@avi770/testteam 1.2.0 → 2.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +29 -1
- package/README.md +53 -6
- package/agents/24-signup-onboarding-tester.ts +429 -0
- package/agents/25-crud-flow-tester.ts +302 -0
- package/agents/26-form-validator.ts +297 -0
- package/agents/27-search-filter-tester.ts +326 -0
- package/agents/28-navigation-routing-tester.ts +425 -0
- package/agents/29-responsive-interaction-tester.ts +350 -0
- package/agents/30-multi-user-scenario-tester.ts +319 -0
- package/agents/31-load-tester.ts +134 -0
- package/agents/32-memory-leak-detector.ts +194 -0
- package/agents/33-bundle-analyzer.ts +132 -0
- package/agents/34-xss-scanner.ts +191 -0
- package/agents/35-csrf-tester.ts +82 -0
- package/agents/36-auth-fuzzer.ts +194 -0
- package/agents/37-dependency-scanner.ts +176 -0
- package/agents/38-secrets-scanner.ts +137 -0
- package/agents/39-api-contract-tester.ts +199 -0
- package/agents/40-rate-limit-tester.ts +94 -0
- package/agents/41-api-pagination-tester.ts +97 -0
- package/agents/42-graphql-tester.ts +222 -0
- package/agents/43-data-consistency-checker.ts +205 -0
- package/agents/44-backup-recovery-tester.ts +152 -0
- package/agents/45-data-privacy-scanner.ts +125 -0
- package/agents/46-seo-auditor.ts +294 -0
- package/agents/47-social-preview-tester.ts +232 -0
- package/agents/48-lighthouse-auditor.ts +213 -0
- package/agents/49-i18n-tester.ts +198 -0
- package/agents/50-timezone-tester.ts +173 -0
- package/agents/51-error-recovery-tester.ts +155 -0
- package/agents/52-offline-mode-tester.ts +180 -0
- package/agents/53-graceful-degradation-tester.ts +156 -0
- package/agents/54-websocket-tester.ts +151 -0
- package/agents/55-realtime-sync-tester.ts +194 -0
- package/agents/56-file-upload-tester.ts +194 -0
- package/agents/57-export-tester.ts +174 -0
- package/agents/58-payment-flow-tester.ts +183 -0
- package/agents/59-ssl-tls-auditor.ts +141 -0
- package/agents/60-dns-cdn-tester.ts +117 -0
- package/agents/61-docker-health-checker.ts +111 -0
- package/agents/62-env-config-validator.ts +152 -0
- package/agents/63-log-quality-auditor.ts +136 -0
- package/agents/64-analytics-tracker-tester.ts +165 -0
- package/agents/65-gdpr-compliance-tester.ts +215 -0
- package/agents/66-soc2-control-validator.ts +210 -0
- package/agents/67-wcag-aaa-tester.ts +241 -0
- package/agents/68-dead-code-detector.ts +135 -0
- package/agents/69-type-safety-auditor.ts +164 -0
- package/agents/70-complexity-analyzer.ts +179 -0
- package/agents/__tests__/24-signup-onboarding-tester.test.ts +274 -0
- package/agents/__tests__/25-crud-flow-tester.test.ts +322 -0
- package/agents/__tests__/26-form-validator.test.ts +345 -0
- package/agents/__tests__/27-search-filter-tester.test.ts +311 -0
- package/agents/__tests__/28-navigation-routing-tester.test.ts +328 -0
- package/agents/__tests__/29-responsive-interaction-tester.test.ts +297 -0
- package/agents/__tests__/30-multi-user-scenario-tester.test.ts +328 -0
- package/agents/__tests__/31-load-tester.test.ts +189 -0
- package/agents/__tests__/32-memory-leak-detector.test.ts +251 -0
- package/agents/__tests__/33-bundle-analyzer.test.ts +237 -0
- package/agents/__tests__/34-xss-scanner.test.ts +258 -0
- package/agents/__tests__/35-csrf-tester.test.ts +200 -0
- package/agents/__tests__/36-auth-fuzzer.test.ts +214 -0
- package/agents/__tests__/37-dependency-scanner.test.ts +266 -0
- package/agents/__tests__/38-secrets-scanner.test.ts +224 -0
- package/agents/__tests__/39-api-contract-tester.test.ts +312 -0
- package/agents/__tests__/40-rate-limit-tester.test.ts +192 -0
- package/agents/__tests__/41-api-pagination-tester.test.ts +198 -0
- package/agents/__tests__/42-graphql-tester.test.ts +252 -0
- package/agents/__tests__/43-data-consistency-checker.test.ts +232 -0
- package/agents/__tests__/44-backup-recovery-tester.test.ts +222 -0
- package/agents/__tests__/45-data-privacy-scanner.test.ts +223 -0
- package/agents/__tests__/46-seo-auditor.test.ts +261 -0
- package/agents/__tests__/47-social-preview-tester.test.ts +245 -0
- package/agents/__tests__/48-lighthouse-auditor.test.ts +276 -0
- package/agents/__tests__/49-i18n-tester.test.ts +201 -0
- package/agents/__tests__/50-timezone-tester.test.ts +172 -0
- package/agents/__tests__/51-error-recovery-tester.test.ts +162 -0
- package/agents/__tests__/52-offline-mode-tester.test.ts +164 -0
- package/agents/__tests__/53-graceful-degradation-tester.test.ts +168 -0
- package/agents/__tests__/54-websocket-tester.test.ts +157 -0
- package/agents/__tests__/55-realtime-sync-tester.test.ts +181 -0
- package/agents/__tests__/56-file-upload-tester.test.ts +172 -0
- package/agents/__tests__/57-export-tester.test.ts +169 -0
- package/agents/__tests__/58-payment-flow-tester.test.ts +182 -0
- package/agents/__tests__/59-ssl-tls-auditor.test.ts +179 -0
- package/agents/__tests__/60-dns-cdn-tester.test.ts +176 -0
- package/agents/__tests__/61-docker-health-checker.test.ts +150 -0
- package/agents/__tests__/62-env-config-validator.test.ts +166 -0
- package/agents/__tests__/63-log-quality-auditor.test.ts +175 -0
- package/agents/__tests__/64-analytics-tracker-tester.test.ts +158 -0
- package/agents/__tests__/65-gdpr-compliance-tester.test.ts +174 -0
- package/agents/__tests__/66-soc2-control-validator.test.ts +183 -0
- package/agents/__tests__/67-wcag-aaa-tester.test.ts +190 -0
- package/agents/__tests__/68-dead-code-detector.test.ts +174 -0
- package/agents/__tests__/69-type-safety-auditor.test.ts +173 -0
- package/agents/__tests__/70-complexity-analyzer.test.ts +177 -0
- package/agents/__tests__/registry.test.ts +13 -13
- package/agents/registry.ts +146 -5
- package/core/__tests__/integration.test.ts +4 -4
- package/core/__tests__/orchestrator.test.ts +17 -16
- package/core/license.ts +208 -211
- package/core/orchestrator.ts +6 -4
- package/dist/agents/24-signup-onboarding-tester.d.ts +35 -0
- package/dist/agents/24-signup-onboarding-tester.d.ts.map +1 -0
- package/dist/agents/24-signup-onboarding-tester.js +357 -0
- package/dist/agents/24-signup-onboarding-tester.js.map +1 -0
- package/dist/agents/25-crud-flow-tester.d.ts +11 -0
- package/dist/agents/25-crud-flow-tester.d.ts.map +1 -0
- package/dist/agents/25-crud-flow-tester.js +253 -0
- package/dist/agents/25-crud-flow-tester.js.map +1 -0
- package/dist/agents/26-form-validator.d.ts +12 -0
