@avi770/testteam 1.2.0

package/dist/agents/20-workflow-completion-tester.js

@@ -0,0 +1,159 @@
+import { BaseAgent } from './base-agent';
+import { login, waitForSectionLoad } from '../helpers/navigation';
+import { captureScreenshot } from '../helpers/screenshot';
+import { fillForm } from '../helpers/form-filler';
+import { resolveEnvironment } from '../helpers/env-resolver';
+export class WorkflowCompletionTesterAgent extends BaseAgent {
+    agentId = 20;
+    agentName = 'Workflow Completion Tester';
+    baseUrl = '';
+    async preFlight() {
+        if (!this.config.workflows || this.config.workflows.length === 0) {
+            throw new Error('WorkflowCompletionTesterAgent requires at least one workflow in config.workflows');
+        }
+        const { env } = await resolveEnvironment(this.config, this.phase);
+        this.baseUrl = env.baseUrl;
+    }
+    async execute() {
+        const findings = [];
+        const rawLoginUrl = this.config.auth.loginUrl ?? '/login';
+        const loginUrl = rawLoginUrl.startsWith('http') ? rawLoginUrl : `${this.baseUrl}${rawLoginUrl}`;
+        const credentials = this.config.auth.credentials?.['admin'] ??
+            Object.values(this.config.auth.credentials ?? {})[0];
+        if (!credentials) {
+            findings.push({
+                id: `${this.agentId}-no-credentials`,
+                type: 'infra-issue',
+                severity: 'critical',
+                agentId: this.agentId,
+                module: 'workflow-completion-tester',
+                description: 'No credentials configured — cannot log in to run workflow tests',
+            });
+            return findings;
+        }
+        const { chromium } = await import('playwright');
+        let browser = null;
+        let page = null;
+        try {
+            browser = await chromium.launch({ headless: true });
+            page = await browser.newPage();
+            try {
+                await login(page, credentials, loginUrl);
+            }
+            catch (loginError) {
+                findings.push({
+                    id: `${this.agentId}-login-failed`,
+                    type: 'infra-issue',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: 'workflow-completion-tester',
+                    description: `Login failed — skipping workflow tests: ${loginError instanceof Error ? loginError.message.split('\n')[0] : String(loginError)}`,
+                });
+                return findings;
+            }
+            for (const workflow of this.config.workflows) {
+                const workflowFindings = await this.runWorkflow(page, workflow.name, workflow.steps);
+                findings.push(...workflowFindings);
+            }
+        }
+        catch (playwrightError) {
+            findings.push({
+                id: `${this.agentId}-playwright-failure`,
+                type: 'infra-issue',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'workflow-completion-tester',
+                description: `Workflow Playwright execution failed: ${playwrightError instanceof Error ? playwrightError.message.split('\n')[0] : String(playwrightError)}`,
+            });
+        }
+        finally {
+            if (page)
+                await page.close().catch(() => undefined);
+            if (browser)
+                await browser.close().catch(() => undefined);
+        }
+        return findings;
+    }
+    async runWorkflow(page, workflowName, steps) {
+        const findings = [];
+        for (let stepIndex = 0; stepIndex < steps.length; stepIndex++) {
+            const step = steps[stepIndex];
+            try {
+                await this.executeStep(page, step);
+            }
+            catch (err) {
+                const description = err instanceof Error ? err.message : String(err);
+                const screenshotPath = await captureScreenshot(page, `workflow-${workflowName.replace(/\s+/g, '-')}-step${stepIndex}-failure`, this.runDir).catch(() => '');
+                if (screenshotPath) {
+                    this.addEvidence({
+                        type: 'screenshot',
+                        path: screenshotPath,
+                        description: `[Workflow "${workflowName}"] Failure screenshot at step ${stepIndex} (${step.action}: ${step.target})`,
+                    });
+                }
+                findings.push({
+                    id: `${this.agentId}-workflow-${workflowName.replace(/\s+/g, '-')}-step${stepIndex}`,
+                    type: 'test-bug',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: `workflow:${workflowName}`,
+                    description: `Workflow "${workflowName}" failed at step ${stepIndex} (${step.action}: ${step.target}): ${description}`,
+                    screenshot: screenshotPath || undefined,
+                });
+                // Stop processing this workflow on failure
+                break;
+            }
+            // Screenshot evidence at each step
+            const screenshotPath = await captureScreenshot(page, `workflow-${workflowName.replace(/\s+/g, '-')}-step${stepIndex}`, this.runDir).catch(() => '');
