@claude-flow/security 3.0.0-alpha.1 → 3.0.0-alpha.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (150) hide show
  1. package/README.md +292 -234
  2. package/__tests__/acceptance/security-compliance.test.ts +674 -674
  3. package/__tests__/authorization-propagator.test.ts +155 -0
  4. package/__tests__/credential-generator.test.ts +310 -310
  5. package/__tests__/fixtures/configurations.ts +425 -419
  6. package/__tests__/fixtures/index.ts +21 -21
  7. package/__tests__/helpers/create-mock.ts +469 -469
  8. package/__tests__/helpers/index.ts +32 -32
  9. package/__tests__/input-validator.test.ts +382 -381
  10. package/__tests__/integration/security-flow.test.ts +606 -606
  11. package/__tests__/keychain-adapter.test.ts +60 -0
  12. package/__tests__/oauth-browser.test.ts +13 -0
  13. package/__tests__/oauth-export-surface.test.ts +21 -0
  14. package/__tests__/oauth-pkce.test.ts +37 -0
  15. package/__tests__/password-hasher.test.ts +239 -239
  16. package/__tests__/path-validator.test.ts +302 -302
  17. package/__tests__/plugin-integrity-verifier.test.ts +199 -0
  18. package/__tests__/safe-executor.test.ts +292 -292
  19. package/__tests__/token-generator.test.ts +371 -371
  20. package/__tests__/tool-output-guardrail.test.ts +256 -0
  21. package/__tests__/unit/credential-generator.test.ts +182 -182
  22. package/__tests__/unit/password-hasher.test.ts +359 -359
  23. package/__tests__/unit/path-validator.test.ts +509 -509
  24. package/__tests__/unit/safe-executor.test.ts +667 -667
  25. package/__tests__/unit/token-generator.test.ts +310 -310
  26. package/dist/CVE-REMEDIATION.d.ts +17 -6
  27. package/dist/CVE-REMEDIATION.d.ts.map +1 -1
  28. package/dist/CVE-REMEDIATION.js +328 -12
  29. package/dist/CVE-REMEDIATION.js.map +1 -1
  30. package/dist/authorization/propagator.d.ts +148 -0
  31. package/dist/authorization/propagator.d.ts.map +1 -0
  32. package/dist/authorization/propagator.js +182 -0
  33. package/dist/authorization/propagator.js.map +1 -0
  34. package/dist/credential-generator.js +9 -9
  35. package/dist/domain/services/security-domain-service.js +1 -1
  36. package/dist/domain/services/security-domain-service.js.map +1 -1
  37. package/dist/index.d.ts +9 -1
  38. package/dist/index.d.ts.map +1 -1
  39. package/dist/index.js +21 -1
  40. package/dist/index.js.map +1 -1
  41. package/dist/keychain-adapter.d.ts +48 -0
  42. package/dist/keychain-adapter.d.ts.map +1 -0
  43. package/dist/keychain-adapter.js +0 -0
  44. package/dist/keychain-adapter.js.map +1 -0
  45. package/dist/oauth/browser.d.ts +31 -0
  46. package/dist/oauth/browser.d.ts.map +1 -0
  47. package/dist/oauth/browser.js +55 -0
  48. package/dist/oauth/browser.js.map +1 -0
  49. package/dist/oauth/callback-server.d.ts +37 -0
  50. package/dist/oauth/callback-server.d.ts.map +1 -0
  51. package/dist/oauth/callback-server.js +86 -0
  52. package/dist/oauth/callback-server.js.map +1 -0
  53. package/dist/oauth/client.d.ts +57 -0
  54. package/dist/oauth/client.d.ts.map +1 -0
  55. package/dist/oauth/client.js +120 -0
  56. package/dist/oauth/client.js.map +1 -0
  57. package/dist/oauth/pkce.d.ts +25 -0
  58. package/dist/oauth/pkce.d.ts.map +1 -0
  59. package/dist/oauth/pkce.js +36 -0
  60. package/dist/oauth/pkce.js.map +1 -0
  61. package/dist/password-hasher.d.ts.map +1 -1
  62. package/dist/password-hasher.js +8 -1
  63. package/dist/password-hasher.js.map +1 -1
  64. package/dist/plugins/integrity-verifier.d.ts +125 -0
  65. package/dist/plugins/integrity-verifier.d.ts.map +1 -0
  66. package/dist/plugins/integrity-verifier.js +186 -0
  67. package/dist/plugins/integrity-verifier.js.map +1 -0
  68. package/dist/safe-executor.d.ts +7 -0
  69. package/dist/safe-executor.d.ts.map +1 -1
  70. package/dist/safe-executor.js +21 -1
  71. package/dist/safe-executor.js.map +1 -1
  72. package/dist/tool-output-guardrail.d.ts +126 -0
  73. package/dist/tool-output-guardrail.d.ts.map +1 -0
  74. package/dist/tool-output-guardrail.js +257 -0
  75. package/dist/tool-output-guardrail.js.map +1 -0
  76. package/node_modules-incomplete-release-test/.vite/vitest/da39a3ee5e6b4b0d3255bfef95601890afd80709/results.json +1 -0
  77. package/package.json +33 -28
  78. package/scripts/verify-oauth-exports.mjs +29 -0
  79. package/src/CVE-REMEDIATION.ts +591 -251
  80. package/src/application/index.ts +10 -10
  81. package/src/application/services/security-application-service.ts +193 -193
  82. package/src/authorization/propagator.ts +279 -0
  83. package/src/credential-generator.ts +368 -368
  84. package/src/domain/entities/security-context.ts +173 -173
  85. package/src/domain/index.ts +17 -17
  86. package/src/domain/services/security-domain-service.ts +296 -296
  87. package/src/index.ts +340 -271
  88. package/src/input-validator.ts +466 -466
  89. package/src/keychain-adapter.ts +0 -0
  90. package/src/oauth/browser.ts +58 -0
  91. package/src/oauth/callback-server.ts +97 -0
  92. package/src/oauth/client.ts +153 -0
  93. package/src/oauth/pkce.ts +45 -0
  94. package/src/password-hasher.ts +277 -270
  95. package/src/path-validator.ts +525 -525
  96. package/src/plugins/integrity-verifier.ts +265 -0
  97. package/src/safe-executor.ts +546 -525
  98. package/src/token-generator.ts +463 -463
  99. package/src/tool-output-guardrail.ts +360 -0
