hivemind-pipeline 0.1.0

package/dist/src/core/security-scanner.d.ts

@@ -0,0 +1,36 @@
+export interface SecurityFinding {
+    id: string;
+    category: string;
+    severity: 'critical' | 'high' | 'medium' | 'low' | 'info';
+    file: string;
+    line: number;
+    code: string;
+    message: string;
+    suggestion: string;
+    cwe?: string;
+}
+export interface SecurityReport {
+    findings: SecurityFinding[];
+    summary: {
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+        info: number;
+    };
+    scannedFiles: number;
+    timestamp: number;
+    durationMs: number;
+}
+export declare class SecurityScanner {
+    private cwd;
+    constructor(cwd: string);
+    scan(opts?: {
+        files?: string[];
+        full?: boolean;
+    }): SecurityReport;
+    private scanFile;
+    private getSourceFiles;
+    private walkDir;
+}
+//# sourceMappingURL=security-scanner.d.ts.map

package/dist/src/core/security-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scanner.d.ts","sourceRoot":"","sources":["../../../src/core/security-scanner.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvF,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAuRD,qBAAa,eAAe;IACd,OAAO,CAAC,GAAG;gBAAH,GAAG,EAAE,MAAM;IAE/B,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,cAAc;IAmCjE,OAAO,CAAC,QAAQ;IA2ChB,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,OAAO;CA6BhB"}

package/dist/src/core/security-scanner.js

@@ -0,0 +1,366 @@
+import { readFileSync, existsSync, readdirSync, statSync } from 'node:fs';
+import { join, relative, extname } from 'node:path';
+const SCAN_EXTENSIONS = new Set([
+    '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs',
+    '.py', '.go', '.rs', '.swift',
+]);
+const EXCLUDE_DIRS = new Set([
+    'node_modules', 'dist', '.git', '.next', 'build', 'coverage',
+    '__pycache__', '.tox', 'target', '.swarm', 'vendor',
+]);
+const PATTERN_RULES = [
+    // --- SQL Injection ---
+    {
+        category: 'sql-injection',
+        severity: 'critical',
+        pattern: /(?:SELECT|INSERT|UPDATE|DELETE|DROP|CREATE|ALTER)\s+.*["'`]\s*\+\s*/i,
+        message: 'String concatenation in SQL query — potential SQL injection',
+        suggestion: 'Use parameterized queries or prepared statements instead of string concatenation.',
+        cwe: 'CWE-89',
+    },
+    {
+        category: 'sql-injection',
+        severity: 'critical',
+        pattern: /(?:SELECT|INSERT|UPDATE|DELETE|DROP|CREATE|ALTER)\s+.*\$\{/i,
+        message: 'Template literal interpolation in SQL query — potential SQL injection',
+        suggestion: 'Use parameterized queries or prepared statements instead of template literals.',
+        cwe: 'CWE-89',
+    },
+    {
+        category: 'sql-injection',
+        severity: 'high',
+        pattern: /\.(?:query|execute|raw)\s*\(\s*["'`].*\$\{/i,
+        message: 'Dynamic query construction with interpolation',
+        suggestion: 'Use parameterized queries (e.g., db.query("SELECT ?", [value])).',
+        cwe: 'CWE-89',
+    },
+    // --- XSS ---
+    {
+        category: 'xss',
+        severity: 'high',
+        pattern: /\.innerHTML\s*=\s*(?!['"`]<)/,
+        message: 'Direct innerHTML assignment — potential XSS',
+        suggestion: 'Use textContent or a DOM sanitization library (e.g., DOMPurify).',
+        cwe: 'CWE-79',
+        extensions: ['ts', 'tsx', 'js', 'jsx'],
+    },
+    {
+        category: 'xss',
+        severity: 'high',
+        pattern: /dangerouslySetInnerHTML/,
+        message: 'dangerouslySetInnerHTML usage — potential XSS',
+        suggestion: 'Sanitize HTML with DOMPurify before using dangerouslySetInnerHTML.',
+        cwe: 'CWE-79',
+        extensions: ['ts', 'tsx', 'js', 'jsx'],
+    },
+    {
+        category: 'xss',
+        severity: 'high',
+        pattern: /document\.write\s*\(/,
+        message: 'document.write usage — potential XSS vector',
+        suggestion: 'Use DOM manipulation methods instead of document.write.',
+        cwe: 'CWE-79',
+        extensions: ['ts', 'tsx', 'js', 'jsx'],
+    },
+    // --- Hardcoded Secrets ---
