lean-claudient-core 0.1.0

package/dist/subagents/investigator.js

@@ -0,0 +1,166 @@
+import { readFileSync, readdirSync } from 'fs';
+import { join, relative, extname } from 'path';
+export class InvestigatorSubagent {
+    constructor(workingDir) {
+        this.tokenEstimate = 0;
+        this.workingDir = workingDir;
+    }
+    async mapCodebase(query) {
+        this.tokenEstimate = 0;
+        const fileMappings = [];
+        const dependencies = new Set();
+        const tsFiles = this.findTypeScriptFiles(this.workingDir);
+        this.tokenEstimate += tsFiles.length * 50;
+        for (const file of tsFiles) {
+            try {
+                const content = readFileSync(file, 'utf-8');
+                const relPath = relative(this.workingDir, file);
+                const lines = content.split('\n');
+                const matchingLines = this.findMatchingLines(lines, query);
+                this.tokenEstimate += lines.length * 0.25;
+                if (matchingLines.length > 0) {
+                    const context = this.extractContext(lines, matchingLines[0]);
+                    fileMappings.push({
+                        file: relPath,
+                        lines: matchingLines,
+                        context,
+                    });
+                    const fileDeps = this.extractDependencies(content);
+                    fileDeps.forEach((dep) => dependencies.add(dep));
+                }
+            }
+            catch {
+                continue;
+            }
+        }
+        return {
+            fileLinesMapping: fileMappings,
+            dependencies: Array.from(dependencies),
+            tokensUsed: Math.ceil(this.tokenEstimate),
+        };
+    }
+    async findDependencies(filePath) {
+        try {
+            const content = readFileSync(filePath, 'utf-8');
+            this.tokenEstimate += content.split('\n').length * 0.25;
+            return this.extractDependencies(content);
+        }
+        catch {
+            return [];
+        }
+    }
+    async grepWithBudget(pattern, maxLines = 120) {
+        const matches = [];
+        let totalMatches = 0;
+        const regex = new RegExp(pattern, 'gi');
+        const tsFiles = this.findTypeScriptFiles(this.workingDir);
+        for (const file of tsFiles) {
+            if (matches.length >= maxLines) {
+                break;
+            }
+            try {
+                const content = readFileSync(file, 'utf-8');
+                const relPath = relative(this.workingDir, file);
+                const lines = content.split('\n');
+                lines.forEach((line, index) => {
+                    if (regex.test(line)) {
+                        totalMatches += 1;
+                        if (matches.length < maxLines) {
+                            matches.push({
+                                file: relPath,
+                                line: index + 1,
+                                content: line.trimStart(),
+                            });
+                        }
+                    }
+                });
+                this.tokenEstimate += lines.length * 0.1;
+            }
+            catch {
+                continue;
+            }
+        }
+        return {
+            matches,
+            truncated: matches.length >= maxLines,
+            totalMatches,
+        };
+    }
+    findTypeScriptFiles(dir) {
+        const files = [];
+        const ignore = new Set(['node_modules', '.git', 'dist', '.vscode']);
+        const walk = (current) => {
+            try {
+                const entries = readdirSync(current, { withFileTypes: true });
+                for (const entry of entries) {
+                    if (ignore.has(entry.name))
+                        continue;
+                    const path = join(current, entry.name);
+                    if (entry.isDirectory()) {
+                        walk(path);
+                    }
+                    else if (extname(entry.name) === '.ts' &&
+                        !entry.name.endsWith('.test.ts')) {
+                        files.push(path);
+                    }
+                }
+            }
+            catch {
+                return;
+            }
+        };
+        walk(dir);
+        return files;
+    }
+    findMatchingLines(lines, query) {
+        const matching = [];
+        const regex = new RegExp(query, 'i');
+        lines.forEach((line, index) => {
+            if (regex.test(line) && matching.length < 5) {
+                matching.push(index);
+            }
+        });
+        return matching;
+    }
+    extractContext(lines, lineIndex) {
+        const start = Math.max(0, lineIndex - 2);
+        const end = Math.min(lines.length, lineIndex + 3);
+        return lines.slice(start, end).join('\n');
+    }
+    extractDependencies(content) {
+        const deps = new Set();
+        const importRegex = /(?:import|from)\s+(?:'|")([^'"]+)(?:'|")/g;
+        let match;
+        while ((match = importRegex.exec(content)) !== null) {
+            const dep = match[1];
+            if (!dep.startsWith('.')) {
+                deps.add(dep.split('/')[0]);
+            }
+        }
+        return Array.from(deps);
+    }
+}
+if (require.main === module) {
+    const workingDir = process.cwd();
+    const agent = new InvestigatorSubagent(workingDir);
+    process.on('message', async (message) => {
+        const msg = message;
+        if (msg.type === 'mapCodebase') {
+            try {
+                const result = await agent.mapCodebase(msg.query);
+                process.send?.({
+                    type: 'result',
+                    payload: result,
+                    tokensUsed: result.tokensUsed,
+                });
+            }
+            catch (error) {
+                process.send?.({
+                    type: 'error',
+                    payload: error.message,
+                });
+            }
+        }
+    });
+}
+//# sourceMappingURL=investigator.js.map

