erosolar-cli 1.7.195 → 1.7.196

package/dist/alpha-zero/security/simulation.d.ts

@@ -0,0 +1,124 @@
+/**
+ * Attack Simulation Framework
+ *
+ * Provides controlled attack simulations for red team exercises.
+ * All simulations require explicit authorization.
+ *
+ * Principal Investigator: Bo Shang
+ * Framework: erosolar-cli
+ */
+import { AuthorizationRecord } from './core.js';
+/**
+ * Categories of attack simulations
+ */
+export declare enum AttackCategory {
+    RECONNAISSANCE = "reconnaissance",
+    WEB_APPLICATION = "web_application",
+    AUTHENTICATION = "authentication",
+    INJECTION = "injection",
+    MISCONFIGURATION = "misconfiguration",
+    PRIVILEGE_ESCALATION = "privilege_escalation",
+    DATA_EXFILTRATION = "data_exfiltration"
+}
+/**
+ * MITRE ATT&CK inspired attack phases
+ */
+export declare enum AttackPhase {
+    INITIAL_ACCESS = "initial_access",
+    EXECUTION = "execution",
+    PERSISTENCE = "persistence",
+    PRIVILEGE_ESCALATION = "privilege_escalation",
+    DEFENSE_EVASION = "defense_evasion",
+    CREDENTIAL_ACCESS = "credential_access",
+    DISCOVERY = "discovery",
+    LATERAL_MOVEMENT = "lateral_movement",
+    COLLECTION = "collection",
+    EXFILTRATION = "exfiltration",
+    IMPACT = "impact"
+}
+/**
+ * Attack vector definition
+ */
+export interface AttackVector {
+    name: string;
+    category: AttackCategory;
+    phase: AttackPhase;
+    description: string;
+    techniqueId: string;
+    prerequisites: string[];
+    detectionMethods: string[];
+    mitigations: string[];
+}
+/**
+ * Attack simulation result
+ */
+export interface AttackSimulationResult {
+    vector: AttackVector;
+    target: string;
+    timestamp: number;
+    success: boolean;
+    evidence: string[];
+    artifacts: Record<string, unknown>;
+    detectionTriggered: boolean;
+    durationMs: number;
+    notes: string;
+}
+/**
+ * Common attack vectors based on OWASP Top 10 and MITRE ATT&CK
+ */
+export declare const ATTACK_VECTORS: Record<string, AttackVector>;
+/**
+ * Payload generator for security testing
+ */
+export declare class PayloadGenerator {
+    /**
+     * Generate SQL injection test payloads
+     */
+    static sqlInjectionPayloads(): string[];
+    /**
+     * Generate XSS test payloads
+     */
+    static xssPayloads(): string[];
+    /**
+     * Generate path traversal test payloads
+     */
+    static pathTraversalPayloads(): string[];
+    /**
+     * Encode payload
+     */
+    static encodePayload(payload: string, encoding: 'base64' | 'url' | 'hex' | 'none'): string;
+}
+/**
+ * Attack simulator
+ */
+export declare class AttackSimulator {
+    private authorization;
+    private verbose;
+    results: AttackSimulationResult[];
+    constructor(authorization: AuthorizationRecord, verbose?: boolean);
+    /**
+     * Check authorization
+     */
+    private checkAuthorization;
+    /**
+     * Simulate an attack vector
+     */
+    simulateAttack(target: string, vectorId: string, dryRun?: boolean): Promise<AttackSimulationResult>;
+    /**
+     * Get payloads for a vector
+     */
+    private getPayloadsForVector;
+    /**
+     * Get vectors by category
+     */
+    getVectorsByCategory(category: AttackCategory): AttackVector[];
+    /**
+     * Get vectors by phase
+     */
+    getVectorsByPhase(phase: AttackPhase): AttackVector[];
+    /**
+     * Generate report
+     */
+    generateReport(): string;