+    {
+        category: 'hardcoded-secret',
+        severity: 'critical',
+        pattern: /(?:password|passwd|pwd)\s*[:=]\s*["'][^"']{4,}/i,
+        message: 'Possible hardcoded password',
+        suggestion: 'Use environment variables or a secrets manager for credentials.',
+        cwe: 'CWE-798',
+    },
+    {
+        category: 'hardcoded-secret',
+        severity: 'critical',
+        pattern: /(?:api[_-]?key|apikey)\s*[:=]\s*["'][^"']{8,}/i,
+        message: 'Possible hardcoded API key',
+        suggestion: 'Store API keys in environment variables or a secrets manager.',
+        cwe: 'CWE-798',
+    },
+    {
+        category: 'hardcoded-secret',
+        severity: 'critical',
+        pattern: /(?:secret|token)\s*[:=]\s*["'][^"']{8,}/i,
+        message: 'Possible hardcoded secret or token',
+        suggestion: 'Use environment variables or a secrets manager.',
+        cwe: 'CWE-798',
+    },
+    {
+        category: 'hardcoded-secret',
+        severity: 'critical',
+        pattern: /AKIA[0-9A-Z]{16}/,
+        message: 'AWS Access Key ID detected',
+        suggestion: 'Remove the AWS key and rotate it immediately. Use IAM roles or environment variables.',
+        cwe: 'CWE-798',
+    },
+    {
+        category: 'hardcoded-secret',
+        severity: 'critical',
+        pattern: /ghp_[A-Za-z0-9]{36,}/,
+        message: 'GitHub personal access token detected',
+        suggestion: 'Remove and revoke the token. Use environment variables or GitHub Apps.',
+        cwe: 'CWE-798',
+    },
+    {
+        category: 'hardcoded-secret',
+        severity: 'high',
+        pattern: /(?:sk-|pk_live_|sk_live_)[A-Za-z0-9]{20,}/,
+        message: 'Possible Stripe or OpenAI key detected',
+        suggestion: 'Remove the key and rotate it. Use environment variables.',
+        cwe: 'CWE-798',
+    },
+    // --- Path Traversal ---
+    {
+        category: 'path-traversal',
+        severity: 'high',
+        pattern: /req\.(?:params|query|body)\s*[\[.]\s*.*(?:readFile|readdir|createReadStream|access|stat|open|unlink|rmdir)/i,
+        message: 'User input used in file system operation — potential path traversal',
+        suggestion: 'Validate and sanitize paths. Use path.resolve() and verify the result stays within allowed directories.',
+        cwe: 'CWE-22',
+    },
+    {
+        category: 'path-traversal',
+        severity: 'medium',
+        pattern: /(?:readFile|writeFile|createReadStream|createWriteStream)\s*\(.*\.\.\//,
+        message: 'Relative path with ../ in file operation',
+        suggestion: 'Resolve paths with path.resolve() and ensure they stay within the intended directory.',
+        cwe: 'CWE-22',
+    },
+    // --- Command Injection ---
+    {
+        category: 'command-injection',
+        severity: 'critical',
+        pattern: /(?:exec|execSync|spawn|spawnSync)\s*\(\s*(?:["'`].*\$\{|.*\+\s*(?:req\.|user|input|param|query|body))/i,
+        message: 'Dynamic command execution with potential user input — command injection risk',
+        suggestion: 'Use execFile/execFileSync with argument arrays instead of shell string concatenation.',
+        cwe: 'CWE-78',
+    },
+    {
+        category: 'command-injection',
+        severity: 'high',
+        pattern: /(?:exec|execSync)\s*\(\s*`[^`]*\$\{/,
+        message: 'Template literal in exec/execSync — potential command injection',
+        suggestion: 'Use execFile with an arguments array to avoid shell interpretation.',
+        cwe: 'CWE-78',
+    },
+    // --- Eval Usage ---
+    {
+        category: 'eval-usage',
+        severity: 'high',
+        pattern: /\beval\s*\(/,
+        message: 'eval() usage detected — potential code injection',
+        suggestion: 'Avoid eval(). Use JSON.parse() for data, or safer alternatives for dynamic code.',
+        cwe: 'CWE-95',
+    },
+    {
+        category: 'eval-usage',
+        severity: 'high',
+        pattern: /new\s+Function\s*\(/,
+        message: 'new Function() usage — equivalent to eval()',
+        suggestion: 'Avoid dynamic code generation. Use static alternatives.',
