soloforge 1.0.0

package/dist/engine/delivery.js

@@ -0,0 +1,182 @@
+import YAML from "yaml";
+export async function deliver(input) {
+    const { taskContext, config, knowledgeIndex, projectPath, gitOps, skipPush, skipPr, } = input;
+    const result = {
+        task_id: taskContext.task_id,
+        actions_performed: [],
+        commit_message: "",
+        branch: "",
+        skipped_actions: [],
+        errors: [],
+    };
+    // 1. Load delivery config from product profile
+    const deliveryConfig = resolveDeliveryConfig(knowledgeIndex, config.product_profile);
+    // 2. Get current branch
+    try {
+        result.branch = await gitOps.getCurrentBranch(projectPath);
+    }
+    catch (e) {
+        result.errors.push(`无法获取当前分支: ${e instanceof Error ? e.message : String(e)}`);
+        return result;
+    }
+    // 3. Build commit message
+    const entry = generateChangelogEntry(taskContext);
+    result.commit_message = formatCommitMessage(entry);
+    // 4. Commit
+    if (deliveryConfig.auto_commit) {
+        try {
+            const changedFiles = taskContext.execution?.changed_files ?? [];
+            if (changedFiles.length > 0) {
+                await gitOps.add(projectPath, changedFiles);
+            }
+            else {
+                await gitOps.add(projectPath, ["."]);
+            }
+            const commitOutput = await gitOps.commit(projectPath, result.commit_message);
+            // Extract commit hash from output like [feature/test abc1234] ...
+            const hashMatch = commitOutput.match(/\[[^\s]+ ([0-9a-f]{7,})\]/);
+            result.commit_hash = hashMatch ? hashMatch[1] : undefined;
+            result.actions_performed.push("commit");
+        }
+        catch (e) {
+            result.errors.push(`提交失败: ${e instanceof Error ? e.message : String(e)}`);
+            result.skipped_actions.push({
+                action: "commit",
+                reason: "git commit 失败",
+            });
+        }
+    }
+    else {
+        result.skipped_actions.push({
+            action: "commit",
+            reason: "DeliveryConfig.auto_commit = false",
+        });
+    }
+    // 5. Push
+    if (deliveryConfig.auto_push && !skipPush) {
+        try {
+            const remoteUrl = await gitOps.getRemoteUrl(projectPath);
+            if (remoteUrl) {
+                await gitOps.push(projectPath, "origin", result.branch);
+                result.actions_performed.push("push");
+            }
+            else {
+                result.skipped_actions.push({
+                    action: "push",
+                    reason: "未配置远程仓库",
+                });
+            }
+        }
+        catch (e) {
+            result.errors.push(`推送失败: ${e instanceof Error ? e.message : String(e)}`);
+            result.skipped_actions.push({
+                action: "push",
+                reason: "git push 失败",
+            });
+        }
+    }
+    else if (skipPush) {
+        result.skipped_actions.push({
+            action: "push",
+            reason: "用户跳过",
+        });
+    }
+    else {
+        result.skipped_actions.push({
+            action: "push",
+            reason: "DeliveryConfig.auto_push = false",
+        });
+    }
+    // 6. PR hint (never auto-create PR, just return command)
+    if (deliveryConfig.auto_pr && !skipPr) {
+        const remoteUrl = await gitOps
+            .getRemoteUrl(projectPath)
+            .catch(() => null);
+        if (remoteUrl) {
+            const labels = deliveryConfig.pr_labels.length > 0
+                ? ` --label ${deliveryConfig.pr_labels.join(",")}`
+                : "";
+            result.pr_url = `gh pr create --title "${entry.type}(${entry.scope}): ${entry.description}" --body "Task: ${taskContext.task_id}"${labels}`;
+            result.actions_performed.push("pr");
+        }
+        else {
+            result.skipped_actions.push({
+                action: "pr",
+                reason: "未配置远程仓库",
+            });
+        }
+    }
+    else {
+        result.skipped_actions.push({
+            action: "pr",
+            reason: skipPr ? "用户跳过" : "DeliveryConfig.auto_pr = false",
+        });
+    }
+    // 7. Changelog
+    result.changelog = formatChangelog(entry);
+    result.actions_performed.push("changelog");
+    return result;
+}
+// ── Changelog helpers ──
+export function generateChangelogEntry(taskContext) {
+    const typeMap = {
+        feature: "feat",
+        bugfix: "fix",
+        hotfix: "fix",
+        refactor: "refactor",
+        test: "test",
+        document: "docs",
+        scaffold: "feat",
+        optimize: "chore",
