@avi770/testteam 1.2.0 → 2.0.0

package/dist/agents/65-gdpr-compliance-tester.js

@@ -0,0 +1,186 @@
+import { BaseAgent } from './base-agent';
+import { resolveEnvironment } from '../helpers/env-resolver';
+import { login } from '../helpers/navigation';
+/** Keywords that indicate cookie consent banner. */
+const CONSENT_KEYWORDS = ['cookie', 'consent', 'privacy', 'gdpr', 'accept all', 'accept cookies'];
+/** Common privacy policy link selectors. */
+const PRIVACY_LINK_SELECTORS = [
+    'a:has-text("Privacy")',
+    'a:has-text("Privacy Policy")',
+    'a[href*="privacy"]',
+    'a[href*="datenschutz"]',
+];
+export class GdprComplianceTesterAgent extends BaseAgent {
+    agentId = 65;
+    agentName = 'GDPR Compliance Tester';
+    baseUrl = '';
+    async preFlight() {
+        const { env } = await resolveEnvironment(this.config, this.phase);
+        this.baseUrl = env.baseUrl;
+    }
+    async execute() {
+        const findings = [];
+        const rawLoginUrl = this.config.auth.loginUrl ?? '/login';
+        const loginUrl = rawLoginUrl.startsWith('http') ? rawLoginUrl : `${this.baseUrl}${rawLoginUrl}`;
+        const credentials = this.config.auth.credentials?.['admin'] ??
+            Object.values(this.config.auth.credentials ?? {})[0];
+        const { chromium } = await import('playwright');
+        let browser = null;
+        try {
+            browser = await chromium.launch({ headless: true });
+            // Test 1: Cookie consent banner (fresh context, no previous cookies)
+            const freshContext = await browser.newContext();
+            const freshPage = await freshContext.newPage();
+            try {
+                await freshPage.goto(this.baseUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 });
+                await new Promise(resolve => setTimeout(resolve, 2_000));
+                const consentFindings = await this.checkCookieConsent(freshPage);
+                findings.push(...consentFindings);
+            }
+            catch {
+                findings.push({
+                    id: `${this.agentId}-nav-failed`,
+                    type: 'infra-issue',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: 'gdpr-compliance-tester',
+                    description: 'Failed to navigate to base URL for GDPR testing',
+                });
+            }
+            await freshPage.close().catch(() => undefined);
+            await freshContext.close().catch(() => undefined);
+            // Test 2: Privacy policy link
+            const page = await browser.newPage();
+            try {
+                await page.goto(this.baseUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 });
+                const privacyFindings = await this.checkPrivacyPolicy(page);
+                findings.push(...privacyFindings);
+            }
+            catch {
+                // Already reported nav failure
+            }
+            // Test 3: Delete account option (requires login)
+            if (credentials) {
+                try {
+                    await login(page, credentials, loginUrl);
+                    const deleteAccountFindings = await this.checkDeleteAccount(page);
+                    findings.push(...deleteAccountFindings);
+                }
+                catch {
+                    findings.push({
+                        id: `${this.agentId}-login-failed`,
+                        type: 'infra-issue',
+                        severity: 'low',
+                        agentId: this.agentId,
+                        module: 'gdpr-compliance-tester',
+                        description: 'Login failed — cannot check delete account option',
+                    });
+                }
+            }
+            await page.close().catch(() => undefined);
+        }
+        catch (playwrightError) {
+            findings.push({
+                id: `${this.agentId}-playwright-failure`,
+                type: 'infra-issue',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'gdpr-compliance-tester',
+                description: `Playwright execution failed: ${playwrightError instanceof Error ? playwrightError.message.split('\n')[0] : String(playwrightError)}`,
+            });
+        }
+        finally {
+            if (browser)
+                await browser.close().catch(() => undefined);
+        }
+        return findings;
+    }
+    async checkCookieConsent(page) {
+        const findings = [];
+        try {
+            const bodyText = await page.evaluate(() => document.body.innerText.toLowerCase());
+            const hasConsentText = CONSENT_KEYWORDS.some(keyword => bodyText.includes(keyword));
+            if (!hasConsentText) {
+                findings.push({
+                    id: `${this.agentId}-no-cookie-consent`,
+                    type: 'code-bug-security',
+                    severity: 'high',
+                    agentId: this.agentId,
