAAG,QAAQ,CAAC;QACvB,CAAC;QAED,2CAA2C;QAC3C,MAAM,WAAW,GAAG,CAAC,gBAAgB,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YAC7F,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC/D,OAAO,UAAU,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QACvE,CAAC,EAAE,KAAK,CAAC,CAAC;QAEV,OAAO;YACL,gBAAgB;YAChB,eAAe;YACf,SAAS;YACT,WAAW;SACZ,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,MAAuB,EAAE,cAAsB;QAC5E,MAAM,KAAK,GAAuD,MAAM,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QACjI,MAAM,SAAS,GAAa,CAAC,eAAe,CAAC,CAAC;QAC9C,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAE7B,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YACzC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACjC,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,IAAI,MAAM,CAAC,sBAAsB,KAAK,QAAQ,IAAI,MAAM,CAAC,sBAAsB,KAAK,cAAc,EAAE,CAAC;YACnG,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACnC,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU,IAAI,MAAM,CAAC,sBAAsB,KAAK,QAAQ,EAAE,CAAC;YACvF,gBAAgB,GAAG,IAAI,CAAC;YACxB,SAAS,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACtC,CAAC;QAED,OAAO;YACL,KAAK;YACL,SAAS;YACT,WAAW;YACX,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,MAAuB,EAAE,cAAsB;QAC1E,MAAM,WAAW,GAAQ;YACvB,iBAAiB,EAAE,CAAC,wBAAwB,CAAC;SAC9C,CAAC;QAEF,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YACzC,WAAW,CAAC,UAAU,GAAG,qBAAqB,CAAC;YAC/C,WAAW,CAAC,cAAc,GAAG,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,sBAAsB,KAAK,QAAQ,EAAE,CAAC;YAC/C,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CAAC;YAChF,WAAW,CAAC,qBAAqB,GAAG,CAAC,gCAAgC,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,aAAqB;QAC/C,MAAM,OAAO,GAA2B;YACtC,mBAAmB,EAAE,UAAU;YAC/B,0BAA0B,EAAE,WAAW;YACvC,qBAAqB,EAAE,WAAW;YAClC,oBAAoB,EAAE,UAAU;YAChC,kBAAkB,EAAE,UAAU;SAC/B,CAAC;QAEF,OAAO,OAAO,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,mBAAmB;QACzB,OAAO,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,SAA6B,EAAE,MAAc,EAAE,OAAgC;QAC3G,OAAO,CAAC,GAAG,CAAC,0BAA0B,SAAS,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,cAAc,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,EAAE,CAAC"}

package/dist/security/tool-security-wrapper.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Tool Security Wrapper
+ *
+ * Wraps tool execution with active stack security validation.
+ * Ensures all operations are scoped to the active stack only.
+ *
+ * @license MIT
+ * @author Bo Shang
+ */
+import { type SecurityValidationResult } from './active-stack-security.js';
+export declare class ToolSecurityWrapper {
+    constructor();
+    /**
+     * Execute a tool with security validation
+     */
+    executeTool(toolName: string, args: Record<string, unknown>): Promise<unknown>;
+    /**
+     * Validate tool operation based on tool type and arguments
+     */
+    private validateToolOperation;
+    /**
+     * Validate file operations
+     */
+    private validateFileOperation;
+    /**
+     * Validate command execution
+     */
+    private validateCommandExecution;
+    /**
+     * Validate network operations
+     */
+    private validateNetworkOperation;
+    /**
+     * Validate generic operations
+     */
+    private validateGenericOperation;
+    /**
+     * Get security log
+     */
+    getSecurityLog(): import("./active-stack-security.js").SecurityEvent[];
+    /**
+     * Clear security log
+     */
+    clearSecurityLog(): void;
+    /**
+     * Internal tool execution (placeholder implementation)
+     */
+    private executeToolInternal;
+}
+export declare class SecurityError extends Error {
+    readonly validationResult: SecurityValidationResult;
+    constructor(message: string, validationResult: SecurityValidationResult);
+}
+/**
+ * Create a secure tool runtime wrapper
+ */
+export declare function createSecureToolRuntime(): ToolSecurityWrapper;
+//# sourceMappingURL=tool-security-wrapper.d.ts.map