+    };
+    const taskType = taskContext.classification?.task_type ?? "feature";
+    return {
+        type: typeMap[taskType] ?? "chore",
+        scope: taskContext.classification?.affected_repos[0] ?? "core",
+        description: taskContext.intent.slice(0, 80),
+        task_id: taskContext.task_id,
+    };
+}
+// ── Internal helpers ──
+function formatCommitMessage(entry) {
+    return `${entry.type}(${entry.scope}): ${entry.description}\n\nTask: ${entry.task_id}`;
+}
+function formatChangelog(entry) {
+    const date = new Date().toISOString().split("T")[0];
+    return `## [${date}]\n\n- **${entry.type}(${entry.scope})**: ${entry.description} (${entry.task_id})`;
+}
+function resolveDeliveryConfig(knowledgeIndex, productProfile) {
+    const defaults = {
+        auto_commit: true,
+        auto_push: false,
+        auto_pr: false,
+        pr_labels: [],
+        require_approval: false,
+    };
+    const profileEntries = knowledgeIndex.query({
+        type: "domain",
+        products: [productProfile],
+        limit: 5,
+    });
+    for (const entry of profileEntries) {
+        if (!entry.body)
+            continue;
+        try {
+            const parsed = YAML.parse(entry.body);
+            if (parsed?.delivery) {
+                return {
+                    auto_commit: parsed.delivery.auto_commit ?? defaults.auto_commit,
+                    auto_push: parsed.delivery.auto_push ?? defaults.auto_push,
+                    auto_pr: parsed.delivery.auto_pr ?? defaults.auto_pr,
+                    pr_labels: parsed.delivery.pr_labels ?? defaults.pr_labels,
+                    require_approval: parsed.delivery.require_approval ?? defaults.require_approval,
+                };
+            }
+        }
+        catch {
+            /* ignore parse errors */
+        }
+    }
+    return defaults;
+}
+//# sourceMappingURL=delivery.js.map

package/dist/engine/delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../../src/engine/delivery.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAwBxB,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAoB;IAChD,MAAM,EACJ,WAAW,EACX,MAAM,EACN,cAAc,EACd,WAAW,EACX,MAAM,EACN,QAAQ,EACR,MAAM,GACP,GAAG,KAAK,CAAC;IAEV,MAAM,MAAM,GAAmB;QAC7B,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,iBAAiB,EAAE,EAAE;QACrB,cAAc,EAAE,EAAE;QAClB,MAAM,EAAE,EAAE;QACV,eAAe,EAAE,EAAE;QACnB,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,+CAA+C;IAC/C,MAAM,cAAc,GAAG,qBAAqB,CAC1C,cAAc,EACd,MAAM,CAAC,eAAe,CACvB,CAAC;IAEF,wBAAwB;IACxB,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,MAAM,CAAC,IAAI,CAChB,aAAa,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC1D,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0BAA0B;IAC1B,MAAM,KAAK,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,CAAC,cAAc,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAEnD,YAAY;IACZ,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,WAAW,CAAC,SAAS,EAAE,aAAa,IAAI,EAAE,CAAC;YAChE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CACtC,WAAW,EACX,MAAM,CAAC,cAAc,CACtB,CAAC;YACF,kEAAkE;YAClE,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAClE,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,MAAM,CAAC,IAAI,CAChB,SAAS,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACtD,CAAC;YACF,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,QAA0B;gBAClC,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,QAA0B;YAClC,MAAM,EAAE,oCAAoC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,UAAU;IACV,IAAI,cAAc,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxD,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;oBAC1B,MAAM,EAAE,MAAwB;oBAChC,MAAM,EAAE,SAAS;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,MAAM,CAAC,IAAI,CAChB,SAAS,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACtD,CAAC;YACF,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,MAAwB;gBAChC,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,EAAE,CAAC;QACpB,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,MAAwB;YAChC,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,MAAwB;YAChC,MAAM,EAAE,kCAAkC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,IAAI,cAAc,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,MAAM;aAC3B,YAAY,CAAC,WAAW,CAAC;aACzB,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GACV,cAAc,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;gBACjC,CAAC,CAAC,YAAY,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,CAAC,MAAM,GAAG,yBAAyB,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,MAAM,KAAK,CAAC,WAAW,mBAAmB,WAAW,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC;YAC5I,