@agentic-qe/v3 3.0.0-alpha.6 → 3.0.0-alpha.8

package/src/mcp/tools/security-compliance/scan.ts

@@ -1,365 +0,0 @@
-/**
- * Agentic QE v3 - Security Compliance MCP Tool
- *
- * qe/security/scan - Security scanning (SAST/DAST) and compliance validation
- *
- * This tool wraps the security-compliance domain service.
- */
-
-import { MCPToolBase, MCPToolConfig, MCPToolContext, MCPToolSchema } from '../base';
-import { ToolResult } from '../../types';
-
-// ============================================================================
-// Types
-// ============================================================================
-
-export interface SecurityScanParams {
-  target?: string;
-  scanType?: ('sast' | 'dast' | 'dependency' | 'secret')[];
-  compliance?: ('owasp' | 'gdpr' | 'hipaa' | 'pci-dss' | 'soc2')[];
-  dastUrl?: string;
-  depth?: 'quick' | 'standard' | 'deep';
-  failOnSeverity?: 'critical' | 'high' | 'medium' | 'low';
-  [key: string]: unknown;
-}
-
-export interface SecurityScanResult {
-  scanId: string;
-  summary: ScanSummary;
-  vulnerabilities: Vulnerability[];
-  complianceResults?: ComplianceResult[];
-  recommendations: string[];
-  passed: boolean;
-}
-
-export interface ScanSummary {
-  critical: number;
-  high: number;
-  medium: number;
-  low: number;
-  informational: number;
-  totalFiles: number;
-  scanDurationMs: number;
-}
-
-export interface Vulnerability {
-  id: string;
-  title: string;
-  severity: 'critical' | 'high' | 'medium' | 'low' | 'informational';
-  category: string;
-  location: VulnerabilityLocation;
-  description: string;
-  remediation: string;
-  cveId?: string;
-  cweId?: string;
-  references: string[];
-}
-
-export interface VulnerabilityLocation {
-  file: string;
-  line?: number;
-  column?: number;
-  snippet?: string;
-  dependency?: { name: string; version: string };
-}
-
-export interface ComplianceResult {
-  standard: string;
-  passed: boolean;
-  score: number;
-  violations: ComplianceViolation[];
-}
-
-export interface ComplianceViolation {
-  ruleId: string;
-  ruleName: string;
-  location: VulnerabilityLocation;
-  details: string;
-  remediation: string;
-}
-
-// ============================================================================
-// Tool Implementation
-// ============================================================================
-
-export class SecurityScanTool extends MCPToolBase<SecurityScanParams, SecurityScanResult> {
-  readonly config: MCPToolConfig = {
-    name: 'qe/security/scan',
-    description: 'Comprehensive security scanning including SAST, DAST, dependency analysis, and compliance validation.',
-    domain: 'security-compliance',
-    schema: SECURITY_SCAN_SCHEMA,
-    streaming: true,
-    timeout: 600000,
-  };
-
-  async execute(
-    params: SecurityScanParams,
-    context: MCPToolContext
-  ): Promise<ToolResult<SecurityScanResult>> {
-    const {
-      target = '.',
-      scanType = ['sast', 'dependency'],
-      compliance = [],
-      dastUrl,
-      depth = 'standard',
-      failOnSeverity = 'critical',
-    } = params;
-
-    const startTime = Date.now();
-
-    try {
-      this.emitStream(context, {
-        status: 'scanning',
-        message: `Starting security scan (${scanType.join(', ')})`,
-        depth,
-      });
-
-      if (this.isAborted(context)) {
-        return { success: false, error: 'Operation aborted' };
-      }
-
-      const vulnerabilities: Vulnerability[] = [];
-
-      // SAST scanning
-      if (scanType.includes('sast')) {
-        this.emitStream(context, { status: 'sast', message: 'Running static analysis' });
-        vulnerabilities.push(...generateSASTFindings());
-      }
-
-      // Dependency scanning
-      if (scanType.includes('dependency')) {
-        this.emitStream(context, { status: 'dependency', message: 'Scanning dependencies' });
-        vulnerabilities.push(...generateDependencyFindings());
-      }
-
-      // Secret scanning
-      if (scanType.includes('secret')) {
-        this.emitStream(context, { status: 'secret', message: 'Scanning for secrets' });