- package/dist/agents/26-form-validator.d.ts.map +1 -0
- package/dist/agents/26-form-validator.js +257 -0
- package/dist/agents/26-form-validator.js.map +1 -0
- package/dist/agents/27-search-filter-tester.d.ts +20 -0
- package/dist/agents/27-search-filter-tester.d.ts.map +1 -0
- package/dist/agents/27-search-filter-tester.js +267 -0
- package/dist/agents/27-search-filter-tester.js.map +1 -0
- package/dist/agents/28-navigation-routing-tester.d.ts +32 -0
- package/dist/agents/28-navigation-routing-tester.d.ts.map +1 -0
- package/dist/agents/28-navigation-routing-tester.js +363 -0
- package/dist/agents/28-navigation-routing-tester.js.map +1 -0
- package/dist/agents/29-responsive-interaction-tester.d.ts +26 -0
- package/dist/agents/29-responsive-interaction-tester.d.ts.map +1 -0
- package/dist/agents/29-responsive-interaction-tester.js +272 -0
- package/dist/agents/29-responsive-interaction-tester.js.map +1 -0
- package/dist/agents/30-multi-user-scenario-tester.d.ts +24 -0
- package/dist/agents/30-multi-user-scenario-tester.d.ts.map +1 -0
- package/dist/agents/30-multi-user-scenario-tester.js +254 -0
- package/dist/agents/30-multi-user-scenario-tester.js.map +1 -0
- package/dist/agents/31-load-tester.d.ts +12 -0
- package/dist/agents/31-load-tester.d.ts.map +1 -0
- package/dist/agents/31-load-tester.js +110 -0
- package/dist/agents/31-load-tester.js.map +1 -0
- package/dist/agents/32-memory-leak-detector.d.ts +12 -0
- package/dist/agents/32-memory-leak-detector.d.ts.map +1 -0
- package/dist/agents/32-memory-leak-detector.js +167 -0
- package/dist/agents/32-memory-leak-detector.js.map +1 -0
- package/dist/agents/33-bundle-analyzer.d.ts +10 -0
- package/dist/agents/33-bundle-analyzer.d.ts.map +1 -0
- package/dist/agents/33-bundle-analyzer.js +111 -0
- package/dist/agents/33-bundle-analyzer.js.map +1 -0
- package/dist/agents/34-xss-scanner.d.ts +11 -0
- package/dist/agents/34-xss-scanner.d.ts.map +1 -0
- package/dist/agents/34-xss-scanner.js +164 -0
- package/dist/agents/34-xss-scanner.js.map +1 -0
- package/dist/agents/35-csrf-tester.d.ts +11 -0
- package/dist/agents/35-csrf-tester.d.ts.map +1 -0
- package/dist/agents/35-csrf-tester.js +70 -0
- package/dist/agents/35-csrf-tester.js.map +1 -0
- package/dist/agents/36-auth-fuzzer.d.ts +13 -0
- package/dist/agents/36-auth-fuzzer.d.ts.map +1 -0
- package/dist/agents/36-auth-fuzzer.js +163 -0
- package/dist/agents/36-auth-fuzzer.js.map +1 -0
- package/dist/agents/37-dependency-scanner.d.ts +11 -0
- package/dist/agents/37-dependency-scanner.d.ts.map +1 -0
- package/dist/agents/37-dependency-scanner.js +139 -0
- package/dist/agents/37-dependency-scanner.js.map +1 -0
- package/dist/agents/38-secrets-scanner.d.ts +11 -0
- package/dist/agents/38-secrets-scanner.d.ts.map +1 -0
- package/dist/agents/38-secrets-scanner.js +116 -0
- package/dist/agents/38-secrets-scanner.js.map +1 -0
- package/dist/agents/39-api-contract-tester.d.ts +12 -0
- package/dist/agents/39-api-contract-tester.d.ts.map +1 -0
- package/dist/agents/39-api-contract-tester.js +142 -0
- package/dist/agents/39-api-contract-tester.js.map +1 -0
- package/dist/agents/40-rate-limit-tester.d.ts +12 -0
- package/dist/agents/40-rate-limit-tester.d.ts.map +1 -0
- package/dist/agents/40-rate-limit-tester.js +79 -0
- package/dist/agents/40-rate-limit-tester.js.map +1 -0
- package/dist/agents/41-api-pagination-tester.d.ts +12 -0
- package/dist/agents/41-api-pagination-tester.d.ts.map +1 -0
- package/dist/agents/41-api-pagination-tester.js +79 -0
- package/dist/agents/41-api-pagination-tester.js.map +1 -0
- package/dist/agents/42-graphql-tester.d.ts +13 -0
- package/dist/agents/42-graphql-tester.d.ts.map +1 -0
- package/dist/agents/42-graphql-tester.js +187 -0
- package/dist/agents/42-graphql-tester.js.map +1 -0
- package/dist/agents/43-data-consistency-checker.d.ts +11 -0
- package/dist/agents/43-data-consistency-checker.d.ts.map +1 -0
- package/dist/agents/43-data-consistency-checker.js +176 -0
- package/dist/agents/43-data-consistency-checker.js.map +1 -0
- package/dist/agents/44-backup-recovery-tester.d.ts +11 -0
- package/dist/agents/44-backup-recovery-tester.d.ts.map +1 -0
- package/dist/agents/44-backup-recovery-tester.js +128 -0
- package/dist/agents/44-backup-recovery-tester.js.map +1 -0
- package/dist/agents/45-data-privacy-scanner.d.ts +11 -0
- package/dist/agents/45-data-privacy-scanner.d.ts.map +1 -0
- package/dist/agents/45-data-privacy-scanner.js +100 -0
- package/dist/agents/45-data-privacy-scanner.js.map +1 -0
- package/dist/agents/46-seo-auditor.d.ts +12 -0
- package/dist/agents/46-seo-auditor.d.ts.map +1 -0
- package/dist/agents/46-seo-auditor.js +275 -0
- package/dist/agents/46-seo-auditor.js.map +1 -0
- package/dist/agents/47-social-preview-tester.d.ts +11 -0
- package/dist/agents/47-social-preview-tester.d.ts.map +1 -0
- package/dist/agents/47-social-preview-tester.js +219 -0
- package/dist/agents/47-social-preview-tester.js.map +1 -0
- package/dist/agents/48-lighthouse-auditor.d.ts +11 -0
- package/dist/agents/48-lighthouse-auditor.d.ts.map +1 -0
- package/dist/agents/48-lighthouse-auditor.js +192 -0
- package/dist/agents/48-lighthouse-auditor.js.map +1 -0
- package/dist/agents/49-i18n-tester.d.ts +13 -0
- package/dist/agents/49-i18n-tester.d.ts.map +1 -0
- package/dist/agents/49-i18n-tester.js +172 -0
- package/dist/agents/49-i18n-tester.js.map +1 -0
- package/dist/agents/50-timezone-tester.d.ts +11 -0
- package/dist/agents/50-timezone-tester.d.ts.map +1 -0
- package/dist/agents/50-timezone-tester.js +152 -0
- package/dist/agents/50-timezone-tester.js.map +1 -0
- package/dist/agents/51-error-recovery-tester.d.ts +11 -0
- package/dist/agents/51-error-recovery-tester.d.ts.map +1 -0
- package/dist/agents/51-error-recovery-tester.js +134 -0
- package/dist/agents/51-error-recovery-tester.js.map +1 -0
- package/dist/agents/52-offline-mode-tester.d.ts +12 -0
- package/dist/agents/52-offline-mode-tester.d.ts.map +1 -0
- package/dist/agents/52-offline-mode-tester.js +161 -0
- package/dist/agents/52-offline-mode-tester.js.map +1 -0
- package/dist/agents/53-graceful-degradation-tester.d.ts +12 -0
- package/dist/agents/53-graceful-degradation-tester.d.ts.map +1 -0
- package/dist/agents/53-graceful-degradation-tester.js +130 -0
- package/dist/agents/53-graceful-degradation-tester.js.map +1 -0
- package/dist/agents/54-websocket-tester.d.ts +10 -0
