@bluefly/openstandardagents 0.4.0 → 0.4.1

package/dist/services/validation/cost-estimator.js

@@ -0,0 +1,221 @@
+/**
+ * Cost Estimator
+ * Estimates runtime costs for OSSA agents based on LLM provider, model, and usage
+ *
+ * SOLID: Single Responsibility - Only handles cost estimation
+ * DRY: Centralized pricing data and calculation logic
+ */
+/**
+ * Provider pricing map
+ */
+const PRICING_MAP = {
+    openai: {
+        'gpt-4': { input: 0.03, output: 0.06 },
+        'gpt-4-turbo': { input: 0.01, output: 0.03 },
+        'gpt-4o': { input: 0.005, output: 0.015 },
+        'gpt-4o-mini': { input: 0.00015, output: 0.0006 },
+        'gpt-3.5-turbo': { input: 0.0005, output: 0.0015 },
+        'o1-preview': { input: 0.015, output: 0.06 },
+        'o1-mini': { input: 0.003, output: 0.012 },
+    },
+    anthropic: {
+        'claude-opus-4': { input: 0.015, output: 0.075 },
+        'claude-sonnet-4': { input: 0.003, output: 0.015 },
+        'claude-haiku-4': { input: 0.00025, output: 0.00125 },
+        'claude-3-opus': { input: 0.015, output: 0.075 },
+        'claude-3-sonnet': { input: 0.003, output: 0.015 },
+        'claude-3-haiku': { input: 0.00025, output: 0.00125 },
+    },
+    google: {
+        'gemini-1.5-pro': { input: 0.00125, output: 0.005 },
+        'gemini-1.5-flash': { input: 0.000075, output: 0.0003 },
+        'gemini-pro': { input: 0.0005, output: 0.0015 },
+    },
+    cohere: {
+        'command-r-plus': { input: 0.003, output: 0.015 },
+        'command-r': { input: 0.0005, output: 0.0015 },
+        'command': { input: 0.001, output: 0.002 },
+    },
+    mistral: {
+        'mistral-large': { input: 0.004, output: 0.012 },
+        'mistral-medium': { input: 0.0027, output: 0.0081 },
+        'mistral-small': { input: 0.001, output: 0.003 },
+    },
+};
+/**
+ * Default usage estimates (tokens per request)
+ */
+const DEFAULT_USAGE = {
+    inputTokens: 1000,
+    outputTokens: 500,
+    requestsPerDay: 100,
+};
+/**
+ * Cost Estimator Service
+ */
+export class CostEstimator {
+    /**
+     * Estimate costs for an agent manifest
+     */
+    estimate(manifest) {
+        const llmConfig = this.extractLLMConfig(manifest);
+        const pricing = this.getPricing(llmConfig.provider, llmConfig.model);
+        const usage = this.estimateUsage(manifest);
+        const inputCost = (usage.inputTokens / 1000) * pricing.input * usage.requestsPerDay;
+        const outputCost = (usage.outputTokens / 1000) * pricing.output * usage.requestsPerDay;
+        const dailyCost = inputCost + outputCost;
+        const recommendations = this.generateRecommendations(llmConfig.provider, llmConfig.model, dailyCost, manifest);
+        return {
+            provider: llmConfig.provider,
+            model: llmConfig.model,
+            estimatedDailyCost: parseFloat(dailyCost.toFixed(4)),
+            estimatedMonthlyCost: parseFloat((dailyCost * 30).toFixed(2)),
+            breakdown: {
+                inputCost: parseFloat(inputCost.toFixed(4)),
+                outputCost: parseFloat(outputCost.toFixed(4)),
+                requestsPerDay: usage.requestsPerDay,
+                tokensPerRequest: {
+                    input: usage.inputTokens,
+                    output: usage.outputTokens,
+                },
+            },
+            recommendations,
+            currency: 'USD',
+        };
+    }
+    /**
+     * Extract LLM configuration from manifest
+     */
+    extractLLMConfig(manifest) {
+        const llm = manifest.spec?.llm || manifest.agent?.llm;
+        if (!llm) {
+            return { provider: 'unknown', model: 'unknown' };
+        }
+        return {
+            provider: this.normalizeProvider(llm.provider || 'unknown'),
+            model: this.normalizeModel(llm.model || 'unknown'),
+        };
+    }
+    /**
+     * Normalize provider name
+     */
+    normalizeProvider(provider) {
+        const normalized = provider.toLowerCase().trim();
+        if (normalized.includes('openai'))
+            return 'openai';
+        if (normalized.includes('anthropic') || normalized.includes('claude'))
+            return 'anthropic';
+        if (normalized.includes('google') || normalized.includes('gemini'))
+            return 'google';
+        if (normalized.includes('cohere'))
+            return 'cohere';
+        if (normalized.includes('mistral'))
+            return 'mistral';
+        return normalized;
+    }
+    /**
+     * Normalize model name
+     */
+    normalizeModel(model) {
+        const normalized = model.toLowerCase().trim();
+        // Handle version suffixes
+        const baseModel = normalized.split('-202')[0];