package/dist/subagents/investigator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigator.js","sourceRoot":"","sources":["../../src/subagents/investigator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAY,MAAM,IAAI,CAAC;AACzD,OAAO,EAAW,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AA4BxD,MAAM,OAAO,oBAAoB;IAI/B,YAAY,UAAkB;QAFtB,kBAAa,GAAG,CAAC,CAAC;QAGxB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvB,MAAM,YAAY,GAAkB,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC;QAE1C,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAElC,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC3D,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;gBAE1C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC7D,YAAY,CAAC,IAAI,CAAC;wBAChB,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,aAAa;wBACpB,OAAO;qBACR,CAAC,CAAC;oBAEH,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;oBACnD,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QAED,OAAO;YACL,gBAAgB,EAAE,YAAY;YAC9B,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;YACtC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC;YACxD,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,OAAe,EACf,WAAmB,GAAG;QAEtB,MAAM,OAAO,GAA2D,EAAE,CAAC;QAC3E,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAExC,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE1D,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM;YACR,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAElC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;oBAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrB,YAAY,IAAI,CAAC,CAAC;wBAClB,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;4BAC9B,OAAO,CAAC,IAAI,CAAC;gCACX,IAAI,EAAE,OAAO;gCACb,IAAI,EAAE,KAAK,GAAG,CAAC;gCACf,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE;6BAC1B,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO;YACP,SAAS,EAAE,OAAO,CAAC,MAAM,IAAI,QAAQ;YACrC,YAAY;SACb,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,GAAW;QACrC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE;YAC/B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;gBAE9D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAErC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;oBAEvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;wBACxB,IAAI,CAAC,IAAI,CAAC,CAAC;oBACb,CAAC;yBAAM,IACL,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK;wBAC7B,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAChC,CAAC;wBACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnB,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,iBAAiB,CAAC,KAAe,EAAE,KAAa;QACtD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAErC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,cAAc,CAAC,KAAe,EAAE,SAAiB;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEO,mBAAmB,CAAC,OAAe;QACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,WAAW,GACf,2CAA2C,CAAC;QAE9C,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAEnD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAgB,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAG,OAAkC,CAAC;QAE/C,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;gBAC5D,OAAO,CAAC,IAAI,EAAE,CAAC;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,MAAM;oBACf,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,EAAE,CAAC;oBACb,IAAI,EAAE,OAAO;oBACb,OAAO,EAAG,KAAe,CAAC,OAAO;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/subagents/orchestrator.d.ts

