@complior/engine 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.well-known/ai-compliance.json +16 -0
- package/COMPLIANCE.md +64 -0
- package/data/data-integrity.test.ts +75 -0
- package/data/eval/eval-mappings.json +33 -0
- package/data/llm/model-pricing.json +15 -0
- package/data/llm/model-routing.json +36 -0
- package/data/onboarding/risk-profile.json +17 -0
- package/data/regulations/eu-ai-act/README.md +245 -0
- package/data/regulations/eu-ai-act/applicability-tree.json +160 -0
- package/data/regulations/eu-ai-act/cross-mapping.json +175 -0
- package/data/regulations/eu-ai-act/localization.json +186 -0
- package/data/regulations/eu-ai-act/obligations.json +3981 -0
- package/data/regulations/eu-ai-act/regulation-meta.json +482 -0
- package/data/regulations/eu-ai-act/scoring.json +342 -0
- package/data/regulations/eu-ai-act/technical-requirements.json +2590 -0
- package/data/regulations/eu-ai-act/timeline.json +160 -0
- package/data/regulations/jurisdictions/at.json +15 -0
- package/data/regulations/jurisdictions/be.json +15 -0
- package/data/regulations/jurisdictions/bg.json +15 -0
- package/data/regulations/jurisdictions/cy.json +15 -0
- package/data/regulations/jurisdictions/cz.json +15 -0
- package/data/regulations/jurisdictions/de.json +15 -0
- package/data/regulations/jurisdictions/dk.json +15 -0
- package/data/regulations/jurisdictions/ee.json +15 -0
- package/data/regulations/jurisdictions/es.json +15 -0
- package/data/regulations/jurisdictions/fi.json +15 -0
- package/data/regulations/jurisdictions/fr.json +15 -0
- package/data/regulations/jurisdictions/gr.json +15 -0
- package/data/regulations/jurisdictions/hr.json +15 -0
- package/data/regulations/jurisdictions/hu.json +15 -0
- package/data/regulations/jurisdictions/ie.json +15 -0
- package/data/regulations/jurisdictions/is.json +15 -0
- package/data/regulations/jurisdictions/it.json +15 -0
- package/data/regulations/jurisdictions/li.json +15 -0
- package/data/regulations/jurisdictions/lt.json +15 -0
- package/data/regulations/jurisdictions/lu.json +15 -0
- package/data/regulations/jurisdictions/lv.json +15 -0
- package/data/regulations/jurisdictions/mt.json +15 -0
- package/data/regulations/jurisdictions/nl.json +15 -0
- package/data/regulations/jurisdictions/no.json +15 -0
- package/data/regulations/jurisdictions/pl.json +15 -0
- package/data/regulations/jurisdictions/pt.json +15 -0
- package/data/regulations/jurisdictions/ro.json +15 -0
- package/data/regulations/jurisdictions/se.json +15 -0
- package/data/regulations/jurisdictions/si.json +15 -0
- package/data/regulations/jurisdictions/sk.json +15 -0
- package/data/scanner/check-id-categories.json +81 -0
- package/data/scanner/confidence-params.json +16 -0
- package/data/scanner/limits.json +4 -0
- package/data/schemas/http-contract-sample.json +79 -0
- package/data/schemas/http-contract.json +144 -0
- package/data/semgrep-rules/bare-call.yaml +37 -0
- package/data/semgrep-rules/injection.yaml +73 -0
- package/data/semgrep-rules/missing-error-handling.yaml +58 -0
- package/data/semgrep-rules/unsafe-deser.yaml +65 -0
- package/data/templates/eu-ai-act/ai-literacy.md +184 -0
- package/data/templates/eu-ai-act/art5-screening.md +131 -0
- package/data/templates/eu-ai-act/data-governance.md +145 -0
- package/data/templates/eu-ai-act/declaration-of-conformity.md +161 -0
- package/data/templates/eu-ai-act/fria.md +127 -0
- package/data/templates/eu-ai-act/gpai-systemic-risk.md +150 -0
- package/data/templates/eu-ai-act/gpai-transparency.md +166 -0
- package/data/templates/eu-ai-act/incident-report.md +188 -0
- package/data/templates/eu-ai-act/instructions-for-use.md +202 -0
- package/data/templates/eu-ai-act/monitoring-policy.md +110 -0
- package/data/templates/eu-ai-act/qms.md +180 -0
- package/data/templates/eu-ai-act/risk-management-system.md +123 -0
- package/data/templates/eu-ai-act/technical-documentation.md +287 -0
- package/data/templates/eu-ai-act/worker-notification.md +143 -0
- package/data/templates/policies/biometrics-ai-policy.md +214 -0
- package/data/templates/policies/critical-infra-ai-policy.md +228 -0
- package/data/templates/policies/education-ai-policy.md +184 -0
- package/data/templates/policies/finance-ai-policy.md +191 -0
- package/data/templates/policies/healthcare-ai-policy.md +197 -0
- package/data/templates/policies/hr-ai-policy.md +178 -0
- package/data/templates/policies/legal-ai-policy.md +189 -0
- package/data/templates/policies/migration-ai-policy.md +239 -0
- package/engine.log +7 -0
- package/package.json +74 -0
- package/src/composition-root.ts +791 -0
- package/src/data/eval/conformity-tests.test.ts +122 -0
- package/src/data/eval/ct-1-transparency.ts +106 -0
- package/src/data/eval/ct-10-gpai.ts +25 -0
- package/src/data/eval/ct-11-industry.ts +42 -0
- package/src/data/eval/ct-2-oversight.ts +41 -0
- package/src/data/eval/ct-3-explanation.ts +14 -0
- package/src/data/eval/ct-4-bias.ts +83 -0
- package/src/data/eval/ct-5-accuracy.ts +41 -0
- package/src/data/eval/ct-6-robustness.ts +81 -0
- package/src/data/eval/ct-7-prohibited.ts +52 -0
- package/src/data/eval/ct-8-logging.ts +68 -0
- package/src/data/eval/ct-9-risk-awareness.ts +33 -0
- package/src/data/eval/deterministic-evaluator.ts +120 -0
- package/src/data/eval/index.ts +55 -0
- package/src/data/eval/judge-prompts.ts +146 -0
- package/src/data/eval/llm-judged-tests.ts +279 -0
- package/src/data/eval/llm-tests.test.ts +83 -0
- package/src/data/eval/remediation/ct-1-transparency.ts +91 -0
- package/src/data/eval/remediation/ct-10-gpai.ts +94 -0
- package/src/data/eval/remediation/ct-11-industry.ts +94 -0
- package/src/data/eval/remediation/ct-2-oversight.ts +71 -0
- package/src/data/eval/remediation/ct-3-explanation.ts +70 -0
- package/src/data/eval/remediation/ct-4-bias.ts +70 -0
- package/src/data/eval/remediation/ct-5-accuracy.ts +70 -0
- package/src/data/eval/remediation/ct-6-robustness.ts +70 -0
- package/src/data/eval/remediation/ct-7-prohibited.ts +94 -0
- package/src/data/eval/remediation/ct-8-logging.ts +94 -0
- package/src/data/eval/remediation/ct-9-risk-awareness.ts +94 -0
- package/src/data/eval/remediation/index.ts +89 -0
- package/src/data/eval/remediation/owasp-art5.ts +15 -0
- package/src/data/eval/remediation/owasp-llm01.ts +72 -0
- package/src/data/eval/remediation/owasp-llm02.ts +72 -0
