@avi770/testteam 2.0.0 → 3.2.0

package/dist/agents/83-static-analysis-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"83-static-analysis-agent.js","sourceRoot":"","sources":["../../agents/83-static-analysis-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,gDAAgD;AAChD,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAapC,MAAM,OAAO,mBAAoB,SAAQ,SAAS;IACvC,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,uBAAuB,CAAC;IACrC,WAAW,GAAG,EAAE,CAAC;IAEf,KAAK,CAAC,SAAS;QACvB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAqB,EAAE,CAAC;QAErC,gCAAgC;QAChC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;YACxC,IAAI,CAAC,SAAS,EAAE;YAChB,IAAI,CAAC,YAAY,EAAE;YACnB,IAAI,CAAC,kBAAkB,EAAE;YACzB,IAAI,CAAC,qBAAqB,EAAE;SAC7B,CAAC,CAAC;QAEH,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;YAChC,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;gBACrG,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;oBAChH,IAAI,EAAE,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,mBAAmB;oBACxE,QAAQ;oBACR,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,mBAAmB,MAAM,CAAC,IAAI,EAAE;oBACxC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;iBACrF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG;YACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/B,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACrE,UAAU,EAAE;gBACV,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjG,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrG,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;aAChG;YACD,OAAO;SACR,CAAC;QACF,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEtF,IAAI,CAAC,WAAW,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,oBAAoB,MAAM,CAAC,aAAa,cAAc,MAAM,CAAC,UAAU,CAAC,KAAK,YAAY,MAAM,CAAC,UAAU,CAAC,OAAO,YAAY;SAC5I,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,MAAM,GAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAEhE,IAAI,CAAC;YACH,+BAA+B;YAC/B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClD,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACzC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,KAAK,eAAe,CACrH,CAAC;YAEF,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,sCAAsC;gBACtC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;oBACxF,IAAI,CAAC,GAAG,CAAC,YAAY;wBAAE,OAAO,IAAI,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,oBAAoB,CAAC,EAC7D;gBACE,GAAG,EAAE,IAAI,CAAC,WAAW;gBACrB,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,mBAAmB;gBAC5B,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CACF,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACZ,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;oBACtD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAE,GAA0B,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBAC5E,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAQrC,CAAC;gBAEH,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;oBACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;wBAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;4BACnB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;4BACvE,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;4BAClD,OAAO,EAAE,GAAG,CAAC,OAAO;4BACpB,IAAI,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;yBAC9B,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,MAAM,GAAmB,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAEpE,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC7F,IAAI,CAAC,cAAc;gBAAE,OAAO,IAAI,CAAC;YAEjC,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,EAC/C;oBACE,GAAG,EAAE,IAAI,CAAC,WAAW;oBACrB,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,mBAAmB;oBAC5B,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;iBAC5B,CACF,CAAC;gBACF,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACtB,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;oBACtD,MAAM,GAAG,MAAM,CAAE,GAA0B,CAAC,MAAM,CAAC,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAED,mEAAmE;YACnE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBACrF,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;wBACnB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;wBAClE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;wBAC5B,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;wBACpD,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;wBACjB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;qBACf,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC9B,MAAM,MAAM,GAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAEnE,IAAI,CAAC;YACH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAC1B;oBACE,GAAG,EAAE,IAAI,CAAC,WAAW;oBACrB,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,MAAM;oBACf,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;iBAC5B,CACF,CAAC;gBACF,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACtB,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;oBACtD,MAAM,GAAG,MAAM,CAAE,GAA0B,CAAC,MAAM,CAAC,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,OAAO,IAAI,CAAC;YAEhC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAM9B,CAAC;gBAEF,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;oBACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;oBAChG,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;wBACnB,IAAI,EAAE,cAAc;wBACpB,QAAQ;wBACR,OAAO,EAAE,qBAAqB,GAAG,MAAM,IAAI,CAAC,QAAQ,MAAM,GAAG,EAAE;wBAC/D,IAAI,EAAE,aAAa,IAAI,CAAC,QAAQ,EAAE;qBACnC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,MAAM,MAAM,GAAmB,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAEpE,4DAA4D;QAC5D,IAAI,CAAC;YACH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,8BAA8B,EAAE,eAAe,CAAC,EAClG;oBACE,GAAG,EAAE,IAAI,CAAC,WAAW;oBACrB,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,mBAAmB;oBAC5B,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;iBAC5B,CACF,CAAC;gBACF,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACtB,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;oBACtD,MAAM,GAAG,MAAM,CAAE,GAA0B,CAAC,MAAM,CAAC,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAQrC,CAAC;gBAEH,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;oBACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;wBAChC,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;4BAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gCACnB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;gCACvE,IAAI,EAAE,GAAG,CAAC,IAAI;gCACd,QAAQ,EAAE,SAAS;gCACnB,OAAO,EAAE,GAAG,CAAC,OAAO;gCACpB,IAAI,EAAE,uBAAuB;6BAC9B,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/agents/84-governance-testing-agent.d.ts

@@ -0,0 +1,28 @@
+import { BaseAgent } from './base-agent.js';
+import type { Finding } from '../core/types.js';
+export declare class GovernanceTestingAgent extends BaseAgent {
+    readonly agentId = 84;
+    readonly agentName = "Governance Testing Agent";
+    private projectRoot;
+    private ezraSettings;
+    protected preFlight(): Promise<void>;
+    protected execute(): Promise<Finding[]>;
+    private runStandardsChecks;
+    private runSecurityChecks;
+    private runComplianceChecks;
+    private checkNamingConventions;
+    private checkComplexityLimits;
+    private checkTestCoverage;
+    private checkErrorHandling;
+    private checkTypeScriptStrict;
+    private checkForSecrets;
+    private checkSastPatterns;
+    private checkPiiDetection;
+    private checkAuthRoutes;
+    private checkCookieSecurity;
+    private checkLicenseCompliance;
+    private checkDataRetention;
+    /** Parse simplified YAML settings (key: value format). */
+    private parseYamlSettings;
+}
+//# sourceMappingURL=84-governance-testing-agent.d.ts.map

package/dist/agents/84-governance-testing-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"84-governance-testing-agent.d.ts","sourceRoot":"","sources":["../../agents/84-governance-testing-agent.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAoC7C,qBAAa,sBAAuB,SAAQ,SAAS;IACnD,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,8BAA8B;IAChD,OAAO,CAAC,WAAW,CAAM;IACzB,OAAO,CAAC,YAAY,CAAoB;cAExB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAoB1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAgE/B,kBAAkB;YAyClB,iBAAiB;YAyCjB,mBAAmB;YAsBnB,sBAAsB;YA+BtB,qBAAqB;YAiCrB,iBAAiB;YAiCjB,kBAAkB;YA2BlB,qBAAqB;YAuBrB,eAAe;YAqCf,iBAAiB;YAoCjB,iBAAiB;YAmCjB,eAAe;YAkCf,mBAAmB;YA8BnB,sBAAsB;YA6CtB,kBAAkB;IA6BhC,0DAA0D;IAC1D,OAAO,CAAC,iBAAiB;CA8B1B"}

package/dist/agents/84-governance-testing-agent.js

@@ -0,0 +1,591 @@
+import { stat, readFile, writeFile } from 'node:fs/promises';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { join } from 'node:path';
+import { BaseAgent } from './base-agent.js';
+const execFileAsync = promisify(execFile);
+/** Path to EZRA settings relative to project root. */
+const EZRA_SETTINGS_PATH = '.ezra/settings.yaml';
+/** Timeout for each governance check category (ms). */
+const CHECK_TIMEOUT_MS = 120_000;
+export class GovernanceTestingAgent extends BaseAgent {
+    agentId = 84;
+    agentName = 'Governance Testing Agent';
+    projectRoot = '';
+    ezraSettings = {};
+    async preFlight() {
+        this.projectRoot = this.config.projectRoot ?? process.cwd();
+        const exists = await stat(this.projectRoot).catch(() => null);
+        if (!exists) {
+            throw new Error(`Project root does not exist: ${this.projectRoot}`);
+        }
+        // Load EZRA settings
+        const settingsPath = join(this.projectRoot, EZRA_SETTINGS_PATH);
+        try {
+            const content = await readFile(settingsPath, 'utf-8');
+            this.ezraSettings = this.parseYamlSettings(content);