+        return baseModel;
+    }
+    /**
+     * Get pricing for provider and model
+     */
+    getPricing(provider, model) {
+        const providerPricing = PRICING_MAP[provider];
+        if (!providerPricing) {
+            return { input: 0, output: 0 };
+        }
+        // Try exact match
+        if (providerPricing[model]) {
+            return providerPricing[model];
+        }
+        // Try fuzzy match
+        for (const [key, pricing] of Object.entries(providerPricing)) {
+            if (model.includes(key) || key.includes(model)) {
+                return pricing;
+            }
+        }
+        return { input: 0, output: 0 };
+    }
+    /**
+     * Estimate usage from manifest
+     */
+    estimateUsage(manifest) {
+        const constraints = manifest.spec?.constraints?.cost;
+        const llm = manifest.spec?.llm || manifest.agent?.llm;
+        // Use constraints if available
+        if (constraints?.maxTokensPerRequest) {
+            const inputTokens = Math.floor(constraints.maxTokensPerRequest * 0.7);
+            const outputTokens = Math.floor(constraints.maxTokensPerRequest * 0.3);
+            const requestsPerDay = constraints.maxTokensPerDay
+                ? Math.floor(constraints.maxTokensPerDay / constraints.maxTokensPerRequest)
+                : DEFAULT_USAGE.requestsPerDay;
+            return { inputTokens, outputTokens, requestsPerDay };
+        }
+        // Use LLM maxTokens if available
+        if (llm?.maxTokens) {
+            return {
+                inputTokens: Math.floor(llm.maxTokens * 0.7),
+                outputTokens: Math.floor(llm.maxTokens * 0.3),
+                requestsPerDay: DEFAULT_USAGE.requestsPerDay,
+            };
+        }
+        // Fall back to defaults
+        return DEFAULT_USAGE;
+    }
+    /**
+     * Generate cost optimization recommendations
+     */
+    generateRecommendations(provider, model, dailyCost, manifest) {
+        const recommendations = [];
+        // High cost warning
+        if (dailyCost > 10) {
+            recommendations.push(`Daily cost ($${dailyCost.toFixed(2)}) is high. Consider using a smaller model.`);
+        }
+        // Model-specific recommendations
+        if (provider === 'openai' && model.includes('gpt-4') && !model.includes('mini')) {
+            recommendations.push('Consider using gpt-4o-mini for cost savings (up to 99% reduction)');
+        }
+        if (provider === 'anthropic' && model.includes('opus')) {
+            recommendations.push('Consider using claude-sonnet-4 for cost savings (80% reduction) with similar quality');
+        }
+        // Missing constraints
+        if (!manifest.spec?.constraints?.cost) {
+            recommendations.push('Add cost constraints (maxTokensPerDay, maxCostPerDay) to control spending');
+        }
+        // Missing rate limits
+        if (!manifest.spec?.constraints?.performance?.maxLatencySeconds) {
+            recommendations.push('Add performance constraints (maxLatencySeconds, timeoutSeconds) to optimize costs');
+        }
+        // Token optimization
+        const llm = manifest.spec?.llm || manifest.agent?.llm;
+        if (llm?.maxTokens && llm.maxTokens > 4000) {
+            recommendations.push(`maxTokens (${llm.maxTokens}) is high. Reduce if possible to lower costs.`);
+        }
+        return recommendations;
+    }
+    /**
+     * Compare costs between different models
+     */
+    compareCosts(manifest, alternativeModels) {
+        const estimates = [];
+        // Current model
+        estimates.push(this.estimate(manifest));
+        // Alternative models
+        for (const alternative of alternativeModels) {
+            const altManifest = JSON.parse(JSON.stringify(manifest));
+            if (altManifest.spec?.llm) {
+                altManifest.spec.llm.provider = alternative.provider;
+                altManifest.spec.llm.model = alternative.model;
+            }
+            estimates.push(this.estimate(altManifest));
+        }
+        return estimates.sort((a, b) => a.estimatedDailyCost - b.estimatedDailyCost);
+    }
+}
+//# sourceMappingURL=cost-estimator.js.map

