@avi770/testteam 1.2.0 → 3.0.0

package/dist/agents/58-payment-flow-tester.js

@@ -0,0 +1,159 @@
+import { BaseAgent } from './base-agent';
+import { resolveEnvironment } from '../helpers/env-resolver';
+import { login } from '../helpers/navigation';
+/** Routes to check for billing/pricing pages. */
+const BILLING_ROUTES = ['/billing', '/pricing', '/subscription', '/payment', '/plans'];
+/** Selectors for Stripe checkout elements. */
+const STRIPE_SELECTORS = [
+    'iframe[src*="stripe"]',
+    '[data-stripe]',
+    '#card-element',
+    '.StripeElement',
+    'button:has-text("Subscribe")',
+    'button:has-text("Checkout")',
+    'button:has-text("Pay")',
+];
+export class PaymentFlowTesterAgent extends BaseAgent {
+    agentId = 58;
+    agentName = 'Payment Flow Tester';
+    baseUrl = '';
+    async preFlight() {
+        const { env } = await resolveEnvironment(this.config, this.phase);
+        this.baseUrl = env.baseUrl;
+    }
+    async execute() {
+        const findings = [];
+        // Check config for Stripe integration
+        const hasStripe = this.config.integrations.some(i => i.name.toLowerCase().includes('stripe'));
+        if (!hasStripe) {
+            findings.push({
+                id: `${this.agentId}-no-stripe`,
+                type: 'test-bug',
+                severity: 'low',
+                agentId: this.agentId,
+                module: 'payment-flow-tester',
+                description: 'No Stripe integration configured — payment flow test skipped',
+            });
+            return findings;
+        }
+        const rawLoginUrl = this.config.auth.loginUrl ?? '/login';
+        const loginUrl = rawLoginUrl.startsWith('http') ? rawLoginUrl : `${this.baseUrl}${rawLoginUrl}`;
+        const credentials = this.config.auth.credentials?.['admin'] ??
+            Object.values(this.config.auth.credentials ?? {})[0];
+        const { chromium } = await import('playwright');
+        let browser = null;
+        try {
+            browser = await chromium.launch({ headless: true });
+            const page = await browser.newPage();
+            if (credentials) {
+                try {
+                    await login(page, credentials, loginUrl);
+                }
+                catch {
+                    findings.push({
+                        id: `${this.agentId}-login-failed`,
+                        type: 'infra-issue',
+                        severity: 'medium',
+                        agentId: this.agentId,
+                        module: 'payment-flow-tester',
+                        description: 'Login failed — continuing anonymously',
+                    });
+                }
+            }
+            // Try billing routes
+            let billingPageFound = false;
+            for (const route of BILLING_ROUTES) {
+                const fullUrl = `${this.baseUrl}${route}`;
+                try {
+                    const response = await page.goto(fullUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 });
+                    if (response && response.ok()) {
+                        billingPageFound = true;
+                        // Check for Stripe elements
+                        const stripeFindings = await this.checkStripeElements(page, route);
+                        findings.push(...stripeFindings);
+                        break;
+                    }
+                }
+                catch {
+                    // Route not found — try next
+                }
+            }
+            if (!billingPageFound) {
+                findings.push({
+                    id: `${this.agentId}-no-billing-page`,
+                    type: 'test-bug',
+                    severity: 'low',
+                    agentId: this.agentId,
+                    module: 'payment-flow-tester',
+                    description: `Stripe configured but no billing page found at: ${BILLING_ROUTES.join(', ')}`,
+                });
+            }
+            await page.close().catch(() => undefined);
+        }
+        catch (playwrightError) {
+            findings.push({
+                id: `${this.agentId}-playwright-failure`,
+                type: 'infra-issue',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'payment-flow-tester',
+                description: `Playwright execution failed: ${playwrightError instanceof Error ? playwrightError.message.split('\n')[0] : String(playwrightError)}`,
+            });
+        }
+        finally {
+            if (browser)
+                await browser.close().catch(() => undefined);
+        }
+        return findings;
+    }
+    async checkStripeElements(page, route) {
+        const findings = [];
+        const selector = STRIPE_SELECTORS.join(', ');
+        const stripeCount = await page.locator(selector).count();
+        if (stripeCount === 0) {
+            findings.push({
+                id: `${this.agentId}-no-stripe-elements`,
+                type: 'test-bug',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'payment-flow-tester',
+                description: `Billing page ${route} found but no Stripe checkout elements detected`,
+            });
+            return findings;
+        }
+        // Check for Stripe iframe specifically
+        const iframeCount = await page.locator('iframe[src*="stripe"]').count();
+        if (iframeCount > 0) {
+            this.addEvidence({
+                type: 'log',
+                path: '',
+                description: `Stripe iframe detected on ${route}`,
+            });
+        }
+        // Try clicking checkout button
+        const checkoutBtn = page.locator('button:has-text("Subscribe"), button:has-text("Checkout"), button:has-text("Pay")');
+        if (await checkoutBtn.count() > 0) {
+            try {
+                await checkoutBtn.first().click();
+                await new Promise(resolve => setTimeout(resolve, 3_000));
+                // Check if Stripe iframe loaded after click
+                const postClickIframeCount = await page.locator('iframe[src*="stripe"]').count();
+                if (postClickIframeCount === 0) {
+                    findings.push({
+                        id: `${this.agentId}-stripe-iframe-not-loaded`,
+                        type: 'test-bug',
+                        severity: 'medium',
+                        agentId: this.agentId,
+                        module: 'payment-flow-tester',
+                        description: `Checkout button clicked on ${route} but Stripe iframe did not load`,
+                    });
+                }
+            }
+            catch {
+                // Click failure — non-critical
+            }
+        }
+        return findings;
+    }
+}
+//# sourceMappingURL=58-payment-flow-tester.js.map

