Spaces:

TALP-Project
/

multi-agent-smart-contracts

Runtime error

App Files Files Community

Uanderson Ricardo commited on May 25

Commit

194f5ac

2 Parent(s): aae7a58 32a4f79

Merge pull request #3 from uandersonricardo/auditor-agent

Browse files

Files changed (17) hide show

README_GH.md +2 -0
frontend/src/App.tsx +107 -15
package-lock.json +386 -33
package.json +3 -0
src/agents/auditor/agent.ts +263 -12
src/agents/auditor/config.ts +23 -0
src/agents/auditor/model.ts +0 -5
src/agents/auditor/prompts.ts +50 -0
src/agents/auditor/state.ts +37 -2
src/agents/auditor/tools/repo-tree-tool.ts +103 -0
src/agents/auditor/tools/slither-tool.ts +0 -15
src/agents/auditor/tools/solidity-analyzer-tool.ts +567 -0
src/agents/auditor/utils.ts +36 -0
src/config/llm.ts +7 -1
src/index.ts +16 -6
src/logger.ts +29 -0
src/server.ts +35 -14

README_GH.md CHANGED Viewed

@@ -19,6 +19,8 @@ O sistema é implementado em **TypeScript** e **Node.js**, utilizando a bibliote
 O sistema é composto por agentes especializados que colaboram entre si em diferentes etapas do processo:
 1. **Exploração e análise dos requisitos**
    * Processamento e compreensão dos documentos fornecidos;

 O sistema é composto por agentes especializados que colaboram entre si em diferentes etapas do processo:
+![Arquitetura Geral](./assets/architecture.png)
 1. **Exploração e análise dos requisitos**
    * Processamento e compreensão dos documentos fornecidos;

frontend/src/App.tsx CHANGED Viewed

@@ -1,10 +1,25 @@
 import { useState, useRef, useCallback } from "react";
 interface AgentResult {
   contract?: string;
   compilationErrors?: string[];
   reviewSummary?: string;
-  vulnerabilities?: Array<{ type: string; severity: string; description: string }>;
   results?: unknown[];
 }
@@ -58,8 +73,10 @@ export function App() {
         for (const line of lines) {
           if (line.startsWith("event:")) {
             currentEvent = line.slice(6).trim();
           } else if (line.startsWith("data:")) {
             const data = line.slice(5).trim();
             switch (currentEvent) {
               case "log":
                 appendLog(data);
@@ -90,12 +107,10 @@ export function App() {
   return (
     <div style={styles.container}>
       <header style={styles.header}>
-        <h1 style={styles.title}>
-          Multi-Agent: Geração, Auditoria e Teste de Smart Contracts
-        </h1>
         <p style={styles.subtitle}>
-          Descreva um cenário ou requisito cuja solução seja um smart contract em Solidity.
-          O sistema irá gerar, compilar, auditar e testar o contrato automaticamente.
         </p>
       </header>
@@ -103,15 +118,21 @@ export function App() {
         <textarea
           value={requirements}
           onChange={(e) => setRequirements(e.target.value)}
-          placeholder={"Ex: Crie um token ERC20 com as seguintes características:\n- Nome: MeuToken, Símbolo: MTK\n- Supply inicial de 1.000.000 tokens\n- Funções de mint (apenas owner) e burn\n- Pausável pelo owner"}
           style={styles.textarea}
           rows={6}
           disabled={running}
         />
-        <button type="submit" disabled={running || !requirements.trim()} style={{
-          ...styles.button,
-          opacity: running || !requirements.trim() ? 0.5 : 1,
-        }}>
           {running ? "Executando pipeline..." : "Executar Pipeline"}
         </button>
       </form>
@@ -122,7 +143,9 @@ export function App() {
           <h2 style={styles.sectionTitle}>📋 Log de Execução</h2>
           <div style={styles.logBox}>
             {logs.map((log, i) => (
-              <div key={i} style={styles.logLine}>{log}</div>
             ))}
             <div ref={logsEndRef} />
           </div>
@@ -163,9 +186,33 @@ export function App() {
       {auditorResult && (
         <section style={styles.section}>
           <h2 style={styles.sectionTitle}>🔍 Agente Auditor</h2>
-          <div style={styles.codeBox}>
-            <pre style={styles.code}>{JSON.stringify(auditorResult.vulnerabilities, null, 2)}</pre>
-          </div>
         </section>
       )}
@@ -186,6 +233,19 @@ export function App() {
   );
 }
 const styles: Record<string, React.CSSProperties> = {
   container: {
     maxWidth: 900,
@@ -305,4 +365,36 @@ const styles: Record<string, React.CSSProperties> = {
     color: "#cbd5e1",
     whiteSpace: "pre-wrap",
   },
 };

 import { useState, useRef, useCallback } from "react";
+interface Finding {
+  title: string;
+  description: string;
+  recommendation: string;
+  severity: "high" | "medium" | "low";
+  codeSnippet: string;
+  location: string;
+  path: string;
+  judgeReview: {
+    review: string;
+    confidence: number;
+    exploitablePaths: string[];
+  };
+}
 interface AgentResult {
   contract?: string;
   compilationErrors?: string[];
   reviewSummary?: string;
+  findings?: Finding[];
   results?: unknown[];
 }
         for (const line of lines) {
           if (line.startsWith("event:")) {
             currentEvent = line.slice(6).trim();
+            console.log("event", currentEvent);
           } else if (line.startsWith("data:")) {
             const data = line.slice(5).trim();
+            console.log("data", data);
             switch (currentEvent) {
               case "log":
                 appendLog(data);
   return (
     <div style={styles.container}>
       <header style={styles.header}>
+        <h1 style={styles.title}>Multi-Agent: Geração, Auditoria e Teste de Smart Contracts</h1>
         <p style={styles.subtitle}>
+          Descreva um cenário ou requisito cuja solução seja um smart contract em Solidity. O sistema irá gerar,
+          compilar, auditar e testar o contrato automaticamente.
         </p>
       </header>
         <textarea
           value={requirements}
           onChange={(e) => setRequirements(e.target.value)}
+          placeholder={
+            "Ex: Crie um token ERC20 com as seguintes características:\n- Nome: MeuToken, Símbolo: MTK\n- Supply inicial de 1.000.000 tokens\n- Funções de mint (apenas owner) e burn\n- Pausável pelo owner"
+          }
           style={styles.textarea}
           rows={6}
           disabled={running}
         />
+        <button
+          type="submit"
+          disabled={running || !requirements.trim()}
+          style={{
+            ...styles.button,
+            opacity: running || !requirements.trim() ? 0.5 : 1,
+          }}
+        >
           {running ? "Executando pipeline..." : "Executar Pipeline"}
         </button>
       </form>
           <h2 style={styles.sectionTitle}>📋 Log de Execução</h2>
           <div style={styles.logBox}>
             {logs.map((log, i) => (
+              <div key={i} style={styles.logLine}>
+                {log}
+              </div>
             ))}
             <div ref={logsEndRef} />
           </div>
       {auditorResult && (
         <section style={styles.section}>
           <h2 style={styles.sectionTitle}>🔍 Agente Auditor</h2>
+          {auditorResult.findings && auditorResult.findings.length > 0 ? (
+            auditorResult.findings.map((f, i) => (
+              <div key={i} style={{ ...styles.findingCard, borderColor: severityColor(f.severity) }}>
+                <div style={styles.findingHeader}>
+                  <span style={{ ...styles.severityBadge, background: severityColor(f.severity) }}>
+                    {f.severity.toUpperCase()}
+                  </span>
+                  <span style={styles.findingTitle}>{f.title}</span>
+                </div>
+                <p style={styles.findingText}>{f.description}</p>
+                <p style={{ ...styles.findingText, color: "#94a3b8" }}>
+                  <strong>Localização:</strong> {f.location ?? "-"}
+                </p>
+                {f.codeSnippet && <pre style={styles.code}>{f.codeSnippet}</pre>}
+                <p style={{ ...styles.findingText, color: "#94a3b8" }}>
+                  <strong>Recomendação:</strong> {f.recommendation}
+                </p>
+                <p style={{ ...styles.findingText, color: "#64748b", fontSize: 12 }}>
+                  Confiança: {Math.round(f.judgeReview.confidence)}% — {f.judgeReview.review}
+                </p>
+              </div>
+            ))
+          ) : (
+            <div style={styles.resultBox}>
+              <p style={styles.resultText}>Nenhuma vulnerabilidade encontrada.</p>
+            </div>
+          )}
         </section>
       )}
   );
 }
+const severityColor = (severity: string) => {
+  switch (severity) {
+    case "high":
+      return "#ef4444";
+    case "medium":
+      return "#f97316";
+    case "low":
+      return "#eab308";
+    default:
+      return "#64748b";
+  }
+};
 const styles: Record<string, React.CSSProperties> = {
   container: {
     maxWidth: 900,
     color: "#cbd5e1",
     whiteSpace: "pre-wrap",
   },
+  findingCard: {
+    background: "#1e293b",
+    border: "1px solid",
+    borderRadius: 8,
+    padding: 16,
+    marginBottom: 12,
+  },
+  findingHeader: {
+    display: "flex",
+    alignItems: "center",
+    gap: 10,
+    marginBottom: 8,
+  },
+  severityBadge: {
+    fontSize: 11,
+    fontWeight: 700,
+    color: "#fff",
+    padding: "2px 8px",
+    borderRadius: 4,
+    letterSpacing: "0.05em",
+  },
+  findingTitle: {
+    fontSize: 15,
+    fontWeight: 600,
+    color: "#f8fafc",
+  },
+  findingText: {
+    margin: "4px 0",
+    fontSize: 13,
+    lineHeight: 1.6,
+    color: "#cbd5e1",
+  },
 };

