@avi770/testteam 3.0.0 → 3.2.0

package/dist/agents/82-exploratory-testing-agent.js

@@ -0,0 +1,345 @@
+import { writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { BaseAgent } from './base-agent.js';
+import { launchOptions, startScreencast } from '../core/run-mode/index.js';
+import { resolveEnvironment } from '../helpers/env-resolver.js';
+import { login } from '../helpers/navigation.js';
+/** Maximum exploration time (5 minutes). */
+const EXPLORATION_TIMEOUT_MS = 5 * 60 * 1000;
+/** Max pages to visit. */
+const MAX_PAGES = 50;
+/** Common adversarial inputs to try in form fields. */
+const ADVERSARIAL_INPUTS = [
+    '', // Empty
+    ' ', // Whitespace only
+    'a'.repeat(10_000), // Very long string
+    '<script>alert(1)</script>', // XSS payload
+    "'; DROP TABLE users; --", // SQL injection
+    '{{7*7}}', // SSTI
+    '../../../etc/passwd', // Path traversal
+    'null', // Null string
+    '-1', // Negative number
+    '0', // Zero
+    '999999999999999999', // Large number
+    'test@test.com\nBcc: attacker@evil.com', // Email header injection
+    '"><img src=x onerror=alert(1)>', // XSS via attributes
+];
+export class ExploratoryTestingAgent extends BaseAgent {
+    agentId = 82;
+    agentName = 'Exploratory Testing Agent';
+    baseUrl = '';
+    async preFlight() {
+        const { env } = await resolveEnvironment(this.config, this.phase);
+        this.baseUrl = env.baseUrl;
+    }
+    async execute() {
+        const findings = [];
+        const actions = [];
+        const visited = new Set();
+        const pageVisits = [];
+        const { chromium } = await import('playwright');
+        let browser = null;
+        let page = null;
+        let screencast = null;
+        try {
+            browser = await chromium.launch(launchOptions(this.runMode));
+            page = await browser.newPage();
+            screencast = this.frames ? startScreencast(page, this.frames) : null;
+            const consoleErrors = [];
+            const networkErrors = [];
+            // Collect console errors
+            page.on('console', msg => {
+                if (msg.type() === 'error') {
+                    consoleErrors.push(msg.text());
+                }
+            });
+            // Collect network failures
+            page.on('response', response => {
+                if (response.status() >= 500) {
+                    networkErrors.push(`${response.status()} ${response.url()}`);
+                }
+            });
+            // Login
+            const rawLoginUrl = this.config.auth.loginUrl ?? '/login';
+            const loginUrl = rawLoginUrl.startsWith('http') ? rawLoginUrl : `${this.baseUrl}${rawLoginUrl}`;
+            const credentials = Object.values(this.config.auth.credentials ?? {})[0];
+            if (credentials) {
+                await login(page, credentials, loginUrl);
+                actions.push({ timestamp: Date.now(), type: 'navigate', target: loginUrl, detail: 'Login completed' });
+            }
+            const startTime = Date.now();
+            // Phase 1: Discover all reachable pages
+            const links = await this.discoverLinks(page);
+            actions.push({ timestamp: Date.now(), type: 'observe', target: page.url(), detail: `Discovered ${links.length} links` });
+            // Visit each discovered page
+            for (const link of links) {
+                if (Date.now() - startTime > EXPLORATION_TIMEOUT_MS)
+                    break;
+                if (visited.size >= MAX_PAGES)
+                    break;
+                if (visited.has(link))
+                    continue;
+                visited.add(link);
+                consoleErrors.length = 0;
+                networkErrors.length = 0;
+                try {
+                    const response = await page.goto(link, { waitUntil: 'domcontentloaded', timeout: 10_000 });
+                    await page.waitForLoadState('networkidle', { timeout: 5_000 }).catch(() => { });
+                    const title = await page.title();
+                    const statusCode = response?.status() ?? null;
+                    pageVisits.push({
+                        url: link,
+                        title,
+                        consoleErrors: [...consoleErrors],
+                        networkErrors: [...networkErrors],
+                        statusCode,
+                    });
+                    actions.push({ timestamp: Date.now(), type: 'navigate', target: link, detail: `HTTP ${statusCode}` });
+                    // Report anomalies
+                    if (statusCode !== null && statusCode >= 500) {
