sork-queb 1.0.0

package/dist/bin/sork.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=sork.d.ts.map

package/dist/bin/sork.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sork.d.ts","sourceRoot":"","sources":["../../bin/sork.ts"],"names":[],"mappings":""}

package/dist/bin/sork.js

@@ -0,0 +1,123 @@
+#!/usr/bin/env node
+import chalk from 'chalk';
+import minimist from 'minimist';
+import { SorkOrchestrator } from '../lib/orchestrator.js';
+import { Logger } from '../lib/utils/logger.js';
+const logger = new Logger('SORK');
+const argv = minimist(process.argv.slice(2), {
+    alias: {
+        h: 'help',
+        v: 'version',
+        p: 'path',
+        m: 'model',
+    },
+    default: {
+        path: process.cwd(),
+        model: 'anthropic',
+    },
+});
+function showBanner() {
+    console.log(chalk.cyan(`
+ ███████╗  ██████╗  ██████╗  ██╗  ██╗
+ ██╔════╝ ██╔═══██╗ ██╔══██╗ ██║ ██╔╝
+ ███████╗ ██║   ██║ ██████╔╝ █████╔╝
+ ╚════██║ ██║   ██║ ██╔══██╗ ██╔═██╗
+ ███████║ ╚██████╔╝ ██║  ██║ ██║  ██╗
+ ╚══════╝  ╚═════╝  ╚═╝  ╚═╝ ╚═╝  ╚═╝
+  `));
+    console.log(chalk.bold('Security Orchestration, Remediation & Keeping'));
+    console.log(chalk.dim('Global AI Security Brain for Node Projects\n'));
+}
+function showHelp() {
+    console.log(chalk.bold('Usage: sork [command] [options]\n'));
+    console.log(chalk.bold('Commands:'));
+    console.log('  init                Initialize SORK in current project');
+    console.log('  scan                Run security scan on project');
+    console.log('  fix                 Auto-fix detected issues');
+    console.log('  status              Show SORK status');
+    console.log('  pre-commit          Run pre-commit hooks (auto-called)');
+    console.log('  setup-hooks         Install git pre-commit hooks\n');
+    console.log(chalk.bold('Options:'));
+    console.log('  --path <dir>        Project path (default: current)');
+    console.log('  --model <model>     AI model to use (anthropic|local)');
+    console.log('  -v, --version       Show version');
+    console.log('  -h, --help          Show this help\n');
+    console.log(chalk.bold('Examples:'));
+    console.log('  sork init');
+    console.log('  sork scan --path ./my-project');
+    console.log('  sork fix --model anthropic');
+    console.log('  sork setup-hooks\n');
+}
+async function main() {
+    try {
+        showBanner();
+        if (argv.help) {
+            showHelp();
+            process.exit(0);
+        }
+        if (argv.version) {
+            console.log('SORK v1.0.0');
+            process.exit(0);
+        }
+        const command = (typeof argv._[0] === 'string' ? argv._[0] : String(argv._[0])) || 'status';
+        const projectPath = argv.path;
+        if (projectPath && (projectPath.includes('..') || projectPath.startsWith('/'))) {
+            logger.error('Invalid path: use relative paths only (e.g., . or ./my-project)');
+            process.exit(1);
+        }
+        const options = {
+            projectPath,
+            model: argv.model || 'anthropic',
+        };
+        const orchestrator = new SorkOrchestrator(options);
+        switch (command) {
+            case 'init':
+                logger.info('Initializing SORK in project...');
+                await orchestrator.initialize();
+                logger.success('SORK initialized! Run `sork setup-hooks` to enable pre-commit guards.');
+                break;
+            case 'scan':
+                logger.info('Running security scan...');
+                await orchestrator.scan();
+                break;
+            case 'fix':
+                logger.info('Auto-fixing issues...');
+                await orchestrator.fix();
+                logger.success('Auto-fix complete!');
+                break;
+            case 'pre-commit':
+                logger.info('Running pre-commit checks...');
+                await orchestrator.preCommit();
+                break;
+            case 'setup-hooks':
+                logger.info('Setting up git hooks...');
+                await orchestrator.setupHooks();
+                logger.success('Git hooks installed!');
+                break;
+            case 'status':
+                logger.info('Checking SORK status...');
+                await orchestrator.status();
+                break;
+            default:
+                logger.error(`Unknown command: ${command}`);
+                showHelp();
+                process.exit(1);
+        }
+    }
+    catch (error) {
+        logger.error(`Failed: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        if (process.env.DEBUG) {
+            console.error(error);
+        }
+        process.exit(1);
+    }
+}
+main().catch((error) => {
+    const message = error instanceof Error ? error.message : 'Unknown error occurred';
+    logger.error(`Fatal error: ${message}`);
+    if (process.env.DEBUG) {
+        console.error(error);
+    }
+    process.exit(1);
+});
+//# sourceMappingURL=sork.js.map

