kuzushi 0.1.0

package/dist/agents/tasks/augur-types.js

@@ -0,0 +1,169 @@
+import path from "node:path";
+import { augurRoot } from "@kuzushi/augur";
+import { isRecord } from "../../utils.js";
+export const AUGUR_PASSES = [
+    { passId: 1, passKey: "path_traversal", focus: "Path Traversal", cwes: ["022", "023", "036", "073"] },
+    { passId: 2, passKey: "command_injection", focus: "Command/Argument Injection", cwes: ["077", "078", "088"] },
+    { passId: 3, passKey: "ssrf", focus: "SSRF", cwes: ["918", "099", "610"] },
+    { passId: 4, passKey: "code_injection", focus: "Code Injection", cwes: ["094", "095"] },
+    { passId: 5, passKey: "sql_injection", focus: "SQL Injection", cwes: ["089"] },
+    { passId: 6, passKey: "unsafe_deserialization", focus: "Unsafe Deserialization", cwes: ["502"] },
+];
+const AUGUR_PASS_IDS = new Set([1, 2, 3, 4, 5, 6]);
+const DEFAULT_AUGUR_PATH = normalizeDefaultAugurPath();
+export const DEFAULT_AUGUR_TASK_CONFIG = {
+    augurPath: DEFAULT_AUGUR_PATH,
+    dbPath: undefined,
+    passes: [1, 2, 3, 4, 5, 6],
+    labelingModel: "claude-sonnet-4-20250514",
+    extractionModel: undefined,
+    labelingBatchSize: 20,
+    labelingConfidenceThreshold: 0.55,
+    autoApproveCheckpoint: false,
+    workspaceDir: "./iris",
+    codeqlBinary: undefined,
+    python3Binary: "python3",
+    threads: undefined,
+    ram: undefined,
+    maxFindings: undefined,
+};
+function normalizeDefaultAugurPath() {
+    const envPath = process.env["AUGUR_PATH"]?.trim();
+    if (envPath) {
+        return path.normalize(envPath);
+    }
+    return augurRoot;
+}
+export function resolveAugurConfig(config) {
+    const raw = config.scannerConfig["augur"];
+    const merged = isRecord(raw)
+        ? { ...DEFAULT_AUGUR_TASK_CONFIG, ...raw }
+        : { ...DEFAULT_AUGUR_TASK_CONFIG };
+    return {
+        augurPath: normalizePath(merged["augurPath"], DEFAULT_AUGUR_TASK_CONFIG.augurPath),
+        dbPath: normalizeOptionalPath(merged["dbPath"]),
+        passes: normalizePasses(merged["passes"]),
+        labelingModel: normalizeString(merged["labelingModel"], config.model),
+        extractionModel: normalizeOptionalString(merged["extractionModel"]),
+        labelingBatchSize: normalizePositiveInt(merged["labelingBatchSize"], DEFAULT_AUGUR_TASK_CONFIG.labelingBatchSize),
+        labelingConfidenceThreshold: normalizeUnitInterval(merged["labelingConfidenceThreshold"], DEFAULT_AUGUR_TASK_CONFIG.labelingConfidenceThreshold),
+        autoApproveCheckpoint: normalizeBoolean(merged["autoApproveCheckpoint"], DEFAULT_AUGUR_TASK_CONFIG.autoApproveCheckpoint),
+        workspaceDir: normalizePath(merged["workspaceDir"], DEFAULT_AUGUR_TASK_CONFIG.workspaceDir),
+        codeqlBinary: normalizeOptionalPath(merged["codeqlBinary"]),
+        python3Binary: normalizeString(merged["python3Binary"], DEFAULT_AUGUR_TASK_CONFIG.python3Binary),
+        threads: normalizeOptionalPositiveInt(merged["threads"]),
+        ram: normalizeOptionalPositiveInt(merged["ram"]),
+        maxFindings: normalizeOptionalPositiveInt(merged["maxFindings"]),
+    };
+}
+export function mapFrameworkToReference(framework) {
+    const normalized = framework.trim().toLowerCase();
+    if (!normalized) {
+        return null;
+    }
+    if (normalized.includes("fastapi"))
+        return "fastapi";
+    if (normalized.includes("django"))
+        return "django";
+    if (normalized.includes("flask"))
+        return "flask";
+    if (normalized.includes("gin"))
+        return "gin";
+    if (normalized.includes("echo"))
+        return "echo";
+    if (normalized.includes("spring"))
+        return "spring";
+    if (normalized.includes("express"))
+        return "express";
+    if (normalized.includes("asp.net") || normalized.includes("aspnet") || normalized.includes("api controller")) {
+        return "aspnet";
+    }
+    return null;
+}
+export function normalizeAugurLanguage(value) {
+    const raw = value.trim().toLowerCase();
+    if (raw.includes("python"))
+        return "python";
+    if (raw.includes("go"))
+        return "go";
+    if (raw.includes("javascript") || raw.includes("typescript") || raw === "js" || raw === "ts") {
+        return "javascript";
+    }
+    if (raw.includes("java"))
+        return "java";
+    if (raw.includes("c#") || raw.includes("csharp"))
+        return "csharp";
+    return "javascript";
+}
+function normalizePasses(value) {
+    if (!Array.isArray(value)) {
+        return [...DEFAULT_AUGUR_TASK_CONFIG.passes];
+    }
+    const seen = new Set();
+    for (const item of value) {
+        const asInt = Math.floor(Number(item));
+        if (AUGUR_PASS_IDS.has(asInt)) {
+            seen.add(asInt);
+        }
+    }
+    if (seen.size === 0) {
+        return [...DEFAULT_AUGUR_TASK_CONFIG.passes];
+    }
+    return [...seen].sort((a, b) => a - b);
+}
+function normalizeOptionalPositiveInt(value) {
+    const numeric = Number(value);
+    if (!Number.isFinite(numeric) || numeric < 1) {
+        return undefined;
+    }
+    return Math.floor(numeric);
+}
+function normalizePositiveInt(value, fallback) {
+    const numeric = Number(value);
+    if (!Number.isFinite(numeric) || numeric < 1) {
+        return fallback;
+    }
+    return Math.floor(numeric);
+}
+function normalizeString(value, fallback) {
+    if (typeof value !== "string") {
+        return fallback;
+    }
+    const trimmed = value.trim();
+    return trimmed || fallback;
+}
+function normalizeOptionalPath(value) {
+    if (typeof value !== "string") {
+        return undefined;
+    }
+    const trimmed = value.trim();
+    if (!trimmed) {
+        return undefined;
+    }
+    return path.normalize(trimmed);
+}
+function normalizePath(value, fallback) {
+    if (typeof value !== "string") {
+        return fallback;
+    }
+    const trimmed = value.trim();
+    return trimmed ? path.normalize(trimmed) : fallback;
+}
+function normalizeBoolean(value, fallback) {
+    return typeof value === "boolean" ? value : fallback;
+}
+function normalizeOptionalString(value) {
+    if (typeof value !== "string") {
+        return undefined;
+    }
+    const trimmed = value.trim();
+    return trimmed || undefined;
+}
+function normalizeUnitInterval(value, fallback) {
+    const numeric = Number(value);
+    if (!Number.isFinite(numeric) || numeric < 0 || numeric > 1) {
+        return fallback;
+    }
+    return numeric;
+}
+//# sourceMappingURL=augur-types.js.map