+        }
+        catch {
+            // No EZRA settings — use defaults
+            this.ezraSettings = {
+                governance: { standards: true, security: true, compliance: false },
+            };
+        }
+    }
+    async execute() {
+        const findings = [];
+        const categories = [];
+        const governance = this.ezraSettings.governance ?? {};
+        // Run enabled governance categories
+        const checks = [];
+        if (governance.standards !== false) {
+            checks.push(this.runStandardsChecks());
+        }
+        if (governance.security !== false) {
+            checks.push(this.runSecurityChecks());
+        }
+        if (governance.compliance === true) {
+            checks.push(this.runComplianceChecks());
+        }
+        const results = await Promise.allSettled(checks);
+        for (const result of results) {
+            if (result.status === 'fulfilled' && result.value) {
+                categories.push(result.value);
+            }
+        }
+        // Convert violations to findings
+        for (const category of categories) {
+            for (const violation of category.violations) {
+                const severity = violation.severity === 'error' ? 'high' : violation.severity === 'warning' ? 'medium' : 'low';
+                findings.push({
+                    id: `${this.agentId}-${category.category}-${violation.ruleId}`,
+                    type: category.category === 'security' ? 'code-bug-security' : 'code-bug-logic',
+                    severity,
+                    agentId: this.agentId,
+                    module: `governance-${category.category}`,
+                    file: violation.file,
+                    line: violation.line,
+                    description: `[Governance/${category.category.toUpperCase()}] ${violation.message} (${violation.ruleId})`,
+                });
+            }
+        }
+        // Write governance report
+        const reportPath = join(this.runDir, 'governance-report.json');
+        const report = {
+            governance: Object.fromEntries(categories.map(c => [c.category, { passed: c.passed, failed: c.failed, violations: c.violations }])),
+        };
+        await writeFile(reportPath, JSON.stringify(report, null, 2), 'utf-8').catch(() => { });
+        this.addEvidence({
+            type: 'report',
+            path: reportPath,
+            description: `Governance: ${categories.map(c => `${c.category}=${c.passed}P/${c.failed}F`).join(', ')}`,
+        });
+        return findings;
+    }
+    async runStandardsChecks() {
+        const category = { category: 'standards', passed: 0, failed: 0, violations: [] };
+        // STD-001: Naming conventions check (via ESLint naming-convention rule)
+        {
+            const violation = await this.checkNamingConventions();
+            if (violation) {
+                category.failed++;
+                category.violations.push(...violation);
+            }
+            else {
+                category.passed++;
+            }
+        }
+        // STD-002: Complexity limits
+        {
+            const violations = await this.checkComplexityLimits();
+            if (violations.length > 0) {
+                category.failed++;
+                category.violations.push(...violations);
+            }
+            else {
+                category.passed++;
+            }
+        }
+        // STD-003: Test coverage minimums
+        {
+            const violation = await this.checkTestCoverage();
+            if (violation) {
+                category.failed++;
+                category.violations.push(violation);
+            }
+            else {
+                category.passed++;
+            }
+        }
+        // STD-004: Error handling requirements
+        {
+            const violations = await this.checkErrorHandling();
+            if (violations.length > 0) {
+                category.failed++;
+                category.violations.push(...violations);
+            }
+            else {
+                category.passed++;
+            }
+        }
+        // STD-005: TypeScript strict mode
+        {
+            const violation = await this.checkTypeScriptStrict();
+            if (violation) {
+                category.failed++;
+                category.violations.push(violation);
+            }
+            else {
+                category.passed++;
+            }
+        }
+        return category;
+    }
+    async runSecurityChecks() {
+        const category = { category: 'security', passed: 0, failed: 0, violations: [] };
+        // SEC-001: Secrets detection
+        {
+            const violations = await this.checkForSecrets();