package/dist/bin/sork.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sork.js","sourceRoot":"","sources":["../../bin/sork.ts"],"names":[],"mappings":";AAEA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGhD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;AAWlC,MAAM,IAAI,GAAY,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;IACpD,KAAK,EAAE;QACL,CAAC,EAAE,MAAM;QACT,CAAC,EAAE,SAAS;QACZ,CAAC,EAAE,MAAM;QACT,CAAC,EAAE,OAAO;KACX;IACD,OAAO,EAAE;QACP,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE;QACnB,KAAK,EAAE,WAAW;KACnB;CACF,CAAY,CAAC;AAEd,SAAS,UAAU;IACjB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC;;;;;;;GAOZ,CAAC,CACD,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IAEpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;IAEtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,UAAU,EAAE,CAAC;QAEb,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,QAAQ,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GACX,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC;QAE9E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAc,CAAC;QACxC,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/E,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GAAgB;YAC3B,WAAW;YACX,KAAK,EAAG,IAAI,CAAC,KAA+B,IAAI,WAAW;SAC5D,CAAC;QAEF,MAAM,YAAY,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAEnD,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,MAAM;gBACT,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;gBAC/C,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC;gBAChC,MAAM,CAAC,OAAO,CACZ,uEAAuE,CACxE,CAAC;gBACF,MAAM;YAER,KAAK,MAAM;gBACT,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBACxC,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;gBAC1B,MAAM;YAER,KAAK,KAAK;gBACR,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBACrC,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC;gBACzB,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;gBACrC,MAAM;YAER,KAAK,YAAY;gBACf,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;gBAC5C,MAAM,YAAY,CAAC,SAAS,EAAE,CAAC;gBAC/B,MAAM;YAER,KAAK,aAAa;gBAChB,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBACvC,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC;gBAChC,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBACvC,MAAM;YAER,KAAK,QAAQ;gBACX,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBACvC,MAAM,YAAY,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM;YAER;gBACE,MAAM,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;gBAC5C,QAAQ,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,WAAW,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CACtE,CAAC;QACF,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;IACxC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/lib/agents/keeper.d.ts

@@ -0,0 +1,16 @@
+import { Logger } from '../utils/logger.js';
+import { CodeFix, Vulnerability, VerificationResult, AuditLogEntry } from '../types/index.js';
+export declare class KeeperAgent {
+    private name;
+    private logger;
+    private auditTrail;
+    constructor(logger: Logger);
+    verify(fixes: CodeFix[], vulnerabilities: Vulnerability[]): Promise<VerificationResult>;
+    private verifyFix;
+    private checkForNewIssues;
+    private detectRegressions;
+    private logAudit;
+    getAuditTrail(): AuditLogEntry[];
+    printSummary(results: VerificationResult): void;
+}
+//# sourceMappingURL=keeper.d.ts.map

package/dist/lib/agents/keeper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keeper.d.ts","sourceRoot":"","sources":["../../../lib/agents/keeper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAE9F,qBAAa,WAAW;IACtB,OAAO,CAAC,IAAI,CAAmC;IAC/C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,UAAU,CAAuB;gBAE7B,MAAM,EAAE,MAAM;IAIpB,MAAM,CACV,KAAK,EAAE,OAAO,EAAE,EAChB,eAAe,EAAE,aAAa,EAAE,GAC/B,OAAO,CAAC,kBAAkB,CAAC;YAiChB,SAAS;IAqBvB,OAAO,CAAC,iBAAiB;YAYX,iBAAiB;IAI/B,OAAO,CAAC,QAAQ;IAehB,aAAa,IAAI,aAAa,EAAE;IAIhC,YAAY,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI;CAqBhD"}

