whale-code 6.5.5 → 6.5.7

package/dist/local-agent/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","names":["WebSocket","os","discoverTools","exec","getSystemInfo","DEFAULT_SERVER_URL","MAX_RECONNECT_DELAY_MS","INITIAL_RECONNECT_DELAY_MS","LocalAgentConnection","ws","reconnectAttempts","reconnectTimer","intentionalClose","discoveredTools","_agentId","constructor","config","serverUrl","autoReconnect","onConnected","onDisconnected","onError","onLog","connect","log","length","map","t","name","join","Promise","resolve","reject","headers","err","connectTimeout","setTimeout","readyState","OPEN","terminate","Error","on","clearTimeout","send","type","api_key","apiKey","capabilities","platform","process","hostname","version","raw","msg","JSON","parse","toString","handleMessage","code","reason","reasonStr","scheduleReconnect","disconnect","close","connected","connectResolve","agent_id","message","error","includes","handleExec","handleToolExec","handleDiscover","request_id","command","session_id","timeout","sendResult","success","substring","result","tool","args","iface","interface","filter","count","cmd","port","action","stringify","urls","target_url","base","encodeURIComponent","capFile","cap_file","wordlist","range","rangeFlag","tools","data","path","category","running","system","requestId","delay","Math","min","pow","round"],"sources":["../../src/local-agent/connection.ts"],"sourcesContent":["/**\n * Local Agent Connection — maintains WebSocket connection to WhaleTools cloud.\n *\n * Features:\n * - Outbound WSS connection (no firewall issues)\n * - Auto-reconnection with exponential backoff\n * - Heartbeat/pong handling\n * - Command routing to executor\n */\n\nimport WebSocket from \"ws\";\nimport os from \"node:os\";\nimport { discoverTools, type DiscoveredTool } from \"./discovery.js\";\nimport { exec, getSystemInfo } from \"./executor.js\";\n\n// ============================================================================\n// CONFIG\n// ============================================================================\n\nconst DEFAULT_SERVER_URL = \"wss://whale-agent.fly.dev/agent/ws\";\nconst MAX_RECONNECT_DELAY_MS = 60_000;\nconst INITIAL_RECONNECT_DELAY_MS = 1_000;\n\nexport interface AgentConfig {\n  apiKey: string;\n  serverUrl?: string;\n  autoReconnect?: boolean;\n  onConnected?: () => void;\n  onDisconnected?: (reason: string) => void;\n  onError?: (err: Error) => void;\n  onLog?: (msg: string) => void;\n}\n\n// ============================================================================\n// AGENT CONNECTION\n// ============================================================================\n\nexport class LocalAgentConnection {\n  private ws: WebSocket | null = null;\n  private config: Required<AgentConfig>;\n  private reconnectAttempts = 0;\n  private reconnectTimer: ReturnType<typeof setTimeout> | null = null;\n  private intentionalClose = false;\n  private discoveredTools: DiscoveredTool[] = [];\n  private _agentId: string | null = null;\n\n  constructor(config: AgentConfig) {\n    this.config = {\n      serverUrl: DEFAULT_SERVER_URL,\n      autoReconnect: true,\n      onConnected: () => {},\n      onDisconnected: () => {},\n      onError: () => {},\n      onLog: () => {},\n      ...config,\n    };\n  }\n\n  /**\n   * Connect to the WhaleTools cloud gateway.\n   */\n  async connect(): Promise<void> {\n    this.intentionalClose = false;\n\n    // Discover tools before connecting\n    this.log(\"Scanning for installed security tools...\");\n    this.discoveredTools = discoverTools();\n    this.log(`Found ${this.discoveredTools.length} tools: ${this.discoveredTools.map(t => t.name).join(\", \") || \"none\"}`);\n\n    this.log(`Connecting to ${this.config.serverUrl}...`);\n\n    return new Promise((resolve, reject) => {\n      try {\n        this.ws = new WebSocket(this.config.serverUrl, {\n          headers: {\n            \"User-Agent\": \"whale-agent/1.0\",\n          },\n        });\n      } catch (err) {\n        reject(err);\n        return;\n      }\n\n      const connectTimeout = setTimeout(() => {\n        if (this.ws?.readyState !== WebSocket.OPEN) {\n          this.ws?.terminate();\n          reject(new Error(\"Connection timeout\"));\n        }\n      }, 15_000);\n\n      this.ws.on(\"open\", () => {\n        clearTimeout(connectTimeout);\n        this.reconnectAttempts = 0;\n\n        // Send auth message\n        this.send({\n          type: \"auth\",\n          api_key: this.config.apiKey,\n          capabilities: this.discoveredTools.map(t => t.name),\n          platform: process.platform,\n          hostname: os.hostname(),\n          version: \"1.0.0\",\n        });\n      });\n\n      this.ws.on(\"message\", (raw: Buffer) => {\n        let msg: any;\n        try {\n          msg = JSON.parse(raw.toString());\n        } catch {\n          this.log(\"Received invalid JSON\");\n          return;\n        }\n\n        this.handleMessage(msg, resolve);\n      });\n\n      this.ws.on(\"close\", (code, reason) => {\n        clearTimeout(connectTimeout);\n        const reasonStr = reason?.toString() || `code ${code}`;\n        this.log(`Disconnected: ${reasonStr}`);\n        this.config.onDisconnected(reasonStr);\n\n        if (!this.intentionalClose && this.config.autoReconnect) {\n          this.scheduleReconnect();\n        }\n      });\n\n      this.ws.on(\"error\", (err) => {\n        clearTimeout(connectTimeout);\n        this.config.onError(err);\n        if (this.ws?.readyState !== WebSocket.OPEN) {\n          reject(err);\n        }\n      });\n    });\n  }\n\n  /**\n   * Disconnect gracefully.\n   */\n  disconnect(): void {\n    this.intentionalClose = true;\n    if (this.reconnectTimer) {\n      clearTimeout(this.reconnectTimer);\n      this.reconnectTimer = null;\n    }\n    if (this.ws) {\n      this.ws.close(1000, \"Agent shutting down\");\n      this.ws = null;\n    }\n  }\n\n  /**\n   * Check if connected.