sork-queb 1.0.0

package/dist/lib/index.js

@@ -0,0 +1,8 @@
+export { SorkOrchestrator } from './orchestrator.js';
+export { TriageAgent } from './agents/triage.js';
+export { RemediationAgent } from './agents/remediation.js';
+export { KeeperAgent } from './agents/keeper.js';
+export { SecurityScanner } from './security/scanner.js';
+export { CodeFixer } from './fixers/codeFixer.js';
+export { Logger } from './utils/logger.js';
+//# sourceMappingURL=index.js.map

package/dist/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/lib/orchestrator.d.ts

@@ -0,0 +1,19 @@
+import { SorkOptions } from './types/index.js';
+export declare class SorkOrchestrator {
+    private projectPath;
+    private logger;
+    private triage;
+    private remediation;
+    private keeper;
+    private scanner;
+    private fixer;
+    private session;
+    constructor(options?: SorkOptions);
+    initialize(): Promise<void>;
+    scan(): Promise<void>;
+    fix(): Promise<void>;
+    preCommit(): Promise<boolean>;
+    setupHooks(): Promise<void>;
+    status(): Promise<void>;
+}
+//# sourceMappingURL=orchestrator.d.ts.map

package/dist/lib/orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../../lib/orchestrator.ts"],"names":[],"mappings":"AAQA,OAAO,EAGL,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAE1B,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,WAAW,CAAmB;IACtC,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,KAAK,CAAY;IACzB,OAAO,CAAC,OAAO,CAAc;gBAEjB,OAAO,GAAE,WAAgB;IAoB/B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IA+B3B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAmCrB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IA4CpB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IA2B7B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAyB3B,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CA8B9B"}