+        cwe: 'CWE-95',
+    },
+    {
+        category: 'eval-usage',
+        severity: 'medium',
+        pattern: /setTimeout\s*\(\s*["'`]/,
+        message: 'setTimeout with string argument — implicit eval()',
+        suggestion: 'Pass a function reference to setTimeout instead of a string.',
+        cwe: 'CWE-95',
+    },
+    // --- Insecure Crypto ---
+    {
+        category: 'insecure-crypto',
+        severity: 'medium',
+        pattern: /Math\.random\s*\(\s*\)/,
+        message: 'Math.random() is not cryptographically secure',
+        suggestion: 'Use crypto.randomBytes() or crypto.getRandomValues() for security-sensitive randomness.',
+        cwe: 'CWE-338',
+    },
+    {
+        category: 'insecure-crypto',
+        severity: 'high',
+        pattern: /createHash\s*\(\s*['"]md5['"]\s*\)/,
+        message: 'MD5 hash detected — cryptographically broken',
+        suggestion: 'Use SHA-256 or stronger hash algorithms. For passwords, use bcrypt or argon2.',
+        cwe: 'CWE-328',
+    },
+    {
+        category: 'insecure-crypto',
+        severity: 'medium',
+        pattern: /createHash\s*\(\s*['"]sha1['"]\s*\)/,
+        message: 'SHA-1 hash detected — considered weak',
+        suggestion: 'Use SHA-256 or stronger for new implementations.',
+        cwe: 'CWE-328',
+    },
+    // --- Prototype Pollution ---
+    {
+        category: 'prototype-pollution',
+        severity: 'high',
+        pattern: /__proto__/,
+        message: '__proto__ access detected — potential prototype pollution',
+        suggestion: 'Use Object.create(null) for lookup objects. Validate and sanitize object keys.',
+        cwe: 'CWE-1321',
+    },
+    {
+        category: 'prototype-pollution',
+        severity: 'medium',
+        pattern: /Object\.assign\s*\(\s*\{\s*\}\s*,\s*(?:req\.|user|input|param|query|body)/i,
+        message: 'Object.assign with user input — potential prototype pollution',
+        suggestion: 'Use a safe deep-clone library or validate input keys before merging.',
+        cwe: 'CWE-1321',
+    },
+    // --- SSRF ---
+    {
+        category: 'ssrf',
+        severity: 'high',
+        pattern: /(?:fetch|axios\.get|axios\.post|http\.get|https\.get|got|request)\s*\(\s*(?:req\.|user|input|param|query|body)/i,
+        message: 'HTTP request with user-controlled URL — potential SSRF',
+        suggestion: 'Validate and allowlist URLs. Block internal/private IP ranges.',
+        cwe: 'CWE-918',
+    },
+    {
+        category: 'ssrf',
+        severity: 'medium',
+        pattern: /(?:fetch|axios|got|request)\s*\(\s*`[^`]*\$\{/,
+        message: 'HTTP request with template literal URL — potential SSRF',
+        suggestion: 'Validate URLs against an allowlist before making requests.',
+        cwe: 'CWE-918',
+    },
+    // --- Insecure Headers ---
+    {
+        category: 'insecure-headers',
+        severity: 'medium',
+        pattern: /Access-Control-Allow-Origin['":\s]*['"]\*['"]/i,
+        message: 'Wildcard CORS origin — allows any domain',
+        suggestion: 'Restrict CORS to specific trusted origins.',
+        cwe: 'CWE-942',
+    },
+    {
+        category: 'insecure-headers',
+        severity: 'info',
+        pattern: /(?:helmet|csp|Content-Security-Policy)/i,
+        message: 'CSP/security headers configuration found',
+        suggestion: 'Verify Content-Security-Policy is properly configured.',
+        cwe: 'CWE-693',
+    },
+];
+let findingCounter = 0;
+function nextId() {
+    findingCounter++;
+    return `SEC-${String(findingCounter).padStart(4, '0')}`;
+}
+export class SecurityScanner {
+    cwd;
+    constructor(cwd) {
+        this.cwd = cwd;
+    }
+    scan(opts) {
+        findingCounter = 0;
+        const startTime = Date.now();
+        const files = opts?.files ?? this.getSourceFiles();
+        const findings = [];
+        for (const file of files) {
+            try {
+                findings.push(...this.scanFile(file));
+            }
+            catch {
+                // Skip files that can't be read
+            }
+        }