+}
+//# sourceMappingURL=simulation.d.ts.map

package/dist/alpha-zero/security/simulation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"simulation.d.ts","sourceRoot":"","sources":["../../../src/alpha-zero/security/simulation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,mBAAmB,EAAsB,MAAM,WAAW,CAAC;AAEpE;;GAEG;AACH,oBAAY,cAAc;IACxB,cAAc,mBAAmB;IACjC,eAAe,oBAAoB;IACnC,cAAc,mBAAmB;IACjC,SAAS,cAAc;IACvB,gBAAgB,qBAAqB;IACrC,oBAAoB,yBAAyB;IAC7C,iBAAiB,sBAAsB;CACxC;AAED;;GAEG;AACH,oBAAY,WAAW;IACrB,cAAc,mBAAmB;IACjC,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,oBAAoB,yBAAyB;IAC7C,eAAe,oBAAoB;IACnC,iBAAiB,sBAAsB;IACvC,SAAS,cAAc;IACvB,gBAAgB,qBAAqB;IACrC,UAAU,eAAe;IACzB,YAAY,iBAAiB;IAC7B,MAAM,WAAW;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,WAAW,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAmDvD,CAAC;AAEF;;GAEG;AACH,qBAAa,gBAAgB;IAC3B;;OAEG;IACH,MAAM,CAAC,oBAAoB,IAAI,MAAM,EAAE;IAUvC;;OAEG;IACH,MAAM,CAAC,WAAW,IAAI,MAAM,EAAE;IAS9B;;OAEG;IACH,MAAM,CAAC,qBAAqB,IAAI,MAAM,EAAE;IASxC;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM;CAY3F;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,OAAO,CAAU;IAClB,OAAO,EAAE,sBAAsB,EAAE,CAAM;gBAElC,aAAa,EAAE,mBAAmB,EAAE,OAAO,UAAQ;IAK/D;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAyB1B;;OAEG;IACG,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,UAAO,GACZ,OAAO,CAAC,sBAAsB,CAAC;IA6ClC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAa5B;;OAEG;IACH,oBAAoB,CAAC,QAAQ,EAAE,cAAc,GAAG,YAAY,EAAE;IAI9D;;OAEG;IACH,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,EAAE;IAIrD;;OAEG;IACH,cAAc,IAAI,MAAM;CAwBzB"}

package/dist/alpha-zero/security/simulation.js

@@ -0,0 +1,277 @@
+/**
+ * Attack Simulation Framework
+ *
+ * Provides controlled attack simulations for red team exercises.
+ * All simulations require explicit authorization.
+ *
+ * Principal Investigator: Bo Shang
+ * Framework: erosolar-cli
+ */
+import { AuthorizationScope } from './core.js';
+/**
+ * Categories of attack simulations
+ */
+export var AttackCategory;
+(function (AttackCategory) {
+    AttackCategory["RECONNAISSANCE"] = "reconnaissance";
+    AttackCategory["WEB_APPLICATION"] = "web_application";
+    AttackCategory["AUTHENTICATION"] = "authentication";
+    AttackCategory["INJECTION"] = "injection";
+    AttackCategory["MISCONFIGURATION"] = "misconfiguration";
+    AttackCategory["PRIVILEGE_ESCALATION"] = "privilege_escalation";
+    AttackCategory["DATA_EXFILTRATION"] = "data_exfiltration";
+})(AttackCategory || (AttackCategory = {}));
+/**
+ * MITRE ATT&CK inspired attack phases
+ */
+export var AttackPhase;
+(function (AttackPhase) {
+    AttackPhase["INITIAL_ACCESS"] = "initial_access";
+    AttackPhase["EXECUTION"] = "execution";
+    AttackPhase["PERSISTENCE"] = "persistence";
+    AttackPhase["PRIVILEGE_ESCALATION"] = "privilege_escalation";
+    AttackPhase["DEFENSE_EVASION"] = "defense_evasion";
+    AttackPhase["CREDENTIAL_ACCESS"] = "credential_access";
+    AttackPhase["DISCOVERY"] = "discovery";
+    AttackPhase["LATERAL_MOVEMENT"] = "lateral_movement";
+    AttackPhase["COLLECTION"] = "collection";
+    AttackPhase["EXFILTRATION"] = "exfiltration";
+    AttackPhase["IMPACT"] = "impact";
+})(AttackPhase || (AttackPhase = {}));
+/**
+ * Common attack vectors based on OWASP Top 10 and MITRE ATT&CK
+ */
+export const ATTACK_VECTORS = {
+    sql_injection: {
+        name: 'SQL Injection',
