@aisdlc/core 1.1.1 → 1.3.0

package/dist/index.cjs

@@ -148,17 +148,31 @@ function calculateLocAndHalstead(fullText, cyclomatic) {
   const normalizedMI = Math.max(0, Math.min(100, rawMI * 100 / 171));
   return { loc, mi: Math.round(normalizedMI * 10) / 10 };
 }
-function detectAstCodeSmells(node, loc, nodeText) {
+var TEST_FILE_PATTERN = /(?:^|\/)(?:tests|__tests__|fixtures)\/|\.(?:spec|test)\.[cm]?[jt]sx?$/i;
+var EMPTY_UI_HANDLER_PATTERN = /\bon[A-Z]\w*\s*=\s*\{\s*(?:\([^)]*\)\s*=>\s*\{\s*\}|function\s*\([^)]*\)\s*\{\s*\})\s*\}/;
+var FAKE_WIRING_STUB_PATTERN = /(?:\/\/\s*T[O]DO:\s*(?:connect|wire|integrate)\b|\b(?:m[o]ckData|F[A]KE_DATA)\b)/i;
+function isProductionFile(filePath) {
+  return !TEST_FILE_PATTERN.test(filePath.replace(/\\/g, "/"));
+}
+function detectAstCodeSmells(node, loc, fullText, filePath) {
   const smells = [];
   if (node.getDescendantsOfKind(tsMorph.SyntaxKind.AnyKeyword).length > 0) {
     smells.push('Uso prohibido de "any"');
   }
-  if (/\/\/\s*@ts-ignore|\/\/\s*eslint-disable/.test(nodeText)) {
+  if (/\/\/\s*@ts-ignore|\/\/\s*eslint-disable/.test(fullText)) {
     smells.push("Supresi\xF3n no autorizada de linter");
   }
   if (loc > 40) {
     smells.push(`Funci\xF3n extensa (${loc} l\xEDneas > l\xEDmite 40)`);
   }
+  if (isProductionFile(filePath)) {
+    if (EMPTY_UI_HANDLER_PATTERN.test(fullText)) {
+      smells.push("Handler de UI vac\xEDo (fake-wiring detectado)");
+    }
+    if (FAKE_WIRING_STUB_PATTERN.test(fullText)) {
+      smells.push("Datos simulados o conexi\xF3n pendiente en producci\xF3n (fake-wiring)");
+    }
+  }
   return smells;
 }
 function isDeclarationFunction(node) {
@@ -182,9 +196,8 @@ function buildNodeMetrics(node, filePath) {
   const cyclomatic = computeCyclomaticFromAst(node);
   const cognitive = computeCognitiveFromAst(node);
   const fullText = node.getFullText();
-  const nodeText = node.getText();
   const { loc, mi } = calculateLocAndHalstead(fullText, cyclomatic);
-  const codeSmells = detectAstCodeSmells(node, loc, nodeText);
+  const codeSmells = detectAstCodeSmells(node, loc, fullText, filePath);
   return { functionName, filePath, loc, cyclomatic, cognitive, maintainability: mi, codeSmells };
 }
 function buildModuleFallback(content, filePath) {
@@ -513,6 +526,9 @@ function createDefaultQualityPolicy() {
     max_cognitive: 15,
     min_maintainability: 50,
     max_function_lines: 40,
+    min_line_coverage: 85,
+    min_branch_coverage: 80,
+    min_function_coverage: 90,
     enforce_mode: "STRICT",
     target_directories: ["src", "lib", "examples", "tests"],
     supported_extensions: [...DEFAULT_EXTENSIONS],
@@ -536,6 +552,15 @@ function applyDocScope(policy, doc) {
     }
   }
 }
+function applyCoverageThresholds(policy, covRaw) {
+  if (!covRaw || typeof covRaw !== "object") return;
+  const cov = covRaw;
+  if (cov.min_line_coverage_percent !== void 0) policy.min_line_coverage = Number(cov.min_line_coverage_percent);
+  if (cov.min_branch_coverage_percent !== void 0) policy.min_branch_coverage = Number(cov.min_branch_coverage_percent);
+  if (cov.min_function_coverage_percent !== void 0) {
+    policy.min_function_coverage = Number(cov.min_function_coverage_percent);
+  }
+}
 function applyDocThresholds(policy, doc) {
   const sections = [doc.release_thresholds, doc.thresholds].filter(
     (s) => Boolean(s && typeof s === "object")
@@ -549,6 +574,7 @@ function applyDocThresholds(policy, doc) {
     if (cog !== void 0) policy.max_cognitive = Number(cog);
     if (mi !== void 0) policy.min_maintainability = Number(mi);
     if (loc !== void 0) policy.max_function_lines = Number(loc);
+    applyCoverageThresholds(policy, s.test_coverage);
   }
