lean-claudient-core 0.1.0

package/dist/security/piiRedaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"piiRedaction.js","sourceRoot":"","sources":["../../src/security/piiRedaction.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,QAAQ,GAAG;IACf,KAAK,EAAE,iDAAiD;IACxD,KAAK,EAAE,sCAAsC;IAC7C,GAAG,EAAE,gCAAgC;IACrC,WAAW,EAAE,8BAA8B;IAC3C,IAAI,EAAE,gGAAgG;IACtG,IAAI,EAAE,gEAAgE;IACtE,UAAU,EAAE,4DAA4D;IACxE,OAAO,EAAE,sDAAsD;CAChE,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;QAC7C,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,GAAG,KAAK,QAAQ,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;QAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO,MAAM,QAAQ,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAuB;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QAC3C,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,2BAA2B,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnD,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAE5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAY;IACxC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAE5D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAErD,0BAA0B;IAC1B,MAAM,SAAS,GAAG;QAChB,OAAO;QACP,OAAO;QACP,KAAK;QACL,YAAY;QACZ,QAAQ;QACR,UAAU;QACV,WAAW;QACX,WAAW;QACX,UAAU;KACX,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,QAAQ,KAAK,EAAE,CAAC;gBACd,KAAK,OAAO;oBACV,QAAQ,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC/C,MAAM;gBACR,KAAK,OAAO;oBACV,QAAQ,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC/C,MAAM;gBACR,KAAK,KAAK;oBACR,QAAQ,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC7C,MAAM;gBACR,KAAK,YAAY;oBACf,QAAQ,CAAC,KAAK,CAAC,GAAG,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;oBACpD,MAAM;gBACR,KAAK,QAAQ;oBACX,QAAQ,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;oBAChD,MAAM;gBACR,KAAK,WAAW;oBACd,QAAQ,CAAC,KAAK,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;oBACnD,MAAM;gBACR,KAAK,WAAW;oBACd,QAAQ,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC9C,MAAM;gBACR,KAAK,UAAU;oBACb,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;oBACxB,MAAM;YACV,CAAC;QACH,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtC,QAAQ,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YACvE,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,OAAe,EACf,OAAa;IAOb,OAAO;QACL,KAAK;QACL,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;KACtD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEpD,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QACvB,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CACzB,CAAC;AACJ,CAAC"}

package/dist/security/secretsDetection.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Secrets Detection Module
+ * Scans for hardcoded credentials, API keys, tokens, and other sensitive data
+ */
+export interface SecretFinding {
+    type: string;
+    severity: 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW';
+    pattern: string;
+    location?: string;
+    context?: string;
+    entropy?: number;
+    suggestion: string;
+}
+/**
+ * Calculate Shannon entropy of a string
+ * Values > 4.0 indicate potential secrets
+ */
+export declare function calculateEntropy(text: string): number;
+/**
+ * Detect API keys in text
+ */
+export declare function detectAPIKey(text: string): SecretFinding[];
+/**
+ * Detect private keys in text
+ */
+export declare function detectPrivateKey(text: string): SecretFinding[];
+/**
+ * Detect plaintext passwords in text
+ */
+export declare function detectPassword(text: string): SecretFinding[];
+/**
+ * Detect JWT tokens in text
+ */
+export declare function detectJWT(text: string): SecretFinding[];
+/**
+ * Detect high-entropy strings that may be secrets
+ */
+export declare function detectHighEntropyStrings(text: string, minLength?: number): SecretFinding[];
+/**
+ * Main entry point: detect all secrets in text
+ */
+export declare function detectSecrets(text: string): SecretFinding[];
+/**
+ * Scan file content for secrets
+ */
+export declare function scanFileForSecrets(filePath: string, content: string): Promise<SecretFinding[]>;
+//# sourceMappingURL=secretsDetection.d.ts.map