+                        actions.push({ timestamp: Date.now(), type: 'observe', target: link, detail: `Server error`, anomaly: `HTTP ${statusCode}` });
+                        findings.push({
+                            id: `${this.agentId}-500-${link.replace(/\W/g, '_').slice(0, 40)}`,
+                            type: 'code-bug-logic',
+                            severity: 'high',
+                            agentId: this.agentId,
+                            module: 'exploratory',
+                            description: `Server error (HTTP ${statusCode}) on page: ${link}`,
+                        });
+                    }
+                    if (consoleErrors.length > 0) {
+                        findings.push({
+                            id: `${this.agentId}-console-${link.replace(/\W/g, '_').slice(0, 40)}`,
+                            type: 'code-bug-logic',
+                            severity: 'medium',
+                            agentId: this.agentId,
+                            module: 'exploratory',
+                            description: `${consoleErrors.length} console error(s) on ${link}: ${consoleErrors[0]?.slice(0, 200)}`,
+                            consoleError: consoleErrors.join('\n'),
+                        });
+                    }
+                    // Phase 2: Try adversarial inputs on forms
+                    const hasForms = await page.evaluate(() => document.querySelectorAll('form, input, textarea').length > 0);
+                    if (hasForms) {
+                        const formFindings = await this.tryAdversarialInputs(page, link);
+                        findings.push(...formFindings);
+                    }
+                    // Phase 3: Click all buttons
+                    const buttonFindings = await this.clickButtons(page, link);
+                    findings.push(...buttonFindings);
+                }
+                catch (err) {
+                    actions.push({
+                        timestamp: Date.now(),
+                        type: 'navigate',
+                        target: link,
+                        detail: `Error: ${err instanceof Error ? err.message : String(err)}`,
+                        anomaly: 'navigation-failure',
+                    });
+                }
+            }
+            // Phase 4: Test edge cases
+            const edgeCaseFindings = await this.testEdgeCases(page);
+            findings.push(...edgeCaseFindings);
+        }
+        finally {
+            screencast?.stop();
+            if (page)
+                await page.close().catch(() => undefined);
+            if (browser)
+                await browser.close().catch(() => undefined);
+        }
+        // Write session trace
+        const tracePath = join(this.runDir, 'exploratory-session-trace.json');
+        const trace = {
+            timestamp: new Date().toISOString(),
+            pagesVisited: visited.size,
+            actionsPerformed: actions.length,
+            findingsCount: findings.length,
+            actions,
+            pageVisits,
+        };
+        await writeFile(tracePath, JSON.stringify(trace, null, 2), 'utf-8').catch(() => { });
+        this.addEvidence({
+            type: 'report',
+            path: tracePath,
+            description: `Exploratory: ${visited.size} pages visited, ${actions.length} actions, ${findings.length} findings`,
+        });
+        return findings;
+    }
+    async discoverLinks(page) {
+        const links = await page.evaluate((baseUrl) => {
+            const anchors = document.querySelectorAll('a[href]');
+            const discovered = [];
+            anchors.forEach(el => {
+                const href = el.getAttribute('href');
+                if (!href)
+                    return;
+                const lowerHref = href.toLowerCase();
+                if (href.startsWith('#') || lowerHref.startsWith('mailto:') || lowerHref.startsWith('tel:') || lowerHref.startsWith('javascript:') || lowerHref.startsWith('data:') || lowerHref.startsWith('vbscript:'))
+                    return;
+                let fullUrl;
+                if (href.startsWith('http')) {
+                    fullUrl = href;
+                }
+                else {
+                    fullUrl = new URL(href, baseUrl).toString();
+                }
+                // Only include same-origin links
+                if (fullUrl.startsWith(baseUrl)) {
+                    discovered.push(fullUrl);
+                }
+            });
+            return [...new Set(discovered)];