   const codingRules = doc.coding_rules;
   const rules = codingRules?.rules;
@@ -5815,6 +5841,78 @@ function detectLanguage(filePath) {
       return "Unknown";
   }
 }
+function parseJsonSummaryFile(filePath, relSource) {
+  try {
+    const raw = JSON.parse(fs6__namespace.readFileSync(filePath, "utf-8"));
+    const total = raw.total;
+    if (!total || typeof total !== "object") return null;
+    const linesPct = Number(total.lines?.pct);
+    const branchesPct = Number(total.branches?.pct);
+    const functionsPct = Number(total.functions?.pct);
+    if (Number.isNaN(linesPct) || Number.isNaN(branchesPct) || Number.isNaN(functionsPct)) return null;
+    const statementsPct = total.statements?.pct !== void 0 ? Number(total.statements.pct) : void 0;
+    return { linesPct, branchesPct, functionsPct, statementsPct, source: relSource };
+  } catch {
+    return null;
+  }
+}
+function parseLcovFile(filePath, relSource) {
+  try {
+    const lines = fs6__namespace.readFileSync(filePath, "utf-8").split(/\r?\n/);
+    let lf = 0, lh = 0, brf = 0, brh = 0, fnf = 0, fnh = 0;
+    for (const line of lines) {
+      if (line.startsWith("LF:")) lf += parseInt(line.slice(3), 10) || 0;
+      else if (line.startsWith("LH:")) lh += parseInt(line.slice(3), 10) || 0;
+      else if (line.startsWith("BRF:")) brf += parseInt(line.slice(4), 10) || 0;
+      else if (line.startsWith("BRH:")) brh += parseInt(line.slice(4), 10) || 0;
+      else if (line.startsWith("FNF:")) fnf += parseInt(line.slice(4), 10) || 0;
+      else if (line.startsWith("FNH:")) fnh += parseInt(line.slice(4), 10) || 0;
+    }
+    if (lf === 0 && fnf === 0 && brf === 0) return null;
+    const pct = (hit, found) => found > 0 ? Math.round(hit / found * 1e3) / 10 : 100;
+    return {
+      linesPct: pct(lh, lf),
+      branchesPct: pct(brh, brf),
+      functionsPct: pct(fnh, fnf),
+      source: relSource
+    };
+  } catch {
+    return null;
+  }
+}
+function readCodeCoverageSummary(rootDir = process.cwd()) {
+  const jsonCandidates = ["coverage/coverage-summary.json", "reports/coverage-summary.json"];
+  for (const rel of jsonCandidates) {
+    const full = path8__namespace.join(rootDir, rel);
+    if (fs6__namespace.existsSync(full)) {
+      const parsed = parseJsonSummaryFile(full, rel);
+      if (parsed) return parsed;
+    }
+  }
+  const lcovCandidates = ["coverage/lcov.info", "lcov.info", "reports/lcov.info"];
+  for (const rel of lcovCandidates) {
+    const full = path8__namespace.join(rootDir, rel);
+    if (fs6__namespace.existsSync(full)) {
+      const parsed = parseLcovFile(full, rel);
+      if (parsed) return parsed;
+    }
+  }
+  return null;
+}
+function formatCoverageRow(label, measured, minThreshold) {
+  if (measured === void 0) {
+    return `| **${label}** | \`N/A (Run test:coverage)\` | $\\ge ${minThreshold}\\%$ | \u2139\uFE0F NOT MEASURED |`;
+  }
+  const status = measured >= minThreshold ? "\u2705 COMPLIANT" : "\u26A0\uFE0F BELOW THRESHOLD";
+  return `| **${label}** | \`${measured}%\` | $\\ge ${minThreshold}\\%$ | ${status} |`;
+}
+function buildCoverageRows(coverage, policy) {
+  return [
+    formatCoverageRow("Line Coverage", coverage?.linesPct, policy.min_line_coverage),
+    formatCoverageRow("Branch Coverage", coverage?.branchesPct, policy.min_branch_coverage),
+    formatCoverageRow("Function Coverage", coverage?.functionsPct, policy.min_function_coverage)
+  ];
+}
 function generateQualityReport(options = {}) {
   const rootDir = options.rootDir || process.cwd();
   const gateResult = verifyQualityGate({
@@ -5822,6 +5920,7 @@ function generateQualityReport(options = {}) {
     policyPath: options.policyPath,
     thresholds: options.thresholds