\n   */\n  get connected(): boolean {\n    return this.ws?.readyState === WebSocket.OPEN;\n  }\n\n  // ============================================================================\n  // MESSAGE HANDLING\n  // ============================================================================\n\n  private handleMessage(msg: any, connectResolve?: (value: void) => void): void {\n    switch (msg.type) {\n      case \"authenticated\":\n        this._agentId = msg.agent_id;\n        this.log(msg.message || \"Authenticated\");\n        this.config.onConnected();\n        connectResolve?.();\n        break;\n\n      case \"error\":\n        this.log(`Server error: ${msg.error}`);\n        if (msg.error?.includes(\"Authentication\")) {\n          this.intentionalClose = true; // Don't reconnect on auth failure\n        }\n        break;\n\n      case \"ping\":\n        this.send({ type: \"pong\" });\n        break;\n\n      case \"exec\":\n        this.handleExec(msg);\n        break;\n\n      case \"tool_exec\":\n        this.handleToolExec(msg);\n        break;\n\n      case \"discover\":\n        this.handleDiscover(msg);\n        break;\n\n      case \"shutdown\":\n        this.log(\"Server requested shutdown — will reconnect\");\n        // Do NOT set intentionalClose — server restarts (deploys) should auto-reconnect\n        this.ws?.close(1000, \"Server shutdown\");\n        break;\n\n      default:\n        this.log(`Unknown message type: ${msg.type}`);\n    }\n  }\n\n  private async handleExec(msg: any): Promise<void> {\n    const { request_id, command, session_id, timeout } = msg;\n\n    if (!command) {\n      this.sendResult(request_id, { success: false, error: \"No command provided\" });\n      return;\n    }\n\n    this.log(`Executing: ${command.substring(0, 80)}${command.length > 80 ? \"...\" : \"\"}`);\n\n    try {\n      const result = await exec(command, { session_id, timeout });\n      this.sendResult(request_id, result);\n    } catch (err: any) {\n      this.sendResult(request_id, {\n        success: false,\n        error: err.message || \"Execution failed\",\n      });\n    }\n  }\n\n  private async handleToolExec(msg: any): Promise<void> {\n    const { request_id, tool, args, timeout } = msg;\n\n    this.log(`Tool exec: ${tool}`);\n\n    // Route to tool-specific handlers or fallback to generic exec\n    try {\n      let result: any;\n\n      switch (tool) {\n        case \"tshark\": {\n          const iface = args.interface || (process.platform === \"darwin\" ? \"en0\" : \"eth0\");\n          const filter = args.filter ? `-f \"${args.filter}\"` : \"\";\n          const count = args.count || 100;\n          const cmd = `tshark -i ${iface} ${filter} -c ${count} 2>&1`;\n          result = await exec(cmd, { timeout: timeout || 60000 });\n          break;\n        }\n\n        case \"burpsuite\": {\n          const port = args.port || 1337;\n          const action = args.action || \"status\";\n          if (action === \"status\") {\n            result = await exec(`curl -s http://localhost:${port}/v0.1/ 2>&1 || echo \"Burp Suite not running on port ${port}\"`, { timeout: 5000 });\n          } else if (action === \"scan\") {\n            result = await exec(`curl -s -X POST http://localhost:${port}/v0.1/scan -H \"Content-Type: application/json\" -d '${JSON.stringify({ urls: [args.target_url] })}' 2>&1`, { timeout: 10000 });\n          } else {\n            result = { success: false, error: `Unknown burpsuite action: ${action}` };\n          }\n          break;\n        }\n\n        case \"zap\": {\n          const port = args.port || 8090;\n          const action = args.action || \"status\";\n          const apiKey = args.api_key || \"\";\n          const base = `http://localhost:${port}/JSON`;\n          if (action === \"status\") {\n            result = await exec(`curl -s \"${base}/core/view/version/?apikey=${apiKey}\" 2>&1`, { timeout: 5000 });\n          } else if (action === \"spider\") {\n            result = await exec(`curl -s \"${base}/spider/action/scan/?apikey=${apiKey}&url=${encodeURIComponent(args.target_url || \"\")}\" 2>&1`, { timeout: 10000 });\n          } else if (action === \"active_scan\") {\n            result = await exec(`curl -s \"${base}/ascan/action/scan/?apikey=${apiKey}&url=${encodeURIComponent(args.target_url || \"\")}\" 2>&1`, { timeout: 10000 });\n          } else {\n            result = { success: false, error: `Unknown zap action: ${action}` };\n          }\n          break;\n        }\n\n        case \"aircrack-ng\": {\n          const action = args.action || \"help\";\n          if (action === \"scan\") {\n            const iface = args.interface || \"wlan0\";\n            result = await exec(`airmon-ng start ${iface} && airodump-ng ${iface}mon --write /tmp/airodump --output-format csv -w 10 2>&1`, { timeout: timeout || 30000 });\n          } else if (action === \"crack\") {\n            const capFile = args.cap_file;\n            const wordlist = args.wordlist || \"/usr/share/wordlists/rockyou.txt\";\n            if (!capFile) {\n              result = { success: false, error: \"cap_file is required\" };\n            } else {\n              result = await exec(`aircrack-ng -w ${wordlist} ${capFile} 2>&1`, { timeout: timeout || 300000 });\n            }\n          } else {\n            result = await exec(`aircrack-ng --help 2>&1`, { timeout: 5000 });\n          }\n          break;\n        }\n\n        case \"netdiscover\": {\n          const iface = args.interface || (process.platform === \"darwin\" ? \"en0\" : \"eth0\");\n          const range = args.range || \"\";\n          const rangeFlag = range ? `-r ${range}` : \"\";\n          result = await exec(`netdiscover -i ${iface} ${rangeFlag} -P -N 2>&1 | head -50`, { timeout: timeout || 30000 });\n          break;\n        }\n\n        default:\n          // Generic: try to run as command\n          result = await exec(`${tool} ${args.args || \"\"} 2>&1`, { timeout: timeout || 30000 });\n      }\n\n      this.sendResult(request_id, result);\n    } catch (err: any) {\n      this.sendResult(request_id, {\n        success: false,\n        error: err.message || `Tool ${tool} failed`,\n      });\n    }\n  }\n\n  private handleDiscover(msg: any): void {\n    const tools = discoverTools();\n    this.discoveredTools = tools;\n\n    // Update capabilities on the server\n    this.send({\n      type: \"tools\",\n      tools: tools.map(t => t.name),\n    });\n\n    // Also send as result\n    this.sendResult(msg.request_id, {\n      success: true,\n      data: {\n        tools: tools.map(t => ({\n          name: t.name,\n          path: t.path,\n          version: t.version,\n          category: t.category,\n          running: t.running,\n        })),\n        system: getSystemInfo(),\n      },\n    });\n  }\n\n  // ============================================================================\n  // HELPERS\n  // ============================================================================\n\n  private send(data: any): void {\n    if (this.ws?.readyState === WebSocket.OPEN) {\n      this.ws.send(JSON.stringify(data));\n    }\n  }\n\n  private sendResult(requestId: string, result: any): void {\n    this.send({\n      type: \"result\",\n      request_id: requestId,\n      ...result,\n    });\n  }\n\n  private scheduleReconnect(): void {\n    this.reconnectAttempts++;\n    const delay = Math.min(\n      INITIAL_RECONNECT_DELAY_MS * Math.pow(2, this.reconnectAttempts - 1),\n      MAX_RECONNECT_DELAY_MS,\n    );\n\n    this.log(`Reconnecting in ${Math.round(delay / 1000)}s (attempt ${this.reconnectAttempts})...`);\n\n    this.reconnectTimer = setTimeout(async () => {\n      try {\n        await this.connect();\n      } catch (err: any) {\n        this.log(`Reconnect failed: ${err.message}`);\n        // connect() will trigger close event which will schedule another reconnect\n      }\n    }, delay);\n  }\n\n  private log(msg: string): void {\n    this.config.onLog(`[whale-agent] ${msg}`);\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,OAAOA,SAAS,MAAM,IAAI;AAC1B,OAAOC,EAAE,MAAM,SAAS;AACxB,SAASC,aAAa,QAA6B,gBAAgB;AACnE,SAASC,IAAI,EAAEC,aAAa,QAAQ,eAAe;;AAEnD;AACA;AACA;;AAEA,MAAMC,kBAAkB,GAAG,oCAAoC;AAC/D,MAAMC,sBAAsB,GAAG,MAAM;AACrC,MAAMC,0BAA0B,GAAG,KAAK;AAYxC;AACA;AACA;;AAEA,OAAO,MAAMC,oBAAoB,CAAC;EACxBC,EAAE,GAAqB,IAAI;EAE3BC,iBAAiB,GAAG,CAAC;EACrBC,cAAc,GAAyC,IAAI;EAC3DC,gBAAgB,GAAG,KAAK;EACxBC,eAAe,GAAqB,EAAE;EACtCC,QAAQ,GAAkB,IAAI;EAEtCC,WAAWA,CAACC,MAAmB,EAAE;IAC/B,IAAI,CAACA,MAAM,GAAG;MACZC,SAAS,EAAEZ,kBAAkB;MAC7Ba,aAAa,EAAE,IAAI;MACnBC,WAAW,EAAEA,CAAA,KAAM,CAAC,CAAC;MACrBC,cAAc,EAAEA,CAAA,KAAM,CAAC,CAAC;MACxBC,OAAO,EAAEA,CAAA,KAAM,CAAC,CAAC;MACjBC,KAAK,EAAEA,CAAA,KAAM,CAAC,CAAC;MACf,GAAGN;IACL,CAAC;EACH;;EAEA;AACF;AACA;EACE,MAAMO,OAAOA,CAAA,EAAkB;IAC7B,IAAI,CAACX,gBAAgB,GAAG,KAAK;;IAE7B;IACA,IAAI,CAACY,GAAG,CAAC,0CAA0C,CAAC;IACpD,IAAI,CAACX,eAAe,GAAGX,aAAa,CAAC,CAAC;IACtC,IAAI,CAACsB,GAAG,CAAC,SAAS,IAAI,CAACX,eAAe,CAACY,MAAM,WAAW,IAAI,CAACZ,eAAe,CAACa,GAAG,CAACC,CAAC,IAAIA,CAAC,CAACC,IAAI,CAAC,CAACC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;IAErH,IAAI,CAACL,GAAG,CAAC,iBAAiB,IAAI,CAACR,MAAM,CAACC,SAAS,KAAK,CAAC;IAErD,OAAO,IAAIa,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;MACtC,IAAI;QACF,IAAI,CAACvB,EAAE,GAAG,IAAIT,SAAS,CAAC,IAAI,CAACgB,MAAM,CAACC,SAAS,EAAE;UAC7CgB,OAAO,EAAE;YACP,YAAY,EAAE;UAChB;QACF,CAAC,CAAC;MACJ,CAAC,CAAC,OAAOC,GAAG,EAAE;QACZF,MAAM,CAACE,GAAG,CAAC;QACX;MACF;MAEA,MAAMC,cAAc,GAAGC,UAAU,CAAC,MAAM;QACtC,IAAI,IAAI,CAAC3B,EAAE,EAAE4B,UAAU,KAAKrC,SAAS,CAACsC,IAAI,EAAE;UAC1C,IAAI,CAAC7B,EAAE,EAAE8B,SAAS,CAAC,CAAC;UACpBP,MAAM,CAAC,IAAIQ,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACzC;MACF,CAAC,EAAE,MAAM,CAAC;MAEV,IAAI,CAAC/B,EAAE,CAACgC,EAAE,CAAC,MAAM,EAAE,MAAM;QACvBC,YAAY,CAACP,cAAc,CAAC;QAC5B,IAAI,CAACzB,iBAAiB,GAAG,CAAC;;QAE1B;QACA,IAAI,CAACiC,IAAI,CAAC;UACRC,IAAI,EAAE,MAAM;UACZC,OAAO,EAAE,IAAI,CAAC7B,MAAM,CAAC8B,MAAM;UAC3BC,YAAY,EAAE,IAAI,CAAClC,eAAe,CAACa,GAAG,CAACC,CAAC,IAAIA,CAAC,CAACC,IAAI,CAAC;UACnDoB,QAAQ,EAAEC,OAAO,CAACD,QAAQ;UAC1BE,QAAQ,EAAEjD,EAAE,CAACiD,QAAQ,CAAC,CAAC;UACvBC,OAAO,EAAE;QACX,CAAC,CAAC;MACJ,CAAC,CAAC;MAEF,IAAI,CAAC1C,EAAE,CAACgC,EAAE,CAAC,SAAS,EAAGW,GAAW,IAAK;QACrC,IAAIC,GAAQ;QACZ,IAAI;UACFA,GAAG,GAAGC,IAAI,CAACC,KAAK,CAACH,GAAG,CAACI,QAAQ,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,MAAM;UACN,IAAI,CAAChC,GAAG,CAAC,uBAAuB,CAAC;UACjC;QACF;QAEA,IAAI,CAACiC,aAAa,CAACJ,GAAG,EAAEtB,OAAO,CAAC;MAClC,CAAC,CAAC;MAEF,IAAI,CAACtB,EAAE,CAACgC,EAAE,CAAC,OAAO,EAAE,CAACiB,IAAI,EAAEC,MAAM,KAAK;QACpCjB,YAAY,CAACP,cAAc,CAAC;QAC5B,MAAMyB,SAAS,GAAGD,MAAM,EAAEH,QAAQ,CAAC,CAAC,IAAI,QAAQE,IAAI,EAAE;QACtD,IAAI,CAAClC,GAAG,CAAC,iBAAiBoC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC5C,MAAM,CAACI,cAAc,CAACwC,SAAS,CAAC;QAErC,IAAI,CAAC,IAAI,CAAChD,gBAAgB,IAAI,IAAI,CAACI,MAAM,CAACE,aAAa,EAAE;UACvD,IAAI,CAAC2C,iBAAiB,CAAC,CAAC;QAC1B;MACF,CAAC,CAAC;MAEF,IAAI,CAACpD,EAAE,CAACgC,EAAE,CAAC,OAAO,EAAGP,GAAG,IAAK;QAC3BQ,YAAY,CAACP,cAAc,CAAC;QAC5B,IAAI,CAACnB,MAAM,CAACK,OAAO,CAACa,GAAG,CAAC;QACxB,IAAI,IAAI,CAACzB,EAAE,EAAE4B,UAAU,KAAKrC,SAAS,CAACsC,IAAI,EAAE;UAC1CN,MAAM,CAACE,GAAG,CAAC;QACb;MACF,CAAC,CAAC;IACJ,CAAC,CAAC;EACJ;;EAEA;AACF;AACA;EACE4B,UAAUA,CAAA,EAAS;IACjB,IAAI,CAAClD,gBAAgB,GAAG,IAAI;IAC5B,IAAI,IAAI,CAACD,cAAc,EAAE;MACvB+B,YAAY,CAAC,IAAI,CAAC/B,cAAc,CAAC;MACjC,IAAI,CAACA,cAAc,GAAG,IAAI;IAC5B;IACA,IAAI,IAAI,CAACF,EAAE,EAAE;MACX,IAAI,CAACA,EAAE,CAACsD,KAAK,CAAC,IAAI,EAAE,qBAAqB,CAAC;MAC1C,IAAI,CAACtD,EAAE,GAAG,IAAI;IAChB;EACF;;EAEA;AACF;AACA;EACE,IAAIuD,SAASA,CAAA,EAAY;IACvB,OAAO,IAAI,CAACvD,EAAE,EAAE4B,UAAU,KAAKrC,SAAS,CAACsC,IAAI;EAC/C;;EAEA;EACA;EACA;;EAEQmB,aAAaA,CAACJ,GAAQ,EAAEY,cAAsC,EAAQ;IAC5E,QAAQZ,GAAG,CAACT,IAAI;MACd,KAAK,eAAe;QAClB,IAAI,CAAC9B,QAAQ,GAAGuC,GAAG,CAACa,QAAQ;QAC5B,IAAI,CAAC1C,GAAG,CAAC6B,GAAG,CAACc,OAAO,IAAI,eAAe,CAAC;QACxC,IAAI,CAACnD,MAAM,CAACG,WAAW,CAAC,CAAC;QACzB8C,cAAc,GAAG,CAAC;QAClB;MAEF,KAAK,OAAO;QACV,IAAI,CAACzC,GAAG,CAAC,iBAAiB6B,GAAG,CAACe,KAAK,EAAE,CAAC;QACtC,IAAIf,GAAG,CAACe,KAAK,EAAEC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;UACzC,IAAI,CAACzD,gBAAgB,GAAG,IAAI,CAAC,CAAC;QAChC;QACA;MAEF,KAAK,MAAM;QACT,IAAI,CAAC+B,IAAI,CAAC;UAAEC,IAAI,EAAE;QAAO,CAAC,CAAC;QAC3B;MAEF,KAAK,MAAM;QACT,IAAI,CAAC0B,UAAU,CAACjB,GAAG,CAAC;QACpB;MAEF,KAAK,WAAW;QACd,IAAI,CAACkB,cAAc,CAAClB,GAAG,CAAC;QACxB;MAEF,KAAK,UAAU;QACb,IAAI,CAACmB,cAAc,CAACnB,GAAG,CAAC;QACxB;MAEF,KAAK,UAAU;QACb,IAAI,CAAC7B,GAAG,CAAC,4CAA4C,CAAC;QACtD;QACA,IAAI,CAACf,EAAE,EAAEsD,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACvC;MAEF;QACE,IAAI,CAACvC,GAAG,CAAC,yBAAyB6B,GAAG,CAACT,IAAI,EAAE,CAAC