  100. package/tmp.json +0 -0
  101. package/tsconfig.json +9 -9
  102. package/tsconfig.tsbuildinfo +1 -1
  103. package/vitest.config.ts +20 -0
  104. package/.agentic-flow/intelligence.json +0 -16
  105. package/__tests__/coverage/base.css +0 -224
  106. package/__tests__/coverage/block-navigation.js +0 -87
  107. package/__tests__/coverage/coverage-final.json +0 -11
  108. package/__tests__/coverage/favicon.png +0 -0
  109. package/__tests__/coverage/index.html +0 -161
  110. package/__tests__/coverage/lcov-report/base.css +0 -224
  111. package/__tests__/coverage/lcov-report/block-navigation.js +0 -87
  112. package/__tests__/coverage/lcov-report/favicon.png +0 -0
  113. package/__tests__/coverage/lcov-report/index.html +0 -161
  114. package/__tests__/coverage/lcov-report/prettify.css +0 -1
  115. package/__tests__/coverage/lcov-report/prettify.js +0 -2
  116. package/__tests__/coverage/lcov-report/sort-arrow-sprite.png +0 -0
  117. package/__tests__/coverage/lcov-report/sorter.js +0 -210
  118. package/__tests__/coverage/lcov-report/src/CVE-REMEDIATION.ts.html +0 -838
  119. package/__tests__/coverage/lcov-report/src/application/services/index.html +0 -116
  120. package/__tests__/coverage/lcov-report/src/application/services/security-application-service.ts.html +0 -664
  121. package/__tests__/coverage/lcov-report/src/credential-generator.ts.html +0 -1189
  122. package/__tests__/coverage/lcov-report/src/domain/entities/index.html +0 -116
  123. package/__tests__/coverage/lcov-report/src/domain/entities/security-context.ts.html +0 -604
  124. package/__tests__/coverage/lcov-report/src/domain/services/index.html +0 -116
  125. package/__tests__/coverage/lcov-report/src/domain/services/security-domain-service.ts.html +0 -973
  126. package/__tests__/coverage/lcov-report/src/index.html +0 -206
  127. package/__tests__/coverage/lcov-report/src/input-validator.ts.html +0 -1483
  128. package/__tests__/coverage/lcov-report/src/password-hasher.ts.html +0 -895
  129. package/__tests__/coverage/lcov-report/src/path-validator.ts.html +0 -1660
  130. package/__tests__/coverage/lcov-report/src/safe-executor.ts.html +0 -1660
  131. package/__tests__/coverage/lcov-report/src/token-generator.ts.html +0 -1474
  132. package/__tests__/coverage/lcov.info +0 -3650
  133. package/__tests__/coverage/prettify.css +0 -1
  134. package/__tests__/coverage/prettify.js +0 -2
  135. package/__tests__/coverage/sort-arrow-sprite.png +0 -0
  136. package/__tests__/coverage/sorter.js +0 -210
  137. package/__tests__/coverage/src/CVE-REMEDIATION.ts.html +0 -838
  138. package/__tests__/coverage/src/application/services/index.html +0 -116
  139. package/__tests__/coverage/src/application/services/security-application-service.ts.html +0 -664
  140. package/__tests__/coverage/src/credential-generator.ts.html +0 -1189
  141. package/__tests__/coverage/src/domain/entities/index.html +0 -116
  142. package/__tests__/coverage/src/domain/entities/security-context.ts.html +0 -604
  143. package/__tests__/coverage/src/domain/services/index.html +0 -116
  144. package/__tests__/coverage/src/domain/services/security-domain-service.ts.html +0 -973
  145. package/__tests__/coverage/src/index.html +0 -206
  146. package/__tests__/coverage/src/input-validator.ts.html +0 -1483
  147. package/__tests__/coverage/src/password-hasher.ts.html +0 -895
  148. package/__tests__/coverage/src/path-validator.ts.html +0 -1660
  149. package/__tests__/coverage/src/safe-executor.ts.html +0 -1660
  150. package/__tests__/coverage/src/token-generator.ts.html +0 -1474
@@ -1,664 +0,0 @@
1
-
2
- <!doctype html>
3
- <html lang="en">
4
-
5
- <head>
6
- <title>Code coverage report for src/application/services/security-application-service.ts</title>
7
- <meta charset="utf-8" />
8
- <link rel="stylesheet" href="../../../prettify.css" />
9
- <link rel="stylesheet" href="../../../base.css" />
10
- <link rel="shortcut icon" type="image/x-icon" href="../../../favicon.png" />
11
- <meta name="viewport" content="width=device-width, initial-scale=1" />
12
- <style type='text/css'>
13
- .coverage-summary .sorter {
14
- background-image: url(../../../sort-arrow-sprite.png);
15
- }
16
- </style>
17
- </head>
18
-
19
- <body>
20
- <div class='wrapper'>
21
- <div class='pad1'>
22
- <h1><a href="../../../index.html">All files</a> / <a href="index.html">src/application/services</a> security-application-service.ts</h1>
23
- <div class='clearfix'>
24
-
25
- <div class='fl pad1y space-right2'>
26
- <span class="strong">0% </span>
27
- <span class="quiet">Statements</span>
28
- <span class='fraction'>0/193</span>
29
- </div>
30
-
31
-
32
- <div class='fl pad1y space-right2'>
33
- <span class="strong">0% </span>
34
- <span class="quiet">Branches</span>
35
- <span class='fraction'>0/1</span>
36
- </div>
37
-
38
-
39
- <div class='fl pad1y space-right2'>
40
- <span class="strong">0% </span>
41
- <span class="quiet">Functions</span>
42
- <span class='fraction'>0/1</span>
43
- </div>
44
-
45
-
46
- <div class='fl pad1y space-right2'>
47
- <span class="strong">0% </span>
48
- <span class="quiet">Lines</span>
49
- <span class='fraction'>0/193</span>
50
- </div>
51
-
52
-
53
- </div>
54
- <p class="quiet">
55
- Press <em>n</em> or <em>j</em> to go to the next uncovered block, <em>b</em>, <em>p</em> or <em>k</em> for the previous block.