package-lock.json CHANGED Viewed

@@ -11,15 +11,18 @@
       "license": "ISC",
       "dependencies": {
         "@hono/node-server": "^2.0.3",
         "@langchain/core": "^1.1.45",
         "@langchain/google-genai": "^2.1.31",
         "@langchain/langgraph": "^1.3.0",
         "@langchain/openrouter": "^0.2.4",
         "dotenv": "^17.4.2",
         "hono": "^4.12.21",
         "langchain": "^1.4.0",
         "solc": "^0.8.35",
         "uuid": "^11.1.1",
         "zod": "^4.4.3"
       },
       "devDependencies": {
@@ -30,6 +33,35 @@
         "vitest": "^4.1.5"
       }
     },
     "node_modules/@biomejs/biome": {
       "version": "2.4.14",
       "resolved": "https://registry.npmjs.org/@biomejs/biome/-/biome-2.4.14.tgz",
@@ -199,6 +231,26 @@
       "integrity": "sha512-gAmrUZSGtKc3AiBL71iNWxDsyUC5uMaKKGdvzYsBoTW/xi42JQHl7eKV2OYzCUqvc+D2RCcf7EXY2iCyFIk6og==",
       "license": "MIT"
     },
     "node_modules/@emnapi/core": {
       "version": "1.10.0",
       "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.10.0.tgz",
@@ -261,10 +313,26 @@
       "dev": true,
       "license": "MIT"
     },
     "node_modules/@langchain/core": {
-      "version": "1.1.47",
-      "resolved": "https://registry.npmjs.org/@langchain/core/-/core-1.1.47.tgz",
-      "integrity": "sha512-+fiPu6ZFnJMrZyKeM77OIVPoMPAY6OKWacnPlojHtXTbMMzb2cEOKAJV0U07cDl86NHSCIYYa0i4CyKZzXbHQQ==",
       "license": "MIT",
       "dependencies": {
         "@cfworker/json-schema": "^4.0.2",
@@ -295,13 +363,13 @@
       }
     },
     "node_modules/@langchain/langgraph": {
-      "version": "1.3.0",
-      "resolved": "https://registry.npmjs.org/@langchain/langgraph/-/langgraph-1.3.0.tgz",
-      "integrity": "sha512-QvhTjiyqFPz81A+y6LHs223w6DTjv5+882DT4mup72bd72rRhNjTYo5fhes5um0swnKArvY/arc7KeFInfHHWw==",
       "license": "MIT",
       "dependencies": {
         "@langchain/langgraph-checkpoint": "^1.0.2",
-        "@langchain/langgraph-sdk": "~1.9.0",
         "@langchain/protocol": "^0.0.15",
         "@standard-schema/spec": "1.1.0",
         "uuid": "^10.0.0"
@@ -350,12 +418,11 @@
       }
     },
     "node_modules/@langchain/langgraph-sdk": {
-      "version": "1.9.1",
-      "resolved": "https://registry.npmjs.org/@langchain/langgraph-sdk/-/langgraph-sdk-1.9.1.tgz",
-      "integrity": "sha512-pHojybde9HoMz7ZDtyW3pgDdomAN4C0pbdgXASjccFS+S2Cqx75iZBtBUUg1A/CSer5xh9GakdIqyihxZOf7VA==",
       "license": "MIT",
       "dependencies": {
-        "@langchain/core": "^1.1.44",
         "@langchain/protocol": "^0.0.15",
         "@types/json-schema": "^7.0.15",
         "p-queue": "^9.0.1",
@@ -363,6 +430,7 @@
         "uuid": "^13.0.0"
       },
       "peerDependencies": {
         "react": "^18 || ^19",
         "react-dom": "^18 || ^19",
         "svelte": "^4.0.0 || ^5.0.0",
@@ -390,9 +458,9 @@
       "license": "MIT"
     },
     "node_modules/@langchain/langgraph-sdk/node_modules/p-queue": {
-      "version": "9.2.0",
-      "resolved": "https://registry.npmjs.org/p-queue/-/p-queue-9.2.0.tgz",
-      "integrity": "sha512-dWgLE8AH0HjQ9fe74pUkKkvzzYT18Inp4zra3lKHnnwqGvcfcUBrvF2EAVX+envufDNBOzpPq/IBUONDbI7+3g==",
       "license": "MIT",
       "dependencies": {
         "eventemitter3": "^5.0.4",
@@ -777,6 +845,22 @@
       "dev": true,
       "license": "MIT"
     },
     "node_modules/@standard-schema/spec": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
@@ -835,6 +919,12 @@
         "undici-types": "~7.19.0"
       }
     },
     "node_modules/@vitest/expect": {
       "version": "4.1.5",
       "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.5.tgz",
@@ -971,6 +1061,26 @@
         "url": "https://github.com/chalk/ansi-styles?sponsor=1"
       }
     },
     "node_modules/assertion-error": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz",
@@ -981,6 +1091,12 @@
         "node": ">=12"
       }
     },
     "node_modules/base64-js": {
       "version": "1.5.1",
       "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
@@ -1107,25 +1223,51 @@
         "node": ">=8"
       }
     },
     "node_modules/color-convert": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
-      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
-        "color-name": "~1.1.4"
       },
       "engines": {
-        "node": ">=7.0.0"
       }
     },
     "node_modules/color-name": {
-      "version": "1.1.4",
-      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
-      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
-      "dev": true,
-      "license": "MIT"
     },
     "node_modules/command-exists": {
       "version": "1.2.9",
@@ -1219,6 +1361,12 @@
         "node": ">= 0.4"
       }
     },
     "node_modules/es-define-property": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
@@ -1312,6 +1460,12 @@
         }
       }
     },
     "node_modules/fill-range": {
       "version": "7.1.1",
       "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz",
@@ -1335,6 +1489,12 @@
         "micromatch": "^4.0.2"
       }
     },
     "node_modules/follow-redirects": {
       "version": "1.16.0",
       "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz",
@@ -1512,6 +1672,12 @@
         "node": ">=16.9.0"
       }
     },
     "node_modules/is-docker": {
       "version": "2.2.1",
       "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz",
@@ -1529,9 +1695,9 @@
       }
     },
     "node_modules/is-network-error": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/is-network-error/-/is-network-error-1.3.1.tgz",
-      "integrity": "sha512-6QCxa49rQbmUWLfk0nuGqzql9U8uaV2H6279bRErPBHe/109hCzsLUBUHfbEtvLIHBd6hyXbgedBSHevm43Edw==",
       "license": "MIT",
       "engines": {
         "node": ">=16"
@@ -1550,6 +1716,18 @@
         "node": ">=0.12.0"
       }
     },
     "node_modules/is-wsl": {
       "version": "2.2.0",
       "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz",
@@ -1592,6 +1770,19 @@
         "base64-js": "^1.5.1"
       }
     },
     "node_modules/json-stable-stringify": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.3.0.tgz",
@@ -1645,13 +1836,19 @@
         "graceful-fs": "^4.1.11"
       }
     },
     "node_modules/langchain": {
-      "version": "1.4.0",
-      "resolved": "https://registry.npmjs.org/langchain/-/langchain-1.4.0.tgz",
-      "integrity": "sha512-p3H5U1vfO0T4ri/xxqI6jccRP3LYmOW6KGxaJcwI5mIGVR/G6eNhZyjSZB9d7me6J7an4Pc6zA8tH8Qa6/7xwA==",
       "license": "MIT",
       "dependencies": {
-        "@langchain/langgraph": "^1.3.0",
         "@langchain/langgraph-checkpoint": "^1.0.1",
         "langsmith": ">=0.5.0 <1.0.0",
         "zod": "^3.25.76 || ^4"
@@ -1660,7 +1857,7 @@
         "node": ">=20"
       },
       "peerDependencies": {
-        "@langchain/core": "^1.1.44"
       }
     },
     "node_modules/langsmith": {
@@ -1957,6 +2154,23 @@
         "url": "https://opencollective.com/parcel"
       }
     },
     "node_modules/magic-string": {
       "version": "0.30.21",
       "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz",
@@ -2022,6 +2236,12 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
     "node_modules/mustache": {
       "version": "4.2.0",
       "resolved": "https://registry.npmjs.org/mustache/-/mustache-4.2.0.tgz",
@@ -2071,6 +2291,15 @@
       ],
       "license": "MIT"
     },
     "node_modules/open": {
       "version": "7.4.2",
       "resolved": "https://registry.npmjs.org/open/-/open-7.4.2.tgz",
@@ -2289,6 +2518,20 @@
         "node": "^10 || ^12 || >=14"
       }
     },
     "node_modules/rolldown": {
       "version": "1.0.0-rc.18",
       "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.0.0-rc.18.tgz",
@@ -2323,6 +2566,35 @@
         "@rolldown/binding-win32-x64-msvc": "1.0.0-rc.18"
       }
     },
     "node_modules/semver": {
       "version": "5.7.2",
       "resolved": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
@@ -2421,6 +2693,15 @@
         "node": ">=0.10.0"
       }
     },
     "node_modules/stackback": {
       "version": "0.0.2",
       "resolved": "https://registry.npmjs.org/stackback/-/stackback-0.0.2.tgz",
@@ -2435,6 +2716,15 @@
       "dev": true,
       "license": "MIT"
     },
     "node_modules/supports-color": {
       "version": "7.2.0",
       "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
@@ -2448,6 +2738,12 @@
         "node": ">=8"
       }
     },
     "node_modules/tinybench": {
       "version": "2.9.0",
       "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz",
@@ -2517,6 +2813,21 @@
         "node": ">=8.0"
       }
     },
     "node_modules/tslib": {
       "version": "2.8.1",
       "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
@@ -2556,6 +2867,12 @@
         "node": ">= 10.0.0"
       }
     },
     "node_modules/uuid": {
       "version": "11.1.1",
       "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz",
@@ -2770,6 +3087,42 @@
         "node": ">=8"
       }
     },
     "node_modules/yaml": {
       "version": "2.9.0",
       "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",