+        }, this.baseUrl);
+        // Also add configured module routes
+        for (const module of this.config.modules) {
+            const url = `${this.baseUrl}${module.route}`;
+            if (!links.includes(url)) {
+                links.push(url);
+            }
+        }
+        return links;
+    }
+    async tryAdversarialInputs(page, pageUrl) {
+        const findings = [];
+        const inputs = await page.locator('input:not([type="hidden"]):not([type="submit"]):not([type="button"]):not([type="checkbox"]):not([type="radio"]), textarea').all();
+        if (inputs.length === 0)
+            return findings;
+        // Try a subset of adversarial inputs
+        for (const adversarialInput of ADVERSARIAL_INPUTS.slice(0, 5)) {
+            for (const input of inputs.slice(0, 3)) {
+                try {
+                    await input.fill(adversarialInput);
+                }
+                catch {
+                    // Input may not be interactable
+                    continue;
+                }
+            }
+            // Submit the form
+            const submitBtn = page.locator('button[type="submit"], input[type="submit"]').first();
+            try {
+                // Listen for dialog (alert/confirm/prompt)
+                let dialogAppeared = false;
+                const dialogHandler = () => { dialogAppeared = true; };
+                page.on('dialog', async (dialog) => {
+                    dialogHandler();
+                    await dialog.dismiss();
+                });
+                await submitBtn.click({ timeout: 3_000 });
+                await page.waitForTimeout(1_000);
+                if (dialogAppeared) {
+                    findings.push({
+                        id: `${this.agentId}-dialog-${pageUrl.replace(/\W/g, '_').slice(0, 30)}`,
+                        type: 'code-bug-security',
+                        severity: 'high',
+                        agentId: this.agentId,
+                        module: 'exploratory',
+                        description: `Dialog/alert triggered by adversarial input "${adversarialInput.slice(0, 50)}" on ${pageUrl} — potential XSS vulnerability`,
+                    });
+                }
+                // Check for 500 errors in response
+                page.removeListener('dialog', dialogHandler);
+            }
+            catch {
+                // Submit button not found or not interactable
+            }
+            // Navigate back to original page
+            try {
+                await page.goto(pageUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 });
+            }
+            catch {
+                break; // Can't recover page
+            }
+        }
+        return findings;
+    }
+    async clickButtons(page, pageUrl) {
+        const findings = [];
+        const beforeUrl = page.url();
+        const buttons = await page.locator('button:not([type="submit"]), [role="button"]').all();
+        for (const button of buttons.slice(0, 5)) {
+            try {
+                const consoleErrors = [];
+                const handler = (msg) => {
+                    if (msg.type() === 'error')
+                        consoleErrors.push(msg.text());
+                };
+                page.on('console', handler);
+                await button.click({ timeout: 3_000 });
+                await page.waitForTimeout(500);
+                if (consoleErrors.length > 0) {
+                    const btnText = await button.textContent().catch(() => 'unknown');
+                    findings.push({
+                        id: `${this.agentId}-btn-error-${(btnText ?? '').replace(/\W/g, '_').slice(0, 20)}`,
+                        type: 'code-bug-logic',
+                        severity: 'medium',
+                        agentId: this.agentId,
+                        module: 'exploratory',
+                        description: `Console error after clicking button "${btnText?.trim().slice(0, 50)}" on ${pageUrl}: ${consoleErrors[0]?.slice(0, 200)}`,
+                    });
+                }
+                page.removeListener('console', handler);
+            }
+            catch {
+                // Button not interactable
+            }
+        }
+        // Navigate back if we moved away
+        if (page.url() !== beforeUrl) {
+            await page.goto(pageUrl, { waitUntil: 'domcontentloaded', timeout: 10_000 }).catch(() => { });
+        }
+        return findings;
+    }
+    async testEdgeCases(page) {
+        const findings = [];
+        // Test back button behavior
+        try {