   });
+  const coverage = readCodeCoverageSummary(rootDir);
   const totalFiles = gateResult.totalFiles;
   const totalFunctions = gateResult.totalFunctions;
   let totalMi = 0;
@@ -5870,6 +5969,7 @@ function generateQualityReport(options = {}) {
     `| **Cyclomatic Complexity (Average)** | \`${avgCyclomatic}\` | $\\le ${gateResult.policy.max_cyclomatic}$ | ${avgCyclomatic <= gateResult.policy.max_cyclomatic ? "\u2705 COMPLIANT" : "\u274C EXCEEDED"} |`,
     `| **Cognitive Complexity (Average)** | \`${avgCognitive}\` | $\\le ${gateResult.policy.max_cognitive}$ | ${avgCognitive <= gateResult.policy.max_cognitive ? "\u2705 COMPLIANT" : "\u274C EXCEEDED"} |`,
     `| **Maintainability Index (SEI MI)** | \`${avgMaintainability} / 100\` | $\\ge ${gateResult.policy.min_maintainability}$ | ${avgMaintainability >= gateResult.policy.min_maintainability ? "\u2705 COMPLIANT" : "\u274C INSUFFICIENT"} |`,
+    ...buildCoverageRows(coverage, gateResult.policy),
     `| **Functions in Violation** | \`${gateResult.failCount}\` | $0$ (Mode ${gateResult.policy.enforce_mode}) | ${gateResult.failCount === 0 ? "\u2705 0 VIOLATIONS" : "\u274C BLOCKED"} |`,
     ``,
     `---`,
@@ -5901,6 +6001,7 @@ function generateQualityReport(options = {}) {
   lines.push("## 4. Evaluation Criteria and Standards");
   lines.push("- **McCabe Cyclomatic Complexity (CC)**: Number of linearly independent paths.");
   lines.push("- **Maintainability Index (SEI MI)**: Normalized formula [0 - 100] combining Halstead Volume, CC, and LOC.");
+  lines.push("- **Automated Test Coverage**: Passively ingested from `coverage/coverage-summary.json` or `lcov.info` when present.");
   lines.push("- **Clean Code Guardrails**: Prohibition of implicit `any` typing, function length limits ($le 40$ lines), and zero unjustified suppressions.");
   const markdown = lines.join("\n");
   const reportsDir = path8__namespace.join(rootDir, "reports");
@@ -5912,7 +6013,8 @@ function generateQualityReport(options = {}) {
     totalFunctions,
     avgMaintainability,
     avgCyclomatic,
-    verdict
+    verdict,
+    coverage
   };
 }
 
@@ -7601,10 +7703,12 @@ function collectDashboardMetrics(rootDir) {
     }
   } catch {
   }
+  const codeCoverage = readCodeCoverageSummary(rootDir);
   return {
     gate,
     gov,
     cov,
+    codeCoverage,
     trace,
     history,
     activePrKpi,
@@ -8146,6 +8250,11 @@ function renderDashboardHtml(graphData, metricsData, title = "AI-SDLC: Dashboard
             <span class="value">${metricsData.cov.totalRequirements > 0 ? Math.round(metricsData.cov.passedRequirements / metricsData.cov.totalRequirements * 100) : 100}%</span>
             <span class="subtitle">${metricsData.cov.passedRequirements} / ${metricsData.cov.totalRequirements} verified</span>
           </div>
+          <div class="metric-card">
+            <span class="title">Code Coverage (Lines)</span>
+            <span class="value">${metricsData.codeCoverage ? metricsData.codeCoverage.linesPct + "%" : "N/A"}</span>
+            <span class="subtitle">${metricsData.codeCoverage ? `Branches: ${metricsData.codeCoverage.branchesPct}% | Funcs: ${metricsData.codeCoverage.functionsPct}%` : `Min target: ${metricsData.gate.policy.min_line_coverage}% (Run test:coverage)`}</span>
+          </div>
         </div>
 
         <div class="chart-container">
@@ -9217,6 +9326,7 @@ var SPECIALIZED_AGENT_TEMPLATES = [
 
 ## Operational Directives & Guardrails
 - Decompose the system into building blocks \`CMP-*\` ensuring each component declares which use cases \`UC-*\` it implements and which requirements (\`FR-*\`, \`QR-*\`, \`SEC-REQ-*\`) it fulfills under \`satisfies-requirements\`.
