@avi770/testteam 3.0.0 → 3.2.0

package/CHANGELOG.md

@@ -5,11 +5,171 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+## [3.2.0] - 2026-07-05
+
+### Added
+- **Dashboard layer-posture views (S2–S10).** Every built-but-invisible composite/operational
+  layer is now surfaced in the dashboard as a run-derived posture via a new bridge `GET` endpoint +
+  reader: Master-Knowledge blast-radius (S2), the Sentinel security posture (S3), the Inspector
+  compliance posture (S4), the Border Guard api-contract posture (S5), the Designer a11y/usability
+  posture (S6), the Tech-Debt tracker (S7), the Data-Integrity notary (S8), the Reliability cluster
+  (Tester verdict + DR resilience, S9), and the Loop-Engine cockpit (structural, S10). Decisions
+  D-UI-1…D-UI-13 in `docs/DASHBOARD-SPRINT-PLAN.md`.
+
+### Changed
+- **Packaging: `files[]` trimmed to the compiled runtime only** (`dist/`, `bin/`, `LICENSE`,
+  `README.md`, `CHANGELOG.md`). Raw TypeScript source + tests (`core/`, `agents/`, `helpers/`,
+  `clients/`, `sdk/`, `enterprise/`, `baselines/`) no longer ship — `dist/` is self-contained
+  (verified: no compiled import escapes `dist/`, and an install-smoke of the packed tarball with the
+  raw dirs absent runs the CLI cleanly). Published package drops from 1548 files / 1.8 MB to
+  ~1084 / ~954 kB.
+
+### Fixed
+- **`bridge/runs-reader` no longer silently drops an entire run** when one `agent-results/*.json`
+  is the bare JSON literal `null` / a primitive / an array (the `.sort()` `TypeError` was swallowed
+  by `listRuns`, erasing valid sibling agent-results). Non-object entries are now skipped (H-1).
+
+### Added
+- **License go-live: trust anchor baked into the shipped build (B2-5).** `scripts/bake-license-anchor.mjs`
+  runs after the build and injects the committed **public** key (`scripts/trusted-public-key.pem`, not
+  secret) into `dist/core/license.js`'s `TRUSTED_PUBLIC_KEY`, enabling paid-tier verification in the
+  published package. The **source** const stays `''` on purpose — that keeps the dev/test default
+  fail-secure and leaves the unit suite (which exercises the empty-anchor + inline-key opt-in paths)
+  unchanged. The matching **private** key lives only in the vault + the billing service env and never
+  enters the repo. Verified end-to-end: a signature from the vaulted private key verifies against the
+  baked anchor (`TESTTEAM_REQUIRE_LICENSE_ANCHOR=1 npm run verify:license-anchor` passes strict). If the
+  PEM is absent, the build is a no-op (free-only, fail-secure) — so a checkout without the key still builds.
+- **Sprint 4 — Browser-agent layers (2 agents):** English-first E2E + autonomous exploration
+  - Stagehand Agent (85) — deterministic E2E in plain English via the `act`/`extract`/`observe`
+    primitives. Runs locally by default (no Browserbase cloud lock-in unless `BROWSERBASE_LOCAL=false`).
+    Hard cost guard (`STAGEHAND_COST_CAP_USD = 0.10`) caps each test's LLM spend. See
+    [`docs/agents/stagehand.md`](docs/agents/stagehand.md).
+  - Browser-Use Agent (86) — autonomous exploratory pass via a Python FastAPI sidecar
+    (`agents/browser-use-sidecar/server.py`). Gated by `TF_BROWSER_USE_ENABLED=1` and hard-capped at
+    10 000 LLM tokens per run; never runs against production by accident. See
+    [`docs/agents/browser-use.md`](docs/agents/browser-use.md).
+- New opt-in **`exploratory`** phase (Browser-Use #86 only). Excluded from `--phase all`; opt-in via
+  `--phase exploratory`.
+- Stagehand fallback wired into Localhost Walkthrough (88) under the existing $0.10/test cost cap.
+- New env vars documented in `.env.example`: `TF_BROWSER_USE_ENABLED`, `TF_BROWSER_USE_START_URL`,
+  `TF_BROWSER_USE_GOAL`, `TF_BROWSER_USE_MAX_STEPS`, `BROWSER_USE_SIDECAR_URL`.
+- **Static-analysis & auditing suite (agents 87–120, 34 agents):** expands the roster from 86 to
+  **120 agents** (Free 41 / Pro 37 / Enterprise 42). Source-grounded static/security auditors — e.g.
+  env-var auditor (93), schema validator (94), contract-drift (95), cookie-security (96), healthcheck
+  validator (97), CORS/CSP auditor (98), logging-hygiene (99), async-safety (120), and the
+  taint/injection detectors (#107–#112). Full roster + tiers in `docs/USER-MANUAL.md` §7 and the 120
+  per-agent MDX specs under `docs/agents/`.
+- **Dashboard: 10 previously-backend-only capabilities wired into the UI (#201).** A full-codebase
+  visibility audit surfaced them; each is now reachable from the dashboard: **live-pipeline run**
+  (fixed a bridge-startup 503 that dead-ended PipelineControl + Screencast), **Free/Pro/Enterprise
+  license-tier** badges + filter in the Agent Catalogue, agent **coaching-flags** panel,
+  **QualityScore "The Judge"** release-gate card (an honest, confidence-labelled projection of the
+  run's agent outcomes), **real single-agent run** (`--agent`, auth-gated `POST /agents/:id/run`, and
+  a Catalogue "Run" button), cross-agent **finding-correlation** card, enterprise **SLA** card, a BDD
+  **test-framework picker** (vitest/jest/mocha), and a `GET /features` **feature browser**. See
+  `docs/DASHBOARD-WIRING-GAPS.md`.
+
+### Security
+- **Unauthenticated-RCE chain closed in the bridge feature-BDD routes** (#171, CRITICAL): the two
+  code-writing routes fail closed (503) when no bridge token is configured, so generated content can
+  never be authored-then-executed anonymously.
+- **License tier-forgery closed — fail-secure trust anchor** (#172, CRITICAL): with no baked public
+  key the license loader rejects all licenses and falls back to the free tier; inline-key trust is a
+  dev-only opt-in.
+- **Command injection fixed in Integration Testing Agent (72)** (#174): target-project directory names
+  are validated (`SAFE_DIR_SEGMENT`) before reaching a `shell:true` runner, with an exec-time
+  shell-metacharacter guard as defence-in-depth.
+- Bridge hardening: opt-in per-IP rate limiting on mutating + expensive-SSE routes; secret env vars
+  stripped from spawned child processes; SSRF guard blocks cloud-metadata ranges.
+- **License signing hardened** (#150): licenses are signed with a stable `TESTTEAM_LICENSE_PRIVATE_KEY`