+            if (screenshotPath) {
+                this.addEvidence({
+                    type: 'screenshot',
+                    path: screenshotPath,
+                    description: `[Workflow "${workflowName}"] Step ${stepIndex} completed (${step.action}: ${step.target})`,
+                });
+            }
+        }
+        return findings;
+    }
+    async executeStep(page, step) {
+        switch (step.action) {
+            case 'navigate': {
+                const url = step.target.startsWith('http') ? step.target : `${this.baseUrl}${step.target}`;
+                await page.goto(url);
+                await waitForSectionLoad(page);
+                break;
+            }
+            case 'click': {
+                await page.click(step.target);
+                if (step.verify) {
+                    await page.waitForSelector(step.verify, { timeout: step.timeout ?? 5_000 });
+                }
+                break;
+            }
+            case 'fill-form': {
+                await fillForm(page, step.target, step.data ? { data: step.data } : undefined);
+                break;
+            }
+            case 'wait': {
+                await page.waitForSelector(step.target, { timeout: step.timeout ?? 5_000 });
+                break;
+            }
+            case 'verify': {
+                const element = await page.waitForSelector(step.target, { timeout: step.timeout ?? 5_000 });
+                if (step.contains !== undefined) {
+                    const text = await element.textContent();
+                    if (!text?.includes(step.contains)) {
+                        throw new Error(`Element "${step.target}" does not contain expected text "${step.contains}" — found: "${text ?? ''}"`);
+                    }
+                }
+                break;
+            }
+            default: {
+                // TypeScript exhaustiveness guard
+                const _exhaustive = step.action;
+                throw new Error(`Unknown workflow step action: ${String(_exhaustive)}`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=20-workflow-completion-tester.js.map

package/dist/agents/20-workflow-completion-tester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"20-workflow-completion-tester.js","sourceRoot":"","sources":["../../agents/20-workflow-completion-tester.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAkB,MAAM,yBAAyB,CAAC;AAE7E,MAAM,OAAO,6BAA8B,SAAQ,SAAS;IACjD,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,4BAA4B,CAAC;IAC1C,OAAO,GAAG,EAAE,CAAC;IAEX,KAAK,CAAC,SAAS;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;QAChG,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,iBAAiB;gBACpC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,4BAA4B;gBACpC,WAAW,EAAE,iEAAiE;aAC/E,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAEhD,IAAI,OAAO,GAAmB,IAAI,CAAC;QACnC,IAAI,IAAI,GAAgB,IAAI,CAAC;QAE7B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAE/B,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,eAAe;oBAClC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,4BAA4B;oBACpC,WAAW,EAAE,2CAA2C,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;iBAC/I,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC7C,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACrF,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAAC,OAAO,eAAe,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB;gBACxC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,4BAA4B;gBACpC,WAAW,EAAE,yCAAyC,eAAe,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE;aAC5J,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI;gBAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,IAAU,EACV,YAAoB,EACpB,KAAoD;QAEpD,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;YAE9B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,WAAW,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAErE,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAC5C,IAAI,EACJ,YAAY,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,SAAS,UAAU,EACxE,IAAI,CAAC,MAAM,CACZ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAElB,IAAI,cAAc,EAAE,CAAC;oBACnB,IAAI,CAAC,WAAW,CAAC;wBACf,IAAI,EAAE,YAAY;wBAClB,IAAI,EAAE,cAAc;wBACpB,WAAW,EAAE,cAAc,YAAY,iCAAiC,SAAS,KAAK,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG;qBACrH,CAAC,CAAC;gBACL,CAAC;gBAED,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,aAAa,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,SAAS,EAAE;oBACpF,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,YAAY,YAAY,EAAE;oBAClC,WAAW,EAAE,aAAa,YAAY,oBAAoB,SAAS,KAAK,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,MAAM,WAAW,EAAE;oBACtH,UAAU,EAAE,cAAc,IAAI,SAAS;iBACxC,CAAC,CAAC;gBAEH,2CAA2C;gBAC3C,MAAM;YACR,CAAC;YAED,mCAAmC;YACnC,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAC5C,IAAI,EACJ,YAAY,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,SAAS,EAAE,EAChE,IAAI,CAAC,MAAM,CACZ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAElB,IAAI,cAAc,EAAE,CAAC;gBACnB,IAAI,CAAC,WAAW,CAAC;oBACf,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,cAAc;oBACpB,WAAW,EAAE,cAAc,YAAY,WAAW,SAAS,eAAe,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG;iBACzG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,IAAU,EACV,IAA2D;QAE3D,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC3F,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrB,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAC/B,MAAM;YACR,CAAC;YAED,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC9B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChB,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;gBAC9E,CAAC;gBACD,MAAM;YACR,CAAC;YAED,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC/E,MAAM;YACR,CAAC;YAED,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;gBAC5E,MAAM;YACR,CAAC;YAED,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;gBAC5F,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAChC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;oBACzC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACnC,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,CAAC,MAAM,qCAAqC,IAAI,CAAC,QAAQ,eAAe,IAAI,IAAI,EAAE,GAAG,CACtG,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,CAAC;YAED,OAAO,CAAC,CAAC,CAAC;gBACR,kCAAkC;gBAClC,MAAM,WAAW,GAAU,IAAI,CAAC,MAAM,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/agents/21-state-session-tester.d.ts

@@ -0,0 +1,10 @@
+import type { Finding } from '../core/types';
+import { BaseAgent } from './base-agent';
+export declare class StateSessionTesterAgent extends BaseAgent {
+    readonly agentId = 21;
+    readonly agentName = "State & Session Tester";
+    private baseUrl;
+    protected preFlight(): Promise<void>;
+    protected execute(): Promise<Finding[]>;
+}
+//# sourceMappingURL=21-state-session-tester.d.ts.map

package/dist/agents/21-state-session-tester.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"21-state-session-tester.d.ts","sourceRoot":"","sources":["../../agents/21-state-session-tester.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,qBAAa,uBAAwB,SAAQ,SAAS;IACpD,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,4BAA4B;IAC9C,OAAO,CAAC,OAAO,CAAM;cAEL,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAK1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;CAsP9C"}

package/dist/agents/21-state-session-tester.js

@@ -0,0 +1,233 @@
+import { BaseAgent } from './base-agent';
+import { resolveEnvironment } from '../helpers/env-resolver';
+export class StateSessionTesterAgent extends BaseAgent {
+    agentId = 21;
+    agentName = 'State & Session Tester';
+    baseUrl = '';
+    async preFlight() {
+        const { env } = await resolveEnvironment(this.config, this.phase);
+        this.baseUrl = env.baseUrl;
+    }
+    async execute() {
+        const findings = [];
+        const rawLoginUrl = this.config.auth.loginUrl ?? '/login';
+        const loginUrl = rawLoginUrl.startsWith('http') ? rawLoginUrl : `${this.baseUrl}${rawLoginUrl}`;
+        const credentials = this.config.auth.credentials?.['admin'] ??
+            Object.values(this.config.auth.credentials ?? {})[0];
+        if (!credentials) {
+            findings.push({
+                id: `${this.agentId}-no-credentials`,
+                type: 'infra-issue',
+                severity: 'critical',
+                agentId: this.agentId,
+                module: 'state-session',
+                description: 'No credentials configured — cannot run state/session tests',
+            });
+            return findings;
+        }
+        if (this.config.modules.length === 0) {
+            findings.push({
+                id: `${this.agentId}-no-modules`,
+                type: 'infra-issue',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'state-session',
+                description: 'No modules configured — skipping state/session tests',
+            });
+            return findings;
+        }
+        const { chromium } = await import('playwright');
+        // -----------------------------------------------------------------------
+        // Scenario 1: Deep link — open module URL directly in a fresh context
+        // -----------------------------------------------------------------------
+        {
+            let browser = null;
+            let context = null;
+            let page = null;
+            try {
+                browser = await chromium.launch({ headless: true });
+                context = await browser.newContext();
+                page = await context.newPage();
+                const targetModule = this.config.modules[0];
+                const deepLinkUrl = `${this.baseUrl}${targetModule.route}`;
+                // Navigate directly to a deep link without prior login
+                await page.goto(deepLinkUrl, { waitUntil: 'networkidle', timeout: 20_000 });
+                // After potential login redirect and re-authentication, check we eventually load the module
+                const finalUrl = page.url();
+                const isOnLogin = finalUrl.includes('/login') ||
+                    finalUrl.includes('/auth') ||
+                    finalUrl.includes('/signin');
+                if (!isOnLogin) {