@@ -0,0 +1,48 @@
+export interface SubagentMetrics {
+    investigatorCalls: number;
+    investigatorTokens: number;
+    builderCalls: number;
+    builderTokens: number;
+    reviewerCalls: number;
+    reviewerTokens: number;
+    totalTokens: number;
+}
+export interface InvestigatorResult {
+    fileLinesMapping: Array<{
+        file: string;
+        lines: number[];
+        context: string;
+    }>;
+    dependencies: string[];
+    tokensUsed: number;
+}
+export interface BuilderResult {
+    success: boolean;
+    filesEdited: string[];
+    testsPassed: boolean;
+    tokensUsed: number;
+    duration: number;
+}
+export interface ReviewerResult {
+    findings: Array<{
+        severity: 'critical' | 'high' | 'medium' | 'low';
+        file: string;
+        line: number;
+        issue: string;
+    }>;
+    tokensUsed: number;
+}
+export declare class SubagentOrchestrator {
+    private workingDir;
+    private metrics;
+    private workers;
+    private workerCounter;
+    constructor(workingDir: string);
+    spawnInvestigator(query: string): Promise<InvestigatorResult>;
+    spawnBuilder(filePath: string, task: string): Promise<BuilderResult>;
+    spawnReviewer(diffPath: string): Promise<ReviewerResult>;
+    getMetrics(): SubagentMetrics;
+    private forkWorker;
+    cleanup(): void;
+}
+//# sourceMappingURL=orchestrator.d.ts.map

package/dist/subagents/orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../../src/subagents/orchestrator.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,KAAK,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,KAAK,CAAC;QACd,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;QACjD,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAQD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,OAAO,CAQb;IACF,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,aAAa,CAAK;gBAEd,UAAU,EAAE,MAAM;IAIxB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAwC7D,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA8CpE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAwC9D,UAAU,IAAI,eAAe;IAI7B,OAAO,CAAC,UAAU;IAQlB,OAAO,IAAI,IAAI;CAQhB"}