+  instead of an ephemeral per-webhook keypair (previously every issued license was unverifiable).
+- **Static-analysis / detector hardening batch** (#151): bounded the ReDoS-prone regexes in the
+  secrets scanner and quality-gate, capped dashboard taint fields at ingestion, added an
+  `assertSafeRequestUrl` SSRF guard, and pinned `promptfoo` to a tested version.
+- **Production-hardening pass** (multi-phase audit; findings verified by an external model panel):
+  - **Feature-BDD runner-config injection closed** — a generated artifact named `vitest.config.ts` /
+    `vite.config.ts` / `jest.config.ts` (etc.) would be auto-discovered and *executed* by the test
+    runner (whose cwd is the feature dir), escaping the "only run the listed test files" invariant.
+    Such filenames are now rejected at both the store write-gate and the schema first-boundary.
+  - **License expiry now re-checked on every cache hit** — a long-lived bridge process no longer honors
+    an expired license until restart.
+  - **Run-counter writes are atomic** (temp-file + rename) — a crash mid-write can no longer corrupt the
+    quota file (which previously self-healed by *resetting* the count — a quota bypass).
+  - **Delivered license files written owner-only (0600)** — the license key is a bearer credential and
+    must not be world/group-readable on a shared billing host.
+  - **Timeouts on every network call** — all client + dashboard data-plane `fetch`es now carry an
+    `AbortSignal` timeout, so a hung (not refused) sidecar can no longer stall the CLI or dashboard.
+  - **Per-check timeout in health checks** and **explicit timeouts on S3/Azure report uploads**.
+
+### Fixed
+- **The published npm package now runs on a clean install** (#179, #180, #196). `pixelmatch`, `pngjs`,
+  and `esbuild` moved from `devDependencies` to runtime `dependencies`; the shipped CLI runs the
+  compiled `dist/` under plain `node` (transpiling `.ts` configs via esbuild), which also fixed a
+  crash when installed under a spaced Windows path. A `npm pack → clean-install → --dry-run` smoke job
+  now gates publishing so this class of regression can't recur.
+- **`testteam init` scaffolds a config that type-checks in the user's project** — the generated
+  `testteam.config.ts` now imports `TestTeamConfig` from `@avi770/testteam/config` instead of a
+  repo-relative `./core/config` path that only resolved inside this repo.
+- **`init` escapes newlines / carriage returns** in the project name so a pasted multi-line value can't
+  produce a syntactically-broken generated config.
+
+### Changed
+- **BREAKING (config validation):** `validateConfig` now *requires* a `modules` array (it was
+  previously optional at runtime despite being required by the `TestTeamConfig` type). A hand-written
+  JS config that omits `modules` now fails fast with a clear error instead of a later `TypeError`.
+- **BREAKING (report upload):** Azure Blob report containers are now created **private** by default.
+  Anonymous public read (the previous behavior) requires the explicit new `publicAccess: true` upload
+  option — test reports can contain screenshots/logs with secrets or PII.
+- Removed the unused `core/multi-browser.ts` module: it labeled findings `[chromium]`/`[firefox]`/
+  `[webkit]` without ever switching engines and was wired nowhere.
+- `Phase` type extended with `exploratory`; orchestrator `PHASE_DISPATCH`, tier gating, and CLI
+  `--phase` help updated accordingly.
+- `registry.ts` updated with imports, tier mapping (85 → pro, 86 → enterprise), and instantiation for
+  agents 85-86.
+
+## [3.1.0] - 2026-03-31
+
+### Added
+- **Taxonomy Expansion** — 14 new agents (71-84), expanding from 70 to 84 total agents
+- **Functional Testing (6 agents):**
+  - Unit Testing Agent (71) — generic multi-framework unit test runner (Vitest, Jest, Mocha, pytest)
+  - Integration Testing Agent (72) — discovers and runs integration tests across monorepo packages
+  - System Testing Agent (73) — full system health validation via HTTP endpoint probing
+  - Acceptance Testing Agent (74) — BDD/Given-When-Then acceptance criteria execution via Playwright
+  - Sanity Testing Agent (75) — 30-second quick-check agent for app loads, auth, nav, API health
+  - Regression Testing Agent (76) — git-diff-aware test selection, runs only tests affected by changes
+- **Non-Functional Testing (5 agents):**
+  - Browser Load Testing Agent (77) — concurrent Playwright browser sessions with p50/p95/p99 reporting
+  - Stress Testing Agent (78) — escalating HTTP load to find breaking point and degradation threshold
+  - Endurance Testing Agent (79) — 15-minute soak test monitoring latency drift, memory growth, error spikes
+  - Usability Testing Agent (80) — AI-powered UX analysis checking target sizes, font sizes, form labels
+  - Compatibility Testing Agent (81) — cross-browser × viewport matrix testing (chromium/firefox/webkit)
+- **Testing Approach (2 agents):**
+  - Exploratory Testing Agent (82) — AI-driven free exploration with adversarial input injection
+  - Static Analysis Agent (83) — parallel ESLint, TypeScript strict, npm audit, and complexity checks
+- **Governance (1 agent):**
+  - Governance Testing Agent (84) — EZRA-integrated standards/security/compliance governance checks
+- Sanity (75) and Static Analysis (83) agents added to Alpha phase for fast feedback
+- Agents 71-84 added to Beta and UAT phase dispatch (excludes 78/82 from UAT — too destructive)
+- Agents 71-77, 79-81, 83-84 marked parallel-safe (78 stress, 82 exploratory excluded)
+- All 14 new agents classified as advisory (non-blocking) in default configuration
+- Detailed .mdx documentation pages for all 14 new agents
+- Updated docs.json navigation, licensing page, and USER-MANUAL with new agent descriptions
+
+### Changed
+- Agent count updated from 70 to 84 across README, package.json, licensing, and all config files
+- Pro tier expanded: now includes 40 agents (was 26)
+- Enterprise tier expanded: now includes 44 agents (was 36)
+- PHASE_DISPATCH and PARALLEL_SAFE updated in orchestrator.ts
+- registry.ts updated with imports, tier mapping, and instantiation for agents 71-84
+
 ## [3.0.0] - 2026-03-30
 