package/dist/agents/58-payment-flow-tester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"58-payment-flow-tester.js","sourceRoot":"","sources":["../../agents/58-payment-flow-tester.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAE9C,iDAAiD;AACjD,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAC;AAEhG,8CAA8C;AAC9C,MAAM,gBAAgB,GAAG;IACvB,uBAAuB;IACvB,eAAe;IACf,eAAe;IACf,gBAAgB;IAChB,8BAA8B;IAC9B,6BAA6B;IAC7B,wBAAwB;CAChB,CAAC;AAEX,MAAM,OAAO,sBAAuB,SAAQ,SAAS;IAC1C,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,qBAAqB,CAAC;IACnC,OAAO,GAAG,EAAE,CAAC;IAEX,KAAK,CAAC,SAAS;QACvB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,sCAAsC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAC7C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC7C,CAAC;QAEF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,YAAY;gBAC/B,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,qBAAqB;gBAC7B,WAAW,EAAE,8DAA8D;aAC5E,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;QAChG,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAEhD,IAAI,OAAO,GAAmB,IAAI,CAAC;QAEnC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAErC,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,eAAe;wBAClC,IAAI,EAAE,aAAa;wBACnB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,qBAAqB;wBAC7B,WAAW,EAAE,uCAAuC;qBACrD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,qBAAqB;YACrB,IAAI,gBAAgB,GAAG,KAAK,CAAC;YAE7B,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;gBACnC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,KAAK,EAAE,CAAC;gBAE1C,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC9F,IAAI,QAAQ,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;wBAC9B,gBAAgB,GAAG,IAAI,CAAC;wBAExB,4BAA4B;wBAC5B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;wBACnE,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;wBACjC,MAAM;oBACR,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,6BAA6B;gBAC/B,CAAC;YACH,CAAC;YAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,kBAAkB;oBACrC,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,qBAAqB;oBAC7B,WAAW,EAAE,mDAAmD,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAC5F,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,eAAe,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB;gBACxC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,qBAAqB;gBAC7B,WAAW,EAAE,gCAAgC,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE;aACnJ,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,IAAU,EAAE,KAAa;QACzD,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;QAEzD,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB;gBACxC,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,qBAAqB;gBAC7B,WAAW,EAAE,gBAAgB,KAAK,iDAAiD;aACpF,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,uCAAuC;QACvC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,KAAK,EAAE,CAAC;QACxE,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,WAAW,CAAC;gBACf,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,EAAE;gBACR,WAAW,EAAE,6BAA6B,KAAK,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;QAED,+BAA+B;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,mFAAmF,CAAC,CAAC;QACtH,IAAI,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;gBAClC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;gBAEzD,4CAA4C;gBAC5C,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,KAAK,EAAE,CAAC;gBACjF,IAAI,oBAAoB,KAAK,CAAC,EAAE,CAAC;oBAC/B,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,2BAA2B;wBAC9C,IAAI,EAAE,UAAU;wBAChB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,qBAAqB;wBAC7B,WAAW,EAAE,8BAA8B,KAAK,iCAAiC;qBAClF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,+BAA+B;YACjC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/agents/59-ssl-tls-auditor.d.ts