package/dist/security/tool-security-wrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-security-wrapper.d.ts","sourceRoot":"","sources":["../../src/security/tool-security-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAuB,KAAK,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEhG,qBAAa,mBAAmB;;IAK9B;;OAEG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAapF;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAc7B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAahC;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAqBhC;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAmBhC;;OAEG;IACH,cAAc;IAId;;OAEG;IACH,gBAAgB;IAIhB;;OAEG;YACW,mBAAmB;CAKlC;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,gBAAgB,EAAE,wBAAwB,CAAC;gBAE/C,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,wBAAwB;CAKxE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,mBAAmB,CAE7D"}

package/dist/security/tool-security-wrapper.js

@@ -0,0 +1,156 @@
+/**
+ * Tool Security Wrapper
+ *
+ * Wraps tool execution with active stack security validation.
+ * Ensures all operations are scoped to the active stack only.
+ *
+ * @license MIT
+ * @author Bo Shang
+ */
+import { activeStackSecurity } from './active-stack-security.js';
+export class ToolSecurityWrapper {
+    constructor() {
+        // Tool runtime would be initialized here in a real implementation
+    }
+    /**
+     * Execute a tool with security validation
+     */
+    async executeTool(toolName, args) {
+        // Validate the tool operation based on tool type
+        const validation = this.validateToolOperation(toolName, args);
+        if (!validation.allowed) {
+            throw new SecurityError(`Tool execution blocked: ${validation.reason}`, validation);
+        }
+        // Execute the actual tool
+        // Note: This would need to be adapted to the actual ToolRuntime interface
+        // For now, we'll assume a simplified interface
+        return await this.executeToolInternal(toolName, args);
+    }
+    /**
+     * Validate tool operation based on tool type and arguments
+     */
+    validateToolOperation(toolName, args) {
+        switch (toolName) {
+            case 'read_file':
+            case 'write_file':
+            case 'list_files':
+            case 'search_files':
+                return this.validateFileOperation(toolName, args);
+            case 'execute_bash':
+            case 'execute_bash_stream':
+                return this.validateCommandExecution(args);
+            case 'WebFetch':
+            case 'WebExtract':
+            case 'WebSearch':
+                return this.validateNetworkOperation(toolName, args);
+            default:
+                // For unknown tools, apply general security validation
+                return this.validateGenericOperation(args);
+        }
+    }
+    /**
+     * Validate file operations
+     */
+    validateFileOperation(toolName, args) {
+        const path = args['path'];
+        if (!path) {
+            return {
+                allowed: false,
+                reason: 'Missing file path',
+                severity: 'medium',
+            };
+        }
+        const operation = toolName === 'write_file' ? 'write' : 'read';
+        return activeStackSecurity.validateFileOperation(path, operation);
+    }
+    /**
+     * Validate command execution
+     */
+    validateCommandExecution(args) {
+        const command = args['command'];
+        if (!command) {
+            return {
+                allowed: false,
+                reason: 'Missing command',
+                severity: 'medium',
+            };
+        }
+        return activeStackSecurity.validateCommandExecution(command);
+    }
+    /**
+     * Validate network operations
+     */
+    validateNetworkOperation(toolName, args) {
+        let target;
+        if (toolName === 'WebFetch' || toolName === 'WebExtract') {
+            target = args['url'];
+        }
+        else if (toolName === 'WebSearch') {
+            target = args['query'];
+        }
+        if (!target) {
+            return {
+                allowed: false,
+                reason: 'Missing target/query',
+                severity: 'medium',
+            };
+        }
+        const operation = toolName.toLowerCase().replace('web', '');
+        return activeStackSecurity.validateNetworkOperation(target, operation);
+    }
+    /**
+     * Validate generic operations
+     */
+    validateGenericOperation(args) {
+        // Check for any file paths in arguments
+        for (const [key, value] of Object.entries(args)) {
+            if (typeof value === 'string' && value.includes('/')) {
+                const pathValidation = activeStackSecurity.validateFileOperation(value, 'read');
+                if (!pathValidation.allowed) {
+                    return {
+                        allowed: false,
+                        reason: `Invalid file path in argument '${key}': ${pathValidation.reason}`,
+                        severity: pathValidation.severity,
+                        details: pathValidation.details,
+                    };
+                }
+            }
+        }
+        return { allowed: true, severity: 'low' };
+    }
+    /**
+     * Get security log
+     */
+    getSecurityLog() {
+        return activeStackSecurity.getSecurityLog();
+    }
+    /**
+     * Clear security log
+     */
+    clearSecurityLog() {
+        activeStackSecurity.clearSecurityLog();
+    }
+    /**
+     * Internal tool execution (placeholder implementation)
+     */
+    async executeToolInternal(toolName, args) {
+        // This would call the actual ToolRuntime method
+        // For demonstration purposes, we return a mock result
+        return { success: true, tool: toolName, args };
+    }
+}
+export class SecurityError extends Error {
+    validationResult;
+    constructor(message, validationResult) {
+        super(message);
+        this.name = 'SecurityError';
+        this.validationResult = validationResult;
+    }
+}
+/**
+ * Create a secure tool runtime wrapper
+ */
+export function createSecureToolRuntime() {
+    return new ToolSecurityWrapper();
+}
+//# sourceMappingURL=tool-security-wrapper.js.map