package/dist/agents/tasks/augur-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"augur-types.js","sourceRoot":"","sources":["../../../src/agents/tasks/augur-types.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAmH1C,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;IACrG,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;IAC7G,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;IAC1E,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE;IACvF,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;IAC9E,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;CACjG,CAAC;AAEF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAEnD,MAAM,kBAAkB,GAAG,yBAAyB,EAAE,CAAC;AAEvD,MAAM,CAAC,MAAM,yBAAyB,GAAoB;IACxD,SAAS,EAAE,kBAAkB;IAC7B,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1B,aAAa,EAAE,0BAA0B;IACzC,eAAe,EAAE,SAAS;IAC1B,iBAAiB,EAAE,EAAE;IACrB,2BAA2B,EAAE,IAAI;IACjC,qBAAqB,EAAE,KAAK;IAC5B,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,SAAS;IACvB,aAAa,EAAE,SAAS;IACxB,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,SAAS;IACd,WAAW,EAAE,SAAS;CACvB,CAAC;AAEF,SAAS,yBAAyB;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC1B,CAAC,CAAC,EAAE,GAAG,yBAAyB,EAAE,GAAG,GAAG,EAAE;QAC1C,CAAC,CAAC,EAAE,GAAG,yBAAyB,EAAE,CAAC;IAErC,OAAO;QACL,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,yBAAyB,CAAC,SAAS,CAAC;QAClF,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,aAAa,EAAE,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QACrE,eAAe,EAAE,uBAAuB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACnE,iBAAiB,EAAE,oBAAoB,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,yBAAyB,CAAC,iBAAiB,CAAC;QACjH,2BAA2B,EAAE,qBAAqB,CAChD,MAAM,CAAC,6BAA6B,CAAC,EACrC,yBAAyB,CAAC,2BAA2B,CACtD;QACD,qBAAqB,EAAE,gBAAgB,CACrC,MAAM,CAAC,uBAAuB,CAAC,EAC/B,yBAAyB,CAAC,qBAAqB,CAChD;QACD,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,yBAAyB,CAAC,YAAY,CAAC;QAC3F,YAAY,EAAE,qBAAqB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC3D,aAAa,EAAE,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,yBAAyB,CAAC,aAAa,CAAC;QAChG,OAAO,EAAE,4BAA4B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,GAAG,EAAE,4BAA4B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,WAAW,EAAE,4BAA4B,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,SAAiB;IACvD,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/C,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7G,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5C,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC7F,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,KAA8B,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAc;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,QAAgB;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,QAAgB;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,IAAI,QAAQ,CAAC;AAC7B,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,QAAgB;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,QAAiB;IACzD,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvD,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,IAAI,SAAS,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,QAAgB;IAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/agents/tasks/context-gatherer.d.ts