package/dist/lib/orchestrator.js

@@ -0,0 +1,175 @@
+import { promises as fs } from 'fs';
+import path from 'path';
+import { Logger } from './utils/logger.js';
+import { TriageAgent } from './agents/triage.js';
+import { RemediationAgent } from './agents/remediation.js';
+import { KeeperAgent } from './agents/keeper.js';
+import { SecurityScanner } from './security/scanner.js';
+import { CodeFixer } from './fixers/codeFixer.js';
+export class SorkOrchestrator {
+    projectPath;
+    logger;
+    triage;
+    remediation;
+    keeper;
+    scanner;
+    fixer;
+    session;
+    constructor(options = {}) {
+        this.projectPath = options.projectPath || process.cwd();
+        this.logger = new Logger('ORCHESTRATOR');
+        this.triage = new TriageAgent(this.logger);
+        this.remediation = new RemediationAgent(this.logger);
+        this.keeper = new KeeperAgent(this.logger);
+        this.scanner = new SecurityScanner(this.projectPath, this.logger);
+        this.fixer = new CodeFixer(this.projectPath, this.logger);
+        this.session = {
+            timestamp: new Date(),
+            vulnerabilities: [],
+            fixes: [],
+            dismissed: [],
+            verified: [],
+        };
+    }
+    async initialize() {
+        this.logger.section('SORK Initialization');
+        const sorkConfig = {
+            version: '1.0.0',
+            initialized: new Date().toISOString(),
+            agents: {
+                triage: true,
+                remediation: true,
+                keeper: true,
+            },
+            settings: {
+                autoFix: true,
+                preCommitGuards: true,
+                strictMode: false,
+            },
+        };
+        const configPath = path.join(this.projectPath, '.sorkrc.json');
+        await fs.writeFile(configPath, JSON.stringify(sorkConfig, null, 2));
+        this.logger.success(`Configuration created: ${configPath}`);
+        const hooksDir = path.join(this.projectPath, '.sork', 'hooks');
+        await fs.mkdir(hooksDir, { recursive: true });
+        this.logger.success(`Hooks directory created`);
+        this.logger.info('✓ Connected to Anthropic model');
+        this.logger.info('✓ 3 agents registered: READY');
+        this.logger.info('\nNext: Run `sork setup-hooks` to enable pre-commit guards');
+    }
+    async scan() {
+        this.logger.section('SORK Security Scan');
+        this.logger.info('Agent 01 (TRIAGE) - Analyzing project...');
+        const vulnerabilities = await this.scanner.scan();
+        this.session.vulnerabilities = vulnerabilities;
+        if (vulnerabilities.length === 0) {
+            this.logger.success('No vulnerabilities detected!');
+            return;
+        }
+        this.logger.info(`Detected ${vulnerabilities.length} potential issues`);
+        const triageResults = await this.triage.analyze(vulnerabilities);
+        this.session.dismissed = triageResults.dismissed;
+        this.session.vulnerabilities = triageResults.confirmed;
+        this.logger.warn(`${triageResults.dismissed.length} false positives dismissed, ` +
+            `${triageResults.confirmed.length} confirmed threats`);
+        if (triageResults.confirmed.length > 0) {
+            this.logger.section('Confirmed Vulnerabilities');
+            triageResults.confirmed.forEach((vuln, i) => {
+                console.log(`${i + 1}. [${vuln.severity}] ${vuln.type}\n` +
+                    `   File: ${vuln.file}:${vuln.line}\n` +
+                    `   Issue: ${vuln.message}`);
+            });
+        }
+    }
+    async fix() {
+        this.logger.section('SORK Remediation');
+        if (this.session.vulnerabilities.length === 0) {
+            this.logger.warn('No vulnerabilities to fix. Run `sork scan` first.');
+            return;
+        }
