synapsexcoder 6.0.0

package/dist/security/security-types.d.ts

@@ -0,0 +1,132 @@
+/**
+ * Security Audit Types — SARIF-compatible vulnerability data model
+ *
+ * Phase 11: Security audit with SARIF export
+ */
+export type Severity = "critical" | "high" | "medium" | "low" | "info";
+export type FindingCategory = "hardcoded-secret" | "command-injection" | "path-traversal" | "prototype-pollution" | "eval-usage" | "insecure-deserialization" | "sql-injection" | "xss" | "insecure-randomness" | "missing-helmet" | "insecure-tls" | "debug-endpoint" | "information-exposure" | "best-practice";
+export interface FindingLocation {
+    file: string;
+    line: number;
+    column?: number;
+    snippet?: string;
+}
+export interface SecurityFinding {
+    id: string;
+    ruleId: string;
+    category: FindingCategory;
+    severity: Severity;
+    title: string;
+    description: string;
+    message: string;
+    location: FindingLocation;
+    remediation?: string;
+    cwe?: string[];
+    confidence: number;
+}
+export interface AuditOptions {
+    paths?: string[];
+    excludePatterns?: string[];
+    severityThreshold?: Severity;
+    maxFindings?: number;
+    skipRules?: string[];
+}
+export interface AuditResult {
+    id: string;
+    timestamp: number;
+    duration: number;
+    totalFiles: number;
+    totalFindings: number;
+    findings: SecurityFinding[];
+    summary: AuditSummary;
+    errors: string[];
+}
+export interface AuditSummary {
+    bySeverity: Record<Severity, number>;
+    byCategory: Record<string, number>;
+    byFile: Record<string, number>;
+    criticalCount: number;
+    highCount: number;
+    mediumCount: number;
+    lowCount: number;
+    infoCount: number;
+}
+export interface AuditRule {
+    id: string;
+    category: FindingCategory;
+    severity: Severity;
+    title: string;
+    description: string;
+    remediation: string;
+    cwe: string[];
+    confidence: number;
+    pattern?: RegExp;
+    filePattern?: RegExp;
+}
+export interface SarifLog {
+    $schema: string;
+    version: string;
+    runs: SarifRun[];
+}
+export interface SarifRun {
+    tool: SarifTool;
+    results: SarifResult[];
+    invocations: SarifInvocation[];
+    properties?: Record<string, unknown>;
+}
+export interface SarifTool {
+    driver: SarifDriver;
+}
+export interface SarifDriver {
+    name: string;
+    version: string;
+    informationUri: string;
+    rules: SarifRule[];
+}
+export interface SarifRule {
+    id: string;
+    name: string;
+    shortDescription: SarifMessage;
+    fullDescription: SarifMessage;
+    helpUri?: string;
+    properties: {
+        category: string;
+        severity: string;
+        cwe: string[];
+        precision: string;
+    };
+}
+export interface SarifResult {
+    ruleId: string;
+    ruleIndex: number;
+    level: string;
+    message: SarifMessage;
+    locations: SarifLocation[];
+    properties?: {
+        category: string;
+        confidence: number;
+    };
+}
+export interface SarifLocation {
+    physicalLocation: {
+        artifactLocation: {
+            uri: string;
+        };
+        region?: {
+            startLine: number;
+            startColumn?: number;
+            snippet?: {
+                text: string;
+            };
+        };
+    };
+}
+export interface SarifMessage {
+    text: string;
+}
+export interface SarifInvocation {
+    executionSuccessful: boolean;
+    startTimeUtc: string;
+    endTimeUtc: string;
+}
+//# sourceMappingURL=security-types.d.ts.map

package/dist/security/security-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-types.d.ts","sourceRoot":"","sources":["../../src/security/security-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvE,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,qBAAqB,GACrB,YAAY,GACZ,0BAA0B,GAC1B,eAAe,GACf,KAAK,GACL,qBAAqB,GACrB,gBAAgB,GAChB,cAAc,GACd,gBAAgB,GAChB,sBAAsB,GACtB,eAAe,CAAC;AAEpB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,iBAAiB,CAAC,EAAE,QAAQ,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,QAAQ,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,SAAS,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,YAAY,CAAC;IAC/B,eAAe,EAAE,YAAY,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE;QACV,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,GAAG,EAAE,MAAM,EAAE,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE;QAChB,gBAAgB,EAAE;YAChB,GAAG,EAAE,MAAM,CAAC;SACb,CAAC;QACF,MAAM,CAAC,EAAE;YACP,SAAS,EAAE,MAAM,CAAC;YAClB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,OAAO,CAAC,EAAE;gBACR,IAAI,EAAE,MAAM,CAAC;aACd,CAAC;SACH,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/security/security-types.js

@@ -0,0 +1,7 @@
+/**
+ * Security Audit Types — SARIF-compatible vulnerability data model
+ *
+ * Phase 11: Security audit with SARIF export
+ */
+export {};
+//# sourceMappingURL=security-types.js.map

package/dist/security/security-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-types.js","sourceRoot":"","sources":["../../src/security/security-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/synapsexcoder/agent-delegate.d.ts