@@ -0,0 +1,6 @@
+import type { ScanOpts, RepoContext } from "../../types.js";
+import type { AgentTask } from "../types.js";
+/**
+ * Deterministic, non-AI pre-scan repository context gathering task.
+ */
+export declare const contextGathererTask: AgentTask<ScanOpts, RepoContext>;

package/dist/agents/tasks/context-gatherer.js

@@ -0,0 +1,320 @@
+import { readdir, readFile, stat } from "node:fs/promises";
+import path from "node:path";
+import { isRecord } from "../../utils.js";
+const MAX_WALK_DEPTH = 5;
+const MAX_WALK_ENTRIES = 4000;
+const IGNORED_DIRS = new Set([
+    ".git",
+    ".kuzushi",
+    "node_modules",
+    "dist",
+    "coverage",
+    "vendor",
+    "target",
+    "build",
+    ".next",
+]);
+/**
+ * Deterministic, non-AI pre-scan repository context gathering task.
+ */
+export const contextGathererTask = {
+    id: "context-gatherer",
+    displayName: "Context Gatherer",
+    outputKind: "custom",
+    dependsOn: [],
+    async run(_input, context) {
+        const aggregate = createMutableRepoContext();
+        await Promise.all([
+            gatherFromPackageJson(context.repoRoot, aggregate),
+            gatherFromGoMod(context.repoRoot, aggregate),
+            gatherFromPython(context.repoRoot, aggregate),
+            gatherFromCargoToml(context.repoRoot, aggregate),
+        ]);
+        const pathSignals = await walkRepo(context.repoRoot);
+        gatherFromPathSignals(pathSignals, aggregate);
+        return {
+            languages: sortValues(aggregate.languages),
+            frameworks: sortValues(aggregate.frameworks),
+            authPatterns: sortValues(aggregate.authPatterns),
+            sanitizationLibs: sortValues(aggregate.sanitizationLibs),
+            ormOrDb: sortValues(aggregate.ormOrDb),
+            entryPoints: sortValues(aggregate.entryPoints),
+        };
+    },
+};
+function createMutableRepoContext() {
+    return {
+        languages: new Set(),
+        frameworks: new Set(),
+        authPatterns: new Set(),
+        sanitizationLibs: new Set(),
+        ormOrDb: new Set(),
+        entryPoints: new Set(),
+    };
+}
+async function gatherFromPackageJson(repoRoot, out) {
+    const packageJson = await readJson(path.join(repoRoot, "package.json"));
+    if (!packageJson) {
+        return;
+    }
+    const depNames = extractDependencyNames(packageJson);
+    if (depNames.size === 0) {
+        return;
+    }
+    out.languages.add(depNames.has("typescript") ? "TypeScript" : "JavaScript");
+    maybeAdd(out.frameworks, depNames, ["next"], "Next.js");
+    maybeAdd(out.frameworks, depNames, ["express"], "Express");
+    maybeAdd(out.frameworks, depNames, ["react"], "React");
+    maybeAdd(out.frameworks, depNames, ["@nestjs/core"], "NestJS");
+    maybeAdd(out.authPatterns, depNames, ["jsonwebtoken", "jose", "passport-jwt"], "JWT");
+    maybeAdd(out.authPatterns, depNames, ["express-session", "iron-session"], "session-based");
+    maybeAdd(out.authPatterns, depNames, ["next-auth", "passport-oauth2", "oauth2-server"], "OAuth");
+    maybeAdd(out.sanitizationLibs, depNames, ["helmet"], "helmet");
+    maybeAdd(out.sanitizationLibs, depNames, ["dompurify"], "DOMPurify");
+    maybeAdd(out.sanitizationLibs, depNames, ["sanitize-html", "xss"], "sanitize-html");
+    maybeAdd(out.ormOrDb, depNames, ["prisma", "@prisma/client"], "Prisma");
+    maybeAdd(out.ormOrDb, depNames, ["sequelize"], "Sequelize");
+    maybeAdd(out.ormOrDb, depNames, ["typeorm"], "TypeORM");
+    maybeAdd(out.ormOrDb, depNames, ["mongoose"], "Mongoose");
+    maybeAdd(out.ormOrDb, depNames, ["knex"], "Knex");
+    if (await pathExists(path.join(repoRoot, "src/pages/api"))) {
+        out.entryPoints.add("src/pages/api/*");
+    }
+    if (await pathExists(path.join(repoRoot, "src/app/api"))) {
+        out.entryPoints.add("src/app/api/*");
+    }
+    if (await pathExists(path.join(repoRoot, "src/server.ts"))) {
+        out.entryPoints.add("src/server.ts");
+    }
+    if (await pathExists(path.join(repoRoot, "src/index.ts"))) {
+        out.entryPoints.add("src/index.ts");
+    }
+}
+async function gatherFromGoMod(repoRoot, out) {
+    const content = await readText(path.join(repoRoot, "go.mod"));
+    if (!content) {
+        return;
+    }
+    const lower = content.toLowerCase();
+    out.languages.add("Go");
+    if (lower.includes("github.com/gin-gonic/gin")) {
+        out.frameworks.add("Gin");
+    }
+    if (lower.includes("github.com/labstack/echo")) {
+        out.frameworks.add("Echo");
+    }
+    if (lower.includes("jwt") || lower.includes("jwx")) {
+        out.authPatterns.add("JWT");
+    }
+    if (lower.includes("oauth")) {
+        out.authPatterns.add("OAuth");
+    }
+    if (lower.includes("gorm.io/gorm")) {
+        out.ormOrDb.add("GORM");
+    }
+    if (await pathExists(path.join(repoRoot, "cmd/server/main.go"))) {
+        out.entryPoints.add("cmd/server/main.go");
+    }
+    else if (await pathExists(path.join(repoRoot, "main.go"))) {
+        out.entryPoints.add("main.go");
+    }
+}
+async function gatherFromPython(repoRoot, out) {
+    const requirements = await readText(path.join(repoRoot, "requirements.txt"));
+    const pyproject = await readText(path.join(repoRoot, "pyproject.toml"));
+    const combined = [requirements, pyproject].filter(Boolean).join("\n").toLowerCase();
+    if (!combined) {
+        return;
+    }
+    out.languages.add("Python");
+    if (combined.includes("django")) {
+        out.frameworks.add("Django");
+    }
+    if (combined.includes("flask")) {
+        out.frameworks.add("Flask");
+    }
+    if (combined.includes("fastapi")) {