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,IAAsB;gBAC9B,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,IAAsB;YAC9B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gCAAgC;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,eAAe;IACf,MAAM,CAAC,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAE3C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0BAA0B;AAE1B,MAAM,UAAU,sBAAsB,CAAC,WAAwB;IAC7D,MAAM,OAAO,GAA2C;QACtD,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,OAAO;KAClB,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,cAAc,EAAE,SAAS,IAAI,SAAS,CAAC;IACpE,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO;QAClC,KAAK,EAAE,WAAW,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,MAAM;QAC9D,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5C,OAAO,EAAE,WAAW,CAAC,OAAO;KAC7B,CAAC;AACJ,CAAC;AAED,yBAAyB;AAEzB,SAAS,mBAAmB,CAAC,KAAqB;IAChD,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,MAAM,KAAK,CAAC,WAAW,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,eAAe,CAAC,KAAqB;IAC5C,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,OAAO,IAAI,YAAY,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,QAAQ,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,OAAO,GAAG,CAAC;AACxG,CAAC;AAED,SAAS,qBAAqB,CAC5B,cAAqC,EACrC,cAAsB;IAEtB,MAAM,QAAQ,GAAmB;QAC/B,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,EAAE;QACb,gBAAgB,EAAE,KAAK;KACxB,CAAC;IAEF,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC;QAC1C,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,KAAK,EAAE,CAAC;KACT,CAAC,CAAC;IACH,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,SAAS;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;gBACrB,OAAO;oBACL,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;oBAChE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;oBAC1D,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;oBACpD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;oBAC1D,gBAAgB,EACd,MAAM,CAAC,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB;iBAChE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/engine/dependency_scanner.d.ts

@@ -0,0 +1,13 @@
+import type { DependencyScanResult } from "../types.js";
+/**
+ * Scan a dependency file for known vulnerabilities.
+ *
+ * Supports:
+ * - package.json (Node.js)
+ * - pom.xml (Java / Maven)
+ * - build.gradle (Java / Gradle)
+ *
+ * Pure rule-based engine — zero AI dependencies, no external API calls.
+ */
+export declare function scanDependencies(content: string, filename: string): DependencyScanResult;
+//# sourceMappingURL=dependency_scanner.d.ts.map

package/dist/engine/dependency_scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency_scanner.d.ts","sourceRoot":"","sources":["../../src/engine/dependency_scanner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAqB,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAgP3E;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,oBAAoB,CA0FxF"}

package/dist/engine/dependency_scanner.js

@@ -0,0 +1,275 @@
+// ── 漏洞数据库 (硬编码规则库，零 AI 依赖) ──
+const VULN_DB = [
+    // Java
+    { package: "log4j-core", minSafe: "2.17.0", severity: "critical", issue: "Log4Shell RCE (CVE-2021-44228)" },
+    { package: "fastjson", minSafe: "1.2.83", severity: "critical", issue: "反序列化远程代码执行" },
+    { package: "jackson-databind", minSafe: "2.13.0", severity: "critical", issue: "反序列化漏洞" },
+    { package: "shiro-core", minSafe: "1.10.0", severity: "high", issue: "认证绕过漏洞" },
+    // Node.js
+    { package: "lodash", minSafe: "4.17.21", severity: "high", issue: "原型污染 (CVE-2021-23337)" },
+    { package: "express", minSafe: "4.18.0", severity: "medium", issue: "开放重定向" },
+    { package: "axios", minSafe: "0.21.1", severity: "high", issue: "SSRF 漏洞" },
+    { package: "node-fetch", minSafe: "2.6.7", severity: "medium", issue: "信息泄露" },
+    { package: "jsonwebtoken", minSafe: "9.0.0", severity: "high", issue: "密钥验证绕过" },
+    { package: "bcrypt", minSafe: "5.0.0", severity: "medium", issue: "轮次限制不足" },
+    { package: "multer", minSafe: "1.4.4", severity: "medium", issue: "内存耗尽" },
+    { package: "dompurify", minSafe: "2.3.3", severity: "high", issue: "XSS 绕过" },
+    { package: "moment", minSafe: "2.29.4", severity: "low", issue: "ReDoS 拒绝服务" },
+    { package: "yargs-parser", minSafe: "18.1.2", severity: "high", issue: "原型污染" },
+    { package: "ua-parser-js", minSafe: "0.7.31", severity: "critical", issue: "供应链攻击" },
+    { package: "event-source", minSafe: "2.0.1", severity: "high", issue: "CRLF 注入" },
+];
+// ── 未锁定版本标识 ──
+const UNSCOPED_PATTERN = /^\s*[\*xX]?\s*$/;
+// ── 版本比较 ──
+/**
+ * Compare two semver-like version strings.