+        category: AttackCategory.INJECTION,
+        phase: AttackPhase.INITIAL_ACCESS,
+        description: 'Inject malicious SQL queries',
+        techniqueId: 'T1190',
+        prerequisites: ['web_application_identified', 'input_field_found'],
+        detectionMethods: ['WAF rules', 'Database monitoring'],
+        mitigations: ['Parameterized queries', 'Input validation'],
+    },
+    xss_reflected: {
+        name: 'Reflected XSS',
+        category: AttackCategory.WEB_APPLICATION,
+        phase: AttackPhase.INITIAL_ACCESS,
+        description: 'Inject scripts reflected to users',
+        techniqueId: 'T1189',
+        prerequisites: ['web_application_identified', 'reflection_point_found'],
+        detectionMethods: ['CSP reports', 'WAF XSS rules'],
+        mitigations: ['CSP', 'Output encoding', 'Input validation'],
+    },
+    ssrf: {
+        name: 'Server-Side Request Forgery',
+        category: AttackCategory.WEB_APPLICATION,
+        phase: AttackPhase.DISCOVERY,
+        description: 'Abuse server to make internal requests',
+        techniqueId: 'T1090',
+        prerequisites: ['url_parameter_found'],
+        detectionMethods: ['Outbound request monitoring'],
+        mitigations: ['URL allowlisting', 'Network segmentation'],
+    },
+    auth_bypass: {
+        name: 'Authentication Bypass',
+        category: AttackCategory.AUTHENTICATION,
+        phase: AttackPhase.INITIAL_ACCESS,
+        description: 'Bypass authentication mechanisms',
+        techniqueId: 'T1078',
+        prerequisites: ['auth_endpoint_identified'],
+        detectionMethods: ['Failed login monitoring', 'Session anomalies'],
+        mitigations: ['MFA', 'Strong session management'],
+    },
+    path_traversal: {
+        name: 'Path Traversal',
+        category: AttackCategory.WEB_APPLICATION,
+        phase: AttackPhase.COLLECTION,
+        description: 'Access files outside webroot',
+        techniqueId: 'T1083',
+        prerequisites: ['file_parameter_found'],
+        detectionMethods: ['Path pattern monitoring', 'WAF rules'],
+        mitigations: ['Input validation', 'Chroot/sandbox'],
+    },
+};
+/**
+ * Payload generator for security testing
+ */
+export class PayloadGenerator {
+    /**
+     * Generate SQL injection test payloads
+     */
+    static sqlInjectionPayloads() {
+        return [
+            "' OR '1'='1",
+            "'; DROP TABLE users--",
+            "1' AND '1'='1",
+            "1 UNION SELECT NULL--",
+            "admin'--",
+        ];
+    }
+    /**
+     * Generate XSS test payloads
+     */
+    static xssPayloads() {
+        return [
+            "<script>alert(1)</script>",
+            "<img src=x onerror=alert(1)>",
+            "javascript:alert(1)",
+            "<svg onload=alert(1)>",
+        ];
+    }
+    /**
+     * Generate path traversal test payloads
+     */
+    static pathTraversalPayloads() {
+        return [
+            "../../../etc/passwd",
+            "..\\..\\..\\windows\\system32\\config\\sam",
+            "....//....//....//etc/passwd",
+            "%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd",
+        ];
+    }
+    /**
+     * Encode payload
+     */
+    static encodePayload(payload, encoding) {
+        switch (encoding) {
+            case 'base64':
+                return Buffer.from(payload).toString('base64');
+            case 'url':
+                return encodeURIComponent(payload);