package/dist/subagents/orchestrator.js

@@ -0,0 +1,151 @@
+import { fork } from 'child_process';
+import { resolve } from 'path';
+export class SubagentOrchestrator {
+    constructor(workingDir) {
+        this.metrics = {
+            investigatorCalls: 0,
+            investigatorTokens: 0,
+            builderCalls: 0,
+            builderTokens: 0,
+            reviewerCalls: 0,
+            reviewerTokens: 0,
+            totalTokens: 0,
+        };
+        this.workers = new Map();
+        this.workerCounter = 0;
+        this.workingDir = workingDir;
+    }
+    async spawnInvestigator(query) {
+        return new Promise((resolve, reject) => {
+            const worker = this.forkWorker('investigator.js');
+            const workerId = `investigator_${this.workerCounter++}`;
+            const timeout = setTimeout(() => {
+                worker.kill();
+                this.workers.delete(workerId);
+                reject(new Error('Investigator timeout after 30s'));
+            }, 30000);
+            worker.on('message', (message) => {
+                if (message.type === 'result') {
+                    clearTimeout(timeout);
+                    const result = message.payload;
+                    this.metrics.investigatorCalls += 1;
+                    this.metrics.investigatorTokens += result.tokensUsed;
+                    this.metrics.totalTokens += result.tokensUsed;
+                    worker.kill();
+                    this.workers.delete(workerId);
+                    resolve(result);
+                }
+                else if (message.type === 'error') {
+                    clearTimeout(timeout);
+                    worker.kill();
+                    this.workers.delete(workerId);
+                    reject(new Error(`Investigator error: ${message.payload}`));
+                }
+            });
+            worker.on('error', (error) => {
+                clearTimeout(timeout);
+                this.workers.delete(workerId);
+                reject(error);
+            });
+            worker.send({ type: 'mapCodebase', query, workingDir: this.workingDir });
+            this.workers.set(workerId, worker);
+        });
+    }
+    async spawnBuilder(filePath, task) {
+        return new Promise((resolve, reject) => {
+            const worker = this.forkWorker('builder.js');
+            const workerId = `builder_${this.workerCounter++}`;
+            const startTime = Date.now();
+            const timeout = setTimeout(() => {
+                worker.kill();
+                this.workers.delete(workerId);
+                reject(new Error('Builder timeout after 5m'));
+            }, 300000);
+            worker.on('message', (message) => {
+                if (message.type === 'result') {
+                    clearTimeout(timeout);
+                    const result = message.payload;
+                    this.metrics.builderCalls += 1;
+                    this.metrics.builderTokens += result.tokensUsed;
+                    this.metrics.totalTokens += result.tokensUsed;
+                    worker.kill();
+                    this.workers.delete(workerId);
+                    resolve(result);
+                }
+                else if (message.type === 'error') {
+                    clearTimeout(timeout);
+                    worker.kill();
+                    this.workers.delete(workerId);
+                    reject(new Error(`Builder error: ${message.payload}`));
+                }
+            });
+            worker.on('error', (error) => {
+                clearTimeout(timeout);
+                this.workers.delete(workerId);
+                reject(error);
+            });
+            worker.send({
+                type: 'execute',
+                filePath,
+                task,
+                workingDir: this.workingDir,
+            });
+            this.workers.set(workerId, worker);
+        });
+    }
+    async spawnReviewer(diffPath) {
+        return new Promise((resolve, reject) => {
+            const worker = this.forkWorker('reviewer.js');
+            const workerId = `reviewer_${this.workerCounter++}`;
+            const timeout = setTimeout(() => {
+                worker.kill();
+                this.workers.delete(workerId);
+                reject(new Error('Reviewer timeout after 2m'));
+            }, 120000);
+            worker.on('message', (message) => {
+                if (message.type === 'result') {
+                    clearTimeout(timeout);
+                    const result = message.payload;
+                    this.metrics.reviewerCalls += 1;
+                    this.metrics.reviewerTokens += result.tokensUsed;
+                    this.metrics.totalTokens += result.tokensUsed;
+                    worker.kill();
+                    this.workers.delete(workerId);
+                    resolve(result);
+                }
+                else if (message.type === 'error') {
+                    clearTimeout(timeout);
+                    worker.kill();
+                    this.workers.delete(workerId);
+                    reject(new Error(`Reviewer error: ${message.payload}`));
+                }
+            });
+            worker.on('error', (error) => {
+                clearTimeout(timeout);
+                this.workers.delete(workerId);
+                reject(error);
+            });
+            worker.send({ type: 'review', diffPath, workingDir: this.workingDir });
+            this.workers.set(workerId, worker);
+        });
+    }
+    getMetrics() {
+        return { ...this.metrics };
+    }
+    forkWorker(scriptName) {
+        const scriptPath = resolve(this.workingDir, 'dist', 'subagents', scriptName);
+        return fork(scriptPath, [], {
+            silent: false,
+            cwd: this.workingDir,
+        });
+    }
+    cleanup() {
+        this.workers.forEach((worker) => {
+            if (!worker.killed) {
+                worker.kill();
+            }
+        });
+        this.workers.clear();
+    }
+}
+//# sourceMappingURL=orchestrator.js.map