 ### Added
 - **Total Recall integration** — persistent memory for findings history and corrections learning across runs
-- **Agent-MVP integration** — reputation scoring, tier progression, coaching flags for all 70 agents
+- **Agent-MVP integration** — reputation scoring, tier progression, coaching flags for all 84 agents
 - **MAH integration** — Multi-Agent Hub support with 100-agent limit, CustomExecutor, code-execution skills
 - **Execution Bridge** — new `bridge/` module with pluggable executors:
   - `PlaywrightPool` — reusable browser instance pool (max 3 concurrent)
@@ -100,7 +260,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - 595 unit tests
 - TypeScript strict mode throughout with full type safety
 
-[3.0.0]: https://github.com/BAS-More/E2E-Tester/compare/v2.0.0...HEAD
-[2.0.0]: https://github.com/BAS-More/E2E-Tester/compare/v1.1.0...v2.0.0
-[1.1.0]: https://github.com/BAS-More/E2E-Tester/compare/v1.0.0...v1.1.0
-[1.0.0]: https://github.com/BAS-More/E2E-Tester/releases/tag/v1.0.0
+[3.1.0]: https://github.com/BAS-More/TestTeam/compare/v3.0.0...HEAD
+[3.0.0]: https://github.com/BAS-More/TestTeam/compare/v2.0.0...v3.0.0
+[2.0.0]: https://github.com/BAS-More/TestTeam/compare/v1.1.0...v2.0.0
+[1.1.0]: https://github.com/BAS-More/TestTeam/compare/v1.0.0...v1.1.0
+[1.0.0]: https://github.com/BAS-More/TestTeam/releases/tag/v1.0.0

package/README.md

@@ -5,7 +5,7 @@
 <h1 align="center">TestTeam</h1>
 
 <p align="center">
-  <strong>70-agent AI testing orchestration framework</strong>
+  <strong>120-agent AI testing orchestration framework</strong>
 </p>
 
 <p align="center">
@@ -18,7 +18,7 @@
 
 ---
 
-Autonomous multi-phase testing pipeline with 70 learning agents. Runs Alpha through Release with quality gates, self-healing fix loops, reputation scoring, persistent memory, and zero manual intervention.
+Autonomous multi-phase testing pipeline with 120 learning agents. Runs Alpha through Release (plus an opt-in Exploratory pass) with quality gates, self-healing fix loops, reputation scoring, persistent memory, and zero manual intervention.
 