package/dist/security/tool-security-wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-security-wrapper.js","sourceRoot":"","sources":["../../src/security/tool-security-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,mBAAmB,EAAiC,MAAM,4BAA4B,CAAC;AAEhG,MAAM,OAAO,mBAAmB;IAC9B;QACE,kEAAkE;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,IAA6B;QAC/D,iDAAiD;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,aAAa,CAAC,2BAA2B,UAAU,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;QACtF,CAAC;QAED,0BAA0B;QAC1B,0EAA0E;QAC1E,+CAA+C;QAC/C,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,QAAgB,EAAE,IAA6B;QAC3E,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,WAAW,CAAC;YACjB,KAAK,YAAY,CAAC;YAClB,KAAK,YAAY,CAAC;YAClB,KAAK,cAAc;gBACjB,OAAO,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAEpD,KAAK,cAAc,CAAC;YACpB,KAAK,qBAAqB;gBACxB,OAAO,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAE7C,KAAK,UAAU,CAAC;YAChB,KAAK,YAAY,CAAC;YAClB,KAAK,WAAW;gBACd,OAAO,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAEvD;gBACE,uDAAuD;gBACvD,OAAO,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,QAAgB,EAAE,IAA6B;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAW,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mBAAmB;gBAC3B,QAAQ,EAAE,QAAQ;aACnB,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/D,OAAO,mBAAmB,CAAC,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,IAA6B;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAW,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB;gBACzB,QAAQ,EAAE,QAAQ;aACnB,CAAC;QACJ,CAAC;QAED,OAAO,mBAAmB,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,QAAgB,EAAE,IAA6B;QAC9E,IAAI,MAA0B,CAAC;QAE/B,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YACzD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAW,CAAC;QACjC,CAAC;aAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAW,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,sBAAsB;gBAC9B,QAAQ,EAAE,QAAQ;aACnB,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAmC,CAAC;QAC9F,OAAO,mBAAmB,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,IAA6B;QAC5D,wCAAwC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,cAAc,GAAG,mBAAmB,CAAC,qBAAqB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAChF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;oBAC5B,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,kCAAkC,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE;wBAC1E,QAAQ,EAAE,cAAc,CAAC,QAAQ;wBACjC,OAAO,EAAE,cAAc,CAAC,OAAO;qBAChC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,mBAAmB,CAAC,cAAc,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,mBAAmB,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,mBAAmB,CAAC,QAAgB,EAAE,IAA6B;QAC/E,gDAAgD;QAChD,sDAAsD;QACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtB,gBAAgB,CAA2B;IAE3D,YAAY,OAAe,EAAE,gBAA0C;QACrE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,IAAI,mBAAmB,EAAE,CAAC;AACnC,CAAC"}