+                    // We either loaded the module or landed somewhere unexpected without login
+                    const pageContent = await page.content();
+                    const moduleLoaded = pageContent.includes(targetModule.id) ||
+                        pageContent.includes(targetModule.route.replace('/', ''));
+                    if (!moduleLoaded) {
+                        findings.push({
+                            id: `${this.agentId}-deep-link-${targetModule.id}`,
+                            type: 'code-bug-logic',
+                            severity: 'medium',
+                            agentId: this.agentId,
+                            module: targetModule.id,
+                            description: `Deep link scenario: navigating directly to "${deepLinkUrl}" did not load the expected module ` +
+                                `or redirect to login. Final URL: ${finalUrl}`,
+                            suggestedFix: 'Ensure unauthenticated deep links redirect to login then back to the original route.',
+                        });
+                    }
+                }
+                // Redirect to login on direct deep link is the correct behaviour — no finding
+            }
+            catch (error) {
+                findings.push({
+                    id: `${this.agentId}-deep-link-error`,
+                    type: 'infra-issue',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: this.config.modules[0]?.id ?? 'unknown',
+                    description: `Deep link scenario failed: ${error instanceof Error ? error.message : String(error)}`,
+                });
+            }
+            finally {
+                if (page)
+                    await page.close().catch(() => undefined);
+                if (context)
+                    await context.close().catch(() => undefined);
+                if (browser)
+                    await browser.close().catch(() => undefined);
+            }
+        }
+        // -----------------------------------------------------------------------
+        // Scenario 2: Refresh persistence — navigate to a module, reload, verify
+        // -----------------------------------------------------------------------
+        {
+            let browser = null;
+            let context = null;
+            let page = null;
+            try {
+                browser = await chromium.launch({ headless: true });
+                context = await browser.newContext();
+                page = await context.newPage();
+                // Login first
+                await page.goto(loginUrl, { waitUntil: 'networkidle', timeout: 20_000 });
+                await page
+                    .fill('input[type="email"], input[name="email"]', credentials.email)
+                    .catch(() => undefined);
+                await page
+                    .fill('input[type="password"], input[name="password"]', credentials.password)
+                    .catch(() => undefined);
+                await page.click('button[type="submit"]').catch(() => undefined);
+                await page
+                    .waitForNavigation({ waitUntil: 'networkidle', timeout: 15_000 })
+                    .catch(() => undefined);
+                const targetModule = this.config.modules[0];
+                const moduleUrl = `${this.baseUrl}${targetModule.route}`;
+                await page.goto(moduleUrl, { waitUntil: 'networkidle', timeout: 15_000 });
+                const urlBeforeReload = page.url();
+                // Reload the page
+                await page.reload({ waitUntil: 'networkidle', timeout: 15_000 });
+                const urlAfterReload = page.url();
+                const reloadedToLogin = urlAfterReload.includes('/login') ||
+                    urlAfterReload.includes('/auth') ||
+                    urlAfterReload.includes('/signin');
+                if (reloadedToLogin) {
+                    findings.push({
+                        id: `${this.agentId}-refresh-${targetModule.id}`,
+                        type: 'code-bug-logic',
+                        severity: 'medium',
+                        agentId: this.agentId,
+                        module: targetModule.id,
+                        description: `Refresh persistence: page reload on "${urlBeforeReload}" redirected to login (${urlAfterReload}). ` +
+                            'Session was not persisted across a page refresh.',
+                        suggestedFix: 'Store the authentication token in a persistent storage (localStorage or httpOnly cookie) and restore session on reload.',
+                    });
+                }
+            }
+            catch (error) {
+                findings.push({
+                    id: `${this.agentId}-refresh-error`,
+                    type: 'infra-issue',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: this.config.modules[0]?.id ?? 'unknown',
+                    description: `Refresh persistence scenario failed: ${error instanceof Error ? error.message : String(error)}`,
+                });
+            }
+            finally {
+                if (page)