 ## Quick Start
 
@@ -37,8 +37,8 @@ The init wizard auto-detects your framework, test runner, and scaffolds configur
 
 ## Why TestTeam
 
-- **4-phase pipeline** -- Alpha, Beta, UAT, Release with quality gates that block promotion on failure
-- **70 specialized agents** -- each owns a single testing concern (a11y, security, perf, visual regression, chaos, load testing, compliance, and more)
+- **4-phase pipeline + Exploratory** -- Alpha, Beta, UAT, Release with quality gates that block promotion on failure, plus an opt-in autonomous Exploratory pass
+- **120 specialized agents** -- each owns a single testing concern (a11y, security, perf, visual regression, chaos, load testing, compliance, English-first E2E via Stagehand, autonomous exploration via Browser-Use, and more)
 - **Self-healing fix loop** -- Healer and Fixer agents attempt automatic remediation before gate evaluation
 - **Visual regression** -- pixel-level screenshot diffing with baseline management
 - **Cost-controlled** -- per-run and per-agent budget limits with configurable abort/alert policies
@@ -53,24 +53,24 @@ The init wizard auto-detects your framework, test runner, and scaffolds configur
 | 3 | Test Generator | Alpha | Free |
 | 4 | Unit Runner | Alpha | Free |
 | 5 | Browser Crawler | Alpha, Beta, UAT | Free |
-| 6 | API Exerciser | Beta, UAT | Free |
-| 7 | Security Scout | Beta | Free |
-| 8 | A11y Guardian | Beta | Free |
-| 9 | Healer | Fix Loop | Pro |
-| 10 | Reporter | Release | Pro |
-| 11 | Fixer | Fix Loop | Pro |
+| 6 | API Exerciser | Beta, UAT | Pro |
+| 7 | Security Scout | Beta | Pro |
+| 8 | A11y Guardian | Beta | Pro |
+| 9 | Healer | Fix Loop | Free |
+| 10 | Reporter | Release | Free |
+| 11 | Fixer | Fix Loop | Free |
 | 12 | UX Inspector | Beta, UAT | Pro |
 | 13 | Performance Profiler | Beta, UAT | Pro |
-| 14 | Data Integrity Auditor | Beta, UAT | Pro |
+| 14 | Data Integrity Auditor | Beta, UAT | Enterprise |
 | 15 | Regression Sentinel | Beta, UAT | Pro |
 | 16 | Chaos Agent | Beta | Enterprise |
 | 17 | Documentation Validator | UAT | Enterprise |
 | 18 | Integration Watchdog | Beta, UAT | Enterprise |
 | 19 | Tenant Isolation Auditor | Beta, UAT | Enterprise |
 | 20 | Workflow Completion Tester | UAT | Enterprise |
-| 21 | State/Session Tester | Beta, UAT | Enterprise |
-| 22 | Email/Notification Verifier | Beta, UAT | Enterprise |
-| 23 | Migration Tester | Alpha | Enterprise |
+| 21 | State/Session Tester | Beta, UAT | Pro |
+| 22 | Email & Notification Verifier | Beta, UAT | Pro |
+| 23 | Migration Tester | Alpha | Pro |
 | 24 | Signup & Onboarding Tester | Alpha | Pro |
 | 25 | CRUD Flow Tester | Beta, UAT | Pro |
 | 26 | Form Validator | Beta, UAT | Pro |
@@ -107,7 +107,7 @@ The init wizard auto-detects your framework, test runner, and scaffolds configur
 | 57 | Export Tester | Beta, UAT | Enterprise |
 | 58 | Payment Flow Tester | Beta, UAT | Enterprise |
 | 59 | SSL/TLS Auditor | Beta, UAT | Enterprise |
-| 60 | DNS/CDN Tester | Beta, UAT | Enterprise |
+| 60 | DNS & CDN Tester | Beta, UAT | Enterprise |
 | 61 | Docker Health Checker | Beta, UAT | Enterprise |
 | 62 | Env Config Validator | Alpha, Beta, UAT | Pro |
 | 63 | Log Quality Auditor | Beta, UAT | Enterprise |
@@ -118,6 +118,78 @@ The init wizard auto-detects your framework, test runner, and scaffolds configur
 | 68 | Dead Code Detector | Alpha, Beta, UAT | Pro |
 | 69 | Type Safety Auditor | Alpha, Beta, UAT | Pro |
 | 70 | Complexity Analyzer | Alpha, Beta, UAT | Pro |
+| 71 | Unit Testing Agent | Beta, UAT | Pro |
+| 72 | Integration Testing Agent | Beta, UAT | Pro |
+| 73 | System Testing Agent | Beta, UAT | Enterprise |
+| 74 | Acceptance Testing Agent | Beta, UAT | Pro |
+| 75 | Sanity Testing Agent | Alpha, Beta, UAT | Pro |
+| 76 | Regression Testing Agent | Beta, UAT | Pro |