+        out.frameworks.add("FastAPI");
+    }
+    if (combined.includes("pyjwt") || combined.includes("jwt")) {
+        out.authPatterns.add("JWT");
+    }
+    if (combined.includes("oauth") || combined.includes("authlib")) {
+        out.authPatterns.add("OAuth");
+    }
+    if (combined.includes("bleach")) {
+        out.sanitizationLibs.add("bleach");
+    }
+    if (combined.includes("sqlalchemy")) {
+        out.ormOrDb.add("SQLAlchemy");
+    }
+    if (combined.includes("django")) {
+        out.ormOrDb.add("Django ORM");
+    }
+    if (await pathExists(path.join(repoRoot, "app.py"))) {
+        out.entryPoints.add("app.py");
+    }
+    if (await pathExists(path.join(repoRoot, "main.py"))) {
+        out.entryPoints.add("main.py");
+    }
+}
+async function gatherFromCargoToml(repoRoot, out) {
+    const cargoToml = await readText(path.join(repoRoot, "Cargo.toml"));
+    if (!cargoToml) {
+        return;
+    }
+    const lower = cargoToml.toLowerCase();
+    out.languages.add("Rust");
+    if (lower.includes("actix-web")) {
+        out.frameworks.add("Actix Web");
+    }
+    if (lower.includes("rocket")) {
+        out.frameworks.add("Rocket");
+    }
+    if (lower.includes("jsonwebtoken")) {
+        out.authPatterns.add("JWT");
+    }
+    if (lower.includes("oauth")) {
+        out.authPatterns.add("OAuth");
+    }
+    if (lower.includes("diesel")) {
+        out.ormOrDb.add("Diesel");
+    }
+    if (lower.includes("sqlx")) {
+        out.ormOrDb.add("sqlx");
+    }
+    if (await pathExists(path.join(repoRoot, "src/main.rs"))) {
+        out.entryPoints.add("src/main.rs");
+    }
+}
+function gatherFromPathSignals(signals, out) {
+    if (signals.files.has(".env") || signals.files.has(".env.local") || signals.files.has(".env.production")) {
+        out.entryPoints.add(".env*");
+    }
+    if (signals.files.has("docker-compose.yml") || signals.files.has("docker-compose.yaml")) {
+        out.entryPoints.add("docker-compose.yml");
+    }
+    if (signals.files.has("Dockerfile")) {
+        out.entryPoints.add("Dockerfile");
+    }
+    const hasAuthDir = [...signals.dirs].some((dir) => dir.includes("/auth") || dir.startsWith("auth"));
+    const hasMiddlewareDir = [...signals.dirs].some((dir) => dir.includes("/middleware") || dir.startsWith("middleware"));
+    if (hasAuthDir) {
+        out.authPatterns.add("auth-module");
+    }
+    if (hasMiddlewareDir) {
+        out.authPatterns.add("middleware-guards");
+    }
+    if ([...signals.files].some((file) => file.startsWith("src/pages/api/"))) {
+        out.entryPoints.add("src/pages/api/*");
+    }
+    if ([...signals.files].some((file) => file.startsWith("src/app/api/"))) {
+        out.entryPoints.add("src/app/api/*");
+    }
+    if (signals.files.has("cmd/server/main.go")) {
+        out.entryPoints.add("cmd/server/main.go");
+    }
+}
+async function walkRepo(repoRoot) {
+    const files = new Set();
+    const dirs = new Set();
+    const stack = [{ relDir: "", depth: 0 }];
+    let visited = 0;
+    while (stack.length > 0 && visited < MAX_WALK_ENTRIES) {
+        const next = stack.pop();
+        if (!next) {
+            break;
+        }
+        const absDir = path.join(repoRoot, next.relDir);
+        let entries;
+        try {
+            entries = await readdir(absDir, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            if (visited >= MAX_WALK_ENTRIES) {
+                break;
+            }
+            const relPath = normalizeRelPath(path.join(next.relDir, entry.name));
+            visited += 1;
+            if (entry.isDirectory()) {
+                dirs.add(relPath);
+                if (next.depth >= MAX_WALK_DEPTH || IGNORED_DIRS.has(entry.name)) {
+                    continue;
+                }
+                stack.push({
+                    relDir: relPath,
+                    depth: next.depth + 1,
+                });
+                continue;
+            }
+            if (entry.isFile()) {
+                files.add(relPath);
+            }
+        }
+    }
+    return { files, dirs };
+}
+async function readJson(filePath) {
+    const content = await readText(filePath);
+    if (!content) {
+        return undefined;
+    }
+    try {
+        const parsed = JSON.parse(content);
+        if (isRecord(parsed)) {
+            return parsed;
+        }
+    }
+    catch {
+        return undefined;
+    }
+    return undefined;
+}
+async function readText(filePath) {
+    try {
+        return await readFile(filePath, "utf-8");
+    }
+    catch {
+        return undefined;
+    }
+}
+function extractDependencyNames(pkg) {
+    const names = new Set();
+    collectDependencyKeys(names, pkg["dependencies"]);
+    collectDependencyKeys(names, pkg["devDependencies"]);
+    collectDependencyKeys(names, pkg["peerDependencies"]);
+    collectDependencyKeys(names, pkg["optionalDependencies"]);
+    return names;
+}
+function collectDependencyKeys(target, raw) {
+    if (!isRecord(raw)) {
+        return;
+    }
+    for (const key of Object.keys(raw)) {
+        target.add(key.toLowerCase());
+    }
+}
+function maybeAdd(target, dependencies, keys, label) {
+    if (keys.some((key) => dependencies.has(key))) {
+        target.add(label);
+    }
+}
+async function pathExists(filePath) {
+    try {
+        await stat(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function normalizeRelPath(relPath) {
+    return relPath.split(path.sep).join("/").replace(/^\.\//, "");
+}
+function sortValues(values) {
+    return [...values].sort((a, b) => a.localeCompare(b));
+}
+//# sourceMappingURL=context-gatherer.js.map