+        this.logger.info(`Agent 02 (REMEDIATION) - Generating fixes for ${this.session.vulnerabilities.length} issues...`);
+        const fixes = await this.remediation.generateFixes(this.session.vulnerabilities);
+        this.session.fixes = fixes;
+        for (const fix of fixes) {
+            try {
+                await this.fixer.applyFix(fix);
+                this.logger.success(`Fixed: ${fix.type} in ${fix.file}`);
+            }
+            catch (error) {
+                this.logger.error(`Failed to fix ${fix.file}: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            }
+        }
+        this.logger.success(`${fixes.length} fixes applied`);
+        this.logger.section('SORK Verification');
+        this.logger.info('Agent 03 (KEEPER) - Verifying fixes...');
+        const verificationResults = await this.keeper.verify(fixes, this.session.vulnerabilities);
+        this.session.verified = verificationResults.verified;
+        this.keeper.printSummary(verificationResults);
+    }
+    async preCommit() {
+        this.logger.section('Pre-Commit Security Check');
+        const stagedVulns = await this.scanner.scanStaged();
+        if (stagedVulns.length === 0) {
+            this.logger.success('All checks passed! Safe to commit.');
+            return true;
+        }
+        this.logger.error(`${stagedVulns.length} issues found in staged changes:`);
+        stagedVulns.forEach((vuln, i) => {
+            console.log(`${i + 1}. [${vuln.severity}] ${vuln.message} (${vuln.file})`);
+        });
+        const critical = stagedVulns.filter((v) => v.severity === 'CRITICAL');
+        if (critical.length > 0) {
+            this.logger.error('\n🚫 CRITICAL issues detected. Commit blocked.');
+            console.log('Run `sork fix` to auto-resolve, then try again.');
+            process.exit(1);
+        }
+        return false;
+    }
+    async setupHooks() {
+        this.logger.section('Setting Up Git Hooks');
+        const hookContent = `#!/bin/bash
+sork pre-commit
+exit_code=$?
+
+if [ $exit_code -ne 0 ]; then
+  echo "Pre-commit checks failed. Commit aborted."
+  exit 1
+fi
+
+exit 0
+`;
+        const hooksDir = path.join(this.projectPath, '.git', 'hooks');
+        const preCommitPath = path.join(hooksDir, 'pre-commit');
+        await fs.mkdir(hooksDir, { recursive: true });
+        await fs.writeFile(preCommitPath, hookContent, { mode: 0o755 });
+        this.logger.success('Pre-commit hook installed at .git/hooks/pre-commit');
+        this.logger.info('Hooks will run automatically before each commit');
+    }
+    async status() {
+        this.logger.section('SORK Status');
+        console.log('Agents:');
+        console.log('  ✓ Agent 01 (TRIAGE)      - Operational');
+        console.log('  ✓ Agent 02 (REMEDIATION) - Operational');
+        console.log('  ✓ Agent 03 (KEEPER)      - Operational');
+        console.log();
+        console.log('Configuration:');
+        try {
+            const configPath = path.join(this.projectPath, '.sorkrc.json');
+            const configContent = await fs.readFile(configPath, 'utf-8');
+            const config = JSON.parse(configContent);
+            console.log(`  Version: ${config.version}`);
+            console.log(`  Initialized: ${config.initialized}`);
+            console.log(`  Auto-fix: ${config.settings.autoFix ? '✓' : '✗'}`);
+            console.log(`  Pre-commit Guards: ${config.settings.preCommitGuards ? '✓' : '✗'}`);
+        }
+        catch {
+            console.log('  Status: Not initialized. Run `sork init` first.');
+        }
+        console.log();
+        console.log('Commands:');
+        console.log('  sork scan       - Run security scan');
+        console.log('  sork fix        - Auto-fix detected issues');
+        console.log('  sork pre-commit - Run pre-commit checks');
+    }
+}
+//# sourceMappingURL=orchestrator.js.map