- package/dist/agents/54-websocket-tester.d.ts.map +1 -0
- package/dist/agents/54-websocket-tester.js +132 -0
- package/dist/agents/54-websocket-tester.js.map +1 -0
- package/dist/agents/55-realtime-sync-tester.d.ts +11 -0
- package/dist/agents/55-realtime-sync-tester.d.ts.map +1 -0
- package/dist/agents/55-realtime-sync-tester.js +175 -0
- package/dist/agents/55-realtime-sync-tester.js.map +1 -0
- package/dist/agents/56-file-upload-tester.d.ts +12 -0
- package/dist/agents/56-file-upload-tester.d.ts.map +1 -0
- package/dist/agents/56-file-upload-tester.js +166 -0
- package/dist/agents/56-file-upload-tester.js.map +1 -0
- package/dist/agents/57-export-tester.d.ts +11 -0
- package/dist/agents/57-export-tester.d.ts.map +1 -0
- package/dist/agents/57-export-tester.js +155 -0
- package/dist/agents/57-export-tester.js.map +1 -0
- package/dist/agents/58-payment-flow-tester.d.ts +11 -0
- package/dist/agents/58-payment-flow-tester.d.ts.map +1 -0
- package/dist/agents/58-payment-flow-tester.js +159 -0
- package/dist/agents/58-payment-flow-tester.js.map +1 -0
- package/dist/agents/59-ssl-tls-auditor.d.ts +10 -0
- package/dist/agents/59-ssl-tls-auditor.d.ts.map +1 -0
- package/dist/agents/59-ssl-tls-auditor.js +132 -0
- package/dist/agents/59-ssl-tls-auditor.js.map +1 -0
- package/dist/agents/60-dns-cdn-tester.d.ts +10 -0
- package/dist/agents/60-dns-cdn-tester.d.ts.map +1 -0
- package/dist/agents/60-dns-cdn-tester.js +105 -0
- package/dist/agents/60-dns-cdn-tester.js.map +1 -0
- package/dist/agents/61-docker-health-checker.d.ts +10 -0
- package/dist/agents/61-docker-health-checker.d.ts.map +1 -0
- package/dist/agents/61-docker-health-checker.js +95 -0
- package/dist/agents/61-docker-health-checker.js.map +1 -0
- package/dist/agents/62-env-config-validator.d.ts +10 -0
- package/dist/agents/62-env-config-validator.d.ts.map +1 -0
- package/dist/agents/62-env-config-validator.js +132 -0
- package/dist/agents/62-env-config-validator.js.map +1 -0
- package/dist/agents/63-log-quality-auditor.d.ts +9 -0
- package/dist/agents/63-log-quality-auditor.d.ts.map +1 -0
- package/dist/agents/63-log-quality-auditor.js +121 -0
- package/dist/agents/63-log-quality-auditor.js.map +1 -0
- package/dist/agents/64-analytics-tracker-tester.d.ts +10 -0
- package/dist/agents/64-analytics-tracker-tester.d.ts.map +1 -0
- package/dist/agents/64-analytics-tracker-tester.js +146 -0
- package/dist/agents/64-analytics-tracker-tester.js.map +1 -0
- package/dist/agents/65-gdpr-compliance-tester.d.ts +13 -0
- package/dist/agents/65-gdpr-compliance-tester.d.ts.map +1 -0
- package/dist/agents/65-gdpr-compliance-tester.js +186 -0
- package/dist/agents/65-gdpr-compliance-tester.js.map +1 -0
- package/dist/agents/66-soc2-control-validator.d.ts +14 -0
- package/dist/agents/66-soc2-control-validator.d.ts.map +1 -0
- package/dist/agents/66-soc2-control-validator.js +178 -0
- package/dist/agents/66-soc2-control-validator.js.map +1 -0
- package/dist/agents/67-wcag-aaa-tester.d.ts +13 -0
- package/dist/agents/67-wcag-aaa-tester.d.ts.map +1 -0
- package/dist/agents/67-wcag-aaa-tester.js +207 -0
- package/dist/agents/67-wcag-aaa-tester.js.map +1 -0
- package/dist/agents/68-dead-code-detector.d.ts +9 -0
- package/dist/agents/68-dead-code-detector.d.ts.map +1 -0
- package/dist/agents/68-dead-code-detector.js +116 -0
- package/dist/agents/68-dead-code-detector.js.map +1 -0
- package/dist/agents/69-type-safety-auditor.d.ts +9 -0
- package/dist/agents/69-type-safety-auditor.d.ts.map +1 -0
- package/dist/agents/69-type-safety-auditor.js +148 -0
- package/dist/agents/69-type-safety-auditor.js.map +1 -0
- package/dist/agents/70-complexity-analyzer.d.ts +10 -0
- package/dist/agents/70-complexity-analyzer.d.ts.map +1 -0
- package/dist/agents/70-complexity-analyzer.js +154 -0
- package/dist/agents/70-complexity-analyzer.js.map +1 -0
- package/dist/agents/registry.d.ts +3 -3
- package/dist/agents/registry.d.ts.map +1 -1
- package/dist/agents/registry.js +146 -5
- package/dist/agents/registry.js.map +1 -1
- package/dist/core/license.js +2 -5
- package/dist/core/license.js.map +1 -1
- package/dist/core/orchestrator.d.ts.map +1 -1
- package/dist/core/orchestrator.js +6 -4
- package/dist/core/orchestrator.js.map +1 -1
- package/package.json +2 -2
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import type { Finding } from '../core/types';
|
|
2
|
+
import { BaseAgent } from './base-agent';
|
|
3
|
+
export declare class RealtimeSyncTesterAgent extends BaseAgent {
|
|
4
|
+
readonly agentId = 55;
|
|
5
|
+
readonly agentName = "Realtime Sync Tester";
|
|
6
|
+
private baseUrl;
|
|
7
|
+
protected preFlight(): Promise<void>;
|
|
8
|
+
protected execute(): Promise<Finding[]>;
|
|
9
|
+
private getItemCount;
|
|
10
|
+
}
|
|
11
|
+
//# sourceMappingURL=55-realtime-sync-tester.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"55-realtime-sync-tester.d.ts","sourceRoot":"","sources":["../../agents/55-realtime-sync-tester.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAOzC,qBAAa,uBAAwB,SAAQ,SAAS;IACpD,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,0BAA0B;IAC5C,OAAO,CAAC,OAAO,CAAM;cAEL,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAS1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAgK/B,YAAY;CAU3B"}
|
|
@@ -0,0 +1,175 @@
|
|
|
1
|
+
import { BaseAgent } from './base-agent';
|
|
2
|
+
import { resolveEnvironment } from '../helpers/env-resolver';
|
|
3
|
+
import { login } from '../helpers/navigation';
|
|
4
|
+
/** Timeout for waiting for sync. */
|
|
5
|
+
const SYNC_WAIT_MS = 5_000;
|
|
6
|
+
export class RealtimeSyncTesterAgent extends BaseAgent {
|
|
7
|
+
agentId = 55;
|
|
8
|
+
agentName = 'Realtime Sync Tester';
|
|
9
|
+
baseUrl = '';
|
|
10
|
+
async preFlight() {
|
|
11
|
+
if (!this.config.modules || this.config.modules.length === 0) {
|
|
12
|
+
throw new Error('RealtimeSyncTesterAgent requires at least one module in config.modules');
|
|
13
|
+
}
|
|
14
|
+
const { env } = await resolveEnvironment(this.config, this.phase);
|
|
15
|
+
this.baseUrl = env.baseUrl;
|
|
16
|
+
}
|
|
17
|
+
async execute() {
|
|
18
|
+
const findings = [];
|
|
19
|
+
const rawLoginUrl = this.config.auth.loginUrl ?? '/login';
|
|
20
|
+
const loginUrl = rawLoginUrl.startsWith('http') ? rawLoginUrl : `${this.baseUrl}${rawLoginUrl}`;
|
|
21
|
+
const credentials = this.config.auth.credentials?.['admin'] ??