+            if (violations.length > 0) {
+                category.failed++;
+                category.violations.push(...violations);
+            }
+            else {
+                category.passed++;
+            }
+        }
+        // SEC-002: SAST patterns
+        {
+            const violations = await this.checkSastPatterns();
+            if (violations.length > 0) {
+                category.failed++;
+                category.violations.push(...violations);
+            }
+            else {
+                category.passed++;
+            }
+        }
+        // SEC-003: PII detection
+        {
+            const violations = await this.checkPiiDetection();
+            if (violations.length > 0) {
+                category.failed++;
+                category.violations.push(...violations);
+            }
+            else {
+                category.passed++;
+            }
+        }
+        // SEC-004: Auth route validation
+        {
+            const violations = await this.checkAuthRoutes();
+            if (violations.length > 0) {
+                category.failed++;
+                category.violations.push(...violations);
+            }
+            else {
+                category.passed++;
+            }
+        }
+        // SEC-005: Cookie security
+        {
+            const violations = await this.checkCookieSecurity();
+            if (violations.length > 0) {
+                category.failed++;
+                category.violations.push(...violations);
+            }
+            else {
+                category.passed++;
+            }
+        }
+        return category;
+    }
+    async runComplianceChecks() {
+        const category = { category: 'compliance', passed: 0, failed: 0, violations: [] };
+        // CMP-001: License compliance
+        {
+            const violations = await this.checkLicenseCompliance();
+            if (violations.length > 0) {
+                category.failed++;
+                category.violations.push(...violations);
+            }
+            else {
+                category.passed++;
+            }
+        }
+        // CMP-002: Data retention policies
+        {
+            const violations = await this.checkDataRetention();
+            if (violations.length > 0) {
+                category.failed++;
+                category.violations.push(...violations);
+            }
+            else {
+                category.passed++;
+            }
+        }
+        return category;
+    }
+    // === Standards Checks ===
+    async checkNamingConventions() {
+        try {
+            const { stdout } = await execFileAsync('npx', ['eslint', '.', '--format=json', '--rule', '{"@typescript-eslint/naming-convention": "warn"}', '--max-warnings=50'], { cwd: this.projectRoot, shell: true, timeout: CHECK_TIMEOUT_MS, maxBuffer: 10 * 1024 * 1024 }).catch(err => {
+                if (err && typeof err === 'object' && 'stdout' in err)
+                    return { stdout: String(err.stdout), stderr: '' };
+                throw err;
+            });
+            const results = JSON.parse(stdout);
+            const violations = [];
+            for (const file of results) {
+                for (const msg of file.messages.filter(m => m.ruleId?.includes('naming'))) {
+                    violations.push({
+                        ruleId: 'STD-001',
+                        severity: 'warning',
+                        message: msg.message,
+                        file: file.filePath.replace(this.projectRoot, '').replace(/^[/\\]/, ''),
+                        line: msg.line,
+                    });
+                }
+            }
+            return violations.length > 0 ? violations : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    async checkComplexityLimits() {
+        const violations = [];
+        try {
+            let stdout = '';
+            try {
+                const result = await execFileAsync('npx', ['eslint', '.', '--format=json', '--rule', '{"complexity": ["error", 20]}', '--no-eslintrc'], { cwd: this.projectRoot, shell: true, timeout: CHECK_TIMEOUT_MS, maxBuffer: 10 * 1024 * 1024 });
+                stdout = result.stdout;
+            }
+            catch (err) {
+                if (err && typeof err === 'object' && 'stdout' in err)
+                    stdout = String(err.stdout);
+                else
+                    return violations;
+            }
+            const results = JSON.parse(stdout);
+            for (const file of results) {
+                for (const msg of file.messages.filter(m => m.ruleId === 'complexity')) {
+                    violations.push({
+                        ruleId: 'STD-002',
+                        severity: 'error',