package/dist/services/validation/cost-estimator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost-estimator.js","sourceRoot":"","sources":["../../../src/services/validation/cost-estimator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH;;GAEG;AACH,MAAM,WAAW,GAAiD;IAChE,MAAM,EAAE;QACN,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QACtC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAC5C,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;QACzC,aAAa,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;QACjD,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;QAClD,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;QAC5C,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;KAC3C;IACD,SAAS,EAAE;QACT,eAAe,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;QAChD,iBAAiB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;QAClD,gBAAgB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QACrD,eAAe,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;QAChD,iBAAiB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;QAClD,gBAAgB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;KACtD;IACD,MAAM,EAAE;QACN,gBAAgB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;QACnD,kBAAkB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;QACvD,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;KAChD;IACD,MAAM,EAAE;QACN,gBAAgB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;QACjD,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;QAC9C,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;KAC3C;IACD,OAAO,EAAE;QACP,eAAe,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;QAChD,gBAAgB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;QACnD,eAAe,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;KACjD;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,aAAa,GAAG;IACpB,WAAW,EAAE,IAAI;IACjB,YAAY,EAAE,GAAG;IACjB,cAAc,EAAE,GAAG;CACpB,CAAC;AAuBF;;GAEG;AACH,MAAM,OAAO,aAAa;IACxB;;OAEG;IACH,QAAQ,CAAC,QAAmB;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE3C,MAAM,SAAS,GACb,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC;QACpE,MAAM,UAAU,GACd,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC;QACtE,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;QAEzC,MAAM,eAAe,GAAG,IAAI,CAAC,uBAAuB,CAClD,SAAS,CAAC,QAAQ,EAClB,SAAS,CAAC,KAAK,EACf,SAAS,EACT,QAAQ,CACT,CAAC;QAEF,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,kBAAkB,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACpD,oBAAoB,EAAE,UAAU,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC7D,SAAS,EAAE;gBACT,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC3C,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC7C,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,gBAAgB,EAAE;oBAChB,KAAK,EAAE,KAAK,CAAC,WAAW;oBACxB,MAAM,EAAE,KAAK,CAAC,YAAY;iBAC3B;aACF;YACD,eAAe;YACf,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,QAAmB;QAI1C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC;QAEtD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACnD,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC;YAC3D,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,IAAI,SAAS,CAAC;SACnD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAgB;QACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAEjD,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnE,OAAO,WAAW,CAAC;QACrB,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAChE,OAAO,QAAQ,CAAC;QAClB,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAErD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,KAAa;QAClC,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAE9C,0BAA0B;QAC1B,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAE9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,QAAgB,EAAE,KAAa;QAChD,MAAM,eAAe,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAE9C,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACjC,CAAC;QAED,kBAAkB;QAClB,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,kBAAkB;QAClB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YAC7D,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/C,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACjC,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,QAAmB;QAKvC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC;QACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC;QAEtD,+BAA+B;QAC/B,IAAI,WAAW,EAAE,mBAAmB,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,mBAAmB,GAAG,GAAG,CAAC,CAAC;YACtE,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,mBAAmB,GAAG,GAAG,CAAC,CAAC;YACvE,MAAM,cAAc,GAAG,WAAW,CAAC,eAAe;gBAChD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,eAAe,GAAG,WAAW,CAAC,mBAAmB,CAAC;gBAC3E,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC;YAEjC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;QACvD,CAAC;QAED,iCAAiC;QACjC,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;YACnB,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC;gBAC5C,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC;gBAC7C,cAAc,EAAE,aAAa,CAAC,cAAc;aAC7C,CAAC;QACJ,CAAC;QAED,wBAAwB;QACxB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;OAEG;IACK,uBAAuB,CAC7B,QAAgB,EAChB,KAAa,EACb,SAAiB,EACjB,QAAmB;QAEnB,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