@avi770/testteam 1.2.0 → 2.0.0

package/core/license.ts

@@ -1,211 +1,208 @@
-import * as crypto from 'node:crypto';
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-
-/** License tiers supported by TestTeam. */
-export type LicenseTier = 'free' | 'pro' | 'enterprise';
-
-/** JWT payload embedded in a TestTeam license key. */
-export interface LicensePayload {
-  tier: LicenseTier;
-  exp: number;
-  iat: number;
-  sub: string;
-  maxProjects: number;
-  maxRunsPerMonth: number;
-  features: string[];
-}
-
-/** In-memory cache so we only validate once per process. */
-let cachedLicense: LicensePayload | null | undefined;
-
-const LICENSE_FILENAME = '.testteam-license';
-
-// ── Base64url helpers ────────────────────────────────────────────────
-
-function base64urlEncode(data: Buffer): string {
-  return data.toString('base64url');
-}
-
-function base64urlDecode(str: string): Buffer {
-  return Buffer.from(str, 'base64url');
-}
-
-// ── JWT helpers (ES256 / ECDSA P-256 with SHA-256) ───────────────────
-
-/**
- * Decode and verify a JWT signed with ES256.
- * Returns the payload on success or `null` on any failure
- * (bad format, invalid signature, expired, malformed JSON).
- */
-export function validateLicense(
-  key: string,
-  publicKey: string,
-): LicensePayload | null {
-  try {
-    const parts = key.trim().split('.');
-    if (parts.length !== 3) return null;
-
-    const [headerB64, payloadB64, signatureB64] = parts;
-
-    // Verify header declares ES256
-    const header: unknown = JSON.parse(
-      base64urlDecode(headerB64).toString('utf8'),
-    );
-    if (
-      typeof header !== 'object' ||
-      header === null ||
-      (header as Record<string, unknown>)['alg'] !== 'ES256'
-    ) {
-      return null;
-    }
-
-    // Verify signature
-    const signedContent = `${headerB64}.${payloadB64}`;
-    const signature = base64urlDecode(signatureB64);
-
-    // ES256 produces a 64-byte raw (r || s) signature.
-    // Node.js crypto.verify expects DER encoding, so convert if raw.
-    const derSignature = rawToDer(signature);
-
-    const verifier = crypto.createVerify('SHA256');
-    verifier.update(signedContent);
-    const valid = verifier.verify(
-      { key: publicKey, dsaEncoding: 'der' },
-      derSignature,
-    );
-    if (!valid) return null;
-
-    // Decode payload
-    const payloadJson = base64urlDecode(payloadB64).toString('utf8');
-    const payload: unknown = JSON.parse(payloadJson);
-
-    if (!isLicensePayload(payload)) return null;
-
-    // Check expiry
-    const nowSec = Math.floor(Date.now() / 1000);
-    if (payload.exp <= nowSec) return null;
-
-    return payload;
-  } catch {
-    return null;
-  }
-}
-
-/**
- * Load a license from the `.testteam-license` file in the given directory.
- * The file must contain the JWT on the first non-empty line.
- * A second non-empty line, if present, is treated as the PEM public key
- * (or the public key can be embedded as `TF_LICENSE_PUBLIC_KEY` env var).
- */
-export function loadLicense(configDir: string): LicensePayload | null {
-  // Return cached result if available
-  if (cachedLicense !== undefined) return cachedLicense;
-
-  try {
-    const filePath = path.join(configDir, LICENSE_FILENAME);
-    if (!fs.existsSync(filePath)) {
-      cachedLicense = null;
-      return null;
-    }
-
-    const content = fs.readFileSync(filePath, 'utf8').trim();
-    if (!content) {
-      cachedLicense = null;
-      return null;
-    }
-
-    // Split into sections separated by blank lines
-    const sections = content.split(/\n\s*\n/);
-    const licenseKey = sections[0].trim();
-
-    // Public key: either embedded after the JWT or from env
-    let publicKey = process.env['TF_LICENSE_PUBLIC_KEY'] ?? '';
-    if (sections.length > 1) {
-      publicKey = sections.slice(1).join('\n\n').trim();
-    }
-
-    if (!publicKey) {
-      cachedLicense = null;
-      return null;
-    }
-
-    const result = validateLicense(licenseKey, publicKey);
-    cachedLicense = result;
-    return result;
-  } catch {
-    cachedLicense = null;
-    return null;
-  }
-}
-
-/**
- * Get the license tier for the current project.
- * Falls back to `'free'` when no valid license is found.
- */
-export function getLicenseTier(configDir?: string): LicenseTier {