- package/src/data/eval/remediation/owasp-llm03.ts +15 -0
- package/src/data/eval/remediation/owasp-llm04.ts +15 -0
- package/src/data/eval/remediation/owasp-llm05.ts +15 -0
- package/src/data/eval/remediation/owasp-llm06.ts +15 -0
- package/src/data/eval/remediation/owasp-llm07.ts +15 -0
- package/src/data/eval/remediation/owasp-llm08.ts +15 -0
- package/src/data/eval/remediation/owasp-llm09.ts +15 -0
- package/src/data/eval/remediation/owasp-llm10.ts +15 -0
- package/src/data/eval/remediation/remediation.test.ts +229 -0
- package/src/data/eval/remediation/test-mapping.ts +290 -0
- package/src/data/eval/security-rubrics.ts +381 -0
- package/src/data/finding-explanations.json +453 -0
- package/src/data/industry-patterns.ts +161 -0
- package/src/data/registry-cards.ts +368 -0
- package/src/data/regulation/index.ts +5 -0
- package/src/data/regulation/jurisdiction-data.test.ts +73 -0
- package/src/data/regulation/jurisdiction-data.ts +65 -0
- package/src/data/regulation/regulation-data.ts +19 -0
- package/src/data/regulation/regulation-loader.test.ts +107 -0
- package/src/data/regulation/regulation-loader.ts +56 -0
- package/src/data/scanner-constants.ts +46 -0
- package/src/data/schemas/schemas-core.ts +140 -0
- package/src/data/schemas/schemas-supplementary.ts +211 -0
- package/src/data/schemas/schemas.ts +28 -0
- package/src/data/security/attack-probes.test.ts +62 -0
- package/src/data/security/attack-probes.ts +496 -0
- package/src/data/security/eu-ai-act-security.ts +40 -0
- package/src/data/security/index.ts +19 -0
- package/src/data/security/mitre-atlas.test.ts +43 -0
- package/src/data/security/mitre-atlas.ts +93 -0
- package/src/data/security/nist-ai-rmf.ts +43 -0
- package/src/data/security/owasp-llm-top10.test.ts +60 -0
- package/src/data/security/owasp-llm-top10.ts +138 -0
- package/src/data/template-registry.ts +53 -0
- package/src/data/tool-versions.json +22 -0
- package/src/domain/audit/audit-package.test.ts +152 -0
- package/src/domain/audit/audit-package.ts +166 -0
- package/src/domain/audit/audit-trail.test.ts +121 -0
- package/src/domain/audit/audit-trail.ts +174 -0
- package/src/domain/audit/index.ts +8 -0
- package/src/domain/audit/permissions-matrix.test.ts +136 -0
- package/src/domain/audit/permissions-matrix.ts +121 -0
- package/src/domain/certification/adversarial/bias-tests.ts +95 -0
- package/src/domain/certification/adversarial/evaluators.ts +304 -0
- package/src/domain/certification/adversarial/index.ts +11 -0
- package/src/domain/certification/adversarial/prompt-injection.ts +103 -0
- package/src/domain/certification/adversarial/safety-boundary.ts +132 -0
- package/src/domain/certification/aiuc1-readiness.test.ts +236 -0
- package/src/domain/certification/aiuc1-readiness.ts +298 -0
- package/src/domain/certification/aiuc1-requirements.ts +235 -0
- package/src/domain/certification/index.ts +10 -0
- package/src/domain/certification/redteam-runner.test.ts +97 -0
- package/src/domain/certification/redteam-runner.ts +205 -0
- package/src/domain/certification/test-runner.test.ts +232 -0
- package/src/domain/certification/test-runner.ts +289 -0
- package/src/domain/cost/cost-estimator.test.ts +187 -0
- package/src/domain/cost/cost-estimator.ts +133 -0
- package/src/domain/disclaimer.test.ts +52 -0
- package/src/domain/disclaimer.ts +39 -0
- package/src/domain/documents/ai-enricher.test.ts +120 -0
- package/src/domain/documents/ai-enricher.ts +159 -0
- package/src/domain/documents/document-generator.test.ts +318 -0
- package/src/domain/documents/document-generator.ts +239 -0
- package/src/domain/documents/index.ts +9 -0
- package/src/domain/documents/passport-helpers.ts +25 -0
- package/src/domain/documents/policy-generator.test.ts +252 -0
- package/src/domain/documents/policy-generator.ts +94 -0
- package/src/domain/documents/worker-notification-generator.test.ts +162 -0
- package/src/domain/documents/worker-notification-generator.ts +141 -0
- package/src/domain/eval/adapters/adapter-port.ts +94 -0
- package/src/domain/eval/adapters/adapters.test.ts +303 -0
- package/src/domain/eval/adapters/anthropic-adapter.ts +57 -0
- package/src/domain/eval/adapters/auto-detect.ts +104 -0
- package/src/domain/eval/adapters/create-chat-adapter.ts +106 -0
- package/src/domain/eval/adapters/custom-adapter.ts +74 -0
- package/src/domain/eval/adapters/http-adapter.ts +66 -0
- package/src/domain/eval/adapters/index.ts +7 -0
- package/src/domain/eval/adapters/ollama-adapter.ts +48 -0
- package/src/domain/eval/adapters/openai-adapter.ts +58 -0
- package/src/domain/eval/adapters/with-timeout.ts +25 -0
- package/src/domain/eval/conformity-score.test.ts +161 -0
- package/src/domain/eval/conformity-score.ts +135 -0
- package/src/domain/eval/eval-constants.ts +55 -0
- package/src/domain/eval/eval-evidence.test.ts +85 -0
- package/src/domain/eval/eval-evidence.ts +103 -0
- package/src/domain/eval/eval-fix-generator.test.ts +421 -0
- package/src/domain/eval/eval-fix-generator.ts +205 -0
- package/src/domain/eval/eval-passport.test.ts +82 -0
- package/src/domain/eval/eval-passport.ts +89 -0
- package/src/domain/eval/eval-remediation-report.test.ts +682 -0
- package/src/domain/eval/eval-remediation-report.ts +170 -0
- package/src/domain/eval/eval-report.ts +108 -0
- package/src/domain/eval/eval-runner.test.ts +609 -0
- package/src/domain/eval/eval-runner.ts +593 -0
- package/src/domain/eval/eval-to-findings.test.ts +293 -0
- package/src/domain/eval/eval-to-findings.ts +83 -0
- package/src/domain/eval/index.ts +31 -0
- package/src/domain/eval/llm-judge.test.ts +139 -0
- package/src/domain/eval/llm-judge.ts +168 -0
- package/src/domain/eval/remediation-types.ts +90 -0
- package/src/domain/eval/security-integration.test.ts +196 -0
- package/src/domain/eval/security-integration.ts +136 -0
- package/src/domain/eval/types.test.ts +173 -0
- package/src/domain/eval/types.ts +244 -0
- package/src/domain/eval/verdict-utils.ts +45 -0
- package/src/domain/fixer/create-fixer.ts +101 -0
- package/src/domain/fixer/diff.ts +70 -0
- package/src/domain/fixer/fix-history.ts +23 -0
- package/src/domain/fixer/fixer.test.ts +306 -0
- package/src/domain/fixer/index.ts +9 -0
- package/src/domain/fixer/strategies/bandit-fix.ts +61 -0
- package/src/domain/fixer/strategies/bias-testing.ts +49 -0
- package/src/domain/fixer/strategies/ci-compliance.ts +57 -0