+                    module: 'gdpr-compliance-tester',
+                    description: 'No cookie consent banner detected on first visit',
+                    suggestedFix: 'Implement a cookie consent banner that appears on first visit',
+                });
+            }
+            else {
+                // Check for accept button
+                const acceptBtn = await page.locator('button:has-text("Accept"), button:has-text("Agree"), button:has-text("OK"), button:has-text("Got it")').count();
+                if (acceptBtn === 0) {
+                    findings.push({
+                        id: `${this.agentId}-no-consent-button`,
+                        type: 'code-bug-security',
+                        severity: 'medium',
+                        agentId: this.agentId,
+                        module: 'gdpr-compliance-tester',
+                        description: 'Cookie consent text found but no accept/agree button detected',
+                    });
+                }
+            }
+        }
+        catch {
+            // Evaluation failed
+        }
+        return findings;
+    }
+    async checkPrivacyPolicy(page) {
+        const findings = [];
+        const selector = PRIVACY_LINK_SELECTORS.join(', ');
+        const privacyLinkCount = await page.locator(selector).count();
+        if (privacyLinkCount === 0) {
+            findings.push({
+                id: `${this.agentId}-no-privacy-policy`,
+                type: 'code-bug-security',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'gdpr-compliance-tester',
+                description: 'No privacy policy link found on the page',
+                suggestedFix: 'Add a privacy policy link accessible from the main page',
+            });
+        }
+        return findings;
+    }
+    async checkDeleteAccount(page) {
+        const findings = [];
+        // Try settings/account pages
+        const settingsRoutes = ['/settings', '/account', '/profile', '/settings/account'];
+        for (const route of settingsRoutes) {
+            try {
+                await page.goto(`${this.baseUrl}${route}`, { waitUntil: 'domcontentloaded', timeout: 5_000 });
+                const deleteText = await page.evaluate(() => {
+                    const body = document.body.innerText.toLowerCase();
+                    return body.includes('delete account') || body.includes('remove account') || body.includes('close account');
+                });
+                if (deleteText) {
+                    this.addEvidence({
+                        type: 'log',
+                        path: '',
+                        description: `Delete account option found at ${route}`,
+                    });
+                    return findings;
+                }
+            }
+            catch {
+                // Route not found — try next
+            }
+        }
+        findings.push({
+            id: `${this.agentId}-no-delete-account`,
+            type: 'test-bug',
+            severity: 'medium',
+            agentId: this.agentId,
+            module: 'gdpr-compliance-tester',
+            description: 'No "Delete account" option found in settings — GDPR right to erasure may not be accessible',
+        });
+        return findings;
+    }
+}
+//# sourceMappingURL=65-gdpr-compliance-tester.js.map

package/dist/agents/65-gdpr-compliance-tester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"65-gdpr-compliance-tester.js","sourceRoot":"","sources":["../../agents/65-gdpr-compliance-tester.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAE9C,oDAAoD;AACpD,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,CAAU,CAAC;AAE3G,4CAA4C;AAC5C,MAAM,sBAAsB,GAAG;IAC7B,uBAAuB;IACvB,8BAA8B;IAC9B,oBAAoB;IACpB,wBAAwB;CAChB,CAAC;AAEX,MAAM,OAAO,yBAA0B,SAAQ,SAAS;IAC7C,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,wBAAwB,CAAC;IACtC,OAAO,GAAG,EAAE,CAAC;IAEX,KAAK,CAAC,SAAS;QACvB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;QAChG,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAEhD,IAAI,OAAO,GAAmB,IAAI,CAAC;QAEnC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAEpD,qEAAqE;YACrE,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;YAE/C,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBACvF,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;gBAEzD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBACjE,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,aAAa;oBAChC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,wBAAwB;oBAChC,WAAW,EAAE,iDAAiD;iBAC/D,CAAC,CAAC;YACL,CAAC;YAED,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAElD,8BAA8B;YAC9B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAErC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAElF,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAC5D,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,+BAA+B;YACjC,CAAC;YAED,iDAAiD;YACjD,