,oBAAoB;QACpB,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;YACnB,eAAe,CAAC,IAAI,CAClB,gBAAgB,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,4CAA4C,CACjF,CAAC;QACJ,CAAC;QAED,iCAAiC;QACjC,IAAI,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChF,eAAe,CAAC,IAAI,CAClB,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,KAAK,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,eAAe,CAAC,IAAI,CAClB,sFAAsF,CACvF,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACtC,eAAe,CAAC,IAAI,CAClB,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;YAChE,eAAe,CAAC,IAAI,CAClB,mFAAmF,CACpF,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC;QACtD,IAAI,GAAG,EAAE,SAAS,IAAI,GAAG,CAAC,SAAS,GAAG,IAAI,EAAE,CAAC;YAC3C,eAAe,CAAC,IAAI,CAClB,cAAc,GAAG,CAAC,SAAS,+CAA+C,CAC3E,CAAC;QACJ,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,YAAY,CACV,QAAmB,EACnB,iBAA6D;QAE7D,MAAM,SAAS,GAAmB,EAAE,CAAC;QAErC,gBAAgB;QAChB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAExC,qBAAqB;QACrB,KAAK,MAAM,WAAW,IAAI,iBAAiB,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YACzD,IAAI,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;gBAC1B,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;gBACrD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;YACjD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC/E,CAAC;CACF"}

package/dist/services/validation/enhanced-validator.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Enhanced Validator
+ * Comprehensive validation service with cost estimation, security checks, and best practices
+ *
+ * SOLID: Composition - delegates to specialized validators
+ * DRY: Single entry point for all validation concerns
+ * API-First: Integrates with existing ValidationService
+ */
+import type { OssaAgent, SchemaVersion, ValidationResult } from '../../types/index.js';
+import { ValidationService } from '../validation.service.js';
+import { type CostEstimate } from './cost-estimator.js';
+import { type SecurityValidationResult } from './security-validator.js';
+import { type BestPracticesResult } from './best-practices-validator.js';
+/**
+ * Comprehensive validation report
+ */
+export interface EnhancedValidationReport {
+    schemaValid: boolean;
+    schemaErrors: ValidationResult['errors'];
+    schemaWarnings: ValidationResult['warnings'];
+    bestPractices: BestPracticesResult;
+    security: SecurityValidationResult;
+    cost: CostEstimate;
+    passed: boolean;
+    manifest?: OssaAgent;
+}
+/**
+ * Enhanced Validator Service
+ * Integrates schema validation, cost estimation, security, and best practices
+ */
+export declare class EnhancedValidator {
+    private validationService;
+    private costEstimator;
+    private securityValidator;
+    private bestPracticesValidator;
+    constructor(validationService: ValidationService);
+    /**
+     * Perform comprehensive validation
+     */
+    validate(manifest: unknown, version?: SchemaVersion): Promise<EnhancedValidationReport>;
+    /**
+     * Validate multiple manifests
+     */
+    validateMany(manifests: unknown[], version?: SchemaVersion): Promise<EnhancedValidationReport[]>;
+    /**
+     * Get validation summary
+     */
+    getSummary(report: EnhancedValidationReport): ValidationSummary;
+    /**
+     * Get critical issues count
+     */
+    private getCriticalIssueCount;
+    /**
+     * Get warnings count
+     */
+    private getWarningCount;
+    /**
+     * Generate human-readable report
+     */
+    generateTextReport(report: EnhancedValidationReport): string;
+    /**
+     * Generate JSON report
+     */
+    generateJsonReport(report: EnhancedValidationReport): string;
+}
+/**
+ * Validation summary
+ */
+export interface ValidationSummary {
+    passed: boolean;
+    schemaValid: boolean;
+    securityScore: number;
+    bestPracticesScore: number;
+    estimatedDailyCost: number;
+    criticalIssues: number;
+    warnings: number;
+}
+//# sourceMappingURL=enhanced-validator.d.ts.map

package/dist/services/validation/enhanced-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enhanced-validator.d.ts","sourceRoot":"","sources":["../../../src/services/validation/enhanced-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,+BAA+B,CAAC;AAEvC;;GAEG;AACH,MAAM,WAAW,wBAAwB;IAEvC,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzC,cAAc,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAG7C,aAAa,EAAE,mBAAmB,CAAC;IAGnC,QAAQ,EAAE,wBAAwB,CAAC;IAGnC,IAAI,EAAE,YAAY,CAAC;IAGnB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB;AAED;;;GAGG;AACH,qBACa,iBAAiB;IAMC,OAAO,CAAC,iBAAiB;IALtD,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,sBAAsB,CAAyB;gBAGlB,iBAAiB,EAAE,iBAAiB;IAOzE;;OAEG;IACG,QAAQ,CACZ,QAAQ,EAAE,OAAO,EACjB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,wBAAwB,CAAC;IA8BpC;;OAEG;IACG,YAAY,CAChB,SAAS,EAAE,OAAO,EAAE,EACpB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAMtC;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,wBAAwB,GAAG,iBAAiB;IAY/D;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAkB7B;;OAEG;IACH,OAAO,CAAC,eAAe;IAkBvB;;OAEG;IACH,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM;IAqG5D;;OAEG;IACH,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM;CAG7D;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/services/validation/enhanced-validator.js