package/dist/lib/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../lib/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAOlD,MAAM,OAAO,gBAAgB;IACnB,WAAW,CAAS;IACpB,MAAM,CAAS;IACf,MAAM,CAAc;IACpB,WAAW,CAAmB;IAC9B,MAAM,CAAc;IACpB,OAAO,CAAkB;IACzB,KAAK,CAAY;IACjB,OAAO,CAAc;IAE7B,YAAY,UAAuB,EAAE;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE3C,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAE1D,IAAI,CAAC,OAAO,GAAG;YACb,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,eAAe,EAAE,EAAE;YACnB,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAE3C,MAAM,UAAU,GAAe;YAC7B,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,MAAM,EAAE;gBACN,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,IAAI;aACb;YACD,QAAQ,EAAE;gBACR,OAAO,EAAE,IAAI;gBACb,eAAe,EAAE,IAAI;gBACrB,UAAU,EAAE,KAAK;aAClB;SACF,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,UAAU,EAAE,CAAC,CAAC;QAE5D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAE/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC7D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,eAAe,GAAG,eAAe,CAAC;QAE/C,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,eAAe,CAAC,MAAM,mBAAmB,CAAC,CAAC;QACxE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAEjE,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,eAAe,GAAG,aAAa,CAAC,SAAS,CAAC;QAEvD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,8BAA8B;YAC7D,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,oBAAoB,CACxD,CAAC;QAEF,IAAI,aAAa,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;YACjD,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBAC1C,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,IAAI;oBAC3C,YAAY,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI;oBACtC,aAAa,IAAI,CAAC,OAAO,EAAE,CAC9B,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG;QACP,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAExC,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iDAAiD,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,YAAY,CACjG,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAChD,IAAI,CAAC,OAAO,CAAC,eAAe,CAC7B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QAE3B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,iBAAiB,GAAG,CAAC,IAAI,KACvB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAC3C,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAErD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAE3D,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAClD,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,eAAe,CAC7B,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC;QAErD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;QAEjD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAEpD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,MAAM,kCAAkC,CAAC,CAAC;QAC3E,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YAC9B,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,GAAG,CAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACtE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAE5C,MAAM,WAAW,GAAG;;;;;;;;;;CAUvB,CAAC;QAEE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAExD,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAEnC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;YAC/D,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAe,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CACT,wBAAwB,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CACtE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IAC3D,CAAC;CACF"}