package/dist/security/secretsDetection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretsDetection.d.ts","sourceRoot":"","sources":["../../src/security/secretsDetection.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAoBD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAerD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CAoF1D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CAkC9D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CA0B5D;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CA8BvD;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAK,GAAG,aAAa,EAAE,CAuBtF;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CAwB3D;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,aAAa,EAAE,CAAC,CAM1B"}

package/dist/security/secretsDetection.js

@@ -0,0 +1,272 @@
+/**
+ * Secrets Detection Module
+ * Scans for hardcoded credentials, API keys, tokens, and other sensitive data
+ */
+const PATTERNS = {
+    AWS_KEY: /AKIA[0-9A-Z]{16}/g,
+    GITHUB_PAT: /ghp_[A-Za-z0-9_]{36}/g,
+    ANTHROPIC_KEY: /sk-ant-[A-Za-z0-9_-]{48}/g,
+    OPENAI_KEY: /sk-[A-Za-z0-9]{20,}/g,
+    PRIVATE_KEY_RSA: /-----BEGIN RSA PRIVATE KEY-----[\s\S]*?-----END RSA PRIVATE KEY-----/g,
+    PRIVATE_KEY_EC: /-----BEGIN EC PRIVATE KEY-----[\s\S]*?-----END EC PRIVATE KEY-----/g,
+    PRIVATE_KEY_ED25519: /-----BEGIN PRIVATE KEY-----[\s\S]*?-----END PRIVATE KEY-----/g,
+    JWT_TOKEN: /eyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g,
+    PASSWORD_ASSIGNMENT: /(?:password|passwd|pwd)\s*[:=]\s*['"](.*?)['"]/gi,
+    DATABASE_URL: /(?:mongodb|mysql|postgresql|sqlite):[/\w:@.?#&=+-]*/gi,
+    SLACK_TOKEN: /xox[baprs]-[0-9a-zA-Z]{10,48}/g,
+    SLACK_WEBHOOK: /https:\/\/hooks\.slack\.com\/services\/[A-Z0-9]+\/[A-Z0-9]+\/[A-Za-z0-9]+/g,
+    STRIPE_KEY: /sk_(?:live|test)_[0-9a-zA-Z]{20,}/g,
+    TWILIO_AUTH: /AC[a-zA-Z0-9]{32}/g,
+    SENDGRID_KEY: /SG\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9_-]{43}/g,
+};
+/**
+ * Calculate Shannon entropy of a string
+ * Values > 4.0 indicate potential secrets
+ */
+export function calculateEntropy(text) {
+    if (!text || text.length === 0)
+        return 0;
+    const freq = {};
+    for (const char of text) {
+        freq[char] = (freq[char] || 0) + 1;
+    }
+    let entropy = 0;
+    for (const count of Object.values(freq)) {
+        const p = count / text.length;
+        entropy -= p * Math.log2(p);
+    }
+    return entropy;
+}
+/**
+ * Detect API keys in text
+ */
+export function detectAPIKey(text) {
+    const findings = [];
+    // AWS
+    for (const match of text.matchAll(PATTERNS.AWS_KEY)) {
+        findings.push({
+            type: 'AWS_ACCESS_KEY',
+            severity: 'CRITICAL',
+            pattern: match[0],
+            suggestion: 'Use AWS IAM roles or temporary credentials instead',
+        });
+    }
+    // GitHub
+    for (const match of text.matchAll(PATTERNS.GITHUB_PAT)) {
+        findings.push({
+            type: 'GITHUB_PAT',
+            severity: 'CRITICAL',
+            pattern: match[0],
+            suggestion: 'Use GitHub App or OAuth token with minimal scopes',
+        });
+    }
+    // Anthropic
+    for (const match of text.matchAll(PATTERNS.ANTHROPIC_KEY)) {
+        findings.push({
+            type: 'ANTHROPIC_API_KEY',
+            severity: 'CRITICAL',
+            pattern: match[0],
+            suggestion: 'Set ANTHROPIC_API_KEY as environment variable',
+        });
+    }
+    // OpenAI
+    for (const match of text.matchAll(PATTERNS.OPENAI_KEY)) {
+        findings.push({
+            type: 'OPENAI_API_KEY',
+            severity: 'CRITICAL',
+            pattern: match[0],
+            suggestion: 'Set OPENAI_API_KEY as environment variable',
+        });
+    }
+    // Slack
+    for (const match of text.matchAll(PATTERNS.SLACK_TOKEN)) {
+        findings.push({
+            type: 'SLACK_TOKEN',
+            severity: 'CRITICAL',
+            pattern: match[0],
+            suggestion: 'Use Slack token rotation and store in secrets manager',
+        });
+    }
+    // Stripe
+    for (const match of text.matchAll(PATTERNS.STRIPE_KEY)) {
+        findings.push({
+            type: 'STRIPE_API_KEY',
+            severity: 'CRITICAL',
+            pattern: match[0],