@@ -0,0 +1,212 @@
+/**
+ * Enhanced Validator
+ * Comprehensive validation service with cost estimation, security checks, and best practices
+ *
+ * SOLID: Composition - delegates to specialized validators
+ * DRY: Single entry point for all validation concerns
+ * API-First: Integrates with existing ValidationService
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { inject, injectable } from 'inversify';
+import { ValidationService } from '../validation.service.js';
+import { CostEstimator } from './cost-estimator.js';
+import { SecurityValidator, } from './security-validator.js';
+import { BestPracticesValidator, } from './best-practices-validator.js';
+/**
+ * Enhanced Validator Service
+ * Integrates schema validation, cost estimation, security, and best practices
+ */
+let EnhancedValidator = class EnhancedValidator {
+    validationService;
+    costEstimator;
+    securityValidator;
+    bestPracticesValidator;
+    constructor(validationService) {
+        this.validationService = validationService;
+        this.costEstimator = new CostEstimator();
+        this.securityValidator = new SecurityValidator();
+        this.bestPracticesValidator = new BestPracticesValidator();
+    }
+    /**
+     * Perform comprehensive validation
+     */
+    async validate(manifest, version) {
+        // 1. Schema validation (existing service)
+        const schemaResult = await this.validationService.validate(manifest, version);
+        // 2. Even if schema is invalid, try to run other validators on the manifest structure
+        //    This allows cost estimation and security checks to work even with schema issues
+        const manifestToValidate = (schemaResult.manifest || manifest);
+        // 3. Run all validators in parallel
+        const [bestPractices, security, cost] = await Promise.all([
+            Promise.resolve(this.bestPracticesValidator.validate(manifestToValidate)),
+            Promise.resolve(this.securityValidator.validate(manifestToValidate)),
+            Promise.resolve(this.costEstimator.estimate(manifestToValidate)),
+        ]);
+        // 4. Determine overall pass/fail
+        const passed = schemaResult.valid && security.passed && bestPractices.passed;
+        return {
+            schemaValid: schemaResult.valid,
+            schemaErrors: schemaResult.errors,
+            schemaWarnings: schemaResult.warnings,
+            bestPractices,
+            security,
+            cost,
+            passed,
+            manifest: schemaResult.manifest,
+        };
+    }
+    /**
+     * Validate multiple manifests
+     */
+    async validateMany(manifests, version) {
+        return Promise.all(manifests.map((manifest) => this.validate(manifest, version)));
+    }
+    /**
+     * Get validation summary
+     */
+    getSummary(report) {
+        return {
+            passed: report.passed,
+            schemaValid: report.schemaValid,
+            securityScore: report.security.score,
+            bestPracticesScore: report.bestPractices.score,
+            estimatedDailyCost: report.cost.estimatedDailyCost,
+            criticalIssues: this.getCriticalIssueCount(report),
+            warnings: this.getWarningCount(report),
+        };
+    }
+    /**
+     * Get critical issues count
+     */
+    getCriticalIssueCount(report) {
+        let count = 0;
+        // Schema errors
+        count += report.schemaErrors.length;
+        // Critical security vulnerabilities
+        count += report.security.vulnerabilities.filter((v) => v.severity === 'critical').length;
+        // Best practices errors
+        count += report.bestPractices.issues.filter((i) => i.severity === 'error')
+            .length;
+        return count;
+    }
+    /**
+     * Get warnings count
+     */
+    getWarningCount(report) {
+        let count = 0;
+        // Schema warnings
+        count += report.schemaWarnings.length;
+        // Security warnings (high/medium severity)
+        count += report.security.vulnerabilities.filter((v) => v.severity === 'high' || v.severity === 'medium').length;