+            await page.goBack({ timeout: 5_000 });
+            await page.waitForTimeout(500);
+            const statusAfterBack = await page.evaluate(() => document.readyState);
+            if (statusAfterBack !== 'complete') {
+                findings.push({
+                    id: `${this.agentId}-back-button-issue`,
+                    type: 'code-bug-logic',
+                    severity: 'low',
+                    agentId: this.agentId,
+                    module: 'exploratory',
+                    description: `Page did not fully load after back navigation (readyState: ${statusAfterBack})`,
+                });
+            }
+        }
+        catch {
+            // No history to go back to
+        }
+        // Test page refresh
+        try {
+            const beforeUrl = page.url();
+            await page.reload({ timeout: 10_000 });
+            const afterUrl = page.url();
+            if (afterUrl !== beforeUrl && afterUrl.includes('/login')) {
+                findings.push({
+                    id: `${this.agentId}-refresh-redirect`,
+                    type: 'code-bug-logic',
+                    severity: 'medium',
+                    agentId: this.agentId,
+                    module: 'exploratory',
+                    description: `Page refresh caused unexpected redirect from ${beforeUrl} to ${afterUrl}`,
+                });
+            }
+        }
+        catch {
+            findings.push({
+                id: `${this.agentId}-refresh-error`,
+                type: 'code-bug-logic',
+                severity: 'medium',
+                agentId: this.agentId,
+                module: 'exploratory',
+                description: 'Page refresh failed or timed out',
+            });
+        }
+        return findings;
+    }
+}
+//# sourceMappingURL=82-exploratory-testing-agent.js.map

package/dist/agents/82-exploratory-testing-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"82-exploratory-testing-agent.js","sourceRoot":"","sources":["../../agents/82-exploratory-testing-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAyB,MAAM,kBAAkB,CAAC;AAEzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAE9C,4CAA4C;AAC5C,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7C,0BAA0B;AAC1B,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,uDAAuD;AACvD,MAAM,kBAAkB,GAAG;IACzB,EAAE,EAAqC,QAAQ;IAC/C,GAAG,EAAoC,kBAAkB;IACzD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAqB,mBAAmB;IAC1D,2BAA2B,EAAY,cAAc;IACrD,yBAAyB,EAAc,gBAAgB;IACvD,SAAS,EAA8B,OAAO;IAC9C,qBAAqB,EAAmB,iBAAiB;IACzD,MAAM,EAAiC,cAAc;IACrD,IAAI,EAAmC,kBAAkB;IACzD,GAAG,EAAoC,OAAO;IAC9C,oBAAoB,EAAmB,eAAe;IACtD,uCAAuC,EAAE,yBAAyB;IAClE,gCAAgC,EAAO,qBAAqB;CACpD,CAAC;AAkBX,MAAM,OAAO,uBAAwB,SAAQ,SAAS;IAC3C,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,2BAA2B,CAAC;IACzC,OAAO,GAAG,EAAE,CAAC;IAEX,KAAK,CAAC,SAAS;QACvB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,UAAU,GAAgB,EAAE,CAAC;QAEnC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,IAAI,UAAU,GAA4B,IAAI,CAAC;QAE/C,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7D,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC/B,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAErE,MAAM,aAAa,GAAa,EAAE,CAAC;YACnC,MAAM,aAAa,GAAa,EAAE,CAAC;YAEnC,yBAAyB;YACzB,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE;gBACvB,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;oBAC3B,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,2BAA2B;YAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE;gBAC7B,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;oBAC7B,aAAa,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,QAAQ;YACR,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;YAChG,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAEzE,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACzG,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,wCAAwC;YACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,cAAc,KAAK,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC;YAEzH,6BAA6B;YAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,sBAAsB;oBAAE,MAAM;gBAC3D,IAAI,OAAO,CAAC,IAAI,IAAI,SAAS;oBAAE,MAAM;gBACrC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAChC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAElB,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;gBACzB,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;gBAEzB,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC3F,MAAM,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBAE/E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;oBACjC,MAAM,UAAU,GAAG,QAAQ,