package/dist/lib/agents/keeper.js

@@ -0,0 +1,91 @@
+export class KeeperAgent {
+    name = 'Agent 03 · K (KEEPER)';
+    logger;
+    auditTrail = [];
+    constructor(logger) {
+        this.logger = logger;
+    }
+    async verify(fixes, vulnerabilities) {
+        this.logger.info(`${this.name} - Verifying fixes...`);
+        const results = {
+            verified: [],
+            failed: [],
+            regressions: [],
+        };
+        for (const fix of fixes) {
+            const verification = await this.verifyFix(fix, vulnerabilities);
+            if (verification.success) {
+                results.verified.push(fix);
+                this.logAudit('FIXED', fix.type, fix.file);
+            }
+            else {
+                results.failed.push({ fix, reason: verification.reason || 'Unknown' });
+                this.logAudit('FAILED', fix.type, fix.file);
+            }
+        }
+        const regressions = await this.detectRegressions();
+        results.regressions = regressions;
+        if (regressions.length > 0) {
+            this.logger.warn(`Detected ${regressions.length} potential regressions`);
+            regressions.forEach((r) => {
+                this.logAudit('REGRESSION', r.type, r.file);
+            });
+        }
+        return results;
+    }
+    async verifyFix(fix, originalVulnerabilities) {
+        const isAddressed = !originalVulnerabilities.some((v) => v.type === fix.type && v.file === fix.file && v.line === fix.line);
+        if (!isAddressed) {
+            return { success: false, reason: 'Vulnerability still present' };
+        }
+        const hasNewIssues = this.checkForNewIssues(fix);
+        if (hasNewIssues) {
+            return { success: false, reason: 'Fix introduces new issues' };
+        }
+        return { success: true };
+    }
+    checkForNewIssues(fix) {
+        const antiPatterns = [
+            /\/\/ TODO.*SECURITY/i,
+            /\/\/ FIXME/i,
+            /Math\.random\(\)/,
+            /eval\(/,
+            /dangerouslySetInnerHTML/,
+        ];
+        return antiPatterns.some((pattern) => pattern.test(fix.newCode));
+    }
+    async detectRegressions() {
+        return [];
+    }
+    logAudit(action, type, file, details) {
+        this.auditTrail.push({
+            timestamp: new Date().toISOString(),
+            action,
+            type,
+            file,
+            details,
+        });
+    }
+    getAuditTrail() {
+        return this.auditTrail;
+    }
+    printSummary(results) {
+        this.logger.section('Keeper Summary');
+        console.log(`Total Verified: ${results.verified.length}`);
+        console.log(`Failed: ${results.failed.length}`);
+        console.log(`Regressions: ${results.regressions.length}`);
+        if (results.verified.length > 0) {
+            this.logger.success('All critical issues resolved ✓');
+        }
+        if (results.failed.length > 0) {
+            this.logger.error('Some fixes failed:');
+            results.failed.forEach((f) => {
+                console.log(`  - ${f.fix.type} in ${f.fix.file}: ${f.reason}`);
+            });
+        }
+        if (results.regressions.length === 0) {
+            this.logger.success('No regressions detected');
+        }
+    }
+}
+//# sourceMappingURL=keeper.js.map

package/dist/lib/agents/keeper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keeper.js","sourceRoot":"","sources":["../../../lib/agents/keeper.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,WAAW;IACd,IAAI,GAAW,uBAAuB,CAAC;IACvC,MAAM,CAAS;IACf,UAAU,GAAoB,EAAE,CAAC;IAEzC,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAgB,EAChB,eAAgC;QAEhC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,uBAAuB,CAAC,CAAC;QAEtD,MAAM,OAAO,GAAuB;YAClC,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,EAAE;SAChB,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YAChE,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;gBACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACvE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACnD,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;QAElC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,WAAW,CAAC,MAAM,wBAAwB,CAAC,CAAC;YACzE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxB,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,GAAY,EACZ,uBAAwC;QAExC,MAAM,WAAW,GAAG,CAAC,uBAAuB,CAAC,IAAI,CAC/C,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CACpE,CAAC;QAEF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;QACnE,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QACjE,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAEO,iBAAiB,CAAC,GAAY;QACpC,MAAM,YAAY,GAAG;YACnB,sBAAsB;YACtB,aAAa;YACb,kBAAkB;YAClB,QAAQ;YACR,yBAAyB;SAC1B,CAAC;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,QAAQ,CACd,MAAmE,EACnE,IAAY,EACZ,IAAY,EACZ,OAAgB;QAEhB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM;YACN,IAAI;YACJ,IAAI;YACJ,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,YAAY,CAAC,OAA2B;QACtC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAE1D,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;CACF"}