       "license": "ISC",
       "dependencies": {
         "@hono/node-server": "^2.0.3",
+        "@langchain/anthropic": "^1.3.29",
         "@langchain/core": "^1.1.45",
         "@langchain/google-genai": "^2.1.31",
         "@langchain/langgraph": "^1.3.0",
         "@langchain/openrouter": "^0.2.4",
+        "@solidity-parser/parser": "^0.20.2",
         "dotenv": "^17.4.2",
         "hono": "^4.12.21",
         "langchain": "^1.4.0",
         "solc": "^0.8.35",
         "uuid": "^11.1.1",
+        "winston": "^3.19.0",
         "zod": "^4.4.3"
       },
       "devDependencies": {
         "vitest": "^4.1.5"
       }
     },
+    "node_modules/@anthropic-ai/sdk": {
+      "version": "0.91.1",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/sdk/-/sdk-0.91.1.tgz",
+      "integrity": "sha512-LAmu761tSN9r66ixvmciswUj/ZC+1Q4iAfpedTfSVLeswRwnY3n2Nb6Tsk+cLPP28aLOPWeMgIuTuCcMC6W/iw==",
+      "license": "MIT",
+      "dependencies": {
+        "json-schema-to-ts": "^3.1.1"
+      },
+      "bin": {
+        "anthropic-ai-sdk": "bin/cli"
+      },
+      "peerDependencies": {
+        "zod": "^3.25.0 || ^4.0.0"
+      },
+      "peerDependenciesMeta": {
+        "zod": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@babel/runtime": {
+      "version": "7.29.2",
+      "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.2.tgz",
+      "integrity": "sha512-JiDShH45zKHWyGe4ZNVRrCjBz8Nh9TMmZG1kh4QTK8hCBTWBi8Da+i7s1fJw7/lYpM4ccepSNfqzZ/QvABBi5g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
     "node_modules/@biomejs/biome": {
       "version": "2.4.14",
       "resolved": "https://registry.npmjs.org/@biomejs/biome/-/biome-2.4.14.tgz",
       "integrity": "sha512-gAmrUZSGtKc3AiBL71iNWxDsyUC5uMaKKGdvzYsBoTW/xi42JQHl7eKV2OYzCUqvc+D2RCcf7EXY2iCyFIk6og==",
       "license": "MIT"
     },
+    "node_modules/@colors/colors": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/@colors/colors/-/colors-1.6.0.tgz",
+      "integrity": "sha512-Ir+AOibqzrIsL6ajt3Rz3LskB7OiMVHqltZmspbW/TJuTVuyOMirVqAkjfY6JISiLHgyNqicAC8AyHHGzNd/dA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.1.90"
+      }
+    },
+    "node_modules/@dabh/diagnostics": {
+      "version": "2.0.8",
+      "resolved": "https://registry.npmjs.org/@dabh/diagnostics/-/diagnostics-2.0.8.tgz",
+      "integrity": "sha512-R4MSXTVnuMzGD7bzHdW2ZhhdPC/igELENcq5IjEverBvq5hn1SXCWcsi6eSsdWP0/Ur+SItRRjAktmdoX/8R/Q==",
+      "license": "MIT",
+      "dependencies": {
+        "@so-ric/colorspace": "^1.1.6",
+        "enabled": "2.0.x",
+        "kuler": "^2.0.0"
+      }
+    },
     "node_modules/@emnapi/core": {
       "version": "1.10.0",
       "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.10.0.tgz",
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@langchain/anthropic": {
+      "version": "1.3.29",
+      "resolved": "https://registry.npmjs.org/@langchain/anthropic/-/anthropic-1.3.29.tgz",
+      "integrity": "sha512-ep1qBIcV07bajsg3fDqMd39rYwoRLOEK/6lk+MCxlm1YB5SRoKKJAZANrblQ/4RYhZJnxf95c6BSQu8VoNbVAQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@anthropic-ai/sdk": "^0.91.1",
+        "zod": "^3.25.76 || ^4"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "peerDependencies": {
+        "@langchain/core": "^1.1.45"
+      }
+    },
     "node_modules/@langchain/core": {
+      "version": "1.1.48",
+      "resolved": "https://registry.npmjs.org/@langchain/core/-/core-1.1.48.tgz",
+      "integrity": "sha512-fQU6Guyb1pwc2fEplmA8FPbKfOMAofjnyJzExevro0FxEiuGHE18Ov/ZHmT9trWCDTZRI9eW1VIc6aChxV8pAQ==",
       "license": "MIT",
       "dependencies": {
         "@cfworker/json-schema": "^4.0.2",
       }
     },
     "node_modules/@langchain/langgraph": {
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/@langchain/langgraph/-/langgraph-1.3.2.tgz",
+      "integrity": "sha512-SL7Ktsr681R7da+1b2MVOWEbaCoFJOXEJPTGOjg4JIG4C7quWbTYC8DzxhcCxte6D/8cGp0rYDBnbKLXEpNqlA==",
       "license": "MIT",
       "dependencies": {
         "@langchain/langgraph-checkpoint": "^1.0.2",
+        "@langchain/langgraph-sdk": "~1.9.4",
         "@langchain/protocol": "^0.0.15",
         "@standard-schema/spec": "1.1.0",
         "uuid": "^10.0.0"
       }
     },
     "node_modules/@langchain/langgraph-sdk": {
+      "version": "1.9.6",
+      "resolved": "https://registry.npmjs.org/@langchain/langgraph-sdk/-/langgraph-sdk-1.9.6.tgz",
+      "integrity": "sha512-cem5LckknNULd8o4WiOpf+rv+Qxvfpf5MzXiCQb9JnEfJdCRrWsl0/qBeZRpAXMf/1Va3uDMZouTmw9odmI0Hw==",
       "license": "MIT",
       "dependencies": {
         "@langchain/protocol": "^0.0.15",
         "@types/json-schema": "^7.0.15",
         "p-queue": "^9.0.1",
         "uuid": "^13.0.0"
       },
       "peerDependencies": {
+        "@langchain/core": "^1.1.44",
         "react": "^18 || ^19",
         "react-dom": "^18 || ^19",
         "svelte": "^4.0.0 || ^5.0.0",
       "license": "MIT"
     },
     "node_modules/@langchain/langgraph-sdk/node_modules/p-queue": {
+      "version": "9.3.0",
+      "resolved": "https://registry.npmjs.org/p-queue/-/p-queue-9.3.0.tgz",
+      "integrity": "sha512-7NED7xhQ74Ngp4JP/2e0VZHp7vSWfJfqeiR92jPgxsz6m0Se4P03YoTKa9dDXyZ3r6P616gUXttrB6nnHYKang==",
       "license": "MIT",
       "dependencies": {
         "eventemitter3": "^5.0.4",
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@so-ric/colorspace": {
+      "version": "1.1.6",
+      "resolved": "https://registry.npmjs.org/@so-ric/colorspace/-/colorspace-1.1.6.tgz",
+      "integrity": "sha512-/KiKkpHNOBgkFJwu9sh48LkHSMYGyuTcSFK/qMBdnOAlrRJzRSXAOFB5qwzaVQuDl8wAvHVMkaASQDReTahxuw==",
+      "license": "MIT",
+      "dependencies": {
+        "color": "^5.0.2",
+        "text-hex": "1.0.x"
+      }
+    },
+    "node_modules/@solidity-parser/parser": {
+      "version": "0.20.2",
+      "resolved": "https://registry.npmjs.org/@solidity-parser/parser/-/parser-0.20.2.tgz",
+      "integrity": "sha512-rbu0bzwNvMcwAjH86hiEAcOeRI2EeK8zCkHDrFykh/Al8mvJeFmjy3UrE7GYQjNwOgbGUUtCn5/k8CB8zIu7QA==",
+      "license": "MIT"
+    },
     "node_modules/@standard-schema/spec": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
         "undici-types": "~7.19.0"
       }
     },
+    "node_modules/@types/triple-beam": {
+      "version": "1.3.5",
+      "resolved": "https://registry.npmjs.org/@types/triple-beam/-/triple-beam-1.3.5.tgz",
+      "integrity": "sha512-6WaYesThRMCl19iryMYP7/x2OVgCtbIVflDGFpWnb9irXI3UjYE4AzmYuiUKY1AJstGijoY+MgUszMgRxIYTYw==",
+      "license": "MIT"
+    },
     "node_modules/@vitest/expect": {
       "version": "4.1.5",
       "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.5.tgz",
         "url": "https://github.com/chalk/ansi-styles?sponsor=1"
       }
     },
+    "node_modules/ansi-styles/node_modules/color-convert": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
+      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "color-name": "~1.1.4"
+      },
+      "engines": {
+        "node": ">=7.0.0"
+      }
+    },
+    "node_modules/ansi-styles/node_modules/color-name": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
+      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/assertion-error": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz",
         "node": ">=12"
       }
     },
+    "node_modules/async": {
+      "version": "3.2.6",
+      "resolved": "https://registry.npmjs.org/async/-/async-3.2.6.tgz",
+      "integrity": "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==",
+      "license": "MIT"
+    },
     "node_modules/base64-js": {
       "version": "1.5.1",
       "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
         "node": ">=8"
       }
     },
+    "node_modules/color": {
+      "version": "5.0.3",
+      "resolved": "https://registry.npmjs.org/color/-/color-5.0.3.tgz",
+      "integrity": "sha512-ezmVcLR3xAVp8kYOm4GS45ZLLgIE6SPAFoduLr6hTDajwb3KZ2F46gulK3XpcwRFb5KKGCSezCBAY4Dw4HsyXA==",
+      "license": "MIT",
+      "dependencies": {
+        "color-convert": "^3.1.3",
+        "color-string": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/color-convert": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-3.1.3.tgz",
+      "integrity": "sha512-fasDH2ont2GqF5HpyO4w0+BcewlhHEZOFn9c1ckZdHpJ56Qb7MHhH/IcJZbBGgvdtwdwNbLvxiBEdg336iA9Sg==",
       "license": "MIT",
       "dependencies": {
+        "color-name": "^2.0.0"
       },
       "engines": {
+        "node": ">=14.6"
       }
     },
     "node_modules/color-name": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/color-name/-/color-name-2.1.0.tgz",
+      "integrity": "sha512-1bPaDNFm0axzE4MEAzKPuqKWeRaT43U/hyxKPBdqTfmPF+d6n7FSoTFxLVULUJOmiLp01KjhIPPH+HrXZJN4Rg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.20"
+      }
+    },
+    "node_modules/color-string": {
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/color-string/-/color-string-2.1.4.tgz",
+      "integrity": "sha512-Bb6Cq8oq0IjDOe8wJmi4JeNn763Xs9cfrBcaylK1tPypWzyoy2G3l90v9k64kjphl/ZJjPIShFztenRomi8WTg==",
+      "license": "MIT",
+      "dependencies": {
+        "color-name": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
     },
     "node_modules/command-exists": {
       "version": "1.2.9",
         "node": ">= 0.4"
       }
     },
+    "node_modules/enabled": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/enabled/-/enabled-2.0.0.tgz",
+      "integrity": "sha512-AKrN98kuwOzMIdAizXGI86UFBoo26CL21UM763y1h/GMSJ4/OHU9k2YlsmBpyScFo/wbLzWQJBMCW4+IO3/+OQ==",
+      "license": "MIT"
+    },
     "node_modules/es-define-property": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
         }
       }
     },
+    "node_modules/fecha": {
+      "version": "4.2.3",
+      "resolved": "https://registry.npmjs.org/fecha/-/fecha-4.2.3.tgz",
+      "integrity": "sha512-OP2IUU6HeYKJi3i0z4A19kHMQoLVs4Hc+DPqqxI2h/DPZHTm/vjsfC6P0b4jCMy14XizLBqvndQ+UilD7707Jw==",
+      "license": "MIT"
+    },
     "node_modules/fill-range": {
       "version": "7.1.1",
       "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz",
         "micromatch": "^4.0.2"
       }
     },
+    "node_modules/fn.name": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/fn.name/-/fn.name-1.1.0.tgz",
+      "integrity": "sha512-GRnmB5gPyJpAhTQdSZTSp9uaPSvl09KoYcMQtsB9rQoOmzs9dH6ffeccH+Z+cv6P68Hu5bC6JjRh4Ah/mHSNRw==",
+      "license": "MIT"
+    },
     "node_modules/follow-redirects": {
       "version": "1.16.0",
       "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz",
         "node": ">=16.9.0"
       }
     },
+    "node_modules/inherits": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+      "license": "ISC"
+    },
     "node_modules/is-docker": {
       "version": "2.2.1",
       "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz",
       }
     },
     "node_modules/is-network-error": {
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/is-network-error/-/is-network-error-1.3.2.tgz",
+      "integrity": "sha512-PhBY86zaxNZUuWP6h13Vu5oFe0XY6/UlKzQnYFELzGVHygP3MxmvTfYSG7GN3aIab/iWudSMgjSnG9Dq+nHrgA==",
       "license": "MIT",
       "engines": {
         "node": ">=16"
         "node": ">=0.12.0"
       }
     },
+    "node_modules/is-stream": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz",
+      "integrity": "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/is-wsl": {
       "version": "2.2.0",
       "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz",
         "base64-js": "^1.5.1"
       }
     },
+    "node_modules/json-schema-to-ts": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/json-schema-to-ts/-/json-schema-to-ts-3.1.1.tgz",
+      "integrity": "sha512-+DWg8jCJG2TEnpy7kOm/7/AxaYoaRbjVB4LFZLySZlWn8exGs3A4OLJR966cVvU26N7X9TWxl+Jsw7dzAqKT6g==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/runtime": "^7.18.3",
+        "ts-algebra": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=16"
+      }
+    },
     "node_modules/json-stable-stringify": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.3.0.tgz",
         "graceful-fs": "^4.1.11"
       }
     },
+    "node_modules/kuler": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/kuler/-/kuler-2.0.0.tgz",
+      "integrity": "sha512-Xq9nH7KlWZmXAtodXDDRE7vs6DU1gTU8zYDHDiWLSip45Egwq3plLHzPn27NgvzL2r1LMPC1vdqh98sQxtqj4A==",
+      "license": "MIT"
+    },
     "node_modules/langchain": {
+      "version": "1.4.2",
+      "resolved": "https://registry.npmjs.org/langchain/-/langchain-1.4.2.tgz",
+      "integrity": "sha512-SLGipy0r4nqQD0aiUOBYLMeGFfB/QiYnMndfZ8sGN89vXDCIXbYqcE7G/4QDDX3nZsM7/emQpoScmlxEX6sDnQ==",
       "license": "MIT",
       "dependencies": {
+        "@langchain/langgraph": "^1.3.2",
         "@langchain/langgraph-checkpoint": "^1.0.1",
         "langsmith": ">=0.5.0 <1.0.0",
         "zod": "^3.25.76 || ^4"
         "node": ">=20"
       },
       "peerDependencies": {
+        "@langchain/core": "^1.1.48"
       }
     },
     "node_modules/langsmith": {
         "url": "https://opencollective.com/parcel"
       }
     },
+    "node_modules/logform": {
+      "version": "2.7.0",
+      "resolved": "https://registry.npmjs.org/logform/-/logform-2.7.0.tgz",
+      "integrity": "sha512-TFYA4jnP7PVbmlBIfhlSe+WKxs9dklXMTEGcBCIvLhE/Tn3H6Gk1norupVW7m5Cnd4bLcr08AytbyV/xj7f/kQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@colors/colors": "1.6.0",
+        "@types/triple-beam": "^1.3.2",
+        "fecha": "^4.2.0",
+        "ms": "^2.1.1",
+        "safe-stable-stringify": "^2.3.1",
+        "triple-beam": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 12.0.0"
+      }
+    },
     "node_modules/magic-string": {
       "version": "0.30.21",
       "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz",
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
     "node_modules/mustache": {
       "version": "4.2.0",
       "resolved": "https://registry.npmjs.org/mustache/-/mustache-4.2.0.tgz",
       ],
       "license": "MIT"
     },
+    "node_modules/one-time": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/one-time/-/one-time-1.0.0.tgz",
+      "integrity": "sha512-5DXOiRKwuSEcQ/l0kGCF6Q3jcADFv5tSmRaJck/OqkVFcOzutB134KRSfF0xDrL39MNnqxbHBbUUcjZIhTgb2g==",
+      "license": "MIT",
+      "dependencies": {
+        "fn.name": "1.x.x"
+      }
+    },
     "node_modules/open": {
       "version": "7.4.2",
       "resolved": "https://registry.npmjs.org/open/-/open-7.4.2.tgz",
         "node": "^10 || ^12 || >=14"
       }
     },
+    "node_modules/readable-stream": {
+      "version": "3.6.2",
+      "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
+      "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
+      "license": "MIT",
+      "dependencies": {
+        "inherits": "^2.0.3",
+        "string_decoder": "^1.1.1",
+        "util-deprecate": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
     "node_modules/rolldown": {
       "version": "1.0.0-rc.18",
       "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.0.0-rc.18.tgz",
         "@rolldown/binding-win32-x64-msvc": "1.0.0-rc.18"
       }
     },
+    "node_modules/safe-buffer": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/safe-stable-stringify": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/safe-stable-stringify/-/safe-stable-stringify-2.5.0.tgz",
+      "integrity": "sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      }
+    },
     "node_modules/semver": {
       "version": "5.7.2",
       "resolved": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
         "node": ">=0.10.0"
       }
     },
+    "node_modules/stack-trace": {
+      "version": "0.0.10",
+      "resolved": "https://registry.npmjs.org/stack-trace/-/stack-trace-0.0.10.tgz",
+      "integrity": "sha512-KGzahc7puUKkzyMt+IqAep+TVNbKP+k2Lmwhub39m1AsTSkaDutx56aDCo+HLDzf/D26BIHTJWNiTG1KAJiQCg==",
+      "license": "MIT",
+      "engines": {
+        "node": "*"
+      }
+    },
     "node_modules/stackback": {
       "version": "0.0.2",
       "resolved": "https://registry.npmjs.org/stackback/-/stackback-0.0.2.tgz",
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/string_decoder": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz",
+      "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==",
+      "license": "MIT",
+      "dependencies": {
+        "safe-buffer": "~5.2.0"
+      }
+    },
     "node_modules/supports-color": {
       "version": "7.2.0",
       "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
         "node": ">=8"
       }
     },
+    "node_modules/text-hex": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/text-hex/-/text-hex-1.0.0.tgz",
+      "integrity": "sha512-uuVGNWzgJ4yhRaNSiubPY7OjISw4sw4E5Uv0wbjp+OzcbmVU/rsT8ujgcXJhn9ypzsgr5vlzpPqP+MBBKcGvbg==",
+      "license": "MIT"
+    },
     "node_modules/tinybench": {
       "version": "2.9.0",
       "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz",
         "node": ">=8.0"
       }
     },
+    "node_modules/triple-beam": {
+      "version": "1.4.1",
+      "resolved": "https://registry.npmjs.org/triple-beam/-/triple-beam-1.4.1.tgz",
+      "integrity": "sha512-aZbgViZrg1QNcG+LULa7nhZpJTZSLm/mXnHXnbAbjmN5aSa0y7V+wvv6+4WaBtpISJzThKy+PIPxc1Nq1EJ9mg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 14.0.0"
+      }
+    },
+    "node_modules/ts-algebra": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ts-algebra/-/ts-algebra-2.0.0.tgz",
+      "integrity": "sha512-FPAhNPFMrkwz76P7cdjdmiShwMynZYN6SgOujD1urY4oNm80Ou9oMdmbR45LotcKOXoy7wSmHkRFE6Mxbrhefw==",
+      "license": "MIT"
+    },
     "node_modules/tslib": {
       "version": "2.8.1",
       "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
         "node": ">= 10.0.0"
       }
     },
+    "node_modules/util-deprecate": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
+      "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==",
+      "license": "MIT"
+    },
     "node_modules/uuid": {
       "version": "11.1.1",
       "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz",
         "node": ">=8"
       }
     },
+    "node_modules/winston": {
+      "version": "3.19.0",
+      "resolved": "https://registry.npmjs.org/winston/-/winston-3.19.0.tgz",
+      "integrity": "sha512-LZNJgPzfKR+/J3cHkxcpHKpKKvGfDZVPS4hfJCc4cCG0CgYzvlD6yE/S3CIL/Yt91ak327YCpiF/0MyeZHEHKA==",
+      "license": "MIT",
+      "dependencies": {
+        "@colors/colors": "^1.6.0",
+        "@dabh/diagnostics": "^2.0.8",
+        "async": "^3.2.3",
+        "is-stream": "^2.0.0",
+        "logform": "^2.7.0",
+        "one-time": "^1.0.0",
+        "readable-stream": "^3.4.0",
+        "safe-stable-stringify": "^2.3.1",
+        "stack-trace": "0.0.x",
+        "triple-beam": "^1.3.0",
+        "winston-transport": "^4.9.0"
+      },
+      "engines": {
+        "node": ">= 12.0.0"
+      }
+    },
+    "node_modules/winston-transport": {
+      "version": "4.9.0",
+      "resolved": "https://registry.npmjs.org/winston-transport/-/winston-transport-4.9.0.tgz",
+      "integrity": "sha512-8drMJ4rkgaPo1Me4zD/3WLfI/zPdA9o2IipKODunnGDcuqbHwjsbB79ylv04LCGGzU0xQ6vTznOMpQGaLhhm6A==",
+      "license": "MIT",
+      "dependencies": {
+        "logform": "^2.7.0",
+        "readable-stream": "^3.6.2",
+        "triple-beam": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 12.0.0"
+      }
+    },
     "node_modules/yaml": {
       "version": "2.9.0",
       "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",