+            suggestion: 'Use environment variables for Stripe keys',
+        });
+    }
+    // Twilio
+    for (const match of text.matchAll(PATTERNS.TWILIO_AUTH)) {
+        findings.push({
+            type: 'TWILIO_AUTH_TOKEN',
+            severity: 'CRITICAL',
+            pattern: match[0],
+            suggestion: 'Store Twilio credentials in environment variables',
+        });
+    }
+    // SendGrid
+    for (const match of text.matchAll(PATTERNS.SENDGRID_KEY)) {
+        findings.push({
+            type: 'SENDGRID_API_KEY',
+            severity: 'CRITICAL',
+            pattern: match[0],
+            suggestion: 'Use environment variable for SendGrid API key',
+        });
+    }
+    return findings;
+}
+/**
+ * Detect private keys in text
+ */
+export function detectPrivateKey(text) {
+    const findings = [];
+    // RSA
+    for (const match of text.matchAll(PATTERNS.PRIVATE_KEY_RSA)) {
+        findings.push({
+            type: 'RSA_PRIVATE_KEY',
+            severity: 'CRITICAL',
+            pattern: match[0].substring(0, 50) + '...',
+            suggestion: 'Move private key to separate .pem file, add to .gitignore',
+        });
+    }
+    // EC
+    for (const match of text.matchAll(PATTERNS.PRIVATE_KEY_EC)) {
+        findings.push({
+            type: 'EC_PRIVATE_KEY',
+            severity: 'CRITICAL',
+            pattern: match[0].substring(0, 50) + '...',
+            suggestion: 'Move private key to separate .pem file, add to .gitignore',
+        });
+    }
+    // Ed25519
+    for (const match of text.matchAll(PATTERNS.PRIVATE_KEY_ED25519)) {
+        findings.push({
+            type: 'ED25519_PRIVATE_KEY',
+            severity: 'CRITICAL',
+            pattern: match[0].substring(0, 50) + '...',
+            suggestion: 'Move private key to separate .pem file, add to .gitignore',
+        });
+    }
+    return findings;
+}
+/**
+ * Detect plaintext passwords in text
+ */
+export function detectPassword(text) {
+    const findings = [];
+    for (const match of text.matchAll(PATTERNS.PASSWORD_ASSIGNMENT)) {
+        const password = match[1];
+        if (password && password.length > 0) {
+            findings.push({
+                type: 'PLAINTEXT_PASSWORD',
+                severity: 'CRITICAL',
+                pattern: password.substring(0, 20) + '...',
+                suggestion: 'Use bcrypt or similar for password hashing, store in environment variables',
+            });
+        }
+    }
+    // Database URLs
+    for (const match of text.matchAll(PATTERNS.DATABASE_URL)) {
+        findings.push({
+            type: 'DATABASE_URL',
+            severity: 'HIGH',
+            pattern: match[0].substring(0, 40) + '...',
+            suggestion: 'Store database URLs in environment variables',
+        });
+    }
+    return findings;
+}
+/**
+ * Detect JWT tokens in text
+ */
+export function detectJWT(text) {
+    const findings = [];
+    for (const match of text.matchAll(PATTERNS.JWT_TOKEN)) {
+        const token = match[0];
+        try {
+            const parts = token.split('.');
+            if (parts.length === 3) {
+                const payload = JSON.parse(Buffer.from(parts[1], 'base64').toString('utf-8'));
+                findings.push({
+                    type: 'JWT_TOKEN',
+                    severity: 'HIGH',
+                    pattern: token.substring(0, 30) + '...',
+                    context: JSON.stringify(payload).substring(0, 100),
+                    suggestion: 'Use short-lived tokens and refresh tokens, never hardcode',
+                });
+            }
+        }
+        catch {
+            findings.push({
+                type: 'JWT_TOKEN',
+                severity: 'HIGH',
+                pattern: token.substring(0, 30) + '...',
+                suggestion: 'Never hardcode JWT tokens, use session/environment',
+            });
+        }
+    }
+    return findings;
+}
+/**
+ * Detect high-entropy strings that may be secrets
+ */
+export function detectHighEntropyStrings(text, minLength = 20) {
+    const findings = [];
+    const lines = text.split('\n');
+    for (const line of lines) {
+        const tokens = line.split(/[\s=:"',;]/);