+            case 'hex':
+                return Buffer.from(payload).toString('hex');
+            default:
+                return payload;
+        }
+    }
+}
+/**
+ * Attack simulator
+ */
+export class AttackSimulator {
+    authorization;
+    verbose;
+    results = [];
+    constructor(authorization, verbose = false) {
+        this.authorization = authorization;
+        this.verbose = verbose;
+    }
+    /**
+     * Check authorization
+     */
+    checkAuthorization(target) {
+        if (!this.authorization) {
+            throw new Error('No authorization record.');
+        }
+        // Attack simulations require stronger authorization
+        const allowed = [
+            AuthorizationScope.OWNED_SYSTEMS,
+            AuthorizationScope.PENTEST_ENGAGEMENT,
+            AuthorizationScope.RED_TEAM,
+            AuthorizationScope.CTF_COMPETITION,
+        ];
+        if (!allowed.includes(this.authorization.scope)) {
+            throw new Error('Simulations require pentest/red team authorization.');
+        }
+        const inScope = this.authorization.targetDomain.includes(target) ||
+            target.endsWith(this.authorization.targetDomain);
+        if (!inScope) {
+            throw new Error(`Target ${target} not in scope.`);
+        }
+    }
+    /**
+     * Simulate an attack vector
+     */
+    async simulateAttack(target, vectorId, dryRun = true) {
+        this.checkAuthorization(target);
+        if (!(vectorId in ATTACK_VECTORS)) {
+            throw new Error(`Unknown attack vector: ${vectorId}`);
+        }
+        const vector = ATTACK_VECTORS[vectorId];
+        if (!vector) {
+            throw new Error(`Unknown attack vector: ${vectorId}`);
+        }
+        const startTime = Date.now();
+        if (this.verbose) {
+            console.log(`[Simulation] ${vector.name} against ${target}`);
+            console.log(`  Technique: ${vector.techniqueId}`);
+            console.log(`  Dry run: ${dryRun}`);
+        }
+        const result = {
+            vector,
+            target,
+            timestamp: startTime,
+            success: false,
+            evidence: [],
+            artifacts: {
+                payloads: this.getPayloadsForVector(vectorId),
+                payloadCount: this.getPayloadsForVector(vectorId).length,
+            },
+            detectionTriggered: false,
+            durationMs: 0,
+            notes: `Dry run: ${dryRun}`,
+        };
+        if (!dryRun) {
+            result.notes = 'Live simulation not implemented for safety';
+        }
+        result.durationMs = Date.now() - startTime;
+        this.results.push(result);
+        return result;
+    }
+    /**
+     * Get payloads for a vector
+     */
+    getPayloadsForVector(vectorId) {
+        if (vectorId.includes('sql')) {
+            return PayloadGenerator.sqlInjectionPayloads();
+        }
+        if (vectorId.includes('xss')) {
+            return PayloadGenerator.xssPayloads();
+        }
+        if (vectorId.includes('path') || vectorId.includes('traversal')) {
+            return PayloadGenerator.pathTraversalPayloads();
+        }
+        return [];
+    }
+    /**
+     * Get vectors by category
+     */
+    getVectorsByCategory(category) {
+        return Object.values(ATTACK_VECTORS).filter(v => v.category === category);
+    }
+    /**
+     * Get vectors by phase
+     */
