helixmind 0.5.4

package/LICENSE

@@ -0,0 +1,73 @@
+GNU AFFERO GENERAL PUBLIC LICENSE
+Version 3, 19 November 2007
+
+Copyright (C) 2025-2026 HelixMind (helix-mind.ai)
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as published
+by the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+For the full license text, see:
+https://www.gnu.org/licenses/agpl-3.0.txt
+
+===========================================================================
+ADDITIONAL TERMS AND COMMERCIAL LICENSING
+===========================================================================
+
+1. OPEN SOURCE USE (THIS REPOSITORY)
+
+   This repository contains the open source CLI agent of HelixMind,
+   licensed under AGPL-3.0. You are free to:
+
+   - Use it for personal, educational, and internal purposes
+   - Modify and distribute it under the same AGPL-3.0 terms
+   - Build and deploy your own tools on top of it
+
+   Under AGPL-3.0, if you modify this software and provide it as a
+   network service (SaaS), you MUST make your complete source code
+   available to all users of that service under the same license.
+
+2. ATTRIBUTION
+
+   Any use, distribution, or derivative work must retain the original
+   copyright notice and attribution to HelixMind (helix-mind.ai).
+   This includes but is not limited to:
+
+   - The copyright notice in the LICENSE file
+   - Attribution in any user-facing documentation or about page
+   - Credit in any published derivative works
+
+3. COMMERCIAL LICENSE
+
+   A separate commercial license is available for organizations that:
+
+   - Want to use HelixMind without AGPL-3.0 obligations
+     (e.g., in proprietary/closed-source products or SaaS offerings)
+   - Want access to premium features not included in this repository,
+     such as: Jarvis Task Daemon, Validation Matrix, Security Monitor,
+     3D Brain Management, Autonomous Mode, and Web Dashboard
+   - Need enterprise support, SLAs, or custom integrations
+
+   The commercial license removes the AGPL requirement to open-source
+   your modifications and includes all premium features.
+
+   For commercial licensing inquiries, visit:
+   https://helix-mind.ai or contact: license@helix-mind.ai
+
+4. TRADEMARKS
+
+   The names "HelixMind", "Spiral Memory", the HelixMind logo, and
+   associated branding are trademarks of HelixMind. This license does
+   not grant permission to use these trademarks except as required for
+   reasonable attribution as described above.
+
+===========================================================================

package/README.md

@@ -0,0 +1,323 @@
+<div align="center">
+
+# HelixMind
+
+**Open Source AI Coding Agent with Persistent Spiral Memory**
+
+[![npm version](https://img.shields.io/npm/v/helixmind?color=blue&logo=npm)](https://www.npmjs.com/package/helixmind)
+[![License](https://img.shields.io/badge/License-AGPL_3.0-blue?logo=gnu)](LICENSE)
+[![Node](https://img.shields.io/badge/Node-18%2B-green?logo=node.js)](https://nodejs.org)
+[![TypeScript](https://img.shields.io/badge/TypeScript-5.0%2B-blue?logo=typescript)](https://www.typescriptlang.org/)
+[![Tests](https://img.shields.io/badge/Tests-979_passing-brightgreen)](https://github.com/DancingTedDanson011/HelixMind)
+
+*An autonomous coding agent that remembers context across sessions, learns from every interaction, and works with any AI provider.*
+
+[Installation](#installation) -- [Open Source vs Connected](#open-source-vs-connected) -- [Features](#features) -- [Quick Start](#quick-start) -- [Documentation](#documentation)
+
+</div>
+
+---
+
+## Installation
+
+```bash
+# Run directly (no install needed)
+npx helixmind
+
+# Or install globally
+npm install -g helixmind
+helixmind
+```
+
+### Requirements
+
+- Node.js 18+
+- An API key for at least one provider: Anthropic, OpenAI, or Ollama (local, no key needed)
+
+---
+
+## Open Source vs Connected
+
+When you start HelixMind for the first time, you choose how to use it:
+
+```
+ +----------------------------------------------------------------------------+
+ |  Welcome to HelixMind                                                      |
+ |                                                                            |
+ |  Login - free, unlock everything        Open Source - no account needed    |