+                        message: `Cyclomatic complexity exceeded: ${msg.message}`,
+                        file: file.filePath.replace(this.projectRoot, '').replace(/^[/\\]/, ''),
+                        line: msg.line,
+                    });
+                }
+            }
+        }
+        catch {
+            // ESLint not available
+        }
+        return violations;
+    }
+    async checkTestCoverage() {
+        // Check if coverage report exists and meets thresholds
+        const coveragePaths = [
+            join(this.projectRoot, 'coverage', 'coverage-summary.json'),
+            join(this.projectRoot, 'coverage', 'lcov-report', 'index.html'),
+        ];
+        for (const covPath of coveragePaths) {
+            try {
+                const content = await readFile(covPath, 'utf-8');
+                if (covPath.endsWith('.json')) {
+                    const summary = JSON.parse(content);
+                    const thresholds = this.config.thresholds?.unitCoverage;
+                    if (thresholds && summary.total) {
+                        const lineCov = summary.total.lines?.pct ?? 0;
+                        if (lineCov < thresholds.lines) {
+                            return {
+                                ruleId: 'STD-003',
+                                severity: 'error',
+                                message: `Test coverage ${lineCov}% is below minimum ${thresholds.lines}%`,
+                                file: 'coverage/coverage-summary.json',
+                            };
+                        }
+                    }
+                }
+            }
+            catch {
+                continue;
+            }
+        }
+        return null;
+    }
+    async checkErrorHandling() {
+        const violations = [];
+        // Look for catch blocks that swallow errors silently
+        try {
+            const { stdout } = await execFileAsync('git', ['grep', '-n', 'catch\\s*(.*{\\s*}', '--', '*.ts', '*.tsx', '*.js'], { cwd: this.projectRoot, shell: true });
+            for (const line of stdout.split('\n').filter(Boolean).slice(0, 20)) {
+                const [file, lineNum] = line.split(':');
+                violations.push({
+                    ruleId: 'STD-004',
+                    severity: 'warning',
+                    message: 'Empty catch block — errors should be logged or re-thrown',
+                    file: file?.replace(this.projectRoot, '').replace(/^[/\\]/, ''),
+                    line: lineNum ? parseInt(lineNum, 10) : undefined,
+                });
+            }
+        }
+        catch {
+            // grep returns non-zero when no matches
+        }
+        return violations;
+    }
+    async checkTypeScriptStrict() {
+        try {
+            const tsconfigPath = join(this.projectRoot, 'tsconfig.json');
+            const content = await readFile(tsconfigPath, 'utf-8');
+            const tsconfig = JSON.parse(content);
+            if (!tsconfig.compilerOptions?.strict) {
+                return {
+                    ruleId: 'STD-005',
+                    severity: 'warning',
+                    message: 'TypeScript strict mode is not enabled in tsconfig.json',
+                    file: 'tsconfig.json',
+                };
+            }
+        }
+        catch {
+            // No tsconfig
+        }
+        return null;
+    }
+    // === Security Checks ===
+    async checkForSecrets() {
+        const violations = [];
+        const secretPatterns = [
+            { pattern: 'AKIA[0-9A-Z]{16}', name: 'AWS Access Key' },
+            { pattern: 'sk-[a-zA-Z0-9]{48}', name: 'OpenAI API Key' },
+            { pattern: 'ghp_[a-zA-Z0-9]{36}', name: 'GitHub Token' },
+            { pattern: 'password\\s*[:=]\\s*["\'][^"\']{8,}', name: 'Hardcoded password' },
+        ];
+        for (const { pattern, name } of secretPatterns) {
+            try {
+                const { stdout } = await execFileAsync('git', ['grep', '-n', '-E', pattern, '--', '*.ts', '*.tsx', '*.js', '*.json', '*.env'], { cwd: this.projectRoot, shell: true });
+                for (const line of stdout.split('\n').filter(Boolean).slice(0, 5)) {
+                    const [file, lineNum] = line.split(':');
+                    // Skip test files and example configs
+                    if (file?.includes('test') || file?.includes('example') || file?.includes('.env.example'))
+                        continue;
+                    violations.push({
+                        ruleId: 'SEC-001',
+                        severity: 'error',
+                        message: `Potential ${name} detected in source code`,
+                        file: file?.replace(this.projectRoot, '').replace(/^[/\\]/, ''),