56
- </p>
57
- <template id="filterTemplate">
58
- <div class="quiet">
59
- Filter:
60
- <input type="search" id="fileSearch">
61
- </div>
62
- </template>
63
- </div>
64
- <div class='status-line low'></div>
65
- <pre><table class="coverage">
66
- <tr><td class="line-count quiet"><a name='L1'></a><a href='#L1'>1</a>
67
- <a name='L2'></a><a href='#L2'>2</a>
68
- <a name='L3'></a><a href='#L3'>3</a>
69
- <a name='L4'></a><a href='#L4'>4</a>
70
- <a name='L5'></a><a href='#L5'>5</a>
71
- <a name='L6'></a><a href='#L6'>6</a>
72
- <a name='L7'></a><a href='#L7'>7</a>
73
- <a name='L8'></a><a href='#L8'>8</a>
74
- <a name='L9'></a><a href='#L9'>9</a>
75
- <a name='L10'></a><a href='#L10'>10</a>
76
- <a name='L11'></a><a href='#L11'>11</a>
77
- <a name='L12'></a><a href='#L12'>12</a>
78
- <a name='L13'></a><a href='#L13'>13</a>
79
- <a name='L14'></a><a href='#L14'>14</a>
80
- <a name='L15'></a><a href='#L15'>15</a>
81
- <a name='L16'></a><a href='#L16'>16</a>
82
- <a name='L17'></a><a href='#L17'>17</a>
83
- <a name='L18'></a><a href='#L18'>18</a>
84
- <a name='L19'></a><a href='#L19'>19</a>
85
- <a name='L20'></a><a href='#L20'>20</a>
86
- <a name='L21'></a><a href='#L21'>21</a>
87
- <a name='L22'></a><a href='#L22'>22</a>
88
- <a name='L23'></a><a href='#L23'>23</a>
89
- <a name='L24'></a><a href='#L24'>24</a>
90
- <a name='L25'></a><a href='#L25'>25</a>
91
- <a name='L26'></a><a href='#L26'>26</a>
92
- <a name='L27'></a><a href='#L27'>27</a>
93
- <a name='L28'></a><a href='#L28'>28</a>
94
- <a name='L29'></a><a href='#L29'>29</a>
95
- <a name='L30'></a><a href='#L30'>30</a>
96
- <a name='L31'></a><a href='#L31'>31</a>
97
- <a name='L32'></a><a href='#L32'>32</a>
98
- <a name='L33'></a><a href='#L33'>33</a>
99
- <a name='L34'></a><a href='#L34'>34</a>
100
- <a name='L35'></a><a href='#L35'>35</a>
101
- <a name='L36'></a><a href='#L36'>36</a>
102
- <a name='L37'></a><a href='#L37'>37</a>
103
- <a name='L38'></a><a href='#L38'>38</a>
104
- <a name='L39'></a><a href='#L39'>39</a>
105
- <a name='L40'></a><a href='#L40'>40</a>
106
- <a name='L41'></a><a href='#L41'>41</a>
107
- <a name='L42'></a><a href='#L42'>42</a>
108
- <a name='L43'></a><a href='#L43'>43</a>
109
- <a name='L44'></a><a href='#L44'>44</a>
110
- <a name='L45'></a><a href='#L45'>45</a>
111
- <a name='L46'></a><a href='#L46'>46</a>
112
- <a name='L47'></a><a href='#L47'>47</a>
113
- <a name='L48'></a><a href='#L48'>48</a>
114
- <a name='L49'></a><a href='#L49'>49</a>
115
- <a name='L50'></a><a href='#L50'>50</a>
116
- <a name='L51'></a><a href='#L51'>51</a>
117
- <a name='L52'></a><a href='#L52'>52</a>
118
- <a name='L53'></a><a href='#L53'>53</a>
119
- <a name='L54'></a><a href='#L54'>54</a>
120
- <a name='L55'></a><a href='#L55'>55</a>
121
- <a name='L56'></a><a href='#L56'>56</a>
122
- <a name='L57'></a><a href='#L57'>57</a>
123
- <a name='L58'></a><a href='#L58'>58</a>
124
- <a name='L59'></a><a href='#L59'>59</a>
125
- <a name='L60'></a><a href='#L60'>60</a>
126
- <a name='L61'></a><a href='#L61'>61</a>
127
- <a name='L62'></a><a href='#L62'>62</a>
128
- <a name='L63'></a><a href='#L63'>63</a>
129
- <a name='L64'></a><a href='#L64'>64</a>
130
- <a name='L65'></a><a href='#L65'>65</a>
131
- <a name='L66'></a><a href='#L66'>66</a>
132
- <a name='L67'></a><a href='#L67'>67</a>
133
- <a name='L68'></a><a href='#L68'>68</a>
134
- <a name='L69'></a><a href='#L69'>69</a>
135
- <a name='L70'></a><a href='#L70'>70</a>
136
- <a name='L71'></a><a href='#L71'>71</a>
137
- <a name='L72'></a><a href='#L72'>72</a>
138
- <a name='L73'></a><a href='#L73'>73</a>
139
- <a name='L74'></a><a href='#L74'>74</a>
140
- <a name='L75'></a><a href='#L75'>75</a>
141
- <a name='L76'></a><a href='#L76'>76</a>
142
- <a name='L77'></a><a href='#L77'>77</a>
143
- <a name='L78'></a><a href='#L78'>78</a>
144
- <a name='L79'></a><a href='#L79'>79</a>
145
- <a name='L80'></a><a href='#L80'>80</a>
146
- <a name='L81'></a><a href='#L81'>81</a>
147
- <a name='L82'></a><a href='#L82'>82</a>
148
- <a name='L83'></a><a href='#L83'>83</a>
149
- <a name='L84'></a><a href='#L84'>84</a>
150
- <a name='L85'></a><a href='#L85'>85</a>
151
- <a name='L86'></a><a href='#L86'>86</a>
152
- <a name='L87'></a><a href='#L87'>87</a>
153
- <a name='L88'></a><a href='#L88'>88</a>
154
- <a name='L89'></a><a href='#L89'>89</a>
155
- <a name='L90'></a><a href='#L90'>90</a>
156
- <a name='L91'></a><a href='#L91'>91</a>
157
- <a name='L92'></a><a href='#L92'>92</a>
158
- <a name='L93'></a><a href='#L93'>93</a>
159
- <a name='L94'></a><a href='#L94'>94</a>
160
- <a name='L95'></a><a href='#L95'>95</a>
161
- <a name='L96'></a><a href='#L96'>96</a>
162
- <a name='L97'></a><a href='#L97'>97</a>
163
- <a name='L98'></a><a href='#L98'>98</a>
164
- <a name='L99'></a><a href='#L99'>99</a>
165
- <a name='L100'></a><a href='#L100'>100</a>
166
- <a name='L101'></a><a href='#L101'>101</a>
167
- <a name='L102'></a><a href='#L102'>102</a>
168
- <a name='L103'></a><a href='#L103'>103</a>
169
- <a name='L104'></a><a href='#L104'>104</a>
170
- <a name='L105'></a><a href='#L105'>105</a>
171
- <a name='L106'></a><a href='#L106'>106</a>
172
- <a name='L107'></a><a href='#L107'>107</a>
173
- <a name='L108'></a><a href='#L108'>108</a>
174
- <a name='L109'></a><a href='#L109'>109</a>
175
- <a name='L110'></a><a href='#L110'>110</a>
176
- <a name='L111'></a><a href='#L111'>111</a>
177
- <a name='L112'></a><a href='#L112'>112</a>
178
- <a name='L113'></a><a href='#L113'>113</a>
179
- <a name='L114'></a><a href='#L114'>114</a>
180
- <a name='L115'></a><a href='#L115'>115</a>
181
- <a name='L116'></a><a href='#L116'>116</a>
182
- <a name='L117'></a><a href='#L117'>117</a>
183
- <a name='L118'></a><a href='#L118'>118</a>
184
- <a name='L119'></a><a href='#L119'>119</a>
185
- <a name='L120'></a><a href='#L120'>120</a>
186
- <a name='L121'></a><a href='#L121'>121</a>
187
- <a name='L122'></a><a href='#L122'>122</a>
188
- <a name='L123'></a><a href='#L123'>123</a>
189
- <a name='L124'></a><a href='#L124'>124</a>
190
- <a name='L125'></a><a href='#L125'>125</a>
191
- <a name='L126'></a><a href='#L126'>126</a>
192
- <a name='L127'></a><a href='#L127'>127</a>
193
- <a name='L128'></a><a href='#L128'>128</a>
194
- <a name='L129'></a><a href='#L129'>129</a>
195
- <a name='L130'></a><a href='#L130'>130</a>
196
- <a name='L131'></a><a href='#L131'>131</a>
197
- <a name='L132'></a><a href='#L132'>132</a>