+    getVectorsByPhase(phase) {
+        return Object.values(ATTACK_VECTORS).filter(v => v.phase === phase);
+    }
+    /**
+     * Generate report
+     */
+    generateReport() {
+        const lines = [
+            '='.repeat(60),
+            'ATTACK SIMULATION REPORT',
+            '='.repeat(60),
+            `Generated: ${new Date().toISOString()}`,
+            `Target: ${this.authorization.targetDomain}`,
+            `Scope: ${this.authorization.scope}`,
+            `Simulations: ${this.results.length}`,
+            '',
+        ];
+        for (let i = 0; i < this.results.length; i++) {
+            const result = this.results[i];
+            if (!result)
+                continue;
+            lines.push(`[${i + 1}] ${result.vector.name}`);
+            lines.push(`    Target: ${result.target}`);
+            lines.push(`    Success: ${result.success}`);
+            lines.push(`    Duration: ${result.durationMs}ms`);
+            lines.push(`    Payloads: ${result.artifacts['payloadCount'] || 0}`);
+        }
+        return lines.join('\n');
+    }
+}
+//# sourceMappingURL=simulation.js.map

package/dist/alpha-zero/security/simulation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"simulation.js","sourceRoot":"","sources":["../../../src/alpha-zero/security/simulation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAuB,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAEpE;;GAEG;AACH,MAAM,CAAN,IAAY,cAQX;AARD,WAAY,cAAc;IACxB,mDAAiC,CAAA;IACjC,qDAAmC,CAAA;IACnC,mDAAiC,CAAA;IACjC,yCAAuB,CAAA;IACvB,uDAAqC,CAAA;IACrC,+DAA6C,CAAA;IAC7C,yDAAuC,CAAA;AACzC,CAAC,EARW,cAAc,KAAd,cAAc,QAQzB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,WAYX;AAZD,WAAY,WAAW;IACrB,gDAAiC,CAAA;IACjC,sCAAuB,CAAA;IACvB,0CAA2B,CAAA;IAC3B,4DAA6C,CAAA;IAC7C,kDAAmC,CAAA;IACnC,sDAAuC,CAAA;IACvC,sCAAuB,CAAA;IACvB,oDAAqC,CAAA;IACrC,wCAAyB,CAAA;IACzB,4CAA6B,CAAA;IAC7B,gCAAiB,CAAA;AACnB,CAAC,EAZW,WAAW,KAAX,WAAW,QAYtB;AA+BD;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAiC;IAC1D,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,cAAc,CAAC,SAAS;QAClC,KAAK,EAAE,WAAW,CAAC,cAAc;QACjC,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EAAE,OAAO;QACpB,aAAa,EAAE,CAAC,4BAA4B,EAAE,mBAAmB,CAAC;QAClE,gBAAgB,EAAE,CAAC,WAAW,EAAE,qBAAqB,CAAC;QACtD,WAAW,EAAE,CAAC,uBAAuB,EAAE,kBAAkB,CAAC;KAC3D;IACD,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,cAAc,CAAC,eAAe;QACxC,KAAK,EAAE,WAAW,CAAC,cAAc;QACjC,WAAW,EAAE,mCAAmC;QAChD,WAAW,EAAE,OAAO;QACpB,aAAa,EAAE,CAAC,4BAA4B,EAAE,wBAAwB,CAAC;QACvE,gBAAgB,EAAE,CAAC,aAAa,EAAE,eAAe,CAAC;QAClD,WAAW,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,CAAC;KAC5D;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,cAAc,CAAC,eAAe;QACxC,KAAK,EAAE,WAAW,CAAC,SAAS;QAC5B,WAAW,EAAE,wCAAwC;QACrD,WAAW,EAAE,OAAO;QACpB,aAAa,EAAE,CAAC,qBAAqB,CAAC;QACtC,gBAAgB,EAAE,CAAC,6BAA6B,CAAC;QACjD,WAAW,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;KAC1D;IACD,WAAW,EAAE;QACX,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,cAAc,CAAC,cAAc;QACvC,KAAK,EAAE,WAAW,CAAC,cAAc;QACjC,WAAW,EAAE,kCAAkC;QAC/C,WAAW,EAAE,OAAO;QACpB,aAAa,EAAE,CAAC,0BAA0B,CAAC;QAC3C,gBAAgB,EAAE,CAAC,yBAAyB,EAAE,mBAAmB,CAAC;QAClE,WAAW,EAAE,CAAC,KAAK,EAAE,2BAA2B,CAAC;KAClD;IACD,cAAc,EAAE;QACd,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,cAAc,CAAC,eAAe;QACxC,KAAK,EAAE,WAAW,CAAC,UAAU;QAC7B,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EAAE,OAAO;QACpB,aAAa,EAAE,CAAC,sBAAsB,CAAC;QACvC,gBAAgB,EAAE,CAAC,yBAAyB,EAAE,WAAW,CAAC;QAC1D,WAAW,EAAE,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;KACpD;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAC3B;;OAEG;IACH,MAAM,CAAC,oBAAoB;QACzB,OAAO;YACL,aAAa;YACb,uBAAuB;YACvB,eAAe;YACf,uBAAuB;YACvB,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW;QAChB,OAAO;YACL,2BAA2B;YAC3B,8BAA8B;YAC9B,qBAAqB;YACrB,uBAAuB;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,qBAAqB;QAC1B,OAAO;YACL,qBAAqB;YACrB,4CAA4C;YAC5C,8BAA8B;YAC9B,yCAAyC;SAC1C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,OAAe,EAAE,QAA2C;QAC/E,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,QAAQ;gBACX,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACjD,KAAK,KAAK;gBACR,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACrC,KAAK,KAAK;gBACR,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9C;gBACE,OAAO,OAAO,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,eAAe;IAClB,aAAa,CAAsB;IACnC,OAAO,CAAU;IAClB,OAAO,GAA6B,EAAE,CAAC;IAE9C,YAAY,aAAkC,EAAE,OAAO,GAAG,KAAK;QAC7D,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,MAAc;QACvC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,oDAAoD;QACpD,MAAM,OAAO,GAAG;YACd,kBAAkB,CAAC,aAAa;YAChC,kBAAkB,CAAC,kBAAkB;YACrC,kBAAkB,CAAC,QAAQ;YAC3B,kBAAkB,CAAC,eAAe;SACnC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAEjE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,gBAAgB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,MAAc,EACd,QAAgB,EAChB,MAAM,GAAG,IAAI;QAEb,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAEhC,IAAI,CAAC,CAAC,QAAQ,IAAI,cAAc,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,IAAI,YAAY,MAAM,EAAE,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAA2B;YACrC,MAAM;YACN,MAAM;YACN,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE;gBACT,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;gBAC7C,YAAY,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,MAAM;aACzD;YACD,kBAAkB,EAAE,KAAK;YACzB,UAAU,EAAE,CAAC;YACb,KAAK,EAAE,YAAY,MAAM,EAAE;SAC5B,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,GAAG,4CAA4C,CAAC;QAC9D,CAAC;QAED,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,QAAgB;QAC3C,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,gBAAgB,CAAC,oBAAoB,EAAE,CAAC;QACjD,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,gBAAgB,CAAC,WAAW,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,OAAO,gBAAgB,CAAC,qBAAqB,EAAE,CAAC;QAClD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,QAAwB;QAC3C,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,KAAkB;QAClC,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,KAAK,GAAG;YACZ,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACd,0BAA0B;YAC1B,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACd,cAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;YACxC,WAAW,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE;YAC5C,UAAU,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE;YACpC,gBAAgB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YACrC,EAAE;SACH,CAAC;QAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,iBAAkB,MAAM,CAAC,SAAqC,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/alpha-zero/selfModification.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Self-Modification Engine for Alpha Zero 2
+ *
+ * Enables autonomous code self-modification with version control.
+ * Agents can modify their own tool source code based on performance feedback.