+| 77 | Browser Load Testing Agent | Beta, UAT | Pro |
+| 78 | Stress Testing Agent | Beta | Enterprise |
+| 79 | Endurance Testing Agent | Beta, UAT | Enterprise |
+| 80 | Usability Testing Agent | Beta, UAT | Pro |
+| 81 | Compatibility Testing Agent | Beta, UAT | Pro |
+| 82 | Exploratory Testing Agent | Beta | Enterprise |
+| 83 | Static Analysis Agent | Alpha, Beta, UAT | Pro |
+| 84 | Governance Testing Agent | Beta, UAT | Enterprise |
+| 85 | Stagehand Agent | Beta, UAT | Pro |
+| 86 | Browser-Use Agent | Exploratory | Enterprise |
+| 87 | Connection Mapper | Alpha | Free |
+| 88 | Localhost Walkthrough | Alpha | Free |
+| 89 | Repair & Retest | Alpha | Free |
+| 90 | Response Shape Validator | Alpha | Free |
+| 91 | Boundary Fuzzer (opt-in) | Alpha | Free |
+| 92 | Repair Simulator | Alpha | Pro |
+| 93 | Env Var Auditor | Alpha | Free |
+| 94 | Schema Validator | Alpha | Free |
+| 95 | API Contract Drift | Alpha | Free |
+| 96 | Cookie Security Auditor | Alpha | Free |
+| 97 | Healthcheck Validator | Alpha | Free |
+| 98 | CORS / CSP Auditor | Alpha | Free |
+| 99 | Logging Hygiene Auditor | Alpha | Free |
+| 100 | Error-Handling Auditor | Alpha | Free |
+| 101 | Rate-Limit Auditor (opt-in) | Alpha | Free |
+| 102 | Dockerfile Auditor | Alpha | Free |
+| 103 | CI Workflow Auditor | Alpha | Free |
+| 104 | N+1 Query Detector | Alpha | Free |
+| 105 | Unbounded Query Auditor | Alpha | Free |
+| 106 | Hardcoded Config Auditor | Alpha | Free |
+| 107 | Open-Redirect Detector | Alpha | Free |
+| 108 | SQL Injection Detector | Alpha | Free |
+| 109 | Path Traversal Detector | Alpha | Free |
+| 110 | Mass-Assignment Detector | Alpha | Free |
+| 111 | Dynamic Code Execution Detector | Alpha | Free |
+| 112 | Cross-File Taint Tracker | Alpha | Free |
+| 113 | Response Contract Auditor | Alpha | Free |
+| 114 | Static A11y Auditor | Alpha | Free |
+| 115 | Multi-Hop Taint Tracker | Alpha | Free |
+| 116 | Runtime Contract Capture | Alpha | Free |
+| 117 | ARIA Rule Engine | Alpha | Free |
+| 118 | Insecure Crypto Auditor | Alpha | Free |
+| 119 | Hardcoded Secrets Scanner | Alpha | Free |
+| 120 | Async Safety Auditor | Alpha | Free |
+
+### Browser-agent layers (Sprint 4)
+
+- **Stagehand Agent (#85)** — deterministic E2E in plain English. Runs locally
+  (no Browserbase cloud lock-in unless `BROWSERBASE_LOCAL=false` is set).
+  Hard cost guard caps each test at $0.10 of LLM spend. See
+  [`docs/agents/stagehand.md`](docs/agents/stagehand.md).
+- **Browser-Use Agent (#86)** — autonomous exploratory pass via a Python
+  FastAPI sidecar (`agents/browser-use-sidecar/server.py`). Runs in the new
+  `exploratory` phase, gated by `TF_BROWSER_USE_ENABLED=1`, hard-capped at
+  10 000 LLM tokens per run. See [`docs/agents/browser-use.md`](docs/agents/browser-use.md).
+
+## v3.2.0 — Dashboard & Scale
+
+TestTeam v3.2.0 makes every built capability visible and grows the roster to 120 agents:
+
+- **Dashboard layer-posture views (S2–S10)** — each composite/operational layer is surfaced from a run's persisted findings via a bridge `GET` endpoint + reader: Master-Knowledge blast-radius, the Sentinel (security), the Inspector (compliance), the Border Guard (api-contract), the Designer (a11y/usability), the Tech-Debt tracker, the Data-Integrity notary, the Reliability cluster (Tester verdict + DR resilience), and a structural Loop-Engine cockpit. Every view is honestly **run-derived** and discloses what needs live inputs — it never fabricates a posture.
+- **Roster → 120 agents** (agents 85–120) plus browser-agent layers.
+- **License go-live** — the EC-P-256 trust anchor is baked into the shipped build, enabling paid-tier verification.
+- **Leaner package** — the published npm artifact ships the compiled `dist/` only (no raw TypeScript source or tests).
+
+See [`CHANGELOG.md`](CHANGELOG.md) for the full history.
 