-  const dir = configDir ?? process.cwd();
-  const license = loadLicense(dir);
-  return license?.tier ?? 'free';
-}
-
-/** Reset the in-memory license cache (useful for testing). */
-export function resetLicenseCache(): void {
-  cachedLicense = undefined;
-}
-
-// ── Internal helpers ─────────────────────────────────────────────────
-
-/** Type guard for LicensePayload. */
-function isLicensePayload(value: unknown): value is LicensePayload {
-  if (typeof value !== 'object' || value === null) return false;
-  const obj = value as Record<string, unknown>;
-
-  if (!['free', 'pro', 'enterprise'].includes(obj['tier'] as string)) return false;
-  if (typeof obj['exp'] !== 'number') return false;
-  if (typeof obj['iat'] !== 'number') return false;
-  if (typeof obj['sub'] !== 'string') return false;
-  if (typeof obj['maxProjects'] !== 'number') return false;
-  if (typeof obj['maxRunsPerMonth'] !== 'number') return false;
-  if (!Array.isArray(obj['features'])) return false;
-  if (!obj['features'].every((f: unknown) => typeof f === 'string')) return false;
-
-  return true;
-}
-
-/**
- * Convert a raw ECDSA signature (r || s, 64 bytes for P-256) to DER encoding.
- * If the input is already DER-encoded (starts with 0x30), return as-is.
- */
-function rawToDer(raw: Buffer): Buffer {
-  // If already DER-encoded, return as-is
-  if (raw.length > 0 && raw[0] === 0x30) return raw;
-
-  if (raw.length !== 64) return raw; // Not a valid raw P-256 signature
-
-  const r = raw.subarray(0, 32);
-  const s = raw.subarray(32, 64);
-
-  const encodeInteger = (int: Buffer): Buffer => {
-    // Strip leading zeros but keep at least one byte
-    let start = 0;
-    while (start < int.length - 1 && int[start] === 0) start++;
-    let trimmed = int.subarray(start);
-
-    // If high bit is set, prepend a 0x00 byte
-    if (trimmed[0] & 0x80) {
-      trimmed = Buffer.concat([Buffer.from([0x00]), trimmed]);
-    }
-
-    return Buffer.concat([
-      Buffer.from([0x02, trimmed.length]),
-      trimmed,
-    ]);
-  };
-
-  const rDer = encodeInteger(r);
-  const sDer = encodeInteger(s);
-  const body = Buffer.concat([rDer, sDer]);
-
-  return Buffer.concat([Buffer.from([0x30, body.length]), body]);
-}
+import * as crypto from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+
+/** License tiers supported by TestTeam. */
+export type LicenseTier = 'free' | 'pro' | 'enterprise';
+
+/** JWT payload embedded in a TestTeam license key. */
+export interface LicensePayload {
+  tier: LicenseTier;
+  exp: number;
+  iat: number;
+  sub: string;
+  maxProjects: number;
+  maxRunsPerMonth: number;
+  features: string[];
+}
+
+/** In-memory cache so we only validate once per process. */
+let cachedLicense: LicensePayload | null | undefined;
+
+const LICENSE_FILENAME = '.testteam-license';
+
+// ── Base64url helpers ────────────────────────────────────────────────
+
+function base64urlEncode(data: Buffer): string {
+  return data.toString('base64url');
+}
+
+function base64urlDecode(str: string): Buffer {
+  return Buffer.from(str, 'base64url');
+}
+
+// ── JWT helpers (ES256 / ECDSA P-256 with SHA-256) ───────────────────
+
+/**
+ * Decode and verify a JWT signed with ES256.
+ * Returns the payload on success or `null` on any failure
+ * (bad format, invalid signature, expired, malformed JSON).
+ */
+export function validateLicense(
+  key: string,
+  publicKey: string,
+): LicensePayload | null {
+  try {
+    const parts = key.trim().split('.');
+    if (parts.length !== 3) return null;
+
+    const [headerB64, payloadB64, signatureB64] = parts;
+
+    // Verify header declares ES256
+    const header: unknown = JSON.parse(
+      base64urlDecode(headerB64).toString('utf8'),
+    );
+    if (
+      typeof header !== 'object' ||
+      header === null ||
+      (header as Record<string, unknown>)['alg'] !== 'ES256'
+    ) {
+      return null;
+    }
+
+    // Verify signature
+    const signedContent = `${headerB64}.${payloadB64}`;
+    const signature = base64urlDecode(signatureB64);
+
+    // ES256 produces a 64-byte raw (r || s) signature.
+    // Node.js crypto.verify expects DER encoding, so convert if raw.
+    const derSignature = rawToDer(signature);
+
+    const verifier = crypto.createVerify('SHA256');
+    verifier.update(signedContent);