+        // Sort by severity
+        const severityOrder = { critical: 0, high: 1, medium: 2, low: 3, info: 4 };
+        findings.sort((a, b) => (severityOrder[a.severity] ?? 5) - (severityOrder[b.severity] ?? 5));
+        const summary = {
+            critical: findings.filter(f => f.severity === 'critical').length,
+            high: findings.filter(f => f.severity === 'high').length,
+            medium: findings.filter(f => f.severity === 'medium').length,
+            low: findings.filter(f => f.severity === 'low').length,
+            info: findings.filter(f => f.severity === 'info').length,
+        };
+        return {
+            findings,
+            summary,
+            scannedFiles: files.length,
+            timestamp: Date.now(),
+            durationMs: Date.now() - startTime,
+        };
+    }
+    scanFile(filePath) {
+        const absPath = filePath.startsWith('/') ? filePath : join(this.cwd, filePath);
+        if (!existsSync(absPath))
+            return [];
+        const content = readFileSync(absPath, 'utf-8');
+        const lines = content.split('\n');
+        const ext = extname(filePath).replace('.', '');
+        const relPath = filePath.startsWith('/') ? relative(this.cwd, filePath) : filePath;
+        const findings = [];
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            // Skip comment-only lines
+            const trimmed = line.trim();
+            if (trimmed.startsWith('//') || trimmed.startsWith('#') || trimmed.startsWith('*') || trimmed.startsWith('/*')) {
+                continue;
+            }
+            for (const rule of PATTERN_RULES) {
+                // Skip if rule is extension-restricted and file doesn't match
+                if (rule.extensions && rule.extensions.length > 0 && !rule.extensions.includes(ext)) {
+                    continue;
+                }
+                if (rule.pattern.test(line)) {
+                    findings.push({
+                        id: nextId(),
+                        category: rule.category,
+                        severity: rule.severity,
+                        file: relPath,
+                        line: i + 1,
+                        code: line.trim().substring(0, 200),
+                        message: rule.message,
+                        suggestion: rule.suggestion,
+                        cwe: rule.cwe,
+                    });
+                }
+            }
+        }
+        return findings;
+    }
+    getSourceFiles() {
+        const files = [];
+        this.walkDir(this.cwd, files);
+        return files;
+    }
+    walkDir(dir, files, depth = 0) {
+        if (depth > 15)
+            return; // Prevent overly deep recursion
+        let entries;
+        try {
+            entries = readdirSync(dir);
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            if (EXCLUDE_DIRS.has(entry))
+                continue;
+            if (entry.startsWith('.') && entry !== '.')
+                continue;
+            const fullPath = join(dir, entry);
+            let stat;
+            try {
+                stat = statSync(fullPath);
+            }
+            catch {
+                continue;
+            }
+            if (stat.isDirectory()) {
+                this.walkDir(fullPath, files, depth + 1);
+            }
+            else if (stat.isFile() && SCAN_EXTENSIONS.has(extname(entry))) {
+                files.push(relative(this.cwd, fullPath));
+            }
+        }
+    }
+}
+//# sourceMappingURL=security-scanner.js.map