198
- <a name='L133'></a><a href='#L133'>133</a>
199
- <a name='L134'></a><a href='#L134'>134</a>
200
- <a name='L135'></a><a href='#L135'>135</a>
201
- <a name='L136'></a><a href='#L136'>136</a>
202
- <a name='L137'></a><a href='#L137'>137</a>
203
- <a name='L138'></a><a href='#L138'>138</a>
204
- <a name='L139'></a><a href='#L139'>139</a>
205
- <a name='L140'></a><a href='#L140'>140</a>
206
- <a name='L141'></a><a href='#L141'>141</a>
207
- <a name='L142'></a><a href='#L142'>142</a>
208
- <a name='L143'></a><a href='#L143'>143</a>
209
- <a name='L144'></a><a href='#L144'>144</a>
210
- <a name='L145'></a><a href='#L145'>145</a>
211
- <a name='L146'></a><a href='#L146'>146</a>
212
- <a name='L147'></a><a href='#L147'>147</a>
213
- <a name='L148'></a><a href='#L148'>148</a>
214
- <a name='L149'></a><a href='#L149'>149</a>
215
- <a name='L150'></a><a href='#L150'>150</a>
216
- <a name='L151'></a><a href='#L151'>151</a>
217
- <a name='L152'></a><a href='#L152'>152</a>
218
- <a name='L153'></a><a href='#L153'>153</a>
219
- <a name='L154'></a><a href='#L154'>154</a>
220
- <a name='L155'></a><a href='#L155'>155</a>
221
- <a name='L156'></a><a href='#L156'>156</a>
222
- <a name='L157'></a><a href='#L157'>157</a>
223
- <a name='L158'></a><a href='#L158'>158</a>
224
- <a name='L159'></a><a href='#L159'>159</a>
225
- <a name='L160'></a><a href='#L160'>160</a>
226
- <a name='L161'></a><a href='#L161'>161</a>
227
- <a name='L162'></a><a href='#L162'>162</a>
228
- <a name='L163'></a><a href='#L163'>163</a>
229
- <a name='L164'></a><a href='#L164'>164</a>
230
- <a name='L165'></a><a href='#L165'>165</a>
231
- <a name='L166'></a><a href='#L166'>166</a>
232
- <a name='L167'></a><a href='#L167'>167</a>
233
- <a name='L168'></a><a href='#L168'>168</a>
234
- <a name='L169'></a><a href='#L169'>169</a>
235
- <a name='L170'></a><a href='#L170'>170</a>
236
- <a name='L171'></a><a href='#L171'>171</a>
237
- <a name='L172'></a><a href='#L172'>172</a>
238
- <a name='L173'></a><a href='#L173'>173</a>
239
- <a name='L174'></a><a href='#L174'>174</a>
240
- <a name='L175'></a><a href='#L175'>175</a>
241
- <a name='L176'></a><a href='#L176'>176</a>
242
- <a name='L177'></a><a href='#L177'>177</a>
243
- <a name='L178'></a><a href='#L178'>178</a>
244
- <a name='L179'></a><a href='#L179'>179</a>
245
- <a name='L180'></a><a href='#L180'>180</a>
246
- <a name='L181'></a><a href='#L181'>181</a>
247
- <a name='L182'></a><a href='#L182'>182</a>
248
- <a name='L183'></a><a href='#L183'>183</a>
249
- <a name='L184'></a><a href='#L184'>184</a>
250
- <a name='L185'></a><a href='#L185'>185</a>
251
- <a name='L186'></a><a href='#L186'>186</a>
252
- <a name='L187'></a><a href='#L187'>187</a>
253
- <a name='L188'></a><a href='#L188'>188</a>
254
- <a name='L189'></a><a href='#L189'>189</a>
255
- <a name='L190'></a><a href='#L190'>190</a>
256
- <a name='L191'></a><a href='#L191'>191</a>
257
- <a name='L192'></a><a href='#L192'>192</a>
258
- <a name='L193'></a><a href='#L193'>193</a>
259
- <a name='L194'></a><a href='#L194'>194</a></td><td class="line-coverage quiet"><span class="cline-any cline-no">&nbsp;</span>
260
- <span class="cline-any cline-no">&nbsp;</span>
261
- <span class="cline-any cline-no">&nbsp;</span>
262
- <span class="cline-any cline-no">&nbsp;</span>
263
- <span class="cline-any cline-no">&nbsp;</span>
264
- <span class="cline-any cline-no">&nbsp;</span>
265
- <span class="cline-any cline-no">&nbsp;</span>
266
- <span class="cline-any cline-no">&nbsp;</span>
267
- <span class="cline-any cline-no">&nbsp;</span>
268
- <span class="cline-any cline-no">&nbsp;</span>
269
- <span class="cline-any cline-no">&nbsp;</span>
270
- <span class="cline-any cline-no">&nbsp;</span>
271
- <span class="cline-any cline-no">&nbsp;</span>
272
- <span class="cline-any cline-no">&nbsp;</span>
273
- <span class="cline-any cline-no">&nbsp;</span>
274
- <span class="cline-any cline-no">&nbsp;</span>
275
- <span class="cline-any cline-no">&nbsp;</span>
276
- <span class="cline-any cline-no">&nbsp;</span>
277
- <span class="cline-any cline-no">&nbsp;</span>
278
- <span class="cline-any cline-no">&nbsp;</span>
279
- <span class="cline-any cline-no">&nbsp;</span>
280
- <span class="cline-any cline-no">&nbsp;</span>
281
- <span class="cline-any cline-no">&nbsp;</span>
282
- <span class="cline-any cline-no">&nbsp;</span>
283
- <span class="cline-any cline-no">&nbsp;</span>
284
- <span class="cline-any cline-no">&nbsp;</span>
285
- <span class="cline-any cline-no">&nbsp;</span>
286
- <span class="cline-any cline-no">&nbsp;</span>
287
- <span class="cline-any cline-no">&nbsp;</span>
288
- <span class="cline-any cline-no">&nbsp;</span>
289
- <span class="cline-any cline-no">&nbsp;</span>
290
- <span class="cline-any cline-no">&nbsp;</span>
291
- <span class="cline-any cline-no">&nbsp;</span>
292
- <span class="cline-any cline-no">&nbsp;</span>
293
- <span class="cline-any cline-no">&nbsp;</span>
294
- <span class="cline-any cline-no">&nbsp;</span>
295
- <span class="cline-any cline-no">&nbsp;</span>
296
- <span class="cline-any cline-no">&nbsp;</span>
297
- <span class="cline-any cline-no">&nbsp;</span>
298
- <span class="cline-any cline-no">&nbsp;</span>
299
- <span class="cline-any cline-no">&nbsp;</span>
300
- <span class="cline-any cline-no">&nbsp;</span>
301
- <span class="cline-any cline-no">&nbsp;</span>
302
- <span class="cline-any cline-no">&nbsp;</span>
303
- <span class="cline-any cline-no">&nbsp;</span>
304
- <span class="cline-any cline-no">&nbsp;</span>
305
- <span class="cline-any cline-no">&nbsp;</span>
306
- <span class="cline-any cline-no">&nbsp;</span>
307
- <span class="cline-any cline-no">&nbsp;</span>
308
- <span class="cline-any cline-no">&nbsp;</span>
309
- <span class="cline-any cline-no">&nbsp;</span>
310
- <span class="cline-any cline-no">&nbsp;</span>
311
- <span class="cline-any cline-no">&nbsp;</span>
312
- <span class="cline-any cline-no">&nbsp;</span>
313
- <span class="cline-any cline-no">&nbsp;</span>
314
- <span class="cline-any cline-no">&nbsp;</span>
315
- <span class="cline-any cline-no">&nbsp;</span>
316
- <span class="cline-any cline-no">&nbsp;</span>
317
- <span class="cline-any cline-no">&nbsp;</span>
318
- <span class="cline-any cline-no">&nbsp;</span>
319
- <span class="cline-any cline-no">&nbsp;</span>
320
- <span class="cline-any cline-no">&nbsp;</span>
321