-        vulnerabilities.push(...generateSecretFindings());
-      }
-
-      // DAST scanning
-      if (scanType.includes('dast') && dastUrl) {
-        this.emitStream(context, { status: 'dast', message: `Scanning ${dastUrl}` });
-        vulnerabilities.push(...generateDASTFindings(dastUrl));
-      }
-
-      // Compliance validation
-      const complianceResults: ComplianceResult[] = compliance.map(std =>
-        generateComplianceResult(std, vulnerabilities)
-      );
-
-      const summary: ScanSummary = {
-        critical: vulnerabilities.filter(v => v.severity === 'critical').length,
-        high: vulnerabilities.filter(v => v.severity === 'high').length,
-        medium: vulnerabilities.filter(v => v.severity === 'medium').length,
-        low: vulnerabilities.filter(v => v.severity === 'low').length,
-        informational: vulnerabilities.filter(v => v.severity === 'informational').length,
-        totalFiles: 150,
-        scanDurationMs: Date.now() - startTime,
-      };
-
-      const severityOrder = ['critical', 'high', 'medium', 'low', 'informational'];
-      const failThreshold = severityOrder.indexOf(failOnSeverity);
-      const worstSeverity = vulnerabilities.length > 0
-        ? Math.min(...vulnerabilities.map(v => severityOrder.indexOf(v.severity)))
-        : severityOrder.length;
-      const passed = worstSeverity > failThreshold;
-
-      this.emitStream(context, {
-        status: 'complete',
-        message: `Scan complete: ${vulnerabilities.length} vulnerabilities found`,
-        progress: 100,
-      });
-
-      return {
-        success: true,
-        data: {
-          scanId: context.requestId,
-          summary,
-          vulnerabilities,
-          complianceResults: complianceResults.length > 0 ? complianceResults : undefined,
-          recommendations: generateRecommendations(vulnerabilities, summary),
-          passed,
-        },
-      };
-    } catch (error) {
-      return {
-        success: false,
-        error: `Security scan failed: ${error instanceof Error ? error.message : String(error)}`,
-      };
-    }
-  }
-}
-
-// ============================================================================
-// Schema
-// ============================================================================
-
-const SECURITY_SCAN_SCHEMA: MCPToolSchema = {
-  type: 'object',
-  properties: {
-    target: {
-      type: 'string',
-      description: 'Target directory or file to scan',
-      default: '.',
-    },
-    scanType: {
-      type: 'array',
-      description: 'Types of security scans to run',
-      items: {
-        type: 'string',
-        description: 'Scan type',
-        enum: ['sast', 'dast', 'dependency', 'secret'],
-      },
-      default: ['sast', 'dependency'],
-    },
-    compliance: {
-      type: 'array',
-      description: 'Compliance standards to validate against',
-      items: {
-        type: 'string',
-        description: 'Standard',
-        enum: ['owasp', 'gdpr', 'hipaa', 'pci-dss', 'soc2'],
-      },
-    },
-    dastUrl: {
-      type: 'string',
-      description: 'URL for DAST scanning',
-    },
-    depth: {
-      type: 'string',
-      description: 'Scan depth',
-      enum: ['quick', 'standard', 'deep'],
-      default: 'standard',
-    },
-    failOnSeverity: {
-      type: 'string',
-      description: 'Fail threshold severity',
-      enum: ['critical', 'high', 'medium', 'low'],
-      default: 'critical',
-    },
-  },
-};
-
-// ============================================================================
-// Helper Functions
-// ============================================================================
-
-function generateSASTFindings(): Vulnerability[] {
-  return [
-    {
-      id: 'SAST-001',
-      title: 'SQL Injection Risk',
-      severity: 'high',
-      category: 'injection',
-      location: { file: 'src/db/queries.ts', line: 45, snippet: 'query = `SELECT * FROM ${table}`' },
-      description: 'User input directly concatenated in SQL query',