+    const valid = verifier.verify(
+      { key: publicKey, dsaEncoding: 'der' },
+      derSignature,
+    );
+    if (!valid) return null;
+
+    // Decode payload
+    const payloadJson = base64urlDecode(payloadB64).toString('utf8');
+    const payload: unknown = JSON.parse(payloadJson);
+
+    if (!isLicensePayload(payload)) return null;
+
+    // Check expiry
+    const nowSec = Math.floor(Date.now() / 1000);
+    if (payload.exp <= nowSec) return null;
+
+    return payload;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Load a license from the `.testteam-license` file in the given directory.
+ * The file must contain the JWT on the first non-empty line.
+ * A second non-empty line, if present, is treated as the PEM public key
+ * (or the public key can be embedded as `TF_LICENSE_PUBLIC_KEY` env var).
+ */
+export function loadLicense(configDir: string): LicensePayload | null {
+  // Return cached result if available
+  if (cachedLicense !== undefined) return cachedLicense;
+
+  try {
+    const filePath = path.join(configDir, LICENSE_FILENAME);
+    if (!fs.existsSync(filePath)) {
+      cachedLicense = null;
+      return null;
+    }
+
+    const content = fs.readFileSync(filePath, 'utf8').trim();
+    if (!content) {
+      cachedLicense = null;
+      return null;
+    }
+
+    // Split into sections separated by blank lines
+    const sections = content.split(/\n\s*\n/);
+    const licenseKey = sections[0].trim();
+
+    // Public key: either embedded after the JWT or from env
+    let publicKey = process.env['TF_LICENSE_PUBLIC_KEY'] ?? '';
+    if (sections.length > 1) {
+      publicKey = sections.slice(1).join('\n\n').trim();
+    }
+
+    if (!publicKey) {
+      cachedLicense = null;
+      return null;
+    }
+
+    const result = validateLicense(licenseKey, publicKey);
+    cachedLicense = result;
+    return result;
+  } catch {
+    cachedLicense = null;
+    return null;
+  }
+}
+
+/**
+ * Get the license tier for the current project.
+ * Falls back to `'free'` when no valid license is found.
+ */
+export function getLicenseTier(configDir?: string): LicenseTier {
+  const dir = configDir ?? process.cwd();
+  const license = loadLicense(dir);
+  return license?.tier ?? 'free';
+}
+
+/** Reset the in-memory license cache (useful for testing). */
+export function resetLicenseCache(): void {
+  cachedLicense = undefined;
+}
+
+// ── Internal helpers ─────────────────────────────────────────────────
+
+/** Type guard for LicensePayload. */
+function isLicensePayload(value: unknown): value is LicensePayload {
+  if (typeof value !== 'object' || value === null) return false;
+  const obj = value as Record<string, unknown>;
+
+  if (!['free', 'pro', 'enterprise'].includes(obj['tier'] as string)) return false;
+  if (typeof obj['exp'] !== 'number') return false;
+  if (typeof obj['iat'] !== 'number') return false;
+  if (typeof obj['sub'] !== 'string') return false;
+  if (typeof obj['maxProjects'] !== 'number') return false;
+  if (typeof obj['maxRunsPerMonth'] !== 'number') return false;
+  if (!Array.isArray(obj['features'])) return false;
+  if (!obj['features'].every((f: unknown) => typeof f === 'string')) return false;
+
+  return true;
+}
+
+/**
+ * Convert a raw ECDSA signature (r || s, 64 bytes for P-256) to DER encoding.
+ * If the input is not exactly 64 bytes it is returned as-is (e.g. already DER).
+ */
+function rawToDer(raw: Buffer): Buffer {
+  if (raw.length !== 64) return raw; // Not a valid raw P-256 signature; may already be DER
+
+  const r = raw.subarray(0, 32);
+  const s = raw.subarray(32, 64);
+
+  const encodeInteger = (int: Buffer): Buffer => {
+    // Strip leading zeros but keep at least one byte
+    let start = 0;
+    while (start < int.length - 1 && int[start] === 0) start++;
+    let trimmed = int.subarray(start);
+
+    // If high bit is set, prepend a 0x00 byte
+    if (trimmed[0] & 0x80) {
+      trimmed = Buffer.concat([Buffer.from([0x00]), trimmed]);
+    }
+
+    return Buffer.concat([
+      Buffer.from([0x02, trimmed.length]),
+      trimmed,
+    ]);
+  };
+
+  const rDer = encodeInteger(r);
+  const sDer = encodeInteger(s);
+  const body = Buffer.concat([rDer, sDer]);
+
+  return Buffer.concat([Buffer.from([0x30, body.length]), body]);
+}