+ |                                                                            |
+ |    [v] Jarvis Task Daemon                       [v] AI Agent + 22 Tools            |
+ |    [v] Validation Matrix                [v] Spiral Memory                  |
+ |    [v] Security Monitor                 [v] Anthropic/OpenAI/Ollama        |
+ |    [v] Autonomous Mode                  [x] No Jarvis / No Validation      |
+ |    [v] 3D Brain Management              [x] No Monitor / No Security       |
+ |    [v] 3 Brains + Live WS               [x] No Brain Management            |
+ |                                                                            |
+ |    No credit card - Free forever - works offline                           |
+ +----------------------------------------------------------------------------+
+ -> [1] Login / [2] Open Source:
+```
+
+| | Open Source | Connected (Free Account) |
+|---|---|---|
+| AI Agent with 22 Tools | Yes | Yes |
+| Spiral Memory (5 levels) | Yes | Yes |
+| Anthropic / OpenAI / Ollama | Yes | Yes |
+| Checkpoints and Undo | Yes | Yes |
+| Bug Journal | Yes | Yes |
+| Browser Automation | Yes | Yes |
+| Web Knowledge Enrichment | Yes | Yes |
+| Swarm (parallel workers) | Yes | Yes |
+| MCP Server | Yes | Yes |
+| Jarvis Task Daemon | - | Yes |
+| Validation Matrix | - | Yes |
+| Security Monitor | - | Yes |
+| 3D Brain Management | - | Yes |
+| Autonomous Mode | - | Yes |
+| Web Dashboard Remote Control | - | Yes |
+
+**Both modes are fully functional coding agents.** The open source mode includes everything you need for day-to-day AI-assisted development. Connected mode adds advanced orchestration and monitoring features via a free account at [helix-mind.ai](https://helix-mind.ai).
+
+You can switch anytime by running `helixmind login`.
+
+---
+
+## Features
+
+### 22 Agent Tools
+
+HelixMind operates as an autonomous coding agent with built-in tools:
+
+| Tool | Description |
+|:-----|:------------|
+| `read_file` / `write_file` / `edit_file` | Read, create, and modify files |
+| `list_dir` / `search_files` / `find_files` | Navigate and search the codebase |
+| `run_command` | Execute shell commands (sandboxed) |
+| `git_status` / `git_commit` / `git_diff` / `git_log` | Full Git integration |
+| `spiral_store` / `spiral_query` / `spiral_status` | Interact with spiral memory |
+| `web_research` | Search the internet and extract knowledge |
+| `bug_report` / `bug_list` | Track and manage bugs |
+| `browser_navigate` / `browser_click` / `browser_type` / `browser_screenshot` / `browser_read` / `browser_eval` | Control a headless browser |
+
+All tools go through a 3-tier permission system: **auto** (safe operations), **ask** (confirm first), **dangerous** (requires explicit approval). Use `--yolo` to auto-approve everything.
+
+### Spiral Memory
+
+A 5-level hierarchical memory that persists across sessions:
+
+```
+  Level 1 - Focus       Most relevant, recent context
+  Level 2 - Active      Related files, dependencies, web knowledge
+  Level 3 - Reference   Decisions, patterns, code structure
+  Level 4 - Archive     Compressed summaries, old sessions
+  Level 5 - Deep        Long-term knowledge, project history
+```
+
+Context flows between levels based on relevance, recency, and usage. Web knowledge enrichment automatically fetches and stores relevant information from the internet as you work.
+
+### Swarm Mode
+
+For complex multi-task requests, HelixMind automatically decomposes the work and spawns parallel worker sessions:
+
+```bash
+# Auto-detected when you send multi-part requests
+> "Create a user model, add CRUD endpoints, and write tests for each"
+
+# Or force it manually
+/swarm refactor auth module, update all tests, fix the CI pipeline
+```
+
+Each worker gets its own session with file-level locking to prevent conflicts. Results are merged and summarized when all workers complete.
+
+### Checkpoints
+
+Every tool call and chat message creates an automatic checkpoint. Double-tap `ESC` to open the checkpoint browser and revert to any previous state (chat history, code changes, or both).
+
+### Bug Journal
+
+Bugs are automatically detected from your messages (in English and German) and tracked in `.helixmind/bugs.json`. Each bug gets evidence, status, and persists across sessions.
+
+### Browser Automation
+
+Headless Chrome integration via Puppeteer for web testing, scraping, and visual analysis:
+
+```
+/browser https://example.com
+> "Click the login button and fill in the form"
+> "Take a screenshot and analyze the layout"
+```
+
+### Multi-Provider Support
+
+| Provider | Models | Setup |
+|:---------|:-------|:------|
+| Anthropic | Claude Sonnet, Opus, Haiku | `ANTHROPIC_API_KEY=sk-ant-...` |
+| OpenAI | GPT-4o, GPT-4, o1, o3 | `OPENAI_API_KEY=sk-...` |
+| Ollama | Any local model | No key needed (auto-detected) |
+
+Switch providers at runtime with `/model`.
+
+### MCP Server
+
+HelixMind includes a Model Context Protocol server for integration with other tools:
+
+- Claude Code
+- Cursor
+- VS Code (Copilot)
+- Windsurf
+- JetBrains AI
+
+---
+
+## Quick Start
+
+```bash
+# Start interactive chat
+helixmind
+
+# Initialize in a project (creates .helixmind/)
+helixmind init
+
+# Send a single message
+helixmind chat -m "fix all lint errors in src/"
+
+# YOLO mode - auto-approve everything
+helixmind chat --yolo
+
+# Skip permission prompts
+helixmind chat -s
+
+# Feed files into spiral memory
+helixmind feed src/ --deep
+
+# Watch files and update spiral live
+helixmind feed src/ --watch
+```
+
+---
+
+## CLI Commands
+
+| Command | Description |
+|:--------|:------------|
+| `helixmind` | Start interactive chat (default) |
+| `helixmind init` | Initialize HelixMind in project |
+| `helixmind chat -m "..."` | Send a single message |
+| `helixmind chat --yolo` | Auto-approve all operations |
+| `helixmind chat -s` | Skip permission prompts |
+| `helixmind feed [paths...]` | Feed files into spiral |
+| `helixmind feed --deep` | Deep analysis with intent detection |
+| `helixmind feed --watch` | Watch and auto-update spiral |
+| `helixmind spiral status` | Show spiral metrics |
+| `helixmind spiral search <query>` | Search spiral context |
+| `helixmind spiral compact` | Trigger spiral compaction |
+| `helixmind config set <k> <v>` | Set config value |
+| `helixmind config list` | Show all config |
+| `helixmind export [dir]` | Export spiral to .helixmind.zip |
+| `helixmind import <zip>` | Import spiral from archive |
+| `helixmind login` | Authenticate (switch to Connected mode) |
+| `helixmind logout` | Remove stored auth |
+
+### Slash Commands (inside chat)
+
+| Command | Description |
+|:--------|:------------|
+| `/help` | Show all commands |
+| `/model` | Switch AI provider/model |
+| `/spiral` | Show spiral status |
+| `/brain` | Open 3D brain visualization |
+| `/context` | Show assembled context |
+| `/tokens` | Token usage stats |
+| `/undo` | Undo last file change |
+| `/diff` | Show current file changes |
+| `/git` | Git operations |
+| `/sessions` | Manage background sessions |
+| `/browser` | Start browser session |
+| `/bugs` | View bug journal |
+| `/swarm <msg>` | Force swarm execution |
+| `/auto` | Start autonomous mode |
+| `/security` | Run security audit |
+| `/yolo` | Toggle YOLO mode |
+| `/exit` | Quit |
+
+### Keyboard Shortcuts
+
+| Key | Action |
+|:----|:-------|
+| `ESC ESC` | Emergency stop / checkpoint browser |
+| `Ctrl+C` | Exit |
+| `Ctrl+L` | Clear screen |
+| `Ctrl+PageUp/Down` | Switch session tabs |
+| `Tab` | Autocomplete command |
+
+---
+
+## Configuration
+
+### Environment Variables
+
+```bash
+ANTHROPIC_API_KEY=sk-ant-...    # For Claude
+OPENAI_API_KEY=sk-...           # For OpenAI/GPT
+# Ollama: no key needed (auto-detected on localhost:11434)
+```
+
+### Project Config
+
+Create `.helixmind/config.json` in your project root:
+
+```json
+{
+  "provider": "anthropic",
+  "model": "claude-sonnet-4-20250514"
+}
+```
+
+Or use the CLI:
+
+```bash
+helixmind config set provider anthropic
+helixmind config set model claude-sonnet-4-20250514
+```
+
+---
+
+## Tech Stack
+
+| Component | Technology |
+|:----------|:-----------|
+| Language | TypeScript (strict, ESM) |
+| AI Providers | Anthropic SDK, OpenAI SDK, Ollama |
+| Database | better-sqlite3 + sqlite-vec (vector search) |
+| Embeddings | HuggingFace Transformers (MiniLM-L6-v2) |
+| Browser | Puppeteer (headless Chrome) |
+| Testing | Vitest (979 tests) |
+| MCP | Model Context Protocol SDK |
+
+---
+
+## Development
+
+```bash
+git clone https://github.com/DancingTedDanson011/HelixMind.git
+cd HelixMind
+
+npm install
+npm run build
+npm run dev      # Dev mode with watch
+npm test         # Run 979 tests
+```
+
+---
+
+## License
+
+[AGPL-3.0](LICENSE) -- Free for open-source use. Commercial licenses available.