package/dist/subagents/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../src/subagents/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AA8C/B,MAAM,OAAO,oBAAoB;IAc/B,YAAY,UAAkB;QAZtB,YAAO,GAAoB;YACjC,iBAAiB,EAAE,CAAC;YACpB,kBAAkB,EAAE,CAAC;YACrB,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,CAAC;YAChB,cAAc,EAAE,CAAC;YACjB,WAAW,EAAE,CAAC;SACf,CAAC;QACM,YAAO,GAA8B,IAAI,GAAG,EAAE,CAAC;QAC/C,kBAAa,GAAG,CAAC,CAAC;QAGxB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,gBAAgB,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YAExD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,MAAM,CAAC,IAAI,EAAE,CAAC;gBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACtD,CAAC,EAAE,KAAK,CAAC,CAAC;YAEV,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAwB,EAAE,EAAE;gBAChD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,MAAM,GAAG,OAAO,CAAC,OAA6B,CAAC;oBACrD,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC;oBACpC,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAAC;oBACrD,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC;oBAC9C,MAAM,CAAC,IAAI,EAAE,CAAC;oBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC9B,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACpC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,EAAE,CAAC;oBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC9B,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,IAAY;QAC/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,WAAW,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,MAAM,CAAC,IAAI,EAAE,CAAC;gBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAChD,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAwB,EAAE,EAAE;gBAChD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAwB,CAAC;oBAChD,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC;oBAC/B,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC;oBAChD,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC;oBAC9C,MAAM,CAAC,IAAI,EAAE,CAAC;oBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC9B,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACpC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,EAAE,CAAC;oBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC9B,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,SAAS;gBACf,QAAQ;gBACR,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG,YAAY,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YAEpD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,MAAM,CAAC,IAAI,EAAE,CAAC;gBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YACjD,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAwB,EAAE,EAAE;gBAChD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAyB,CAAC;oBACjD,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC;oBAChC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC,UAAU,CAAC;oBACjD,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC;oBAC9C,MAAM,CAAC,IAAI,EAAE,CAAC;oBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC9B,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACpC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,EAAE,CAAC;oBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC9B,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC9B,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,UAAU;QACR,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;IAEO,UAAU,CAAC,UAAkB;QACnC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE;YAC1B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,IAAI,CAAC,UAAU;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YAC9B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/subagents/reviewer.d.ts

@@ -0,0 +1,31 @@
+export interface OWASPFinding {
+    vulnerability: string;
+    severity: 'critical' | 'high' | 'medium' | 'low';
+    file: string;
+    line: number;
+    evidence: string;
+    remediation: string;
+}
+export interface SecretFinding {
+    type: string;
+    severity: 'critical' | 'high';
+    line: number;
+    pattern: string;
+}
+export type Finding = OWASPFinding | SecretFinding;
+export interface ReviewerResult {
+    findings: Finding[];
+    tokensUsed: number;
+    fileScanned: string;
+}
+export declare class ReviewerSubagent {
+    private workingDir;
+    private readonly TOKEN_ESTIMATE_PER_CHAR;
+    private readonly OWASP_PATTERNS;
+    constructor(workingDir: string);
+    auditCode(filePath: string): Promise<ReviewerResult>;
+    scanOWASP(code: string): OWASPFinding[];
+    detectSecrets(code: string): SecretFinding[];
+    private deduplicateFindings;
+}
+//# sourceMappingURL=reviewer.d.ts.map

package/dist/subagents/reviewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer.d.ts","sourceRoot":"","sources":["../../src/subagents/reviewer.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,GAAG,MAAM,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,OAAO,GAAG,YAAY,GAAG,aAAa,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AASD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAQ;IAEhD,OAAO,CAAC,QAAQ,CAAC,cAAc,CA4E7B;gBAEU,UAAU,EAAE,MAAM;IAIxB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAoB1D,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,EAAE;IAsBvC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE;IAiC5C,OAAO,CAAC,mBAAmB;CAmB5B"}