@@ -0,0 +1,10 @@
+import type { Finding } from '../core/types';
+import { BaseAgent } from './base-agent';
+export declare class SslTlsAuditorAgent extends BaseAgent {
+    readonly agentId = 59;
+    readonly agentName = "SSL/TLS Auditor";
+    private baseUrl;
+    protected preFlight(): Promise<void>;
+    protected execute(): Promise<Finding[]>;
+}
+//# sourceMappingURL=59-ssl-tls-auditor.d.ts.map

package/dist/agents/59-ssl-tls-auditor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"59-ssl-tls-auditor.d.ts","sourceRoot":"","sources":["../../agents/59-ssl-tls-auditor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,qBAAa,kBAAmB,SAAQ,SAAS;IAC/C,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,qBAAqB;IACvC,OAAO,CAAC,OAAO,CAAM;cAEL,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAK1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;CA8H9C"}

package/dist/agents/59-ssl-tls-auditor.js

@@ -0,0 +1,132 @@
+import { BaseAgent } from './base-agent';
+import { resolveEnvironment } from '../helpers/env-resolver';
+export class SslTlsAuditorAgent extends BaseAgent {
+    agentId = 59;
+    agentName = 'SSL/TLS Auditor';
+    baseUrl = '';
+    async preFlight() {
+        const { env } = await resolveEnvironment(this.config, this.phase);
+        this.baseUrl = env.baseUrl;
+    }
+    async execute() {
+        const findings = [];
+        // Check HSTS header
+        try {
+            const response = await fetch(this.baseUrl, {
+                method: 'HEAD',
+                signal: AbortSignal.timeout(10_000),
+            });
+            const hsts = response.headers.get('strict-transport-security');
+            if (!hsts) {
+                findings.push({
+                    id: `${this.agentId}-no-hsts`,
+                    type: 'code-bug-security',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: 'ssl-tls-auditor',
+                    description: 'Missing Strict-Transport-Security header',
+                    suggestedFix: 'Add Strict-Transport-Security header with max-age of at least 31536000',
+                });
+            }
+            else {
+                // Check max-age value
+                const maxAgeMatch = hsts.match(/max-age=(\d+)/);
+                if (maxAgeMatch) {
+                    const maxAge = parseInt(maxAgeMatch[1], 10);
+                    if (maxAge < 31_536_000) {
+                        findings.push({
+                            id: `${this.agentId}-short-hsts`,
+                            type: 'code-bug-security',
+                            severity: 'low',
+                            agentId: this.agentId,
+                            module: 'ssl-tls-auditor',
+                            description: `HSTS max-age is ${maxAge}s (recommended: 31536000+)`,
+                        });
+                    }
+                }
+            }
+        }
+        catch (fetchError) {
+            findings.push({
+                id: `${this.agentId}-fetch-failed`,
+                type: 'infra-issue',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'ssl-tls-auditor',
+                description: `Failed to reach ${this.baseUrl}: ${fetchError instanceof Error ? fetchError.message.split('\n')[0] : String(fetchError)}`,
+            });
+        }
+        // Check certificate expiry via https module
+        if (this.baseUrl.startsWith('https://')) {
+            try {
+                const https = await import('node:https');
+                const url = new URL(this.baseUrl);
+                const certInfo = await new Promise((resolve, reject) => {
+                    const req = https.get({
+                        hostname: url.hostname,
+                        port: url.port || 443,
+                        path: '/',
+                        rejectUnauthorized: false,
+                        timeout: 10_000,
+                    }, (res) => {
+                        const socket = res.socket;
+                        const cert = socket.getPeerCertificate?.();
+                        resolve({ valid_to: cert?.valid_to, valid_from: cert?.valid_from });
+                    });
+                    req.on('error', reject);
+                    req.on('timeout', () => {
+                        req.destroy();
+                        reject(new Error('Certificate check timeout'));
+                    });
+                });
+                if (certInfo.valid_to) {
+                    const expiryDate = new Date(certInfo.valid_to);
+                    const now = new Date();
+                    const daysUntilExpiry = Math.floor((expiryDate.getTime() - now.getTime()) / (1000 * 60 * 60 * 24));
+                    if (daysUntilExpiry < 0) {
+                        findings.push({
+                            id: `${this.agentId}-cert-expired`,
+                            type: 'code-bug-security',
+                            severity: 'critical',
+                            agentId: this.agentId,
+                            module: 'ssl-tls-auditor',
+                            description: `SSL certificate expired ${Math.abs(daysUntilExpiry)} days ago`,
+                        });
+                    }
+                    else if (daysUntilExpiry < 30) {
+                        findings.push({
+                            id: `${this.agentId}-cert-expiring-soon`,
+                            type: 'code-bug-security',
+                            severity: 'high',
+                            agentId: this.agentId,
+                            module: 'ssl-tls-auditor',
+                            description: `SSL certificate expires in ${daysUntilExpiry} days`,
+                        });
+                    }
+                }
+            }
+            catch (certError) {
+                findings.push({
+                    id: `${this.agentId}-cert-check-failed`,
+                    type: 'infra-issue',
+                    severity: 'low',
+                    agentId: this.agentId,
+                    module: 'ssl-tls-auditor',
+                    description: `Certificate check failed: ${certError instanceof Error ? certError.message.split('\n')[0] : String(certError)}`,
+                });
+            }
+        }
+        else {
+            findings.push({
+                id: `${this.agentId}-no-https`,
+                type: 'code-bug-security',
+                severity: 'high',
+                agentId: this.agentId,
+                module: 'ssl-tls-auditor',
+                description: `Base URL ${this.baseUrl} does not use HTTPS`,
+            });
+        }
+        return findings;
+    }
+}
+//# sourceMappingURL=59-ssl-tls-auditor.js.map