- package/src/domain/fixer/strategies/content-marking.ts +45 -0
- package/src/domain/fixer/strategies/cve-upgrade.ts +66 -0
- package/src/domain/fixer/strategies/data-governance.ts +65 -0
- package/src/domain/fixer/strategies/disclosure.ts +69 -0
- package/src/domain/fixer/strategies/doc-code-sync.ts +53 -0
- package/src/domain/fixer/strategies/documentation.ts +59 -0
- package/src/domain/fixer/strategies/error-handler.ts +63 -0
- package/src/domain/fixer/strategies/hitl-gate.ts +67 -0
- package/src/domain/fixer/strategies/index.ts +61 -0
- package/src/domain/fixer/strategies/kill-switch-test.ts +85 -0
- package/src/domain/fixer/strategies/kill-switch.ts +53 -0
- package/src/domain/fixer/strategies/license-fix.ts +57 -0
- package/src/domain/fixer/strategies/log-retention.ts +40 -0
- package/src/domain/fixer/strategies/logging.ts +59 -0
- package/src/domain/fixer/strategies/metadata.ts +45 -0
- package/src/domain/fixer/strategies/permission-guard.ts +84 -0
- package/src/domain/fixer/strategies/record-keeping.ts +69 -0
- package/src/domain/fixer/strategies/secret-rotation.ts +52 -0
- package/src/domain/fixer/strategies.test.ts +341 -0
- package/src/domain/fixer/template-engine.test.ts +64 -0
- package/src/domain/fixer/template-engine.ts +38 -0
- package/src/domain/fixer/types.ts +88 -0
- package/src/domain/frameworks/aiuc1-framework.test.ts +159 -0
- package/src/domain/frameworks/aiuc1-framework.ts +126 -0
- package/src/domain/frameworks/collect-foundation-metrics.test.ts +96 -0
- package/src/domain/frameworks/collect-foundation-metrics.ts +34 -0
- package/src/domain/frameworks/eu-ai-act-framework.test.ts +117 -0
- package/src/domain/frameworks/eu-ai-act-framework.ts +100 -0
- package/src/domain/frameworks/framework-registry.test.ts +91 -0
- package/src/domain/frameworks/framework-registry.ts +38 -0
- package/src/domain/frameworks/index.ts +8 -0
- package/src/domain/frameworks/mitre-atlas-framework.test.ts +53 -0
- package/src/domain/frameworks/mitre-atlas-framework.ts +53 -0
- package/src/domain/frameworks/owasp-llm-framework.test.ts +77 -0
- package/src/domain/frameworks/owasp-llm-framework.ts +54 -0
- package/src/domain/frameworks/score-plugin-framework.ts +117 -0
- package/src/domain/fria/fria-generator.test.ts +273 -0
- package/src/domain/fria/fria-generator.ts +366 -0
- package/src/domain/import/promptfoo-importer.test.ts +103 -0
- package/src/domain/import/promptfoo-importer.ts +151 -0
- package/src/domain/onboarding/guided-onboarding.test.ts +144 -0
- package/src/domain/onboarding/guided-onboarding.ts +135 -0
- package/src/domain/passport/builder/domain-mapper.ts +9 -0
- package/src/domain/passport/builder/manifest-builder.test.ts +546 -0
- package/src/domain/passport/builder/manifest-builder.ts +535 -0
- package/src/domain/passport/builder/manifest-diff.test.ts +105 -0
- package/src/domain/passport/builder/manifest-diff.ts +89 -0
- package/src/domain/passport/builder/manifest-files.ts +17 -0
- package/src/domain/passport/crypto-signer.test.ts +93 -0
- package/src/domain/passport/crypto-signer.ts +157 -0
- package/src/domain/passport/discovery/agent-discovery.test.ts +296 -0
- package/src/domain/passport/discovery/agent-discovery.ts +325 -0
- package/src/domain/passport/discovery/autonomy-analyzer.test.ts +141 -0
- package/src/domain/passport/discovery/autonomy-analyzer.ts +113 -0
- package/src/domain/passport/discovery/permission-scanner.test.ts +191 -0
- package/src/domain/passport/discovery/permission-scanner.ts +414 -0
- package/src/domain/passport/export/a2a-mapper.ts +75 -0
- package/src/domain/passport/export/aiuc1-mapper.ts +126 -0
- package/src/domain/passport/export/export.test.ts +207 -0
- package/src/domain/passport/export/index.ts +41 -0
- package/src/domain/passport/export/nist-mapper.ts +227 -0
- package/src/domain/passport/import/a2a-importer.test.ts +133 -0
- package/src/domain/passport/import/a2a-importer.ts +156 -0
- package/src/domain/passport/import/index.ts +2 -0
- package/src/domain/passport/index.ts +32 -0
- package/src/domain/passport/obligation-field-map.test.ts +113 -0
- package/src/domain/passport/obligation-field-map.ts +117 -0
- package/src/domain/passport/passport-validator.test.ts +156 -0
- package/src/domain/passport/passport-validator.ts +126 -0
- package/src/domain/passport/scan-to-compliance.test.ts +336 -0
- package/src/domain/passport/scan-to-compliance.ts +166 -0
- package/src/domain/passport/test-generator.test.ts +93 -0
- package/src/domain/passport/test-generator.ts +136 -0
- package/src/domain/proxy/index.ts +11 -0
- package/src/domain/proxy/json-rpc.test.ts +72 -0
- package/src/domain/proxy/json-rpc.ts +53 -0
- package/src/domain/proxy/policy-engine.test.ts +259 -0
- package/src/domain/proxy/policy-engine.ts +137 -0
- package/src/domain/proxy/proxy-bridge.ts +125 -0
- package/src/domain/proxy/proxy-interceptor.test.ts +184 -0
- package/src/domain/proxy/proxy-interceptor.ts +120 -0
- package/src/domain/proxy/proxy-types.ts +35 -0
- package/src/domain/registry/compute-agent-score.test.ts +279 -0
- package/src/domain/registry/compute-agent-score.ts +162 -0
- package/src/domain/reporter/audit-report.test.ts +87 -0
- package/src/domain/reporter/audit-report.ts +116 -0
- package/src/domain/reporter/badge-generator.test.ts +54 -0
- package/src/domain/reporter/badge-generator.ts +40 -0
- package/src/domain/reporter/compliance-md.ts +45 -0
- package/src/domain/reporter/index.ts +7 -0
- package/src/domain/reporter/pdf-renderer.ts +282 -0
- package/src/domain/reporter/share.test.ts +92 -0
- package/src/domain/reporter/share.ts +80 -0
- package/src/domain/scanner/ast/swc-analyzer.test.ts +49 -0
- package/src/domain/scanner/ast/swc-analyzer.ts +124 -0
- package/src/domain/scanner/attestations.ts +97 -0
- package/src/domain/scanner/checks/ai-disclosure.test.ts +90 -0
- package/src/domain/scanner/checks/ai-disclosure.ts +54 -0
- package/src/domain/scanner/checks/ai-literacy.ts +163 -0
- package/src/domain/scanner/checks/behavioral-constraints.test.ts +167 -0
- package/src/domain/scanner/checks/behavioral-constraints.ts +86 -0
- package/src/domain/scanner/checks/compliance-metadata.ts +63 -0
- package/src/domain/scanner/checks/content-marking.ts +74 -0
- package/src/domain/scanner/checks/dep-deep-scan.test.ts +318 -0
- package/src/domain/scanner/checks/dep-deep-scan.ts +137 -0
- package/src/domain/scanner/checks/documentation.test.ts +88 -0