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC;oBAE9C,UAAU,CAAC,IAAI,CAAC;wBACd,GAAG,EAAE,IAAI;wBACT,KAAK;wBACL,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC;wBACjC,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC;wBACjC,UAAU;qBACX,CAAC,CAAC;oBAEH,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,UAAU,EAAE,EAAE,CAAC,CAAC;oBAEtG,mBAAmB;oBACnB,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;wBAC7C,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,UAAU,EAAE,EAAE,CAAC,CAAC;wBAC9H,QAAQ,CAAC,IAAI,CAAC;4BACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;4BAClE,IAAI,EAAE,gBAAgB;4BACtB,QAAQ,EAAE,MAAM;4BAChB,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,MAAM,EAAE,aAAa;4BACrB,WAAW,EAAE,sBAAsB,UAAU,cAAc,IAAI,EAAE;yBAClE,CAAC,CAAC;oBACL,CAAC;oBAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC7B,QAAQ,CAAC,IAAI,CAAC;4BACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,YAAY,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;4BACtE,IAAI,EAAE,gBAAgB;4BACtB,QAAQ,EAAE,QAAQ;4BAClB,OAAO,EAAE,IAAI,CAAC,OAAO;4BACrB,MAAM,EAAE,aAAa;4BACrB,WAAW,EAAE,GAAG,aAAa,CAAC,MAAM,wBAAwB,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;4BACtG,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;yBACvC,CAAC,CAAC;oBACL,CAAC;oBAED,2CAA2C;oBAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBAC1G,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;wBACjE,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;oBACjC,CAAC;oBAED,6BAA6B;oBAC7B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBAC3D,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;gBAEnC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC;wBACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;wBACrB,IAAI,EAAE,UAAU;wBAChB,MAAM,EAAE,IAAI;wBACZ,MAAM,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;wBACpE,OAAO,EAAE,oBAAoB;qBAC9B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,2BAA2B;YAC3B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;QAErC,CAAC;gBAAS,CAAC;YACT,UAAU,EAAE,IAAI,EAAE,CAAC;YACnB,IAAI,IAAI;gBAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QAED,sBAAsB;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG;YACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,OAAO,CAAC,IAAI;YAC1B,gBAAgB,EAAE,OAAO,CAAC,MAAM;YAChC,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,OAAO;YACP,UAAU;SACX,CAAC;QACF,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAEpF,IAAI,CAAC,WAAW,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,gBAAgB,OAAO,CAAC,IAAI,mBAAmB,OAAO,CAAC,MAAM,aAAa,QAAQ,CAAC,MAAM,WAAW;SAClH,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAA+B;QACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAe,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,UAAU,GAAa,EAAE,CAAC;YAEhC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;gBACnB,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI;oBAAE,OAAO;gBAClB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;oBAAE,OAAO;gBAEjN,IAAI,OAAe,CAAC;gBACpB,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5B,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC9C,CAAC;gBAED,iCAAiC;gBACjC,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAChC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAClC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAEjB,oCAAoC;QACpC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,IAA+B,EAAE,OAAe;QACjF,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,2HAA2H,CAAC,CAAC,GAAG,EAAE,CAAC;QAErK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QAEzC,qCAAqC;QACrC,KAAK,MAAM,gBAAgB,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,gCAAgC;oBAChC,SAAS;gBACX,CAAC;YACH,CAAC;YAED,kBAAkB;YAClB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,KAAK,EAAE,CAAC;YACtF,IAAI,CAAC;gBACH,2CAA2C;gBAC3C,IAAI,cAAc,GAAG,KAAK,CAAC;gBAC3B,MAAM,aAAa,GAAG,GAAG,EAAE,GAAG,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACvD,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;oBAC/B,aAAa,EAAE,CAAC;oBAChB,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;gBACzB,CAAC,CAAC,CAAC;gBAEH,MAAM,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1C,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAEjC,IAAI,cAAc,EAAE,CAAC;oBACnB,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,WAAW,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;wBACxE,IAAI,EAAE,mBAAmB;wBACzB,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,aAAa;wBACrB,WAAW,EAAE,gDAAgD,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,OAAO,gCAAgC;qBAC1I,CAAC,CAAC;gBACL,CAAC;gBAED,mCAAmC;gBACnC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;YAED,iCAAiC;YACjC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/E,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,qBAAqB;YAC9B,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAA+B,EAAE,OAAe;QACzE,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,EAAE,CAAC;QAEzF,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,aAAa,GAAa,EAAE,CAAC;gBACnC,MAAM,OAAO,GAAG,CAAC,GAAwC,EAAE,EAAE;oBAC3D,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,OAAO;wBAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,CAAC,CAAC;gBACF,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAE5B,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;gBAE/B,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAClE,QAAQ,CAAC,IAAI,CAAC;wBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;wBACnF,IAAI,EAAE,gBAAgB;wBACtB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,aAAa;wBACrB,WAAW,EAAE,wCAAwC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;qBACvI,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/F,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAA+B;QACzD,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACtC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACvE,IAAI,eAAe,KAAK,UAAU,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,oBAAoB;oBACvC,IAAI,EAAE,gBAAgB;oBACtB,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,aAAa;oBACrB,WAAW,EAAE,8DAA8D,eAAe,GAAG;iBAC9F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1D,QAAQ,CAAC,IAAI,CAAC;oBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,mBAAmB;oBACtC,IAAI,EAAE,gBAAgB;oBACtB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,aAAa;oBACrB,WAAW,EAAE,gDAAgD,SAAS,OAAO,QAAQ,EAAE;iBACxF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,gBAAgB;gBACnC,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,aAAa;gBACrB,WAAW,EAAE,kCAAkC;aAChD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/agents/83-static-analysis-agent.d.ts

@@ -0,0 +1,14 @@
+import { BaseAgent } from './base-agent.js';
+import type { Finding } from '../core/types.js';
+export declare class StaticAnalysisAgent extends BaseAgent {
+    readonly agentId = 83;
+    readonly agentName = "Static Analysis Agent";
+    private projectRoot;
+    protected preFlight(): Promise<void>;
+    protected execute(): Promise<Finding[]>;
+    private runLinter;
+    private runTypeCheck;
+    private runDependencyAudit;
+    private runComplexityAnalysis;
+}
+//# sourceMappingURL=83-static-analysis-agent.d.ts.map

package/dist/agents/83-static-analysis-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"83-static-analysis-agent.d.ts","sourceRoot":"","sources":["../../agents/83-static-analysis-agent.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAkB7C,qBAAa,mBAAoB,SAAQ,SAAS;IAChD,QAAQ,CAAC,OAAO,MAAM;IACtB,QAAQ,CAAC,SAAS,2BAA2B;IAC7C,OAAO,CAAC,WAAW,CAAM;cAET,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;cAQ1B,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YA2D/B,SAAS;YAoET,YAAY;YAgDZ,kBAAkB;YAuDlB,qBAAqB;CA0DpC"}

package/dist/agents/83-static-analysis-agent.js

@@ -0,0 +1,261 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { stat, readFile, writeFile, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { BaseAgent } from './base-agent.js';
+const execFileAsync = promisify(execFile);
+/** Maximum time for static analysis (5 min). */
+const ANALYSIS_TIMEOUT_MS = 300_000;
+export class StaticAnalysisAgent extends BaseAgent {
+    agentId = 83;
+    agentName = 'Static Analysis Agent';
+    projectRoot = '';
+    async preFlight() {
+        this.projectRoot = this.config.projectRoot ?? process.cwd();
+        const exists = await stat(this.projectRoot).catch(() => null);
+        if (!exists) {
+            throw new Error(`Project root does not exist: ${this.projectRoot}`);
+        }
+    }
+    async execute() {
+        const findings = [];
+        const results = [];
+        // Run each analyzer in parallel
+        const analyses = await Promise.allSettled([
+            this.runLinter(),
+            this.runTypeCheck(),
+            this.runDependencyAudit(),
+            this.runComplexityAnalysis(),
+        ]);
+        for (const analysis of analyses) {
+            if (analysis.status === 'fulfilled' && analysis.value) {
+                results.push(analysis.value);
+            }
+        }
+        // Convert results to findings
+        for (const result of results) {
+            for (const item of result.findings) {
+                const severity = item.severity === 'error' ? 'high' : item.severity === 'warning' ? 'medium' : 'low';
+                findings.push({