package/dist/src/core/security-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scanner.js","sourceRoot":"","sources":["../../../src/core/security-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiCpD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5C,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ;CAC9B,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU;IAC5D,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;CACpD,CAAC,CAAC;AAEH,MAAM,aAAa,GAAkB;IACnC,wBAAwB;IACxB;QACE,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,sEAAsE;QAC/E,OAAO,EAAE,6DAA6D;QACtE,UAAU,EAAE,mFAAmF;QAC/F,GAAG,EAAE,QAAQ;KACd;IACD;QACE,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,6DAA6D;QACtE,OAAO,EAAE,uEAAuE;QAChF,UAAU,EAAE,gFAAgF;QAC5F,GAAG,EAAE,QAAQ;KACd;IACD;QACE,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,6CAA6C;QACtD,OAAO,EAAE,+CAA+C;QACxD,UAAU,EAAE,kEAAkE;QAC9E,GAAG,EAAE,QAAQ;KACd;IAED,cAAc;IACd;QACE,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,8BAA8B;QACvC,OAAO,EAAE,6CAA6C;QACtD,UAAU,EAAE,kEAAkE;QAC9E,GAAG,EAAE,QAAQ;QACb,UAAU,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;KACvC;IACD;QACE,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,yBAAyB;QAClC,OAAO,EAAE,+CAA+C;QACxD,UAAU,EAAE,oEAAoE;QAChF,GAAG,EAAE,QAAQ;QACb,UAAU,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;KACvC;IACD;QACE,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE,6CAA6C;QACtD,UAAU,EAAE,yDAAyD;QACrE,GAAG,EAAE,QAAQ;QACb,UAAU,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;KACvC;IAED,4BAA4B;IAC5B;QACE,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,iDAAiD;QAC1D,OAAO,EAAE,6BAA6B;QACtC,UAAU,EAAE,iEAAiE;QAC7E,GAAG,EAAE,SAAS;KACf;IACD;QACE,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,gDAAgD;QACzD,OAAO,EAAE,4BAA4B;QACrC,UAAU,EAAE,+DAA+D;QAC3E,GAAG,EAAE,SAAS;KACf;IACD;QACE,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE,oCAAoC;QAC7C,UAAU,EAAE,iDAAiD;QAC7D,GAAG,EAAE,SAAS;KACf;IACD;QACE,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,4BAA4B;QACrC,UAAU,EAAE,uFAAuF;QACnG,GAAG,EAAE,SAAS;KACf;IACD;QACE,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE,uCAAuC;QAChD,UAAU,EAAE,wEAAwE;QACpF,GAAG,EAAE,SAAS;KACf;IACD;QACE,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,2CAA2C;QACpD,OAAO,EAAE,wCAAwC;QACjD,UAAU,EAAE,0DAA0D;QACtE,GAAG,EAAE,SAAS;KACf;IAED,yBAAyB;IACzB;QACE,QAAQ,EAAE,gBAAgB;QAC1B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,6GAA6G;QACtH,OAAO,EAAE,qEAAqE;QAC9E,UAAU,EAAE,yGAAyG;QACrH,GAAG,EAAE,QAAQ;KACd;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,wEAAwE;QACjF,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,uFAAuF;QACnG,GAAG,EAAE,QAAQ;KACd;IAED,4BAA4B;IAC5B;QACE,QAAQ,EAAE,mBAAmB;QAC7B,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,wGAAwG;QACjH,OAAO,EAAE,8EAA8E;QACvF,UAAU,EAAE,uFAAuF;QACnG,GAAG,EAAE,QAAQ;KACd;IACD;QACE,QAAQ,EAAE,mBAAmB;QAC7B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,qCAAqC;QAC9C,OAAO,EAAE,iEAAiE;QAC1E,UAAU,EAAE,qEAAqE;QACjF,GAAG,EAAE,QAAQ;KACd;IAED,qBAAqB;IACrB;QACE,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,aAAa;QACtB,OAAO,EAAE,kDAAkD;QAC3D,UAAU,EAAE,kFAAkF;QAC9F,GAAG,EAAE,QAAQ;KACd;IACD;QACE,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EAAE,6CAA6C;QACtD,UAAU,EAAE,yDAAyD;QACrE,GAAG,EAAE,QAAQ;KACd;IACD;QACE,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,yBAAyB;QAClC,OAAO,EAAE,mDAAmD;QAC5D,UAAU,EAAE,8DAA8D;QAC1E,GAAG,EAAE,QAAQ;KACd;IAED,0BAA0B;IAC1B;QACE,QAAQ,EAAE,iBAAiB;QAC3B,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,wBAAwB;QACjC,OAAO,EAAE,+CAA+C;QACxD,UAAU,EAAE,yFAAyF;QACrG,GAAG,EAAE,SAAS;KACf;IACD;QACE,QAAQ,EAAE,iBAAiB;QAC3B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,oCAAoC;QAC7C,OAAO,EAAE,8CAA8C;QACvD,UAAU,EAAE,+EAA+E;QAC3F,GAAG,EAAE,SAAS;KACf;IACD;QACE,QAAQ,EAAE,iBAAiB;QAC3B,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,qCAAqC;QAC9C,OAAO,EAAE,uCAAuC;QAChD,UAAU,EAAE,kDAAkD;QAC9D,GAAG,EAAE,SAAS;KACf;IAED,8BAA8B;IAC9B;QACE,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,2DAA2D;QACpE,UAAU,EAAE,gFAAgF;QAC5F,GAAG,EAAE,UAAU;KAChB;IACD;QACE,QAAQ,EAAE,qBAAqB;QAC/B,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,4EAA4E;QACrF,OAAO,EAAE,+DAA+D;QACxE,UAAU,EAAE,sEAAsE;QAClF,GAAG,EAAE,UAAU;KAChB;IAED,eAAe;IACf;QACE,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,iHAAiH;QAC1H,OAAO,EAAE,wDAAwD;QACjE,UAAU,EAAE,gEAAgE;QAC5E,GAAG,EAAE,SAAS;KACf;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,yDAAyD;QAClE,UAAU,EAAE,4DAA4D;QACxE,GAAG,EAAE,SAAS;KACf;IAED,2BAA2B;IAC3B;QACE,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,gDAAgD;QACzD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,4CAA4C;