package/dist/agents/59-ssl-tls-auditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"59-ssl-tls-auditor.js","sourceRoot":"","sources":["../../agents/59-ssl-tls-auditor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,OAAO,kBAAmB,SAAQ,SAAS;IACtC,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,iBAAiB,CAAC;IAC/B,OAAO,GAAG,EAAE,CAAC;IAEX,KAAK,CAAC,SAAS;QACvB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,oBAAoB;QACpB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;gBACzC,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YAE/D,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,UAAU;oBAC7B,IAAI,EAAE,mBAAmB;oBACzB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,iBAAiB;oBACzB,WAAW,EAAE,0CAA0C;oBACvD,YAAY,EAAE,wEAAwE;iBACvF,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,sBAAsB;gBACtB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBAChD,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5C,IAAI,MAAM,GAAG,UAAU,EAAE,CAAC;wBACxB,QAAQ,CAAC,IAAI,CAAC;4BACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,aAAa;4BAChC,IAAI,EAAE,mBAAmB;4BACzB,QAAQ,EAAE,KAAK;4BACf,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,MAAM,EAAE,iBAAiB;4BACzB,WAAW,EAAE,mBAAmB,MAAM,4BAA4B;yBACnE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,eAAe;gBAClC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,iBAAiB;gBACzB,WAAW,EAAE,mBAAmB,IAAI,CAAC,OAAO,KAAK,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;aACxI,CAAC,CAAC;QACL,CAAC;QAED,4CAA4C;QAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;gBACzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAElC,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAA6C,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACjG,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CACnB;wBACE,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,GAAG;wBACrB,IAAI,EAAE,GAAG;wBACT,kBAAkB,EAAE,KAAK;wBACzB,OAAO,EAAE,MAAM;qBAChB,EACD,CAAC,GAAG,EAAE,EAAE;wBACN,MAAM,MAAM,GAAG,GAAG,CAAC,MAAsC,CAAC;wBAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC;wBAC3C,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;oBACtE,CAAC,CACF,CAAC;oBACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACxB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;wBACrB,GAAG,CAAC,OAAO,EAAE,CAAC;wBACd,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;oBACjD,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;oBACtB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;oBAEnG,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;wBACxB,QAAQ,CAAC,IAAI,CAAC;4BACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,eAAe;4BAClC,IAAI,EAAE,mBAAmB;4BACzB,QAAQ,EAAE,UAAU;4BACpB,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,MAAM,EAAE,iBAAiB;4BACzB,WAAW,EAAE,2BAA2B,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW;yBAC7E,CAAC,CAAC;oBACL,CAAC;yBAAM,IAAI,eAAe,GAAG,EAAE,EAAE,CAAC;wBAChC,QAAQ,CAAC,IAAI,CAAC;4BACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB;4BACxC,IAAI,EAAE,mBAAmB;4BACzB,QAAQ,EAAE,MAAM;4BAChB,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,MAAM,EAAE,iBAAiB;4BACzB,WAAW,EAAE,8BAA8B,eAAe,OAAO;yBAClE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,oBAAoB;oBACvC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,iBAAiB;oBACzB,WAAW,EAAE,6BAA6B,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE;iBAC9H,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,WAAW;gBAC9B,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,iBAAiB;gBACzB,WAAW,EAAE,YAAY,IAAI,CAAC,OAAO,qBAAqB;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/agents/60-dns-cdn-tester.d.ts