+ * Returns true if a > b.
+ * - Splits by "." and compares each segment numerically.
+ * - If one version has fewer segments, missing segments are treated as 0.
+ * - Pre-release suffixes (e.g. "-beta.1", "-rc.2") are stripped before comparison.
+ */
+function semverGt(a, b) {
+    const normalize = (v) => v.replace(/-[\w.]+$/, "").split(".").map((seg) => {
+        const n = parseInt(seg, 10);
+        return Number.isNaN(n) ? 0 : n;
+    });
+    const segsA = normalize(a);
+    const segsB = normalize(b);
+    const maxLen = Math.max(segsA.length, segsB.length);
+    for (let i = 0; i < maxLen; i++) {
+        const pa = segsA[i] ?? 0;
+        const pb = segsB[i] ?? 0;
+        if (pa > pb)
+            return true;
+        if (pa < pb)
+            return false;
+    }
+    return false;
+}
+/**
+ * Check if a version string is unscoped (e.g. "*", "latest", "x", empty).
+ */
+function isUnscoped(version) {
+    const trimmed = version.trim().toLowerCase();
+    return trimmed === "" || trimmed === "latest" || UNSCOPED_PATTERN.test(trimmed);
+}
+// ── 版本提取 ──
+/**
+ * Extract the version number from common version specifier formats.
+ * Handles: ^1.2.3, ~1.2.3, >=1.2.3, 1.2.3, etc.
+ * Returns the raw version string (e.g. "1.2.3") or the original if unparseable.
+ * Returns null for URLs and git refs which should be skipped.
+ */
+function extractVersion(versionSpecifier) {
+    const v = versionSpecifier.trim();
+    // Skip URLs (http/https/git/file) and git refs (github:... / git+...)
+    if (/^(https?:|git[:+]|github:|file:|git@|ssh:|\/)/i.test(v)) {
+        return null;
+    }
+    // Skip workspace/file/link protocol dependencies (resolve locally, not scannable)
+    if (/^(workspace|file|link|portal|npm):/i.test(v)) {
+        return null;
+    }
+    // Extract numeric version: strip leading ^, ~, >=, <=, >, <, =
+    const match = v.match(/^[\^~>=<\s]*([\d][\d.]*)/);
+    return match ? match[1] : v;
+}
+// ── 漏洞匹配 ──
+/**
+ * Given a package name and its resolved version, check against the vulnerability database.
+ * Returns a VulnerabilityItem if a vulnerability is found, otherwise undefined.