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;oBAEzC,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;oBAClE,QAAQ,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,eAAe;wBAClC,IAAI,EAAE,aAAa;wBACnB,QAAQ,EAAE,KAAK;wBACf,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,wBAAwB;wBAChC,WAAW,EAAE,mDAAmD;qBACjE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,eAAe,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB;gBACxC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,wBAAwB;gBAChC,WAAW,EAAE,gCAAgC,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE;aACnJ,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,IAAU;QACzC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;YAElF,MAAM,cAAc,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAEpF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,oBAAoB;oBACvC,IAAI,EAAE,mBAAmB;oBACzB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,wBAAwB;oBAChC,WAAW,EAAE,kDAAkD;oBAC/D,YAAY,EAAE,+DAA+D;iBAC9E,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,0BAA0B;gBAC1B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uGAAuG,CAAC,CAAC,KAAK,EAAE,CAAC;gBACtJ,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;oBACpB,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,oBAAoB;wBACvC,IAAI,EAAE,mBAAmB;wBACzB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,wBAAwB;wBAChC,WAAW,EAAE,+DAA+D;qBAC7E,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,IAAU;QACzC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;QAE9D,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,oBAAoB;gBACvC,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,wBAAwB;gBAChC,WAAW,EAAE,0CAA0C;gBACvD,YAAY,EAAE,yDAAyD;aACxE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,IAAU;QACzC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,6BAA6B;QAC7B,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAElF,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBAE9F,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;oBAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;oBACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;gBAC9G,CAAC,CAAC,CAAC;gBAEH,IAAI,UAAU,EAAE,CAAC;oBACf,IAAI,CAAC,WAAW,CAAC;wBACf,IAAI,EAAE,KAAK;wBACX,IAAI,EAAE,EAAE;wBACR,WAAW,EAAE,kCAAkC,KAAK,EAAE;qBACvD,CAAC,CAAC;oBACH,OAAO,QAAQ,CAAC;gBAClB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,oBAAoB;YACvC,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,wBAAwB;YAChC,WAAW,EAAE,4FAA4F;SAC1G,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/agents/66-soc2-control-validator.d.ts

@@ -0,0 +1,14 @@
+import type { Finding } from '../core/types';
+import { BaseAgent } from './base-agent';
+export declare class Soc2ControlValidatorAgent extends BaseAgent {
+    readonly agentId = 66;
+    readonly agentName = "SOC2 Control Validator";
+    private baseUrl;
+    protected preFlight(): Promise<void>;
+    protected execute(): Promise<Finding[]>;
+    private checkAuditLogging;
+    private checkSessionTimeout;
+    private checkMfaUI;
+    private checkRoleBasedAccess;
+}
+//# sourceMappingURL=66-soc2-control-validator.d.ts.map

package/dist/agents/66-soc2-control-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"66-soc2-control-validator.d.ts","sourceRoot":"","sources":["../../agents/66-soc2-control-validator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAmBzC,qBAAa,yBAA0B,SAAQ,SAAS;IACtD,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,4BAA4B;IAC9C,OAAO,CAAC,OAAO,CAAM;cAEL,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAK1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAyB7C,OAAO,CAAC,iBAAiB;IA8CzB,OAAO,CAAC,mBAAmB;YA+Bb,UAAU;IA4CxB,OAAO,CAAC,oBAAoB;CA8B7B"}

package/dist/agents/66-soc2-control-validator.js

@@ -0,0 +1,178 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { BaseAgent } from './base-agent';
+import { resolveEnvironment } from '../helpers/env-resolver';
+/** Glob-like manual scan for .ts files under src/. */
+function findTsFiles(dir, results = []) {
+    if (!fs.existsSync(dir))
+        return results;
+    const entries = fs.readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+        const fullPath = path.join(dir, entry.name);
+        if (entry.isDirectory() && entry.name !== 'node_modules' && entry.name !== '.git') {
+            findTsFiles(fullPath, results);
+        }
+        else if (entry.isFile() && entry.name.endsWith('.ts')) {
+            results.push(fullPath);
+        }
+    }
+    return results;
+}
+export class Soc2ControlValidatorAgent extends BaseAgent {
+    agentId = 66;
+    agentName = 'SOC2 Control Validator';
+    baseUrl = '';
+    async preFlight() {
+        const { env } = await resolveEnvironment(this.config, this.phase);
+        this.baseUrl = env.baseUrl;
+    }
+    async execute() {
+        const findings = [];
+        const projectRoot = this.config.projectRoot ?? process.cwd();
+        const srcDir = path.join(projectRoot, 'src');