;IACjD;EACF;EAEA,MAAc0B,UAAUA,CAACjB,GAAQ,EAAiB;IAChD,MAAM;MAAEoB,UAAU;MAAEC,OAAO;MAAEC,UAAU;MAAEC;IAAQ,CAAC,GAAGvB,GAAG;IAExD,IAAI,CAACqB,OAAO,EAAE;MACZ,IAAI,CAACG,UAAU,CAACJ,UAAU,EAAE;QAAEK,OAAO,EAAE,KAAK;QAAEV,KAAK,EAAE;MAAsB,CAAC,CAAC;MAC7E;IACF;IAEA,IAAI,CAAC5C,GAAG,CAAC,cAAckD,OAAO,CAACK,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAGL,OAAO,CAACjD,MAAM,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,EAAE,CAAC;IAErF,IAAI;MACF,MAAMuD,MAAM,GAAG,MAAM7E,IAAI,CAACuE,OAAO,EAAE;QAAEC,UAAU;QAAEC;MAAQ,CAAC,CAAC;MAC3D,IAAI,CAACC,UAAU,CAACJ,UAAU,EAAEO,MAAM,CAAC;IACrC,CAAC,CAAC,OAAO9C,GAAQ,EAAE;MACjB,IAAI,CAAC2C,UAAU,CAACJ,UAAU,EAAE;QAC1BK,OAAO,EAAE,KAAK;QACdV,KAAK,EAAElC,GAAG,CAACiC,OAAO,IAAI;MACxB,CAAC,CAAC;IACJ;EACF;EAEA,MAAcI,cAAcA,CAAClB,GAAQ,EAAiB;IACpD,MAAM;MAAEoB,UAAU;MAAEQ,IAAI;MAAEC,IAAI;MAAEN;IAAQ,CAAC,GAAGvB,GAAG;IAE/C,IAAI,CAAC7B,GAAG,CAAC,cAAcyD,IAAI,EAAE,CAAC;;IAE9B;IACA,IAAI;MACF,IAAID,MAAW;MAEf,QAAQC,IAAI;QACV,KAAK,QAAQ;UAAE;YACb,MAAME,KAAK,GAAGD,IAAI,CAACE,SAAS,KAAKnC,OAAO,CAACD,QAAQ,KAAK,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;YAChF,MAAMqC,MAAM,GAAGH,IAAI,CAACG,MAAM,GAAG,OAAOH,IAAI,CAACG,MAAM,GAAG,GAAG,EAAE;YACvD,MAAMC,KAAK,GAAGJ,IAAI,CAACI,KAAK,IAAI,GAAG;YAC/B,MAAMC,GAAG,GAAG,aAAaJ,KAAK,IAAIE,MAAM,OAAOC,KAAK,OAAO;YAC3DN,MAAM,GAAG,MAAM7E,IAAI,CAACoF,GAAG,EAAE;cAAEX,OAAO,EAAEA,OAAO,IAAI;YAAM,CAAC,CAAC;YACvD;UACF;QAEA,KAAK,WAAW;UAAE;YAChB,MAAMY,IAAI,GAAGN,IAAI,CAACM,IAAI,IAAI,IAAI;YAC9B,MAAMC,MAAM,GAAGP,IAAI,CAACO,MAAM,IAAI,QAAQ;YACtC,IAAIA,MAAM,KAAK,QAAQ,EAAE;cACvBT,MAAM,GAAG,MAAM7E,IAAI,CAAC,4BAA4BqF,IAAI,uDAAuDA,IAAI,GAAG,EAAE;gBAAEZ,OAAO,EAAE;cAAK,CAAC,CAAC;YACxI,CAAC,MAAM,IAAIa,MAAM,KAAK,MAAM,EAAE;cAC5BT,MAAM,GAAG,MAAM7E,IAAI,CAAC,oCAAoCqF,IAAI,sDAAsDlC,IAAI,CAACoC,SAAS,CAAC;gBAAEC,IAAI,EAAE,CAACT,IAAI,CAACU,UAAU;cAAE,CAAC,CAAC,QAAQ,EAAE;gBAAEhB,OAAO,EAAE;cAAM,CAAC,CAAC;YAC5L,CAAC,MAAM;cACLI,MAAM,GAAG;gBAAEF,OAAO,EAAE,KAAK;gBAAEV,KAAK,EAAE,6BAA6BqB,MAAM;cAAG,CAAC;YAC3E;YACA;UACF;QAEA,KAAK,KAAK;UAAE;YACV,MAAMD,IAAI,GAAGN,IAAI,CAACM,IAAI,IAAI,IAAI;YAC9B,MAAMC,MAAM,GAAGP,IAAI,CAACO,MAAM,IAAI,QAAQ;YACtC,MAAM3C,MAAM,GAAGoC,IAAI,CAACrC,OAAO,IAAI,EAAE;YACjC,MAAMgD,IAAI,GAAG,oBAAoBL,IAAI,OAAO;YAC5C,IAAIC,MAAM,KAAK,QAAQ,EAAE;cACvBT,MAAM,GAAG,MAAM7E,IAAI,CAAC,YAAY0F,IAAI,8BAA8B/C,MAAM,QAAQ,EAAE;gBAAE8B,OAAO,EAAE;cAAK,CAAC,CAAC;YACtG,CAAC,MAAM,IAAIa,MAAM,KAAK,QAAQ,EAAE;cAC9BT,MAAM,GAAG,MAAM7E,IAAI,CAAC,YAAY0F,IAAI,+BAA+B/C,MAAM,QAAQgD,kBAAkB,CAACZ,IAAI,CAACU,UAAU,IAAI,EAAE,CAAC,QAAQ,EAAE;gBAAEhB,OAAO,EAAE;cAAM,CAAC,CAAC;YACzJ,CAAC,MAAM,IAAIa,MAAM,KAAK,aAAa,EAAE;cACnCT,MAAM,GAAG,MAAM7E,IAAI,CAAC,YAAY0F,IAAI,8BAA8B/C,MAAM,QAAQgD,kBAAkB,CAACZ,IAAI,CAACU,UAAU,IAAI,EAAE,CAAC,QAAQ,EAAE;gBAAEhB,OAAO,EAAE;cAAM,CAAC,CAAC;YACxJ,CAAC,MAAM;cACLI,MAAM,GAAG;gBAAEF,OAAO,EAAE,KAAK;gBAAEV,KAAK,EAAE,uBAAuBqB,MAAM;cAAG,CAAC;YACrE;YACA;UACF;QAEA,KAAK,aAAa;UAAE;YAClB,MAAMA,MAAM,GAAGP,IAAI,CAACO,MAAM,IAAI,MAAM;YACpC,IAAIA,MAAM,KAAK,MAAM,EAAE;cACrB,MAAMN,KAAK,GAAGD,IAAI,CAACE,SAAS,IAAI,OAAO;cACvCJ,MAAM,GAAG,MAAM7E,IAAI,CAAC,mBAAmBgF,KAAK,mBAAmBA,KAAK,0DAA0D,EAAE;gBAAEP,OAAO,EAAEA,OAAO,IAAI;cAAM,CAAC,CAAC;YAChK,CAAC,MAAM,IAAIa,MAAM,KAAK,OAAO,EAAE;cAC7B,MAAMM,OAAO,GAAGb,IAAI,CAACc,QAAQ;cAC7B,MAAMC,QAAQ,GAAGf,IAAI,CAACe,QAAQ,IAAI,kCAAkC;cACpE,IAAI,CAACF,OAAO,EAAE;gBACZf,MAAM,GAAG;kBAAEF,OAAO,EAAE,KAAK;kBAAEV,KAAK,EAAE;gBAAuB,CAAC;cAC5D,CAAC,MAAM;gBACLY,MAAM,GAAG,MAAM7E,IAAI,CAAC,kBAAkB8F,QAAQ,IAAIF,OAAO,OAAO,EAAE;kBAAEnB,OAAO,EAAEA,OAAO,IAAI;gBAAO,CAAC,CAAC;cACnG;YACF,CAAC,MAAM;cACLI,MAAM,GAAG,MAAM7E,IAAI,CAAC,yBAAyB,EAAE;gBAAEyE,OAAO,EAAE;cAAK,CAAC,CAAC;YACnE;YACA;UACF;QAEA,KAAK,aAAa;UAAE;YAClB,MAAMO,KAAK,GAAGD,IAAI,CAACE,SAAS,KAAKnC,OAAO,CAACD,QAAQ,KAAK,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;YAChF,MAAMkD,KAAK,GAAGhB,IAAI,CAACgB,KAAK,IAAI,EAAE;YAC9B,MAAMC,SAAS,GAAGD,KAAK,GAAG,MAAMA,KAAK,EAAE,GAAG,EAAE;YAC5ClB,MAAM,GAAG,MAAM7E,IAAI,CAAC,kBAAkBgF,KAAK,IAAIgB,SAAS,wBAAwB,EAAE;cAAEvB,OAAO,EAAEA,OAAO,IAAI;YAAM,CAAC,CAAC;YAChH;UACF;QAEA;UACE;UACAI,MAAM,GAAG,MAAM7E,IAAI,CAAC,GAAG8E,IAAI,IAAIC,IAAI,CAACA,IAAI,IAAI,EAAE,OAAO,EAAE;YAAEN,OAAO,EAAEA,OAAO,IAAI;UAAM,CAAC,CAAC;MACzF;MAEA,IAAI,CAACC,UAAU,CAACJ,UAAU,EAAEO,MAAM,CAAC;IACrC,CAAC,CAAC,OAAO9C,GAAQ,EAAE;MACjB,IAAI,CAAC2C,UAAU,CAACJ,UAAU,EAAE;QAC1BK,OAAO,EAAE,KAAK;QACdV,KAAK,EAAElC,GAAG,CAACiC,OAAO,IAAI,QAAQc,IAAI;MACpC,CAAC,CAAC;IACJ;EACF;EAEQT,cAAcA,CAACnB,GAAQ,EAAQ;IACrC,MAAM+C,KAAK,GAAGlG,aAAa,CAAC,CAAC;IAC7B,IAAI,CAACW,eAAe,GAAGuF,KAAK;;IAE5B;IACA,IAAI,CAACzD,IAAI,CAAC;MACRC,IAAI,EAAE,OAAO;MACbwD,KAAK,EAAEA,KAAK,CAAC1E,GAAG,CAACC,CAAC,IAAIA,CAAC,CAACC,IAAI;IAC9B,CAAC,CAAC;;IAEF;IACA,IAAI,CAACiD,UAAU,CAACxB,GAAG,CAACoB,UAAU,EAAE;MAC9BK,OAAO,EAAE,IAAI;MACbuB,IAAI,EAAE;QACJD,KAAK,EAAEA,KAAK,CAAC1E,GAAG,CAACC,CAAC,KAAK;UACrBC,IAAI,EAAED,CAAC,CAACC,IAAI;UACZ0E,IAAI,EAAE3E,CAAC,CAAC2E,IAAI;UACZnD,OAAO,EAAExB,CAAC,CAACwB,OAAO;UAClBoD,QAAQ,EAAE5E,CAAC,CAAC4E,QAAQ;UACpBC,OAAO,EAAE7E,CAAC,CAAC6E;QACb,CAAC,CAAC,CAAC;QACHC,MAAM,EAAErG,aAAa,CAAC;MACxB;IACF,CAAC,CAAC;EACJ;;EAEA;EACA;EACA;;EAEQuC,IAAIA,CAAC0D,IAAS,EAAQ;IAC5B,IAAI,IAAI,CAAC5F,EAAE,EAAE4B,UAAU,KAAKrC,SAAS,CAACsC,IAAI,EAAE;MAC1C,IAAI,CAAC7B,EAAE,CAACkC,IAAI,CAACW,IAAI,CAACoC,SAAS,CAACW,IAAI,CAAC,CAAC;IACpC;EACF;EAEQxB,UAAUA,CAAC6B,SAAiB,EAAE1B,MAAW,EAAQ;IACvD,IAAI,CAACrC,IAAI,CAAC;MACRC,IAAI,EAAE,QAAQ;MACd6B,UAAU,EAAEiC,SAAS;MACrB,GAAG1B;IACL,CAAC,CAAC;EACJ;EAEQnB,iBAAiBA,CAAA,EAAS;IAChC,IAAI,CAACnD,iBAAiB,EAAE;IACxB,MAAMiG,KAAK,GAAGC,IAAI,CAACC,GAAG,CACpBtG,0BAA0B,GAAGqG,IAAI,CAACE,GAAG,CAAC,CAAC,EAAE,IAAI,CAACpG,iBAAiB,GAAG,CAAC,CAAC,EACpEJ,sBACF,CAAC;IAED,IAAI,CAACkB,GAAG,CAAC,mBAAmBoF,IAAI,CAACG,KAAK,CAACJ,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,CAACjG,iBAAiB,MAAM,CAAC;IAE/F,IAAI,CAACC,cAAc,GAAGyB,UAAU,CAAC,YAAY;MAC3C,IAAI;QACF,MAAM,IAAI,CAACb,OAAO,CAAC,CAAC;MACtB,CAAC,CAAC,OAAOW,GAAQ,EAAE;QACjB,IAAI,CAACV,GAAG,CAAC,qBAAqBU,GAAG,CAACiC,OAAO,EAAE,CAAC;QAC5C;MACF;IACF,CAAC,EAAEwC,KAAK,CAAC;EACX;EAEQnF,GAAGA,CAAC6B,GAAW,EAAQ;IAC7B,IAAI,CAACrC,MAAM,CAACM,KAAK,CAAC,iBAAiB+B,GAAG,EAAE,CAAC;EAC3C;AACF","ignoreList":[]}

package/dist/local-agent/discovery.js

@@ -4,143 +4,280 @@
  * Scans PATH for known security tools and checks for running services (Burp, ZAP).
  * Returns a capabilities list that the gateway uses for routing.