package.json CHANGED Viewed

@@ -32,15 +32,18 @@
   },
   "dependencies": {
     "@hono/node-server": "^2.0.3",
     "@langchain/core": "^1.1.45",
     "@langchain/google-genai": "^2.1.31",
     "@langchain/langgraph": "^1.3.0",
     "@langchain/openrouter": "^0.2.4",
     "dotenv": "^17.4.2",
     "hono": "^4.12.21",
     "langchain": "^1.4.0",
     "solc": "^0.8.35",
     "uuid": "^11.1.1",
     "zod": "^4.4.3"
   }
 }

   },
   "dependencies": {
     "@hono/node-server": "^2.0.3",
+    "@langchain/anthropic": "^1.3.29",
     "@langchain/core": "^1.1.45",
     "@langchain/google-genai": "^2.1.31",
     "@langchain/langgraph": "^1.3.0",
     "@langchain/openrouter": "^0.2.4",
+    "@solidity-parser/parser": "^0.20.2",
     "dotenv": "^17.4.2",
     "hono": "^4.12.21",
     "langchain": "^1.4.0",
     "solc": "^0.8.35",
     "uuid": "^11.1.1",
+    "winston": "^3.19.0",
     "zod": "^4.4.3"
   }
 }

src/agents/auditor/agent.ts CHANGED Viewed

@@ -1,20 +1,271 @@
 import { END, type GraphNode, START, StateGraph } from "@langchain/langgraph";
-import { AuditorState } from "./state.ts";
-import { slitherTool } from "./tools/slither-tool.ts";
-const PLACEHOLDER_VULNERABILITIES = [
-  { type: "reentrancy", severity: "high", description: "Unchecked external call allows reentrancy attack." },
-  { type: "integer-overflow", severity: "medium", description: "Arithmetic operation may overflow." },
-];
-const auditContract: GraphNode<typeof AuditorState> = async (state) => {
-  await slitherTool.invoke({ solidityFile: state.solidityFile });
-  return { vulnerabilities: PLACEHOLDER_VULNERABILITIES };
 };
 export const auditorAgent = new StateGraph(AuditorState)
-  .addNode("auditContract", auditContract)
-  .addEdge(START, "auditContract")
-  .addEdge("auditContract", END)
   .compile();