+                    await page.close().catch(() => undefined);
+                if (context)
+                    await context.close().catch(() => undefined);
+                if (browser)
+                    await browser.close().catch(() => undefined);
+            }
+        }
+        // -----------------------------------------------------------------------
+        // Scenario 3: Back/forward navigation — navigate 3 modules, go back 2
+        // -----------------------------------------------------------------------
+        if (this.config.modules.length >= 3) {
+            let browser = null;
+            let context = null;
+            let page = null;
+            try {
+                browser = await chromium.launch({ headless: true });
+                context = await browser.newContext();
+                page = await context.newPage();
+                // Login first
+                await page.goto(loginUrl, { waitUntil: 'networkidle', timeout: 20_000 });
+                await page
+                    .fill('input[type="email"], input[name="email"]', credentials.email)
+                    .catch(() => undefined);
+                await page
+                    .fill('input[type="password"], input[name="password"]', credentials.password)
+                    .catch(() => undefined);
+                await page.click('button[type="submit"]').catch(() => undefined);
+                await page
+                    .waitForNavigation({ waitUntil: 'networkidle', timeout: 15_000 })
+                    .catch(() => undefined);
+                const [mod1, mod2, mod3] = this.config.modules.slice(0, 3);
+                await page.goto(`${this.baseUrl}${mod1.route}`, { waitUntil: 'networkidle', timeout: 15_000 });
+                await page.goto(`${this.baseUrl}${mod2.route}`, { waitUntil: 'networkidle', timeout: 15_000 });
+                await page.goto(`${this.baseUrl}${mod3.route}`, { waitUntil: 'networkidle', timeout: 15_000 });
+                // Go back 2 pages — should land on mod1
+                await page.goBack({ waitUntil: 'networkidle', timeout: 10_000 });
+                await page.goBack({ waitUntil: 'networkidle', timeout: 10_000 });
+                const currentUrl = page.url();
+                const expectedRoute = mod1.route;
+                const landedOnCorrectModule = currentUrl.includes(expectedRoute) ||
+                    currentUrl.endsWith(expectedRoute.replace(/^\//, ''));
+                if (!landedOnCorrectModule) {
+                    findings.push({
+                        id: `${this.agentId}-back-forward-${mod1.id}`,
+                        type: 'code-bug-logic',
+                        severity: 'low',
+                        agentId: this.agentId,
+                        module: mod1.id,
+                        description: `Back/forward navigation: after navigating to modules [${mod1.id}, ${mod2.id}, ${mod3.id}] ` +
+                            `and going back 2 times, expected to be on "${mod1.route}" but landed on "${currentUrl}".`,
+                        suggestedFix: 'Ensure router history is correctly maintained across module transitions.',
+                    });
+                }
+            }
+            catch (error) {
+                findings.push({
+                    id: `${this.agentId}-back-forward-error`,
+                    type: 'infra-issue',
+                    severity: 'low',
+                    agentId: this.agentId,
+                    module: 'navigation',
+                    description: `Back/forward scenario failed: ${error instanceof Error ? error.message : String(error)}`,
+                });
+            }
+            finally {
+                if (page)
+                    await page.close().catch(() => undefined);
+                if (context)
+                    await context.close().catch(() => undefined);
+                if (browser)
+                    await browser.close().catch(() => undefined);
+            }
+        }
+        return findings;
+    }
+}
+//# sourceMappingURL=21-state-session-tester.js.map

package/dist/agents/21-state-session-tester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"21-state-session-tester.js","sourceRoot":"","sources":["../../agents/21-state-session-tester.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,OAAO,uBAAwB,SAAQ,SAAS;IAC3C,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,wBAAwB,CAAC;IACtC,OAAO,GAAG,EAAE,CAAC;IAEX,KAAK,CAAC,SAAS;QACvB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;QAChG,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,iBAAiB;gBACpC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,eAAe;gBACvB,WAAW,EAAE,4DAA4D;aAC1E,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,aAAa;gBAChC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,eAAe;gBACvB,WAAW,EAAE,sDAAsD;aACpE,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAEhD,0EAA0E;QAC1E,sEAAsE;QACtE,0EAA0E;QAC1E,CAAC;YACC,IAAI,OAAO,GAAmB,IAAI,CAAC;YACnC,IAAI,OAAO,GAA0B,IAAI,CAAC;YAC1C,IAAI,IAAI,GAAgB,IAAI,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;gBACrC,