  */
+
 import { execSync } from "node:child_process";
 const TOOL_SPECS = [
-    // Network Scanning
-    { name: "nmap", binaries: ["nmap"], category: "network_scanning", versionFlag: "--version" },
-    { name: "masscan", binaries: ["masscan"], category: "network_scanning", versionFlag: "--version" },
-    { name: "netdiscover", binaries: ["netdiscover"], category: "network_scanning" },
-    // Packet Analysis
-    { name: "tshark", binaries: ["tshark"], category: "packet_analysis", versionFlag: "--version" },
-    { name: "wireshark", binaries: ["wireshark"], category: "packet_analysis", versionFlag: "--version" },
-    { name: "tcpdump", binaries: ["tcpdump"], category: "packet_analysis", versionFlag: "--version" },
-    // Web Application Security
-    { name: "sqlmap", binaries: ["sqlmap"], category: "web_security", versionFlag: "--version" },
-    { name: "gobuster", binaries: ["gobuster"], category: "web_security", versionFlag: "version" },
-    { name: "nikto", binaries: ["nikto"], category: "web_security", versionFlag: "-Version" },
-    { name: "dirb", binaries: ["dirb"], category: "web_security" },
-    { name: "ffuf", binaries: ["ffuf"], category: "web_security", versionFlag: "-V" },
-    {
-        name: "burpsuite",
-        binaries: ["burpsuite", "BurpSuiteCommunity", "BurpSuitePro"],
-        category: "web_security",
-        serviceCheck: () => checkPort(8080) || checkPort(1337),
-    },
-    {
-        name: "zap",
-        binaries: ["zaproxy", "zap", "zap.sh"],
-        category: "web_security",
-        serviceCheck: () => checkPort(8090),
-    },
-    // Exploitation
-    { name: "metasploit", binaries: ["msfconsole", "msfvenom"], category: "exploitation", versionFlag: "--version" },
-    { name: "setoolkit", binaries: ["setoolkit", "se-toolkit"], category: "exploitation" },
-    // Password Cracking
-    { name: "john", binaries: ["john"], category: "password_cracking", versionFlag: "--help" },
-    { name: "hashcat", binaries: ["hashcat"], category: "password_cracking", versionFlag: "--version" },
-    { name: "hydra", binaries: ["hydra"], category: "password_cracking", versionFlag: "-h" },
-    // Wireless
-    { name: "aircrack-ng", binaries: ["aircrack-ng"], category: "wireless", versionFlag: "--help" },
-    { name: "airodump-ng", binaries: ["airodump-ng"], category: "wireless" },
-    { name: "aireplay-ng", binaries: ["aireplay-ng"], category: "wireless" },
-    { name: "wifite", binaries: ["wifite", "wifite2"], category: "wireless" },
-    // Reconnaissance
-    { name: "recon-ng", binaries: ["recon-ng"], category: "recon" },
-    { name: "maltego", binaries: ["maltego"], category: "recon" },
-    { name: "theharvester", binaries: ["theHarvester", "theharvester"], category: "recon" },
-    { name: "amass", binaries: ["amass"], category: "recon", versionFlag: "version" },
-    { name: "subfinder", binaries: ["subfinder"], category: "recon", versionFlag: "-version" },
-    // Post-Exploitation
-    { name: "responder", binaries: ["responder", "Responder.py"], category: "post_exploitation" },
-    { name: "impacket", binaries: ["impacket-smbclient", "impacket-secretsdump"], category: "post_exploitation" },
-    { name: "evil-winrm", binaries: ["evil-winrm"], category: "post_exploitation" },
-    { name: "chisel", binaries: ["chisel"], category: "post_exploitation" },
-    // Forensics
-    { name: "autopsy", binaries: ["autopsy"], category: "forensics" },
-    { name: "volatility", binaries: ["vol.py", "volatility3", "vol3"], category: "forensics" },
-    { name: "binwalk", binaries: ["binwalk"], category: "forensics", versionFlag: "--help" },
-    // Misc
-    { name: "curl", binaries: ["curl"], category: "utility", versionFlag: "--version" },
-    { name: "wget", binaries: ["wget"], category: "utility", versionFlag: "--version" },
-    { name: "python3", binaries: ["python3"], category: "utility", versionFlag: "--version" },
-    { name: "docker", binaries: ["docker"], category: "utility", versionFlag: "--version" },
-];
+// Network Scanning
+{
+  name: "nmap",
+  binaries: ["nmap"],
+  category: "network_scanning",
+  versionFlag: "--version"
+}, {
+  name: "masscan",
+  binaries: ["masscan"],
+  category: "network_scanning",
+  versionFlag: "--version"
+}, {
+  name: "netdiscover",
+  binaries: ["netdiscover"],
+  category: "network_scanning"
+},
+// Packet Analysis
+{
+  name: "tshark",
+  binaries: ["tshark"],
+  category: "packet_analysis",
+  versionFlag: "--version"
+}, {
+  name: "wireshark",
+  binaries: ["wireshark"],
+  category: "packet_analysis",
+  versionFlag: "--version"
+}, {
+  name: "tcpdump",
+  binaries: ["tcpdump"],
+  category: "packet_analysis",
+  versionFlag: "--version"
+},
+// Web Application Security
+{
+  name: "sqlmap",
+  binaries: ["sqlmap"],
+  category: "web_security",
+  versionFlag: "--version"
+}, {
+  name: "gobuster",
+  binaries: ["gobuster"],
+  category: "web_security",
+  versionFlag: "version"
+}, {
+  name: "nikto",
+  binaries: ["nikto"],
+  category: "web_security",
+  versionFlag: "-Version"
+}, {
+  name: "dirb",
+  binaries: ["dirb"],
+  category: "web_security"
+}, {
+  name: "ffuf",
+  binaries: ["ffuf"],
+  category: "web_security",
+  versionFlag: "-V"
+}, {
+  name: "burpsuite",
+  binaries: ["burpsuite", "BurpSuiteCommunity", "BurpSuitePro"],
+  category: "web_security",
+  serviceCheck: () => checkPort(8080) || checkPort(1337)
+}, {
+  name: "zap",
+  binaries: ["zaproxy", "zap", "zap.sh"],
+  category: "web_security",
+  serviceCheck: () => checkPort(8090)
+},
+// Exploitation
+{
+  name: "metasploit",
+  binaries: ["msfconsole", "msfvenom"],
+  category: "exploitation",
+  versionFlag: "--version"
+}, {
+  name: "setoolkit",
+  binaries: ["setoolkit", "se-toolkit"],
+  category: "exploitation"
+},
+// Password Cracking
+{
+  name: "john",
+  binaries: ["john"],
+  category: "password_cracking",
+  versionFlag: "--help"
+}, {
+  name: "hashcat",
+  binaries: ["hashcat"],
+  category: "password_cracking",
+  versionFlag: "--version"
+}, {
+  name: "hydra",
+  binaries: ["hydra"],
+  category: "password_cracking",
+  versionFlag: "-h"
+},
+// Wireless
+{
+  name: "aircrack-ng",
+  binaries: ["aircrack-ng"],
+  category: "wireless",
+  versionFlag: "--help"
+}, {
+  name: "airodump-ng",
+  binaries: ["airodump-ng"],
+  category: "wireless"
+}, {
+  name: "aireplay-ng",
+  binaries: ["aireplay-ng"],
+  category: "wireless"
+}, {
+  name: "wifite",
+  binaries: ["wifite", "wifite2"],
+  category: "wireless"
+},
+// Reconnaissance
+{
+  name: "recon-ng",
+  binaries: ["recon-ng"],
+  category: "recon"
+}, {
+  name: "maltego",
+  binaries: ["maltego"],
+  category: "recon"
+}, {
+  name: "theharvester",
+  binaries: ["theHarvester", "theharvester"],
+  category: "recon"
+}, {
+  name: "amass",
+  binaries: ["amass"],
+  category: "recon",
+  versionFlag: "version"
+}, {
+  name: "subfinder",
+  binaries: ["subfinder"],
+  category: "recon",
+  versionFlag: "-version"
+},
+// Post-Exploitation
+{
+  name: "responder",
+  binaries: ["responder", "Responder.py"],
+  category: "post_exploitation"
+}, {
+  name: "impacket",
+  binaries: ["impacket-smbclient", "impacket-secretsdump"],
+  category: "post_exploitation"
+}, {
+  name: "evil-winrm",
+  binaries: ["evil-winrm"],
+  category: "post_exploitation"
+}, {
+  name: "chisel",
+  binaries: ["chisel"],
+  category: "post_exploitation"
+},
+// Forensics
+{
+  name: "autopsy",
+  binaries: ["autopsy"],
+  category: "forensics"
+}, {
+  name: "volatility",
+  binaries: ["vol.py", "volatility3", "vol3"],
+  category: "forensics"
+}, {
+  name: "binwalk",
+  binaries: ["binwalk"],
+  category: "forensics",
+  versionFlag: "--help"
+},
+// Misc
+{
+  name: "curl",
+  binaries: ["curl"],
+  category: "utility",
+  versionFlag: "--version"
+}, {
+  name: "wget",
+  binaries: ["wget"],
+  category: "utility",
+  versionFlag: "--version"
+}, {
+  name: "python3",
+  binaries: ["python3"],
+  category: "utility",
+  versionFlag: "--version"
+}, {
+  name: "docker",
+  binaries: ["docker"],
+  category: "utility",
+  versionFlag: "--version"
+}];
 export function discoverTools() {
-    const discovered = [];
-    for (const spec of TOOL_SPECS) {
-        for (const bin of spec.binaries) {
-            const path = which(bin);
-            if (!path)
-                continue;
-            const tool = {
-                name: spec.name,
-                path,
-                category: spec.category,
-            };
-            // Try to get version
-            if (spec.versionFlag) {
-                try {
-                    const output = execSync(`${bin} ${spec.versionFlag} 2>&1`, {
-                        timeout: 5000,
-                        encoding: "utf8",
-                        stdio: ["pipe", "pipe", "pipe"],
-                    });
-                    // Extract version number from first line
-                    const match = output.match(/(\d+\.\d+[\.\d]*)/);
-                    if (match)
-                        tool.version = match[1];
-                }
-                catch {
-                    // Tool exists but version check failed — still valid
-                }
-            }
-            // Check if running as service
-            if (spec.serviceCheck) {
-                try {
-                    tool.running = spec.serviceCheck();
-                }
-                catch {
-                    tool.running = false;
-                }
-            }
-            discovered.push(tool);
-            break; // Found one binary for this tool, move to next
+  const discovered = [];
+  for (const spec of TOOL_SPECS) {
+    for (const bin of spec.binaries) {
+      const path = which(bin);
+      if (!path) continue;
+      const tool = {
+        name: spec.name,
+        path,
+        category: spec.category
+      };
+
+      // Try to get version
+      if (spec.versionFlag) {
+        try {
+          const output = execSync(`${bin} ${spec.versionFlag} 2>&1`, {
+            timeout: 5000,
+            encoding: "utf8",
+            stdio: ["pipe", "pipe", "pipe"]
+          });
+          // Extract version number from first line
+          const match = output.match(/(\d+\.\d+[\.\d]*)/);
+          if (match) tool.version = match[1];
+        } catch {
+          // Tool exists but version check failed — still valid
+        }
+      }
+
+      // Check if running as service
+      if (spec.serviceCheck) {
+        try {
+          tool.running = spec.serviceCheck();
+        } catch {
+          tool.running = false;
         }
+      }
+      discovered.push(tool);
+      break; // Found one binary for this tool, move to next
     }
-    return discovered;
+  }
+  return discovered;
 }
+
 /**
  * Get just the tool names (for capabilities list).