+import fs from "node:fs";
+import path from "node:path";
+import { HumanMessage, SystemMessage } from "@langchain/core/messages";
 import { END, type GraphNode, START, StateGraph } from "@langchain/langgraph";
+import { z } from "zod";
+import { logger } from "../../logger.ts";
+import { createLLM } from "../../config/llm.ts";
+import { JUDGE_FINDINGS_PROMPT, FIND_VULNERABILITIES_PROMPT, GATHER_CONTEXT_PROMPT } from "./prompts.ts";
+import { AuditorState, JudgeReviewSchema, CandidateFindingSchema } from "./state.ts";
+import { analyzeSolidityFile } from "./tools/solidity-analyzer-tool.ts";
+import { buildRepoTree } from "./tools/repo-tree-tool.ts";
+import {
+  DOC_BASENAMES,
+  DOC_EXTS,
+  MAX_DEPTH,
+  MAX_DOC_CHARS,
+  MAX_REFLECTIONS,
+  MAX_SOL_CHARS,
+  SKIP_DIRS,
+  SOL_EXT,
+  SOL_TEST_SUFFIXES,
+} from "./config.ts";
+import { matchLines } from "./utils.ts";
+const llm = createLLM();
+const walkDirectory = (dir: string, depth: number, solFiles: string[], docFiles: string[]) => {
+  if (depth > MAX_DEPTH) return;
+  let entries: fs.Dirent[];
+  try {
+    entries = fs.readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (entry.isDirectory()) {
+      if (!SKIP_DIRS.has(entry.name)) {
+        walkDirectory(path.join(dir, entry.name), depth + 1, solFiles, docFiles);
+      }
+    } else if (entry.isFile()) {
+      const fullPath = path.join(dir, entry.name);
+      const ext = path.extname(entry.name).toLowerCase();
+      const base = path.basename(entry.name, ext).toLowerCase();
+      if (ext === SOL_EXT) {
+        const isTest = SOL_TEST_SUFFIXES.some((suffix) => entry.name.endsWith(suffix));
+        if (!isTest) solFiles.push(fullPath);
+      } else if (DOC_EXTS.has(ext) || DOC_BASENAMES.has(base)) {
+        docFiles.push(fullPath);
+      }
+    }
+  }
+};
+const defineScope: GraphNode<typeof AuditorState> = async (state) => {
+  logger.info(`defineScope: walking repo at ${state.repoPath}`);
+  const solFiles: string[] = [];
+  const docFiles: string[] = [];
+  walkDirectory(state.repoPath, 0, solFiles, docFiles);
+  const fileTree = buildRepoTree(state.repoPath);
+  logger.info(`defineScope: found ${solFiles.length} Solidity file(s), ${docFiles.length} doc file(s)`);
+  logger.debug(`defineScope: Solidity files: ${JSON.stringify(solFiles)}`);
+  logger.debug(`defineScope: doc files: ${JSON.stringify(docFiles)}`);
+  logger.debug(`defineScope: file tree:\n${fileTree}`);
+  return { scope: solFiles, docs: docFiles, fileTree };
+};
+const gatherContext: GraphNode<typeof AuditorState> = async (state) => {
+  logger.info(`gatherContext: processing ${state.scope.length} Solidity file(s) and ${state.docs.length} doc file(s)`);
+  const readFile = (filePath: string): string => {
+    try {
+      return fs.readFileSync(filePath, "utf-8");
+    } catch {
+      return "";
+    }
+  };
+  // Read and analyze each Solidity file
+  const solidityEntries: { filePath: string; source: string; analysis: string }[] = [];
+  for (const filePath of state.scope) {
+    const source = readFile(filePath).slice(0, MAX_SOL_CHARS);
+    if (!source) continue;
+    const analysis = await analyzeSolidityFile(source, "full");
+    solidityEntries.push({ filePath, source, analysis });
+  }
+  // Read documentation files
+  const docEntries: { filePath: string; content: string }[] = [];
+  for (const filePath of state.docs) {
+    const content = readFile(filePath).slice(0, MAX_DOC_CHARS);
+    if (content) docEntries.push({ filePath, content });
+  }
+  // Build the LLM input
+  const parts: string[] = [];
+  if (docEntries.length > 0) {
+    parts.push("## Documentation\n");
+    for (const { filePath, content } of docEntries) {
+      parts.push(`### ${filePath}\n${content}`);
+    }
+  }
+  parts.push("## Structural Analysis (auto-generated)\n");
+  for (const { filePath, analysis } of solidityEntries) {
+    parts.push(`### ${filePath}\n${analysis}`);
+  }
+  parts.push("## Contract Source Code\n");
+  for (const { filePath, source } of solidityEntries) {
+    parts.push(`### ${filePath}\n\`\`\`solidity\n${source}\n\`\`\``);
+  }
+  const model = llm.withStructuredOutput(z.object({ context: z.string() }));
+  const result = await model.invoke([new SystemMessage(GATHER_CONTEXT_PROMPT), new HumanMessage(parts.join("\n\n"))]);
+  logger.info(`gatherContext: context built (${parts.join("\n\n").length} chars)`);
+  logger.debug(`gatherContext: full context:\n${parts.join("\n\n")}`);
+  return { repoContext: result.context };
+};
+const findVulnerabilities: GraphNode<typeof AuditorState> = async (state) => {
+  const model = llm.withStructuredOutput(z.object({ findings: z.array(CandidateFindingSchema) }));
+  const previousFeedback =
+    state.judgeReviews.length > 0
+      ? state.judgeReviews
+          .map((r, i) => {
+            const title = state.candidateFindings[i]?.title ?? `Finding ${i + 1}`;
+            return `- "${title}": ${r.isFalsePositive ? "FALSE POSITIVE" : "TRUE POSITIVE"}\n  Judge: ${r.review}`;
+          })
+          .join("\n")
+      : null;
+  logger.info(
+    `findVulnerabilities: invoking LLM for ${state.scope.length} file(s) in parallel (iteration ${state.reflectionCount + 1})`,
+  );
+  const allFindings = await Promise.all(
+    state.scope.map(async (filePath) => {
+      let source: string;
+      try {
+        source = fs.readFileSync(filePath, "utf-8").slice(0, MAX_SOL_CHARS);
+      } catch {
+        return [];
+      }
+      if (!source) return [];
+      let userMessage = `Contract (${filePath}):\n\n${source}\n\nProtocol Context:\n${state.repoContext}`;
+      if (previousFeedback) {
+        userMessage += `\n\nJudge feedback from previous iteration (iteration ${state.reflectionCount}):\n${previousFeedback}\n\nRevise your findings accordingly.`;
+      }
+      logger.debug(`findVulnerabilities: processing ${filePath}`);
+      const result = await model.invoke([
+        new SystemMessage(FIND_VULNERABILITIES_PROMPT),
+        new HumanMessage(userMessage),
+      ]);
+      return result.findings.map((finding: any) => ({
+        ...finding,
+        path: filePath,
+        location: matchLines(source, finding.codeSnippet) ?? "",
+      }));
+    }),
+  );
+  const candidateFindings = allFindings.flat();
+  logger.info(`findVulnerabilities: LLM returned ${candidateFindings.length} total candidate finding(s)`);
+  logger.debug(`findVulnerabilities: findings:\n${JSON.stringify(candidateFindings, null, 2)}`);
+  return { candidateFindings };
+};
+const judgeFindings: GraphNode<typeof AuditorState> = async (state) => {
+  if (state.candidateFindings.length === 0) {
+    logger.info("judgeFindings: no candidate findings to review, skipping LLM call");
+    return {
+      judgeReviews: [],
+      findings: [],
+      reflectionCount: state.reflectionCount + 1,
+    };
+  }
+  const model = llm.withStructuredOutput(JudgeReviewSchema);
+  logger.info(`judgeFindings: reviewing ${state.candidateFindings.length} candidate finding(s) in parallel`);
+  const reviews = await Promise.all(
+    state.candidateFindings.map(async (finding, i) => {
+      let source: string;
+      try {
+        source = fs.readFileSync(finding.path, "utf-8").slice(0, MAX_SOL_CHARS);
+      } catch {
+        source = "";
+      }
+      const findingText = `[Finding ${i + 1}] ${finding.title}\nSeverity: ${finding.severity}\nDescription: ${finding.description}\nLocation: ${finding.path} lines ${finding.location}\nCode:\n\`\`\`solidity\n${finding.codeSnippet}\n\`\`\``;
+      logger.debug(`judgeFindings: reviewing finding ${i + 1}: ${finding.title}`);
+      return model.invoke([
+        new SystemMessage(JUDGE_FINDINGS_PROMPT),
+        new HumanMessage(
+          `Contract (${finding.path}):\n\n${source}\n\nProtocol Context:\n${state.repoContext}\n\nFinding to Review:\n\n${findingText}`,
+        ),
+      ]);
+    }),
+  );
+  const confirmedEntries = state.candidateFindings
+    .map((finding, i) => ({ finding, review: reviews[i] }))
+    .filter(({ review }) => !review.isFalsePositive);
+  const findings = confirmedEntries.map(({ finding, review }) => ({
+    ...finding,
+    judgeReview: {
+      review: review.review,
+      confidence: review.confidence,
+      exploitablePaths: review.exploitablePaths,
+    },
+  }));
+  const falsePositiveCount = state.candidateFindings.length - findings.length;
+  logger.info(`judgeFindings: ${findings.length} confirmed, ${falsePositiveCount} false positive(s)`);
+  logger.debug(`judgeFindings: reviews:\n${JSON.stringify(reviews, null, 2)}`);
+  return {
+    judgeReviews: reviews,
+    findings,
+    reflectionCount: state.reflectionCount + 1,
+  };
 };
 export const auditorAgent = new StateGraph(AuditorState)
+  .addNode("defineScope", defineScope)
+  .addNode("gatherContext", gatherContext)
+  .addNode("findVulnerabilities", findVulnerabilities)
+  .addNode("judgeFindings", judgeFindings)
+  .addEdge(START, "defineScope")
+  .addEdge("defineScope", "gatherContext")
+  .addEdge("gatherContext", "findVulnerabilities")
+  .addEdge("findVulnerabilities", "judgeFindings")
+  .addConditionalEdges("judgeFindings", (state) => {
+    const hasFalsePositives = state.judgeReviews.some((r) => r.isFalsePositive);
+    if (hasFalsePositives && state.reflectionCount < MAX_REFLECTIONS) {
+      return "findVulnerabilities";
+    }
+    return END;
+  })
+  .compile();
+export const testAgent = new StateGraph(AuditorState)
+  .addNode("defineScope", defineScope)
+  .addNode("gatherContext", gatherContext)
+  .addEdge(START, "defineScope")
+  .addEdge("defineScope", "gatherContext")
+  .addEdge("gatherContext", END)
   .compile();

src/agents/auditor/config.ts ADDED Viewed

	@@ -0,0 +1,23 @@

+export const SOL_EXT = ".sol";
+export const SOL_TEST_SUFFIXES = [".t.sol", ".test.sol", ".spec.sol"];
+export const DOC_EXTS = new Set([".md", ".rst", ".adoc"]);
+export const DOC_BASENAMES = new Set(["readme", "whitepaper", "spec", "architecture", "design", "overview", "docs"]);
+export const SKIP_DIRS = new Set([
+  "node_modules",
+  ".git",
+  "out",
+  "artifacts",
+  "cache",
+  "lib",
+  ".deps",
+  "build",
+  "dist",
+  "test",
+  "tests",
+  "script",
+  "scripts",
+]);
+export const MAX_DEPTH = 6;
+export const MAX_DOC_CHARS = 12_000;
+export const MAX_SOL_CHARS = 40_000;
+export const MAX_REFLECTIONS = 1;

src/agents/auditor/model.ts DELETED Viewed

@@ -1,5 +0,0 @@
-import { ChatOpenRouter } from "@langchain/openrouter";
-export const auditorModel = new ChatOpenRouter({
-  model: "moonshotai/kimi-k2.6",
-});

src/agents/auditor/prompts.ts ADDED Viewed

	@@ -0,0 +1,50 @@

+export const GATHER_CONTEXT_PROMPT = `Você é um especialista em segurança de smart contracts. Você receberá documentação, uma análise estrutural e o código-fonte completo de todos os contratos Solidity em escopo. Produza um contexto detalhado do protocolo que guiará a descoberta de vulnerabilidades.
+Estruture sua resposta nas seguintes seções:
+## 1. Visão Geral dos Contratos
+Para cada contrato: seu propósito, tipo (contract/interface/library/abstract), cadeia de herança e principais dependências de outros contratos em escopo ou protocolos externos.
+## 2. Mapa de Estado e Armazenamento
+Liste todas as variáveis de estado relevantes entre os contratos, o que representam e quais funções as leem ou escrevem. Sinalize armazenamento compartilhado ou herdado.
+## 3. Fluxos Principais
+Trace os principais caminhos de execução e transições de estado de ponta a ponta entre contratos (ex.: depósito → cunhar shares → atualizar recompensas; saque → queimar shares → transferir ETH). Inclua chamadas entre contratos.
+## 4. Invariantes
+Condições que devem sempre ser verdadeiras (ex.: "o supply total deve ser igual à soma de todos os saldos", "o saldo de ETH do contrato ≥ soma de todos os depósitos dos usuários"). Derive-as tanto do código-fonte quanto da documentação.
+## 5. Premissas de Design
+O que o protocolo assume sobre chamadores, contratos externos, oráculos, chaves de administrador e comportamento de tokens (ex.: "tokens são compatíveis com ERC-20", "o admin é confiável", "sem tokens com taxa de transferência").
+## 6. Regras de Negócio
+Controles de acesso, estruturas de taxas, timelocks, limites, mecanismos de pausa, padrões de atualização e quaisquer outras restrições de domínio.
+Seja preciso e exaustivo — quanto mais rico o contexto, com mais precisão as vulnerabilidades podem ser identificadas e validadas.`;
+export const FIND_VULNERABILITIES_PROMPT = `Você é um auditor especialista em segurança de smart contracts com foco em Solidity. Analise sistematicamente o código-fonte do contrato e o contexto do protocolo para identificar vulnerabilidades de segurança.
+Para cada vulnerabilidade, forneça TODOS os seguintes campos:
+- **title**: Nome curto e preciso (ex.: "Reentrância em withdraw", "Controle de acesso ausente em setFee").
+- **description**: Explique o comportamento ESPERADO versus o comportamento OBSERVADO (vulnerável) em 2 a 4 frases.
+- **recommendation**: Correção específica e acionável (ex.: "Aplicar o padrão checks-effects-interactions", "Adicionar o modificador onlyOwner").
+- **severity**: Um de "high" (perda direta de fundos ou tomada de controle do contrato), "medium" (risco indireto ou condicional), "low" (problema de boas práticas, sem risco financeiro imediato).
+- **codeSnippet**: O bloco de código vulnerável exatamente como aparece no código-fonte.
+Categorias de vulnerabilidades a verificar sistematicamente: reentrância (simples e entre funções), controle de acesso, overflow/underflow de inteiros, manipulação de oráculo, ataques de flash loan, front-running/MEV, replay de assinatura, colisões de armazenamento, proxies não inicializados, delegatecall inseguro, griefing de gas, negação de serviço, perda de precisão e violações de lógica/regras de negócio.
+Se feedback do juiz de uma iteração anterior for fornecido, remova os falsos positivos confirmados da sua lista e refine ou expanda os achados restantes com base na crítica.`;
+export const JUDGE_FINDINGS_PROMPT = `Você é um revisor rigoroso de segurança de smart contracts. Avalie cada vulnerabilidade candidata submetida pelo auditor e determine se é um verdadeiro positivo ou um falso positivo.
+Para cada achado, forneça TODOS os seguintes campos:
+- **review**: Análise detalhada (3 a 6 frases) explicando por que a vulnerabilidade é ou não real. Referencie código específico, invariantes do protocolo, pré-condições e controles mitigadores.
+- **isFalsePositive**: true se o achado NÃO for explorável na prática; false se for uma vulnerabilidade real.
+- **confidence**: Número inteiro de 0 a 100 refletindo sua confiança no veredicto.
+- **exploitablePaths**: Array de strings. Se for verdadeiro positivo, forneça caminhos concretos confirmando a explorabilidade com valores reais. Cada rastreamento deve descrever os passos do atacante com entradas/valores realistas (ex.: "1. Atacante chama deposit(100 ETH) 2. Contrato do atacante no fallback chama withdraw() novamente antes da atualização do saldo 3. Atacante drena 100 ETH duas vezes"). Se for falso positivo, forneça o raciocínio que bloqueia o exploit.
+Um achado é falso positivo somente se: o caminho de exploit for inacessível dados os controles de acesso ou pré-condições, já estiver totalmente mitigado pelo código, exigir condições impossíveis ou economicamente inviáveis, ou for explicitamente documentado como comportamento esperado nas premissas do protocolo.
+Você deve fornecer exatamente um objeto de revisão por achado, na mesma ordem em que os achados foram apresentados.`;