@@ -0,0 +1,128 @@
+export interface DelegationResult {
+    success: boolean;
+    output: string;
+    agent: string;
+    thoughtID?: string;
+}
+/**
+ * Structured record of a single execution for pattern learning.
+ */
+interface ExecutionRecord {
+    timestamp: number;
+    agent: string;
+    taskSummary: string;
+    success: boolean;
+    validationPassed: boolean | null;
+    executionTimeMs: number;
+    confidenceScore: number;
+    failureMode: FailureMode | null;
+    outputLengthChars: number;
+    patternIds: string[];
+}
+/**
+ * Categorized failure modes for pattern detection.
+ */
+type FailureMode = "timeout" | "malformed_output" | "empty_output" | "validation_failed" | "agent_error" | "model_refusal" | "unknown";
+/**
+ * Aggregated statistics for an agent-task combination.
+ */
+interface AgentTaskStats {
+    agent: string;
+    taskKeywords: string[];
+    totalExecutions: number;
+    successCount: number;
+    avgConfidence: number;
+    avgExecutionTimeMs: number;
+    commonFailureModes: Record<string, number>;
+    lastExecuted: number;
+}
+export declare class AgentDelegate {
+    private bridge;
+    private thoughts;
+    private context;
+    private projectRoot;
+    private learningStorePath;
+    private learningStore;
+    constructor(projectRoot: string);
+    private loadLearningStore;
+    private saveLearningStore;
+    private saveLearningStoreDebounced;
+    private _saveDebounceTimer;
+    /**
+     * Classify the failure mode from an execution result.
+     * Returns null if the result does not indicate a failure.
+     */
+    private classifyFailureMode;
+    /**
+     * Evaluate result completeness: checks for expected structural indicators
+     * in the output such as section headers, code blocks, or structured data.
+     * Returns a score 0–1.
+     */
+    private evaluateCompleteness;
+    /**
+     * Evaluate result quality: checks for absence of error indicators,
+     * reasonable output length, and overall coherence signals.
+     * Returns a score 0–1.
+     */
+    private evaluateQuality;
+    /**
+     * Evaluate pattern consistency against historical executions for the same
+     * agent. Checks whether the output length and structure are consistent
+     * with past successful executions.
+     * Returns a score 0–1.
+     */
+    private evaluatePatternConsistency;
+    /**
+     * Evaluate execution time against expected range for the agent type.
+     * Returns a score 0–1.
+     */
+    private evaluateExecutionTime;
+    /**
+     * Calculate a composite confidence score from the four evaluation dimensions.
+     */
+    private calculateConfidence;
+    /**
+     * Extract task-type → model → success-rate correlations.
+     * Identifies recurring failure modes and tracks prompt effectiveness.
+     * Updates the learning store's agentStats.
+     */
+    private detectAndRecordPatterns;
+    /**
+     * Analyze an execution result and produce structured learning insights.
+     */
+    private analyzeExecution;
+    /**
+     * Validates a file path against the project root to prevent path traversal.
+     */
+    private validateFilePath;
+    /**
+     * Delegates a task to a specific sub-agent with enriched context.
+     */
+    delegate(agentName: string, task: string, relatedFiles?: string[]): Promise<DelegationResult>;
+    /**
+     * Executes a task, validates the result with a real validation command,
+     * analyzes the outcome to extract meaningful patterns, and updates the
+     * learning store and context system with actionable insights.
+     *
+     * The confidence score is calculated from four dimensions:
+     * - Result completeness (structural analysis of output)
+     * - Result quality (absence of errors, reasonable length)
+     * - Pattern consistency (matches historical success patterns)
+     * - Execution time (within expected range)
+     */
+    learnFromExecution(agentName: string, task: string, validationCmd?: string): Promise<DelegationResult>;
+    /**
+     * Get aggregated learning statistics for all agents.
+     */
+    getAgentStats(): Record<string, AgentTaskStats>;
+    /**
+     * Get recent execution records, optionally filtered by agent.
+     */
+    getRecentExecutions(limit?: number, agent?: string): ExecutionRecord[];
+    /**
+     * Get success rate for a specific agent.
+     */
+    getSuccessRate(agent: string): number;
+}
+export {};
+//# sourceMappingURL=agent-delegate.d.ts.map

package/dist/synapsexcoder/agent-delegate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-delegate.d.ts","sourceRoot":"","sources":["../../src/synapsexcoder/agent-delegate.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,UAAU,eAAe;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAC;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;GAEG;AACH,KAAK,WAAW,GACZ,SAAS,GACT,kBAAkB,GAClB,cAAc,GACd,mBAAmB,GACnB,aAAa,GACb,eAAe,GACf,SAAS,CAAC;AAEd;;GAEG;AACH,UAAU,cAAc;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;CACtB;AAuJD,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,aAAa,CAAgB;gBAEzB,WAAW,EAAE,MAAM;IAmB/B,OAAO,CAAC,iBAAiB;IAYzB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,0BAA0B;IASlC,OAAO,CAAC,kBAAkB,CAAa;IAMvC;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAsC3B;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IA+B5B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAsCvB;;;;;OAKG;IACH,OAAO,CAAC,0BAA0B;IA4ClC;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAmB3B;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IAgJ/B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA0GxB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAQxB;;OAEG;IACG,QAAQ,CACZ,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,YAAY,GAAE,MAAM,EAAO,GAC1B,OAAO,CAAC,gBAAgB,CAAC;IA8J5B;;;;;;;;;;OAUG;IACG,kBAAkB,CACtB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,gBAAgB,CAAC;IA2G5B;;OAEG;IACH,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC;IAI/C;;OAEG;IACH,mBAAmB,CAAC,KAAK,SAAK,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,EAAE;IASlE;;OAEG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAMtC"}