+        for (const token of tokens) {
+            if (token.length >= minLength && /^[a-zA-Z0-9_-]+$/.test(token)) {
+                const entropy = calculateEntropy(token);
+                if (entropy > 4.0) {
+                    findings.push({
+                        type: 'HIGH_ENTROPY_STRING',
+                        severity: 'MEDIUM',
+                        pattern: token.substring(0, 30) + '...',
+                        entropy,
+                        suggestion: 'Review this string - high entropy suggests it may be a secret or token',
+                    });
+                }
+            }
+        }
+    }
+    return findings;
+}
+/**
+ * Main entry point: detect all secrets in text
+ */
+export function detectSecrets(text) {
+    if (!text || typeof text !== 'string') {
+        return [];
+    }
+    const findings = [
+        ...detectPrivateKey(text),
+        ...detectAPIKey(text),
+        ...detectPassword(text),
+        ...detectJWT(text),
+        ...detectHighEntropyStrings(text),
+    ];
+    // Deduplicate by pattern
+    const seen = new Set();
+    const unique = findings.filter((f) => {
+        if (seen.has(f.pattern))
+            return false;
+        seen.add(f.pattern);
+        return true;
+    });
+    // Sort by severity
+    const severityOrder = { CRITICAL: 0, HIGH: 1, MEDIUM: 2, LOW: 3 };
+    return unique.sort((a, b) => severityOrder[a.severity] - severityOrder[b.severity]);
+}
+/**
+ * Scan file content for secrets
+ */
+export async function scanFileForSecrets(filePath, content) {
+    const findings = detectSecrets(content);
+    return findings.map((f) => ({
+        ...f,
+        location: filePath,
+    }));
+}
+//# sourceMappingURL=secretsDetection.js.map

package/dist/security/secretsDetection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretsDetection.js","sourceRoot":"","sources":["../../src/security/secretsDetection.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH,MAAM,QAAQ,GAAG;IACf,OAAO,EAAE,mBAAmB;IAC5B,UAAU,EAAE,uBAAuB;IACnC,aAAa,EAAE,2BAA2B;IAC1C,UAAU,EAAE,sBAAsB;IAClC,eAAe,EAAE,uEAAuE;IACxF,cAAc,EAAE,qEAAqE;IACrF,mBAAmB,EAAE,+DAA+D;IACpF,SAAS,EAAE,uDAAuD;IAClE,mBAAmB,EAAE,kDAAkD;IACvE,YAAY,EAAE,uDAAuD;IACrE,WAAW,EAAE,gCAAgC;IAC7C,aAAa,EAAE,4EAA4E;IAC3F,UAAU,EAAE,oCAAoC;IAChD,WAAW,EAAE,oBAAoB;IACjC,YAAY,EAAE,2CAA2C;CAC1D,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAEzC,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC9B,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,MAAM;IACN,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YACjB,UAAU,EAAE,oDAAoD;SACjE,CAAC,CAAC;IACL,CAAC;IAED,SAAS;IACT,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YACjB,UAAU,EAAE,mDAAmD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,YAAY;IACZ,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YACjB,UAAU,EAAE,+CAA+C;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,SAAS;IACT,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YACjB,UAAU,EAAE,4CAA4C;SACzD,CAAC,CAAC;IACL,CAAC;IAED,QAAQ;IACR,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YACjB,UAAU,EAAE,uDAAuD;SACpE,CAAC,CAAC;IACL,CAAC;IAED,SAAS;IACT,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YACjB,UAAU,EAAE,2CAA2C;SACxD,CAAC,CAAC;IACL,CAAC;IAED,SAAS;IACT,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YACjB,UAAU,EAAE,mDAAmD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,WAAW;IACX,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YACjB,UAAU,EAAE,+CAA+C;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,MAAM;IACN,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;YAC1C,UAAU,EAAE,2DAA2D;SACxE,CAAC,CAAC;IACL,CAAC;IAED,KAAK;IACL,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;YAC1C,UAAU,EAAE,2DAA2D;SACxE,CAAC,CAAC;IACL,CAAC;IAED,UAAU;IACV,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;YAC1C,UAAU,EAAE,2DAA2D;SACxE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,oBAAoB;gBAC1B,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;gBAC1C,UAAU,EAAE,4EAA4E;aACzF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;YAC1C,UAAU,EAAE,8CAA8C;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAClD,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