+                    id: `${this.agentId}-${result.tool}-${item.file.replace(/[^a-zA-Z0-9_-]/g, '_').slice(0, 30)}-${item.line ?? 0}`,
+                    type: item.severity === 'error' ? 'code-bug-logic' : 'code-bug-cosmetic',
+                    severity,
+                    agentId: this.agentId,
+                    module: `static-analysis-${result.tool}`,
+                    file: item.file,
+                    line: item.line,
+                    description: `[${result.tool}] ${item.message}${item.rule ? ` (${item.rule})` : ''}`,
+                });
+            }
+        }
+        // Write combined report
+        const reportPath = join(this.runDir, 'static-analysis-report.json');
+        const report = {
+            timestamp: new Date().toISOString(),
+            tools: results.map(r => r.tool),
+            totalFindings: results.reduce((sum, r) => sum + r.findings.length, 0),
+            bySeverity: {
+                error: results.reduce((sum, r) => sum + r.findings.filter(f => f.severity === 'error').length, 0),
+                warning: results.reduce((sum, r) => sum + r.findings.filter(f => f.severity === 'warning').length, 0),
+                info: results.reduce((sum, r) => sum + r.findings.filter(f => f.severity === 'info').length, 0),
+            },
+            results,
+        };
+        await writeFile(reportPath, JSON.stringify(report, null, 2), 'utf-8').catch(() => { });
+        this.addEvidence({
+            type: 'report',
+            path: reportPath,
+            description: `Static analysis: ${report.totalFindings} findings (${report.bySeverity.error} errors, ${report.bySeverity.warning} warnings)`,
+        });
+        return findings;
+    }
+    async runLinter() {
+        const result = { tool: 'eslint', findings: [] };
+        try {
+            // Check if ESLint is available
+            const rootFiles = await readdir(this.projectRoot);
+            const hasEslintConfig = rootFiles.some(f => f.includes('eslint') || f === '.eslintrc' || f === '.eslintrc.js' || f === '.eslintrc.json' || f === '.eslintrc.yml');
+            if (!hasEslintConfig) {
+                // Check package.json for eslintConfig
+                try {
+                    const pkg = JSON.parse(await readFile(join(this.projectRoot, 'package.json'), 'utf-8'));
+                    if (!pkg.eslintConfig)
+                        return null;
+                }
+                catch {
+                    return null;
+                }
+            }
+            const { stdout } = await execFileAsync('npx', ['eslint', '.', '--format=json', '--max-warnings=100'], {
+                cwd: this.projectRoot,
+                shell: true,
+                timeout: ANALYSIS_TIMEOUT_MS,
+                maxBuffer: 10 * 1024 * 1024,
+            }).catch(err => {
+                if (err && typeof err === 'object' && 'stdout' in err) {
+                    return { stdout: String(err.stdout), stderr: '' };
+                }
+                throw err;
+            });
+            try {
+                const eslintResults = JSON.parse(stdout);
+                for (const file of eslintResults) {
+                    for (const msg of file.messages) {
+                        result.findings.push({
+                            file: file.filePath.replace(this.projectRoot, '').replace(/^[/\\]/, ''),
+                            line: msg.line,
+                            severity: msg.severity === 2 ? 'error' : 'warning',
+                            message: msg.message,
+                            rule: msg.ruleId ?? undefined,
+                        });
+                    }
+                }
+            }
+            catch {
+                // Parse error, skip
+            }
+        }
+        catch {
+            // ESLint not available
+            return null;
+        }
+        return result;
+    }
+    async runTypeCheck() {
+        const result = { tool: 'typescript', findings: [] };
+        try {
+            const tsconfigExists = await stat(join(this.projectRoot, 'tsconfig.json')).catch(() => null);
+            if (!tsconfigExists)
+                return null;
+            let stdout = '';
+            try {
+                const res = await execFileAsync('npx', ['tsc', '--noEmit', '--pretty', 'false'], {
+                    cwd: this.projectRoot,
+                    shell: true,
+                    timeout: ANALYSIS_TIMEOUT_MS,
+                    maxBuffer: 10 * 1024 * 1024,
+                });
+                stdout = res.stdout;
+            }
+            catch (err) {