 ## v3.0.0 — Learning Agents
 
@@ -148,9 +220,9 @@ Each phase dispatches its agents, evaluates findings against blocking/advisory c
 
 | Plan | Price | Agents | Support |
 |------|-------|--------|---------|
-| **Free** | $0 | 8 agents | Community |
-| **Pro** | $49/mo | 34 agents | Priority email |
-| **Enterprise** | $199/mo | All 70 agents + custom | Dedicated support, SLA |
+| **Free** | $0 | 41 agents | Community |
+| **Pro** | $299/mo | 78 agents | Priority email |
+| **Enterprise** | $999/mo | All 120 agents + custom | Dedicated support, SLA |
 
 All plans include the CLI, init wizard, and config validation. Pro and Enterprise unlock the fix loop, Reporter, and advanced agents.
 
@@ -187,7 +259,8 @@ Commands:
   init                                     Initialize TestTeam
 
 Options:
-  --phase <alpha|beta|uat|release|all>     Phase to run
+  --phase <alpha|beta|uat|release|exploratory|all>
+                                           Phase to run (exploratory is opt-in)
   --dry-run                                Show dispatch plan without executing
   --agent <id>                             Run a single agent by ID
   --config <path>                          Path to config file

package/bin/testteam.js

@@ -1,10 +1,38 @@
 #!/usr/bin/env node
 import { execFileSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { dirname, join } from 'node:path';
 
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-const cli = join(__dirname, '..', 'core', 'cli.ts');
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const args = process.argv.slice(2);
 
-execFileSync('npx', ['tsx', cli, ...process.argv.slice(2)], { stdio: 'inherit' });
+// Preferred path (what published consumers get): run the COMPILED dist under
+// plain `node`. `npm run build` + scripts/fix-dist-esm.mjs make `dist/core/cli.js`
+// directly node-runnable (guarded by `verify:dist-esm`), and the config loader
+// transpiles a user's `.ts` config with esbuild — so the CLI needs NO `tsx` at
+// runtime and works even when the install path contains a space (running TS
+// source via tsx does not). Fall back to the TS source via the dev-only tsx for
+// the dev tree (where `dist/` may not be built yet).
+const distCli = join(__dirname, '..', 'dist', 'core', 'cli.js');
+const srcCli = join(__dirname, '..', 'core', 'cli.ts');
+const localTsx = join(__dirname, '..', 'node_modules', 'tsx', 'dist', 'cli.mjs');
+
+try {
+  if (existsSync(distCli)) {
+    // Shipped path: compiled dist, plain node, no `tsx` needed.
+    execFileSync(process.execPath, [distCli, ...args], { stdio: 'inherit' });
+  } else if (existsSync(localTsx)) {
+    // Dev tree without a build: run the TS source through the local tsx.
+    execFileSync(process.execPath, [localTsx, srcCli, ...args], { stdio: 'inherit' });
+  } else {
+    // Last resort (dev tree, no dist AND no local tsx): let npx fetch tsx. `shell`
+    // is required so Windows resolves the `npx` -> `npx.cmd` shim; the args are
+    // the user's own CLI args, not a network trust boundary.
+    execFileSync('npx', ['tsx', srcCli, ...args], { stdio: 'inherit', shell: true });
+  }
+} catch (err) {
+  // Preserve the child's exit code; don't surface a Node stack trace for a
+  // normal non-zero CLI exit.
+  process.exit(typeof err?.status === 'number' ? err.status : 1);
+}

package/dist/agents/01-analyst.d.ts

@@ -1,5 +1,5 @@
-import { BaseAgent } from './base-agent';
-import type { Finding } from '../core/types';
+import { BaseAgent } from './base-agent.js';
+import type { Finding } from '../core/types.js';
 export declare class AnalystAgent extends BaseAgent {
     readonly agentId = 1;
     readonly agentName = "Analyst";

package/dist/agents/01-analyst.js

@@ -2,7 +2,7 @@ import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
 import { writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
-import { BaseAgent } from './base-agent';
+import { BaseAgent } from './base-agent.js';
 const execFileAsync = promisify(execFile);
 /** Shared-dependency file patterns whose changes elevate all modules to critical risk */
 const SHARED_DEPENDENCY_PATTERNS = ['AuthContext', 'App.tsx', 'router'];

package/dist/agents/02-seed-architect.d.ts

@@ -1,5 +1,5 @@
-import { BaseAgent } from './base-agent';
-import type { Finding } from '../core/types';
+import { BaseAgent } from './base-agent.js';
+import type { Finding } from '../core/types.js';
 export declare class SeedArchitectAgent extends BaseAgent {
     readonly agentId = 2;
     readonly agentName = "Seed Architect";

package/dist/agents/02-seed-architect.js

@@ -1,7 +1,7 @@
 import { existsSync } from 'node:fs';
 import { join } from 'node:path';
-import { BaseAgent } from './base-agent';
-import { validateSeedCompleteness } from '../helpers/seed-validator';
+import { BaseAgent } from './base-agent.js';
+import { validateSeedCompleteness } from '../helpers/seed-validator.js';
 export class SeedArchitectAgent extends BaseAgent {
     agentId = 2;
     agentName = 'Seed Architect';

package/dist/agents/03-test-generator.d.ts

@@ -1,5 +1,5 @@
-import type { Finding } from '../core/types';
-import { BaseAgent } from './base-agent';
+import type { Finding } from '../core/types.js';
+import { BaseAgent } from './base-agent.js';
 export declare class TestGeneratorAgent extends BaseAgent {
     readonly agentId = 3;
     readonly agentName = "Test Generator";

package/dist/agents/03-test-generator.js

@@ -1,7 +1,7 @@
 import { readdir, readFile, stat } from 'node:fs/promises';
 import { join } from 'path';
-import { BaseAgent } from './base-agent';
-import { validateCodeQuality } from '../helpers/quality-gate';
+import { BaseAgent } from './base-agent.js';
+import { validateCodeQuality } from '../helpers/quality-gate.js';
 const COVERAGE_DIR = 'coverage';
 const GENERATED_TESTS_DIR = 'tests/generated';
 const VITEST_CONFIG_PATHS = ['vitest.config.ts', 'vitest.config.js', 'vite.config.ts'];