+ *
+ * Principal Investigator: Bo Shang
+ * Framework: erosolar-cli
+ */
+/**
+ * Version information for a tool modification
+ */
+export interface ToolVersion {
+    versionId: string;
+    hash: string;
+    timestamp: number;
+    sourceCode: string;
+    testResults?: TestResult;
+    performanceMetrics?: PerformanceMetrics;
+    parentVersion?: string;
+}
+export interface TestResult {
+    passed: boolean;
+    totalTests: number;
+    passedTests: number;
+    failedTests: number;
+    errors: string[];
+}
+export interface PerformanceMetrics {
+    executionTimeMs: number;
+    memoryUsageMb: number;
+    errorCount: number;
+    successRate: number;
+    qualityScore: number;
+}
+export interface ModificationResult {
+    success: boolean;
+    newVersion?: ToolVersion;
+    previousVersion?: ToolVersion;
+    performanceDelta?: number;
+    error?: string;
+    rolledBack: boolean;
+}
+export interface SelfModificationConfig {
+    dataDir: string;
+    maxVersions: number;
+    enableAutoRollback: boolean;
+    minQualityThreshold: number;
+    verbose: boolean;
+}
+/**
+ * Self-Modification Engine
+ *
+ * Manages version-controlled code modifications with automatic rollback.
+ */
+export declare class SelfModificationEngine {
+    private config;
+    private versions;
+    constructor(config?: Partial<SelfModificationConfig>);
+    /**
+     * Create a checkpoint of current tool code
+     */
+    createCheckpoint(toolId: string, sourceCode: string, metrics?: PerformanceMetrics): Promise<ToolVersion>;
+    /**
+     * Attempt to modify tool code
+     */
+    modifyTool(toolId: string, currentCode: string, modifiedCode: string, testFn?: (code: string) => Promise<TestResult>): Promise<ModificationResult>;
+    /**
+     * Rollback to a previous version
+     */
+    rollback(toolId: string, targetVersionId?: string): Promise<ToolVersion | null>;
+    /**
+     * Get version history for a tool
+     */
+    getVersionHistory(toolId: string): ToolVersion[];
+    /**
+     * Get current version of a tool
+     */
+    getCurrentVersion(toolId: string): ToolVersion | null;
+    /**
+     * Compare two versions
+     */
+    compareVersions(version1: ToolVersion, version2: ToolVersion): {
+        codeChanged: boolean;
+        performanceImproved: boolean;
+        qualityDelta: number;
+    };
+    /**
+     * Evaluate code quality (simplified AST-based analysis)
+     */
+    private evaluateCodeQuality;
+    /**
+     * Compute SHA-256 hash of code
+     */
+    private computeHash;
+    /**
+     * Save version to disk
+     */
+    private saveVersion;
+    /**
+     * Load versions from disk
+     */
+    loadVersions(toolId: string): Promise<ToolVersion[]>;
+}
+/**
+ * Create a default self-modification engine
+ */
+export declare function createSelfModificationEngine(config?: Partial<SelfModificationConfig>): SelfModificationEngine;
+//# sourceMappingURL=selfModification.d.ts.map

package/dist/alpha-zero/selfModification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfModification.d.ts","sourceRoot":"","sources":["../../src/alpha-zero/selfModification.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,WAAW,CAAC;IACzB,eAAe,CAAC,EAAE,WAAW,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;CAClB;AAUD;;;;GAIG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,QAAQ,CAAyC;gBAE7C,MAAM,GAAE,OAAO,CAAC,sBAAsB,CAAM;IAIxD;;OAEG;IACG,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,WAAW,CAAC;IA8BvB;;OAEG;IACG,UAAU,CACd,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,GAC7C,OAAO,CAAC,kBAAkB,CAAC;IAyD9B;;OAEG;IACG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAuBrF;;OAEG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE;IAIhD;;OAEG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAKrD;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,GAAG;QAC7D,WAAW,EAAE,OAAO,CAAC;QACrB,mBAAmB,EAAE,OAAO,CAAC;QAC7B,YAAY,EAAE,MAAM,CAAC;KACtB;IAYD;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAgC3B;;OAEG;IACH,OAAO,CAAC,WAAW;IAInB;;OAEG;YACW,WAAW;IAQzB;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;CAuB3D;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,GACvC,sBAAsB,CAExB"}