package/dist/subagents/reviewer.js

@@ -0,0 +1,154 @@
+import { readFileSync } from 'fs';
+import { resolve } from 'path';
+export class ReviewerSubagent {
+    constructor(workingDir) {
+        this.TOKEN_ESTIMATE_PER_CHAR = 0.25;
+        this.OWASP_PATTERNS = {
+            SQL_INJECTION: {
+                pattern: /SELECT\s+.*\s+WHERE\s+(?!.*\$\d+|.*\?|.*%s)/i,
+                type: 'SQL Injection',
+                severity: 'critical',
+                remediation: 'Use parameterized queries with placeholders (?) or prepared statements',
+            },
+            SQL_INJECTION_CONCAT: {
+                pattern: /SELECT\s+.*WHERE\s+.*\+\s*(?:string|input|param)/i,
+                type: 'SQL Injection',
+                severity: 'critical',
+                remediation: 'Replace string concatenation with parameterized queries',
+            },
+            XSS_INNERHTML: {
+                pattern: /\.innerHTML\s*=\s*(?!DOMPurify|sanitize|escape)/i,
+                type: 'XSS',
+                severity: 'critical',
+                remediation: 'Use textContent or sanitize input with DOMPurify before setting innerHTML',
+            },
+            XSS_EVAL: {
+                pattern: /\beval\s*\(/i,
+                type: 'XSS',
+                severity: 'critical',
+                remediation: 'Never use eval(); use JSON.parse() for JSON or Function() with caution',
+            },
+            COMMAND_INJECTION: {
+                pattern: /exec(?:Sync)?\s*\(\s*["`].*\$|exec(?:Sync)?\s*\(\s*template.*\$|exec(?:Sync)?\s*\(\s*\+/i,
+                type: 'Command Injection',
+                severity: 'critical',
+                remediation: 'Use array-based arguments (execFile) or validate and whitelist inputs strictly',
+            },
+            HARDCODED_SECRET_API_KEY: {
+                pattern: /API_KEY\s*=\s*["`][^"`]{20,}["`]/i,
+                type: 'API_KEY',
+                severity: 'critical',
+                remediation: 'Store API keys in environment variables (.env file, not committed)',
+            },
+            HARDCODED_SECRET_PASSWORD: {
+                pattern: /password\s*[:=]\s*["`][^"`]{6,}["`]/i,
+                type: 'PASSWORD',
+                severity: 'critical',
+                remediation: 'Store passwords in environment variables or secure vault, never hardcode',
+            },
+            HARDCODED_SECRET_TOKEN: {
+                pattern: /token\s*[:=]\s*["`][a-zA-Z0-9_-]{20,}["`]/i,
+                type: 'TOKEN',
+                severity: 'critical',
+                remediation: 'Store tokens in environment variables or secure credential store',
+            },
+            HARDCODED_SECRET_BEARER: {
+                pattern: /Bearer\s+[a-zA-Z0-9_-]{20,}/i,
+                type: 'TOKEN',
+                severity: 'high',
+                remediation: 'Move bearer tokens to environment variables',
+            },
+            PATH_TRAVERSAL: {
+                pattern: /\.\.\s*\/|readFile(?:Sync)?\s*\(\s*path\s*\+|join\s*\(\s*__dirname\s*,\s*\.\./i,
+                type: 'Path Traversal',
+                severity: 'high',
+                remediation: 'Validate and normalize file paths; use path.resolve() and check boundaries',
+            },
+            INSECURE_CRYPTO: {
+                pattern: /md5|sha1|Math\.random\(\)/i,
+                type: 'Insecure Crypto',