+        // Best practices warnings
+        count += report.bestPractices.issues.filter((i) => i.severity === 'warning')
+            .length;
+        return count;
+    }
+    /**
+     * Generate human-readable report
+     */
+    generateTextReport(report) {
+        const lines = [];
+        lines.push('=== Enhanced Validation Report ===\n');
+        // Overall status
+        lines.push(`Status: ${report.passed ? 'PASSED ✓' : 'FAILED ✗'}`);
+        lines.push('');
+        // Schema validation
+        lines.push('--- Schema Validation ---');
+        lines.push(`Valid: ${report.schemaValid ? 'Yes' : 'No'}`);
+        if (report.schemaErrors.length > 0) {
+            lines.push(`Errors: ${report.schemaErrors.length}`);
+            for (const error of report.schemaErrors.slice(0, 5)) {
+                lines.push(`  • ${error.instancePath}: ${error.message}`);
+            }
+            if (report.schemaErrors.length > 5) {
+                lines.push(`  ... and ${report.schemaErrors.length - 5} more`);
+            }
+        }
+        if (report.schemaWarnings.length > 0) {
+            lines.push(`Warnings: ${report.schemaWarnings.length}`);
+        }
+        lines.push('');
+        // Security
+        lines.push('--- Security ---');
+        lines.push(`Score: ${report.security.score}/100`);
+        lines.push(`Status: ${report.security.passed ? 'PASSED' : 'FAILED'}`);
+        if (report.security.vulnerabilities.length > 0) {
+            lines.push(`Vulnerabilities: ${report.security.vulnerabilities.length}`);
+            const critical = report.security.vulnerabilities.filter((v) => v.severity === 'critical');
+            const high = report.security.vulnerabilities.filter((v) => v.severity === 'high');
+            if (critical.length > 0) {
+                lines.push(`  Critical: ${critical.length}`);
+                for (const vuln of critical) {
+                    lines.push(`    • ${vuln.message}`);
+                    lines.push(`      → ${vuln.recommendation}`);
+                }
+            }
+            if (high.length > 0) {
+                lines.push(`  High: ${high.length}`);
+                for (const vuln of high.slice(0, 3)) {
+                    lines.push(`    • ${vuln.message}`);
+                }
+            }
+        }
+        lines.push('');
+        // Best Practices
+        lines.push('--- Best Practices ---');
+        lines.push(`Score: ${report.bestPractices.score}/100`);
+        lines.push(`Status: ${report.bestPractices.passed ? 'PASSED' : 'FAILED'}`);
+        if (report.bestPractices.issues.length > 0) {
+            lines.push(`Issues: ${report.bestPractices.issues.length}`);
+            const errors = report.bestPractices.issues.filter((i) => i.severity === 'error');
+            const warnings = report.bestPractices.issues.filter((i) => i.severity === 'warning');
+            if (errors.length > 0) {
+                lines.push(`  Errors: ${errors.length}`);
+                for (const issue of errors.slice(0, 3)) {
+                    lines.push(`    • ${issue.message}`);
+                    lines.push(`      → ${issue.recommendation}`);
+                }
+            }
+            if (warnings.length > 0) {
+                lines.push(`  Warnings: ${warnings.length}`);
+            }
+        }
+        lines.push('');
+        // Cost Estimation
+        lines.push('--- Cost Estimation ---');
+        lines.push(`Provider: ${report.cost.provider} | Model: ${report.cost.model}`);
+        lines.push(`Estimated Daily Cost: $${report.cost.estimatedDailyCost.toFixed(4)}`);
+        lines.push(`Estimated Monthly Cost: $${report.cost.estimatedMonthlyCost.toFixed(2)}`);
+        if (report.cost.recommendations.length > 0) {
+            lines.push('Recommendations:');
+            for (const rec of report.cost.recommendations) {
+                lines.push(`  • ${rec}`);
+            }
+        }
+        lines.push('');
+        return lines.join('\n');
+    }
+    /**
+     * Generate JSON report
+     */
+    generateJsonReport(report) {
+        return JSON.stringify(report, null, 2);
+    }
+};
+EnhancedValidator = __decorate([
+    injectable(),
+    __param(0, inject(ValidationService)),
+    __metadata("design:paramtypes", [ValidationService])
+], EnhancedValidator);
+export { EnhancedValidator };
+//# sourceMappingURL=enhanced-validator.js.map