package/dist/tools/codeAnalysisTools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codeAnalysisTools.d.ts","sourceRoot":"","sources":["../../src/tools/codeAnalysisTools.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,UAAU,EAAE,YAAY,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,QAAQ,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,SAAS,EAAE,WAAW,EAAE,CAAC;IACzB,yBAAyB,EAAE,MAAM,CAAC;IAClC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,EAAE,CAwH5E;AAcD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CA8G3F;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,yBAAyB,CAkHvG"}
+{"version":3,"file":"codeAnalysisTools.d.ts","sourceRoot":"","sources":["../../src/tools/codeAnalysisTools.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAK7D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,UAAU,EAAE,YAAY,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,QAAQ,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAE/E,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,SAAS,EAAE,WAAW,EAAE,CAAC;IACzB,yBAAyB,EAAE,MAAM,CAAC;IAClC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,EAAE,CAgJ5E;AAcD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CA8G3F;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,yBAAyB,CAkHvG"}

package/dist/tools/codeAnalysisTools.js

@@ -1,6 +1,8 @@
-import { readFileSync, existsSync } from 'node:fs';
+import { readFileSync, existsSync, statSync } from 'node:fs';
 import { join } from 'node:path';
 import ts from 'typescript';
+// Maximum file size for code analysis (2MB) to prevent memory exhaustion
+const MAX_ANALYSIS_FILE_SIZE = 2 * 1024 * 1024;
 export function createCodeAnalysisTools(workingDir) {
     return [
         {
@@ -23,6 +25,11 @@ export function createCodeAnalysisTools(workingDir) {
                     if (!existsSync(filePath)) {
                         return `Error: File not found: ${filePath}`;
                     }
+                    // Check file size to prevent memory exhaustion
+                    const stats = statSync(filePath);
+                    if (stats.size > MAX_ANALYSIS_FILE_SIZE) {
+                        return `Error: File too large (${(stats.size / 1024 / 1024).toFixed(1)}MB). Maximum: ${MAX_ANALYSIS_FILE_SIZE / 1024 / 1024}MB`;
+                    }
                     const content = readFileSync(filePath, 'utf-8');
                     const analysis = analyzeTypeScriptFile(content, filePath);
                     return formatAnalysisResults(analysis);
@@ -52,6 +59,11 @@ export function createCodeAnalysisTools(workingDir) {
                     if (!existsSync(filePath)) {
                         return `Error: File not found: ${filePath}`;
                     }
+                    // Check file size to prevent memory exhaustion
+                    const stats = statSync(filePath);
+                    if (stats.size > MAX_ANALYSIS_FILE_SIZE) {
+                        return `Error: File too large (${(stats.size / 1024 / 1024).toFixed(1)}MB). Maximum: ${MAX_ANALYSIS_FILE_SIZE / 1024 / 1024}MB`;
+                    }
                     const content = readFileSync(filePath, 'utf-8');
                     const analysis = analyzeTypeScriptFile(content, filePath);
                     return formatDependencies(analysis);
@@ -81,6 +93,11 @@ export function createCodeAnalysisTools(workingDir) {
                     if (!existsSync(filePath)) {
                         return `Error: File not found: ${filePath}`;
                     }
+                    // Check file size to prevent memory exhaustion
+                    const stats = statSync(filePath);
+                    if (stats.size > MAX_ANALYSIS_FILE_SIZE) {
+                        return `Error: File too large (${(stats.size / 1024 / 1024).toFixed(1)}MB). Maximum: ${MAX_ANALYSIS_FILE_SIZE / 1024 / 1024}MB`;
+                    }
                     const content = readFileSync(filePath, 'utf-8');
                     const analysis = analyzeTypeScriptFile(content, filePath);
                     return formatComplexityMetrics(analysis);
@@ -110,6 +127,11 @@ export function createCodeAnalysisTools(workingDir) {
                     if (!existsSync(filePath)) {
                         return `Error: File not found: ${filePath}`;
                     }
+                    // Check file size to prevent memory exhaustion
+                    const stats = statSync(filePath);
+                    if (stats.size > MAX_ANALYSIS_FILE_SIZE) {
+                        return `Error: File too large (${(stats.size / 1024 / 1024).toFixed(1)}MB). Maximum: ${MAX_ANALYSIS_FILE_SIZE / 1024 / 1024}MB`;
+                    }
                     const content = readFileSync(filePath, 'utf-8');
                     const analysis = performAdvancedAstAnalysis(content, filePath);
                     return formatAstAnalysis(analysis);