+                severity: 'high',
+                remediation: 'Use SHA-256 or bcrypt for hashing; use crypto.randomBytes() for randomness',
+            },
+        };
+        this.workingDir = workingDir;
+    }
+    async auditCode(filePath) {
+        const fullPath = resolve(this.workingDir, filePath);
+        const code = readFileSync(fullPath, 'utf-8');
+        const findings = [];
+        const owaspFindings = this.scanOWASP(code);
+        const secretFindings = this.detectSecrets(code);
+        findings.push(...owaspFindings);
+        findings.push(...secretFindings);
+        const tokensUsed = Math.ceil(code.length * this.TOKEN_ESTIMATE_PER_CHAR);
+        return {
+            findings: this.deduplicateFindings(findings),
+            tokensUsed,
+            fileScanned: filePath,
+        };
+    }
+    scanOWASP(code) {
+        const findings = [];
+        const lines = code.split('\n');
+        Object.values(this.OWASP_PATTERNS).forEach((rule) => {
+            lines.forEach((line, index) => {
+                if (rule.pattern.test(line)) {
+                    findings.push({
+                        vulnerability: rule.type,
+                        severity: rule.severity,
+                        file: 'unknown',
+                        line: index + 1,
+                        evidence: line.trim().substring(0, 100),
+                        remediation: rule.remediation,
+                    });
+                }
+            });
+        });
+        return findings;
+    }
+    detectSecrets(code) {
+        const findings = [];
+        const lines = code.split('\n');
+        const secretPatterns = [
+            { pattern: /API_KEY\s*[:=]/i, type: 'API_KEY' },
+            { pattern: /password\s*[:=]/i, type: 'PASSWORD' },
+            { pattern: /token\s*[:=]/i, type: 'TOKEN' },
+            { pattern: /BEGIN\s+RSA\s+PRIVATE\s+KEY/i, type: 'PRIVATE_KEY' },
+            { pattern: /BEGIN\s+PGP\s+PRIVATE\s+KEY/i, type: 'PGP_KEY' },
+            { pattern: /aws_access_key_id/i, type: 'AWS_KEY' },
+            { pattern: /aws_secret_access_key/i, type: 'AWS_SECRET' },
+            { pattern: /GITHUB_TOKEN|GH_TOKEN|gh_pat_/i, type: 'GITHUB_TOKEN' },
+            { pattern: /mongodb\+srv|mongodb:\/\/.*:.*@/i, type: 'MONGODB_URI' },
+            { pattern: /postgres:\/\/.*:.*@|postgresql:\/\/.*:.*@/i, type: 'DB_PASSWORD' },
+        ];
+        lines.forEach((line, index) => {
+            secretPatterns.forEach(({ pattern, type }) => {
+                if (pattern.test(line)) {
+                    findings.push({
+                        type,
+                        severity: 'critical',
+                        line: index + 1,
+                        pattern: pattern.source,
+                    });
+                }
+            });
+        });
+        return findings;
+    }
+    deduplicateFindings(findings) {
+        const seen = new Set();
+        const unique = [];
+        findings.forEach((finding) => {
+            const key = `${finding.line}:${'vulnerability' in finding
+                ? finding.vulnerability
+                : finding.type}`;
+            if (!seen.has(key)) {
+                seen.add(key);
+                unique.push(finding);
+            }
+        });
+        return unique.sort((a, b) => a.line - b.line);
+    }
+}
+//# sourceMappingURL=reviewer.js.map