+
+---
+
+<div align="center">
+
+**[helix-mind.ai](https://helix-mind.ai)**
+
+</div>

package/dist/cli/agent/autonomous.d.ts

@@ -0,0 +1,24 @@
+export declare const SECURITY_PROMPT = "Perform a comprehensive SECURITY AUDIT of this codebase.\n\nCheck every file systematically for:\n1. **Command Injection** \u2014 user input passed to shell commands without sanitization\n2. **Path Traversal** \u2014 user-controlled paths that could escape the project root\n3. **XSS / Injection** \u2014 unsanitized output in HTML/templates\n4. **Hardcoded Secrets** \u2014 API keys, passwords, tokens in source code\n5. **Insecure Dependencies** \u2014 check package.json for known vulnerable packages\n6. **Missing Input Validation** \u2014 unvalidated user input at boundaries\n7. **Unsafe File Operations** \u2014 writing to arbitrary paths, following symlinks\n8. **Information Disclosure** \u2014 verbose error messages, debug endpoints\n9. **Authentication Issues** \u2014 missing auth checks, weak token generation\n10. **Race Conditions** \u2014 TOCTOU, concurrent access without locks\n\nFor EACH finding, report:\n- **Severity**: CRITICAL / HIGH / MEDIUM / LOW\n- **File**: exact file path and line number\n- **Issue**: what's wrong and why it's dangerous\n- **Fix**: specific code change needed\n\nAfter the report, automatically fix all CRITICAL and HIGH severity issues.";
+export interface AutonomousCallbacks {
+    sendMessage: (prompt: string) => Promise<string>;
+    isAborted: () => boolean;
+    onRoundStart: (round: number) => void;
+    onRoundEnd: (round: number, summary: string) => void;
+    updateStatus: () => void;
+}
+export declare function runAutonomousLoop(callbacks: AutonomousCallbacks, initialGoal?: string): Promise<number>;
+export declare const MONITOR_MODES: readonly [{
+    readonly key: "passive";
+    readonly label: "🔍 Passive";
+    readonly description: "Read-only scan — alerts only, no changes";
+}, {
+    readonly key: "defensive";
+    readonly label: "🛡️ Defensive";
+    readonly description: "Auto-block threats — IP blocks, port closes, secret rotation";
+}, {
+    readonly key: "active";
+    readonly label: "⚔️ Active";
+    readonly description: "Full control — honeypots, counter-intel, approval required";
+}];
+export declare const MONITOR_WARNINGS: Record<string, string[]>;
+//# sourceMappingURL=autonomous.d.ts.map

package/dist/cli/agent/autonomous.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autonomous.d.ts","sourceRoot":"","sources":["../../../src/cli/agent/autonomous.ts"],"names":[],"mappings":"AAqCA,eAAO,MAAM,eAAe,sqCAoB+C,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACrD,YAAY,EAAE,MAAM,IAAI,CAAC;CAC1B;AA+BD,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,mBAAmB,EAC9B,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CAiFjB;AAMD,eAAO,MAAM,aAAa;;;;;;;;;;;;EAIhB,CAAC;AAEX,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAarD,CAAC"}

package/dist/cli/agent/autonomous.js

@@ -0,0 +1,194 @@
+/**
+ * Autonomous work mode — HelixMind continuously scans and fixes issues.
+ * Runs until nothing more to optimize or /stop is called.