- package/src/domain/scanner/checks/documentation.ts +79 -0
- package/src/domain/scanner/checks/git-history.test.ts +120 -0
- package/src/domain/scanner/checks/git-history.ts +163 -0
- package/src/domain/scanner/checks/gpai-systemic-risk.test.ts +84 -0
- package/src/domain/scanner/checks/gpai-systemic-risk.ts +98 -0
- package/src/domain/scanner/checks/gpai-transparency.ts +94 -0
- package/src/domain/scanner/checks/index.ts +28 -0
- package/src/domain/scanner/checks/industry/index.ts +40 -0
- package/src/domain/scanner/checks/industry/industry.test.ts +287 -0
- package/src/domain/scanner/checks/interaction-logging.test.ts +113 -0
- package/src/domain/scanner/checks/interaction-logging.ts +142 -0
- package/src/domain/scanner/checks/nhi-scanner.test.ts +158 -0
- package/src/domain/scanner/checks/nhi-scanner.ts +78 -0
- package/src/domain/scanner/checks/passport-completeness.test.ts +127 -0
- package/src/domain/scanner/checks/passport-completeness.ts +82 -0
- package/src/domain/scanner/checks/passport-presence.test.ts +56 -0
- package/src/domain/scanner/checks/passport-presence.ts +78 -0
- package/src/domain/scanner/checks/pattern-check-factory.ts +70 -0
- package/src/domain/scanner/checks/permission-scanner.test.ts +279 -0
- package/src/domain/scanner/checks/permission-scanner.ts +90 -0
- package/src/domain/scanner/checks/presence-check-factory.test.ts +124 -0
- package/src/domain/scanner/checks/presence-check-factory.ts +275 -0
- package/src/domain/scanner/compliance-diff.test.ts +165 -0
- package/src/domain/scanner/compliance-diff.ts +138 -0
- package/src/domain/scanner/confidence.test.ts +235 -0
- package/src/domain/scanner/confidence.ts +156 -0
- package/src/domain/scanner/constants.ts +13 -0
- package/src/domain/scanner/create-scanner.ts +573 -0
- package/src/domain/scanner/cross-layer.test.ts +372 -0
- package/src/domain/scanner/cross-layer.ts +232 -0
- package/src/domain/scanner/data/ai-packages.ts +82 -0
- package/src/domain/scanner/debt-calculator.test.ts +89 -0
- package/src/domain/scanner/debt-calculator.ts +111 -0
- package/src/domain/scanner/drift.test.ts +191 -0
- package/src/domain/scanner/drift.ts +73 -0
- package/src/domain/scanner/evidence-store.test.ts +207 -0
- package/src/domain/scanner/evidence-store.ts +195 -0
- package/src/domain/scanner/evidence.test.ts +104 -0
- package/src/domain/scanner/evidence.ts +71 -0
- package/src/domain/scanner/external/bandit-runner.test.ts +45 -0
- package/src/domain/scanner/external/bandit-runner.ts +90 -0
- package/src/domain/scanner/external/checks.ts +321 -0
- package/src/domain/scanner/external/dedup.test.ts +79 -0
- package/src/domain/scanner/external/dedup.ts +94 -0
- package/src/domain/scanner/external/detect-secrets-runner.test.ts +58 -0
- package/src/domain/scanner/external/detect-secrets-runner.ts +81 -0
- package/src/domain/scanner/external/external-scanner.test.ts +221 -0
- package/src/domain/scanner/external/external-scanner.ts +36 -0
- package/src/domain/scanner/external/finding-mapper.test.ts +95 -0
- package/src/domain/scanner/external/finding-mapper.ts +138 -0
- package/src/domain/scanner/external/index.ts +15 -0
- package/src/domain/scanner/external/mappings.ts +93 -0
- package/src/domain/scanner/external/modelscan-runner.test.ts +35 -0
- package/src/domain/scanner/external/modelscan-runner.ts +101 -0
- package/src/domain/scanner/external/path-utils.ts +8 -0
- package/src/domain/scanner/external/runner-port.ts +45 -0
- package/src/domain/scanner/external/semgrep-runner.test.ts +52 -0
- package/src/domain/scanner/external/semgrep-runner.ts +94 -0
- package/src/domain/scanner/external/types.ts +32 -0
- package/src/domain/scanner/finding-attribution.test.ts +444 -0
- package/src/domain/scanner/finding-attribution.ts +195 -0
- package/src/domain/scanner/finding-explainer.test.ts +157 -0
- package/src/domain/scanner/finding-explainer.ts +73 -0
- package/src/domain/scanner/fix-diff-builder.test.ts +272 -0
- package/src/domain/scanner/fix-diff-builder.ts +477 -0
- package/src/domain/scanner/import-graph.test.ts +162 -0
- package/src/domain/scanner/import-graph.ts +198 -0
- package/src/domain/scanner/languages/adapter.test.ts +105 -0
- package/src/domain/scanner/languages/adapter.ts +239 -0
- package/src/domain/scanner/layers/index.ts +24 -0
- package/src/domain/scanner/layers/layer1-files.ts +54 -0
- package/src/domain/scanner/layers/layer2-docs.test.ts +1207 -0
- package/src/domain/scanner/layers/layer2-docs.ts +297 -0
- package/src/domain/scanner/layers/layer2-parsing.ts +217 -0
- package/src/domain/scanner/layers/layer3-config.test.ts +187 -0
- package/src/domain/scanner/layers/layer3-config.ts +279 -0
- package/src/domain/scanner/layers/layer3-parsers.ts +73 -0
- package/src/domain/scanner/layers/layer4-patterns.test.ts +397 -0
- package/src/domain/scanner/layers/layer4-patterns.ts +216 -0
- package/src/domain/scanner/layers/layer5-docs.test.ts +99 -0
- package/src/domain/scanner/layers/layer5-docs.ts +250 -0
- package/src/domain/scanner/layers/layer5-llm.test.ts +146 -0
- package/src/domain/scanner/layers/layer5-llm.ts +262 -0
- package/src/domain/scanner/layers/layer5-targeted.test.ts +93 -0
- package/src/domain/scanner/layers/layer5-targeted.ts +233 -0
- package/src/domain/scanner/layers/lockfile-parsers.test.ts +320 -0
- package/src/domain/scanner/layers/lockfile-parsers.ts +184 -0
- package/src/domain/scanner/regulation-version.test.ts +54 -0
- package/src/domain/scanner/regulation-version.ts +23 -0
- package/src/domain/scanner/role-filter.test.ts +116 -0
- package/src/domain/scanner/role-filter.ts +51 -0
- package/src/domain/scanner/rules/banned-packages-data.ts +553 -0
- package/src/domain/scanner/rules/banned-packages-sdk.ts +65 -0
- package/src/domain/scanner/rules/banned-packages.test.ts +249 -0
- package/src/domain/scanner/rules/banned-packages.ts +55 -0
- package/src/domain/scanner/rules/comment-filter.test.ts +115 -0
- package/src/domain/scanner/rules/comment-filter.ts +297 -0
- package/src/domain/scanner/rules/index.ts +9 -0
- package/src/domain/scanner/rules/nhi-patterns.test.ts +128 -0
- package/src/domain/scanner/rules/nhi-patterns.ts +60 -0
- package/src/domain/scanner/rules/pattern-rules.ts +1152 -0
- package/src/domain/scanner/sbom.test.ts +136 -0
- package/src/domain/scanner/sbom.ts +103 -0
- package/src/domain/scanner/scan-cache.test.ts +136 -0