package/dist/subagents/reviewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewer.js","sourceRoot":"","sources":["../../src/subagents/reviewer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAiC/B,MAAM,OAAO,gBAAgB;IAkF3B,YAAY,UAAkB;QAhFb,4BAAuB,GAAG,IAAI,CAAC;QAE/B,mBAAc,GAAgC;YAC7D,aAAa,EAAE;gBACb,OAAO,EAAE,8CAA8C;gBACvD,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EACT,wEAAwE;aAC3E;YACD,oBAAoB,EAAE;gBACpB,OAAO,EAAE,mDAAmD;gBAC5D,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EACT,yDAAyD;aAC5D;YACD,aAAa,EAAE;gBACb,OAAO,EAAE,kDAAkD;gBAC3D,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,UAAU;gBACpB,WAAW,EACT,2EAA2E;aAC9E;YACD,QAAQ,EAAE;gBACR,OAAO,EAAE,cAAc;gBACvB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,wEAAwE;aACtF;YACD,iBAAiB,EAAE;gBACjB,OAAO,EAAE,0FAA0F;gBACnG,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EACT,gFAAgF;aACnF;YACD,wBAAwB,EAAE;gBACxB,OAAO,EAAE,mCAAmC;gBAC5C,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,UAAU;gBACpB,WAAW,EACT,oEAAoE;aACvE;YACD,yBAAyB,EAAE;gBACzB,OAAO,EAAE,sCAAsC;gBAC/C,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,UAAU;gBACpB,WAAW,EACT,0EAA0E;aAC7E;YACD,sBAAsB,EAAE;gBACtB,OAAO,EAAE,4CAA4C;gBACrD,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,UAAU;gBACpB,WAAW,EACT,kEAAkE;aACrE;YACD,uBAAuB,EAAE;gBACvB,OAAO,EAAE,8BAA8B;gBACvC,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,6CAA6C;aAC3D;YACD,cAAc,EAAE;gBACd,OAAO,EAAE,gFAAgF;gBACzF,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EACT,4EAA4E;aAC/E;YACD,eAAe,EAAE;gBACf,OAAO,EAAE,4BAA4B;gBACrC,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,MAAM;gBAChB,WAAW,EACT,4EAA4E;aAC/E;SACF,CAAC;QAGA,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAEhD,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;QAEjC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAEzE,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YAC5C,UAAU;YACV,WAAW,EAAE,QAAQ;SACtB,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,IAAY;QACpB,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAClD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC5B,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC5B,QAAQ,CAAC,IAAI,CAAC;wBACZ,aAAa,EAAE,IAAI,CAAC,IAAI;wBACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,KAAK,GAAG,CAAC;wBACf,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;wBACvC,WAAW,EAAE,IAAI,CAAC,WAAW;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,aAAa,CAAC,IAAY;QACxB,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,cAAc,GAAG;YACrB,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE;YAC/C,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,EAAE;YACjD,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE;YAC3C,EAAE,OAAO,EAAE,8BAA8B,EAAE,IAAI,EAAE,aAAa,EAAE;YAChE,EAAE,OAAO,EAAE,8BAA8B,EAAE,IAAI,EAAE,SAAS,EAAE;YAC5D,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE;YAClD,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,YAAY,EAAE;YACzD,EAAE,OAAO,EAAE,gCAAgC,EAAE,IAAI,EAAE,cAAc,EAAE;YACnE,EAAE,OAAO,EAAE,kCAAkC,EAAE,IAAI,EAAE,aAAa,EAAE;YACpE,EAAE,OAAO,EAAE,4CAA4C,EAAE,IAAI,EAAE,aAAa,EAAE;SAC/E,CAAC;QAEF,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;gBAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI;wBACJ,QAAQ,EAAE,UAAU;wBACpB,IAAI,EAAE,KAAK,GAAG,CAAC;wBACf,OAAO,EAAE,OAAO,CAAC,MAAM;qBACxB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,mBAAmB,CAAC,QAAmB;QAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,MAAM,GAAc,EAAE,CAAC;QAE7B,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3B,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,IAAI,IACzB,eAAe,IAAI,OAAO;gBACxB,CAAC,CAAC,OAAO,CAAC,aAAa;gBACvB,CAAC,CAAC,OAAO,CAAC,IACd,EAAE,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;CACF"}

package/dist/telemetry/tokenCounter.d.ts

@@ -0,0 +1,21 @@
+interface Stats {
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    turnCount: number;
+    estimatedCost: number;
+}
+interface CostSavings {
+    savedTokens: number;
+    savedDollars: number;
+    savingsPercent: number;
+}
+export declare class TokenCounter {
+    private turns;
+    constructor();
+    recordTurn(inputTokens: number, outputTokens: number): void;
+    getStats(): Stats;
+    getCompressionRatio(baselineTokens: number): number;
+    getCostSavings(baselineTokens: number, baselineCost: number): CostSavings;
+}
+export {};
+//# sourceMappingURL=tokenCounter.d.ts.map

package/dist/telemetry/tokenCounter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenCounter.d.ts","sourceRoot":"","sources":["../../src/telemetry/tokenCounter.ts"],"names":[],"mappings":"AAMA,UAAU,KAAK;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,WAAW;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAKD,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAc;;IAI3B,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAQ3D,QAAQ,IAAI,KAAK;IAsBjB,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM;IAMnD,cAAc,CACZ,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,GACnB,WAAW;CAcf"}