@@ -0,0 +1,10 @@
+import type { Finding } from '../core/types';
+import { BaseAgent } from './base-agent';
+export declare class DnsCdnTesterAgent extends BaseAgent {
+    readonly agentId = 60;
+    readonly agentName = "DNS & CDN Tester";
+    private baseUrl;
+    protected preFlight(): Promise<void>;
+    protected execute(): Promise<Finding[]>;
+}
+//# sourceMappingURL=60-dns-cdn-tester.d.ts.map

package/dist/agents/60-dns-cdn-tester.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"60-dns-cdn-tester.d.ts","sourceRoot":"","sources":["../../agents/60-dns-cdn-tester.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAiBzC,qBAAa,iBAAkB,SAAQ,SAAS;IAC9C,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,sBAAsB;IACxC,OAAO,CAAC,OAAO,CAAM;cAEL,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAK1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;CAwF9C"}

package/dist/agents/60-dns-cdn-tester.js

@@ -0,0 +1,105 @@
+import { BaseAgent } from './base-agent';
+import { resolveEnvironment } from '../helpers/env-resolver';
+/** Headers that indicate CDN usage. */
+const CDN_HEADERS = {
+    'x-cache': 'Generic CDN',
+    'cf-ray': 'Cloudflare',
+    'x-vercel-cache': 'Vercel',
+    'x-cdn': 'Generic CDN',
+    'x-amz-cf-id': 'AWS CloudFront',
+    'x-served-by': 'Fastly/Varnish',
+    'x-azure-ref': 'Azure CDN',
+};
+/** Max acceptable response time in ms. */
+const MAX_RESPONSE_TIME_MS = 2_000;
+export class DnsCdnTesterAgent extends BaseAgent {
+    agentId = 60;
+    agentName = 'DNS & CDN Tester';
+    baseUrl = '';
+    async preFlight() {
+        const { env } = await resolveEnvironment(this.config, this.phase);
+        this.baseUrl = env.baseUrl;
+    }
+    async execute() {
+        const findings = [];
+        try {
+            const startTime = Date.now();
+            const response = await fetch(this.baseUrl, {
+                method: 'GET',
+                signal: AbortSignal.timeout(15_000),
+            });
+            const responseTime = Date.now() - startTime;
+            // Check response time
+            if (responseTime > MAX_RESPONSE_TIME_MS) {
+                findings.push({
+                    id: `${this.agentId}-slow-response`,
+                    type: 'infra-issue',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: 'dns-cdn-tester',
+                    description: `Response time ${responseTime}ms exceeds ${MAX_RESPONSE_TIME_MS}ms threshold`,
+                });
+            }
+            // Check CDN headers
+            let cdnDetected = false;
+            for (const [header, cdnName] of Object.entries(CDN_HEADERS)) {
+                const value = response.headers.get(header);
+                if (value) {
+                    cdnDetected = true;
+                    this.addEvidence({
+                        type: 'log',
+                        path: '',
+                        description: `CDN detected: ${cdnName} (header: ${header}=${value})`,
+                    });
+                }
+            }
+            if (!cdnDetected) {
+                findings.push({
+                    id: `${this.agentId}-no-cdn`,
+                    type: 'infra-issue',
+                    severity: 'low',
+                    agentId: this.agentId,
+                    module: 'dns-cdn-tester',
+                    description: 'No CDN detected — consider using a CDN for improved performance',
+                });
+            }
+            // Check cache-control header
+            const cacheControl = response.headers.get('cache-control');
+            if (!cacheControl) {
+                findings.push({
+                    id: `${this.agentId}-no-cache-control`,