;oBACvC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;oBAClD,UAAU,EAAE,2DAA2D;iBACxE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;gBACvC,UAAU,EAAE,oDAAoD;aACjE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,SAAS,GAAG,EAAE;IACnE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACxC,IAAI,OAAO,GAAG,GAAG,EAAE,CAAC;oBAClB,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,qBAAqB;wBAC3B,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;wBACvC,OAAO;wBACP,UAAU,EAAE,wEAAwE;qBACrF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAoB;QAChC,GAAG,gBAAgB,CAAC,IAAI,CAAC;QACzB,GAAG,YAAY,CAAC,IAAI,CAAC;QACrB,GAAG,cAAc,CAAC,IAAI,CAAC;QACvB,GAAG,SAAS,CAAC,IAAI,CAAC;QAClB,GAAG,wBAAwB,CAAC,IAAI,CAAC;KAClC,CAAC;IAEF,yBAAyB;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACnC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,mBAAmB;IACnB,MAAM,aAAa,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAClE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,OAAe;IAEf,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,GAAG,CAAC;QACJ,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/subagents/builder.d.ts

@@ -0,0 +1,33 @@
+export interface BuilderResult {
+    success: boolean;
+    filePath: string;
+    linesChanged: number;
+    testsPassed: boolean;
+    tokensUsed: number;
+    duration: number;
+    errors?: string[];
+}
+interface TestResult {
+    passed: boolean;
+    output: string;
+}
+export declare class BuilderSubagent {
+    private workingDir;
+    private readonly DEFAULT_TIMEOUT;
+    private readonly TOKEN_ESTIMATE_PER_CHAR;
+    constructor(workingDir: string);
+    implementFeature(filePath: string, task: string, timeout?: number): Promise<BuilderResult>;
+    runTests(filePath: string): Promise<TestResult>;
+    private executeImplementation;
+    private injectImplementation;
+    private generateFunctionStub;
+    private generateClassStub;
+    private generateInterfaceStub;
+    private generateGenericStub;
+    private extractName;
+    private countLineModifications;
+    private detectTestCommand;
+    private buildResult;
+}
+export {};
+//# sourceMappingURL=builder.d.ts.map

package/dist/subagents/builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../../src/subagents/builder.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,UAAU,UAAU;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAQ;gBAEpC,UAAU,EAAE,MAAM;IAIxB,gBAAgB,CACpB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,MAA6B,GACrC,OAAO,CAAC,aAAa,CAAC;IAwEnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;YAyBvC,qBAAqB;IAoCnC,OAAO,CAAC,oBAAoB;IAwB5B,OAAO,CAAC,oBAAoB;IAU5B,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,qBAAqB;IAS7B,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,sBAAsB;IAc9B,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,WAAW;CAmBpB"}

package/dist/subagents/builder.js

@@ -0,0 +1,158 @@
+import { execSync } from 'child_process';
+import { readFileSync, writeFileSync, existsSync } from 'fs';
+import { resolve } from 'path';
+export class BuilderSubagent {
+    constructor(workingDir) {
+        this.DEFAULT_TIMEOUT = 30 * 60 * 1000;
+        this.TOKEN_ESTIMATE_PER_CHAR = 0.25;
+        this.workingDir = workingDir;
+    }
+    async implementFeature(filePath, task, timeout = this.DEFAULT_TIMEOUT) {
+        const startTime = Date.now();
+        const fullPath = resolve(this.workingDir, filePath);
+        const errors = [];
+        try {
+            if (!existsSync(fullPath)) {
+                throw new Error(`File not found: ${fullPath}`);
+            }
+            const originalContent = readFileSync(fullPath, 'utf-8');
+            const originalLineCount = originalContent.split('\n').length;
+            const modifiedContent = await this.executeImplementation(originalContent, task, timeout);
+            if (!modifiedContent || modifiedContent === originalContent) {
+                errors.push('Implementation produced no changes');
+                return this.buildResult(false, filePath, 0, false, 0, Date.now() - startTime, errors);
+            }
+            writeFileSync(fullPath, modifiedContent, 'utf-8');