package/dist/lib/agents/remediation.d.ts

@@ -0,0 +1,10 @@
+import { Logger } from '../utils/logger.js';
+import { Vulnerability, CodeFix } from '../types/index.js';
+export declare class RemediationAgent {
+    private name;
+    private logger;
+    constructor(logger: Logger);
+    generateFixes(vulnerabilities: Vulnerability[]): Promise<CodeFix[]>;
+    private createFix;
+}
+//# sourceMappingURL=remediation.d.ts.map

package/dist/lib/agents/remediation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remediation.d.ts","sourceRoot":"","sources":["../../../lib/agents/remediation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,OAAO,EAAqB,MAAM,mBAAmB,CAAC;AAE9E,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,IAAI,CAA0C;IACtD,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,MAAM;IAIpB,aAAa,CAAC,eAAe,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAgBzE,OAAO,CAAC,SAAS;CAgFlB"}

package/dist/lib/agents/remediation.js

@@ -0,0 +1,99 @@
+export class RemediationAgent {
+    name = 'Agent 02 · O+R (REMEDIATION)';
+    logger;
+    constructor(logger) {
+        this.logger = logger;
+    }
+    async generateFixes(vulnerabilities) {
+        this.logger.info(`${this.name} - Generating targeted fixes...`);
+        const fixes = [];
+        for (const vuln of vulnerabilities) {
+            const fix = this.createFix(vuln);
+            if (fix) {
+                fixes.push(fix);
+            }
+        }
+        this.logger.success(`Generated ${fixes.length} fixes`);
+        return fixes;
+    }
+    createFix(vuln) {
+        const fixGenerators = {
+            SQL_INJECTION: () => ({
+                type: 'SQL_INJECTION',
+                file: vuln.file,
+                line: vuln.line,
+                description: 'Use parameterized queries instead of string concatenation',
+                oldCode: vuln.code || '',
+                newCode: `const query = 'SELECT * FROM users WHERE id = ?';\ndb.execute(query, [userId]);`,
+                priority: 'CRITICAL',
+            }),
+            XSS: () => ({
+                type: 'XSS',
+                file: vuln.file,
+                line: vuln.line,
+                description: 'Sanitize user input or use textContent instead of innerHTML',
+                oldCode: vuln.code || '',
+                newCode: `element.textContent = userInput;`,
+                priority: 'CRITICAL',
+            }),
+            HARDCODED_SECRET: () => ({
+                type: 'HARDCODED_SECRET',
+                file: vuln.file,
+                line: vuln.line,
+                description: 'Move secret to environment variable',
+                oldCode: vuln.code || '',
+                newCode: `const apiKey = process.env.API_KEY;\nif (!apiKey) throw new Error('API_KEY required');`,
+                priority: 'CRITICAL',
+            }),
+            INSECURE_RANDOM: () => ({
+                type: 'INSECURE_RANDOM',
+                file: vuln.file,
+                line: vuln.line,
+                description: 'Use crypto.randomBytes instead of Math.random',
+                oldCode: vuln.code || '',
+                newCode: `import { randomBytes } from 'crypto';\nconst token = randomBytes(32).toString('hex');`,
+                priority: 'HIGH',
+            }),
+            MISSING_VALIDATION: () => ({
+                type: 'MISSING_VALIDATION',
+                file: vuln.file,
+                line: vuln.line,
+                description: 'Add input validation before processing',
+                oldCode: vuln.code || '',
+                newCode: `const schema = z.object({ email: z.string().email() });\nconst validated = schema.parse(userInput);`,
+                priority: 'HIGH',
+            }),
+            PATH_TRAVERSAL: () => ({
+                type: 'PATH_TRAVERSAL',
+                file: vuln.file,
+                line: vuln.line,
+                description: 'Validate and normalize file paths',
+                oldCode: vuln.code || '',
+                newCode: `const basePath = path.resolve('./uploads');\nconst userPath = path.resolve('./uploads', userInput);\nif (!userPath.startsWith(basePath)) throw new Error('Invalid path');`,
+                priority: 'HIGH',
+            }),
+            UNSAFE_EVAL: () => ({
+                type: 'UNSAFE_EVAL',
+                file: vuln.file,
+                line: vuln.line,
+                description: 'Replace eval with safer alternatives',
+                oldCode: vuln.code || '',
+                newCode: `const data = JSON.parse(userInput);`,
+                priority: 'CRITICAL',
+            }),
+            CSRF: () => ({
+                type: 'CSRF',
+                file: vuln.file,
+                line: vuln.line,
+                description: 'Add CSRF token validation',
+                oldCode: vuln.code || '',
+                newCode: `if (!req.csrfToken() || req.body._csrf !== req.csrfToken()) {\n  return res.status(403).send('CSRF validation failed');\n}`,
+                priority: 'HIGH',
+            }),
+            DEPENDENCY_VULN: () => null,
+        };
+        const generator = fixGenerators[vuln.type];
+        return generator ? generator() : null;
+    }
+}
+//# sourceMappingURL=remediation.js.map