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;gBAE/B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;gBAC7C,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;gBAE3D,uDAAuD;gBACvD,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAE5E,4FAA4F;gBAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5B,MAAM,SAAS,GACb,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC3B,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAC1B,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAE/B,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,2EAA2E;oBAC3E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;oBACzC,MAAM,YAAY,GAChB,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;wBACrC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;oBAE5D,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,QAAQ,CAAC,IAAI,CAAC;4BACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,cAAc,YAAY,CAAC,EAAE,EAAE;4BAClD,IAAI,EAAE,gBAAgB;4BACtB,QAAQ,EAAE,QAAQ;4BAClB,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,MAAM,EAAE,YAAY,CAAC,EAAE;4BACvB,WAAW,EACT,+CAA+C,WAAW,qCAAqC;gCAC/F,oCAAoC,QAAQ,EAAE;4BAChD,YAAY,EACV,sFAAsF;yBACzF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,8EAA8E;YAChF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,kBAAkB;oBACrC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,SAAS;oBAC/C,WAAW,EAAE,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBACpG,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,IAAI,IAAI;oBAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACpD,IAAI,OAAO;oBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC1D,IAAI,OAAO;oBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,CAAC;YACC,IAAI,OAAO,GAAmB,IAAI,CAAC;YACnC,IAAI,OAAO,GAA0B,IAAI,CAAC;YAC1C,IAAI,IAAI,GAAgB,IAAI,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;gBACrC,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;gBAE/B,cAAc;gBACd,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBACzE,MAAM,IAAI;qBACP,IAAI,CAAC,0CAA0C,EAAE,WAAW,CAAC,KAAK,CAAC;qBACnE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC1B,MAAM,IAAI;qBACP,IAAI,CAAC,gDAAgD,EAAE,WAAW,CAAC,QAAQ,CAAC;qBAC5E,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC1B,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACjE,MAAM,IAAI;qBACP,iBAAiB,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;qBAChE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAE1B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;gBAC7C,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;gBAEzD,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC1E,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAEnC,kBAAkB;gBAClB,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAEjE,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClC,MAAM,eAAe,GACnB,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACjC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAChC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAErC,IAAI,eAAe,EAAE,CAAC;oBACpB,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,YAAY,YAAY,CAAC,EAAE,EAAE;wBAChD,IAAI,EAAE,gBAAgB;wBACtB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,YAAY,CAAC,EAAE;wBACvB,WAAW,EACT,wCAAwC,eAAe,0BAA0B,cAAc,KAAK;4BACpG,kDAAkD;wBACpD,YAAY,EACV,yHAAyH;qBAC5H,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,gBAAgB;oBACnC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,SAAS;oBAC/C,WAAW,EAAE,wCAAwC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAC9G,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,IAAI,IAAI;oBAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACpD,IAAI,OAAO;oBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC1D,IAAI,OAAO;oBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,sEAAsE;QACtE,0EAA0E;QAC1E,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,OAAO,GAAmB,IAAI,CAAC;YACnC,IAAI,OAAO,GAA0B,IAAI,CAAC;YAC1C,IAAI,IAAI,GAAgB,IAAI,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;gBACrC,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;gBAE/B,cAAc;gBACd,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBACzE,MAAM,IAAI;qBACP,IAAI,CAAC,0CAA0C,EAAE,WAAW,CAAC,KAAK,CAAC;qBACnE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC1B,MAAM,IAAI;qBACP,IAAI,CAAC,gDAAgD,EAAE,WAAW,CAAC,QAAQ,CAAC;qBAC5E,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC1B,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACjE,MAAM,IAAI;qBACP,iBAAiB,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;qBAChE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAE1B,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAIxD,CAAC;gBAEF,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC/F,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC/F,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAE/F,wCAAwC;gBACxC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBACjE,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAEjE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC;gBACjC,MAAM,qBAAqB,GACzB,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;oBAClC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;gBAExD,IAAI,CAAC,qBAAqB,EAAE,CAAC;oBAC3B,