-      remediation: 'Use parameterized queries or prepared statements',
-      cweId: 'CWE-89',
-      references: ['https://owasp.org/www-community/attacks/SQL_Injection'],
-    },
-    {
-      id: 'SAST-002',
-      title: 'Hardcoded Credentials',
-      severity: 'critical',
-      category: 'sensitive-data',
-      location: { file: 'src/config/database.ts', line: 12, snippet: 'password: "admin123"' },
-      description: 'Hardcoded password found in source code',
-      remediation: 'Use environment variables or secure vault for credentials',
-      cweId: 'CWE-798',
-      references: ['https://cwe.mitre.org/data/definitions/798.html'],
-    },
-  ];
-}
-
-function generateDependencyFindings(): Vulnerability[] {
-  return [
-    {
-      id: 'DEP-001',
-      title: 'Vulnerable lodash version',
-      severity: 'medium',
-      category: 'vulnerable-components',
-      location: { file: 'package.json', dependency: { name: 'lodash', version: '4.17.19' } },
-      description: 'lodash < 4.17.21 has prototype pollution vulnerability',
-      remediation: 'Upgrade lodash to 4.17.21 or later',
-      cveId: 'CVE-2021-23337',
-      references: ['https://nvd.nist.gov/vuln/detail/CVE-2021-23337'],
-    },
-  ];
-}
-
-function generateSecretFindings(): Vulnerability[] {
-  return [
-    {
-      id: 'SECRET-001',
-      title: 'AWS Access Key Detected',
-      severity: 'critical',
-      category: 'sensitive-data',
-      location: { file: 'src/services/aws.ts', line: 8, snippet: 'AKIA...[REDACTED]' },
-      description: 'AWS access key found in source code',
-      remediation: 'Remove key, rotate credentials, use AWS IAM roles',
-      references: ['https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html'],
-    },
-  ];
-}
-
-function generateDASTFindings(url: string): Vulnerability[] {
-  return [
-    {
-      id: 'DAST-001',
-      title: 'Missing Security Headers',
-      severity: 'medium',
-      category: 'security-misconfiguration',
-      location: { file: url },
-      description: 'X-Frame-Options and Content-Security-Policy headers missing',
-      remediation: 'Add security headers to HTTP responses',
-      references: ['https://owasp.org/www-project-secure-headers/'],
-    },
-  ];
-}
-
-function generateComplianceResult(standard: string, vulnerabilities: Vulnerability[]): ComplianceResult {
-  const relevantVulns = vulnerabilities.filter(v => {
-    if (standard === 'owasp') return true;
-    if (standard === 'pci-dss') return v.category === 'injection' || v.category === 'sensitive-data';
-    if (standard === 'gdpr') return v.category === 'sensitive-data';
-    return false;
-  });
-
-  return {
-    standard,
-    passed: relevantVulns.filter(v => v.severity === 'critical' || v.severity === 'high').length === 0,
-    score: Math.max(0, 100 - relevantVulns.length * 15),
-    violations: relevantVulns.map(v => ({
-      ruleId: v.id,
-      ruleName: v.title,
-      location: v.location,
-      details: v.description,
-      remediation: v.remediation,
-    })),
-  };
-}
-
-function generateRecommendations(vulnerabilities: Vulnerability[], summary: ScanSummary): string[] {
-  const recs: string[] = [];
-
-  if (summary.critical > 0) {
-    recs.push('URGENT: Address critical vulnerabilities immediately');
-  }
-  if (summary.high > 0) {
-    recs.push('Prioritize high-severity issues in next sprint');
-  }
-  if (vulnerabilities.some(v => v.category === 'injection')) {
-    recs.push('Review input validation across the application');
-  }
-  if (vulnerabilities.some(v => v.category === 'sensitive-data')) {
-    recs.push('Implement proper secrets management');
-  }
-
-  if (recs.length === 0) {
-    recs.push('No critical issues found. Continue regular security reviews.');
-  }
-
-  return recs;
-}

package/src/mcp/tools/test-execution/execute.ts

@@ -1,291 +0,0 @@
-/**
- * Agentic QE v3 - Test Execution MCP Tool
- *
- * qe/tests/execute - Execute test suites with parallel execution and retry logic
- *
- * This tool wraps the test-execution domain service and exposes it via MCP.