+ */
+function checkVulnerability(pkgName, version) {
+    for (const entry of VULN_DB) {
+        if (pkgName === entry.package) {
+            // If the installed version is less than the minimum safe version, it's vulnerable
+            if (!semverGt(version, entry.minSafe)) {
+                // Pre-release check: if normalized version equals minSafe but original has pre-release suffix,
+                // per semver spec pre-release < release, so treat as vulnerable
+                const normalizedVersion = version.replace(/-[\w.]+$/, "");
+                if (normalizedVersion === entry.minSafe && /-[\w.]+$/.test(version)) {
+                    return {
+                        package: pkgName,
+                        installed_version: version,
+                        severity: entry.severity,
+                        issue: entry.issue,
+                        fixed_in: entry.minSafe,
+                    };
+                }
+                return {
+                    package: pkgName,
+                    installed_version: version,
+                    severity: entry.severity,
+                    issue: entry.issue,
+                    fixed_in: entry.minSafe,
+                };
+            }
+        }
+    }
+    return undefined;
+}
+function parsePackageJson(content) {
+    const deps = [];
+    try {
+        const pkg = JSON.parse(content);
+        const extract = (obj, isDev) => {
+            if (!obj)
+                return;
+            for (const [name, ver] of Object.entries(obj)) {
+                deps.push({ name, version: ver, isDev });
+            }
+        };
+        extract(pkg.dependencies, false);
+        extract(pkg.devDependencies, true);
+    }
+    catch {
+        // Invalid JSON — return empty
+    }
+    return deps;
+}
+function parsePomXml(content) {
+    const deps = [];
+    // Match <groupId>...<artifactId>...<version> blocks
+    // Using non-greedy match with dotAll flag for multiline content
+    const depPattern = /<groupId>\s*([\w.-]+)\s*<\/groupId>\s*<artifactId>\s*([\w.-]+)\s*<\/artifactId>\s*<version>\s*([\w.-]+)\s*<\/version>/g;
+    let match;
+    while ((match = depPattern.exec(content)) !== null) {
+        deps.push({
+            groupId: match[1],
+            artifactId: match[2],
+            version: match[3],
+        });
+    }
+    return deps;
+}
+function parseBuildGradle(content) {
+    const deps = [];
+    // Match group:artifact:version format, e.g. 'org.apache.logging.log4j:log4j-core:2.14.1'
+    const depPattern = /['"]([\w.-]+):([\w.-]+):([\d.]+(?:-[a-zA-Z][\w.-]*)?)['"]/g;
+    let match;
+    while ((match = depPattern.exec(content)) !== null) {
+        deps.push({
+            group: match[1],
+            artifact: match[2],
+            version: match[3],
+        });
+    }
+    return deps;
+}
+// ── 摘要生成 ──
+function buildSummary(total, vulnerabilities, unscoped) {
+    if (total === 0) {
+        return "未发现可解析的依赖项";
+    }
+    const criticalCount = vulnerabilities.filter((v) => v.severity === "critical").length;
+    const highCount = vulnerabilities.filter((v) => v.severity === "high").length;
+    const vulnParts = [];
+    if (vulnerabilities.length > 0) {
+        vulnParts.push(`发现 ${vulnerabilities.length} 个漏洞`);
+        const severityParts = [];
+        if (criticalCount > 0)
+            severityParts.push(`${criticalCount} critical`);
+        if (highCount > 0)
+            severityParts.push(`${highCount} high`);
+        if (severityParts.length > 0) {
+            vulnParts.push(`(${severityParts.join(", ")})`);
+        }
+    }
+    const unscopedPart = unscoped.length > 0 ? `，${unscoped.length} 个未锁定版本` : "";
+    if (vulnParts.length > 0) {
+        return `扫描了 ${total} 个依赖，${vulnParts.join("")}${unscopedPart}`;
+    }
+    return `扫描了 ${total} 个依赖，未发现已知漏洞${unscopedPart}`;
+}
+// ── 主函数 ──
+/**
+ * Scan a dependency file for known vulnerabilities.
+ *
+ * Supports:
+ * - package.json (Node.js)
+ * - pom.xml (Java / Maven)
+ * - build.gradle (Java / Gradle)
+ *
+ * Pure rule-based engine — zero AI dependencies, no external API calls.