+            const modifiedLineCount = modifiedContent.split('\n').length;
+            const linesChanged = Math.abs(modifiedLineCount - originalLineCount) +
+                this.countLineModifications(originalContent, modifiedContent);
+            const testResult = await this.runTests(filePath);
+            if (!testResult.passed) {
+                writeFileSync(fullPath, originalContent, 'utf-8');
+                errors.push(`Tests failed: ${testResult.output}`);
+            }
+            const tokensUsed = Math.ceil((originalContent.length + modifiedContent.length) *
+                this.TOKEN_ESTIMATE_PER_CHAR);
+            return this.buildResult(testResult.passed, filePath, linesChanged, testResult.passed, tokensUsed, Date.now() - startTime, testResult.passed ? undefined : errors);
+        }
+        catch (error) {
+            errors.push(error.message);
+            return this.buildResult(false, filePath, 0, false, 0, Date.now() - startTime, errors);
+        }
+    }
+    async runTests(filePath) {
+        try {
+            const testCommand = this.detectTestCommand(filePath);
+            if (!testCommand) {
+                return { passed: true, output: 'No tests detected' };
+            }
+            const output = execSync(testCommand, {
+                cwd: this.workingDir,
+                encoding: 'utf-8',
+                stdio: 'pipe',
+            });
+            const passed = !output.toLowerCase().includes('fail') &&
+                !output.toLowerCase().includes('error');
+            return { passed, output };
+        }
+        catch (error) {
+            const output = error?.stdout || error.message;
+            return { passed: false, output };
+        }
+    }
+    async executeImplementation(originalContent, task, timeout) {
+        const startTime = Date.now();
+        const isTypeScript = originalContent.includes('interface') ||
+            originalContent.includes('type ') ||
+            originalContent.includes(': string') ||
+            originalContent.includes(': number');
+        let modified = originalContent;
+        if (task.includes('add') || task.includes('implement')) {
+            const lastClosingBrace = originalContent.lastIndexOf('}');
+            if (lastClosingBrace > 0) {
+                const beforeLastBrace = originalContent.substring(0, lastClosingBrace);
+                const afterLastBrace = originalContent.substring(lastClosingBrace);
+                modified = this.injectImplementation(beforeLastBrace, task, isTypeScript);
+                modified += afterLastBrace;
+            }
+        }
+        if (Date.now() - startTime > timeout) {
+            throw new Error(`Implementation timeout exceeded: ${timeout}ms`);
+        }
+        return modified;
+    }
+    injectImplementation(content, task, isTypeScript) {
+        const indent = '  ';
+        let implementation = '';
+        if (task.toLowerCase().includes('function') ||
+            task.toLowerCase().includes('method')) {
+            implementation = this.generateFunctionStub(task, isTypeScript, indent);
+        }
+        else if (task.toLowerCase().includes('class')) {
+            implementation = this.generateClassStub(task, isTypeScript, indent);
+        }
+        else if (task.toLowerCase().includes('interface')) {
+            implementation = this.generateInterfaceStub(task, isTypeScript, indent);
+        }
+        else {
+            implementation = this.generateGenericStub(task, indent);
+        }
+        return content + '\n' + implementation;
+    }
+    generateFunctionStub(task, isTypeScript, indent) {
+        const fnName = this.extractName(task, 'function');
+        const returnType = isTypeScript ? ': unknown' : '';
+        return `${indent}${fnName}()${returnType} {\n${indent}${indent}// Implementation: ${task}\n${indent}}`;
+    }
+    generateClassStub(task, isTypeScript, indent) {
+        const className = this.extractName(task, 'class');
+        return `${indent}class ${className} {\n${indent}${indent}constructor() {}\n${indent}}`;
+    }
+    generateInterfaceStub(task, isTypeScript, indent) {
+        const interfaceName = this.extractName(task, 'interface');