|
|
22
|
+
Object.values(this.config.auth.credentials ?? {})[0];
|
|
23
|
+
if (!credentials) {
|
|
24
|
+
findings.push({
|
|
25
|
+
id: `${this.agentId}-no-credentials`,
|
|
26
|
+
type: 'infra-issue',
|
|
27
|
+
severity: 'medium',
|
|
28
|
+
agentId: this.agentId,
|
|
29
|
+
module: 'realtime-sync-tester',
|
|
30
|
+
description: 'No credentials configured — realtime sync test requires authentication',
|
|
31
|
+
});
|
|
32
|
+
return findings;
|
|
33
|
+
}
|
|
34
|
+
const { chromium } = await import('playwright');
|
|
35
|
+
let browser = null;
|
|
36
|
+
try {
|
|
37
|
+
browser = await chromium.launch({ headless: true });
|
|
38
|
+
// Create two contexts
|
|
39
|
+
const context1 = await browser.newContext();
|
|
40
|
+
const context2 = await browser.newContext();
|
|
41
|
+
const page1 = await context1.newPage();
|
|
42
|
+
const page2 = await context2.newPage();
|
|
43
|
+
// Login both contexts
|
|
44
|
+
try {
|
|
45
|
+
await login(page1, credentials, loginUrl);
|
|
46
|
+
await login(page2, credentials, loginUrl);
|
|
47
|
+
}
|
|
48
|
+
catch {
|
|
49
|
+
findings.push({
|
|
50
|
+
id: `${this.agentId}-login-failed`,
|
|
51
|
+
type: 'infra-issue',
|
|
52
|
+
severity: 'medium',
|
|
53
|
+
agentId: this.agentId,
|
|
54
|
+
module: 'realtime-sync-tester',
|
|
55
|
+
description: 'Login failed for one or both contexts',
|
|
56
|
+
});
|
|
57
|
+
await page1.close().catch(() => undefined);
|
|
58
|
+
await page2.close().catch(() => undefined);
|
|
59
|
+
await context1.close().catch(() => undefined);
|
|
60
|
+
await context2.close().catch(() => undefined);
|
|
61
|
+
return findings;
|
|
62
|
+
}
|
|
63
|
+
const firstModule = this.config.modules[0];
|
|
64
|
+
const fullUrl = firstModule.route.startsWith('http')
|
|
65
|
+
? firstModule.route
|
|
66
|
+
: `${this.baseUrl}${firstModule.route}`;
|
|
67
|
+
// Navigate both pages to the same module
|
|
68
|
+
try {
|
|
69
|
+
await page1.goto(fullUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 });
|
|
70
|
+
await page2.goto(fullUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 });
|
|
71
|
+
}
|
|
72
|
+
catch {
|
|
73
|
+
findings.push({
|
|
74
|
+
id: `${this.agentId}-nav-failed`,
|
|
75
|
+
type: 'test-bug',
|
|
76
|
+
severity: 'medium',
|
|
77
|
+
agentId: this.agentId,
|
|
78
|
+
module: firstModule.id,
|
|
79
|
+
description: `Failed to navigate both contexts to ${firstModule.id}`,
|
|
80
|
+
});
|
|
81
|
+
await page1.close().catch(() => undefined);
|
|
82
|
+
await page2.close().catch(() => undefined);
|
|
83
|
+
await context1.close().catch(() => undefined);
|
|
84
|
+
await context2.close().catch(() => undefined);
|
|
85
|
+
return findings;
|
|
86
|
+
}
|
|
87
|
+
// Get initial item count on context2
|
|
88
|
+
const initialCount = await this.getItemCount(page2);
|
|
89
|
+
// Context1: try to create an item
|
|
90
|
+
const createSelectors = 'button:has-text("Create"), button:has-text("Add"), button:has-text("New"), [data-testid*="create"], [data-testid*="add"]';
|
|
91
|
+
const createCount = await page1.locator(createSelectors).count();
|
|
92
|
+
if (createCount === 0) {
|
|
93
|
+
findings.push({
|
|
94
|
+
id: `${this.agentId}-no-create-button`,
|
|
95
|
+
type: 'test-bug',
|
|
96
|
+
severity: 'low',
|
|
97
|
+
agentId: this.agentId,
|
|
98
|
+
module: firstModule.id,
|
|
99
|
+
description: `No create/add button found in ${firstModule.id} — cannot test realtime sync`,
|
|
100
|
+
});
|
|
101
|
+
}
|
|
102
|
+
else {
|
|
103
|
+
try {
|
|
104
|
+
await page1.locator(createSelectors).first().click();
|
|
105
|
+
// Fill any text inputs in form/dialog
|
|
106
|
+
const inputs = page1.locator('form input[type="text"], [role="dialog"] input[type="text"]');
|
|
107
|
+
const inputCount = await inputs.count();
|
|
108
|
+
for (let i = 0; i < inputCount; i++) {
|
|
109
|
+
await inputs.nth(i).fill(`Sync Test ${Date.now()}`).catch(() => undefined);
|
|
110
|
+
}
|
|
111
|
+
// Submit
|
|
112
|
+
const submitBtn = page1.locator('button[type="submit"], button:has-text("Save"), button:has-text("Submit")');
|
|
113
|
+
if (await submitBtn.count() > 0) {
|
|
114
|
+
await submitBtn.first().click().catch(() => undefined);
|
|
115
|
+
}
|
|
116
|
+
// Wait for sync
|
|
117
|
+
await new Promise(resolve => setTimeout(resolve, SYNC_WAIT_MS));
|
|
118
|
+
// Check context2 for new item (WITHOUT refresh)
|
|
119
|
+
const newCount = await this.getItemCount(page2);
|
|
120
|
+
if (newCount <= initialCount) {
|
|
121
|
+
findings.push({
|
|
122
|
+
id: `${this.agentId}-no-realtime-sync-${firstModule.id}`,
|
|
123
|
+
type: 'test-bug',
|
|
124
|
+
severity: 'low',
|
|
125
|
+
agentId: this.agentId,
|
|
126
|
+
module: firstModule.id,
|
|
127
|
+
description: `New item created in context 1 not visible in context 2 without refresh — realtime sync not implemented`,
|
|
128
|
+
});
|
|
129
|
+
}
|
|
130
|
+
}
|
|
131
|
+
catch (createError) {
|
|
132
|
+
findings.push({
|
|
133
|
+
id: `${this.agentId}-create-failed`,
|
|
134
|
+
type: 'test-bug',
|
|
135
|
+
severity: 'medium',
|
|
136
|
+
agentId: this.agentId,
|
|
137
|
+
module: firstModule.id,
|
|
138
|
+
description: `Create action failed during sync test: ${createError instanceof Error ? createError.message.split('\n')[0] : String(createError)}`,
|
|
139
|
+
});
|
|
140
|
+
}
|
|
141
|
+
}
|
|
142
|
+
await page1.close().catch(() => undefined);
|
|
143
|
+
await page2.close().catch(() => undefined);
|
|
144
|
+
await context1.close().catch(() => undefined);
|
|
145
|
+
await context2.close().catch(() => undefined);
|
|
146
|
+
}
|
|
147
|
+
catch (playwrightError) {
|
|
148
|
+
findings.push({
|
|
149
|
+
id: `${this.agentId}-playwright-failure`,
|
|
150
|
+
type: 'infra-issue',
|
|
151
|
+
severity: 'medium',
|
|
152
|
+
agentId: this.agentId,
|
|
153
|
+
module: 'realtime-sync-tester',
|
|
154
|
+
description: `Playwright execution failed: ${playwrightError instanceof Error ? playwrightError.message.split('\n')[0] : String(playwrightError)}`,
|
|
155
|
+
});
|
|
156
|
+
}
|
|
157
|
+
finally {
|
|
158
|
+
if (browser)
|
|
159
|
+
await browser.close().catch(() => undefined);
|
|
160
|
+
}
|
|
161
|
+
return findings;
|
|
162
|
+
}
|
|
163
|
+
async getItemCount(page) {
|
|
164
|
+
try {
|
|
165
|
+
return await page.evaluate(() => {
|
|
166
|
+
const rows = document.querySelectorAll('tr, [role="row"], li, [data-testid*="item"], [data-testid*="row"]');
|