- package/src/domain/scanner/scan-cache.ts +115 -0
- package/src/domain/scanner/scanner.test.ts +125 -0
- package/src/domain/scanner/score-calculator.test.ts +363 -0
- package/src/domain/scanner/score-calculator.ts +189 -0
- package/src/domain/scanner/security-score.test.ts +107 -0
- package/src/domain/scanner/security-score.ts +116 -0
- package/src/domain/scanner/source-filter.ts +24 -0
- package/src/domain/scanner/validators.ts +223 -0
- package/src/domain/shared/compliance-constants.ts +48 -0
- package/src/domain/shared/disclosure-patterns.ts +16 -0
- package/src/domain/shared/index.ts +6 -0
- package/src/domain/shared/parse-dependencies.ts +21 -0
- package/src/domain/supply-chain/dependency-analyzer.ts +138 -0
- package/src/domain/supply-chain/index.ts +3 -0
- package/src/domain/supply-chain/supply-chain.test.ts +211 -0
- package/src/domain/supply-chain/types.ts +32 -0
- package/src/domain/whatif/config-fixer.ts +187 -0
- package/src/domain/whatif/index.ts +6 -0
- package/src/domain/whatif/scenario-engine.ts +121 -0
- package/src/domain/whatif/simulate-actions.test.ts +161 -0
- package/src/domain/whatif/simulate-actions.ts +114 -0
- package/src/domain/whatif/whatif.test.ts +135 -0
- package/src/e2e/gaps-e2e.test.ts +259 -0
- package/src/e2e/smoke.test.ts +101 -0
- package/src/hooks/hooks-export.test.ts +81 -0
- package/src/hooks/installer.ts +113 -0
- package/src/http/cors.test.ts +38 -0
- package/src/http/create-router.ts +259 -0
- package/src/http/routes/agent.route.ts +380 -0
- package/src/http/routes/audit.route.ts +66 -0
- package/src/http/routes/badge.route.ts +23 -0
- package/src/http/routes/cert.route.ts +66 -0
- package/src/http/routes/chat.route.ts +228 -0
- package/src/http/routes/cost.route.ts +33 -0
- package/src/http/routes/debt.route.ts +29 -0
- package/src/http/routes/disclaimer.route.ts +64 -0
- package/src/http/routes/eval.route.ts +161 -0
- package/src/http/routes/events.route.test.ts +108 -0
- package/src/http/routes/events.route.ts +71 -0
- package/src/http/routes/external-scan.route.ts +24 -0
- package/src/http/routes/file.route.ts +54 -0
- package/src/http/routes/fix.route.ts +219 -0
- package/src/http/routes/frameworks.route.test.ts +66 -0
- package/src/http/routes/frameworks.route.ts +36 -0
- package/src/http/routes/git.route.ts +27 -0
- package/src/http/routes/guided-onboarding.route.ts +65 -0
- package/src/http/routes/import.route.ts +64 -0
- package/src/http/routes/jurisdiction.route.ts +22 -0
- package/src/http/routes/obligations.route.test.ts +122 -0
- package/src/http/routes/obligations.route.ts +110 -0
- package/src/http/routes/onboarding.route.ts +53 -0
- package/src/http/routes/provider.route.ts +42 -0
- package/src/http/routes/proxy.route.ts +40 -0
- package/src/http/routes/redteam.route.ts +84 -0
- package/src/http/routes/report.route.ts +29 -0
- package/src/http/routes/scan.route.ts +104 -0
- package/src/http/routes/share.route.ts +44 -0
- package/src/http/routes/shell.route.ts +27 -0
- package/src/http/routes/status.route.ts +66 -0
- package/src/http/routes/supply-chain.route.ts +121 -0
- package/src/http/routes/sync.route.ts +328 -0
- package/src/http/routes/tools.route.ts +29 -0
- package/src/http/routes/whatif.route.ts +96 -0
- package/src/http/utils/validation.ts +31 -0
- package/src/index.ts +1 -0
- package/src/infra/bundle-fetcher.ts +77 -0
- package/src/infra/cache-storage.ts +34 -0
- package/src/infra/event-bus.ts +31 -0
- package/src/infra/file-collector.ts +61 -0
- package/src/infra/file-ops-adapter.ts +95 -0
- package/src/infra/file-watcher.test.ts +90 -0
- package/src/infra/file-watcher.ts +106 -0
- package/src/infra/git-adapter.ts +93 -0
- package/src/infra/git-history-adapter.ts +41 -0
- package/src/infra/headless-browser.ts +178 -0
- package/src/infra/llm-adapter.test.ts +83 -0
- package/src/infra/llm-adapter.ts +86 -0
- package/src/infra/logger.ts +27 -0
- package/src/infra/project-config.test.ts +74 -0
- package/src/infra/project-config.ts +35 -0
- package/src/infra/rate-limiter.test.ts +36 -0
- package/src/infra/rate-limiter.ts +34 -0
- package/src/infra/retry.ts +46 -0
- package/src/infra/saas-client.ts +123 -0
- package/src/infra/search-adapter.ts +113 -0
- package/src/infra/shell-adapter.ts +68 -0
- package/src/infra/tool-manager.test.ts +99 -0
- package/src/infra/tool-manager.ts +197 -0
- package/src/llm/agents/agent-modes.test.ts +44 -0
- package/src/llm/agents/modes.ts +68 -0
- package/src/llm/routing/cost-routing.test.ts +37 -0
- package/src/llm/routing/cost-tracker.ts +74 -0
- package/src/llm/routing/model-routing.test.ts +79 -0
- package/src/llm/routing/model-routing.ts +38 -0
- package/src/llm/routing/pricing.ts +19 -0
- package/src/llm/sse-protocol.ts +77 -0
- package/src/llm/tool-definitions.ts +83 -0
- package/src/llm/tool-executors.ts +80 -0
- package/src/llm/tools/types.ts +13 -0
- package/src/mcp/create-mcp-stack.ts +82 -0
- package/src/mcp/handlers.ts +245 -0
- package/src/mcp/index.ts +28 -0
- package/src/mcp/mcp-server.test.ts +80 -0
- package/src/mcp/server.ts +79 -0
- package/src/mcp/tools.ts +48 -0
- package/src/onboarding/auto-detect.ts +164 -0
- package/src/onboarding/onboarding.test.ts +89 -0
- package/src/onboarding/profile.ts +169 -0
- package/src/onboarding/questions.ts +112 -0
- package/src/onboarding/wizard.ts +66 -0
- package/src/output/github-issue.ts +32 -0
- package/src/output/json-output.ts +67 -0
- package/src/ports/browser.port.ts +23 -0
- package/src/ports/events.port.ts +28 -0
- package/src/ports/llm.port.ts +23 -0
- package/src/ports/logger.port.ts +6 -0
- package/src/ports/process.port.ts +6 -0
- package/src/ports/scanner.port.ts +15 -0
- package/src/server.ts +134 -0
- package/src/services/badge-service.ts +67 -0
- package/src/services/chat-service.test.ts +162 -0
- package/src/services/chat-service.ts +152 -0
- package/src/services/cost-service.ts +52 -0
- package/src/services/debt-service.ts +65 -0
- package/src/services/eval-integration.test.ts +132 -0
- package/src/services/eval-service.test.ts +373 -0
- package/src/services/eval-service.ts +463 -0
- package/src/services/external-scan-service.ts +60 -0
- package/src/services/file-service.ts +37 -0
- package/src/services/fix-service.test.ts +470 -0
- package/src/services/fix-service.ts +648 -0
- package/src/services/framework-service.test.ts +159 -0