- <span class="cline-any cline-no">&nbsp;</span>
322
- <span class="cline-any cline-no">&nbsp;</span>
323
- <span class="cline-any cline-no">&nbsp;</span>
324
- <span class="cline-any cline-no">&nbsp;</span>
325
- <span class="cline-any cline-no">&nbsp;</span>
326
- <span class="cline-any cline-no">&nbsp;</span>
327
- <span class="cline-any cline-no">&nbsp;</span>
328
- <span class="cline-any cline-no">&nbsp;</span>
329
- <span class="cline-any cline-no">&nbsp;</span>
330
- <span class="cline-any cline-no">&nbsp;</span>
331
- <span class="cline-any cline-no">&nbsp;</span>
332
- <span class="cline-any cline-no">&nbsp;</span>
333
- <span class="cline-any cline-no">&nbsp;</span>
334
- <span class="cline-any cline-no">&nbsp;</span>
335
- <span class="cline-any cline-no">&nbsp;</span>
336
- <span class="cline-any cline-no">&nbsp;</span>
337
- <span class="cline-any cline-no">&nbsp;</span>
338
- <span class="cline-any cline-no">&nbsp;</span>
339
- <span class="cline-any cline-no">&nbsp;</span>
340
- <span class="cline-any cline-no">&nbsp;</span>
341
- <span class="cline-any cline-no">&nbsp;</span>
342
- <span class="cline-any cline-no">&nbsp;</span>
343
- <span class="cline-any cline-no">&nbsp;</span>
344
- <span class="cline-any cline-no">&nbsp;</span>
345
- <span class="cline-any cline-no">&nbsp;</span>
346
- <span class="cline-any cline-no">&nbsp;</span>
347
- <span class="cline-any cline-no">&nbsp;</span>
348
- <span class="cline-any cline-no">&nbsp;</span>
349
- <span class="cline-any cline-no">&nbsp;</span>
350
- <span class="cline-any cline-no">&nbsp;</span>
351
- <span class="cline-any cline-no">&nbsp;</span>
352
- <span class="cline-any cline-no">&nbsp;</span>
353
- <span class="cline-any cline-no">&nbsp;</span>
354
- <span class="cline-any cline-no">&nbsp;</span>
355
- <span class="cline-any cline-no">&nbsp;</span>
356
- <span class="cline-any cline-no">&nbsp;</span>
357
- <span class="cline-any cline-no">&nbsp;</span>
358
- <span class="cline-any cline-no">&nbsp;</span>
359
- <span class="cline-any cline-no">&nbsp;</span>
360
- <span class="cline-any cline-no">&nbsp;</span>
361
- <span class="cline-any cline-no">&nbsp;</span>
362
- <span class="cline-any cline-no">&nbsp;</span>
363
- <span class="cline-any cline-no">&nbsp;</span>
364
- <span class="cline-any cline-no">&nbsp;</span>
365
- <span class="cline-any cline-no">&nbsp;</span>
366
- <span class="cline-any cline-no">&nbsp;</span>
367
- <span class="cline-any cline-no">&nbsp;</span>
368
- <span class="cline-any cline-no">&nbsp;</span>
369
- <span class="cline-any cline-no">&nbsp;</span>
370
- <span class="cline-any cline-no">&nbsp;</span>
371
- <span class="cline-any cline-no">&nbsp;</span>
372
- <span class="cline-any cline-no">&nbsp;</span>
373
- <span class="cline-any cline-no">&nbsp;</span>
374
- <span class="cline-any cline-no">&nbsp;</span>
375
- <span class="cline-any cline-no">&nbsp;</span>
376
- <span class="cline-any cline-no">&nbsp;</span>
377
- <span class="cline-any cline-no">&nbsp;</span>
378
- <span class="cline-any cline-no">&nbsp;</span>
379
- <span class="cline-any cline-no">&nbsp;</span>
380
- <span class="cline-any cline-no">&nbsp;</span>
381
- <span class="cline-any cline-no">&nbsp;</span>
382
- <span class="cline-any cline-no">&nbsp;</span>
383
- <span class="cline-any cline-no">&nbsp;</span>
384
- <span class="cline-any cline-no">&nbsp;</span>
385
- <span class="cline-any cline-no">&nbsp;</span>
386
- <span class="cline-any cline-no">&nbsp;</span>
387
- <span class="cline-any cline-no">&nbsp;</span>
388
- <span class="cline-any cline-no">&nbsp;</span>
389
- <span class="cline-any cline-no">&nbsp;</span>
390
- <span class="cline-any cline-no">&nbsp;</span>
391
- <span class="cline-any cline-no">&nbsp;</span>
392
- <span class="cline-any cline-no">&nbsp;</span>
393
- <span class="cline-any cline-no">&nbsp;</span>
394
- <span class="cline-any cline-no">&nbsp;</span>
395
- <span class="cline-any cline-no">&nbsp;</span>
396
- <span class="cline-any cline-no">&nbsp;</span>
397
- <span class="cline-any cline-no">&nbsp;</span>
398
- <span class="cline-any cline-no">&nbsp;</span>
399
- <span class="cline-any cline-no">&nbsp;</span>
400
- <span class="cline-any cline-no">&nbsp;</span>
401
- <span class="cline-any cline-no">&nbsp;</span>
402
- <span class="cline-any cline-no">&nbsp;</span>
403
- <span class="cline-any cline-no">&nbsp;</span>
404
- <span class="cline-any cline-no">&nbsp;</span>
405
- <span class="cline-any cline-no">&nbsp;</span>
406
- <span class="cline-any cline-no">&nbsp;</span>
407
- <span class="cline-any cline-no">&nbsp;</span>
408
- <span class="cline-any cline-no">&nbsp;</span>
409
- <span class="cline-any cline-no">&nbsp;</span>
410
- <span class="cline-any cline-no">&nbsp;</span>
411
- <span class="cline-any cline-no">&nbsp;</span>
412
- <span class="cline-any cline-no">&nbsp;</span>
413
- <span class="cline-any cline-no">&nbsp;</span>
414
- <span class="cline-any cline-no">&nbsp;</span>
415
- <span class="cline-any cline-no">&nbsp;</span>
416
- <span class="cline-any cline-no">&nbsp;</span>
417
- <span class="cline-any cline-no">&nbsp;</span>
418
- <span class="cline-any cline-no">&nbsp;</span>
419
- <span class="cline-any cline-no">&nbsp;</span>
420
- <span class="cline-any cline-no">&nbsp;</span>
421
- <span class="cline-any cline-no">&nbsp;</span>
422
- <span class="cline-any cline-no">&nbsp;</span>
423
- <span class="cline-any cline-no">&nbsp;</span>
424
- <span class="cline-any cline-no">&nbsp;</span>
425
- <span class="cline-any cline-no">&nbsp;</span>
426
- <span class="cline-any cline-no">&nbsp;</span>
427
- <span class="cline-any cline-no">&nbsp;</span>
428
- <span class="cline-any cline-no">&nbsp;</span>
429
- <span class="cline-any cline-no">&nbsp;</span>
430
- <span class="cline-any cline-no">&nbsp;</span>
431
- <span class="cline-any cline-no">&nbsp;</span>
432
- <span class="cline-any cline-no">&nbsp;</span>
433
- <span class="cline-any cline-no">&nbsp;</span>
434
- <span class="cline-any cline-no">&nbsp;</span>
435
- <span class="cline-any cline-no">&nbsp;</span>
436
- <span class="cline-any cline-no">&nbsp;</span>
437
- <span class="cline-any cline-no">&nbsp;</span>
438
- <span class="cline-any cline-no">&nbsp;</span>
439
- <span class="cline-any cline-no">&nbsp;</span>
440
- <span class="cline-any cline-no">&nbsp;</span>
441
- <span class="cline-any cline-no">&nbsp;</span>