package/dist/lib/security/scanner.d.ts

@@ -0,0 +1,18 @@
+import { Logger } from '../utils/logger.js';
+import { Vulnerability } from '../types/index.js';
+export declare class SecurityScanner {
+    private projectPath;
+    private logger;
+    constructor(projectPath: string, logger: Logger);
+    scan(): Promise<Vulnerability[]>;
+    scanStaged(): Promise<Vulnerability[]>;
+    private scanJavaScript;
+    private checkJavaScriptPatterns;
+    private scanSecrets;
+    private scanDependencies;
+    private findFiles;
+    private matchPattern;
+    private getStagedFiles;
+    private scanFiles;
+}
+//# sourceMappingURL=scanner.d.ts.map

package/dist/lib/security/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../../lib/security/scanner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,qBAAa,eAAe;IAC1B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAS;gBAEX,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAKzC,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAoBhC,UAAU,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAkB9B,cAAc;IAqB5B,OAAO,CAAC,uBAAuB;YAsFjB,WAAW;YA2CX,gBAAgB;YA2ChB,SAAS;IAiCvB,OAAO,CAAC,YAAY;YAQN,cAAc;YAiBd,SAAS;CAsBxB"}

package/dist/lib/security/scanner.js

@@ -0,0 +1,287 @@
+import { promises as fs } from 'fs';
+import path from 'path';
+export class SecurityScanner {
+    projectPath;
+    logger;
+    constructor(projectPath, logger) {
+        this.projectPath = projectPath;
+        this.logger = logger;
+    }
+    async scan() {
+        this.logger.info('Scanning project for vulnerabilities...');
+        const vulnerabilities = [];
+        try {
+            const jsVulns = await this.scanJavaScript();
+            vulnerabilities.push(...jsVulns);
+            const secretVulns = await this.scanSecrets();
+            vulnerabilities.push(...secretVulns);
+            const depVulns = await this.scanDependencies();
+            vulnerabilities.push(...depVulns);
+        }
+        catch (error) {
+            this.logger.error(`Scan failed: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+        return vulnerabilities;
+    }
+    async scanStaged() {
+        try {
+            const stagedFiles = await this.getStagedFiles();
+            if (stagedFiles.length === 0) {
+                this.logger.debug('No staged files found to scan');
+                return [];
+            }
+            return this.scanFiles(stagedFiles);
+        }
+        catch (error) {
+            this.logger.error(`Failed to scan staged files: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return [];
+        }
+    }
+    async scanJavaScript() {
+        const vulnerabilities = [];
+        try {
+            const files = await this.findFiles('**/*.{ts,tsx,js,jsx}', [
+                'node_modules',
+                'dist',
+                '.git',
+            ]);
+            for (const file of files) {
+                const content = await fs.readFile(file, 'utf-8');
+                const fileVulns = this.checkJavaScriptPatterns(content, file);
+                vulnerabilities.push(...fileVulns);
+            }
+        }
+        catch (error) {
+            this.logger.debug(`Failed to scan JavaScript: ${error}`);
+        }
+        return vulnerabilities;
+    }
+    checkJavaScriptPatterns(content, file) {
+        const vulnerabilities = [];
+        const lines = content.split('\n');
+        const sqlPattern = /sql\s*=\s*['"]/i;
+        const innerHTMLPattern = /innerHTML\s*=/i;
+        const dangerousPattern = /dangerouslySetInnerHTML/i;
+        const evalPattern = /\beval\s*\(/i;
+        const passwordPattern = /password\s*=\s*['"]/i;
+        const apiKeyPattern = /api[_-]?key\s*=\s*['"]/i;
+        const secretPattern = /\b(secret|token)\s*=\s*['"]/i;
+        const mathRandomPattern = /Math\.random\s*\(\)/i;
+        lines.forEach((line, index) => {
+            const lineNum = index + 1;
+            const trimmedLine = line.trim();
+            if (trimmedLine.startsWith('//') || trimmedLine.startsWith('/*') || !trimmedLine) {
+                return;
+            }
+            if (sqlPattern.test(line)) {
+                vulnerabilities.push({
+                    type: 'SQL_INJECTION',
+                    file,
+                    line: lineNum,
+                    column: line.indexOf('sql'),
+                    message: 'Potential SQL injection - use parameterized queries',
+                    code: trimmedLine,
+                    severity: 'HIGH',
+                });
+            }
+            if (innerHTMLPattern.test(line) || dangerousPattern.test(line)) {
+                const column = Math.max(line.indexOf('innerHTML'), line.indexOf('dangerously'));
+                vulnerabilities.push({
+                    type: 'XSS',
+                    file,
+                    line: lineNum,
+                    column: column >= 0 ? column : 0,
+                    message: 'Potential XSS vulnerability - avoid innerHTML with user input',
+                    code: trimmedLine,
+                    severity: 'HIGH',
+                });
+            }
+            if (passwordPattern.test(line) || apiKeyPattern.test(line) || secretPattern.test(line)) {
+                vulnerabilities.push({
+                    type: 'HARDCODED_SECRET',
+                    file,
+                    line: lineNum,
+                    column: 0,
+                    message: 'Hardcoded secret detected - move to environment variable',
+                    code: trimmedLine,
+                    severity: 'CRITICAL',
+                });
+            }
+            if (evalPattern.test(line)) {
+                vulnerabilities.push({
+                    type: 'UNSAFE_EVAL',
+                    file,
+                    line: lineNum,
+                    column: line.indexOf('eval'),
+                    message: 'Use of eval() is dangerous - use safer alternatives',
+                    code: trimmedLine,
+                    severity: 'CRITICAL',
+                });
+            }
+            if (mathRandomPattern.test(line)) {
+                vulnerabilities.push({
+                    type: 'INSECURE_RANDOM',
+                    file,
+                    line: lineNum,
+                    column: line.indexOf('Math'),
+                    message: 'Math.random() is not cryptographically secure - use crypto module',
+                    code: trimmedLine,
+                    severity: 'HIGH',
+                });