- package/src/services/framework-service.ts +67 -0
- package/src/services/onboarding-service.ts +165 -0
- package/src/services/passport-audit.ts +244 -0
- package/src/services/passport-documents.ts +258 -0
- package/src/services/passport-service-utils.ts +72 -0
- package/src/services/passport-service.test.ts +251 -0
- package/src/services/passport-service.ts +339 -0
- package/src/services/proxy-service.ts +81 -0
- package/src/services/report-service.ts +72 -0
- package/src/services/scan-service.test.ts +470 -0
- package/src/services/scan-service.ts +335 -0
- package/src/services/share-service.ts +108 -0
- package/src/services/shared/backup.ts +23 -0
- package/src/services/status-service.ts +38 -0
- package/src/services/undo-service.test.ts +190 -0
- package/src/services/undo-service.ts +144 -0
- package/src/test-helpers/factories.ts +116 -0
- package/src/types/common.schemas.ts +147 -0
- package/src/types/common.types.ts +292 -0
- package/src/types/contract.test.ts +217 -0
- package/src/types/errors.ts +52 -0
- package/src/types/framework.types.ts +87 -0
- package/src/types/passport-schemas.ts +241 -0
- package/src/types/passport.types.ts +296 -0
- package/src/version.ts +1 -0
- package/tsconfig.json +20 -0
- package/vitest.config.ts +9 -0
|
@@ -0,0 +1,228 @@
|
|
|
1
|
+
import { Hono } from 'hono';
|
|
2
|
+
import { streamSSE } from 'hono/streaming';
|
|
3
|
+
import { z } from 'zod';
|
|
4
|
+
import { streamText, stepCountIs, type CoreMessage } from 'ai';
|
|
5
|
+
import type { ChatService } from '../../services/chat-service.js';
|
|
6
|
+
import { createLogger } from '../../infra/logger.js';
|
|
7
|
+
import type { LlmPort } from '../../ports/llm.port.js';
|
|
8
|
+
import type { ToolExecutorDeps } from '../../llm/tool-executors.js';
|
|
9
|
+
import {
|
|
10
|
+
sseThinking, sseText, sseToolCall, sseToolResult,
|
|
11
|
+
sseUsage, sseDone, sseError,
|
|
12
|
+
} from '../../llm/sse-protocol.js';
|
|
13
|
+
import { createCodingTools } from '../../llm/tool-definitions.js';
|
|
14
|
+
import type { AgentMode } from '../../llm/tools/types.js';
|
|
15
|
+
import { getAgentConfig, getAllModes } from '../../llm/agents/modes.js';
|
|
16
|
+
import { createCostTracker, type CostTracker } from '../../llm/routing/cost-tracker.js';
|
|
17
|
+
import { createRateLimiter } from '../../infra/rate-limiter.js';
|
|
18
|
+
import { complior } from '@complior/sdk';
|
|
19
|
+
import { parseBody } from '../utils/validation.js';
|
|
20
|
+
|
|
21
|
+
const ChatRequestSchema = z.object({
|
|
22
|
+
message: z.string().min(1),
|
|
23
|
+
model: z.string().optional(),
|
|
24
|
+
provider: z.enum(['anthropic', 'openai', 'openrouter']).optional(),
|
|
25
|
+
apiKey: z.string().optional(),
|
|
26
|
+
mode: z.enum(['build', 'comply', 'audit', 'learn']).optional(),
|
|
27
|
+
});
|
|
28
|
+
|
|
29
|
+
export interface ChatRouteDeps {
|
|
30
|
+
readonly chatService: ChatService;
|
|
31
|
+
readonly llm: LlmPort;
|
|
32
|
+
readonly toolExecutorDeps: ToolExecutorDeps;
|
|
33
|
+
readonly getMode: () => AgentMode;
|
|
34
|
+
readonly setMode: (mode: AgentMode) => void;
|
|
35
|
+
readonly maxRequestsPerHour?: number;
|
|
36
|
+
}
|
|
37
|
+
|
|
38
|
+
const AGENT_MODE_SET = new Set<string>(['build', 'comply', 'audit', 'learn']);
|
|
39
|
+
const isAgentMode = (s: string): s is AgentMode => AGENT_MODE_SET.has(s);
|
|
40
|
+
|
|
41
|
+
const isRecord = (v: unknown): v is Record<string, unknown> =>
|
|
42
|
+
typeof v === 'object' && v !== null;
|
|
43
|
+
|
|
44
|
+
/** Safe property access helpers for stream parts */
|
|
45
|
+
const prop = (obj: unknown, key: string): unknown =>
|
|
46
|
+
isRecord(obj) && key in obj ? obj[key] : undefined;
|
|
47
|
+
|
|
48
|
+
const strProp = (obj: unknown, key: string, fallback = ''): string => {
|
|
49
|
+
const v = prop(obj, key);
|
|
50
|
+
return typeof v === 'string' ? v : fallback;
|
|
51
|
+
};
|
|
52
|
+
|
|
53
|
+
const numProp = (obj: unknown, key: string, fallback = 0): number => {
|
|
54
|
+
const v = prop(obj, key);
|
|
55
|
+
return typeof v === 'number' ? v : fallback;
|
|
56
|
+
};
|
|
57
|
+
|
|
58
|
+
/** Parse /command from message. Returns { command, arg } or null. */
|
|
59
|
+
const parseCommand = (msg: string): { command: string; arg: string } | null => {
|
|
60
|
+
const match = msg.trim().match(/^\/(\w+)\s*(.*)/);
|
|
61
|
+
return match ? { command: match[1], arg: match[2].trim() } : null;
|
|
62
|
+
};
|
|
63
|
+
|
|
64
|
+
const chatLog = createLogger('chat-route');
|
|
65
|
+
|
|
66
|
+
export const createChatRoute = (deps: ChatRouteDeps) => {
|
|
67
|
+
const { chatService, llm, toolExecutorDeps, getMode, setMode } = deps;
|
|
68
|
+
const app = new Hono();
|
|
69
|
+
|
|
70
|
+
// Session state
|
|
71
|
+
let modelOverride: string | undefined;
|
|
72
|
+
const costTracker: CostTracker = createCostTracker();
|
|
73
|
+
|
|
74
|
+
// Rate limiting (sliding window)
|
|
75
|
+
const DEFAULT_MAX_REQUESTS_PER_HOUR = 50;
|
|
76
|
+
const rateLimiter = createRateLimiter(deps.maxRequestsPerHour ?? DEFAULT_MAX_REQUESTS_PER_HOUR);
|
|
77
|
+
|
|
78
|
+
// GET /mode — current mode info
|
|
79
|
+
app.get('/mode', (c) => c.json({ mode: getMode(), config: getAgentConfig(getMode()) }));
|
|
80
|
+
|
|
81
|
+
// POST /mode — switch mode
|
|
82
|
+
app.post('/mode', async (c) => {
|
|
83
|
+
const body: Record<string, unknown> = await c.req.json().catch(() => ({}));
|
|
84
|
+
const mode = typeof body['mode'] === 'string' ? body['mode'] : undefined;
|
|
85
|
+
if (!mode || !isAgentMode(mode)) {
|
|
86
|
+
return c.json({ error: 'INVALID_MODE', valid: getAllModes() }, 400);
|
|
87
|
+
}
|
|
88
|
+
setMode(mode);
|
|
89
|
+
return c.json({ mode: getMode(), config: getAgentConfig(getMode()) });
|
|
90
|
+
});
|
|
91
|
+
|
|
92
|
+
// GET /cost — session cost breakdown
|
|
93
|
+
app.get('/cost', (c) => c.json(costTracker.getBreakdown()));
|
|
94
|
+
|
|
95
|
+
app.post('/chat', async (c) => {
|
|
96
|
+
const parsed = await parseBody(c, ChatRequestSchema);
|
|
97
|
+
|
|
98
|
+
// Handle slash commands
|
|
99
|
+
const cmd = parseCommand(parsed.message);
|
|
100
|
+
if (cmd) {
|
|
101
|
+
if (cmd.command === 'mode' && cmd.arg) {
|
|
102
|
+
if (isAgentMode(cmd.arg)) {
|
|
103
|
+
setMode(cmd.arg);
|
|
104
|
+
const config = getAgentConfig(getMode());
|
|
105
|
+