package/dist/agents/04-unit-runner.d.ts

@@ -1,5 +1,5 @@
-import type { Finding } from '../core/types';
-import { BaseAgent } from './base-agent';
+import type { Finding } from '../core/types.js';
+import { BaseAgent } from './base-agent.js';
 export declare class UnitRunnerAgent extends BaseAgent {
     readonly agentId = 4;
     readonly agentName = "Unit Runner";

package/dist/agents/04-unit-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"04-unit-runner.d.ts","sourceRoot":"","sources":["../../agents/04-unit-runner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAuDzC,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,QAAQ,CAAC,OAAO,KAAK;IACrB,QAAQ,CAAC,SAAS,iBAAiB;cAEnB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAe1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;CAkF9C"}
+{"version":3,"file":"04-unit-runner.d.ts","sourceRoot":"","sources":["../../agents/04-unit-runner.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAA2B,MAAM,cAAc,CAAC;AAuDlE,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,QAAQ,CAAC,OAAO,KAAK;IACrB,QAAQ,CAAC,SAAS,iBAAiB;cAEnB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAe1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;CA6F9C"}

package/dist/agents/04-unit-runner.js

@@ -1,6 +1,7 @@
 import { execFile } from 'child_process';
+import { existsSync } from 'node:fs';
 import { join } from 'path';
-import { BaseAgent } from './base-agent';
+import { BaseAgent, PreconditionNotMetError } from './base-agent.js';
 function execFileAsync(file, args, cwd) {
     return new Promise((resolve, reject) => {
         execFile(file, args, { maxBuffer: 10 * 1024 * 1024, shell: true, cwd: cwd ?? process.cwd() }, (error, stdout, stderr) => {
@@ -38,12 +39,20 @@ export class UnitRunnerAgent extends BaseAgent {
     }
     async execute() {
         const findings = [];
-        for (const suite of DEFAULT_SUITE_CONFIGS) {
+        const projectRoot = this.config.projectRoot ?? process.cwd();
+        // Only run suites whose working directory actually exists. The defaults
+        // include monorepo packages (apps/api, apps/workers) that aren't present in
+        // every project; spawning vitest in a missing dir is a precondition miss,
+        // not a real test failure.
+        const runnable = DEFAULT_SUITE_CONFIGS.filter((suite) => !suite.cwd || existsSync(join(projectRoot, suite.cwd)));
+        if (runnable.length === 0) {
+            throw new PreconditionNotMetError('No runnable unit-test suites found (none of the configured suite directories exist).');
+        }
+        for (const suite of runnable) {
             const reportPath = join(this.runDir, `vitest-${suite.label}-report.json`);
             let stdout = '';
             let stderr = '';
             try {
-                const projectRoot = this.config.projectRoot ?? process.cwd();
                 const suiteCwd = suite.cwd ? join(projectRoot, suite.cwd) : projectRoot;
                 ({ stdout, stderr } = await execFileAsync('npx', suite.args, suiteCwd));
             }