+            }
+        });
+        return vulnerabilities;
+    }
+    async scanSecrets() {
+        const vulnerabilities = [];
+        try {
+            const secretPatterns = [
+                /api.?key\s*[=:]\s*['"]/i,
+                /api.?secret\s*[=:]\s*['"]/i,
+                /password\s*[=:]\s*['"]/i,
+                /\btoken\s*[=:]\s*['"]/i,
+                /auth.?secret\s*[=:]\s*['"]/i,
+                /private.?key\s*[=:]\s*['"]/i,
+            ];
+            const files = await this.findFiles('**/*', ['node_modules', 'dist', '.git']);
+            for (const file of files) {
+                try {
+                    const content = await fs.readFile(file, 'utf-8');
+                    const lines = content.split('\n');
+                    lines.forEach((line, index) => {
+                        if (secretPatterns.some((p) => p.test(line))) {
+                            vulnerabilities.push({
+                                type: 'HARDCODED_SECRET',
+                                file,
+                                line: index + 1,
+                                column: 0,
+                                message: 'Potential hardcoded secret detected',
+                                severity: 'CRITICAL',
+                            });
+                        }
+                    });
+                }
+                catch {
+                    // Skip files that can't be read
+                }
+            }
+        }
+        catch (error) {
+            this.logger.debug(`Failed to scan secrets: ${error instanceof Error ? error.message : 'Unknown'}`);
+        }
+        return vulnerabilities;
+    }
+    async scanDependencies() {
+        const vulnerabilities = [];
+        try {
+            const packagePath = path.join(this.projectPath, 'package.json');
+            const packageContent = await fs.readFile(packagePath, 'utf-8');
+            let packageJson;
+            try {
+                packageJson = JSON.parse(packageContent);
+            }
+            catch (parseError) {
+                this.logger.debug(`Failed to parse package.json: ${parseError instanceof Error ? parseError.message : 'Invalid JSON'}`);
+                return vulnerabilities;
+            }
+            const dependencies = packageJson.dependencies;
+            const devDependencies = packageJson.devDependencies;
+            const allDeps = {
+                ...(dependencies && typeof dependencies === 'object' ? dependencies : {}),
+                ...(devDependencies && typeof devDependencies === 'object' ? devDependencies : {}),
+            };
+            Object.entries(allDeps).forEach(([name, version]) => {
+                if (typeof version === 'string' && version.includes('*')) {
+                    vulnerabilities.push({
+                        type: 'DEPENDENCY_VULN',
+                        file: 'package.json',
+                        line: 1,
+                        column: 0,
+                        message: `Dependency '${name}' has wildcard version - pin to specific version`,
+                        severity: 'MEDIUM',
+                    });
+                }
+            });
+        }
+        catch (error) {
+            this.logger.debug(`Failed to scan dependencies: ${error instanceof Error ? error.message : 'Unknown'}`);
+        }
+        return vulnerabilities;
+    }
+    async findFiles(pattern, exclude) {
+        const files = [];
+        const walk = async (dir) => {
+            try {
+                const entries = await fs.readdir(dir, { withFileTypes: true });
+                for (const entry of entries) {
+                    const fullPath = path.join(dir, entry.name);
+                    const relativePath = path.relative(this.projectPath, fullPath);
+                    const pathSegments = relativePath.split(path.sep);
+                    if (pathSegments.some((segment) => exclude.includes(segment))) {
+                        continue;
+                    }
+                    if (entry.isDirectory()) {
+                        await walk(fullPath);
+                    }
+                    else if (this.matchPattern(relativePath, pattern)) {
+                        files.push(fullPath);
+                    }
+                }
+            }
+            catch (error) {
+                if (error instanceof Error && error.code === 'EACCES') {
+                    this.logger.debug(`Permission denied reading directory: ${dir}`);
+                }
+            }
+        };
+        await walk(this.projectPath);
+        return files;
+    }
+    matchPattern(file, pattern) {
+        const regex = pattern
+            .replace(/\./g, '\\.')
+            .replace(/\*/g, '.*')
+            .replace(/\?/g, '.');
+        return new RegExp(`^${regex}$`, 'i').test(file);
+    }
+    async getStagedFiles() {
+        try {
+            const { execFile } = await import('child_process');
+            const { promisify } = await import('util');
+            const execFileAsync = promisify(execFile);
+            const { stdout } = await execFileAsync('git', ['diff', '--cached', '--name-only']);
+            return stdout
+                .split('\n')
+                .filter((f) => f.length > 0)
+                .map((f) => path.join(this.projectPath, f));
+        }
+        catch (error) {
+            this.logger.debug(`Failed to get staged files: ${error instanceof Error ? error.message : 'Unknown'}`);
+            return [];
+        }
+    }
+    async scanFiles(files) {
+        const vulnerabilities = [];
+        for (const file of files) {
+            try {
+                const content = await fs.readFile(file, 'utf-8');
+                const fileVulns = this.checkJavaScriptPatterns(content, file);
+                vulnerabilities.push(...fileVulns);
+            }
+            catch (error) {
+                const err = error;
+                if (err.code === 'EACCES') {
+                    this.logger.debug(`Permission denied reading file: ${file}`);
+                }
+                else if (err.code === 'ENOENT') {
+                    this.logger.debug(`File not found: ${file}`);
+                }
+                else {
+                    this.logger.debug(`Failed to read file ${file}: ${error instanceof Error ? error.message : 'Unknown'}`);
+                }
+            }
+        }
+        return vulnerabilities;
+    }
+}
+//# sourceMappingURL=scanner.js.map