442
- <span class="cline-any cline-no">&nbsp;</span>
443
- <span class="cline-any cline-no">&nbsp;</span>
444
- <span class="cline-any cline-no">&nbsp;</span>
445
- <span class="cline-any cline-no">&nbsp;</span>
446
- <span class="cline-any cline-no">&nbsp;</span>
447
- <span class="cline-any cline-no">&nbsp;</span>
448
- <span class="cline-any cline-no">&nbsp;</span>
449
- <span class="cline-any cline-no">&nbsp;</span>
450
- <span class="cline-any cline-no">&nbsp;</span>
451
- <span class="cline-any cline-no">&nbsp;</span>
452
- <span class="cline-any cline-neutral">&nbsp;</span></td><td class="text"><pre class="prettyprint lang-js"><span class="cstat-no" title="statement not covered" >/**<span class="fstat-no" title="function not covered" ><span class="branch-0 cbranch-no" title="branch not covered" ></span></span></span>
453
- <span class="cstat-no" title="statement not covered" > * Security Application Service - Application Layer</span>
454
- <span class="cstat-no" title="statement not covered" > *</span>
455
- <span class="cstat-no" title="statement not covered" > * Orchestrates security operations and provides simplified interface.</span>
456
- <span class="cstat-no" title="statement not covered" > *</span>
457
- <span class="cstat-no" title="statement not covered" > * @module v3/security/application/services</span>
458
- <span class="cstat-no" title="statement not covered" > */</span>
459
- <span class="cstat-no" title="statement not covered" ></span>
460
- <span class="cstat-no" title="statement not covered" >import { SecurityContext, PermissionLevel } from '../../domain/entities/security-context.js';</span>
461
- <span class="cstat-no" title="statement not covered" >import { SecurityDomainService, ValidationResult, ThreatDetectionResult } from '../../domain/services/security-domain-service.js';</span>
462
- <span class="cstat-no" title="statement not covered" ></span>
463
- <span class="cstat-no" title="statement not covered" >/**</span>
464
- <span class="cstat-no" title="statement not covered" > * Security audit result</span>
465
- <span class="cstat-no" title="statement not covered" > */</span>
466
- <span class="cstat-no" title="statement not covered" >export interface SecurityAuditResult {</span>
467
- <span class="cstat-no" title="statement not covered" > passed: boolean;</span>
468
- <span class="cstat-no" title="statement not covered" > score: number;</span>
469
- <span class="cstat-no" title="statement not covered" > checks: Array&lt;{</span>
470
- <span class="cstat-no" title="statement not covered" > name: string;</span>
471
- <span class="cstat-no" title="statement not covered" > passed: boolean;</span>
472
- <span class="cstat-no" title="statement not covered" > severity: 'low' | 'medium' | 'high' | 'critical';</span>
473
- <span class="cstat-no" title="statement not covered" > message: string;</span>
474
- <span class="cstat-no" title="statement not covered" > }&gt;;</span>
475
- <span class="cstat-no" title="statement not covered" > recommendations: string[];</span>
476
- <span class="cstat-no" title="statement not covered" >}</span>
477
- <span class="cstat-no" title="statement not covered" ></span>
478
- <span class="cstat-no" title="statement not covered" >/**</span>
479
- <span class="cstat-no" title="statement not covered" > * Security Application Service</span>
480
- <span class="cstat-no" title="statement not covered" > */</span>
481
- <span class="cstat-no" title="statement not covered" >export class SecurityApplicationService {</span>
482
- <span class="cstat-no" title="statement not covered" > private readonly domainService: SecurityDomainService;</span>
483
- <span class="cstat-no" title="statement not covered" > private readonly contexts: Map&lt;string, SecurityContext&gt; = new Map();</span>
484
- <span class="cstat-no" title="statement not covered" ></span>
485
- <span class="cstat-no" title="statement not covered" > constructor() {</span>
486
- <span class="cstat-no" title="statement not covered" > this.domainService = new SecurityDomainService();</span>
487
- <span class="cstat-no" title="statement not covered" > }</span>
488
- <span class="cstat-no" title="statement not covered" ></span>
489
- <span class="cstat-no" title="statement not covered" > // ============================================================================</span>
490
- <span class="cstat-no" title="statement not covered" > // Context Management</span>
491
- <span class="cstat-no" title="statement not covered" > // ============================================================================</span>
492
- <span class="cstat-no" title="statement not covered" ></span>
493
- <span class="cstat-no" title="statement not covered" > /**</span>
494
- <span class="cstat-no" title="statement not covered" > * Create and register security context for agent</span>
495
- <span class="cstat-no" title="statement not covered" > */</span>
496
- <span class="cstat-no" title="statement not covered" > createAgentContext(agentId: string, role: string): SecurityContext {</span>
497
- <span class="cstat-no" title="statement not covered" > const context = this.domainService.createAgentContext(agentId, role);</span>
498
- <span class="cstat-no" title="statement not covered" > this.contexts.set(agentId, context);</span>
499
- <span class="cstat-no" title="statement not covered" > return context;</span>
500
- <span class="cstat-no" title="statement not covered" > }</span>
501
- <span class="cstat-no" title="statement not covered" ></span>
502
- <span class="cstat-no" title="statement not covered" > /**</span>
503
- <span class="cstat-no" title="statement not covered" > * Get security context</span>
504
- <span class="cstat-no" title="statement not covered" > */</span>
505
- <span class="cstat-no" title="statement not covered" > getContext(principalId: string): SecurityContext | undefined {</span>
506
- <span class="cstat-no" title="statement not covered" > return this.contexts.get(principalId);</span>
507
- <span class="cstat-no" title="statement not covered" > }</span>
508
- <span class="cstat-no" title="statement not covered" ></span>
509
- <span class="cstat-no" title="statement not covered" > /**</span>
510
- <span class="cstat-no" title="statement not covered" > * Remove security context</span>
511
- <span class="cstat-no" title="statement not covered" > */</span>
512