+                    type: 'infra-issue',
+                    severity: 'low',
+                    agentId: this.agentId,
+                    module: 'dns-cdn-tester',
+                    description: 'Missing Cache-Control header — caching policy not defined',
+                });
+            }
+            else if (cacheControl.includes('no-store') || cacheControl.includes('no-cache')) {
+                this.addEvidence({
+                    type: 'log',
+                    path: '',
+                    description: `Cache-Control: ${cacheControl} — caching is disabled`,
+                });
+            }
+            // Log response details
+            this.addEvidence({
+                type: 'log',
+                path: '',
+                description: `Response time: ${responseTime}ms, Status: ${response.status}`,
+            });
+        }
+        catch (fetchError) {
+            findings.push({
+                id: `${this.agentId}-fetch-failed`,
+                type: 'infra-issue',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'dns-cdn-tester',
+                description: `Failed to reach ${this.baseUrl}: ${fetchError instanceof Error ? fetchError.message.split('\n')[0] : String(fetchError)}`,
+            });
+        }
+        return findings;
+    }
+}
+//# sourceMappingURL=60-dns-cdn-tester.js.map

package/dist/agents/60-dns-cdn-tester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"60-dns-cdn-tester.js","sourceRoot":"","sources":["../../agents/60-dns-cdn-tester.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,uCAAuC;AACvC,MAAM,WAAW,GAA2B;IAC1C,SAAS,EAAE,aAAa;IACxB,QAAQ,EAAE,YAAY;IACtB,gBAAgB,EAAE,QAAQ;IAC1B,OAAO,EAAE,aAAa;IACtB,aAAa,EAAE,gBAAgB;IAC/B,aAAa,EAAE,gBAAgB;IAC/B,aAAa,EAAE,WAAW;CAC3B,CAAC;AAEF,0CAA0C;AAC1C,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAEnC,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IACrC,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,kBAAkB,CAAC;IAChC,OAAO,GAAG,EAAE,CAAC;IAEX,KAAK,CAAC,SAAS;QACvB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;gBACzC,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE5C,sBAAsB;YACtB,IAAI,YAAY,GAAG,oBAAoB,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,gBAAgB;oBACnC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,gBAAgB;oBACxB,WAAW,EAAE,iBAAiB,YAAY,cAAc,oBAAoB,cAAc;iBAC3F,CAAC,CAAC;YACL,CAAC;YAED,oBAAoB;YACpB,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC3C,IAAI,KAAK,EAAE,CAAC;oBACV,WAAW,GAAG,IAAI,CAAC;oBACnB,IAAI,CAAC,WAAW,CAAC;wBACf,IAAI,EAAE,KAAK;wBACX,IAAI,EAAE,EAAE;wBACR,WAAW,EAAE,iBAAiB,OAAO,aAAa,MAAM,IAAI,KAAK,GAAG;qBACrE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,SAAS;oBAC5B,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,gBAAgB;oBACxB,WAAW,EAAE,iEAAiE;iBAC/E,CAAC,CAAC;YACL,CAAC;YAED,6BAA6B;YAC7B,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,mBAAmB;oBACtC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,gBAAgB;oBACxB,WAAW,EAAE,2DAA2D;iBACzE,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClF,IAAI,CAAC,WAAW,CAAC;oBACf,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,EAAE;oBACR,WAAW,EAAE,kBAAkB,YAAY,wBAAwB;iBACpE,CAAC,CAAC;YACL,CAAC;YAED,uBAAuB;YACvB,IAAI,CAAC,WAAW,CAAC;gBACf,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,EAAE;gBACR,WAAW,EAAE,kBAAkB,YAAY,eAAe,QAAQ,CAAC,MAAM,EAAE;aAC5E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,eAAe;gBAClC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,gBAAgB;gBACxB,WAAW,EAAE,mBAAmB,IAAI,CAAC,OAAO,KAAK,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;aACxI,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/agents/61-docker-health-checker.d.ts