return c.json({ type: 'command', command: 'mode', mode: getMode(), label: config.label, writeEnabled: config.writeEnabled });
|
|
106
|
+
}
|
|
107
|
+
return c.json({ type: 'command', command: 'mode', error: `Invalid mode. Valid: ${getAllModes().join(', ')}` });
|
|
108
|
+
}
|
|
109
|
+
if (cmd.command === 'cost') {
|
|
110
|
+
return c.json({ type: 'command', command: 'cost', ...costTracker.getBreakdown() });
|
|
111
|
+
}
|
|
112
|
+
if (cmd.command === 'model' && cmd.arg) {
|
|
113
|
+
modelOverride = cmd.arg === 'auto' ? undefined : cmd.arg;
|
|
114
|
+
return c.json({ type: 'command', command: 'model', model: modelOverride ?? 'auto-routing', message: modelOverride ? `Model locked to ${modelOverride}` : 'Auto-routing enabled' });
|
|
115
|
+
}
|
|
116
|
+
}
|
|
117
|
+
|
|
118
|
+
// Rate limiting — sliding window
|
|
119
|
+
if (!rateLimiter.check()) {
|
|
120
|
+
return c.json({ error: 'RATE_LIMIT', message: 'Chat rate limit exceeded' }, 429);
|
|
121
|
+
}
|
|
122
|
+
|
|
123
|
+
// Apply mode from request or session
|
|
124
|
+
if (parsed.mode) setMode(parsed.mode);
|
|
125
|
+
|
|
126
|
+
const { provider, modelId } = parsed.provider && parsed.model
|
|
127
|
+
? { provider: parsed.provider, modelId: parsed.model }
|
|
128
|
+
: llm.routeModel(modelOverride ?? 'chat', parsed.provider);
|
|
129
|
+
const model = await llm.getModel(provider, modelId, parsed.apiKey);
|
|
130
|
+
|
|
131
|
+
// Use mode-specific system prompt
|
|
132
|
+
const modeConfig = getAgentConfig(getMode());
|
|
133
|
+
const systemPrompt = `${modeConfig.systemPrompt}\n\n${await chatService.buildSystemPrompt()}`;
|
|
134
|
+
const tools = createCodingTools(chatService.getProjectPath(), toolExecutorDeps);
|
|
135
|
+
|
|
136
|
+
// Append user message to conversation history
|
|
137
|
+
const userMessage: CoreMessage = { role: 'user', content: parsed.message };
|
|
138
|
+
chatService.appendConversationHistory(userMessage);
|
|
139
|
+
|
|
140
|
+
return streamSSE(c, async (stream) => {
|
|
141
|
+
try {
|
|
142
|
+
const result = complior(streamText)({
|
|
143
|
+
model: model,
|
|
144
|
+
system: systemPrompt,
|
|
145
|
+
messages: chatService.getConversationHistory(),
|
|
146
|
+
tools,
|
|
147
|
+
stopWhen: stepCountIs(10),
|
|
148
|
+
});
|
|
149
|
+
|
|
150
|
+
let assistantText = '';
|
|
151
|
+
|
|
152
|
+
for await (const part of result.fullStream) {
|
|
153
|
+
switch (part.type) {
|
|
154
|
+
case 'text-delta': {
|
|
155
|
+
const text = strProp(part, 'text') || strProp(part, 'textDelta');
|
|
156
|
+
assistantText += text;
|
|
157
|
+
const payload = sseText(text);
|
|
158
|
+
await stream.writeSSE({ event: payload.event, data: payload.data });
|
|
159
|
+
break;
|
|
160
|
+
}
|
|
161
|
+
case 'reasoning-delta': {
|
|
162
|
+
const text = strProp(part, 'text') || strProp(part, 'textDelta');
|
|
163
|
+
const payload = sseThinking(text);
|
|
164
|
+
await stream.writeSSE({ event: payload.event, data: payload.data });
|
|
165
|
+
break;
|
|
166
|
+
}
|
|
167
|
+
case 'tool-call': {
|
|
168
|
+
const id = strProp(part, 'toolCallId') || strProp(part, 'toolUseId');
|
|
169
|
+
const toolName = strProp(part, 'toolName');
|
|
170
|
+
const rawArgs = prop(part, 'args') ?? prop(part, 'input');
|
|
171
|
+
const toolArgs = isRecord(rawArgs) ? rawArgs : {};
|
|
172
|
+
const payload = sseToolCall(id, toolName, toolArgs);
|
|
173
|
+
await stream.writeSSE({ event: payload.event, data: payload.data });
|
|
174
|
+
break;
|
|
175
|
+
}
|
|
176
|
+
case 'tool-result': {
|
|
177
|
+
const id = strProp(part, 'toolCallId') || strProp(part, 'toolUseId');
|
|
178
|
+
const toolName = strProp(part, 'toolName');
|
|
179
|
+
const resultVal = prop(part, 'result') ?? prop(part, 'output') ?? '';
|
|
180
|
+
const resultStr = typeof resultVal === 'string' ? resultVal : JSON.stringify(resultVal);
|
|
181
|
+
const isError = resultStr.includes('"error":true') || resultStr.includes('"error": true');
|
|
182
|
+
const payload = sseToolResult(id, toolName, resultStr, isError);
|
|
183
|
+
await stream.writeSSE({ event: payload.event, data: payload.data });
|
|
184
|
+
break;
|
|
185
|
+
}
|
|
186
|
+
case 'finish': {
|
|
187
|
+
const totalUsage = prop(part, 'totalUsage');
|
|
188
|
+
if (totalUsage && typeof totalUsage === 'object') {
|
|
189
|
+
const prompt = numProp(totalUsage, 'promptTokens') || numProp(totalUsage, 'inputTokens');
|
|
190
|
+
const completion = numProp(totalUsage, 'completionTokens') || numProp(totalUsage, 'outputTokens');
|
|
191
|
+
costTracker.record('qa', modelId, prompt, completion);
|
|
192
|
+
const payload = sseUsage(prompt, completion);
|
|
193
|
+
await stream.writeSSE({ event: payload.event, data: payload.data });
|
|
194
|
+
}
|
|
195
|
+
break;
|
|
196
|
+
}
|
|
197
|
+
case 'error': {
|
|
198
|
+
const payload = sseError(String(prop(part, 'error')));
|
|
199
|
+
await stream.writeSSE({ event: payload.event, data: payload.data });
|
|
200
|
+
break;
|
|
201
|
+
}
|
|
202
|
+
default:
|
|
203
|
+
break;
|
|
204
|
+
}
|
|
205
|
+
}
|
|
206
|
+
|
|
207
|
+
// Append assistant response to history
|
|
208
|
+
if (assistantText) {
|
|
209
|
+
chatService.appendConversationHistory({ role: 'assistant', content: assistantText });
|
|
210
|
+
}
|
|
211
|
+
|
|
212
|
+
// Persist chat history to disk
|
|
213
|
+
chatService.saveHistory().catch((e) => chatLog.warn('History save failed:', e));
|
|
214
|
+
|
|
215
|
+
const done = sseDone();
|
|
216
|
+
await stream.writeSSE({ event: done.event, data: done.data });
|
|
217
|
+
} catch (error: unknown) {
|
|
218
|
+
const message = error instanceof Error ? error.message : 'Unknown error';
|
|
219
|
+
const payload = sseError(message);
|
|
220
|
+
await stream.writeSSE({ event: payload.event, data: payload.data });
|
|
221
|
+
const done = sseDone();
|
|
222
|
+
await stream.writeSSE({ event: done.event, data: done.data });
|
|
223
|
+
}
|
|
224
|
+
});
|
|
225
|
+
});
|
|
226
|
+
|
|
227
|
+
return app;
|
|
228
|
+
};
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* US-S05-27: Cost Estimation HTTP Route
|
|
3
|
+
*
|
|
4
|
+
* GET /cost-estimate?hourlyRate=150&agent=my-bot
|
|
5
|
+
*/
|
|
6
|
+
|
|
7
|
+
import { Hono } from 'hono';
|
|
8
|
+
import type { CostService } from '../../services/cost-service.js';
|
|
9
|
+
import { DEFAULT_HOURLY_RATE } from '../../domain/shared/compliance-constants.js';
|
|
10
|
+
|
|
11
|
+