+- **Contract-First Full-Stack Integration**: Whenever a feature or change spans Frontend (UI) and Backend (API/services), define an explicit shared typed contract (Zod schemas, shared TypeScript DTOs, or OpenAPI specification) in \`design.md\` before implementation so both layers compile against a single source of truth.
 - Generate interaction and sequence diagrams in native Mermaid syntax.
 - Document critical technological decisions using immutable \`ADR-*\` records conforming to \`schemas/architecture/adr.schema.json\`.
 - Validate that architectural choices comply with legal constraints in \`license-policy.yaml\`.
@@ -9239,6 +9349,7 @@ var SPECIALIZED_AGENT_TEMPLATES = [
   2. **Boundary Cases** (\`Scenario Outline\` + \`Examples\` table): values at the extremes of the accepted range.
   3. **Out-of-Range / Invalid Cases** (\`Scenario Outline\` + \`Examples\` table): null, empty, wrong types, values exceeding bounds.
 - Apply conditional categories when applicable: Security (\`@security @mitigation\`), Performance (\`@performance\`), Idempotency (\`@idempotence\`), Postconditions, and Interface Contracts.
+- **Zero-Mock Integration Rule**: When an \`FR-*\` spans UI and Backend, unit tests mocking \`fetch\`/HTTP in isolation are insufficient; include integration/contract or E2E test scenarios verifying real request/response wiring and UI state transitions (\`Loading\`, \`Empty\`, \`Error\`, \`Nominal\`).
 - Tag all scenarios with \`@<FR-ID> @automated @regression\`.
 - **STRICTLY FORBIDDEN**: Including production code, suggesting implementation, or anticipating technical solutions.
 - Run \`pnpm run verify:testing\` before emitting handoff.
@@ -9257,6 +9368,9 @@ var SPECIALIZED_AGENT_TEMPLATES = [
 - Respect the autonomy mode assigned to each task in \`tasks.md\` (\`AUTONOMOUS\`, \`HUMAN_REVIEW_PLAN\`, \`AMBIGUOUS\`, \`HIGH_RISK_MANUAL\`).
 - Apply Test-Driven Development (TDD): make failing tests delivered by \`agent-qa-engineer\` pass green without altering tests to accommodate buggy code.
 - Cite implemented \`FR-*\` or \`SEC-REQ-*\` IDs in test header comments to maintain 360\xB0 reverse traceability.
+- **Zero Fake-Wiring Guardrail**: Strictly forbidden from marking a task \`COMPLETED\` with hardcoded \`mockData\` arrays in production views, \`setTimeout\` simulating network calls, or empty UI event handlers (\`onClick={() => {}}\`, \`onSubmit={() => {}}\`). Frontend components must wire directly to the shared contract and real Backend endpoints.
+- **Mandatory 4 UI States Matrix**: Every data-driven UI component or screen must explicitly implement all 4 usability states: \`Loading\` (spinner/skeleton + disabled submit), \`Empty\` (clear message + CTA), \`Error\` (visible error recovery banner, never silent failure), and \`Nominal/Success\` (accessible semantic DOM + keyboard navigation).
+- **Live Runtime Smoke Verification**: For tasks touching UI or UI-to-Backend integration, unit tests alone are insufficient. Before emitting handoff, boot the real Backend and Frontend servers and verify (via Playwright E2E or Chrome DevTools MCP) that browser \`console.error\` and \`pageerror\` counts are \`0\` and API calls return real \`2xx\` responses without CORS or schema mismatches.
 - Before adding any external dependency, verify its SPDX license is permitted in \`license-policy.yaml\`.