- <span class="cstat-no" title="statement not covered" > removeContext(principalId: string): boolean {</span>
513
- <span class="cstat-no" title="statement not covered" > return this.contexts.delete(principalId);</span>
514
- <span class="cstat-no" title="statement not covered" > }</span>
515
- <span class="cstat-no" title="statement not covered" ></span>
516
- <span class="cstat-no" title="statement not covered" > // ============================================================================</span>
517
- <span class="cstat-no" title="statement not covered" > // Validation</span>
518
- <span class="cstat-no" title="statement not covered" > // ============================================================================</span>
519
- <span class="cstat-no" title="statement not covered" ></span>
520
- <span class="cstat-no" title="statement not covered" > /**</span>
521
- <span class="cstat-no" title="statement not covered" > * Validate path access</span>
522
- <span class="cstat-no" title="statement not covered" > */</span>
523
- <span class="cstat-no" title="statement not covered" > validatePath(path: string, principalId: string): ValidationResult {</span>
524
- <span class="cstat-no" title="statement not covered" > const context = this.contexts.get(principalId);</span>
525
- <span class="cstat-no" title="statement not covered" > if (!context) {</span>
526
- <span class="cstat-no" title="statement not covered" > return {</span>
527
- <span class="cstat-no" title="statement not covered" > valid: false,</span>
528
- <span class="cstat-no" title="statement not covered" > errors: ['Security context not found'],</span>
529
- <span class="cstat-no" title="statement not covered" > warnings: [],</span>
530
- <span class="cstat-no" title="statement not covered" > };</span>
531
- <span class="cstat-no" title="statement not covered" > }</span>
532
- <span class="cstat-no" title="statement not covered" ></span>
533
- <span class="cstat-no" title="statement not covered" > return this.domainService.validatePath(path, context);</span>
534
- <span class="cstat-no" title="statement not covered" > }</span>
535
- <span class="cstat-no" title="statement not covered" ></span>
536
- <span class="cstat-no" title="statement not covered" > /**</span>
537
- <span class="cstat-no" title="statement not covered" > * Validate command execution</span>
538
- <span class="cstat-no" title="statement not covered" > */</span>
539
- <span class="cstat-no" title="statement not covered" > validateCommand(command: string, principalId: string): ValidationResult {</span>
540
- <span class="cstat-no" title="statement not covered" > const context = this.contexts.get(principalId);</span>
541
- <span class="cstat-no" title="statement not covered" > if (!context) {</span>
542
- <span class="cstat-no" title="statement not covered" > return {</span>
543
- <span class="cstat-no" title="statement not covered" > valid: false,</span>
544
- <span class="cstat-no" title="statement not covered" > errors: ['Security context not found'],</span>
545
- <span class="cstat-no" title="statement not covered" > warnings: [],</span>
546
- <span class="cstat-no" title="statement not covered" > };</span>
547
- <span class="cstat-no" title="statement not covered" > }</span>
548
- <span class="cstat-no" title="statement not covered" ></span>
549
- <span class="cstat-no" title="statement not covered" > return this.domainService.validateCommand(command, context);</span>
550
- <span class="cstat-no" title="statement not covered" > }</span>
551
- <span class="cstat-no" title="statement not covered" ></span>
552
- <span class="cstat-no" title="statement not covered" > /**</span>
553
- <span class="cstat-no" title="statement not covered" > * Validate user input</span>
554
- <span class="cstat-no" title="statement not covered" > */</span>
555
- <span class="cstat-no" title="statement not covered" > validateInput(input: string): ValidationResult {</span>
556
- <span class="cstat-no" title="statement not covered" > return this.domainService.validateInput(input);</span>
557
- <span class="cstat-no" title="statement not covered" > }</span>
558
- <span class="cstat-no" title="statement not covered" ></span>
559
- <span class="cstat-no" title="statement not covered" > /**</span>
560
- <span class="cstat-no" title="statement not covered" > * Detect threats in content</span>
561
- <span class="cstat-no" title="statement not covered" > */</span>
562
- <span class="cstat-no" title="statement not covered" > detectThreats(content: string): ThreatDetectionResult {</span>
563
- <span class="cstat-no" title="statement not covered" > return this.domainService.detectThreats(content);</span>
564
- <span class="cstat-no" title="statement not covered" > }</span>
565
- <span class="cstat-no" title="statement not covered" ></span>
566
- <span class="cstat-no" title="statement not covered" > // ============================================================================</span>
567
- <span class="cstat-no" title="statement not covered" > // Audit</span>
568
- <span class="cstat-no" title="statement not covered" > // ============================================================================</span>
569
- <span class="cstat-no" title="statement not covered" ></span>
570
- <span class="cstat-no" title="statement not covered" > /**</span>
571
- <span class="cstat-no" title="statement not covered" > * Run security audit on codebase</span>
572
- <span class="cstat-no" title="statement not covered" > */</span>
573
- <span class="cstat-no" title="statement not covered" > async auditCodebase(files: Array&lt;{ path: string; content: string }&gt;): Promise&lt;SecurityAuditResult&gt; {</span>
574
- <span class="cstat-no" title="statement not covered" > const checks: SecurityAuditResult['checks'] = [];</span>
575
- <span class="cstat-no" title="statement not covered" > const recommendations: string[] = [];</span>
576
- <span class="cstat-no" title="statement not covered" > let criticalCount = 0;</span>
577
- <span class="cstat-no" title="statement not covered" > let highCount = 0;</span>
578
- <span class="cstat-no" title="statement not covered" ></span>
579
- <span class="cstat-no" title="statement not covered" > for (const file of files) {</span>
580
- <span class="cstat-no" title="statement not covered" > const threats = this.domainService.detectThreats(file.content);</span>