QACxD,GAAG,EAAE,SAAS;KACf;IACD;QACE,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,yCAAyC;QAClD,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,wDAAwD;QACpE,GAAG,EAAE,SAAS;KACf;CACF,CAAC;AAEF,IAAI,cAAc,GAAG,CAAC,CAAC;AAEvB,SAAS,MAAM;IACb,cAAc,EAAE,CAAC;IACjB,OAAO,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,OAAO,eAAe;IACN;IAApB,YAAoB,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAEnC,IAAI,CAAC,IAA2C;QAC9C,cAAc,GAAG,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAsB,EAAE,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,aAAa,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE7F,MAAM,OAAO,GAAG;YACd,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;YAChE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;YACxD,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;YAC5D,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;YACtD,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;SACzD,CAAC;QAEF,OAAO;YACL,QAAQ;YACR,OAAO;YACP,YAAY,EAAE,KAAK,CAAC,MAAM;YAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,QAAgB;QAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/E,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnF,MAAM,QAAQ,GAAsB,EAAE,CAAC;QAEvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,0BAA0B;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/G,SAAS;YACX,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;gBACjC,8DAA8D;gBAC9D,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACpF,SAAS;gBACX,CAAC;gBAED,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC5B,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,MAAM,EAAE;wBACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,IAAI,EAAE,OAAO;wBACb,IAAI,EAAE,CAAC,GAAG,CAAC;wBACX,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;wBACnC,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;qBACd,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,cAAc;QACpB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,OAAO,CAAC,GAAW,EAAE,KAAe,EAAE,KAAK,GAAG,CAAC;QACrD,IAAI,KAAK,GAAG,EAAE;YAAE,OAAO,CAAC,gCAAgC;QAExD,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YACtC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,GAAG;gBAAE,SAAS;YAErD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC3C,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAChE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/src/core/self-improvement.d.ts

@@ -0,0 +1,26 @@
+import type { PerformanceRecord, StrategyAnalysis, SelfImprovementData } from '../types.js';
+export declare class SelfImprovementEngine {
+    private swarmDir;
+    private data;
+    constructor(swarmDir: string);
+    private loadState;
+    private saveState;
+    private loadHistory;
+    recordRun(record: PerformanceRecord): void;
+    analyze(count?: number): StrategyAnalysis[];
+    getModelEffectiveness(): Array<{
+        model: string;
+        runs: number;
+        successRate: number;
+        avgCost: number;
+        avgFixIterations: number;
+    }>;
+    getRecommendations(): string[];
+    generateReport(): NonNullable<SelfImprovementData['report']>;
+    applyTuning(): {
+        applied: string[];
+    };
+    resetTuning(): void;
+    getState(): SelfImprovementData;
+}
+//# sourceMappingURL=self-improvement.d.ts.map

package/dist/src/core/self-improvement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-improvement.d.ts","sourceRoot":"","sources":["../../../src/core/self-improvement.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,EAAgB,MAAM,aAAa,CAAC;AAiB1G,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,IAAI,CAAsB;gBAEtB,QAAQ,EAAE,MAAM;IAO5B,OAAO,CAAC,SAAS;IAUjB,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,WAAW;IAYnB,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI;IAW1C,OAAO,CAAC,KAAK,SAAK,GAAG,gBAAgB,EAAE;IAiFvC,qBAAqB,IAAI,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;IAwB/H,kBAAkB,IAAI,MAAM,EAAE;IAsE9B,cAAc,IAAI,WAAW,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAwF5D,WAAW,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE;IA2DpC,WAAW,IAAI,IAAI;IAYnB,QAAQ,IAAI,mBAAmB;CAGhC"}