package/dist/lib/agents/remediation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remediation.js","sourceRoot":"","sources":["../../../lib/agents/remediation.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,gBAAgB;IACnB,IAAI,GAAW,8BAA8B,CAAC;IAC9C,MAAM,CAAS;IAEvB,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,eAAgC;QAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,iCAAiC,CAAC,CAAC;QAEhE,MAAM,KAAK,GAAc,EAAE,CAAC;QAE5B,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,GAAG,EAAE,CAAC;gBACR,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,SAAS,CAAC,IAAmB;QACnC,MAAM,aAAa,GAAoD;YACrE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpB,IAAI,EAAE,eAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,2DAA2D;gBACxE,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;gBACxB,OAAO,EAAE,iFAAiF;gBAC1F,QAAQ,EAAE,UAAU;aACrB,CAAC;YACF,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,6DAA6D;gBAC1E,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;gBACxB,OAAO,EAAE,kCAAkC;gBAC3C,QAAQ,EAAE,UAAU;aACrB,CAAC;YACF,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;gBACvB,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,qCAAqC;gBAClD,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;gBACxB,OAAO,EAAE,wFAAwF;gBACjG,QAAQ,EAAE,UAAU;aACrB,CAAC;YACF,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;gBACtB,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,+CAA+C;gBAC5D,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;gBACxB,OAAO,EAAE,uFAAuF;gBAChG,QAAQ,EAAE,MAAM;aACjB,CAAC;YACF,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;gBACzB,IAAI,EAAE,oBAAoB;gBAC1B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,wCAAwC;gBACrD,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;gBACxB,OAAO,EAAE,qGAAqG;gBAC9G,QAAQ,EAAE,MAAM;aACjB,CAAC;YACF,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;gBACrB,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,mCAAmC;gBAChD,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;gBACxB,OAAO,EAAE,2KAA2K;gBACpL,QAAQ,EAAE,MAAM;aACjB,CAAC;YACF,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;gBAClB,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,sCAAsC;gBACnD,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;gBACxB,OAAO,EAAE,qCAAqC;gBAC9C,QAAQ,EAAE,UAAU;aACrB,CAAC;YACF,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;gBACX,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,2BAA2B;gBACxC,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;gBACxB,OAAO,EAAE,4HAA4H;gBACrI,QAAQ,EAAE,MAAM;aACjB,CAAC;YACF,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI;SAC5B,CAAC;QAEF,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;CACF"}

package/dist/lib/agents/triage.d.ts

@@ -0,0 +1,10 @@
+import { Logger } from '../utils/logger.js';
+import { Vulnerability, TriageResult } from '../types/index.js';
+export declare class TriageAgent {
+    private name;
+    private logger;
+    constructor(logger: Logger);
+    analyze(vulnerabilities: Vulnerability[]): Promise<TriageResult>;
+    private isFalsePositive;
+}
+//# sourceMappingURL=triage.d.ts.map

package/dist/lib/agents/triage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage.d.ts","sourceRoot":"","sources":["../../../lib/agents/triage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEhE,qBAAa,WAAW;IACtB,OAAO,CAAC,IAAI,CAAmC;IAC/C,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,MAAM;IAIpB,OAAO,CAAC,eAAe,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAqCtE,OAAO,CAAC,eAAe;CA+BxB"}