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,iBAAiB,IAAI,CAAC,EAAE,EAAE;wBAC7C,IAAI,EAAE,gBAAgB;wBACtB,QAAQ,EAAE,KAAK;wBACf,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,WAAW,EACT,yDAAyD,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI;4BAC5F,8CAA8C,IAAI,CAAC,KAAK,oBAAoB,UAAU,IAAI;wBAC5F,YAAY,EACV,0EAA0E;qBAC7E,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,qBAAqB;oBACxC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,YAAY;oBACpB,WAAW,EAAE,iCAAiC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBACvG,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,IAAI,IAAI;oBAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACpD,IAAI,OAAO;oBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC1D,IAAI,OAAO;oBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/agents/22-email-notification-verifier.d.ts

@@ -0,0 +1,11 @@
+import type { Finding } from '../core/types';
+import { BaseAgent } from './base-agent';
+export declare class EmailNotificationVerifierAgent extends BaseAgent {
+    readonly agentId = 22;
+    readonly agentName = "Email & Notification Verifier";
+    /** Set during preFlight so execute() knows whether Mailhog is available. */
+    private mailhogAvailable;
+    protected preFlight(): Promise<void>;
+    protected execute(): Promise<Finding[]>;
+}
+//# sourceMappingURL=22-email-notification-verifier.d.ts.map

package/dist/agents/22-email-notification-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"22-email-notification-verifier.d.ts","sourceRoot":"","sources":["../../agents/22-email-notification-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AA6CzC,qBAAa,8BAA+B,SAAQ,SAAS;IAC3D,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,mCAAmC;IAErD,4EAA4E;IAC5E,OAAO,CAAC,gBAAgB,CAAS;cAEjB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAK1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;CAyL9C"}

package/dist/agents/22-email-notification-verifier.js

@@ -0,0 +1,199 @@
+import { BaseAgent } from './base-agent';
+import { ApiClient } from '../helpers/api-client';
+const MAILHOG_API_URL = 'http://localhost:8025/api/v2/messages?limit=10';
+const MAILHOG_HEALTH_URL = 'http://localhost:8025';
+async function isMailhogReachable() {
+    try {
+        const response = await fetch(MAILHOG_HEALTH_URL, {
+            method: 'HEAD',
+            signal: AbortSignal.timeout(5_000),
+        });
+        return response.ok || response.status < 500;
+    }
+    catch {
+        return false;
+    }
+}
+async function fetchMailhogMessages() {
+    const response = await fetch(MAILHOG_API_URL, {
+        signal: AbortSignal.timeout(10_000),
+    });
+    if (!response.ok) {
+        throw new Error(`Mailhog API returned ${response.status}`);
+    }
+    const data = (await response.json());
+    return data.items ?? [];
+}
+export class EmailNotificationVerifierAgent extends BaseAgent {
+    agentId = 22;
+    agentName = 'Email & Notification Verifier';
+    /** Set during preFlight so execute() knows whether Mailhog is available. */
+    mailhogAvailable = false;
+    async preFlight() {
+        this.mailhogAvailable = await isMailhogReachable();
+        // Advisory only — Mailhog is optional in non-local environments
+    }
+    async execute() {
+        const findings = [];
+        const env = this.config.environments['beta'] ??
+            this.config.environments['alpha'] ??
+            Object.values(this.config.environments)[0];
+        if (!env) {
+            findings.push({
+                id: `${this.agentId}-no-env`,
+                type: 'infra-issue',
+                severity: 'critical',
+                agentId: this.agentId,
+                module: 'email',
+                description: 'No environment configured — cannot run email/notification checks',
+            });
+            return findings;
+        }
+        // -----------------------------------------------------------------------
+        // Advisory finding when Mailhog is unavailable
+        // -----------------------------------------------------------------------
+        if (!this.mailhogAvailable) {
+            findings.push({
+                id: `${this.agentId}-mailhog-unavailable`,
+                type: 'infra-issue',
+                severity: 'low',
+                agentId: this.agentId,
+                module: 'email',
+                description: 'Advisory: Mailhog is not reachable at localhost:8025. ' +
+                    'Email delivery verification will be skipped. ' +
+                    'Start Mailhog locally to enable full email testing.',
+                suggestedFix: 'Run `docker run -p 1025:1025 -p 8025:8025 mailhog/mailhog` before the test suite.',
+            });
+            return findings;
+        }
+        // -----------------------------------------------------------------------
+        // Step 1: Trigger a password reset to generate an email
+        // -----------------------------------------------------------------------
+        const testEmail = this.config.auth.credentials?.['admin']?.email ??
+            Object.values(this.config.auth.credentials ?? {})[0]?.email ??