+                        line: lineNum ? parseInt(lineNum, 10) : undefined,
+                    });
+                }
+            }
+            catch {
+                // No matches (grep exits non-zero)
+            }
+        }
+        return violations;
+    }
+    async checkSastPatterns() {
+        const violations = [];
+        const dangerousPatterns = [
+            { pattern: 'eval\\(', name: 'Use of eval()', ruleId: 'SEC-002a' },
+            { pattern: 'innerHTML\\s*=', name: 'Direct innerHTML assignment', ruleId: 'SEC-002b' },
+            { pattern: 'dangerouslySetInnerHTML', name: 'React dangerouslySetInnerHTML', ruleId: 'SEC-002c' },
+            { pattern: 'new Function\\(', name: 'Dynamic function creation', ruleId: 'SEC-002d' },
+        ];
+        for (const { pattern, name, ruleId } of dangerousPatterns) {
+            try {
+                const { stdout } = await execFileAsync('git', ['grep', '-n', pattern, '--', '*.ts', '*.tsx', '*.js', '*.jsx'], { cwd: this.projectRoot, shell: true });
+                for (const line of stdout.split('\n').filter(Boolean).slice(0, 5)) {
+                    const [file, lineNum] = line.split(':');
+                    if (file?.includes('test') || file?.includes('__mocks__'))
+                        continue;
+                    violations.push({
+                        ruleId,
+                        severity: 'error',
+                        message: `${name} — potential security risk`,
+                        file: file?.replace(this.projectRoot, '').replace(/^[/\\]/, ''),
+                        line: lineNum ? parseInt(lineNum, 10) : undefined,
+                    });
+                }
+            }
+            catch {
+                // No matches
+            }
+        }
+        return violations;
+    }
+    async checkPiiDetection() {
+        const violations = [];
+        // Check for PII logging patterns
+        const piiPatterns = [
+            { pattern: 'console\\.log.*password', name: 'Password logged to console' },
+            { pattern: 'console\\.log.*ssn', name: 'SSN logged to console' },
+            { pattern: 'console\\.log.*credit.?card', name: 'Credit card logged to console' },
+        ];
+        for (const { pattern, name } of piiPatterns) {
+            try {
+                const { stdout } = await execFileAsync('git', ['grep', '-n', '-i', pattern, '--', '*.ts', '*.tsx', '*.js'], { cwd: this.projectRoot, shell: true });
+                for (const line of stdout.split('\n').filter(Boolean).slice(0, 5)) {
+                    const [file, lineNum] = line.split(':');
+                    violations.push({
+                        ruleId: 'SEC-003',
+                        severity: 'error',
+                        message: name,
+                        file: file?.replace(this.projectRoot, '').replace(/^[/\\]/, ''),
+                        line: lineNum ? parseInt(lineNum, 10) : undefined,
+                    });
+                }
+            }
+            catch {
+                // No matches
+            }
+        }
+        return violations;
+    }
+    async checkAuthRoutes() {
+        const violations = [];
+        // Check for API routes missing auth middleware
+        try {
+            const { stdout } = await execFileAsync('git', ['grep', '-n', 'router\\.\\(get\\|post\\|put\\|delete\\|patch\\)', '--', '*.ts', '*.js'], { cwd: this.projectRoot, shell: true });
+            // This is a simplified check — real implementation would parse the route definitions
+            const routeLines = stdout.split('\n').filter(Boolean);
+            const unprotectedRoutes = routeLines.filter(line => !line.includes('auth') && !line.includes('middleware') && !line.includes('protect') &&
+                line.includes('/api/') && !line.includes('/api/auth/') && !line.includes('/api/health') && !line.includes('/api/public'));
+            for (const route of unprotectedRoutes.slice(0, 10)) {
+                const [file, lineNum] = route.split(':');
+                violations.push({
+                    ruleId: 'SEC-004',
+                    severity: 'warning',
+                    message: 'API route may be missing authentication middleware',
+                    file: file?.replace(this.projectRoot, '').replace(/^[/\\]/, ''),
+                    line: lineNum ? parseInt(lineNum, 10) : undefined,
+                });
+            }
+        }
+        catch {
+            // No matches
+        }
+        return violations;
+    }
+    async checkCookieSecurity() {
+        const violations = [];
+        try {
+            const { stdout } = await execFileAsync('git', ['grep', '-n', 'cookie\\|setCookie\\|set-cookie', '--', '*.ts', '*.js'], { cwd: this.projectRoot, shell: true });