+ */
+import chalk from 'chalk';
+import { renderInfo } from '../ui/chat-view.js';
+const SCAN_PROMPT = `You are in AUTONOMOUS MODE. Scan this repository thoroughly for the most impactful issue to fix.
+
+Priority order:
+1. CRITICAL bugs or logic errors that cause crashes or wrong behavior
+2. Security vulnerabilities (injection, path traversal, hardcoded secrets)
+3. Missing error handling that could cause unhandled exceptions
+4. Broken or missing tests for important functionality
+5. Performance bottlenecks
+6. Dead code, unused imports, inconsistent patterns
+7. Code quality improvements
+
+RULES:
+- Pick ONE issue — the most impactful one
+- Fix it completely (code + test if applicable)
+- End with a single-line summary starting with "DONE:" describing what you fixed
+- If you genuinely cannot find ANY issue worth fixing, respond with exactly: ALL_TASKS_COMPLETE`;
+function continuePrompt(completed) {
+    return `You are in AUTONOMOUS MODE (round ${completed.length + 1}).
+
+Already completed:
+${completed.map((t, i) => `  ${i + 1}. ${t}`).join('\n')}
+
+Continue scanning for MORE issues in DIFFERENT areas of the codebase.
+Pick the next most impactful issue and fix it completely.
+
+End with a single-line summary starting with "DONE:" describing what you fixed.
+If you genuinely cannot find anything more to improve: ALL_TASKS_COMPLETE`;
+}
+export const SECURITY_PROMPT = `Perform a comprehensive SECURITY AUDIT of this codebase.
+
+Check every file systematically for:
+1. **Command Injection** — user input passed to shell commands without sanitization
+2. **Path Traversal** — user-controlled paths that could escape the project root
+3. **XSS / Injection** — unsanitized output in HTML/templates
+4. **Hardcoded Secrets** — API keys, passwords, tokens in source code
+5. **Insecure Dependencies** — check package.json for known vulnerable packages
+6. **Missing Input Validation** — unvalidated user input at boundaries
+7. **Unsafe File Operations** — writing to arbitrary paths, following symlinks
+8. **Information Disclosure** — verbose error messages, debug endpoints
+9. **Authentication Issues** — missing auth checks, weak token generation
+10. **Race Conditions** — TOCTOU, concurrent access without locks
+
+For EACH finding, report:
+- **Severity**: CRITICAL / HIGH / MEDIUM / LOW
+- **File**: exact file path and line number
+- **Issue**: what's wrong and why it's dangerous
+- **Fix**: specific code change needed
+
+After the report, automatically fix all CRITICAL and HIGH severity issues.`;
+function goalPrompt(goal) {
+    return `You are in AUTONOMOUS MODE with a specific goal.
+
+GOAL: ${goal}
+
+Work on this goal step by step. Break it down into subtasks if needed.
+Fix, implement, or change whatever is necessary to achieve the goal.
+
+RULES:
+- Focus exclusively on the given goal
+- Work methodically — one subtask at a time
+- End each round with a single-line summary starting with "DONE:" describing what you accomplished
+- When the goal is fully achieved, respond with exactly: ALL_TASKS_COMPLETE`;
+}
+function continueGoalPrompt(goal, completed) {
+    return `You are in AUTONOMOUS MODE (round ${completed.length + 1}).
+
+GOAL: ${goal}
+
+Already completed:
+${completed.map((t, i) => `  ${i + 1}. ${t}`).join('\n')}
+
+Continue working towards the goal. Pick the next subtask and complete it.
+
+End with a single-line summary starting with "DONE:" describing what you accomplished.