package/dist/services/validation/enhanced-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enhanced-validator.js","sourceRoot":"","sources":["../../../src/services/validation/enhanced-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;;;;;;;;;;;;;AAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EACL,iBAAiB,GAElB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,GAEvB,MAAM,+BAA+B,CAAC;AAyBvC;;;GAGG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAMS;IAL7B,aAAa,CAAgB;IAC7B,iBAAiB,CAAoB;IACrC,sBAAsB,CAAyB;IAEvD,YACqC,iBAAoC;QAApC,sBAAiB,GAAjB,iBAAiB,CAAmB;QAEvE,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACjD,IAAI,CAAC,sBAAsB,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CACZ,QAAiB,EACjB,OAAuB;QAEvB,0CAA0C;QAC1C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAE9E,sFAAsF;QACtF,qFAAqF;QACrF,MAAM,kBAAkB,GAAG,CAAC,YAAY,CAAC,QAAQ,IAAI,QAAQ,CAAc,CAAC;QAE5E,oCAAoC;QACpC,MAAM,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YACzE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YACpE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;SACjE,CAAC,CAAC;QAEH,iCAAiC;QACjC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC;QAE7E,OAAO;YACL,WAAW,EAAE,YAAY,CAAC,KAAK;YAC/B,YAAY,EAAE,YAAY,CAAC,MAAM;YACjC,cAAc,EAAE,YAAY,CAAC,QAAQ;YACrC,aAAa;YACb,QAAQ;YACR,IAAI;YACJ,MAAM;YACN,QAAQ,EAAE,YAAY,CAAC,QAAQ;SAChC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,SAAoB,EACpB,OAAuB;QAEvB,OAAO,OAAO,CAAC,GAAG,CAChB,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAC9D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,MAAgC;QACzC,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;YACpC,kBAAkB,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK;YAC9C,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB;YAClD,cAAc,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;YAClD,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;SACvC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,MAAgC;QAC5D,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,gBAAgB;QAChB,KAAK,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAEpC,oCAAoC;QACpC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CACjC,CAAC,MAAM,CAAC;QAET,wBAAwB;QACxB,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;aACvE,MAAM,CAAC;QAEV,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,MAAgC;QACtD,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,kBAAkB;QAClB,KAAK,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;QAEtC,2CAA2C;QAC3C,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CACxD,CAAC,MAAM,CAAC;QAET,0BAA0B;QAC1B,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC;aACzE,MAAM,CAAC;QAEV,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,MAAgC;QACjD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAEnD,iBAAiB;QACjB,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,oBAAoB;QACpB,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACpD,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,WAAW;QACX,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CACrD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CACjC,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAC7B,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC7C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;oBAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpC,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;oBACpC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,iBAAiB;QACjB,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,aAAa,CAAC,KAAK,MAAM,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAC9B,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAChC,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACzC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;oBACvC,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrC,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,kBAAkB;QAClB,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CACR,aAAa,MAAM,CAAC,IAAI,CAAC,QAAQ,aAAa,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAClE,CAAC;QACF,KAAK,CAAC,IAAI,CACR,0BAA0B,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CACtE,CAAC;QACF,KAAK,CAAC,IAAI,CACR,4BAA4B,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAC1E,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,MAAgC;QACjD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;CACF,CAAA;AApOY,iBAAiB;IAD7B,UAAU,EAAE;IAOR,WAAA,MAAM,CAAC,iBAAiB,CAAC,CAAA;qCAA4B,iBAAiB;GAN9D,iBAAiB,CAoO7B"}

package/dist/services/validation/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Validation Services
+ * Export all validation-related services and types
+ */
+export { EnhancedValidator } from './enhanced-validator.js';
+export type { EnhancedValidationReport, ValidationSummary, } from './enhanced-validator.js';
+export { CostEstimator } from './cost-estimator.js';
+export type { CostEstimate } from './cost-estimator.js';