@@ -0,0 +1,10 @@
+import type { Finding } from '../core/types';
+import { BaseAgent } from './base-agent';
+export declare class DockerHealthCheckerAgent extends BaseAgent {
+    readonly agentId = 61;
+    readonly agentName = "Docker Health Checker";
+    protected preFlight(): Promise<void>;
+    protected execute(): Promise<Finding[]>;
+    private findLastDirective;
+}
+//# sourceMappingURL=61-docker-health-checker.d.ts.map

package/dist/agents/61-docker-health-checker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"61-docker-health-checker.d.ts","sourceRoot":"","sources":["../../agents/61-docker-health-checker.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,qBAAa,wBAAyB,SAAQ,SAAS;IACrD,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,2BAA2B;cAE7B,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAI1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAkF7C,OAAO,CAAC,iBAAiB;CAe1B"}

package/dist/agents/61-docker-health-checker.js

@@ -0,0 +1,95 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { BaseAgent } from './base-agent';
+export class DockerHealthCheckerAgent extends BaseAgent {
+    agentId = 61;
+    agentName = 'Docker Health Checker';
+    async preFlight() {
+        // No network dependencies — file-based agent
+    }
+    async execute() {
+        const findings = [];
+        const projectRoot = this.config.projectRoot ?? process.cwd();
+        // Check Dockerfile
+        const dockerfilePath = path.join(projectRoot, 'Dockerfile');
+        const dockerfileExists = fs.existsSync(dockerfilePath);
+        if (!dockerfileExists) {
+            findings.push({
+                id: `${this.agentId}-no-dockerfile`,
+                type: 'infra-issue',
+                severity: 'low',
+                agentId: this.agentId,
+                module: 'docker-health-checker',
+                description: 'No Dockerfile found in project root',
+            });
+            return findings;
+        }
+        const dockerfileContent = fs.readFileSync(dockerfilePath, 'utf-8');
+        const lines = dockerfileContent.split('\n');
+        // Check 1: USER root at end (security risk)
+        const lastUserLine = this.findLastDirective(lines, 'USER');
+        if (lastUserLine !== null && lastUserLine.toLowerCase().includes('root')) {
+            findings.push({
+                id: `${this.agentId}-user-root`,
+                type: 'code-bug-security',
+                severity: 'high',
+                agentId: this.agentId,
+                module: 'docker-health-checker',
+                file: dockerfilePath,
+                description: 'Dockerfile runs as root user — security risk',
+                suggestedFix: 'Add a non-root USER directive at the end of the Dockerfile',
+            });
+        }
+        // Check 2: Missing HEALTHCHECK
+        const hasHealthcheck = lines.some(line => line.trim().toUpperCase().startsWith('HEALTHCHECK'));
+        if (!hasHealthcheck) {
+            findings.push({
+                id: `${this.agentId}-no-healthcheck`,
+                type: 'infra-issue',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'docker-health-checker',
+                file: dockerfilePath,
+                description: 'Dockerfile missing HEALTHCHECK instruction',
+                suggestedFix: 'Add HEALTHCHECK CMD curl -f http://localhost:PORT/health || exit 1',
+            });
+        }
+        // Check 3: Missing .dockerignore
+        const dockerignorePath = path.join(projectRoot, '.dockerignore');
+        if (!fs.existsSync(dockerignorePath)) {
+            findings.push({
+                id: `${this.agentId}-no-dockerignore`,
+                type: 'infra-issue',
+                severity: 'low',
+                agentId: this.agentId,
+                module: 'docker-health-checker',
+                description: 'Missing .dockerignore file — build context may include unnecessary files',
+                suggestedFix: 'Create .dockerignore to exclude node_modules, .git, .env, etc.',
+            });
+        }
+        // Log Dockerfile size
+        const stats = fs.statSync(dockerfilePath);
+        this.addEvidence({
+            type: 'log',
+            path: dockerfilePath,
+            description: `Dockerfile: ${lines.length} lines, ${stats.size} bytes`,
+        });
+        return findings;
+    }
+    findLastDirective(lines, directive) {
+        const upper = directive.toUpperCase();
+        for (let i = lines.length - 1; i >= 0; i--) {
+            const trimmed = lines[i].trim();
+            if (trimmed.toUpperCase().startsWith(upper)) {
+                return trimmed;
+            }
+            // Skip empty lines and comments
+            if (trimmed.length > 0 && !trimmed.startsWith('#')) {
+                // Found a non-matching, non-empty, non-comment line
+                // Keep searching
+            }
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=61-docker-health-checker.js.map