package/dist/agents/04-unit-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"04-unit-runner.js","sourceRoot":"","sources":["../../agents/04-unit-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAoBzC,SAAS,aAAa,CACpB,IAAY,EACZ,IAAc,EACd,GAAY;IAEZ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CACN,IAAI,EACJ,IAAI,EACJ,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,EACvE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,yEAAyE;YACzE,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBACrB,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AASD,MAAM,qBAAqB,GAAkB;IAC3C,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,iBAAiB,CAAC,EAAE;IAC7D,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,iBAAiB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE;IAC7E,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,iBAAiB,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE;CACtF,CAAC;AAEF,MAAM,OAAO,eAAgB,SAAQ,SAAS;IACnC,OAAO,GAAG,CAAC,CAAC;IACZ,SAAS,GAAG,aAAa,CAAC;IAEzB,KAAK,CAAC,SAAS;QACvB,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,iFAAiF;QACjF,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;YAChE,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;QACtG,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;YAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,KAAK,CAAC,KAAK,cAAc,CAAC,CAAC;YAE1E,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;gBACxE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,WAAW,KAAK,CAAC,KAAK,aAAa;oBACvC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,cAAc,KAAK,CAAC,KAAK,EAAE;oBACnC,WAAW,EAAE,+BAA+B,KAAK,CAAC,KAAK,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBAChH,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,CAAC,WAAW,CAAC;gBACf,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,0BAA0B,KAAK,CAAC,KAAK,QAAQ;aAC3D,CAAC,CAAC;YAEH,IAAI,MAAM,GAA4B,IAAI,CAAC;YAC3C,IAAI,CAAC;gBACH,+CAA+C;gBAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;oBACrB,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAqB,CAAC;gBACnE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,WAAW,KAAK,CAAC,KAAK,cAAc;oBACxC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,cAAc,KAAK,CAAC,KAAK,EAAE;oBACnC,WAAW,EAAE,iDAAiD,KAAK,CAAC,KAAK,cAAc,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;iBAC9G,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,WAAW,KAAK,CAAC,KAAK,YAAY;oBACtC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,cAAc,KAAK,CAAC,KAAK,EAAE;oBACnC,WAAW,EAAE,qCAAqC,KAAK,CAAC,KAAK,cAAc,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;iBAClG,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACzD,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAC3D,CAAC;YAEF,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;gBAC/C,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1E,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,KAAK,KAAK,CAAC,KAAK,IAAI,MAAM,EAAE;oBAChC,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,cAAc,KAAK,CAAC,KAAK,EAAE;oBACnC,WAAW,EAAE,gBAAgB,eAAe,CAAC,QAAQ,EAAE;oBACvD,UAAU,EAAE,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;iBACvD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}
+{"version":3,"file":"04-unit-runner.js","sourceRoot":"","sources":["../../agents/04-unit-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAoBlE,SAAS,aAAa,CACpB,IAAY,EACZ,IAAc,EACd,GAAY;IAEZ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CACN,IAAI,EACJ,IAAI,EACJ,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,EACvE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,yEAAyE;YACzE,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBACrB,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AASD,MAAM,qBAAqB,GAAkB;IAC3C,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,iBAAiB,CAAC,EAAE;IAC7D,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,iBAAiB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE;IAC7E,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,iBAAiB,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE;CACtF,CAAC;AAEF,MAAM,OAAO,eAAgB,SAAQ,SAAS;IACnC,OAAO,GAAG,CAAC,CAAC;IACZ,SAAS,GAAG,aAAa,CAAC;IAEzB,KAAK,CAAC,SAAS;QACvB,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,iFAAiF;QACjF,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;YAChE,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;QACtG,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAE7D,wEAAwE;QACxE,4EAA4E;QAC5E,0EAA0E;QAC1E,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAC3C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAClE,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,uBAAuB,CAAC,sFAAsF,CAAC,CAAC;QAC5H,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,KAAK,CAAC,KAAK,cAAc,CAAC,CAAC;YAE1E,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;gBACxE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,WAAW,KAAK,CAAC,KAAK,aAAa;oBACvC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,cAAc,KAAK,CAAC,KAAK,EAAE;oBACnC,WAAW,EAAE,+BAA+B,KAAK,CAAC,KAAK,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBAChH,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,CAAC,WAAW,CAAC;gBACf,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,0BAA0B,KAAK,CAAC,KAAK,QAAQ;aAC3D,CAAC,CAAC;YAEH,IAAI,MAAM,GAA4B,IAAI,CAAC;YAC3C,IAAI,CAAC;gBACH,+CAA+C;gBAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;oBACrB,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAqB,CAAC;gBACnE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,WAAW,KAAK,CAAC,KAAK,cAAc;oBACxC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,cAAc,KAAK,CAAC,KAAK,EAAE;oBACnC,WAAW,EAAE,iDAAiD,KAAK,CAAC,KAAK,cAAc,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;iBAC9G,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,WAAW,KAAK,CAAC,KAAK,YAAY;oBACtC,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,cAAc,KAAK,CAAC,KAAK,EAAE;oBACnC,WAAW,EAAE,qCAAqC,KAAK,CAAC,KAAK,cAAc,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;iBAClG,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACzD,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAC3D,CAAC;YAEF,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;gBAC/C,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1E,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,KAAK,KAAK,CAAC,KAAK,IAAI,MAAM,EAAE;oBAChC,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,cAAc,KAAK,CAAC,KAAK,EAAE;oBACnC,WAAW,EAAE,gBAAgB,eAAe,CAAC,QAAQ,EAAE;oBACvD,UAAU,EAAE,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;iBACvD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/agents/05-browser-crawler.d.ts

@@ -1,5 +1,5 @@
-import type { Finding } from '../core/types';
-import { BaseAgent } from './base-agent';
+import type { Finding } from '../core/types.js';
+import { BaseAgent } from './base-agent.js';
 export declare class BrowserCrawlerAgent extends BaseAgent {
     readonly agentId = 5;
     readonly agentName = "Browser Crawler";

package/dist/agents/05-browser-crawler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"05-browser-crawler.d.ts","sourceRoot":"","sources":["../../agents/05-browser-crawler.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAqBzC,qBAAa,mBAAoB,SAAQ,SAAS;IAChD,QAAQ,CAAC,OAAO,KAAK;IACrB,QAAQ,CAAC,SAAS,qBAAqB;cAEvB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAa1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAgB/B,YAAY;YA6IZ,cAAc;YA0Gd,WAAW;YAmGX,UAAU;IAgGxB;;;OAGG;YACW,eAAe;IAgE7B;;;;OAIG;YACW,qBAAqB;IAoGnC;;;;OAIG;YACW,kBAAkB;CA+GjC"}
+{"version":3,"file":"05-browser-crawler.d.ts","sourceRoot":"","sources":["../../agents/05-browser-crawler.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAA2B,MAAM,cAAc,CAAC;AAsBlE,qBAAa,mBAAoB,SAAQ,SAAS;IAChD,QAAQ,CAAC,OAAO,KAAK;IACrB,QAAQ,CAAC,SAAS,qBAAqB;cAEvB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAe1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAgB/B,YAAY;YAgJZ,cAAc;YA0Gd,WAAW;YAsGX,UAAU;IAmGxB;;;OAGG;YACW,eAAe;IAgE7B;;;;OAIG;YACW,qBAAqB;IAoGnC;;;;OAIG;YACW,kBAAkB;CA+GjC"}