package/dist/agents/tasks/context-gatherer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-gatherer.js","sourceRoot":"","sources":["../../../src/agents/tasks/context-gatherer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,MAAM;IACN,UAAU;IACV,cAAc;IACd,MAAM;IACN,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAgBH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAqC;IACnE,EAAE,EAAE,kBAAkB;IACtB,WAAW,EAAE,kBAAkB;IAC/B,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE,EAAE;IACb,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO;QACvB,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC;QAE7C,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC;YAClD,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC;YAC5C,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC;YAC7C,mBAAmB,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC;SACjD,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrD,qBAAqB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAE9C,OAAO;YACL,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC;YAC1C,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC;YAC5C,YAAY,EAAE,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC;YAChD,gBAAgB,EAAE,UAAU,CAAC,SAAS,CAAC,gBAAgB,CAAC;YACxD,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC;YACtC,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC;SAC/C,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,wBAAwB;IAC/B,OAAO;QACL,SAAS,EAAE,IAAI,GAAG,EAAU;QAC5B,UAAU,EAAE,IAAI,GAAG,EAAU;QAC7B,YAAY,EAAE,IAAI,GAAG,EAAU;QAC/B,gBAAgB,EAAE,IAAI,GAAG,EAAU;QACnC,OAAO,EAAE,IAAI,GAAG,EAAU;QAC1B,WAAW,EAAE,IAAI,GAAG,EAAU;KAC/B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,QAAgB,EAAE,GAAuB;IAC5E,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAE5E,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACxD,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3D,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAC;IAE/D,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC;IACtF,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,iBAAiB,EAAE,cAAc,CAAC,EAAE,eAAe,CAAC,CAAC;IAC3F,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,iBAAiB,EAAE,eAAe,CAAC,EAAE,OAAO,CAAC,CAAC;IAEjG,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC/D,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;IACrE,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,KAAK,CAAC,EAAE,eAAe,CAAC,CAAC;IAEpF,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxE,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;IAC5D,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IACxD,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1D,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAElD,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,GAAuB;IACtE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAExB,IAAI,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,GAAuB;IACvE,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAEpF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAE5B,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAgB,EAAE,GAAuB;IAC1E,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACtC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAE1B,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAoB,EAAE,GAAuB;IAC1E,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACpG,MAAM,gBAAgB,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAC7C,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CACrE,CAAC;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,gBAAgB,EAAE,CAAC;QACrB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAgB;IACtC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAA6C,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACnF,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,OAAO,IAAI,gBAAgB,EAAE,CAAC;gBAChC,MAAM;YACR,CAAC;YAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC,CAAC;YAEb,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAElB,IAAI,IAAI,CAAC,KAAK,IAAI,cAAc,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjE,SAAS;gBACX,CAAC;gBAED,KAAK,CAAC,IAAI,CAAC;oBACT,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC;iBACtB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAgB;IACtC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAgB;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,GAA4B;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAClD,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACrD,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACtD,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAmB,EAAE,GAAY;IAC9D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAmB,EAAE,YAAyB,EAAE,IAAc,EAAE,KAAa;IAC7F,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,UAAU,CAAC,MAAmB;IACrC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/agents/types.d.ts