src/agents/auditor/state.ts CHANGED Viewed

@@ -1,7 +1,42 @@
 import { StateSchema } from "@langchain/langgraph";
 import { z } from "zod";
 export const AuditorState = new StateSchema({
-  solidityFile: z.string().default(""),
-  vulnerabilities: z.array(z.record(z.string(), z.any())).default([]),
 });

 import { StateSchema } from "@langchain/langgraph";
 import { z } from "zod";
+export const CandidateFindingSchema = z.object({
+  title: z.string(),
+  description: z.string(),
+  recommendation: z.string(),
+  severity: z.enum(["high", "medium", "low"]),
+  codeSnippet: z.string(),
+});
+export const LocatedFindingSchema = CandidateFindingSchema.extend({
+  location: z.string(),
+  path: z.string(),
+});
+export const JudgeReviewSchema = z.object({
+  review: z.string(),
+  isFalsePositive: z.boolean(),
+  confidence: z.number(),
+  exploitablePaths: z.array(z.string()),
+});
+export const FindingSchema = LocatedFindingSchema.extend({
+  judgeReview: z.object({
+    review: z.string(),
+    confidence: z.number(),
+    exploitablePaths: z.array(z.string()),
+  }),
+});
 export const AuditorState = new StateSchema({
+  repoPath: z.string().default(""),
+  scope: z.array(z.string()).default([]),
+  docs: z.array(z.string()).default([]),
+  fileTree: z.string().default(""),
+  repoContext: z.string().default(""),
+  candidateFindings: z.array(LocatedFindingSchema).default([]),
+  judgeReviews: z.array(JudgeReviewSchema).default([]),
+  findings: z.array(FindingSchema).default([]),
+  reflectionCount: z.number().default(0),
 });

src/agents/auditor/tools/repo-tree-tool.ts ADDED Viewed

	@@ -0,0 +1,103 @@

+import fs from "node:fs";
+import path from "node:path";
+import { tool } from "langchain";
+import { z } from "zod";
+import { DOC_BASENAMES, DOC_EXTS, MAX_DEPTH, SKIP_DIRS, SOL_EXT, SOL_TEST_SUFFIXES } from "../config.ts";
+const CONFIG_FILES = new Set([
+  "foundry.toml",
+  "hardhat.config.js",
+  "hardhat.config.ts",
+  "remappings.txt",
+  "package.json",
+]);
+interface TreeNode {
+  name: string;
+  isDir: boolean;
+  children?: TreeNode[];
+  tag?: string;
+}
+const buildTree = (dir: string, depth: number): TreeNode[] => {
+  if (depth > MAX_DEPTH) return [];
+  let entries: fs.Dirent[];
+  try {
+    entries = fs.readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  const nodes: TreeNode[] = [];
+  for (const entry of [...entries].sort((a, b) => {
+    if (a.isDirectory() && !b.isDirectory()) return -1;
+    if (!a.isDirectory() && b.isDirectory()) return 1;
+    return a.name.localeCompare(b.name);
+  })) {
+    if (entry.isDirectory()) {
+      if (SKIP_DIRS.has(entry.name)) continue;
+      const children = buildTree(path.join(dir, entry.name), depth + 1);
+      if (children.length > 0) nodes.push({ name: entry.name, isDir: true, children });
+    } else if (entry.isFile()) {
+      const ext = path.extname(entry.name).toLowerCase();
+      const base = path.basename(entry.name, ext).toLowerCase();
+      if (ext === SOL_EXT) {
+        const isTest = SOL_TEST_SUFFIXES.some((suffix) => entry.name.endsWith(suffix));
+        nodes.push({ name: entry.name, isDir: false, tag: isTest ? "[test]" : "[sol]" });
+      } else if (DOC_EXTS.has(ext) || DOC_BASENAMES.has(base)) {
+        nodes.push({ name: entry.name, isDir: false, tag: "[doc]" });
+      } else if (CONFIG_FILES.has(entry.name)) {
+        nodes.push({ name: entry.name, isDir: false, tag: "[config]" });
+      }
+    }
+  }
+  return nodes;
+};
+const renderTree = (nodes: TreeNode[], prefix: string): string => {
+  const lines: string[] = [];
+  for (let i = 0; i < nodes.length; i++) {
+    const node = nodes[i];
+    const isLast = i === nodes.length - 1;
+    const connector = isLast ? "└── " : "├── ";
+    const childPrefix = isLast ? "    " : "│   ";
+    if (node.isDir) {
+      lines.push(`${prefix}${connector}${node.name}/`);
+      if (node.children && node.children.length > 0) {
+        lines.push(renderTree(node.children, prefix + childPrefix));
+      }
+    } else {
+      lines.push(`${prefix}${connector}${node.name} ${node.tag}`);
+    }
+  }
+  return lines.join("\n");
+};
+export const buildRepoTree = (repoPath: string): string => {
+  const nodes = buildTree(repoPath, 0);
+  if (nodes.length === 0) return "(no relevant files found)";
+  const repoName = path.basename(repoPath);
+  return `${repoName}/\n${renderTree(nodes, "")}`;
+};
+export const repoTreeTool = tool(
+  async ({ repoPath }) => buildRepoTree(repoPath),
+  {
+    name: "repo_tree",
+    description:
+      "Walk a repository and return a file-system tree of relevant files tagged by kind: [sol] for auditable Solidity contracts, [test] for Solidity test files, [doc] for documentation, and [config] for project config files. Use this during Define Scope to understand repository layout before selecting which files to audit.",
+    schema: z.object({
+      repoPath: z.string().describe("Absolute path to the repository root."),
+    }),
+  },
+);

src/agents/auditor/tools/slither-tool.ts DELETED Viewed

@@ -1,15 +0,0 @@
-import { tool } from "langchain";
-import { z } from "zod";
-export const slitherTool = tool(
-  async (_input) => {
-    return [];
-  },
-  {
-    name: "slither",
-    description: "Run slither static analysis on a Solidity contract.",
-    schema: z.object({
-      solidityFile: z.string().describe("The Solidity source code to analyze."),
-    }),
-  },
-);