581
- <span class="cstat-no" title="statement not covered" ></span>
582
- <span class="cstat-no" title="statement not covered" > for (const threat of threats.threats) {</span>
583
- <span class="cstat-no" title="statement not covered" > checks.push({</span>
584
- <span class="cstat-no" title="statement not covered" > name: `${threat.type} in ${file.path}`,</span>
585
- <span class="cstat-no" title="statement not covered" > passed: false,</span>
586
- <span class="cstat-no" title="statement not covered" > severity: threat.severity,</span>
587
- <span class="cstat-no" title="statement not covered" > message: threat.description,</span>
588
- <span class="cstat-no" title="statement not covered" > });</span>
589
- <span class="cstat-no" title="statement not covered" ></span>
590
- <span class="cstat-no" title="statement not covered" > if (threat.severity === 'critical') criticalCount++;</span>
591
- <span class="cstat-no" title="statement not covered" > if (threat.severity === 'high') highCount++;</span>
592
- <span class="cstat-no" title="statement not covered" > }</span>
593
- <span class="cstat-no" title="statement not covered" ></span>
594
- <span class="cstat-no" title="statement not covered" > if (threats.safe) {</span>
595
- <span class="cstat-no" title="statement not covered" > checks.push({</span>
596
- <span class="cstat-no" title="statement not covered" > name: `Security check: ${file.path}`,</span>
597
- <span class="cstat-no" title="statement not covered" > passed: true,</span>
598
- <span class="cstat-no" title="statement not covered" > severity: 'low',</span>
599
- <span class="cstat-no" title="statement not covered" > message: 'No threats detected',</span>
600
- <span class="cstat-no" title="statement not covered" > });</span>
601
- <span class="cstat-no" title="statement not covered" > }</span>
602
- <span class="cstat-no" title="statement not covered" > }</span>
603
- <span class="cstat-no" title="statement not covered" ></span>
604
- <span class="cstat-no" title="statement not covered" > // Generate recommendations</span>
605
- <span class="cstat-no" title="statement not covered" > if (criticalCount &gt; 0) {</span>
606
- <span class="cstat-no" title="statement not covered" > recommendations.push('Address critical security issues immediately');</span>
607
- <span class="cstat-no" title="statement not covered" > }</span>
608
- <span class="cstat-no" title="statement not covered" > if (highCount &gt; 0) {</span>
609
- <span class="cstat-no" title="statement not covered" > recommendations.push('Review and fix high-severity findings');</span>
610
- <span class="cstat-no" title="statement not covered" > }</span>
611
- <span class="cstat-no" title="statement not covered" > recommendations.push('Run regular security scans');</span>
612
- <span class="cstat-no" title="statement not covered" > recommendations.push('Keep dependencies updated');</span>
613
- <span class="cstat-no" title="statement not covered" ></span>
614
- <span class="cstat-no" title="statement not covered" > // Calculate score</span>
615
- <span class="cstat-no" title="statement not covered" > const totalChecks = checks.length;</span>
616
- <span class="cstat-no" title="statement not covered" > const passedChecks = checks.filter((c) =&gt; c.passed).length;</span>
617
- <span class="cstat-no" title="statement not covered" > const score = totalChecks &gt; 0 ? Math.round((passedChecks / totalChecks) * 100) : 100;</span>
618
- <span class="cstat-no" title="statement not covered" ></span>
619
- <span class="cstat-no" title="statement not covered" > return {</span>
620
- <span class="cstat-no" title="statement not covered" > passed: criticalCount === 0 &amp;&amp; highCount === 0,</span>
621
- <span class="cstat-no" title="statement not covered" > score,</span>
622
- <span class="cstat-no" title="statement not covered" > checks,</span>
623
- <span class="cstat-no" title="statement not covered" > recommendations,</span>
624
- <span class="cstat-no" title="statement not covered" > };</span>
625
- <span class="cstat-no" title="statement not covered" > }</span>
626
- <span class="cstat-no" title="statement not covered" ></span>
627
- <span class="cstat-no" title="statement not covered" > /**</span>
628
- <span class="cstat-no" title="statement not covered" > * Check if operation is allowed</span>
629
- <span class="cstat-no" title="statement not covered" > */</span>
630
- <span class="cstat-no" title="statement not covered" > isOperationAllowed(</span>
631
- <span class="cstat-no" title="statement not covered" > principalId: string,</span>
632
- <span class="cstat-no" title="statement not covered" > operation: 'path' | 'command',</span>
633
- <span class="cstat-no" title="statement not covered" > target: string</span>
634
- <span class="cstat-no" title="statement not covered" > ): boolean {</span>
635
- <span class="cstat-no" title="statement not covered" > const context = this.contexts.get(principalId);</span>
636
- <span class="cstat-no" title="statement not covered" > if (!context || context.isExpired()) return false;</span>
637
- <span class="cstat-no" title="statement not covered" ></span>
638
- <span class="cstat-no" title="statement not covered" > if (operation === 'path') {</span>
639
- <span class="cstat-no" title="statement not covered" > return context.canAccessPath(target);</span>
640
- <span class="cstat-no" title="statement not covered" > } else {</span>
641
- <span class="cstat-no" title="statement not covered" > return context.canExecuteCommand(target);</span>
642
- <span class="cstat-no" title="statement not covered" > }</span>
643
- <span class="cstat-no" title="statement not covered" > }</span>
644
- <span class="cstat-no" title="statement not covered" >}</span>
645
- &nbsp;</pre></td></tr></table></pre>
646
-
647
- <div class='push'></div><!-- for sticky footer -->
648
- </div><!-- /wrapper -->
649
- <div class='footer quiet pad2 space-top1 center small'>
650
- Code coverage generated by
651
- <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
652
- at 2026-01-06T16:55:48.089Z
653
- </div>
654
- <script src="../../../prettify.js"></script>
655
- <script>
656
- window.onload = function () {
657
- prettyPrint();
658
- };
659
- </script>
660
- <script src="../../../sorter.js"></script>
661
- <script src="../../../block-navigation.js"></script>
662
- </body>
663
- </html>
664
-