+        // Check 1: Audit logging evidence
+        const auditFindings = this.checkAuditLogging(srcDir);
+        findings.push(...auditFindings);
+        // Check 2: Session timeout
+        const sessionFindings = this.checkSessionTimeout(srcDir);
+        findings.push(...sessionFindings);
+        // Check 3: MFA UI
+        const mfaFindings = await this.checkMfaUI();
+        findings.push(...mfaFindings);
+        // Check 4: Role-based access
+        const rbacFindings = this.checkRoleBasedAccess(srcDir);
+        findings.push(...rbacFindings);
+        return findings;
+    }
+    checkAuditLogging(srcDir) {
+        const findings = [];
+        if (!fs.existsSync(srcDir)) {
+            findings.push({
+                id: `${this.agentId}-no-src`,
+                type: 'infra-issue',
+                severity: 'low',
+                agentId: this.agentId,
+                module: 'soc2-control-validator',
+                description: 'No src/ directory found — cannot check for audit logging',
+            });
+            return findings;
+        }
+        const tsFiles = findTsFiles(srcDir);
+        let hasAuditLogging = false;
+        for (const filePath of tsFiles) {
+            const content = fs.readFileSync(filePath, 'utf-8');
+            if (/audit/i.test(content) && (/log/i.test(content) || /trail/i.test(content) || /event/i.test(content))) {
+                hasAuditLogging = true;
+                this.addEvidence({
+                    type: 'log',
+                    path: filePath,
+                    description: 'Audit logging evidence found',
+                });
+                break;
+            }
+        }
+        if (!hasAuditLogging) {
+            findings.push({
+                id: `${this.agentId}-no-audit-logging`,
+                type: 'code-bug-security',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'soc2-control-validator',
+                description: 'No audit logging evidence found in source code',
+                suggestedFix: 'Implement audit logging for security-relevant events',
+            });
+        }
+        return findings;
+    }
+    checkSessionTimeout(srcDir) {
+        const findings = [];
+        if (!fs.existsSync(srcDir))
+            return findings;
+        const tsFiles = findTsFiles(srcDir);
+        let hasSessionTimeout = false;
+        for (const filePath of tsFiles) {
+            const content = fs.readFileSync(filePath, 'utf-8');
+            if (/sessionTimeout/i.test(content) || /session.*timeout/i.test(content) || /setTimeout.*session/i.test(content) || /idle.*timeout/i.test(content)) {
+                hasSessionTimeout = true;
+                break;
+            }
+        }
+        if (!hasSessionTimeout) {
+            findings.push({
+                id: `${this.agentId}-no-session-timeout`,
+                type: 'code-bug-security',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'soc2-control-validator',
+                description: 'No session timeout configuration found in source code',
+                suggestedFix: 'Implement session timeout to auto-logout inactive users',
+            });
+        }
+        return findings;
+    }
+    async checkMfaUI() {
+        const findings = [];
+        try {
+            const { chromium } = await import('playwright');
+            let browser = null;
+            try {
+                browser = await chromium.launch({ headless: true });
+                const page = await browser.newPage();
+                await page.goto(this.baseUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 });
+                const bodyText = await page.evaluate(() => document.body.innerText.toLowerCase());
+                const hasMfaUI = bodyText.includes('two-factor') ||
+                    bodyText.includes('2fa') ||
+                    bodyText.includes('mfa') ||
+                    bodyText.includes('multi-factor') ||
+                    bodyText.includes('authenticator');
+                if (!hasMfaUI) {
+                    findings.push({
+                        id: `${this.agentId}-no-mfa`,
+                        type: 'code-bug-security',
+                        severity: 'medium',
+                        agentId: this.agentId,
+                        module: 'soc2-control-validator',
+                        description: 'No MFA/2FA UI elements detected',
+                        suggestedFix: 'Implement multi-factor authentication for SOC2 compliance',
+                    });
+                }
+                await page.close().catch(() => undefined);
+            }
+            finally {
+                if (browser)
+                    await browser.close().catch(() => undefined);
+            }
+        }
+        catch {
+            // Playwright not available — skip MFA UI check
+        }
+        return findings;
+    }
+    checkRoleBasedAccess(srcDir) {