package/dist/lib/agents/triage.js

@@ -0,0 +1,62 @@
+export class TriageAgent {
+    name = 'Agent 01 · S (TRIAGE)';
+    logger;
+    constructor(logger) {
+        this.logger = logger;
+    }
+    async analyze(vulnerabilities) {
+        this.logger.info(`${this.name} - Analyzing ${vulnerabilities.length} findings...`);
+        const dismissed = [];
+        const confirmed = [];
+        for (const vuln of vulnerabilities) {
+            const fpResult = this.isFalsePositive(vuln);
+            if (fpResult.isFalsePositive) {
+                const dismissedVuln = { ...vuln, dismissedReason: fpResult.reason };
+                dismissed.push(dismissedVuln);
+                this.logger.debug(`Dismissed false positive: ${vuln.type} in ${vuln.file} (${fpResult.reason})`);
+            }
+            else {
+                confirmed.push(vuln);
+            }
+        }
+        confirmed.sort((a, b) => {
+            const severityMap = {
+                CRITICAL: 3,
+                HIGH: 2,
+                MEDIUM: 1,
+                LOW: 0,
+            };
+            return (severityMap[b.severity] || 0) - (severityMap[a.severity] || 0);
+        });
+        this.logger.info(`${dismissed.length} false positives dismissed`);
+        this.logger.warn(`${confirmed.length} confirmed threats`);
+        return { dismissed, confirmed };
+    }
+    isFalsePositive(vuln) {
+        const patterns = [
+            {
+                pattern: /\b(test|spec|\.test\.|\.spec\.)/,
+                property: 'file',
+                reason: 'Test file',
+            },
+            {
+                pattern: /\b(mock|fixture|stub)\b/,
+                property: 'message',
+                reason: 'Mock data',
+            },
+            {
+                pattern: /\bas\s+(unknown|any|const)\b|@ts-ignore/,
+                property: 'message',
+                reason: 'Intentional type bypass',
+            },
+        ];
+        for (const check of patterns) {
+            const value = vuln[check.property];
+            if (typeof value === 'string' && check.pattern.test(value)) {
+                return { isFalsePositive: true, reason: check.reason };
+            }
+        }
+        return { isFalsePositive: false };
+    }
+}
+//# sourceMappingURL=triage.js.map

package/dist/lib/agents/triage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage.js","sourceRoot":"","sources":["../../../lib/agents/triage.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,WAAW;IACd,IAAI,GAAW,uBAAuB,CAAC;IACvC,MAAM,CAAS;IAEvB,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,eAAgC;QAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,IAAI,CAAC,IAAI,gBAAgB,eAAe,CAAC,MAAM,cAAc,CACjE,CAAC;QAEF,MAAM,SAAS,GAAoB,EAAE,CAAC;QACtC,MAAM,SAAS,GAAoB,EAAE,CAAC;QAEtC,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;gBAC7B,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpE,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,6BAA6B,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,GAAG,CAC9E,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtB,MAAM,WAAW,GAA2B;gBAC1C,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,CAAC;gBACT,GAAG,EAAE,CAAC;aACP,CAAC;YACF,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,4BAA4B,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,oBAAoB,CAAC,CAAC;QAE1D,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAClC,CAAC;IAEO,eAAe,CAAC,IAAmB;QAIzC,MAAM,QAAQ,GAAG;YACf;gBACE,OAAO,EAAE,iCAAiC;gBAC1C,QAAQ,EAAE,MAAe;gBACzB,MAAM,EAAE,WAAW;aACpB;YACD;gBACE,OAAO,EAAE,yBAAyB;gBAClC,QAAQ,EAAE,SAAkB;gBAC5B,MAAM,EAAE,WAAW;aACpB;YACD;gBACE,OAAO,EAAE,yCAAyC;gBAClD,QAAQ,EAAE,SAAkB;gBAC5B,MAAM,EAAE,yBAAyB;aAClC;SACF,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3D,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YACzD,CAAC;QACH,CAAC;QAED,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;CACF"}

package/dist/lib/fixers/codeFixer.d.ts

@@ -0,0 +1,14 @@
+import { Logger } from '../utils/logger.js';
+import { CodeFix } from '../types/index.js';
+export declare class CodeFixer {
+    private projectPath;
+    private logger;
+    constructor(projectPath: string, logger: Logger);
+    private validateFilePath;
+    applyFix(fix: CodeFix): Promise<void>;
+    applyMultipleFixes(fixes: CodeFix[]): Promise<Map<string, string>>;
+    formatWithPrettier(filePath: string): Promise<void>;
+    lintAndFix(filePath: string): Promise<void>;
+    private getParser;
+}
+//# sourceMappingURL=codeFixer.d.ts.map