 - Respect non-negotiable \`quality-policy.yaml\` thresholds: Cyclomatic Complexity $\\le 10$, Cognitive Complexity $\\le 15$, Maintainability Index $\\ge 50$, Function Length $\\le 40$ lines.
 - Run unified pre-flight with auto-fix (\`pnpm run check:fix\`) and full verification (\`pnpm run verify:all\`).
@@ -9305,9 +9419,9 @@ var SPECIALIZED_AGENT_TEMPLATES = [
 ## Operational Directives & Guardrails
 - Operate under bimodal discipline depending on the lifecycle phase:
   1. **Design Mode (Upstream)**: Adopt the primary actor persona under real-world field conditions (stress, latency, constrained viewports). Separate strict Minimum Viable Product (MVP) core from future roadmap ideas using \`templates/product/user-design-feedback.template.md\`.
-  2. **Functional Validation Mode (Downstream / Pre-PR / Post-Development Functional Validation)**: Inspect \`agent-developer\` deliverables once unit tests pass green. Contrast actual UI, CLI, and API behavior against approved \`UC-*\` and \`FR-*\` criteria.
+  2. **Functional Validation Mode (Downstream / Pre-PR / Post-Development Functional Validation)**: Inspect \`agent-developer\` deliverables once unit tests pass green by executing the real application (via Playwright or Chrome DevTools MCP when UI is present). Contrast actual UI, CLI, and API behavior against approved \`UC-*\` and \`FR-*\` criteria, verifying real Backend connectivity, the 4 UI usability states (\`Loading\`, \`Empty\`, \`Error\`, \`Nominal\`), keyboard/ARIA accessibility, and \`0\` browser \`console.error\` / network failures.
 - Formulate decisive questions under \`open-questions\` for the human Product Owner.
-- Emit handoff block suggesting the Pre-Merge Audit Triad (\`agent-code-reviewer\`, \`agent-security-auditor\`, \`agent-compliance-checker\`) if compliant, or return to \`agent-developer\` on functional drift.`
+- Emit handoff block suggesting the Pre-Merge Audit Triad (\`agent-code-reviewer\`, \`agent-security-auditor\`, \`agent-compliance-checker\`) if compliant, or return to \`agent-developer\` on functional drift or fake-wiring.`
   },
   {
     id: "agent-code-reviewer",
@@ -9322,6 +9436,7 @@ var SPECIALIZED_AGENT_TEMPLATES = [
 - Analyze code diffs against \`quality-policy.yaml\` standards: Cyclomatic Complexity $\\le 10$, Cognitive Complexity $\\le 15$, Maintainability Index $\\ge 50$, Lines per Function $\\le 40$.
 - Detect improper coupling, code smells, magic numbers, ambiguous identifiers, and encapsulation breaches.
 - Flag premature abstractions and speculative code violating YAGNI.
+- **Block Fake-Wiring & Disconnected UI**: Flag as \`[BLOCKING]\` any production UI component containing hardcoded mock data (\`mockData\`), empty event handlers (\`onClick={() => {}}\`), missing error/loading state handling, or API calls bypassing shared contracts.
 - Coordinate Pre-Merge Audit Triad with \`agent-security-auditor\` and \`agent-compliance-checker\`.
 - Categorize findings into: \`[BLOCKING]\` (quality violation or broken pattern), \`[CLEAN_CODE_SUGGESTION]\` (non-blocking improvement), and \`[COMPLIANT]\`.
 - If autonomy is $\\ge$ \`HUMAN_REVIEW_PLAN\`, conclude by emitting the Workflow Handoff block (\`templates/workflow/agent-handoff.template.md\`) to the human Tech Lead for final approval and merge, opening the Human Action Window. In \`AUTONOMOUS\` mode, omit interactive handoff.`
@@ -11558,6 +11673,7 @@ exports.parseSpecCatalogScope = parseSpecCatalogScope;
 exports.parseTasksDoc = parseTasksDoc;
 exports.parseTasksFromContent = parseTasksFromContent;
 exports.processPackageDir = processPackageDir;
+exports.readCodeCoverageSummary = readCodeCoverageSummary;
 exports.readPackageJson = readPackageJson;
 exports.renderAntigravityAgentFile = renderAntigravityAgentFile;
 exports.renderClaudeAgentFile = renderClaudeAgentFile;