+        const findings = [];
+        if (!fs.existsSync(srcDir))
+            return findings;
+        const tsFiles = findTsFiles(srcDir);
+        let hasRbac = false;
+        for (const filePath of tsFiles) {
+            const content = fs.readFileSync(filePath, 'utf-8');
+            if (/role/i.test(content) && (/guard/i.test(content) || /permission/i.test(content) || /authorize/i.test(content) || /access/i.test(content))) {
+                hasRbac = true;
+                break;
+            }
+        }
+        if (!hasRbac) {
+            findings.push({
+                id: `${this.agentId}-no-rbac`,
+                type: 'code-bug-security',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'soc2-control-validator',
+                description: 'No role-based access control evidence found in source code',
+                suggestedFix: 'Implement RBAC with role checks on protected resources',
+            });
+        }
+        return findings;
+    }
+}
+//# sourceMappingURL=66-soc2-control-validator.js.map

package/dist/agents/66-soc2-control-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"66-soc2-control-validator.js","sourceRoot":"","sources":["../../agents/66-soc2-control-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,sDAAsD;AACtD,SAAS,WAAW,CAAC,GAAW,EAAE,UAAoB,EAAE;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAExC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAClF,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjC,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,yBAA0B,SAAQ,SAAS;IAC7C,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,wBAAwB,CAAC;IACtC,OAAO,GAAG,EAAE,CAAC;IAEX,KAAK,CAAC,SAAS;QACvB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAE7C,kCAAkC;QAClC,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;QAEhC,2BAA2B;QAC3B,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;QAElC,kBAAkB;QAClB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;QAE9B,6BAA6B;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAE/B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,iBAAiB,CAAC,MAAc;QACtC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,SAAS;gBAC5B,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,wBAAwB;gBAChC,WAAW,EAAE,0DAA0D;aACxE,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,eAAe,GAAG,KAAK,CAAC;QAE5B,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACzG,eAAe,GAAG,IAAI,CAAC;gBACvB,IAAI,CAAC,WAAW,CAAC;oBACf,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,8BAA8B;iBAC5C,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,mBAAmB;gBACtC,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,wBAAwB;gBAChC,WAAW,EAAE,gDAAgD;gBAC7D,YAAY,EAAE,sDAAsD;aACrE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,mBAAmB,CAAC,MAAc;QACxC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,QAAQ,CAAC;QAE5C,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAE9B,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnJ,iBAAiB,GAAG,IAAI,CAAC;gBACzB,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB;gBACxC,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,wBAAwB;gBAChC,WAAW,EAAE,uDAAuD;gBACpE,YAAY,EAAE,yDAAyD;aACxE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YAChD,IAAI,OAAO,GAAmB,IAAI,CAAC;YAEnC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;gBAErC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAElF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;gBAElF,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;oBAC9C,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACxB,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACxB,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;oBACjC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;gBAErC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,SAAS;wBAC5B,IAAI,EAAE,mBAAmB;wBACzB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,wBAAwB;wBAChC,WAAW,EAAE,iCAAiC;wBAC9C,YAAY,EAAE,2DAA2D;qBAC1E,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5C,CAAC;oBAAS,CAAC;gBACT,IAAI,OAAO;oBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,oBAAoB,CAAC,MAAc;QACzC,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,QAAQ,CAAC;QAE5C,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC9I,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,UAAU;gBAC7B,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,wBAAwB;gBAChC,WAAW,EAAE,4DAA4D;gBACzE,YAAY,EAAE,wDAAwD;aACvE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/agents/67-wcag-aaa-tester.d.ts

@@ -0,0 +1,13 @@
+import type { Finding } from '../core/types';
+import { BaseAgent } from './base-agent';
+export declare class WcagAaaTesterAgent extends BaseAgent {
+    readonly agentId = 67;
+    readonly agentName = "WCAG AAA Tester";
+    private baseUrl;
+    protected preFlight(): Promise<void>;
+    protected execute(): Promise<Finding[]>;
+    private checkContrast;
+    private checkTextResize;