+When the goal is fully achieved: ALL_TASKS_COMPLETE`;
+}
+export async function runAutonomousLoop(callbacks, initialGoal) {
+    const completed = [];
+    let round = 0;
+    let goal = initialGoal;
+    const d = chalk.dim;
+    const c = chalk.hex('#00d4ff');
+    process.stdout.write('\n');
+    process.stdout.write(d('\u256D\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256E') + '\n');
+    process.stdout.write(d('\u2502  ') + c('\u{1F504} AUTONOMOUS MODE') + d('                        \u2502') + '\n');
+    if (goal) {
+        process.stdout.write(d('\u2502') + d('                                             \u2502') + '\n');
+        // Truncate goal to fit in the box (39 chars max)
+        const goalDisplay = goal.length > 39 ? goal.slice(0, 36) + '...' : goal;
+        const padding = ' '.repeat(Math.max(0, 39 - goalDisplay.length));
+        process.stdout.write(d('\u2502  ') + chalk.white.bold('Goal: ') + goalDisplay + padding + d('\u2502') + '\n');
+    }
+    else {
+        process.stdout.write(d('\u2502') + d('                                             \u2502') + '\n');
+        process.stdout.write(d('\u2502  ') + 'HelixMind will continuously scan and fix' + d('    \u2502') + '\n');
+        process.stdout.write(d('\u2502  ') + 'issues until nothing remains.' + d('               \u2502') + '\n');
+    }
+    process.stdout.write(d('\u2502') + d('                                             \u2502') + '\n');
+    process.stdout.write(d('\u2502  ') + d('/stop or ESC to stop') + d('                    \u2502') + '\n');
+    process.stdout.write(d('\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256F') + '\n\n');
+    while (!callbacks.isAborted()) {
+        round++;
+        callbacks.onRoundStart(round);
+        callbacks.updateStatus();
+        let prompt;
+        if (goal) {
+            prompt = round === 1 ? goalPrompt(goal) : continueGoalPrompt(goal, completed);
+        }
+        else {
+            prompt = round === 1 ? SCAN_PROMPT : continuePrompt(completed);
+        }
+        process.stdout.write(chalk.dim(`  \u2500\u2500 Round ${round} `) + chalk.dim('\u2500'.repeat(35)) + '\n');
+        try {
+            const resultText = await callbacks.sendMessage(prompt);
+            if (callbacks.isAborted())
+                break;
+            // Check if agent says it's done
+            if (resultText.includes('ALL_TASKS_COMPLETE')) {
+                if (goal) {
+                    // Goal achieved — transition to general scan mode
+                    process.stdout.write('\n');
+                    renderInfo(chalk.green(`  \u2705 Goal achieved (${completed.length} tasks). Switching to general scan mode...`));
+                    process.stdout.write('\n');
+                    goal = undefined; // switch to scan mode for subsequent rounds
+                    continue;
+                }
+                else {
+                    // General scan found nothing — truly done
+                    process.stdout.write('\n');
+                    renderInfo(chalk.green(`  \u2705 Autonomous mode complete \u2014 ${completed.length} tasks finished.`));
+                    process.stdout.write('\n');
+                    break;
+                }
+            }
+            // Extract summary from "DONE: ..." line or last line
+            const summary = extractSummary(resultText);
+            completed.push(summary);
+            callbacks.onRoundEnd(round, summary);
+            renderInfo(chalk.green(`  \u2713 Round ${round}: ${summary}`));
+        }
+        catch (err) {
+            if (callbacks.isAborted())
+                break;
+            renderInfo(chalk.red(`  \u2717 Round ${round} error: ${err}`));
+        }
+    }
+    if (callbacks.isAborted()) {
+        process.stdout.write('\n');
+        renderInfo(chalk.yellow(`  \u23F9 Autonomous mode stopped after ${completed.length} tasks.`));
+        process.stdout.write('\n');
+    }
+    return completed.length;
+}
+// ---------------------------------------------------------------------------
+// Monitor mode helpers
+// ---------------------------------------------------------------------------
+export const MONITOR_MODES = [
+    { key: 'passive', label: '\u{1F50D} Passive', description: 'Read-only scan \u2014 alerts only, no changes' },
+    { key: 'defensive', label: '\u{1F6E1}\uFE0F Defensive', description: 'Auto-block threats \u2014 IP blocks, port closes, secret rotation' },
+    { key: 'active', label: '\u2694\uFE0F Active', description: 'Full control \u2014 honeypots, counter-intel, approval required' },
+];
+export const MONITOR_WARNINGS = {
+    defensive: [
+        'Block attacking IPs via iptables/fail2ban',