+ */
+export function scanDependencies(content, filename) {
+    const baseName = filename.split("/").pop()?.toLowerCase() ?? "";
+    // ── package.json ──
+    if (baseName === "package.json") {
+        const parsed = parsePackageJson(content);
+        const vulnerabilities = [];
+        const unscoped_versions = [];
+        let scannedCount = 0;
+        for (const dep of parsed) {
+            const extracted = extractVersion(dep.version);
+            if (extracted === null)
+                continue; // URL / git ref — skip
+            scannedCount++;
+            if (isUnscoped(extracted)) {
+                unscoped_versions.push(`${dep.name}: ${dep.version}`);
+                continue;
+            }
+            const vuln = checkVulnerability(dep.name, extracted);
+            if (vuln) {
+                vulnerabilities.push(vuln);
+            }
+        }
+        return {
+            file: filename,
+            dependencies_scanned: scannedCount,
+            vulnerabilities,
+            unscoped_versions,
+            summary: buildSummary(scannedCount, vulnerabilities, unscoped_versions),
+        };
+    }
+    // ── pom.xml ──
+    if (baseName === "pom.xml") {
+        const parsed = parsePomXml(content);
+        const vulnerabilities = [];
+        let scannedCount = 0;
+        for (const dep of parsed) {
+            scannedCount++;
+            const vuln = checkVulnerability(dep.artifactId, dep.version);
+            if (vuln) {
+                vulnerabilities.push(vuln);
+            }
+        }
+        return {
+            file: filename,
+            dependencies_scanned: scannedCount,
+            vulnerabilities,
+            unscoped_versions: [],
+            summary: buildSummary(scannedCount, vulnerabilities, []),
+        };
+    }
+    // ── build.gradle ──
+    if (baseName === "build.gradle" || baseName === "build.gradle.kts") {
+        const parsed = parseBuildGradle(content);
+        const vulnerabilities = [];
+        let scannedCount = 0;
+        for (const dep of parsed) {
+            scannedCount++;
+            const vuln = checkVulnerability(dep.artifact, dep.version);
+            if (vuln) {
+                vulnerabilities.push(vuln);
+            }
+        }
+        return {
+            file: filename,
+            dependencies_scanned: scannedCount,
+            vulnerabilities,
+            unscoped_versions: [],
+            summary: buildSummary(scannedCount, vulnerabilities, []),
+        };
+    }
+    // ── 不支持的文件格式 ──
+    return {
+        file: filename,
+        dependencies_scanned: 0,
+        vulnerabilities: [],
+        unscoped_versions: [],
+        summary: "不支持的依赖文件格式",
+    };
+}
+//# sourceMappingURL=dependency_scanner.js.map

package/dist/engine/dependency_scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency_scanner.js","sourceRoot":"","sources":["../../src/engine/dependency_scanner.ts"],"names":[],"mappings":"AAEA,+BAA+B;AAE/B,MAAM,OAAO,GAKR;IACH,OAAO;IACP,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,gCAAgC,EAAE;IAC3G,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE;IACrF,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE;IACzF,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC/E,UAAU;IACV,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,EAAE;IAC3F,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;IAC7E,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE;IAC3E,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE;IAC9E,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;IAChF,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC5E,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE;IAC1E,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC7E,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE;IAC9E,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;IAC/E,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE;IACpF,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE;CAClF,CAAC;AAEF,gBAAgB;AAEhB,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAE3C,aAAa;AAEb;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,MAAM,SAAS,GAAG,CAAC,CAAS,EAAY,EAAE,CACxC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC/C,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEL,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAEpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAClF,CAAC;AAED,aAAa;AAEb;;;;;GAKG;AACH,SAAS,cAAc,CAAC,gBAAwB;IAC9C,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC;IAElC,sEAAsE;IACtE,IAAI,gDAAgD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kFAAkF;IAClF,IAAI,qCAAqC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+DAA+D;IAC/D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,aAAa;AAEb;;;GAGG;AACH,SAAS,kBAAkB,CAAC,OAAe,EAAE,OAAe;IAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9B,kFAAkF;YAClF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,+FAA+F;gBAC/F,gEAAgE;gBAChE,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC1D,IAAI,iBAAiB,KAAK,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpE,OAAO;wBACL,OAAO,EAAE,OAAO;wBAChB,iBAAiB,EAAE,OAAO;wBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,QAAQ,EAAE,KAAK,CAAC,OAAO;qBACxB,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,OAAO;oBAChB,iBAAiB,EAAE,OAAO;oBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,QAAQ,EAAE,KAAK,CAAC,OAAO;iBACxB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAUD,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,GAAuC,EAAE,KAAc,EAAE,EAAE;YAC1E,IAAI,CAAC,GAAG;gBAAE,OAAO;YACjB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,oDAAoD;IACpD,gEAAgE;IAChE,MAAM,UAAU,GAAG,wHAAwH,CAAC;IAC5I,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YACjB,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,yFAAyF;IACzF,MAAM,UAAU,GAAG,4DAA4D,CAAC;IAChF,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC;YACR,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACf,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YAClB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,aAAa;AAEb,SAAS,YAAY,CACnB,KAAa,EACb,eAAoC,EACpC,QAAkB;IAElB,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IACtF,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC9E,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,SAAS,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,MAAM,MAAM,CAAC,CAAC;QACnD,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,IAAI,aAAa,GAAG,CAAC;YAAE,aAAa,CAAC,IAAI,CAAC,GAAG,aAAa,WAAW,CAAC,CAAC;QACvE,IAAI,SAAS,GAAG,CAAC;YAAE,aAAa,CAAC,IAAI,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC;QAC3D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,SAAS,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAE7E,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,KAAK,QAAQ,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,KAAK,eAAe,YAAY,EAAE,CAAC;AACnD,CAAC;AAED,YAAY;AAEZ;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,QAAgB;IAChE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAEhE,qBAAqB;IACrB,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,eAAe,GAAwB,EAAE,CAAC;QAChD,MAAM,iBAAiB,GAAa,EAAE,CAAC;QACvC,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,SAAS,KAAK,IAAI;gBAAE,SAAS,CAAC,uBAAuB;YAEzD,YAAY,EAAE,CAAC;YAEf,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,iBAAiB,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACtD,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACrD,IAAI,IAAI,EAAE,CAAC;gBACT,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,YAAY;YAClC,eAAe;YACf,iBAAiB;YACjB,OAAO,EAAE,YAAY,CAAC,YAAY,EAAE,eAAe,EAAE,iBAAiB,CAAC;SACxE,CAAC;IACJ,CAAC;IAED,gBAAgB;IAChB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,eAAe,GAAwB,EAAE,CAAC;QAChD,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,YAAY,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,IAAI,EAAE,CAAC;gBACT,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,YAAY;YAClC,eAAe;YACf,iBAAiB,EAAE,EAAE;YACrB,OAAO,EAAE,YAAY,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,eAAe,GAAwB,EAAE,CAAC;QAChD,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,YAAY,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,IAAI,EAAE,CAAC;gBACT,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,YAAY;YAClC,eAAe;YACf,iBAAiB,EAAE,EAAE;YACrB,OAAO,EAAE,YAAY,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,CAAC;QACvB,eAAe,EAAE,EAAE;QACnB,iBAAiB,EAAE,EAAE;QACrB,OAAO,EAAE,YAAY;KACtB,CAAC;AACJ,CAAC"}

package/dist/engine/evolver.d.ts

@@ -0,0 +1,15 @@
+import type { TaskContext, FailureType, LearnResult } from "../types.js";
+export { FailureClassifier } from "./failure_classifier.js";
+export interface EvolverInput {
+    taskContext: TaskContext;
+    result: "success" | "failure";
+    verifyOutput?: {
+        build_passed: boolean;
+        tests_passed: boolean;
+        acceptance_results?: Record<string, boolean>;
+    };
+    failureType?: FailureType;
+    retryCount?: number;
+}
+export declare function evolve(input: EvolverInput, projectPath: string): Promise<LearnResult>;
+//# sourceMappingURL=evolver.d.ts.map

package/dist/engine/evolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evolver.d.ts","sourceRoot":"","sources":["../../src/engine/evolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAkB,MAAM,aAAa,CAAC;AAIzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,YAAY,CAAC,EAAE;QACb,YAAY,EAAE,OAAO,CAAC;QACtB,YAAY,EAAE,OAAO,CAAC;QACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC9C,CAAC;IACF,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD,wBAAsB,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAoE3F"}