+        return `${indent}interface ${interfaceName} {\n${indent}${indent}// Fields go here\n${indent}}`;
+    }
+    generateGenericStub(task, indent) {
+        return `${indent}// TODO: ${task}`;
+    }
+    extractName(task, keyword) {
+        const match = task.match(new RegExp(`${keyword}\\s+([a-zA-Z0-9_]+)`, 'i'));
+        if (match && match[1]) {
+            return match[1];
+        }
+        return `Generated${keyword.charAt(0).toUpperCase()}${keyword.slice(1)}`;
+    }
+    countLineModifications(original, modified) {
+        const origLines = original.split('\n');
+        const modLines = modified.split('\n');
+        let diffCount = 0;
+        for (let i = 0; i < Math.min(origLines.length, modLines.length); i++) {
+            if (origLines[i] !== modLines[i]) {
+                diffCount++;
+            }
+        }
+        return diffCount;
+    }
+    detectTestCommand(filePath) {
+        const fileName = filePath.split('/').pop() || '';
+        if (fileName.includes('.test.') || fileName.includes('.spec.')) {
+            return 'npm test';
+        }
+        if (existsSync(resolve(this.workingDir, 'package.json'))) {
+            return 'npm test';
+        }
+        return null;
+    }
+    buildResult(success, filePath, linesChanged, testsPassed, tokensUsed, duration, errors) {
+        return {
+            success,
+            filePath,
+            linesChanged,
+            testsPassed,
+            tokensUsed,
+            duration,
+            errors,
+        };
+    }
+}
+//# sourceMappingURL=builder.js.map

package/dist/subagents/builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/subagents/builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAiB/B,MAAM,OAAO,eAAe;IAK1B,YAAY,UAAkB;QAHb,oBAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACjC,4BAAuB,GAAG,IAAI,CAAC;QAG9C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,QAAgB,EAChB,IAAY,EACZ,UAAkB,IAAI,CAAC,eAAe;QAEtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;YACjD,CAAC;YAED,MAAM,eAAe,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,iBAAiB,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAE7D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,qBAAqB,CACtD,eAAe,EACf,IAAI,EACJ,OAAO,CACR,CAAC;YAEF,IAAI,CAAC,eAAe,IAAI,eAAe,KAAK,eAAe,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;gBAClD,OAAO,IAAI,CAAC,WAAW,CACrB,KAAK,EACL,QAAQ,EACR,CAAC,EACD,KAAK,EACL,CAAC,EACD,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EACtB,MAAM,CACP,CAAC;YACJ,CAAC;YAED,aAAa,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,iBAAiB,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;gBAClE,IAAI,CAAC,sBAAsB,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;YAEhE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEjD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvB,aAAa,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAC1B,CAAC,eAAe,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC;gBAC/C,IAAI,CAAC,uBAAuB,CAC/B,CAAC;YAEF,OAAO,IAAI,CAAC,WAAW,CACrB,UAAU,CAAC,MAAM,EACjB,QAAQ,EACR,YAAY,EACZ,UAAU,CAAC,MAAM,EACjB,UAAU,EACV,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EACtB,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CACvC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC,WAAW,CACrB,KAAK,EACL,QAAQ,EACR,CAAC,EACD,KAAK,EACL,CAAC,EACD,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EACtB,MAAM,CACP,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAErD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YACvD,CAAC;YAED,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE;gBACnC,GAAG,EAAE,IAAI,CAAC,UAAU;gBACpB,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;YAEH,MAAM,MAAM,GACV,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACtC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAI,KAAa,EAAE,MAAM,IAAK,KAAe,CAAC,OAAO,CAAC;YAClE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,eAAuB,EACvB,IAAY,EACZ,OAAe;QAEf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC;YACxD,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;YACjC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC;YACpC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEvC,IAAI,QAAQ,GAAG,eAAe,CAAC;QAE/B,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,MAAM,gBAAgB,GAAG,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC1D,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,eAAe,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;gBACvE,MAAM,cAAc,GAAG,eAAe,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;gBAEnE,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAClC,eAAe,EACf,IAAI,EACJ,YAAY,CACb,CAAC;gBACF,QAAQ,IAAI,cAAc,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,IAAI,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,oBAAoB,CAC1B,OAAe,EACf,IAAY,EACZ,YAAqB;QAErB,MAAM,MAAM,GAAG,IAAI,CAAC;QACpB,IAAI,cAAc,GAAG,EAAE,CAAC;QAExB,IACE,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;YACvC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACrC,CAAC;YACD,cAAc,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACzE,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACpD,cAAc,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,OAAO,GAAG,IAAI,GAAG,cAAc,CAAC;IACzC,CAAC;IAEO,oBAAoB,CAC1B,IAAY,EACZ,YAAqB,EACrB,MAAc;QAEd,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO,GAAG,MAAM,GAAG,MAAM,KAAK,UAAU,OAAO,MAAM,GAAG,MAAM,sBAAsB,IAAI,KAAK,MAAM,GAAG,CAAC;IACzG,CAAC;IAEO,iBAAiB,CACvB,IAAY,EACZ,YAAqB,EACrB,MAAc;QAEd,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,GAAG,MAAM,SAAS,SAAS,OAAO,MAAM,GAAG,MAAM,qBAAqB,MAAM,GAAG,CAAC;IACzF,CAAC;IAEO,qBAAqB,CAC3B,IAAY,EACZ,YAAqB,EACrB,MAAc;QAEd,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC1D,OAAO,GAAG,MAAM,aAAa,aAAa,OAAO,MAAM,GAAG,MAAM,sBAAsB,MAAM,GAAG,CAAC;IAClG,CAAC;IAEO,mBAAmB,CAAC,IAAY,EAAE,MAAc;QACtD,OAAO,GAAG,MAAM,YAAY,IAAI,EAAE,CAAC;IACrC,CAAC;IAEO,WAAW,CAAC,IAAY,EAAE,OAAe;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,OAAO,qBAAqB,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3E,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,YAAY,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IAEO,sBAAsB,CAAC,QAAgB,EAAE,QAAgB;QAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACrE,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,SAAS,EAAE,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,iBAAiB,CAAC,QAAgB;QACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAEjD,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YACzD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,WAAW,CACjB,OAAgB,EAChB,QAAgB,EAChB,YAAoB,EACpB,WAAoB,EACpB,UAAkB,EAClB,QAAgB,EAChB,MAAiB;QAEjB,OAAO;YACL,OAAO;YACP,QAAQ;YACR,YAAY;YACZ,WAAW;YACX,UAAU;YACV,QAAQ;YACR,MAAM;SACP,CAAC;IACJ,CAAC;CACF"}

package/dist/subagents/investigator.d.ts

@@ -0,0 +1,31 @@
+export interface GrepResult {
+    matches: Array<{
+        file: string;
+        line: number;
+        content: string;
+    }>;
+    truncated: boolean;
+    totalMatches: number;
+}
+export interface InvestigatorResult {
+    fileLinesMapping: Array<{
+        file: string;
+        lines: number[];
+        context: string;
+    }>;
+    dependencies: string[];
+    tokensUsed: number;
+}
+export declare class InvestigatorSubagent {
+    private workingDir;
+    private tokenEstimate;
+    constructor(workingDir: string);
+    mapCodebase(query: string): Promise<InvestigatorResult>;
+    findDependencies(filePath: string): Promise<string[]>;
+    grepWithBudget(pattern: string, maxLines?: number): Promise<GrepResult>;
+    private findTypeScriptFiles;
+    private findMatchingLines;
+    private extractContext;
+    private extractDependencies;
+}
+//# sourceMappingURL=investigator.d.ts.map

package/dist/subagents/investigator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigator.d.ts","sourceRoot":"","sources":["../../src/subagents/investigator.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,KAAK,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAQD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAK;gBAEd,UAAU,EAAE,MAAM;IAIxB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAwCvD,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAUrD,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAY,GACrB,OAAO,CAAC,UAAU,CAAC;IA2CtB,OAAO,CAAC,mBAAmB;IA+B3B,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,mBAAmB;CAe5B"}