+                if (err && typeof err === 'object' && 'stdout' in err) {
+                    stdout = String(err.stdout);
+                }
+                else {
+                    return null;
+                }
+            }
+            // Parse TypeScript errors: "path(line,col): error TSxxxx: message"
+            const lines = stdout.split('\n');
+            for (const line of lines) {
+                const match = line.match(/^(.+)\((\d+),\d+\):\s+(error|warning)\s+(TS\d+):\s+(.+)$/);
+                if (match) {
+                    result.findings.push({
+                        file: match[1].replace(this.projectRoot, '').replace(/^[/\\]/, ''),
+                        line: parseInt(match[2], 10),
+                        severity: match[3] === 'error' ? 'error' : 'warning',
+                        message: match[5],
+                        rule: match[4],
+                    });
+                }
+            }
+        }
+        catch {
+            return null;
+        }
+        return result;
+    }
+    async runDependencyAudit() {
+        const result = { tool: 'npm-audit', findings: [] };
+        try {
+            let stdout = '';
+            try {
+                const res = await execFileAsync('npm', ['audit', '--json'], {
+                    cwd: this.projectRoot,
+                    shell: true,
+                    timeout: 60_000,
+                    maxBuffer: 10 * 1024 * 1024,
+                });
+                stdout = res.stdout;
+            }
+            catch (err) {
+                if (err && typeof err === 'object' && 'stdout' in err) {
+                    stdout = String(err.stdout);
+                }
+                else {
+                    return null;
+                }
+            }
+            if (!stdout.trim())
+                return null;
+            try {
+                const audit = JSON.parse(stdout);
+                for (const [pkg, vuln] of Object.entries(audit.vulnerabilities ?? {})) {
+                    const severity = vuln.severity === 'critical' || vuln.severity === 'high' ? 'error' : 'warning';
+                    const via = (vuln.via ?? []).map(v => typeof v === 'string' ? v : (v.title ?? 'unknown')).join(', ');
+                    result.findings.push({
+                        file: 'package.json',
+                        severity,
+                        message: `Vulnerability in "${pkg}" (${vuln.severity}): ${via}`,
+                        rule: `npm-audit-${vuln.severity}`,
+                    });
+                }
+            }
+            catch {
+                // Parse error
+            }
+        }
+        catch {
+            return null;
+        }
+        return result;
+    }
+    async runComplexityAnalysis() {
+        const result = { tool: 'complexity', findings: [] };
+        // Use ESLint complexity rule or fall back to basic analysis
+        try {
+            let stdout = '';
+            try {
+                const res = await execFileAsync('npx', ['eslint', '.', '--format=json', '--rule', '{"complexity": ["warn", 15]}', '--no-eslintrc'], {
+                    cwd: this.projectRoot,
+                    shell: true,
+                    timeout: ANALYSIS_TIMEOUT_MS,
+                    maxBuffer: 10 * 1024 * 1024,
+                });
+                stdout = res.stdout;
+            }
+            catch (err) {
+                if (err && typeof err === 'object' && 'stdout' in err) {
+                    stdout = String(err.stdout);
+                }
+                else {
+                    return null;
+                }
+            }
+            try {
+                const eslintResults = JSON.parse(stdout);
+                for (const file of eslintResults) {
+                    for (const msg of file.messages) {
+                        if (msg.ruleId === 'complexity') {
+                            result.findings.push({
+                                file: file.filePath.replace(this.projectRoot, '').replace(/^[/\\]/, ''),
+                                line: msg.line,
+                                severity: 'warning',
+                                message: msg.message,
+                                rule: 'cyclomatic-complexity',
+                            });
+                        }
+                    }
+                }
+            }
+            catch {
+                // Parse error
+            }
+        }
+        catch {
+            return null;
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=83-static-analysis-agent.js.map