|
167
|
+
return rows.length;
|
|
168
|
+
});
|
|
169
|
+
}
|
|
170
|
+
catch {
|
|
171
|
+
return 0;
|
|
172
|
+
}
|
|
173
|
+
}
|
|
174
|
+
}
|
|
175
|
+
//# sourceMappingURL=55-realtime-sync-tester.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"55-realtime-sync-tester.js","sourceRoot":"","sources":["../../agents/55-realtime-sync-tester.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAE9C,oCAAoC;AACpC,MAAM,YAAY,GAAG,KAAK,CAAC;AAE3B,MAAM,OAAO,uBAAwB,SAAQ,SAAS;IAC3C,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,sBAAsB,CAAC;IACpC,OAAO,GAAG,EAAE,CAAC;IAEX,KAAK,CAAC,SAAS;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;QAChG,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,iBAAiB;gBACpC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,sBAAsB;gBAC9B,WAAW,EAAE,wEAAwE;aACtF,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAEhD,IAAI,OAAO,GAAmB,IAAI,CAAC;QAEnC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAEpD,sBAAsB;YACtB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;YAEvC,sBAAsB;YACtB,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC1C,MAAM,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,eAAe;oBAClC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,sBAAsB;oBAC9B,WAAW,EAAE,uCAAuC;iBACrD,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC9C,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;gBAClD,CAAC,CAAC,WAAW,CAAC,KAAK;gBACnB,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC;YAE1C,yCAAyC;YACzC,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC9E,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAChF,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,aAAa;oBAChC,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,WAAW,CAAC,EAAE;oBACtB,WAAW,EAAE,uCAAuC,WAAW,CAAC,EAAE,EAAE;iBACrE,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC9C,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC9C,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,qCAAqC;YACrC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpD,kCAAkC;YAClC,MAAM,eAAe,GAAG,0HAA0H,CAAC;YACnJ,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,CAAC;YAEjE,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;gBACtB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,mBAAmB;oBACtC,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,WAAW,CAAC,EAAE;oBACtB,WAAW,EAAE,iCAAiC,WAAW,CAAC,EAAE,8BAA8B;iBAC3F,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;oBAErD,sCAAsC;oBACtC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC;oBAC5F,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;oBACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;wBACpC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC7E,CAAC;oBAED,SAAS;oBACT,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC;oBAC7G,IAAI,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;wBAChC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACzD,CAAC;oBAED,gBAAgB;oBAChB,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;oBAEhE,gDAAgD;oBAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;oBAEhD,IAAI,QAAQ,IAAI,YAAY,EAAE,CAAC;wBAC7B,QAAQ,CAAC,IAAI,CAAC;4BACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB,WAAW,CAAC,EAAE,EAAE;4BACxD,IAAI,EAAE,UAAU;4BAChB,QAAQ,EAAE,KAAK;4BACf,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,MAAM,EAAE,WAAW,CAAC,EAAE;4BACtB,WAAW,EAAE,wGAAwG;yBACtH,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,OAAO,WAAW,EAAE,CAAC;oBACrB,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,gBAAgB;wBACnC,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,WAAW,CAAC,EAAE;wBACtB,WAAW,EAAE,0CAA0C,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;qBACjJ,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,eAAe,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB;gBACxC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,sBAAsB;gBAC9B,WAAW,EAAE,gCAAgC,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE;aACnJ,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAA+B;QACxD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;gBAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,gBAAgB,CAAC,mEAAmE,CAAC,CAAC;gBAC5G,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;CACF"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import type { Finding } from '../core/types';
|
|
2
|
+
import { BaseAgent } from './base-agent';
|
|
3
|
+
export declare class FileUploadTesterAgent extends BaseAgent {
|
|
4
|
+
readonly agentId = 56;
|
|
5
|
+
readonly agentName = "File Upload Tester";
|
|
6
|
+
private baseUrl;
|
|
7
|
+
protected preFlight(): Promise<void>;
|
|
8
|
+
protected execute(): Promise<Finding[]>;
|
|
9
|
+
private testModuleUploads;
|
|
10
|
+
private cleanupTempFiles;
|
|
11
|
+
}
|
|
12
|
+
//# sourceMappingURL=56-file-upload-tester.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"56-file-upload-tester.d.ts","sourceRoot":"","sources":["../../agents/56-file-upload-tester.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAOzC,qBAAa,qBAAsB,SAAQ,SAAS;IAClD,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,wBAAwB;IAC1C,OAAO,CAAC,OAAO,CAAM;cAEL,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAS1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAyD/B,iBAAiB;IAuG/B,OAAO,CAAC,gBAAgB;CAUzB"}
|
|
@@ -0,0 +1,166 @@
|
|
|
1
|
+
import { BaseAgent } from './base-agent';
|
|
2
|
+
import { resolveEnvironment } from '../helpers/env-resolver';
|
|
3
|
+
import { login } from '../helpers/navigation';
|
|
4
|
+
import * as fs from 'node:fs';
|
|
5
|
+
import * as path from 'node:path';
|
|
6
|
+
import * as os from 'node:os';
|
|
7
|
+
export class FileUploadTesterAgent extends BaseAgent {
|
|
8
|
+
agentId = 56;
|
|
9
|
+
agentName = 'File Upload Tester';
|
|
10
|
+
baseUrl = '';
|
|
11
|
+
async preFlight() {
|
|
12
|
+
if (!this.config.modules || this.config.modules.length === 0) {
|
|
13
|
+
throw new Error('FileUploadTesterAgent requires at least one module in config.modules');
|
|
14
|
+
}
|
|
15
|
+
const { env } = await resolveEnvironment(this.config, this.phase);
|
|
16
|
+
this.baseUrl = env.baseUrl;
|
|
17
|
+
}
|
|
18
|
+
async execute() {
|
|
19
|
+
const findings = [];
|
|
20
|
+
const rawLoginUrl = this.config.auth.loginUrl ?? '/login';
|
|
21
|
+
const loginUrl = rawLoginUrl.startsWith('http') ? rawLoginUrl : `${this.baseUrl}${rawLoginUrl}`;
|
|
22
|
+
const credentials = this.config.auth.credentials?.['admin'] ??