+    private checkKeyboardNavigation;
+}
+//# sourceMappingURL=67-wcag-aaa-tester.d.ts.map

package/dist/agents/67-wcag-aaa-tester.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"67-wcag-aaa-tester.d.ts","sourceRoot":"","sources":["../../agents/67-wcag-aaa-tester.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAIzC,qBAAa,kBAAmB,SAAQ,SAAS;IAC/C,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,qBAAqB;IACvC,OAAO,CAAC,OAAO,CAAM;cAEL,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAS1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAyE/B,aAAa;YA0Db,eAAe;YAkCf,uBAAuB;CAuDtC"}

package/dist/agents/67-wcag-aaa-tester.js

@@ -0,0 +1,207 @@
+import { BaseAgent } from './base-agent';
+import { resolveEnvironment } from '../helpers/env-resolver';
+import { login } from '../helpers/navigation';
+export class WcagAaaTesterAgent extends BaseAgent {
+    agentId = 67;
+    agentName = 'WCAG AAA Tester';
+    baseUrl = '';
+    async preFlight() {
+        if (!this.config.modules || this.config.modules.length === 0) {
+            throw new Error('WcagAaaTesterAgent requires at least one module in config.modules');
+        }
+        const { env } = await resolveEnvironment(this.config, this.phase);
+        this.baseUrl = env.baseUrl;
+    }
+    async execute() {
+        const findings = [];
+        const rawLoginUrl = this.config.auth.loginUrl ?? '/login';
+        const loginUrl = rawLoginUrl.startsWith('http') ? rawLoginUrl : `${this.baseUrl}${rawLoginUrl}`;
+        const credentials = this.config.auth.credentials?.['admin'] ??
+            Object.values(this.config.auth.credentials ?? {})[0];
+        const { chromium } = await import('playwright');
+        let browser = null;
+        try {
+            browser = await chromium.launch({ headless: true });
+            const page = await browser.newPage();
+            if (credentials) {
+                try {
+                    await login(page, credentials, loginUrl);
+                }
+                catch {
+                    findings.push({
+                        id: `${this.agentId}-login-failed`,
+                        type: 'infra-issue',
+                        severity: 'medium',
+                        agentId: this.agentId,
+                        module: 'wcag-aaa-tester',
+                        description: 'Login failed — continuing anonymously',
+                    });
+                }
+            }
+            for (const mod of this.config.modules) {
+                const fullUrl = mod.route.startsWith('http')
+                    ? mod.route
+                    : `${this.baseUrl}${mod.route}`;
+                try {
+                    await page.goto(fullUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 });
+                }
+                catch {
+                    continue;
+                }
+                // Test 1: Text contrast ratio >= 7:1 (AAA)
+                const contrastFindings = await this.checkContrast(page, mod.id);
+                findings.push(...contrastFindings);
+                // Test 2: Text resizable to 200%
+                const resizeFindings = await this.checkTextResize(page, mod.id);
+                findings.push(...resizeFindings);
+                // Test 3: Keyboard navigation
+                const keyboardFindings = await this.checkKeyboardNavigation(page, mod.id);
+                findings.push(...keyboardFindings);
+            }
+            await page.close().catch(() => undefined);
+        }
+        catch (playwrightError) {
+            findings.push({
+                id: `${this.agentId}-playwright-failure`,
+                type: 'infra-issue',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'wcag-aaa-tester',
+                description: `Playwright execution failed: ${playwrightError instanceof Error ? playwrightError.message.split('\n')[0] : String(playwrightError)}`,
+            });
+        }
+        finally {
+            if (browser)
+                await browser.close().catch(() => undefined);
+        }
+        return findings;
+    }
+    async checkContrast(page, moduleId) {
+        const findings = [];
+        try {
+            const lowContrastCount = await page.evaluate(() => {
+                function getLuminance(r, g, b) {
+                    const sRGB = [r, g, b].map(c => {
+                        const s = c / 255;
+                        return s <= 0.03928 ? s / 12.92 : Math.pow((s + 0.055) / 1.055, 2.4);
+                    });
+                    return 0.2126 * sRGB[0] + 0.7152 * sRGB[1] + 0.0722 * sRGB[2];
+                }
+                function parseColor(color) {
+                    const match = color.match(/rgba?\((\d+),\s*(\d+),\s*(\d+)/);
+                    if (match)
+                        return [parseInt(match[1]), parseInt(match[2]), parseInt(match[3])];
+                    return null;