package/dist/lib/security/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../../lib/security/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AAIxB,MAAM,OAAO,eAAe;IAClB,WAAW,CAAS;IACpB,MAAM,CAAS;IAEvB,YAAY,WAAmB,EAAE,MAAc;QAC7C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QAC5D,MAAM,eAAe,GAAoB,EAAE,CAAC;QAE5C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,eAAe,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;YAEjC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7C,eAAe,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YAErC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC/C,eAAe,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAChD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,gCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAC3C,EAAE,CACH,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,eAAe,GAAoB,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE;gBACzD,cAAc;gBACd,MAAM;gBACN,MAAM;aACP,CAAC,CAAC;YAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC9D,eAAe,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAEO,uBAAuB,CAAC,OAAe,EAAE,IAAY;QAC3D,MAAM,eAAe,GAAoB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,UAAU,GAAG,iBAAiB,CAAC;QACrC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;QAC1C,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;QACpD,MAAM,WAAW,GAAG,cAAc,CAAC;QACnC,MAAM,eAAe,GAAG,sBAAsB,CAAC;QAC/C,MAAM,aAAa,GAAG,yBAAyB,CAAC;QAChD,MAAM,aAAa,GAAG,8BAA8B,CAAC;QACrD,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC;YAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAEhC,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjF,OAAO;YACT,CAAC;YAED,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,eAAe,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,eAAe;oBACrB,IAAI;oBACJ,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;oBAC3B,OAAO,EAAE,qDAAqD;oBAC9D,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,MAAM;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;gBAChF,eAAe,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,KAAK;oBACX,IAAI;oBACJ,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBAChC,OAAO,EAAE,+DAA+D;oBACxE,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,MAAM;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvF,eAAe,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,kBAAkB;oBACxB,IAAI;oBACJ,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,CAAC;oBACT,OAAO,EAAE,0DAA0D;oBACnE,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,UAAU;iBACrB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,eAAe,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,aAAa;oBACnB,IAAI;oBACJ,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;oBAC5B,OAAO,EAAE,qDAAqD;oBAC9D,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,UAAU;iBACrB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,eAAe,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,iBAAiB;oBACvB,IAAI;oBACJ,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;oBAC5B,OAAO,EAAE,mEAAmE;oBAC5E,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,MAAM;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,eAAe,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,MAAM,eAAe,GAAoB,EAAE,CAAC;QAE5C,IAAI,CAAC;YACH,MAAM,cAAc,GAAG;gBACrB,yBAAyB;gBACzB,4BAA4B;gBAC5B,yBAAyB;gBACzB,wBAAwB;gBACxB,6BAA6B;gBAC7B,6BAA6B;aAC9B,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAE7E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAElC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;wBAC5B,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;4BAC7C,eAAe,CAAC,IAAI,CAAC;gCACnB,IAAI,EAAE,kBAAkB;gCACxB,IAAI;gCACJ,IAAI,EAAE,KAAK,GAAG,CAAC;gCACf,MAAM,EAAE,CAAC;gCACT,OAAO,EAAE,qCAAqC;gCAC9C,QAAQ,EAAE,UAAU;6BACrB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,gCAAgC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACrG,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,MAAM,eAAe,GAAoB,EAAE,CAAC;QAE5C,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAE/D,IAAI,WAAoC,CAAC;YACzC,IAAI,CAAC;gBACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAA4B,CAAC;YACtE,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,iCAAiC,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,CACrG,CAAC;gBACF,OAAO,eAAe,CAAC;YACzB,CAAC;YAED,MAAM,YAAY,GAAG,WAAW,CAAC,YAAkD,CAAC;YACpF,MAAM,eAAe,GAAG,WAAW,CAAC,eAAqD,CAAC;YAC1F,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,eAAe,IAAI,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;aACnF,CAAC;YAEF,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE;gBAClD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzD,eAAe,CAAC,IAAI,CAAC;wBACnB,IAAI,EAAE,iBAAiB;wBACvB,IAAI,EAAE,cAAc;wBACpB,IAAI,EAAE,CAAC;wBACP,MAAM,EAAE,CAAC;wBACT,OAAO,EAAE,eAAe,IAAI,kDAAkD;wBAC9E,QAAQ,EAAE,QAAQ;qBACnB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1G,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,OAAiB;QACxD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;YAChD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;gBAE/D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;oBAE/D,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAClD,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;wBAC9D,SAAS;oBACX,CAAC;oBAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;wBACxB,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACvB,CAAC;yBAAM,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC;wBACpD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACvB,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACjF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,OAAe;QAChD,MAAM,KAAK,GAAG,OAAO;aAClB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;aACrB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvB,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;YACnD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;YAE1C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;YACnF,OAAO,MAAM;iBACV,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;iBAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACvG,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,KAAe;QACrC,MAAM,eAAe,GAAoB,EAAE,CAAC;QAE5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC9D,eAAe,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,KAA8B,CAAC;gBAC3C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;gBAC/D,CAAC;qBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;gBAC/C,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC1G,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;CACF"}