|
|
23
|
+
Object.values(this.config.auth.credentials ?? {})[0];
|
|
24
|
+
const { chromium } = await import('playwright');
|
|
25
|
+
let browser = null;
|
|
26
|
+
const tmpDir = os.tmpdir();
|
|
27
|
+
try {
|
|
28
|
+
browser = await chromium.launch({ headless: true });
|
|
29
|
+
const page = await browser.newPage();
|
|
30
|
+
if (credentials) {
|
|
31
|
+
try {
|
|
32
|
+
await login(page, credentials, loginUrl);
|
|
33
|
+
}
|
|
34
|
+
catch {
|
|
35
|
+
findings.push({
|
|
36
|
+
id: `${this.agentId}-login-failed`,
|
|
37
|
+
type: 'infra-issue',
|
|
38
|
+
severity: 'medium',
|
|
39
|
+
agentId: this.agentId,
|
|
40
|
+
module: 'file-upload-tester',
|
|
41
|
+
description: 'Login failed — continuing anonymously',
|
|
42
|
+
});
|
|
43
|
+
}
|
|
44
|
+
}
|
|
45
|
+
for (const mod of this.config.modules) {
|
|
46
|
+
const moduleFindings = await this.testModuleUploads(page, mod.id, mod.route, tmpDir);
|
|
47
|
+
findings.push(...moduleFindings);
|
|
48
|
+
}
|
|
49
|
+
await page.close().catch(() => undefined);
|
|
50
|
+
}
|
|
51
|
+
catch (playwrightError) {
|
|
52
|
+
findings.push({
|
|
53
|
+
id: `${this.agentId}-playwright-failure`,
|
|
54
|
+
type: 'infra-issue',
|
|
55
|
+
severity: 'medium',
|
|
56
|
+
agentId: this.agentId,
|
|
57
|
+
module: 'file-upload-tester',
|
|
58
|
+
description: `Playwright execution failed: ${playwrightError instanceof Error ? playwrightError.message.split('\n')[0] : String(playwrightError)}`,
|
|
59
|
+
});
|
|
60
|
+
}
|
|
61
|
+
finally {
|
|
62
|
+
if (browser)
|
|
63
|
+
await browser.close().catch(() => undefined);
|
|
64
|
+
// Cleanup temp files
|
|
65
|
+
this.cleanupTempFiles(tmpDir);
|
|
66
|
+
}
|
|
67
|
+
return findings;
|
|
68
|
+
}
|
|
69
|
+
async testModuleUploads(page, moduleId, moduleRoute, tmpDir) {
|
|
70
|
+
const findings = [];
|
|
71
|
+
const fullUrl = moduleRoute.startsWith('http')
|
|
72
|
+
? moduleRoute
|
|
73
|
+
: `${this.baseUrl}${moduleRoute}`;
|
|
74
|
+
try {
|
|
75
|
+
await page.goto(fullUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 });
|
|
76
|
+
}
|
|
77
|
+
catch {
|
|
78
|
+
return findings; // Skip if navigation fails
|
|
79
|
+
}
|
|
80
|
+
// Find file inputs
|
|
81
|
+
const fileInputCount = await page.locator('input[type="file"]').count();
|
|
82
|
+
if (fileInputCount === 0) {
|
|
83
|
+
return findings; // No file upload on this page
|
|
84
|
+
}
|
|
85
|
+
const fileInput = page.locator('input[type="file"]').first();
|
|
86
|
+
// Test 1: Upload a valid text file
|
|
87
|
+
const validFilePath = path.join(tmpDir, 'test-upload.txt');
|
|
88
|
+
fs.writeFileSync(validFilePath, 'Test file content for upload testing');
|
|
89
|
+
try {
|
|
90
|
+
await fileInput.setInputFiles(validFilePath);
|
|
91
|
+
// Check for success feedback
|
|
92
|
+
await new Promise(resolve => setTimeout(resolve, 2_000));
|
|
93
|
+
const successIndicators = await page.locator('[class*="toast"], [role="alert"], .success, .notification').count();
|
|
94
|
+
if (successIndicators === 0) {
|
|
95
|
+
findings.push({
|
|
96
|
+
id: `${this.agentId}-no-upload-feedback-${moduleId}`,
|
|
97
|
+
type: 'test-bug',
|
|
98
|
+
severity: 'low',
|
|
99
|
+
agentId: this.agentId,
|
|
100
|
+
module: moduleId,
|
|
101
|
+
description: `No visible feedback after file upload in ${moduleId}`,
|
|
102
|
+
});
|
|
103
|
+
}
|
|
104
|
+
}
|
|
105
|
+
catch {
|
|
106
|
+
// Upload attempt failed — non-critical
|
|
107
|
+
}
|
|
108
|
+
// Test 2: Try uploading .exe file — should be rejected
|
|
109
|
+
const exeFilePath = path.join(tmpDir, 'malicious.exe');
|
|
110
|
+
fs.writeFileSync(exeFilePath, 'MZ fake exe content');
|
|
111
|
+
try {
|
|
112
|
+
// Reset file input by navigating back
|
|
113
|
+
await page.goto(fullUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 });
|
|
114
|
+
const newFileInput = page.locator('input[type="file"]').first();
|
|
115
|
+
await newFileInput.setInputFiles(exeFilePath);
|
|
116
|
+
await new Promise(resolve => setTimeout(resolve, 2_000));
|
|
117
|
+
// Check if exe was accepted (it should be rejected)
|
|
118
|
+
const errorIndicators = await page.locator('[class*="error"], [role="alert"], .error, .danger').count();
|
|
119
|
+
if (errorIndicators === 0) {
|
|
120
|
+
findings.push({
|
|
121
|
+
id: `${this.agentId}-exe-not-rejected-${moduleId}`,
|
|
122
|
+
type: 'code-bug-security',
|
|
123
|
+
severity: 'high',
|
|
124
|
+
agentId: this.agentId,
|
|
125
|
+
module: moduleId,
|
|
126
|
+
description: `Executable file (.exe) upload was not rejected in ${moduleId}`,
|
|
127
|
+
suggestedFix: 'Implement file type validation to reject executable files',
|
|
128
|
+
});
|
|
129
|
+
}
|
|
130
|
+
}
|
|
131
|
+
catch {
|
|
132
|
+
// Upload rejection via exception is acceptable
|
|
133
|
+
}
|
|
134
|
+
// Test 3: Try path traversal filename
|
|
135
|
+
const traversalFilePath = path.join(tmpDir, 'test-traversal.txt');
|
|
136
|
+
fs.writeFileSync(traversalFilePath, 'path traversal test');
|
|
137
|
+
try {
|
|
138
|
+
await page.goto(fullUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 });
|
|
139
|
+
const traversalInput = page.locator('input[type="file"]').first();
|
|
140
|
+
await traversalInput.setInputFiles(traversalFilePath);
|
|
141
|
+
// We can't actually set the filename to ../../etc/passwd via Playwright,
|
|
142
|
+
// but we document that the test checks for server-side validation
|
|
143
|
+
this.addEvidence({
|
|
144
|
+
type: 'log',
|
|
145
|
+
path: '',
|
|
146
|
+
description: `File upload path traversal test performed for ${moduleId}`,
|
|
147
|
+
});
|
|
148
|
+
}
|
|
149
|
+
catch {
|
|
150
|
+
// Non-critical
|
|
151
|
+
}
|
|
152
|
+
return findings;
|
|
153
|
+
}
|
|
154
|
+
cleanupTempFiles(tmpDir) {
|
|
155
|
+
const files = ['test-upload.txt', 'malicious.exe', 'test-traversal.txt'];
|
|
156
|
+
for (const file of files) {
|
|
157
|
+
try {
|
|
158
|
+
fs.unlinkSync(path.join(tmpDir, file));
|
|
159
|
+
}
|
|
160
|
+
catch {
|
|
161
|
+
// Cleanup failure — non-critical
|
|
162
|
+
}
|
|
163
|
+
}
|
|
164
|
+
}
|
|
165
|
+
}
|
|
166
|
+