- * Supports parallel execution, flaky test detection, and coverage collection.
- */
-
-import { MCPToolBase, MCPToolConfig, MCPToolContext, MCPToolSchema } from '../base';
-import { ToolResult } from '../../types';
-
-// ============================================================================
-// Types
-// ============================================================================
-
-export interface TestExecuteParams {
-  testFiles?: string[];
-  testSuites?: string[];
-  pattern?: string;
-  parallel?: boolean;
-  parallelism?: number;
-  retryCount?: number;
-  timeout?: number;
-  collectCoverage?: boolean;
-  reportFormat?: 'json' | 'junit' | 'html' | 'markdown';
-  failFast?: boolean;
-  watch?: boolean;
-  [key: string]: unknown;
-}
-
-export interface TestExecuteResult {
-  summary: TestSummary;
-  testResults: TestResult[];
-  coverage?: CoverageData;
-  flakyTests?: FlakyTest[];
-  duration: number;
-}
-
-export interface TestSummary {
-  total: number;
-  passed: number;
-  failed: number;
-  skipped: number;
-  pending: number;
-  passRate: number;
-}
-
-export interface TestResult {
-  id: string;
-  name: string;
-  file: string;
-  status: 'passed' | 'failed' | 'skipped' | 'pending';
-  duration: number;
-  error?: string;
-  retries?: number;
-}
-
-export interface CoverageData {
-  lines: number;
-  branches: number;
-  functions: number;
-  statements: number;
-}
-
-export interface FlakyTest {
-  name: string;
-  file: string;
-  flakinessScore: number;
-  failurePattern: string;
-}
-
-// ============================================================================
-// Tool Implementation
-// ============================================================================
-
-export class TestExecuteTool extends MCPToolBase<TestExecuteParams, TestExecuteResult> {
-  readonly config: MCPToolConfig = {
-    name: 'qe/tests/execute',
-    description: 'Execute test suites with parallel execution, retry logic, and coverage collection. Detects flaky tests.',
-    domain: 'test-execution',
-    schema: TEST_EXECUTE_SCHEMA,
-    streaming: true,
-    timeout: 300000,
-  };
-
-  async execute(
-    params: TestExecuteParams,
-    context: MCPToolContext
-  ): Promise<ToolResult<TestExecuteResult>> {
-    const {
-      testFiles = [],
-      testSuites = [],
-      pattern,
-      parallel = true,
-      parallelism = 4,
-      retryCount = 3,
-      timeout = 60000,
-      collectCoverage = false,
-      reportFormat = 'json',
-      failFast = false,
-    } = params;
-
-    const startTime = Date.now();
-
-    try {
-      // Determine files to test
-      const filesToTest = testFiles.length > 0
-        ? testFiles
-        : testSuites.length > 0
-          ? testSuites
-          : pattern
-            ? [pattern]
-            : ['**/*.test.ts'];
-
-      this.emitStream(context, {
-        status: 'starting',
-        message: `Executing ${filesToTest.length} test files`,
-        parallel,
-        parallelism,
-      });
-
-      // Check for abort
-      if (this.isAborted(context)) {
-        return {
-          success: false,
-          error: 'Test execution aborted',
-        };
-      }
-
-      // Simulate test execution (in real implementation, this calls the executor)
-      const testResults: TestResult[] = [];
-      const flakyTests: FlakyTest[] = [];
-
-      for (let i = 0; i < filesToTest.length; i++) {
-        const file = filesToTest[i];
-
-        this.emitStream(context, {
-          status: 'running',
-          message: `Executing ${file}`,
-          progress: Math.round((i / filesToTest.length) * 100),
-        });
-
-        // Simulate test results
-        const passed = Math.random() > 0.1;
-        const result: TestResult = {
-          id: `test-${i}`,
-          name: `Test suite for ${file.split('/').pop()}`,
-          file,
-          status: passed ? 'passed' : 'failed',
-          duration: Math.random() * 5000,
-          error: passed ? undefined : 'Assertion failed',