  */
 export function discoverToolNames() {
-    return discoverTools().map(t => t.name);
+  return discoverTools().map(t => t.name);
 }
+
 // ============================================================================
 // HELPERS
 // ============================================================================
+
 function which(binary) {
-    try {
-        const result = execSync(`which ${binary} 2>/dev/null`, {
-            timeout: 3000,
-            encoding: "utf8",
-            stdio: ["pipe", "pipe", "pipe"],
-        }).trim();
-        return result || null;
-    }
-    catch {
-        return null;
-    }
+  try {
+    const result = execSync(`which ${binary} 2>/dev/null`, {
+      timeout: 3000,
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "pipe"]
+    }).trim();
+    return result || null;
+  } catch {
+    return null;
+  }
 }
 function checkPort(port) {
-    try {
-        execSync(`lsof -i :${port} -sTCP:LISTEN 2>/dev/null | head -1`, {
-            timeout: 3000,
-            encoding: "utf8",
-            stdio: ["pipe", "pipe", "pipe"],
-        });
-        return true;
-    }
-    catch {
-        return false;
-    }
+  try {
+    execSync(`lsof -i :${port} -sTCP:LISTEN 2>/dev/null | head -1`, {
+      timeout: 3000,
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    return true;
+  } catch {
+    return false;
+  }
 }
+//# sourceMappingURL=discovery.js.map

package/dist/local-agent/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","names":["execSync","TOOL_SPECS","name","binaries","category","versionFlag","serviceCheck","checkPort","discoverTools","discovered","spec","bin","path","which","tool","output","timeout","encoding","stdio","match","version","running","push","discoverToolNames","map","t","binary","result","trim","port"],"sources":["../../src/local-agent/discovery.ts"],"sourcesContent":["/**\n * Local Tool Discovery — auto-detect security tools installed on the user's machine.\n *\n * Scans PATH for known security tools and checks for running services (Burp, ZAP).\n * Returns a capabilities list that the gateway uses for routing.\n */\n\nimport { execSync } from \"node:child_process\";\n\nexport interface DiscoveredTool {\n  name: string;\n  path: string;\n  version?: string;\n  category: string;\n  running?: boolean; // for service-based tools\n}\n\ninterface ToolSpec {\n  name: string;\n  binaries: string[];            // possible binary names\n  category: string;\n  versionFlag?: string;          // flag to get version (default: --version)\n  serviceCheck?: () => boolean;  // check if running as service\n}\n\nconst TOOL_SPECS: ToolSpec[] = [\n  // Network Scanning\n  { name: \"nmap\", binaries: [\"nmap\"], category: \"network_scanning\", versionFlag: \"--version\" },\n  { name: \"masscan\", binaries: [\"masscan\"], category: \"network_scanning\", versionFlag: \"--version\" },\n  { name: \"netdiscover\", binaries: [\"netdiscover\"], category: \"network_scanning\" },\n\n  // Packet Analysis\n  { name: \"tshark\", binaries: [\"tshark\"], category: \"packet_analysis\", versionFlag: \"--version\" },\n  { name: \"wireshark\", binaries: [\"wireshark\"], category: \"packet_analysis\", versionFlag: \"--version\" },\n  { name: \"tcpdump\", binaries: [\"tcpdump\"], category: \"packet_analysis\", versionFlag: \"--version\" },\n\n  // Web Application Security\n  { name: \"sqlmap\", binaries: [\"sqlmap\"], category: \"web_security\", versionFlag: \"--version\" },\n  { name: \"gobuster\", binaries: [\"gobuster\"], category: \"web_security\", versionFlag: \"version\" },\n  { name: \"nikto\", binaries: [\"nikto\"], category: \"web_security\", versionFlag: \"-Version\" },\n  { name: \"dirb\", binaries: [\"dirb\"], category: \"web_security\" },\n  { name: \"ffuf\", binaries: [\"ffuf\"], category: \"web_security\", versionFlag: \"-V\" },\n  {\n    name: \"burpsuite\",\n    binaries: [\"burpsuite\", \"BurpSuiteCommunity\", \"BurpSuitePro\"],\n    category: \"web_security\",\n    serviceCheck: () => checkPort(8080) || checkPort(1337),\n  },\n  {\n    name: \"zap\",\n    binaries: [\"zaproxy\", \"zap\", \"zap.sh\"],\n    category: \"web_security\",\n    serviceCheck: () => checkPort(8090),\n  },\n\n  // Exploitation\n  { name: \"metasploit\", binaries: [\"msfconsole\", \"msfvenom\"], category: \"exploitation\", versionFlag: \"--version\" },\n  { name: \"setoolkit\", binaries: [\"setoolkit\", \"se-toolkit\"], category: \"exploitation\" },\n\n  // Password Cracking\n  { name: \"john\", binaries: [\"john\"], category: \"password_cracking\", versionFlag: \"--help\" },\n  { name: \"hashcat\", binaries: [\"hashcat\"], category: \"password_cracking\", versionFlag: \"--version\" },\n  { name: \"hydra\", binaries: [\"hydra\"], category: \"password_cracking\", versionFlag: \"-h\" },\n\n  // Wireless\n  { name: \"aircrack-ng\", binaries: [\"aircrack-ng\"], category: \"wireless\", versionFlag: \"--help\" },\n  { name: \"airodump-ng\", binaries: [\"airodump-ng\"], category: \"wireless\" },\n  { name: \"aireplay-ng\", binaries: [\"aireplay-ng\"], category: \"wireless\" },\n  { name: \"wifite\", binaries: [\"wifite\", \"wifite2\"], category: \"wireless\" },\n\n  // Reconnaissance\n  { name: \"recon-ng\", binaries: [\"recon-ng\"], category: \"recon\" },\n  { name: \"maltego\", binaries: [\"maltego\"], category: \"recon\" },\n  { name: \"theharvester\", binaries: [\"theHarvester\", \"theharvester\"], category: \"recon\" },\n  { name: \"amass\", binaries: [\"amass\"], category: \"recon\", versionFlag: \"version\" },\n  { name: \"subfinder\", binaries: [\"subfinder\"], category: \"recon\", versionFlag: \"-version\" },\n\n  // Post-Exploitation\n  { name: \"responder\", binaries: [\"responder\", \"Responder.py\"], category: \"post_exploitation\" },\n  { name: \"impacket\", binaries: [\"impacket-smbclient\", \"impacket-secretsdump\"], category: \"post_exploitation\" },\n  { name: \"evil-winrm\", binaries: [\"evil-winrm\"], category: \"post_exploitation\" },\n  { name: \"chisel\", binaries: [\"chisel\"], category: \"post_exploitation\" },\n\n  // Forensics\n  { name: \"autopsy\", binaries: [\"autopsy\"], category: \"forensics\" },\n  { name: \"volatility\", binaries: [\"vol.py\", \"volatility3\", \"vol3\"], category: \"forensics\" },\n  { name: \"binwalk\", binaries: [\"binwalk\"], category: \"forensics\", versionFlag: \"--help\" },\n\n  // Misc\n  { name: \"curl\", binaries: [\"curl\"], category: \"utility\", versionFlag: \"--version\" },\n  { name: \"wget\", binaries: [\"wget\"], category: \"utility\", versionFlag: \"--version\" },\n  { name: \"python3\", binaries: [\"python3\"], category: \"utility\", versionFlag: \"--version\" },\n  { name: \"docker\", binaries: [\"docker\"], category: \"utility\", versionFlag: \"--version\" },\n];\n\nexport function discoverTools(): DiscoveredTool[] {\n  const discovered: DiscoveredTool[] = [];\n\n  for (const spec of TOOL_SPECS) {\n    for (const bin of spec.binaries) {\n      const path = which(bin);\n      if (!path) continue;\n\n      const tool: DiscoveredTool = {\n        name: spec.name,\n        path,\n        category: spec.category,\n      };\n\n      // Try to get version\n      if (spec.versionFlag) {\n        try {\n          const output = execSync(`${bin} ${spec.versionFlag} 2>&1`, {\n            timeout: 5000,\n            encoding: \"utf8\",\n            stdio: [\"pipe\", \"pipe\", \"pipe\"],\n          });\n          // Extract version number from first line\n          const match = output.match(/(\\d+\\.\\d+[\\.\\d]*)/);\n          if (match) tool.version = match[1];\n        } catch {\n          // Tool exists but version check failed — still valid\n        }\n      }\n\n      // Check if running as service\n      if (spec.serviceCheck) {\n        try {\n          tool.running = spec.serviceCheck();\n        } catch {\n          tool.running = false;\n        }\n      }\n\n      discovered.push(tool);\n      break; // Found one binary for this tool, move to next\n    }\n  }\n\n  return discovered;\n}\n\n/**\n * Get just the tool names (for capabilities list).\n */\nexport function discoverToolNames(): string[] {\n  return discoverTools().map(t => t.name);\n}\n\n// ============================================================================\n// HELPERS\n// ============================================================================\n\nfunction which(binary: string): string | null {\n  try {\n    const result = execSync(`which ${binary} 2>/dev/null`, {\n      timeout: 3000,\n      encoding: \"utf8\",\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    }).trim();\n    return result || null;\n  } catch {\n    return null;\n  }\n}\n\nfunction checkPort(port: number): boolean {\n  try {\n    execSync(`lsof -i :${port} -sTCP:LISTEN 2>/dev/null | head -1`, {\n      timeout: 3000,\n      encoding: \"utf8\",\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,QAAQ,QAAQ,oBAAoB;AAkB7C,MAAMC,UAAsB,GAAG;AAC7B;AACA;EAAEC,IAAI,EAAE,MAAM;EAAEC,QAAQ,EAAE,CAAC,MAAM,CAAC;EAAEC,QAAQ,EAAE,kBAAkB;EAAEC,WAAW,EAAE;AAAY,CAAC,EAC5F;EAAEH,IAAI,EAAE,SAAS;EAAEC,QAAQ,EAAE,CAAC,SAAS,CAAC;EAAEC,QAAQ,EAAE,kBAAkB;EAAEC,WAAW,EAAE;AAAY,CAAC,EAClG;EAAEH,IAAI,EAAE,aAAa;EAAEC,QAAQ,EAAE,CAAC,aAAa,CAAC;EAAEC,QAAQ,EAAE;AAAmB,CAAC;AAEhF;AACA;EAAEF,IAAI,EAAE,QAAQ;EAAEC,QAAQ,EAAE,CAAC,QAAQ,CAAC;EAAEC,QAAQ,EAAE,iBAAiB;EAAEC,WAAW,EAAE;AAAY,CAAC,EAC/F;EAAEH,IAAI,EAAE,WAAW;EAAEC,QAAQ,EAAE,CAAC,WAAW,CAAC;EAAEC,QAAQ,EAAE,iBAAiB;EAAEC,WAAW,EAAE;AAAY,CAAC,EACrG;EAAEH,IAAI,EAAE,SAAS;EAAEC,QAAQ,EAAE,CAAC,SAAS,CAAC;EAAEC,QAAQ,EAAE,iBAAiB;EAAEC,WAAW,EAAE;AAAY,CAAC;AAEjG;AACA;EAAEH,IAAI,EAAE,QAAQ;EAAEC,QAAQ,EAAE,CAAC,QAAQ,CAAC;EAAEC,QAAQ,EAAE,cAAc;EAAEC,WAAW,EAAE;AAAY,CAAC,EAC5F;EAAEH,IAAI,EAAE,UAAU;EAAEC,QAAQ,EAAE,CAAC,UAAU,CAAC;EAAEC,QAAQ,EAAE,cAAc;EAAEC,WAAW,EAAE;AAAU,CAAC,EAC9F;EAAEH,IAAI,EAAE,OAAO;EAAEC,QAAQ,EAAE,CAAC,OAAO,CAAC;EAAEC,QAAQ,EAAE,cAAc;EAAEC,WAAW,EAAE;AAAW,CAAC,EACzF;EAAEH,IAAI,EAAE,MAAM;EAAEC,QAAQ,EAAE,CAAC,MAAM,CAAC;EAAEC,QAAQ,EAAE;AAAe,CAAC,EAC9D;EAAEF,IAAI,EAAE,MAAM;EAAEC,QAAQ,EAAE,CAAC,MAAM,CAAC;EAAEC,QAAQ,EAAE,cAAc;EAAEC,WAAW,EAAE;AAAK,CAAC,EACjF;EACEH,IAAI,EAAE,WAAW;EACjBC,QAAQ,EAAE,CAAC,WAAW,EAAE,oBAAoB,EAAE,cAAc,CAAC;EAC7DC,QAAQ,EAAE,cAAc;EACxBE,YAAY,EAAEA,CAAA,KAAMC,SAAS,CAAC,IAAI,CAAC,IAAIA,SAAS,CAAC,IAAI;AACvD,CAAC,EACD;EACEL,IAAI,EAAE,KAAK;EACXC,QAAQ,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC;EACtCC,QAAQ,EAAE,cAAc;EACxBE,YAAY,EAAEA,CAAA,KAAMC,SAAS,CAAC,IAAI;AACpC,CAAC;AAED;AACA;EAAEL,IAAI,EAAE,YAAY;EAAEC,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC;EAAEC,QAAQ,EAAE,cAAc;EAAEC,WAAW,EAAE;AAAY,CAAC,EAChH;EAAEH,IAAI,EAAE,WAAW;EAAEC,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;EAAEC,QAAQ,EAAE;AAAe,CAAC;AAEtF;AACA;EAAEF,IAAI,EAAE,MAAM;EAAEC,QAAQ,EAAE,CAAC,MAAM,CAAC;EAAEC,QAAQ,EAAE,mBAAmB;EAAEC,WAAW,EAAE;AAAS,CAAC,EAC1F;EAAEH,IAAI,EAAE,SAAS;EAAEC,QAAQ,EAAE,CAAC,SAAS,CAAC;EAAEC,QAAQ,EAAE,mBAAmB;EAAEC,WAAW,EAAE;AAAY,CAAC,EACnG;EAAEH,IAAI,EAAE,OAAO;EAAEC,QAAQ,EAAE,CAAC,OAAO,CAAC;EAAEC,QAAQ,EAAE,mBAAmB;EAAEC,WAAW,EAAE;AAAK,CAAC;AAExF;AACA;EAAEH,IAAI,EAAE,aAAa;EAAEC,QAAQ,EAAE,CAAC,aAAa,CAAC;EAAEC,QAAQ,EAAE,UAAU;EAAEC,WAAW,EAAE;AAAS,CAAC,EAC/F;EAAEH,IAAI,EAAE,aAAa;EAAEC,QAAQ,EAAE,CAAC,aAAa,CAAC;EAAEC,QAAQ,EAAE;AAAW,CAAC,EACxE;EAAEF,IAAI,EAAE,aAAa;EAAEC,QAAQ,EAAE,CAAC,aAAa,CAAC;EAAEC,QAAQ,EAAE;AAAW,CAAC,EACxE;EAAEF,IAAI,EAAE,QAAQ;EAAEC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;EAAEC,QAAQ,EAAE;AAAW,CAAC;AAEzE;AACA;EAAEF,IAAI,EAAE,UAAU;EAAEC,QAAQ,EAAE,CAAC,UAAU,CAAC;EAAEC,QAAQ,EAAE;AAAQ,CAAC,EAC/D;EAAEF,IAAI,EAAE,SAAS;EAAEC,QAAQ,EAAE,CAAC,SAAS,CAAC;EAAEC,QAAQ,EAAE;AAAQ,CAAC,EAC7D;EAAEF,IAAI,EAAE,cAAc;EAAEC,QAAQ,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;EAAEC,QAAQ,EAAE;AAAQ,CAAC,EACvF;EAAEF,IAAI,EAAE,OAAO;EAAEC,QAAQ,EAAE,CAAC,OAAO,CAAC;EAAEC,QAAQ,EAAE,OAAO;EAAEC,WAAW,EAAE;AAAU,CAAC,EACjF;EAAEH,IAAI,EAAE,WAAW;EAAEC,QAAQ,EAAE,CAAC,WAAW,CAAC;EAAEC,QAAQ,EAAE,OAAO;EAAEC,WAAW,EAAE;AAAW,CAAC;AAE1F;AACA;EAAEH,IAAI,EAAE,WAAW;EAAEC,QAAQ,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC;EAAEC,QAAQ,EAAE;AAAoB,CAAC,EAC7F;EAAEF,IAAI,EAAE,UAAU;EAAEC,QAAQ,EAAE,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;EAAEC,QAAQ,EAAE;AAAoB,CAAC,EAC7G;EAAEF,IAAI,EAAE,YAAY;EAAEC,QAAQ,EAAE,CAAC,YAAY,CAAC;EAAEC,QAAQ,EAAE;AAAoB,CAAC,EAC/E;EAAEF,IAAI,EAAE,QAAQ;EAAEC,QAAQ,EAAE,CAAC,QAAQ,CAAC;EAAEC,QAAQ,EAAE;AAAoB,CAAC;AAEvE;AACA;EAAEF,IAAI,EAAE,SAAS;EAAEC,QAAQ,EAAE,CAAC,SAAS,CAAC;EAAEC,QAAQ,EAAE;AAAY,CAAC,EACjE;EAAEF,IAAI,EAAE,YAAY;EAAEC,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC;EAAEC,QAAQ,EAAE;AAAY,CAAC,EAC1F;EAAEF,IAAI,EAAE,SAAS;EAAEC,QAAQ,EAAE,CAAC,SAAS,CAAC;EAAEC,QAAQ,EAAE,WAAW;EAAEC,WAAW,EAAE;AAAS,CAAC;AAExF;AACA;EAAEH,IAAI,EAAE,MAAM;EAAEC,QAAQ,EAAE,CAAC,MAAM,CAAC;EAAEC,QAAQ,EAAE,SAAS;EAAEC,WAAW,EAAE;AAAY,CAAC,EACnF;EAAEH,IAAI,EAAE,MAAM;EAAEC,QAAQ,EAAE,CAAC,MAAM,CAAC;EAAEC,QAAQ,EAAE,SAAS;EAAEC,WAAW,EAAE;AAAY,CAAC,EACnF;EAAEH,IAAI,EAAE,SAAS;EAAEC,QAAQ,EAAE,CAAC,SAAS,CAAC;EAAEC,QAAQ,EAAE,SAAS;EAAEC