//# sourceMappingURL=56-file-upload-tester.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"56-file-upload-tester.js","sourceRoot":"","sources":["../../agents/56-file-upload-tester.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,MAAM,OAAO,qBAAsB,SAAQ,SAAS;IACzC,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,oBAAoB,CAAC;IAClC,OAAO,GAAG,EAAE,CAAC;IAEX,KAAK,CAAC,SAAS;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;QAChG,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAEhD,IAAI,OAAO,GAAmB,IAAI,CAAC;QACnC,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;QAE3B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAErC,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,eAAe;wBAClC,IAAI,EAAE,aAAa;wBACnB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,oBAAoB;wBAC5B,WAAW,EAAE,uCAAuC;qBACrD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACtC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACrF,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,eAAe,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB;gBACxC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,oBAAoB;gBAC5B,WAAW,EAAE,gCAAgC,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE;aACnJ,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,qBAAqB;YACrB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,IAAU,EACV,QAAgB,EAChB,WAAmB,EACnB,MAAc;QAEd,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC;YAC5C,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC,CAAC,2BAA2B;QAC9C,CAAC;QAED,mBAAmB;QACnB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;QAExE,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,QAAQ,CAAC,CAAC,8BAA8B;QACjD,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;QAE7D,mCAAmC;QACnC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAC3D,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;QAExE,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;YAE7C,6BAA6B;YAC7B,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YACzD,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,KAAK,EAAE,CAAC;YAElH,IAAI,iBAAiB,KAAK,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,uBAAuB,QAAQ,EAAE;oBACpD,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,4CAA4C,QAAQ,EAAE;iBACpE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;QAED,uDAAuD;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACvD,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QAErD,IAAI,CAAC;YACH,sCAAsC;YACtC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;YAChE,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;YAE9C,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YAEzD,oDAAoD;YACpD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,KAAK,EAAE,CAAC;YACxG,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB,QAAQ,EAAE;oBAClD,IAAI,EAAE,mBAAmB;oBACzB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,qDAAqD,QAAQ,EAAE;oBAC5E,YAAY,EAAE,2DAA2D;iBAC1E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;QAED,sCAAsC;QACtC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAClE,EAAE,CAAC,aAAa,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;QAE3D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7E,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;YAClE,MAAM,cAAc,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;YAEtD,yEAAyE;YACzE,kEAAkE;YAClE,IAAI,CAAC,WAAW,CAAC;gBACf,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,EAAE;gBACR,WAAW,EAAE,iDAAiD,QAAQ,EAAE;aACzE,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,gBAAgB,CAAC,MAAc;QACrC,MAAM,KAAK,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC;QACzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import type { Finding } from '../core/types';
|
|
2
|
+
import { BaseAgent } from './base-agent';
|
|
3
|
+
export declare class ExportTesterAgent extends BaseAgent {
|
|
4
|
+
readonly agentId = 57;
|
|
5
|
+
readonly agentName = "Export Tester";
|
|
6
|
+
private baseUrl;
|
|
7
|
+
protected preFlight(): Promise<void>;
|
|
8
|
+
protected execute(): Promise<Finding[]>;
|
|
9
|
+
private testModuleExports;
|
|
10
|
+
}
|
|
11
|
+
//# sourceMappingURL=57-export-tester.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"57-export-tester.d.ts","sourceRoot":"","sources":["../../agents/57-export-tester.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAiBzC,qBAAa,iBAAkB,SAAQ,SAAS;IAC9C,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,mBAAmB;IACrC,OAAO,CAAC,OAAO,CAAM;cAEL,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAS1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAsD/B,iBAAiB;CAsFhC"}
|
|
@@ -0,0 +1,155 @@
|
|
|
1
|
+
import { BaseAgent } from './base-agent';
|
|
2
|
+
import { resolveEnvironment } from '../helpers/env-resolver';
|
|
3
|
+
import { login } from '../helpers/navigation';
|
|
4
|
+
/** Selectors for export/download buttons. */
|
|
5
|
+
const EXPORT_SELECTORS = [
|
|
6
|
+
'button:has-text("Export")',
|
|
7
|
+
'button:has-text("Download")',
|
|
8
|
+
'button:has-text("CSV")',
|
|
9
|
+
'button:has-text("PDF")',
|
|
10
|
+
'button:has-text("Excel")',
|
|
11
|
+
'a:has-text("Export")',
|
|
12
|
+
'a:has-text("Download")',
|
|
13
|
+
'[data-testid*="export"]',
|
|
14
|
+
'[data-testid*="download"]',
|
|
15
|
+
];
|
|
16
|
+
export class ExportTesterAgent extends BaseAgent {
|
|
17
|
+
agentId = 57;
|
|
18
|
+
agentName = 'Export Tester';
|
|
19
|
+
baseUrl = '';
|
|
20
|
+
async preFlight() {
|
|
21
|
+
if (!this.config.modules || this.config.modules.length === 0) {
|
|
22
|
+
throw new Error('ExportTesterAgent requires at least one module in config.modules');
|
|
23
|
+
}
|
|
24
|
+
const { env } = await resolveEnvironment(this.config, this.phase);
|
|
25
|
+
this.baseUrl = env.baseUrl;
|
|
26
|
+
}
|
|
27
|
+
async execute() {
|
|
28
|
+
const findings = [];
|
|
29
|
+
const rawLoginUrl = this.config.auth.loginUrl ?? '/login';
|
|
30
|
+
const loginUrl = rawLoginUrl.startsWith('http') ? rawLoginUrl : `${this.baseUrl}${rawLoginUrl}`;
|
|
31
|
+
const credentials = this.config.auth.credentials?.['admin'] ??
|
|
32
|
+
Object.values(this.config.auth.credentials ?? {})[0];
|
|
33
|
+
const { chromium } = await import('playwright');
|
|
34
|
+
let browser = null;
|
|
35
|
+
try {
|
|
36
|
+
browser = await chromium.launch({ headless: true });
|
|
37
|
+
const page = await browser.newPage();
|
|
38
|
+
if (credentials) {
|
|
39
|
+
try {
|
|
40
|
+
await login(page, credentials, loginUrl);
|
|
41
|
+
}
|
|
42
|
+
catch {
|
|
43
|
+
findings.push({
|
|
44
|
+
id: `${this.agentId}-login-failed`,
|
|
45
|
+
type: 'infra-issue',
|
|
46
|
+
severity: 'medium',
|
|
47
|
+
agentId: this.agentId,
|
|
48
|
+
module: 'export-tester',
|
|
49
|
+
description: 'Login failed — continuing anonymously',
|
|
50
|
+
});
|
|
51
|
+
}
|
|
52
|
+
}
|
|
53
|
+
for (const mod of this.config.modules) {
|
|
54
|
+
const moduleFindings = await this.testModuleExports(page, mod.id, mod.route);
|
|
55
|
+
findings.push(...moduleFindings);
|
|
56
|
+
}
|
|
57
|
+
await page.close().catch(() => undefined);
|
|
58
|
+
}
|
|
59
|
+
catch (playwrightError) {
|
|
60
|
+
findings.push({
|
|
61
|
+
id: `${this.agentId}-playwright-failure`,
|
|
62
|
+
type: 'infra-issue',
|
|
63
|
+
severity: 'medium',
|
|
64
|
+
agentId: this.agentId,
|
|
65
|
+
module: 'export-tester',
|
|
66
|
+
description: `Playwright execution failed: ${playwrightError instanceof Error ? playwrightError.message.split('\n')[0] : String(playwrightError)}`,
|
|
67
|
+
});
|
|
68
|
+
}
|
|
69
|
+
finally {
|
|
70
|
+
if (browser)
|
|
71
|
+
await browser.close().catch(() => undefined);
|
|
72
|
+
}
|
|
73
|
+
return findings;
|
|
74
|
+
}
|
|
75
|
+
async testModuleExports(page, moduleId, moduleRoute) {
|
|
76
|
+