+                }
+                const elements = document.querySelectorAll('p, span, a, h1, h2, h3, h4, h5, h6, li, td, th, label');
+                let lowContrast = 0;
+                for (const el of Array.from(elements).slice(0, 50)) {
+                    const style = window.getComputedStyle(el);
+                    const fg = parseColor(style.color);
+                    const bg = parseColor(style.backgroundColor);
+                    if (fg && bg) {
+                        const fgLum = getLuminance(...fg);
+                        const bgLum = getLuminance(...bg);
+                        const ratio = (Math.max(fgLum, bgLum) + 0.05) / (Math.min(fgLum, bgLum) + 0.05);
+                        if (ratio < 7) {
+                            lowContrast++;
+                        }
+                    }
+                }
+                return lowContrast;
+            });
+            if (lowContrastCount > 0) {
+                findings.push({
+                    id: `${this.agentId}-low-contrast-${moduleId}`,
+                    type: 'test-bug',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: moduleId,
+                    description: `${lowContrastCount} element(s) have contrast ratio below 7:1 (WCAG AAA requirement)`,
+                });
+            }
+        }
+        catch {
+            // Contrast check failed — non-critical
+        }
+        return findings;
+    }
+    async checkTextResize(page, moduleId) {
+        const findings = [];
+        try {
+            const hasOverflow = await page.evaluate(() => {
+                document.documentElement.style.fontSize = '200%';
+                // Wait a tick for reflow
+                const body = document.body;
+                const hasHorizontalOverflow = body.scrollWidth > window.innerWidth;
+                // Reset
+                document.documentElement.style.fontSize = '';
+                return hasHorizontalOverflow;
+            });
+            if (hasOverflow) {
+                findings.push({
+                    id: `${this.agentId}-text-resize-overflow-${moduleId}`,
+                    type: 'test-bug',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: moduleId,
+                    description: `Content overflows horizontally when text is resized to 200% in ${moduleId}`,
+                });
+            }
+        }
+        catch {
+            // Resize check failed — non-critical
+        }
+        return findings;
+    }
+    async checkKeyboardNavigation(page, moduleId) {
+        const findings = [];
+        try {
+            // Tab through elements and check focus visibility
+            const focusableCount = await page.evaluate(() => {
+                const focusable = document.querySelectorAll('a, button, input, select, textarea, [tabindex]');
+                return focusable.length;
+            });
+            if (focusableCount === 0) {
+                findings.push({
+                    id: `${this.agentId}-no-focusable-${moduleId}`,
+                    type: 'test-bug',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: moduleId,
+                    description: `No focusable elements found in ${moduleId} — keyboard navigation may not work`,
+                });
+                return findings;
+            }
+            // Press Tab a few times and check if focus is visible
+            for (let i = 0; i < Math.min(5, focusableCount); i++) {
+                await page.keyboard.press('Tab');
+            }
+            const hasFocusIndicator = await page.evaluate(() => {
+                const focused = document.activeElement;
+                if (!focused || focused === document.body)
+                    return false;
+                const style = window.getComputedStyle(focused);
+                const hasOutline = style.outlineStyle !== 'none' && style.outlineWidth !== '0px';
+                const hasBoxShadow = style.boxShadow !== 'none';
+                const hasBorder = style.borderColor !== style.backgroundColor;
+                return hasOutline || hasBoxShadow || hasBorder;
+            });
+            if (!hasFocusIndicator) {
+                findings.push({
+                    id: `${this.agentId}-no-focus-indicator-${moduleId}`,
+                    type: 'test-bug',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: moduleId,
+                    description: `Focus indicator not visible during keyboard navigation in ${moduleId}`,
+                });
+            }
+        }
+        catch {
+            // Keyboard nav check failed — non-critical
+        }
+        return findings;
+    }
+}
+//# sourceMappingURL=67-wcag-aaa-tester.js.map