+            'test@example.com';
+        const apiClient = new ApiClient(env.baseUrl);
+        let passwordResetTriggered = false;
+        try {
+            const response = await apiClient.post('/api/auth/forgot-password', { email: testEmail });
+            if (response.status === 200 || response.status === 202 || response.status === 204) {
+                passwordResetTriggered = true;
+            }
+            else {
+                findings.push({
+                    id: `${this.agentId}-password-reset-failed`,
+                    type: 'infra-issue',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: 'email',
+                    description: `Password reset endpoint POST /api/auth/forgot-password returned ${response.status}. ` +
+                        `Expected 200/202/204.`,
+                    suggestedFix: 'Verify the forgot-password endpoint is implemented and returns a 2xx status.',
+                });
+            }
+        }
+        catch (error) {
+            findings.push({
+                id: `${this.agentId}-password-reset-error`,
+                type: 'infra-issue',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'email',
+                description: `Password reset trigger failed: ${error instanceof Error ? error.message : String(error)}`,
+            });
+        }
+        if (!passwordResetTriggered) {
+            return findings;
+        }
+        // -----------------------------------------------------------------------
+        // Step 2: Poll Mailhog for the delivered email (up to 5 seconds)
+        // -----------------------------------------------------------------------
+        let messages = [];
+        const backoffDelays = [200, 400, 800, 1600, 3200];
+        for (const delay of backoffDelays) {
+            try {
+                messages = await fetchMailhogMessages();
+                if (messages.length > 0)
+                    break;
+            }
+            catch {
+                // Retry on transient errors
+            }
+            await new Promise((resolve) => setTimeout(resolve, delay));
+        }
+        if (messages.length === 0) {
+            findings.push({
+                id: `${this.agentId}-email-not-delivered`,
+                type: 'code-bug-logic',
+                severity: 'high',
+                agentId: this.agentId,
+                module: 'email',
+                description: `Email delivery failure: no messages received in Mailhog within 5 seconds of ` +
+                    `triggering password reset for "${testEmail}".`,
+                suggestedFix: 'Verify the mailer service is configured correctly and Mailhog SMTP port (1025) is reachable.',
+            });
+            return findings;
+        }
+        // -----------------------------------------------------------------------
+        // Step 3: Inspect email bodies for raw template variables like {{variable}}
+        // -----------------------------------------------------------------------
+        const templateVarPattern = /\{\{[^}]+\}\}/g;
+        for (const message of messages) {
+            const body = message.Content.Body;
+            const rawVars = body.match(templateVarPattern);
+            if (rawVars && rawVars.length > 0) {
+                findings.push({
+                    id: `${this.agentId}-template-vars-${message.ID.slice(0, 8)}`,
+                    type: 'code-bug-logic',
+                    severity: 'high',
+                    agentId: this.agentId,
+                    module: 'email',
+                    description: `Email template variable(s) not substituted: found ${rawVars.join(', ')} in email body (message ID: ${message.ID}).`,
+                    suggestedFix: 'Check the email template renderer and ensure all variables are provided at send time.',
+                });
+            }
+        }
+        // -----------------------------------------------------------------------
+        // Step 4: Check that all links in the email body resolve (HTTP HEAD → 200)
+        // -----------------------------------------------------------------------
+        const urlPattern = /https?:\/\/[^\s"'<>)]+/g;
+        for (const message of messages) {
+            const body = message.Content.Body;
+            const urls = body.match(urlPattern) ?? [];
+            const uniqueUrls = [...new Set(urls)];
+            for (const url of uniqueUrls) {
+                try {
+                    const response = await fetch(url, {
+                        method: 'HEAD',
+                        signal: AbortSignal.timeout(10_000),
+                        redirect: 'follow',
+                    });
+                    if (response.status >= 400) {
+                        findings.push({
+                            id: `${this.agentId}-broken-link-${url.slice(0, 40).replace(/[^a-zA-Z0-9]/g, '-')}`,
+                            type: 'code-bug-logic',
+                            severity: 'medium',
+                            agentId: this.agentId,
+                            module: 'email',
+                            description: `Broken link in email body: HEAD ${url} returned ${response.status}.`,
+                            suggestedFix: `Update the email template to use a valid URL for: ${url}`,
+                        });
+                    }
+                }
+                catch (error) {
+                    findings.push({
+                        id: `${this.agentId}-link-error-${url.slice(0, 40).replace(/[^a-zA-Z0-9]/g, '-')}`,
+                        type: 'infra-issue',
+                        severity: 'low',
+                        agentId: this.agentId,
+                        module: 'email',
+                        description: `Could not verify link in email body: ${url}. ` +
+                            `Error: ${error instanceof Error ? error.message : String(error)}`,
+                    });
+                }
+            }
+        }
+        return findings;
+    }
+}
+//# sourceMappingURL=22-email-notification-verifier.js.map