const findings = [];
|
|
77
|
+
const fullUrl = moduleRoute.startsWith('http')
|
|
78
|
+
? moduleRoute
|
|
79
|
+
: `${this.baseUrl}${moduleRoute}`;
|
|
80
|
+
try {
|
|
81
|
+
await page.goto(fullUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 });
|
|
82
|
+
}
|
|
83
|
+
catch {
|
|
84
|
+
return findings;
|
|
85
|
+
}
|
|
86
|
+
const selector = EXPORT_SELECTORS.join(', ');
|
|
87
|
+
const exportBtnCount = await page.locator(selector).count();
|
|
88
|
+
if (exportBtnCount === 0) {
|
|
89
|
+
return findings; // No export buttons on this page
|
|
90
|
+
}
|
|
91
|
+
// Test first export button
|
|
92
|
+
try {
|
|
93
|
+
const downloadPromise = page.waitForEvent('download', { timeout: 10_000 });
|
|
94
|
+
await page.locator(selector).first().click();
|
|
95
|
+
let download = null;
|
|
96
|
+
try {
|
|
97
|
+
download = await downloadPromise;
|
|
98
|
+
}
|
|
99
|
+
catch {
|
|
100
|
+
findings.push({
|
|
101
|
+
id: `${this.agentId}-no-download-${moduleId}`,
|
|
102
|
+
type: 'test-bug',
|
|
103
|
+
severity: 'medium',
|
|
104
|
+
agentId: this.agentId,
|
|
105
|
+
module: moduleId,
|
|
106
|
+
description: `Export button clicked but no download initiated in ${moduleId}`,
|
|
107
|
+
});
|
|
108
|
+
return findings;
|
|
109
|
+
}
|
|
110
|
+
if (download) {
|
|
111
|
+
const suggestedFilename = download.suggestedFilename();
|
|
112
|
+
// Save and check file size
|
|
113
|
+
try {
|
|
114
|
+
const filePath = await download.path();
|
|
115
|
+
if (filePath) {
|
|
116
|
+
const fs = await import('node:fs');
|
|
117
|
+
const stats = fs.statSync(filePath);
|
|
118
|
+
if (stats.size === 0) {
|
|
119
|
+
findings.push({
|
|
120
|
+
id: `${this.agentId}-empty-download-${moduleId}`,
|
|
121
|
+
type: 'test-bug',
|
|
122
|
+
severity: 'medium',
|
|
123
|
+
agentId: this.agentId,
|
|
124
|
+
module: moduleId,
|
|
125
|
+
description: `Downloaded file "${suggestedFilename}" is empty (0 bytes) in ${moduleId}`,
|
|
126
|
+
});
|
|
127
|
+
}
|
|
128
|
+
else {
|
|
129
|
+
this.addEvidence({
|
|
130
|
+
type: 'log',
|
|
131
|
+
path: '',
|
|
132
|
+
description: `Export successful: "${suggestedFilename}" (${stats.size} bytes) from ${moduleId}`,
|
|
133
|
+
});
|
|
134
|
+
}
|
|
135
|
+
}
|
|
136
|
+
}
|
|
137
|
+
catch {
|
|
138
|
+
// File access failure — non-critical
|
|
139
|
+
}
|
|
140
|
+
}
|
|
141
|
+
}
|
|
142
|
+
catch (clickError) {
|
|
143
|
+
findings.push({
|
|
144
|
+
id: `${this.agentId}-export-click-failed-${moduleId}`,
|
|
145
|
+
type: 'test-bug',
|
|
146
|
+
severity: 'medium',
|
|
147
|
+
agentId: this.agentId,
|
|
148
|
+
module: moduleId,
|
|
149
|
+
description: `Export button click failed in ${moduleId}: ${clickError instanceof Error ? clickError.message.split('\n')[0] : String(clickError)}`,
|
|
150
|
+
});
|
|
151
|
+
}
|
|
152
|
+
return findings;
|
|
153
|
+
}
|
|
154
|
+
}
|
|
155
|
+
//# sourceMappingURL=57-export-tester.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"57-export-tester.js","sourceRoot":"","sources":["../../agents/57-export-tester.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAE9C,6CAA6C;AAC7C,MAAM,gBAAgB,GAAG;IACvB,2BAA2B;IAC3B,6BAA6B;IAC7B,wBAAwB;IACxB,wBAAwB;IACxB,0BAA0B;IAC1B,sBAAsB;IACtB,wBAAwB;IACxB,yBAAyB;IACzB,2BAA2B;CACnB,CAAC;AAEX,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IACrC,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,eAAe,CAAC;IAC7B,OAAO,GAAG,EAAE,CAAC;IAEX,KAAK,CAAC,SAAS;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;QAChG,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAEhD,IAAI,OAAO,GAAmB,IAAI,CAAC;QAEnC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAErC,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,eAAe;wBAClC,IAAI,EAAE,aAAa;wBACnB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,eAAe;wBACvB,WAAW,EAAE,uCAAuC;qBACrD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACtC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7E,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,eAAe,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB;gBACxC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,eAAe;gBACvB,WAAW,EAAE,gCAAgC,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE;aACnJ,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,IAAU,EACV,QAAgB,EAChB,WAAmB;QAEnB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC;YAC5C,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;QAE5D,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,QAAQ,CAAC,CAAC,iCAAiC;QACpD,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3E,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;YAE7C,IAAI,QAAQ,GAAoB,IAAI,CAAC;YACrC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,eAAe,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,gBAAgB,QAAQ,EAAE;oBAC7C,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,sDAAsD,QAAQ,EAAE;iBAC9E,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,EAAE,CAAC;gBAEvD,2BAA2B;gBAC3B,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACvC,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;wBACnC,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;wBACpC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;4BACrB,QAAQ,CAAC,IAAI,CAAC;gCACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,mBAAmB,QAAQ,EAAE;gCAChD,IAAI,EAAE,UAAU;gCAChB,QAAQ,EAAE,QAAQ;gCAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gCACrB,MAAM,EAAE,QAAQ;gCAChB,WAAW,EAAE,oBAAoB,iBAAiB,2BAA2B,QAAQ,EAAE;6BACxF,CAAC,CAAC;wBACL,CAAC;6BAAM,CAAC;4BACN,IAAI,CAAC,WAAW,CAAC;gCACf,IAAI,EAAE,KAAK;gCACX,IAAI,EAAE,EAAE;gCACR,WAAW,EAAE,uBAAuB,iBAAiB,MAAM,KAAK,CAAC,IAAI,gBAAgB,QAAQ,EAAE;6BAChG,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,qCAAqC;gBACvC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,wBAAwB,QAAQ,EAAE;gBACrD,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,iCAAiC,QAAQ,KAAK,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;aAClJ,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import type { Finding } from '../core/types';
|
|
2
|
+
import { BaseAgent } from './base-agent';
|
|
3
|
+
export declare class PaymentFlowTesterAgent extends BaseAgent {
|
|
4
|
+
readonly agentId = 58;
|
|
5
|
+
readonly agentName = "Payment Flow Tester";
|
|
6
|
+
private baseUrl;
|
|
7
|
+
protected preFlight(): Promise<void>;
|
|
8
|
+
protected execute(): Promise<Finding[]>;
|
|
9
|
+
private checkStripeElements;
|
|
10
|
+
}
|
|
11
|
+
//# sourceMappingURL=58-payment-flow-tester.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"58-payment-flow-tester.d.ts","sourceRoot":"","sources":["../../agents/58-payment-flow-tester.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAkBzC,qBAAa,sBAAuB,SAAQ,SAAS;IACnD,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,yBAAyB;IAC3C,OAAO,CAAC,OAAO,CAAM;cAEL,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAK1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAkG/B,mBAAmB;CAsDlC"}
|