@@ -0,0 +1,28 @@
+import type { MessageBus } from "../bus/types.js";
+import type { Finding, TriageAgentConfig } from "../scanners/types.js";
+import type { KuzushiConfig } from "../types.js";
+/** What kind of output this task produces. */
+export type TaskOutputKind = "findings" | "threat-model" | "verdict" | "report" | "custom";
+/** Shared context provided to every task execution. */
+export interface TaskContext {
+    runId: string;
+    repoRoot: string;
+    repoName: string;
+    config: KuzushiConfig;
+    bus: MessageBus;
+    /** Outputs from completed dependency tasks, keyed by task ID. */
+    upstreamOutputs: Map<string, unknown>;
+}
+/**
+ * A unit of work in the agentic pipeline.
+ * Could be a scanner, triage agent, threat modeler, or any custom task.
+ */
+export interface AgentTask<TInput = unknown, TOutput = unknown> {
+    readonly id: string;
+    readonly displayName: string;
+    readonly outputKind: TaskOutputKind;
+    readonly dependsOn: string[];
+    run(input: TInput, context: TaskContext): Promise<TOutput>;
+    init?(config: Record<string, unknown>): Promise<void>;
+    triageAgentConfig?(finding: Finding, repoName: string): TriageAgentConfig;
+}