package/dist/agents/67-wcag-aaa-tester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"67-wcag-aaa-tester.js","sourceRoot":"","sources":["../../agents/67-wcag-aaa-tester.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAE9C,MAAM,OAAO,kBAAmB,SAAQ,SAAS;IACtC,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,iBAAiB,CAAC;IAC/B,OAAO,GAAG,EAAE,CAAC;IAEX,KAAK,CAAC,SAAS;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;QAChG,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAEhD,IAAI,OAAO,GAAmB,IAAI,CAAC;QAEnC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAErC,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,eAAe;wBAClC,IAAI,EAAE,aAAa;wBACnB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,iBAAiB;wBACzB,WAAW,EAAE,uCAAuC;qBACrD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACtC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC1C,CAAC,CAAC,GAAG,CAAC,KAAK;oBACX,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;gBAElC,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC/E,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBAED,2CAA2C;gBAC3C,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;gBAEnC,iCAAiC;gBACjC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;gBAEjC,8BAA8B;gBAC9B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1E,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;YACrC,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,eAAe,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB;gBACxC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,iBAAiB;gBACzB,WAAW,EAAE,gCAAgC,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE;aACnJ,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAU,EAAE,QAAgB;QACtD,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;gBAChD,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS,EAAE,CAAS;oBACnD,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;wBAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;wBAClB,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC;oBACvE,CAAC,CAAC,CAAC;oBACH,OAAO,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChE,CAAC;gBAED,SAAS,UAAU,CAAC,KAAa;oBAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;oBAC5D,IAAI,KAAK;wBAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC/E,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB,CAAC,uDAAuD,CAAC,CAAC;gBACpG,IAAI,WAAW,GAAG,CAAC,CAAC;gBAEpB,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;oBACnD,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;oBAC1C,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACnC,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;oBAE7C,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;wBACb,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;wBAClC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;wBAClC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;wBAEhF,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;4BACd,WAAW,EAAE,CAAC;wBAChB,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO,WAAW,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,iBAAiB,QAAQ,EAAE;oBAC9C,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,GAAG,gBAAgB,kEAAkE;iBACnG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAAU,EAAE,QAAgB;QACxD,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;gBAC3C,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC;gBAEjD,yBAAyB;gBACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAC3B,MAAM,qBAAqB,GAAG,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC;gBAEnE,QAAQ;gBACR,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;gBAE7C,OAAO,qBAAqB,CAAC;YAC/B,CAAC,CAAC,CAAC;YAEH,IAAI,WAAW,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,yBAAyB,QAAQ,EAAE;oBACtD,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,kEAAkE,QAAQ,EAAE;iBAC1F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,IAAU,EAAE,QAAgB;QAChE,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,IAAI,CAAC;YACH,kDAAkD;YAClD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;gBAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,gBAAgB,CAAC,gDAAgD,CAAC,CAAC;gBAC9F,OAAO,SAAS,CAAC,MAAM,CAAC;YAC1B,CAAC,CAAC,CAAC;YAEH,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,iBAAiB,QAAQ,EAAE;oBAC9C,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,kCAAkC,QAAQ,qCAAqC;iBAC7F,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,sDAAsD;YACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrD,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;gBACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC;gBACvC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,CAAC,IAAI;oBAAE,OAAO,KAAK,CAAC;gBAExD,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,KAAK,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC;gBACjF,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC;gBAChD,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,eAAe,CAAC;gBAE9D,OAAO,UAAU,IAAI,YAAY,IAAI,SAAS,CAAC;YACjD,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,uBAAuB,QAAQ,EAAE;oBACpD,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,6DAA6D,QAAQ,EAAE;iBACrF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}