+            for (const line of stdout.split('\n').filter(Boolean).slice(0, 10)) {
+                if (!line.includes('httpOnly') && !line.includes('HttpOnly')) {
+                    const [file, lineNum] = line.split(':');
+                    violations.push({
+                        ruleId: 'SEC-005',
+                        severity: 'warning',
+                        message: 'Cookie operation may be missing httpOnly flag',
+                        file: file?.replace(this.projectRoot, '').replace(/^[/\\]/, ''),
+                        line: lineNum ? parseInt(lineNum, 10) : undefined,
+                    });
+                }
+            }
+        }
+        catch {
+            // No matches
+        }
+        return violations;
+    }
+    // === Compliance Checks ===
+    async checkLicenseCompliance() {
+        const violations = [];
+        try {
+            let stdout = '';
+            try {
+                const result = await execFileAsync('npx', ['license-checker', '--json', '--production'], { cwd: this.projectRoot, shell: true, timeout: 60_000, maxBuffer: 10 * 1024 * 1024 });
+                stdout = result.stdout;
+            }
+            catch (err) {
+                if (err && typeof err === 'object' && 'stdout' in err) {
+                    stdout = String(err.stdout);
+                }
+                else {
+                    return violations;
+                }
+            }
+            if (!stdout.trim())
+                return violations;
+            const RESTRICTED_LICENSES = ['GPL-3.0', 'AGPL-3.0', 'SSPL-1.0'];
+            try {
+                const licenses = JSON.parse(stdout);
+                for (const [pkg, info] of Object.entries(licenses)) {
+                    if (RESTRICTED_LICENSES.some(l => info.licenses?.includes(l))) {
+                        violations.push({
+                            ruleId: 'CMP-001',
+                            severity: 'error',
+                            message: `Package "${pkg}" uses restricted license: ${info.licenses}`,
+                            file: 'package.json',
+                        });
+                    }
+                }
+            }
+            catch {
+                // Parse error
+            }
+        }
+        catch {
+            // license-checker not available
+        }
+        return violations;
+    }
+    async checkDataRetention() {
+        const violations = [];
+        // Check for data retention policies in code
+        try {
+            const { stdout } = await execFileAsync('git', ['grep', '-n', '-i', 'retention\\|expire\\|ttl\\|cleanup\\|purge', '--', '*.ts', '*.js'], { cwd: this.projectRoot, shell: true });
+            // If no retention-related code exists, that might be a compliance issue
+            if (!stdout.trim()) {
+                violations.push({
+                    ruleId: 'CMP-002',
+                    severity: 'warning',
+                    message: 'No data retention/cleanup logic detected in codebase. Ensure data retention policies are implemented.',
+                });
+            }
+        }
+        catch {
+            violations.push({
+                ruleId: 'CMP-002',
+                severity: 'info',
+                message: 'Could not check data retention policies — no matching code patterns found',
+            });
+        }
+        return violations;
+    }
+    /** Parse simplified YAML settings (key: value format). */
+    parseYamlSettings(content) {
+        const settings = { governance: {} };
+        const lines = content.split('\n');
+        let currentSection = '';
+        for (const line of lines) {
+            const trimmed = line.trim();
+            if (trimmed.startsWith('#') || trimmed === '')
+                continue;
+            if (trimmed.endsWith(':') && !trimmed.includes(' ')) {
+                currentSection = trimmed.replace(':', '');
+                continue;
+            }
+            const match = trimmed.match(/^(\w+):\s*(.+)$/);
+            if (match) {
+                const [, key, value] = match;
+                const boolValue = value === 'true';
+                if (currentSection === 'governance' && settings.governance) {
+                    if (key === 'standards')
+                        settings.governance.standards = boolValue;
+                    if (key === 'security')
+                        settings.governance.security = boolValue;
+                    if (key === 'compliance')
+                        settings.governance.compliance = boolValue;
+                }
+            }
+        }
+        return settings;
+    }
+}
+//# sourceMappingURL=84-governance-testing-agent.js.map