package/dist/agents/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/agents/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":""}

package/dist/bus/adapters/google-pubsub.d.ts

@@ -0,0 +1,13 @@
+import type { AnyEvent, MessageBus } from "../types.js";
+/**
+ * Placeholder Google Pub/Sub adapter.
+ * Implement this class to provide production Pub/Sub transport.
+ */
+export declare class GooglePubSubBus implements MessageBus {
+    constructor();
+    publish<E extends AnyEvent>(_event: E): Promise<void>;
+    subscribe<E extends AnyEvent>(_eventType: E["type"], _handler: (event: E) => Promise<void> | void): void;
+    unsubscribe(_eventType: string, _handler: Function): void;
+    waitFor<E extends AnyEvent>(_eventType: E["type"], _predicate?: (event: E) => boolean, _timeoutMs?: number): Promise<E>;
+    close(): Promise<void>;
+}

package/dist/bus/adapters/google-pubsub.js

@@ -0,0 +1,26 @@
+/**
+ * Placeholder Google Pub/Sub adapter.
+ * Implement this class to provide production Pub/Sub transport.
+ */
+export class GooglePubSubBus {
+    constructor() {
+        throw new Error("busBackend=google-pubsub is not available in this build. "
+            + "Add a Google Pub/Sub MessageBus adapter implementation before enabling it.");
+    }
+    async publish(_event) {
+        throw new Error("GooglePubSubBus.publish is not implemented");
+    }
+    subscribe(_eventType, _handler) {
+        throw new Error("GooglePubSubBus.subscribe is not implemented");
+    }
+    unsubscribe(_eventType, _handler) {
+        throw new Error("GooglePubSubBus.unsubscribe is not implemented");
+    }
+    async waitFor(_eventType, _predicate, _timeoutMs) {
+        throw new Error("GooglePubSubBus.waitFor is not implemented");
+    }
+    async close() {
+        throw new Error("GooglePubSubBus.close is not implemented");
+    }
+}
+//# sourceMappingURL=google-pubsub.js.map

package/dist/bus/adapters/google-pubsub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-pubsub.js","sourceRoot":"","sources":["../../../src/bus/adapters/google-pubsub.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,eAAe;IAC1B;QACE,MAAM,IAAI,KAAK,CACb,2DAA2D;cACzD,4EAA4E,CAC/E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAqB,MAAS;QACzC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,SAAS,CACP,UAAqB,EACrB,QAA4C;QAE5C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,WAAW,CAAC,UAAkB,EAAE,QAAkB;QAChD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,OAAO,CACX,UAAqB,EACrB,UAAkC,EAClC,UAAmB;QAEnB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;CACF"}

package/dist/bus/adapters/in-process.d.ts

@@ -0,0 +1,12 @@
+import type { AnyEvent, MessageBus } from "../types.js";
+export declare class InProcessBus implements MessageBus {
+    private readonly emitter;
+    private readonly handlerMap;
+    constructor();
+    publish<E extends AnyEvent>(event: E): Promise<void>;
+    subscribe<E extends AnyEvent>(eventType: E["type"], handler: (event: E) => Promise<void> | void): void;
+    unsubscribe(eventType: string, handler: Function): void;
+    waitFor<E extends AnyEvent>(eventType: E["type"], predicate?: (event: E) => boolean, timeoutMs?: number): Promise<E>;
+    close(): Promise<void>;
+    private emitHandlerError;
+}