package/dist/lib/fixers/codeFixer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codeFixer.d.ts","sourceRoot":"","sources":["../../../lib/fixers/codeFixer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAI5C,qBAAa,SAAS;IACpB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAS;gBAEX,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAK/C,OAAO,CAAC,gBAAgB;IAYlB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA6BrC,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA0ClE,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBnD,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBjD,OAAO,CAAC,SAAS;CAYlB"}

package/dist/lib/fixers/codeFixer.js

@@ -0,0 +1,134 @@
+import { promises as fs } from 'fs';
+import path from 'path';
+import { execFile } from 'child_process';
+import { promisify } from 'util';
+const execFileAsync = promisify(execFile);
+export class CodeFixer {
+    projectPath;
+    logger;
+    constructor(projectPath, logger) {
+        this.projectPath = projectPath;
+        this.logger = logger;
+    }
+    validateFilePath(filePath) {
+        const absolutePath = path.resolve(filePath);
+        const absoluteProjectPath = path.resolve(this.projectPath);
+        if (!absolutePath.startsWith(absoluteProjectPath + path.sep) &&
+            absolutePath !== absoluteProjectPath) {
+            throw new Error(`Path traversal attack detected: ${filePath}`);
+        }
+    }
+    async applyFix(fix) {
+        try {
+            const filePath = path.join(this.projectPath, fix.file);
+            this.validateFilePath(filePath);
+            let content = await fs.readFile(filePath, 'utf-8');
+            const lines = content.split('\n');
+            if (fix.line > 0 && fix.line <= lines.length) {
+                const lineIndex = fix.line - 1;
+                const newCodeLines = fix.newCode.split('\n');
+                lines.splice(lineIndex, 1, ...newCodeLines);
+                content = lines.join('\n');
+                await fs.writeFile(filePath, content, 'utf-8');
+                this.logger.success(`Applied fix: ${fix.type} in ${fix.file}:${fix.line} (${newCodeLines.length} line(s))`);
+            }
+            else {
+                this.logger.warn(`Could not apply fix: line ${fix.line} is out of bounds for ${fix.file}`);
+            }
+        }
+        catch (error) {
+            throw new Error(`Failed to apply fix: ${error instanceof Error ? error.message : 'Unknown'}`);
+        }
+    }
+    async applyMultipleFixes(fixes) {
+        const fileChanges = new Map();
+        const fixesByFile = new Map();
+        for (const fix of fixes) {
+            if (!fixesByFile.has(fix.file)) {
+                fixesByFile.set(fix.file, []);
+            }
+            fixesByFile.get(fix.file).push(fix);
+        }
+        for (const [file, fileFixes] of fixesByFile) {
+            try {
+                const filePath = path.join(this.projectPath, file);
+                this.validateFilePath(filePath);
+                const content = await fs.readFile(filePath, 'utf-8');
+                fileFixes.sort((a, b) => b.line - a.line);
+                const lines = content.split('\n');
+                for (const fix of fileFixes) {
+                    if (fix.line > 0 && fix.line <= lines.length) {
+                        const lineIndex = fix.line - 1;
+                        const newCodeLines = fix.newCode.split('\n');
+                        lines.splice(lineIndex, 1, ...newCodeLines);
+                    }
+                }
+                const newContent = lines.join('\n');
+                await fs.writeFile(filePath, newContent, 'utf-8');
+                fileChanges.set(file, newContent);
+                this.logger.success(`Applied ${fileFixes.length} fixes in ${file}`);
+            }
+            catch (error) {
+                this.logger.error(`Failed to apply fixes in ${file}: ${error instanceof Error ? error.message : 'Unknown'}`);
+            }
+        }
+        return fileChanges;
+    }
+    async formatWithPrettier(filePath) {
+        try {
+            const fullPath = path.join(this.projectPath, filePath);
+            this.validateFilePath(fullPath);
+            const content = await fs.readFile(fullPath, 'utf-8');
+            const prettier = await import('prettier');
+            const formatted = await prettier.format(content, {
+                parser: this.getParser(filePath),
+                singleQuote: true,
+                trailingComma: 'es5',
+                semi: true,
+                tabWidth: 2,
+            });
+            await fs.writeFile(fullPath, formatted, 'utf-8');
+            this.logger.success(`Formatted with Prettier: ${filePath}`);
+        }
+        catch (error) {
+            this.logger.warn(`Failed to format ${filePath}: ${error instanceof Error ? error.message : 'Unknown'}`);
+        }
+    }
+    async lintAndFix(filePath) {
+        try {
+            const fullPath = path.join(this.projectPath, filePath);
+            this.validateFilePath(fullPath);
+            await this.formatWithPrettier(filePath);
+            const eslintPath = path.join(this.projectPath, 'node_modules', '.bin', 'eslint');
+            try {
+                await execFileAsync(eslintPath, ['--fix', fullPath]);
+                this.logger.success(`Linted and fixed: ${filePath}`);
+            }
+            catch (error) {
+                const err = error;
+                if (err.code !== 'ENOENT') {
+                    this.logger.debug(`ESLint error: ${error instanceof Error ? error.message : 'Unknown'}`);
+                }
+                else {
+                    this.logger.debug(`ESLint not available, skipping lint-fix for ${filePath}`);
+                }
+            }
+        }
+        catch (error) {
+            this.logger.warn(`Failed to lint/fix ${filePath}: ${error instanceof Error ? error.message : 'Unknown'}`);
+        }
+    }
+    getParser(filePath) {
+        if (filePath.endsWith('.ts') || filePath.endsWith('.tsx')) {
+            return 'typescript';
+        }
+        if (filePath.endsWith('.json')) {
+            return 'json';
+        }
+        if (filePath.endsWith('.yaml') || filePath.endsWith('.yml')) {
+            return 'yaml';
+        }
+        return 'babel';
+    }
+}
+//# sourceMappingURL=codeFixer.js.map