package/dist/agents/61-docker-health-checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"61-docker-health-checker.js","sourceRoot":"","sources":["../../agents/61-docker-health-checker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,OAAO,wBAAyB,SAAQ,SAAS;IAC5C,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,uBAAuB,CAAC;IAEnC,KAAK,CAAC,SAAS;QACvB,6CAA6C;IAC/C,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAE7D,mBAAmB;QACnB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC5D,MAAM,gBAAgB,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAEvD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,gBAAgB;gBACnC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,uBAAuB;gBAC/B,WAAW,EAAE,qCAAqC;aACnD,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,iBAAiB,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE5C,4CAA4C;QAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzE,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,YAAY;gBAC/B,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,uBAAuB;gBAC/B,IAAI,EAAE,cAAc;gBACpB,WAAW,EAAE,8CAA8C;gBAC3D,YAAY,EAAE,4DAA4D;aAC3E,CAAC,CAAC;QACL,CAAC;QAED,+BAA+B;QAC/B,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CACpD,CAAC;QAEF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,iBAAiB;gBACpC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,uBAAuB;gBAC/B,IAAI,EAAE,cAAc;gBACpB,WAAW,EAAE,4CAA4C;gBACzD,YAAY,EAAE,oEAAoE;aACnF,CAAC,CAAC;QACL,CAAC;QAED,iCAAiC;QACjC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QACjE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,kBAAkB;gBACrC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,uBAAuB;gBAC/B,WAAW,EAAE,0EAA0E;gBACvF,YAAY,EAAE,gEAAgE;aAC/E,CAAC,CAAC;QACL,CAAC;QAED,sBAAsB;QACtB,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC;YACf,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,eAAe,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,IAAI,QAAQ;SACtE,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,iBAAiB,CAAC,KAAe,EAAE,SAAiB;QAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACtC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,gCAAgC;YAChC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnD,oDAAoD;gBACpD,iBAAiB;YACnB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/agents/62-env-config-validator.d.ts

@@ -0,0 +1,10 @@
+import type { Finding } from '../core/types';
+import { BaseAgent } from './base-agent';
+export declare class EnvConfigValidatorAgent extends BaseAgent {
+    readonly agentId = 62;
+    readonly agentName = "Env Config Validator";
+    protected preFlight(): Promise<void>;
+    protected execute(): Promise<Finding[]>;
+    private parseEnvFile;
+}
+//# sourceMappingURL=62-env-config-validator.d.ts.map

package/dist/agents/62-env-config-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"62-env-config-validator.d.ts","sourceRoot":"","sources":["../../agents/62-env-config-validator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAsBzC,qBAAa,uBAAwB,SAAQ,SAAS;IACpD,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,0BAA0B;cAE5B,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAI1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAoG7C,OAAO,CAAC,YAAY;CAkBrB"}