package/core/orchestrator.ts

@@ -15,9 +15,9 @@ import * as path from 'path';
 
 /** Agent IDs to dispatch per phase, in execution order. */
 const PHASE_DISPATCH: Record<Phase, readonly number[]> = {
-  alpha:   [1, 2, 23, 3, 4, 5],
-  beta:    [5, 6, 7, 8, 12, 13, 14, 15, 16, 18, 19, 21, 22],
-  uat:     [5, 6, 12, 13, 14, 15, 18, 19, 20, 21, 22, 17],
+  alpha:   [1, 2, 23, 24, 3, 4, 5, 37, 38, 62, 68, 69, 70],
+  beta:    [5, 6, 7, 8, 12, 13, 14, 15, 16, 18, 19, 21, 22, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70],
+  uat:     [5, 6, 12, 13, 14, 15, 18, 19, 20, 21, 22, 17, 25, 26, 27, 28, 29, 30, 31, 32, 33, 35, 37, 38, 39, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70],
   release: [10],
 };
 
@@ -26,7 +26,9 @@ const PHASE_DISPATCH: Record<Phase, readonly number[]> = {
  * Agents that write data (2, 3, 5, 16) must run sequentially.
  */
 const PARALLEL_SAFE: ReadonlySet<number> = new Set([
-  6, 7, 8, 12, 13, 14, 15, 18, 19, 21, 22,
+  6, 7, 8, 12, 13, 14, 15, 18, 19, 21, 22, 24, 25, 26, 27, 28, 29, 30,
+  31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50,
+  51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70,
 ]);
 
 /** Maximum number of fix-loop iterations per phase to prevent infinite heal/fix loops. */

package/dist/agents/24-signup-onboarding-tester.d.ts

@@ -0,0 +1,35 @@
+import type { Finding } from '../core/types';
+import { BaseAgent } from './base-agent';
+export declare class SignupOnboardingTesterAgent extends BaseAgent {
+    readonly agentId = 24;
+    readonly agentName = "Signup & Onboarding Tester";
+    private baseUrl;
+    protected preFlight(): Promise<void>;
+    protected execute(): Promise<Finding[]>;
+    /**
+     * Test 1: Check if a registration page exists.
+     * Tries config.auth.registerUrl first, then common paths.
+     */
+    private testRegistrationPage;
+    /**
+     * Test 2: Submit empty registration form and expect validation errors.
+     */
+    private testRegistrationValidation;
+    /**
+     * Test 3: Verify the login page has expected elements.
+     */
+    private testLoginPage;
+    /**
+     * Test 4: Fill credentials and submit login form.
+     */
+    private testLoginFlow;
+    /**
+     * Test 5: After login, look for onboarding/welcome/tour modals.
+     */
+    private testOnboardingDetection;
+    /**
+     * Test 6: Check if forgot-password page exists with expected elements.
+     */
+    private testForgotPassword;
+}
+//# sourceMappingURL=24-signup-onboarding-tester.d.ts.map

package/dist/agents/24-signup-onboarding-tester.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"24-signup-onboarding-tester.d.ts","sourceRoot":"","sources":["../../agents/24-signup-onboarding-tester.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAqBzC,qBAAa,2BAA4B,SAAQ,SAAS;IACxD,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,gCAAgC;IAClD,OAAO,CAAC,OAAO,CAAM;cAEL,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAK1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAqE7C;;;OAGG;YACW,oBAAoB;IAkElC;;OAEG;YACW,0BAA0B;IAqDxC;;OAEG;YACW,aAAa;IAwD3B;;OAEG;YACW,aAAa;IA+C3B;;OAEG;YACW,uBAAuB;IAuCrC;;OAEG;YACW,kBAAkB;CA8CjC"}