src/agents/auditor/tools/solidity-analyzer-tool.ts ADDED Viewed

	@@ -0,0 +1,567 @@

+import { parse, visit } from "@solidity-parser/parser";
+import { tool } from "langchain";
+import { z } from "zod";
+const ASSIGNMENT_OPS = new Set(["=", "+=", "-=", "*=", "/=", "%=", "|=", "&=", "^=", "<<=", ">>=", "**="]);
+const BUILTIN_NAMESPACES = new Set(["abi", "block", "msg", "tx", "bytes", "string", "type"]);
+interface StateVar {
+  name: string;
+  type: string;
+  visibility: string;
+  constant: boolean;
+  immutable: boolean;
+}
+interface EventDef {
+  name: string;
+  params: string[];
+  anonymous: boolean;
+}
+interface ModifierDef {
+  name: string;
+  params: string[];
+}
+interface FunctionDef {
+  name: string;
+  isConstructor: boolean;
+  isReceive: boolean;
+  isFallback: boolean;
+  visibility: string;
+  mutability: string;
+  params: string[];
+  returns: string[];
+  modifiers: string[];
+  internalCalls: string[];
+  externalCalls: string[];
+  stateReads: string[];
+  stateWrites: string[];
+}
+interface ContractAnalysis {
+  name: string;
+  kind: string;
+  baseContracts: string[];
+  usingFor: string[];
+  stateVars: StateVar[];
+  events: EventDef[];
+  modifiers: ModifierDef[];
+  functions: FunctionDef[];
+}
+const typeToString = (node: any): string => {
+  if (!node) return "unknown";
+  switch (node.type) {
+    case "ElementaryTypeName":
+      return node.name as string;
+    case "UserDefinedTypeName":
+      return (node.namePath ?? node.name) as string;
+    case "ArrayTypeName":
+      return `${typeToString(node.baseTypeName)}[${node.length ?? ""}]`;
+    case "Mapping":
+      return `mapping(${typeToString(node.keyType)} => ${typeToString(node.valueType)})`;
+    case "FunctionTypeName":
+      return "function";
+    default:
+      return "unknown";
+  }
+};
+const paramToString = (p: any) => {
+  if (!p) return "?";
+  const type = typeToString(p.typeName);
+  return p.name ? `${type} ${p.name}` : type;
+};
+const collectLHSRoots = (node: any, targets: Set<string>) => {
+  if (!node) return;
+  switch (node.type) {
+    case "Identifier":
+      targets.add(node.name as string);
+      break;
+    case "MemberAccess":
+      collectLHSRoots(node.expression, targets);
+      break;
+    case "IndexAccess":
+      collectLHSRoots(node.base, targets);
+      break;
+    case "TupleExpression":
+      for (const c of node.components ?? []) collectLHSRoots(c, targets);
+      break;
+  }
+};
+const analyzeFunction = (funcNode: any, stateVarNames: Set<string>) => {
+  const internalCalls = new Set<string>();
+  const externalCalls = new Set<string>();
+  const writeTargets = new Set<string>();
+  const allStateAccesses = new Set<string>();
+  const localVars = new Set<string>();
+  if (!funcNode.body) {
+    return { internalCalls: [], externalCalls: [], stateReads: [], stateWrites: [] };
+  }
+  // Collect function params and return params as locals so they don't shadow state vars
+  for (const p of funcNode.parameters ?? []) {
+    if (p?.name) localVars.add(p.name as string);
+  }
+  for (const p of funcNode.returnParameters ?? []) {
+    if (p?.name) localVars.add(p.name as string);
+  }
+  // Collect local variable declarations
+  visit(funcNode.body, {
+    VariableDeclarationStatement: (node: any) => {
+      for (const v of node.variables ?? []) {
+        if (v?.name) localVars.add(v.name as string);
+      }
+    },
+  });
+  const effectiveStateVars = new Set([...stateVarNames].filter((v) => !localVars.has(v)));
+  // Collect write targets from assignment LHS, unary mutations, and delete
+  visit(funcNode.body, {
+    ExpressionStatement: (node: any) => {
+      const expr = node.expression;
+      if (expr?.type === "BinaryOperation" && ASSIGNMENT_OPS.has(expr.operator as string)) {
+        collectLHSRoots(expr.left, writeTargets);
+      }
+      // Handle ++, --, and delete — all work on any lvalue (arr[i]++, delete s.field, etc.)
+      if (
+        expr?.type === "UnaryOperation" &&
+        (expr.operator === "++" || expr.operator === "--" || expr.operator === "delete")
+      ) {
+        collectLHSRoots(expr.subExpression, writeTargets);
+      }
+    },
+  });
+  // Collect calls and state-var identifier accesses
+  visit(funcNode.body, {
+    FunctionCall: (node: any) => {
+      const expr = node.expression;
+      if (expr?.type === "Identifier") {
+        internalCalls.add(expr.name as string);
+      } else if (expr?.type === "MemberAccess") {
+        const base = expr.expression;
+        if (base?.type === "Identifier" && (base.name === "this" || base.name === "super")) {
+          internalCalls.add(expr.memberName as string);
+        } else if (base?.type === "Identifier" && BUILTIN_NAMESPACES.has(base.name as string)) {
+          // abi.encode, block.xxx, msg.xxx, etc. — not external calls
+        } else {
+          const baseStr = base?.type === "Identifier" ? (base.name as string) : "<expr>";
+          externalCalls.add(`${baseStr}.${expr.memberName as string}`);
+        }
+      }
+    },
+    Identifier: (node: any) => {
+      if (effectiveStateVars.has(node.name as string)) {
+        allStateAccesses.add(node.name as string);
+      }
+    },
+  });
+  const stateWrites = [...allStateAccesses].filter((v) => writeTargets.has(v));
+  // A var can be in both — e.g. x = x + 1 is both a read and a write.
+  const stateReads = [...allStateAccesses];
+  return {
+    internalCalls: [...internalCalls],
+    externalCalls: [...externalCalls],
+    stateReads,
+    stateWrites,
+  };
+};
+const hasCycle = (start: string, current: string, callMap: Map<string, string[]>, visited: Set<string>) => {
+  for (const callee of callMap.get(current) ?? []) {
+    if (callee === start) return true;
+    if (!visited.has(callee)) {
+      visited.add(callee);
+      if (hasCycle(start, callee, callMap, visited)) return true;
+    }
+  }
+  return false;
+};
+const fnLabel = (fn: FunctionDef) => {
+  if (fn.isConstructor) return "constructor";
+  if (fn.isReceive) return "receive";
+  if (fn.isFallback) return "fallback";
+  return fn.name;
+};
+const generateShortMarkdown = (imports: string[], contracts: ContractAnalysis[]) => {
+  const lines: string[] = [];
+  lines.push("# Solidity Analysis\n");
+  if (imports.length > 0) {
+    lines.push(`**Imports:** ${imports.map((i) => `\`${i}\``).join(", ")}\n`);
+  }
+  for (const contract of contracts) {
+    const inheritance =
+      contract.baseContracts.length > 0 ? ` : ${contract.baseContracts.map((b) => `\`${b}\``).join(", ")}` : "";
+    lines.push(`---\n\n## \`${contract.name}\` (${contract.kind})${inheritance}\n`);
+    // State variables — one line, name:type
+    if (contract.stateVars.length > 0) {
+      const vars = contract.stateVars.map((v) => {
+        const flags = [v.constant && "constant", v.immutable && "immutable"].filter(Boolean);
+        const suffix = flags.length > 0 ? `, ${flags.join(", ")}` : "";
+        return `\`${v.name}: ${v.type}\` (${v.visibility}${suffix})`;
+      });
+      lines.push(`**State:** ${vars.join(", ")}\n`);
+    }
+    // Modifiers — names only
+    if (contract.modifiers.length > 0) {
+      const mods = contract.modifiers.map(
+        (m) => `\`${m.name}${m.params.length > 0 ? `(${m.params.join(", ")})` : ""}\``,
+      );
+      lines.push(`**Modifiers:** ${mods.join(", ")}\n`);
+    }
+    // Events — name + params, one line each
+    if (contract.events.length > 0) {
+      const evts = contract.events.map((e) => `\`${e.name}(${e.params.join(", ")})\``);
+      lines.push(`**Events:** ${evts.join(", ")}\n`);
+    }
+    // Function list — compact, one line per function
+    if (contract.functions.length > 0) {
+      lines.push("**Functions:**");
+      for (const fn of contract.functions) {
+        const label = fnLabel(fn);
+        const params = fn.params.join(", ");
+        const ret = fn.returns.length > 0 ? ` → ${fn.returns.join(", ")}` : "";
+        const mods = fn.modifiers.length > 0 ? ` [${fn.modifiers.join(", ")}]` : "";
+        lines.push(`- \`${label}(${params})${ret}\` — ${fn.visibility} ${fn.mutability}${mods}`);
+      }
+      lines.push("");
+    }
+    // External calls — only functions that make them
+    const externalFuncs = contract.functions.filter((f) => f.externalCalls.length > 0);
+    if (externalFuncs.length > 0) {
+      lines.push("**External Calls:**");
+      for (const fn of externalFuncs) {
+        lines.push(`- \`${fnLabel(fn)}\`: ${fn.externalCalls.map((c) => `\`${c}\``).join(", ")}`);
+      }
+      lines.push("");
+    }
+  }
+  return lines.join("\n");
+};
+const generateMarkdown = (imports: string[], contracts: ContractAnalysis[]) => {
+  const lines: string[] = [];
+  lines.push("# Solidity Contract Analysis\n");
+  // Imports
+  lines.push("## Imports\n");
+  if (imports.length === 0) {
+    lines.push("_No imports._\n");
+  } else {
+    for (const imp of imports) lines.push(`- \`${imp}\``);
+    lines.push("");
+  }
+  for (const contract of contracts) {
+    const kindLabel = contract.kind.charAt(0).toUpperCase() + contract.kind.slice(1);
+    lines.push(`---\n\n## ${kindLabel}: \`${contract.name}\`\n`);
+    // Inheritance
+    lines.push("### Inheritance\n");
+    if (contract.baseContracts.length === 0) {
+      lines.push("_None._\n");
+    } else {
+      for (const base of contract.baseContracts) lines.push(`- \`${base}\``);
+      lines.push("");
+    }
+    // Using For
+    if (contract.usingFor.length > 0) {
+      lines.push("### Using For\n");
+      for (const u of contract.usingFor) lines.push(`- ${u}`);
+      lines.push("");
+    }
+    // Storage layout
+    lines.push("### Storage Layout (State Variables)\n");
+    if (contract.stateVars.length === 0) {
+      lines.push("_No state variables._\n");
+    } else {
+      lines.push("| Slot | Name | Type | Visibility | Flags |");
+      lines.push("|------|------|------|------------|-------|");
+      contract.stateVars.forEach((v, i) => {
+        const flags = [v.constant && "constant", v.immutable && "immutable"].filter(Boolean).join(", ");
+        lines.push(`| ${i} | \`${v.name}\` | \`${v.type}\` | ${v.visibility} | ${flags} |`);
+      });
+      lines.push("");
+    }
+    // Events
+    lines.push("### Events\n");
+    if (contract.events.length === 0) {
+      lines.push("_No events._\n");
+    } else {
+      for (const evt of contract.events) {
+        const params = evt.params.join(", ");
+        lines.push(`- **\`${evt.name}\`**\`(${params})\`${evt.anonymous ? " _(anonymous)_" : ""}`);
+      }
+      lines.push("");
+    }
+    // Modifiers
+    lines.push("### Modifiers\n");
+    if (contract.modifiers.length === 0) {
+      lines.push("_No modifiers._\n");
+    } else {
+      for (const mod of contract.modifiers) {
+        lines.push(`- **\`${mod.name}\`**\`(${mod.params.join(", ")})\``);
+      }
+      lines.push("");
+    }
+    // Function list
+    lines.push("### Function List\n");
+    if (contract.functions.length === 0) {
+      lines.push("_No functions._\n");
+    } else {
+      lines.push("| Name | Visibility | Mutability | Parameters | Returns | Modifiers |");
+      lines.push("|------|------------|------------|------------|---------|-----------|");
+      for (const fn of contract.functions) {
+        lines.push(
+          `| \`${fnLabel(fn)}\` | ${fn.visibility} | ${fn.mutability} | \`${fn.params.join(", ")}\` | \`${fn.returns.join(", ")}\` | ${fn.modifiers.join(", ")} |`,
+        );
+      }
+      lines.push("");
+    }
+    // Call graph
+    lines.push("### Call Graph\n");
+    const hasCalls = contract.functions.some((f) => f.internalCalls.length > 0 || f.externalCalls.length > 0);
+    if (!hasCalls) {
+      lines.push("_No function calls detected._\n");
+    } else {
+      for (const fn of contract.functions) {
+        if (fn.internalCalls.length === 0 && fn.externalCalls.length === 0) continue;
+        lines.push(`**\`${fnLabel(fn)}\`**`);
+        for (const call of fn.internalCalls) lines.push(`  - → \`${call}\` _(internal)_`);
+        for (const call of fn.externalCalls) lines.push(`  - → \`${call}\` _(external)_`);
+      }
+      lines.push("");
+    }
+    // External calls
+    lines.push("### External Calls\n");
+    const externalFuncs = contract.functions.filter((f) => f.externalCalls.length > 0);
+    if (externalFuncs.length === 0) {
+      lines.push("_No external calls detected._\n");
+    } else {
+      for (const fn of externalFuncs) {
+        lines.push(`**\`${fnLabel(fn)}\`**`);
+        for (const call of fn.externalCalls) lines.push(`  - \`${call}\``);
+      }
+      lines.push("");
+    }
+    // Internal recursion
+    lines.push("### Internal Recursion\n");
+    const callMap = new Map(contract.functions.map((f) => [fnLabel(f), f.internalCalls]));
+    const recursiveFns = contract.functions.filter((fn) => hasCycle(fnLabel(fn), fnLabel(fn), callMap, new Set()));
+    if (recursiveFns.length === 0) {
+      lines.push("_No recursive functions detected._\n");
+    } else {
+      for (const fn of recursiveFns) lines.push(`- **\`${fnLabel(fn)}\`** is recursive`);
+      lines.push("");
+    }
+    // State variable touchpoints
+    lines.push("### State Variable Touchpoints\n");
+    const touchedFns = contract.functions.filter((f) => f.stateReads.length > 0 || f.stateWrites.length > 0);
+    if (touchedFns.length === 0) {
+      lines.push("_No state variable accesses detected._\n");
+    } else {
+      lines.push("| Function | Reads | Writes |");
+      lines.push("|----------|-------|--------|");
+      for (const fn of touchedFns) {
+        const reads = fn.stateReads.map((r) => `\`${r}\``).join(", ");
+        const writes = fn.stateWrites.map((w) => `\`${w}\``).join(", ");
+        lines.push(`| \`${fnLabel(fn)}\` | ${reads} | ${writes} |`);
+      }
+      lines.push("");
+    }
+  }
+  // External dependencies summary
+  lines.push("---\n\n## External Dependencies\n");
+  lines.push("### Import Paths\n");
+  if (imports.length === 0) {
+    lines.push("_No imports._\n");
+  } else {
+    for (const imp of imports) lines.push(`- \`${imp}\``);
+    lines.push("");
+  }
+  const externalTargets = new Set<string>();
+  for (const contract of contracts) {
+    for (const fn of contract.functions) {
+      for (const call of fn.externalCalls) {
+        const target = call.split(".")[0];
+        if (target && target !== "<expr>") externalTargets.add(target);
+      }
+    }
+  }
+  lines.push("### External Contract Interactions\n");
+  if (externalTargets.size === 0) {
+    lines.push("_No external contract interactions detected._\n");
+  } else {
+    for (const dep of externalTargets) lines.push(`- \`${dep}\``);
+    lines.push("");
+  }
+  return lines.join("\n");
+};
+export const analyzeSolidityFile = async (soliditySource: string, mode: "full" | "short") => {
+  let ast: any;
+  try {
+    ast = parse(soliditySource, { tolerant: true, loc: true, range: true });
+  } catch (e: any) {
+    return `# Parse Error\n\nFailed to parse Solidity source: ${e.message as string}`;
+  }
+  const imports: string[] = [];
+  const contracts: ContractAnalysis[] = [];
+  for (const node of ast.children ?? []) {
+    if (node.type === "ImportDirective") {
+      imports.push(node.path as string);
+    }
+  }
+  for (const node of ast.children ?? []) {
+    if (node.type !== "ContractDefinition") continue;
+    const contract: ContractAnalysis = {
+      name: node.name as string,
+      kind: (node.kind as string) ?? "contract",
+      baseContracts: (node.baseContracts ?? []).map(
+        (bc: any) => (bc.baseName?.namePath ?? bc.baseName?.name ?? "?") as string,
+      ),
+      usingFor: [],
+      stateVars: [],
+      events: [],
+      modifiers: [],
+      functions: [],
+    };
+    const stateVarNames = new Set<string>();
+    for (const member of node.subNodes ?? []) {
+      switch (member.type) {
+        case "StateVariableDeclaration":
+          for (const v of member.variables ?? []) {
+            stateVarNames.add(v.name as string);
+            contract.stateVars.push({
+              name: v.name as string,
+              type: typeToString(v.typeName),
+              visibility: (v.visibility as string) ?? "internal",
+              constant: (v.isDeclaredConst as boolean) ?? false,
+              immutable: (v.isImmutable as boolean) ?? false,
+            });
+          }
+          break;
+        case "EventDefinition": {
+          const params = (member.parameters ?? []).map((p: any) => {
+            const indexed = p.isIndexed ? "indexed " : "";
+            const name = p.name ? ` ${p.name as string}` : "";
+            return `${indexed}${typeToString(p.typeName)}${name}`;
+          });
+          contract.events.push({
+            name: member.name as string,
+            params,
+            anonymous: (member.isAnonymous as boolean) ?? false,
+          });
+          break;
+        }
+        case "ModifierDefinition":
+          contract.modifiers.push({
+            name: member.name as string,
+            params: (member.parameters ?? []).map(paramToString),
+          });
+          break;
+        case "FunctionDefinition": {
+          const { internalCalls, externalCalls, stateReads, stateWrites } = analyzeFunction(member, stateVarNames);
+          contract.functions.push({
+            name: (member.name as string) ?? "",
+            isConstructor: (member.isConstructor as boolean) ?? false,
+            isReceive: (member.isReceiveEther as boolean) ?? false,
+            isFallback: (member.isFallback as boolean) ?? false,
+            visibility: (member.visibility as string) ?? "internal",
+            mutability: (member.stateMutability as string) ?? "nonpayable",
+            params: (member.parameters ?? []).map(paramToString),
+            returns: (member.returnParameters ?? []).map(paramToString),
+            modifiers: (member.modifiers ?? []).map((m: any) => m.name as string),
+            internalCalls,
+            externalCalls,
+            stateReads,
+            stateWrites,
+          });
+          break;
+        }
+        case "UsingForDeclaration": {
+          const forType = member.typeName ? typeToString(member.typeName) : "*";
+          if (member.libraryName) {
+            contract.usingFor.push(`\`${member.libraryName as string}\` for \`${forType}\``);
+          } else {
+            // New-style: using {fn1, fn2, ...} for T
+            const fns = (member.functions ?? [])
+              .map((f: any) => (f.typeName?.namePath ?? f.typeName?.name ?? f.path ?? "?") as string)
+              .join(", ");
+            contract.usingFor.push(`{${fns}} for \`${forType}\``);
+          }
+          break;
+        }
+      }
+    }
+    contracts.push(contract);
+  }
+  return mode === "short" ? generateShortMarkdown(imports, contracts) : generateMarkdown(imports, contracts);
+};
+export const solidityAnalyzerTool = tool(
+  async ({ solidityFile, mode }) => {
+    return analyzeSolidityFile(solidityFile, mode);
+  },
+  {
+    name: "solidity_analyzer",
+    description:
+      "Parse a Solidity source file and generate a markdown report. Use mode='short' for a compact token-efficient summary (imports, state, modifiers, events, function signatures, external calls). Use mode='full' for the complete report including storage layout table, call graph, recursion detection, state variable touchpoints, and external dependencies.",
+    schema: z.object({
+      solidityFile: z.string().describe("The full Solidity source code to analyze."),
+      mode: z
+        .enum(["full", "short"])
+        .default("full")
+        .describe("Report verbosity. 'short' saves tokens; 'full' provides the complete analysis."),
+    }),
+  },
+);