+        'Kill suspicious processes',
+        'Rotate compromised secrets',
+        'Write firewall rules',
+    ],
+    active: [
+        'All defensive actions, plus:',
+        'Deploy honeypot services',
+        'Attacker profiling & counter-intel',
+        'Deception infrastructure',
+    ],
+};
+function extractSummary(text) {
+    // Look for "DONE: ..." line
+    const doneMatch = text.match(/DONE:\s*(.+)/i);
+    if (doneMatch) {
+        const s = doneMatch[1].trim();
+        return s.length > 120 ? s.slice(0, 117) + '...' : s;
+    }
+    // Fallback: last non-empty line
+    const lines = text.trim().split('\n').filter(l => l.trim());
+    const last = lines[lines.length - 1]?.trim() || text.slice(0, 100);
+    return last.length > 120 ? last.slice(0, 117) + '...' : last;
+}
+//# sourceMappingURL=autonomous.js.map

package/dist/cli/agent/autonomous.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autonomous.js","sourceRoot":"","sources":["../../../src/cli/agent/autonomous.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;gGAe4E,CAAC;AAEjG,SAAS,cAAc,CAAC,SAAmB;IACzC,OAAO,qCAAqC,SAAS,CAAC,MAAM,GAAG,CAAC;;;EAGhE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;0EAMkB,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;2EAoB4C,CAAC;AAU5E,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO;;QAED,IAAI;;;;;;;;;4EASgE,CAAC;AAC7E,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,SAAmB;IAC3D,OAAO,qCAAqC,SAAS,CAAC,MAAM,GAAG,CAAC;;QAE1D,IAAI;;;EAGV,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;oDAKJ,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAA8B,EAC9B,WAAoB;IAEpB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,IAAI,GAAuB,WAAW,CAAC;IAE3C,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;IACpB,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,4RAA4R,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7T,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,gCAAgC,CAAC,GAAG,IAAI,CAAC,CAAC;IAClH,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,qDAAqD,CAAC,GAAG,IAAI,CAAC,CAAC;QACpG,iDAAiD;QACjD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,WAAW,GAAG,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;IAChH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,qDAAqD,CAAC,GAAG,IAAI,CAAC,CAAC;QACpG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,0CAA0C,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,+BAA+B,GAAG,CAAC,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,qDAAqD,CAAC,GAAG,IAAI,CAAC,CAAC;IACpG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,CAAC;IACzG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,4RAA4R,CAAC,GAAG,MAAM,CAAC,CAAC;IAE/T,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;QAC9B,KAAK,EAAE,CAAC;QACR,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC9B,SAAS,CAAC,YAAY,EAAE,CAAC;QAEzB,IAAI,MAAc,CAAC;QACnB,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAE1G,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,SAAS,CAAC,SAAS,EAAE;gBAAE,MAAM;YAEjC,gCAAgC;YAChC,IAAI,UAAU,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC9C,IAAI,IAAI,EAAE,CAAC;oBACT,kDAAkD;oBAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,2BAA2B,SAAS,CAAC,MAAM,4CAA4C,CAAC,CAAC,CAAC;oBACjH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,IAAI,GAAG,SAAS,CAAC,CAAC,4CAA4C;oBAC9D,SAAS;gBACX,CAAC;qBAAM,CAAC;oBACN,0CAA0C;oBAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,4CAA4C,SAAS,CAAC,MAAM,kBAAkB,CAAC,CAAC,CAAC;oBACxG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,MAAM;gBACR,CAAC;YACH,CAAC;YAED,qDAAqD;YACrD,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;YAC3C,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAErC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,SAAS,CAAC,SAAS,EAAE;gBAAE,MAAM;YACjC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,KAAK,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,0CAA0C,SAAS,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC;QAC9F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,SAAS,CAAC,MAAM,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,EAAE,GAAG,EAAE,SAAkB,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,+CAA+C,EAAE;IACrH,EAAE,GAAG,EAAE,WAAoB,EAAE,KAAK,EAAE,2BAA2B,EAAE,WAAW,EAAE,mEAAmE,EAAE;IACnJ,EAAE,GAAG,EAAE,QAAiB,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,iEAAiE,EAAE;CAChI,CAAC;AAEX,MAAM,CAAC,MAAM,gBAAgB,GAA6B;IACxD,SAAS,EAAE;QACT,2CAA2C;QAC3C,2BAA2B;QAC3B,4BAA4B;QAC5B,sBAAsB;KACvB;IACD,MAAM,EAAE;QACN,8BAA8B;QAC9B,0BAA0B;QAC1B,oCAAoC;QACpC,0BAA0B;KAC3B;CACF,CAAC;AAEF,SAAS,cAAc,CAAC,IAAY;IAClC,4BAA4B;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC9C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,gCAAgC;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC"}