,WAAW,EAAE;AAAY,CAAC,EACzF;EAAEH,IAAI,EAAE,QAAQ;EAAEC,QAAQ,EAAE,CAAC,QAAQ,CAAC;EAAEC,QAAQ,EAAE,SAAS;EAAEC,WAAW,EAAE;AAAY,CAAC,CACxF;AAED,OAAO,SAASG,aAAaA,CAAA,EAAqB;EAChD,MAAMC,UAA4B,GAAG,EAAE;EAEvC,KAAK,MAAMC,IAAI,IAAIT,UAAU,EAAE;IAC7B,KAAK,MAAMU,GAAG,IAAID,IAAI,CAACP,QAAQ,EAAE;MAC/B,MAAMS,IAAI,GAAGC,KAAK,CAACF,GAAG,CAAC;MACvB,IAAI,CAACC,IAAI,EAAE;MAEX,MAAME,IAAoB,GAAG;QAC3BZ,IAAI,EAAEQ,IAAI,CAACR,IAAI;QACfU,IAAI;QACJR,QAAQ,EAAEM,IAAI,CAACN;MACjB,CAAC;;MAED;MACA,IAAIM,IAAI,CAACL,WAAW,EAAE;QACpB,IAAI;UACF,MAAMU,MAAM,GAAGf,QAAQ,CAAC,GAAGW,GAAG,IAAID,IAAI,CAACL,WAAW,OAAO,EAAE;YACzDW,OAAO,EAAE,IAAI;YACbC,QAAQ,EAAE,MAAM;YAChBC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM;UAChC,CAAC,CAAC;UACF;UACA,MAAMC,KAAK,GAAGJ,MAAM,CAACI,KAAK,CAAC,mBAAmB,CAAC;UAC/C,IAAIA,KAAK,EAAEL,IAAI,CAACM,OAAO,GAAGD,KAAK,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,MAAM;UACN;QAAA;MAEJ;;MAEA;MACA,IAAIT,IAAI,CAACJ,YAAY,EAAE;QACrB,IAAI;UACFQ,IAAI,CAACO,OAAO,GAAGX,IAAI,CAACJ,YAAY,CAAC,CAAC;QACpC,CAAC,CAAC,MAAM;UACNQ,IAAI,CAACO,OAAO,GAAG,KAAK;QACtB;MACF;MAEAZ,UAAU,CAACa,IAAI,CAACR,IAAI,CAAC;MACrB,MAAM,CAAC;IACT;EACF;EAEA,OAAOL,UAAU;AACnB;;AAEA;AACA;AACA;AACA,OAAO,SAASc,iBAAiBA,CAAA,EAAa;EAC5C,OAAOf,aAAa,CAAC,CAAC,CAACgB,GAAG,CAACC,CAAC,IAAIA,CAAC,CAACvB,IAAI,CAAC;AACzC;;AAEA;AACA;AACA;;AAEA,SAASW,KAAKA,CAACa,MAAc,EAAiB;EAC5C,IAAI;IACF,MAAMC,MAAM,GAAG3B,QAAQ,CAAC,SAAS0B,MAAM,cAAc,EAAE;MACrDV,OAAO,EAAE,IAAI;MACbC,QAAQ,EAAE,MAAM;MAChBC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM;IAChC,CAAC,CAAC,CAACU,IAAI,CAAC,CAAC;IACT,OAAOD,MAAM,IAAI,IAAI;EACvB,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF;AAEA,SAASpB,SAASA,CAACsB,IAAY,EAAW;EACxC,IAAI;IACF7B,QAAQ,CAAC,YAAY6B,IAAI,qCAAqC,EAAE;MAC9Db,OAAO,EAAE,IAAI;MACbC,QAAQ,EAAE,MAAM;MAChBC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM;IAChC,CAAC,CAAC;IACF,OAAO,IAAI;EACb,CAAC,CAAC,MAAM;IACN,OAAO,KAAK;EACd;AACF","ignoreList":[]}

package/dist/local-agent/executor-jobs.d.ts

@@ -0,0 +1,12 @@
+export declare function execBackground(command: string, sessionId?: string): {
+    job_id: string;
+};
+export declare function getJobStatus(jobId: string, tail?: number): Record<string, unknown> | null;
+export declare function killJob(jobId: string): boolean;
+export declare function listJobs(): Array<Record<string, unknown>>;
+export declare function listSessions(): Array<{
+    session_id: string;
+    cwd: string;
+}>;
+export declare function resetSessions(): void;
+export declare function getSystemInfo(): Record<string, unknown>;

package/dist/local-agent/executor-jobs.js

@@ -0,0 +1,143 @@
+// executor-jobs.ts — Background job management and session utilities
+// Extracted from executor.ts for modularity.
+
+import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import os from "node:os";
+import { sessions, MAX_OUTPUT_CHARS } from "./executor.js";
+
+// ============================================================================
+// BACKGROUND JOBS
+// ============================================================================
+
+/** Map<jobId, BackgroundJob> — background jobs */
+
+const backgroundJobs = new Map();
+export function execBackground(command, sessionId) {
+  const jobId = randomUUID();
+  const cwd = sessions.get(sessionId || "default") || os.homedir();
+  const shell = process.platform === "win32" ? "cmd.exe" : "/bin/bash";
+  const shellArgs = process.platform === "win32" ? ["/c", command] : ["-c", command];
+  const proc = spawn(shell, shellArgs, {
+    cwd,
+    env: {
+      ...process.env
+    },
+    stdio: ["pipe", "pipe", "pipe"],
+    detached: true
+  });
+  const job = {
+    id: jobId,
+    command,
+    process: proc,
+    stdout: "",
+    stderr: "",
+    startedAt: Date.now(),
+    exitCode: null,
+    killed: false,
+    done: false
+  };
+  proc.stdout?.on("data", data => {
+    if (job.stdout.length < MAX_OUTPUT_CHARS) {
+      job.stdout += data.toString();
+    }
+  });
+  proc.stderr?.on("data", data => {
+    if (job.stderr.length < MAX_OUTPUT_CHARS) {
+      job.stderr += data.toString();
+    }
+  });
+  proc.on("close", code => {
+    job.exitCode = code;
+    job.done = true;
+  });
+  proc.on("error", err => {
+    job.stderr += `\nProcess error: ${err.message}`;
+    job.done = true;
+    job.exitCode = -1;
+  });
+  backgroundJobs.set(jobId, job);
+  return {
+    job_id: jobId
+  };
+}
+export function getJobStatus(jobId, tail) {
+  const job = backgroundJobs.get(jobId);
+  if (!job) return null;
+  let stdout = job.stdout;
+  let stderr = job.stderr;
+  if (tail && tail > 0) {
+    stdout = stdout.slice(-tail);
+    stderr = stderr.slice(-tail);
+  }
+  return {
+    job_id: job.id,
+    command: job.command,
+    running: !job.done,
+    exit_code: job.exitCode,
+    killed: job.killed,
+    stdout,
+    stderr,
+    duration_ms: Date.now() - job.startedAt
+  };
+}
+export function killJob(jobId) {
+  const job = backgroundJobs.get(jobId);
+  if (!job || job.done) return false;
+  job.killed = true;
+  try {
+    if (job.process.pid) {
+      process.kill(-job.process.pid, "SIGKILL");
+    } else {
+      job.process.kill("SIGKILL");
+    }
+  } catch {
+    job.process.kill("SIGKILL");
+  }
+  return true;
+}
+export function listJobs() {
+  return [...backgroundJobs.values()].map(job => ({
+    job_id: job.id,
+    command: job.command.substring(0, 100),
+    running: !job.done,
+    exit_code: job.exitCode,
+    duration_ms: Date.now() - job.startedAt
+  }));
+}
+
+// ============================================================================
+// SESSION MANAGEMENT
+// ============================================================================
+
+export function listSessions() {
+  return [...sessions.entries()].map(([id, cwd]) => ({
+    session_id: id,
+    cwd
+  }));
+}
+export function resetSessions() {
+  sessions.clear();
+  for (const [id, job] of backgroundJobs) {
+    if (!job.done) {
+      try {
+        job.process.kill("SIGKILL");
+      } catch {/* */}
+    }
+  }
+  backgroundJobs.clear();
+}
+export function getSystemInfo() {
+  return {
+    platform: process.platform,
+    arch: process.arch,
+    hostname: os.hostname(),
+    user: os.userInfo().username,
+    home: os.homedir(),
+    cpus: os.cpus().length,
+    memory_gb: Math.round(os.totalmem() / 1024 / 1024 / 1024 * 10) / 10,
+    uptime_hours: Math.round(os.uptime() / 3600 * 10) / 10,
+    node_version: process.version
+  };
+}
+//# sourceMappingURL=executor-jobs.js.map