package/dist/lib/fixers/codeFixer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codeFixer.js","sourceRoot":"","sources":["../../../lib/fixers/codeFixer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAIjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,OAAO,SAAS;IACZ,WAAW,CAAS;IACpB,MAAM,CAAS;IAEvB,YAAY,WAAmB,EAAE,MAAc;QAC7C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEO,gBAAgB,CAAC,QAAgB;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE3D,IACE,CAAC,YAAY,CAAC,UAAU,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC;YACxD,YAAY,KAAK,mBAAmB,EACpC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAEhC,IAAI,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC/B,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAE7C,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC;gBAC5C,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAE3B,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,CACjB,gBAAgB,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,WAAW,CACvF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6BAA6B,GAAG,CAAC,IAAI,yBAAyB,GAAG,CAAC,IAAI,EAAE,CACzE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAgB;QACvC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAqB,CAAC;QAEjD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAChC,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBACnD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAEhC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACrD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;gBAE1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAElC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;oBAC5B,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;wBAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;wBAC/B,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAC7C,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC;oBAC9C,CAAC;gBACH,CAAC;gBAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpC,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;gBAClD,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBAElC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,SAAS,CAAC,MAAM,aAAa,IAAI,EAAE,CAAC,CAAC;YACtE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QACvC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAEhC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YAE1C,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;gBAC/C,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAChC,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,KAAK;gBACpB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;YAEH,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAEhC,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAExC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAEjF,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,KAA8B,CAAC;gBAC3C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC3F,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,QAAQ,EAAE,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,QAAgB;QAChC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/lib/index.d.ts

@@ -0,0 +1,9 @@
+export { SorkOrchestrator } from './orchestrator.js';
+export { TriageAgent } from './agents/triage.js';
+export { RemediationAgent } from './agents/remediation.js';
+export { KeeperAgent } from './agents/keeper.js';
+export { SecurityScanner } from './security/scanner.js';
+export { CodeFixer } from './fixers/codeFixer.js';
+export { Logger } from './utils/logger.js';
+export type { Vulnerability, VulnerabilityType, CodeFix, TriageResult, VerificationResult, AuditLogEntry, SorkSession, SorkConfig, SorkOptions, } from './types/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,YAAY,EACV,aAAa,EACb,iBAAiB,EACjB,OAAO,EACP,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,UAAU,EACV,WAAW,GACZ,MAAM,kBAAkB,CAAC"}