package/dist/lib/types/index.d.ts

@@ -0,0 +1,75 @@
+/**
+ * SORK Type Definitions
+ */
+export type SeverityLevel = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW';
+export interface Vulnerability {
+    type: VulnerabilityType;
+    file: string;
+    line: number;
+    column?: number;
+    message: string;
+    code?: string;
+    severity: SeverityLevel;
+    cveId?: string;
+    dismissedReason?: string;
+}
+export type VulnerabilityType = 'SQL_INJECTION' | 'XSS' | 'HARDCODED_SECRET' | 'INSECURE_RANDOM' | 'MISSING_VALIDATION' | 'PATH_TRAVERSAL' | 'UNSAFE_EVAL' | 'CSRF' | 'DEPENDENCY_VULN';
+export interface CodeFix {
+    type: VulnerabilityType;
+    file: string;
+    line: number;
+    description: string;
+    oldCode: string;
+    newCode: string;
+    priority: SeverityLevel;
+}
+export interface TriageResult {
+    dismissed: Vulnerability[];
+    confirmed: Vulnerability[];
+}
+export interface VerificationResult {
+    verified: CodeFix[];
+    failed: Array<{
+        fix: CodeFix;
+        reason: string;
+    }>;
+    regressions: Vulnerability[];
+}
+export interface AuditLogEntry {
+    timestamp: string;
+    action: 'FIXED' | 'FAILED' | 'REGRESSION' | 'SCANNED' | 'DISMISSED';
+    type: VulnerabilityType | string;
+    file: string;
+    details?: string;
+}
+export interface SorkSession {
+    timestamp: Date;
+    vulnerabilities: Vulnerability[];
+    fixes: CodeFix[];
+    dismissed: Vulnerability[];
+    verified: CodeFix[];
+}
+export interface SorkConfig {
+    version: string;
+    initialized: string;
+    agents: {
+        triage: boolean;
+        remediation: boolean;
+        keeper: boolean;
+    };
+    settings: {
+        autoFix: boolean;
+        preCommitGuards: boolean;
+        strictMode: boolean;
+    };
+}
+export interface SorkOptions {
+    projectPath?: string;
+    model?: 'anthropic' | 'local';
+    debug?: boolean;
+}
+export interface ScannerOptions {
+    excludePaths?: string[];
+    includeTypes?: VulnerabilityType[];
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEnE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,aAAa,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,iBAAiB,GACzB,eAAe,GACf,KAAK,GACL,kBAAkB,GAClB,iBAAiB,GACjB,oBAAoB,GACpB,gBAAgB,GAChB,aAAa,GACb,MAAM,GACN,iBAAiB,CAAC;AAEtB,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,SAAS,EAAE,aAAa,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,WAAW,EAAE,aAAa,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,GAAG,SAAS,GAAG,WAAW,CAAC;IACpE,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,IAAI,CAAC;IAChB,eAAe,EAAE,aAAa,EAAE,CAAC;IACjC,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QACN,MAAM,EAAE,OAAO,CAAC;QAChB,WAAW,EAAE,OAAO,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,QAAQ,EAAE;QACR,OAAO,EAAE,OAAO,CAAC;QACjB,eAAe,EAAE,OAAO,CAAC;QACzB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACpC"}

package/dist/lib/types/index.js

@@ -0,0 +1,5 @@
+/**
+ * SORK Type Definitions
+ */
+export {};
+//# sourceMappingURL=index.js.map

package/dist/lib/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG"}