+export { SecurityValidator } from './security-validator.js';
+export type { SecurityVulnerability, SecurityValidationResult, SecuritySeverity, } from './security-validator.js';
+export { BestPracticesValidator } from './best-practices-validator.js';
+export type { BestPracticeIssue, BestPracticesResult, IssueSeverity, } from './best-practices-validator.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/services/validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/validation/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,YAAY,EACV,wBAAwB,EACxB,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,YAAY,EACV,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,GACd,MAAM,+BAA+B,CAAC"}

package/dist/services/validation/index.js

@@ -0,0 +1,9 @@
+/**
+ * Validation Services
+ * Export all validation-related services and types
+ */
+export { EnhancedValidator } from './enhanced-validator.js';
+export { CostEstimator } from './cost-estimator.js';
+export { SecurityValidator } from './security-validator.js';
+export { BestPracticesValidator } from './best-practices-validator.js';
+//# sourceMappingURL=index.js.map

package/dist/services/validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/validation/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAM5D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAO5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/services/validation/security-validator.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Security Validator
+ * Checks OSSA manifests for security vulnerabilities and issues
+ *
+ * SOLID: Single Responsibility - Only handles security validation
+ * DRY: Centralized security rules and patterns
+ */
+import type { OssaAgent } from '../../types/index.js';
+/**
+ * Security severity levels
+ */
+export type SecuritySeverity = 'critical' | 'high' | 'medium' | 'low' | 'info';
+/**
+ * Security vulnerability
+ */
+export interface SecurityVulnerability {
+    severity: SecuritySeverity;
+    category: string;
+    message: string;
+    path: string;
+    recommendation: string;
+    cwe?: string;
+}
+/**
+ * Security validation result
+ */
+export interface SecurityValidationResult {
+    score: number;
+    vulnerabilities: SecurityVulnerability[];
+    passed: boolean;
+}
+/**
+ * Security Validator Service
+ */
+export declare class SecurityValidator {
+    /**
+     * Validate security of an agent manifest
+     */
+    validate(manifest: OssaAgent): SecurityValidationResult;
+    /**
+     * Check for exposed secrets in manifest
+     */
+    private checkForSecrets;
+    /**
+     * Recursively check object for secrets
+     */
+    private checkObjectForSecrets;
+    /**
+     * Check for insecure configurations
+     */
+    private checkInsecureConfig;
+    /**
+     * Check for insecure HTTP endpoints
+     */
+    private checkInsecureEndpoints;
+    /**
+     * Check for missing security controls
+     */
+    private checkMissingControls;
+    /**
+     * Check for overly permissive settings
+     */
+    private checkPermissions;
+    /**
+     * Check dependencies for security issues
+     */
+    private checkDependencies;
+    /**
+     * Calculate security score based on vulnerabilities
+     */
+    private calculateScore;
+    /**
+     * Get vulnerabilities by severity
+     */
+    getBySeverity(vulnerabilities: SecurityVulnerability[], severity: SecuritySeverity): SecurityVulnerability[];
+    /**
+     * Get vulnerabilities by category
+     */
+    getByCategory(vulnerabilities: SecurityVulnerability[], category: string): SecurityVulnerability[];
+}
+//# sourceMappingURL=security-validator.d.ts.map

package/dist/services/validation/security-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-validator.d.ts","sourceRoot":"","sources":["../../../src/services/validation/security-validator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE/E;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,qBAAqB,EAAE,CAAC;IACzC,MAAM,EAAE,OAAO,CAAC;CACjB;AAkCD;;GAEG;AACH,qBAAa,iBAAiB;IAC5B;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,wBAAwB;IA4BvD;;OAEG;IACH,OAAO,CAAC,eAAe;IA0BvB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAkC7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA0B3B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAgD9B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA0D5B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA0CxB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAyBzB;;OAEG;IACH,OAAO,CAAC,cAAc;IAkBtB;;OAEG;IACH,aAAa,CACX,eAAe,EAAE,qBAAqB,EAAE,EACxC,QAAQ,EAAE,gBAAgB,GACzB,qBAAqB,EAAE;IAI1B;;OAEG;IACH,aAAa,CACX,eAAe,EAAE,qBAAqB,EAAE,EACxC,QAAQ,EAAE,MAAM,GACf,qBAAqB,EAAE;CAG3B"}