src/agents/auditor/utils.ts ADDED Viewed

	@@ -0,0 +1,36 @@

+export const matchLines = (fileContent: string, codeSnippet: string): string | null => {
+  const fileLines = fileContent.split("\n");
+  const snippetLines = codeSnippet.split("\n").map((line) => line.trim());
+  for (let i = 0; i < fileLines.length; i++) {
+    const fileLine = fileLines[i].trim();
+    if (fileLine === snippetLines[0]) {
+      let snippetIndex = 1;
+      const startLine = i + 1;
+      let endLine = i + 1;
+      let fileIndex = i + 1;
+      while (snippetIndex < snippetLines.length && fileIndex < fileLines.length) {
+        const currentFileLine = fileLines[fileIndex].trim();
+        if (currentFileLine === snippetLines[snippetIndex]) {
+          endLine = fileIndex + 1;
+          snippetIndex++;
+        }
+        fileIndex++;
+      }
+      if (snippetIndex === snippetLines.length) {
+        if (startLine === endLine) {
+          return `L${startLine}`;
+        }
+        return `L${startLine}-${endLine}`;
+      }
+    }
+  }
+  return null;
+};

src/config/llm.ts CHANGED Viewed

@@ -1,7 +1,8 @@
 import { ChatGoogleGenerativeAI } from "@langchain/google-genai";
 import type { BaseChatModel } from "@langchain/core/language_models/chat_models";
-export type LLMProvider = "google" | "openrouter";
 export function createLLM(overrideProvider?: LLMProvider): BaseChatModel {
   const provider = overrideProvider || (process.env.LLM_PROVIDER as LLMProvider) || "google";
@@ -14,6 +15,11 @@ export function createLLM(overrideProvider?: LLMProvider): BaseChatModel {
         temperature: 0.2,
       }) as BaseChatModel;
     }
     case "google":
     default:
       return new ChatGoogleGenerativeAI({

 import { ChatGoogleGenerativeAI } from "@langchain/google-genai";
+import { ChatAnthropic } from "@langchain/anthropic";
 import type { BaseChatModel } from "@langchain/core/language_models/chat_models";
+export type LLMProvider = "google" | "openrouter" | "anthropic";
 export function createLLM(overrideProvider?: LLMProvider): BaseChatModel {
   const provider = overrideProvider || (process.env.LLM_PROVIDER as LLMProvider) || "google";
         temperature: 0.2,
       }) as BaseChatModel;
     }
+    case "anthropic":
+      return new ChatAnthropic({
+        model: process.env.ANTHROPIC_MODEL || "claude-sonnet-4-6",
+        temperature: 0.2,
+      });
     case "google":
     default:
       return new ChatGoogleGenerativeAI({

src/index.ts CHANGED Viewed

@@ -1,4 +1,5 @@
 import "dotenv/config";
 import { readFileSync, mkdirSync, writeFileSync } from "node:fs";
 import { resolve, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -6,6 +7,7 @@ import { fileURLToPath } from "node:url";
 import { auditorAgent } from "./agents/auditor/agent.ts";
 import { coderAgent } from "./agents/coder/agent.ts";
 import { testerAgent } from "./agents/tester/agent.ts";
 const inputPath = process.argv[2];
@@ -25,17 +27,25 @@ console.log(coderResult.contract);
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const outputDir = resolve(__dirname, "agents/coder/outputs");
 mkdirSync(outputDir, { recursive: true });
-const outputPath = resolve(outputDir, "Contract.sol");
-writeFileSync(outputPath, coderResult.contract, "utf-8");
-console.log("\nContrato salvo em:", outputPath);
-const auditorResult = await auditorAgent.invoke({ solidityFile: coderResult.contract });
 console.log("\n======= Auditor =======");
-console.log(auditorResult.vulnerabilities);
 const testerResult = await testerAgent.invoke({
   solidityFiles: [coderResult.contract],
-  vulnerability: auditorResult.vulnerabilities[0] ?? {},
 });
 console.log("\n======= Tester =======");
 console.log(testerResult.results);

 import "dotenv/config";
 import { readFileSync, mkdirSync, writeFileSync } from "node:fs";
 import { resolve, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 import { auditorAgent } from "./agents/auditor/agent.ts";
 import { coderAgent } from "./agents/coder/agent.ts";
 import { testerAgent } from "./agents/tester/agent.ts";
+import { logger } from "./logger.ts";
 const inputPath = process.argv[2];
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const outputDir = resolve(__dirname, "agents/coder/outputs");
 mkdirSync(outputDir, { recursive: true });
+writeFileSync(resolve(outputDir, "Contract.sol"), coderResult.contract, "utf-8");
+writeFileSync(resolve(outputDir, "README.md"), requirementsText, "utf-8");
+console.log("\nContrato e requisitos salvos em:", outputDir);
 console.log("\n======= Auditor =======");
+logger.info("Starting auditorAgent");
+const auditorResult = await auditorAgent.invoke({ repoPath: outputDir });
+logger.info("Agent completed");
+logger.info(`Findings: ${auditorResult.findings.length}`);
+for (const f of auditorResult.findings) {
+  logger.info(`  [${f.severity.toUpperCase()}] ${f.title} — ${f.location}`);
+}
 const testerResult = await testerAgent.invoke({
   solidityFiles: [coderResult.contract],
+  vulnerability: auditorResult.findings[0] ?? {},
 });
 console.log("\n======= Tester =======");
 console.log(testerResult.results);

src/logger.ts ADDED Viewed

	@@ -0,0 +1,29 @@

+import fs from "node:fs";
+import path from "node:path";
+import winston from "winston";
+const logsDir = path.join(process.cwd(), "logs");
+fs.mkdirSync(logsDir, { recursive: true });
+const runTimestamp = new Date().toISOString().replace(/[:.]/g, "-");
+const { combine, colorize, errors, printf, timestamp } = winston.format;
+const lineFormat = printf(({ level, message, timestamp: ts, stack }) => {
+  const base = `${ts} [${level}] ${message}`;
+  return stack ? `${base}\n${stack}` : base;
+});
+export const logger = winston.createLogger({
+  level: "debug",
+  transports: [
+    new winston.transports.Console({
+      format: combine(colorize({ all: true }), timestamp({ format: "HH:mm:ss" }), errors({ stack: true }), lineFormat),
+    }),
+    new winston.transports.File({
+      filename: path.join(logsDir, `app-${runTimestamp}.log`),
+      format: combine(timestamp(), errors({ stack: true }), lineFormat),
+    }),
+  ],
+});

src/server.ts CHANGED Viewed

@@ -1,4 +1,8 @@
 import "dotenv/config";
 import { serve } from "@hono/node-server";
 import { Hono } from "hono";
 import { cors } from "hono/cors";
@@ -42,32 +46,49 @@ app.post("/api/run", (c) => {
         await send("log", "[Coder] Contrato compilado sem erros.");
       }
-      await send("coder", JSON.stringify({
-        contract: coderResult.contract,
-        compilationErrors: coderResult.compilationErrors,
-        reviewSummary: coderResult.reviewSummary,
-      }));
       // === AUDITOR ===
       await send("log", "[Auditor] Iniciando auditoria de segurança...");
-      const auditorResult = await auditorAgent.invoke({ solidityFile: coderResult.contract });
-      await send("log", `[Auditor] ${auditorResult.vulnerabilities.length} vulnerabilidade(s) encontrada(s).`);
-      await send("auditor", JSON.stringify({
-        vulnerabilities: auditorResult.vulnerabilities,
-      }));
       // === TESTER ===
       await send("log", "[Tester] Gerando testes de prova de conceito...");
       const testerResult = await testerAgent.invoke({
         solidityFiles: [coderResult.contract],
-        vulnerability: auditorResult.vulnerabilities[0] ?? {},
       });
       await send("log", `[Tester] ${testerResult.results.length} resultado(s) de teste.`);
-      await send("tester", JSON.stringify({
-        results: testerResult.results,
-      }));
       await send("log", "Pipeline concluído.");
       await send("done", "ok");

 import "dotenv/config";
+import { mkdirSync, writeFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { tmpdir } from "node:os";
 import { serve } from "@hono/node-server";
 import { Hono } from "hono";
 import { cors } from "hono/cors";
         await send("log", "[Coder] Contrato compilado sem erros.");
       }
+      await send(
+        "coder",
+        JSON.stringify({
+          contract: coderResult.contract,
+          compilationErrors: coderResult.compilationErrors,
+          reviewSummary: coderResult.reviewSummary,
+        }),
+      );
       // === AUDITOR ===
+      const outputDir = resolve(tmpdir(), `talp1-${Date.now()}`);
+      mkdirSync(outputDir, { recursive: true });
+      writeFileSync(resolve(outputDir, "Contract.sol"), coderResult.contract, "utf-8");
+      writeFileSync(resolve(outputDir, "README.md"), requirements, "utf-8");
       await send("log", "[Auditor] Iniciando auditoria de segurança...");
+      const auditorResult = await auditorAgent.invoke({ repoPath: outputDir });
+      await send("log", `[Auditor] ${auditorResult.findings.length} vulnerabilidade(s) encontrada(s).`);
+      for (const f of auditorResult.findings) {
+        await send("log", `[Auditor] [${f.severity.toUpperCase()}] ${f.title} — ${f.location}`);
+      }
+      await send(
+        "auditor",
+        JSON.stringify({
+          findings: auditorResult.findings,
+        }),
+      );
       // === TESTER ===
       await send("log", "[Tester] Gerando testes de prova de conceito...");
       const testerResult = await testerAgent.invoke({
         solidityFiles: [coderResult.contract],
+        vulnerability: auditorResult.findings[0] ?? {},
       });
       await send("log", `[Tester] ${testerResult.results.length} resultado(s) de teste.`);
+      await send(
+        "tester",
+        JSON.stringify({
+          results: testerResult.results,
+        }),
+      );
       await send("log", "Pipeline concluído.");
       await send("done", "ok");