-          retries: passed ? 0 : Math.min(retryCount, 2),
-        };
-
-        testResults.push(result);
-
-        // Detect flaky tests (retried and eventually passed)
-        if (!passed && Math.random() > 0.7) {
-          flakyTests.push({
-            name: result.name,
-            file: result.file,
-            flakinessScore: Math.random() * 0.5 + 0.5,
-            failurePattern: 'intermittent-timeout',
-          });
-        }
-
-        if (failFast && !passed) {
-          break;
-        }
-      }
-
-      // Calculate summary
-      const summary: TestSummary = {
-        total: testResults.length,
-        passed: testResults.filter(r => r.status === 'passed').length,
-        failed: testResults.filter(r => r.status === 'failed').length,
-        skipped: testResults.filter(r => r.status === 'skipped').length,
-        pending: testResults.filter(r => r.status === 'pending').length,
-        passRate: 0,
-      };
-      summary.passRate = summary.total > 0
-        ? Math.round((summary.passed / summary.total) * 100)
-        : 0;
-
-      // Generate coverage if requested
-      const coverage: CoverageData | undefined = collectCoverage
-        ? {
-            lines: Math.random() * 30 + 70,
-            branches: Math.random() * 20 + 60,
-            functions: Math.random() * 25 + 65,
-            statements: Math.random() * 25 + 70,
-          }
-        : undefined;
-
-      const duration = Date.now() - startTime;
-
-      this.emitStream(context, {
-        status: 'complete',
-        message: `Test execution complete: ${summary.passed}/${summary.total} passed`,
-        progress: 100,
-      });
-
-      return {
-        success: summary.failed === 0,
-        data: {
-          summary,
-          testResults,
-          coverage,
-          flakyTests: flakyTests.length > 0 ? flakyTests : undefined,
-          duration,
-        },
-      };
-    } catch (error) {
-      return {
-        success: false,
-        error: `Test execution failed: ${error instanceof Error ? error.message : String(error)}`,
-      };
-    }
-  }
-}
-
-// ============================================================================
-// Schema Definition
-// ============================================================================
-
-const TEST_EXECUTE_SCHEMA: MCPToolSchema = {
-  type: 'object',
-  properties: {
-    testFiles: {
-      type: 'array',
-      description: 'Specific test files to execute',
-      items: { type: 'string', description: 'Test file path' },
-    },
-    testSuites: {
-      type: 'array',
-      description: 'Test suite names to execute',
-      items: { type: 'string', description: 'Suite name' },
-    },
-    pattern: {
-      type: 'string',
-      description: 'Glob pattern to match test files',
-    },
-    parallel: {
-      type: 'boolean',
-      description: 'Enable parallel test execution',
-      default: true,
-    },
-    parallelism: {
-      type: 'number',
-      description: 'Number of parallel workers',
-      minimum: 1,
-      maximum: 16,
-      default: 4,
-    },
-    retryCount: {
-      type: 'number',
-      description: 'Number of retries for failed tests',
-      minimum: 0,
-      maximum: 5,
-      default: 3,
-    },
-    timeout: {
-      type: 'number',
-      description: 'Test timeout in milliseconds',
-      minimum: 1000,
-      default: 60000,
-    },
-    collectCoverage: {
-      type: 'boolean',
-      description: 'Collect code coverage',
-      default: false,
-    },
-    reportFormat: {
-      type: 'string',
-      description: 'Report output format',
-      enum: ['json', 'junit', 'html', 'markdown'],
-      default: 'json',
-    },
-    failFast: {
-      type: 'boolean',
-      description: 'Stop on first failure',
-      default: false,
-    },
-    watch: {
-      type: 'boolean',
-      description: 'Watch mode for continuous testing',
-      default: false,
-    },
-  },
-};