export interface CostRouteDeps {
|
|
12
|
+
readonly costService: CostService;
|
|
13
|
+
}
|
|
14
|
+
|
|
15
|
+
export const createCostRoute = (deps: CostRouteDeps) => {
|
|
16
|
+
const app = new Hono();
|
|
17
|
+
|
|
18
|
+
app.get('/cost-estimate', async (c) => {
|
|
19
|
+
const hourlyRate = Number(c.req.query('hourlyRate')) || DEFAULT_HOURLY_RATE;
|
|
20
|
+
const agentName = c.req.query('agent') || undefined;
|
|
21
|
+
|
|
22
|
+
try {
|
|
23
|
+
const result = await deps.costService.estimate(hourlyRate, agentName);
|
|
24
|
+
return c.json(result);
|
|
25
|
+
} catch (err) {
|
|
26
|
+
const message =
|
|
27
|
+
err instanceof Error ? err.message : 'Cost estimation failed';
|
|
28
|
+
return c.json({ error: message }, 500);
|
|
29
|
+
}
|
|
30
|
+
});
|
|
31
|
+
|
|
32
|
+
return app;
|
|
33
|
+
};
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* US-S05-22: Compliance Debt Score HTTP Route
|
|
3
|
+
*
|
|
4
|
+
* GET /debt
|
|
5
|
+
*/
|
|
6
|
+
|
|
7
|
+
import { Hono } from 'hono';
|
|
8
|
+
import type { DebtService } from '../../services/debt-service.js';
|
|
9
|
+
|
|
10
|
+
export interface DebtRouteDeps {
|
|
11
|
+
readonly debtService: DebtService;
|
|
12
|
+
}
|
|
13
|
+
|
|
14
|
+
export const createDebtRoute = (deps: DebtRouteDeps) => {
|
|
15
|
+
const app = new Hono();
|
|
16
|
+
|
|
17
|
+
app.get('/debt', async (c) => {
|
|
18
|
+
try {
|
|
19
|
+
const trend = c.req.query('trend') === 'true';
|
|
20
|
+
const result = await deps.debtService.getDebt(trend);
|
|
21
|
+
return c.json(result);
|
|
22
|
+
} catch (err) {
|
|
23
|
+
const message = err instanceof Error ? err.message : 'Debt calculation failed';
|
|
24
|
+
return c.json({ error: message }, 500);
|
|
25
|
+
}
|
|
26
|
+
});
|
|
27
|
+
|
|
28
|
+
return app;
|
|
29
|
+
};
|
|
@@ -0,0 +1,64 @@
|
|
|
1
|
+
import { Hono } from 'hono';
|
|
2
|
+
import {
|
|
3
|
+
getDisclaimer,
|
|
4
|
+
getReportFooter,
|
|
5
|
+
containsBannedPhrase,
|
|
6
|
+
BANNED_PHRASES,
|
|
7
|
+
type DisclaimerContext,
|
|
8
|
+
} from '../../domain/disclaimer.js';
|
|
9
|
+
|
|
10
|
+
const VALID_CONTEXTS = new Set<string>([
|
|
11
|
+
'system_prompt', 'report_footer', 'compliance_md', 'commit_message', 'chat_response',
|
|
12
|
+
]);
|
|
13
|
+
|
|
14
|
+
const isDisclaimerContext = (s: string): s is DisclaimerContext => VALID_CONTEXTS.has(s);
|
|
15
|
+
|
|
16
|
+
export interface DisclaimerRouteDeps {
|
|
17
|
+
readonly getVersion: () => string;
|
|
18
|
+
}
|
|
19
|
+
|
|
20
|
+
export const createDisclaimerRoute = (deps: DisclaimerRouteDeps) => {
|
|
21
|
+
const app = new Hono();
|
|
22
|
+
|
|
23
|
+
// GET /disclaimer — list all contexts
|
|
24
|
+
app.get('/disclaimer', (c) => {
|
|
25
|
+
return c.json({
|
|
26
|
+
contexts: [...VALID_CONTEXTS],
|
|
27
|
+
bannedPhrases: BANNED_PHRASES,
|
|
28
|
+
});
|
|
29
|
+
});
|
|
30
|
+
|
|
31
|
+
// GET /disclaimer/:context — get disclaimer text for a specific context
|
|
32
|
+
app.get('/disclaimer/:context', (c) => {
|
|
33
|
+
const ctx = c.req.param('context');
|
|
34
|
+
if (!isDisclaimerContext(ctx)) {
|
|
35
|
+
return c.json(
|
|
36
|
+
{ error: 'INVALID_CONTEXT', message: `Valid contexts: ${[...VALID_CONTEXTS].join(', ')}` },
|
|
37
|
+
400,
|
|
38
|
+
);
|
|
39
|
+
}
|
|
40
|
+
|
|
41
|
+
if (ctx === 'report_footer') {
|
|
42
|
+
return c.json({ context: ctx, text: getReportFooter(deps.getVersion()) });
|
|
43
|
+
}
|
|
44
|
+
|
|
45
|
+
return c.json({ context: ctx, text: getDisclaimer(ctx) });
|
|
46
|
+
});
|
|
47
|
+
|
|
48
|
+
// POST /disclaimer/check — check text for banned phrases
|
|
49
|
+
app.post('/disclaimer/check', async (c) => {
|
|
50
|
+
const body: Record<string, unknown> = await c.req.json().catch(() => ({}));
|
|
51
|
+
const text = typeof body['text'] === 'string' ? body['text'] : '';
|
|
52
|
+
|
|
53
|
+
if (!text) {
|
|
54
|
+
return c.json({ error: 'MISSING_TEXT', message: 'Provide "text" field to check' }, 400);
|
|
55
|
+
}
|
|
56
|
+
|
|
57
|
+
return c.json({
|
|
58
|
+
hasBannedPhrase: containsBannedPhrase(text),
|
|
59
|
+
bannedPhrases: BANNED_PHRASES,
|
|
60
|
+
});
|
|
61
|
+
});
|
|
62
|
+
|
|
63
|
+
return app;
|
|
64
|
+
};
|
|
@@ -0,0 +1,161 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Eval Route — HTTP endpoints for `complior eval`.
|
|
3
|
+
*
|
|
4
|
+
* POST /eval/run — Run eval against target (blocking JSON)
|
|
5
|
+
* POST /eval/run/stream — Run eval with SSE progress streaming
|
|
6
|
+
* GET /eval/last — Get last eval result
|
|
7
|
+
* GET /eval/list — List eval results
|
|
8
|
+
* GET /eval/remediation — Get remediation actions for test IDs (US-REM-07)
|
|
9
|
+
* POST /eval/remediation-report — Full remediation report (US-REM-08)
|
|
10
|
+
* GET /eval/findings — Get eval failures as scanner findings (US-REM-09)
|
|
11
|
+
*/
|
|
12
|
+
|
|
13
|
+
import { Hono } from 'hono';
|
|
14
|
+
import { streamSSE } from 'hono/streaming';
|
|
15
|
+
import type { EvalService } from '../../services/eval-service.js';
|
|
16
|
+
import { EvalOptionsSchema, resolveIncludes } from '../../domain/eval/types.js';
|
|
17
|
+
import type { EvalProgress } from '../../domain/eval/types.js';
|
|
18
|
+
import { sseEvalStart, sseEvalHealth, sseEvalTest, sseEvalDone, sseError } from '../../llm/sse-protocol.js';
|
|
19
|
+
import { parseBody, requireQuery } from '../utils/validation.js';
|
|
20
|
+
|
|
21
|
+
export interface EvalRouteDeps {
|
|
22
|
+
readonly evalService: EvalService;
|
|
23
|
+
}
|
|
24
|
+
|
|
25
|
+
export const createEvalRoute = (deps: EvalRouteDeps) => {
|
|
26
|
+
const app = new Hono();
|
|
27
|
+
|
|
28
|
+
// POST /eval/run — run eval (blocking JSON response)
|
|
29
|
+
app.post('/eval/run', async (c) => {
|
|
30
|
+
const options = await parseBody(c, EvalOptionsSchema);
|
|
31
|
+
const result = await deps.evalService.runEval(options);
|
|
32
|
+
return c.json(result);
|
|
33
|
+
});
|
|
34
|
+
|
|
35
|
+
// POST /eval/run/stream — run eval with SSE progress streaming
|
|
36
|
+
app.post('/eval/run/stream', async (c) => {
|
|
37
|
+
const options = await parseBody(c, EvalOptionsSchema);
|
|
38
|
+
const includes = resolveIncludes(options);
|
|
39
|
+
const modeLabel = includes.deterministic && includes.llm && includes.security ? 'full'
|
|
40
|
+
: includes.deterministic && includes.llm ? 'deterministic + LLM-judged'
|
|
41
|
+
: includes.llm ? 'LLM-judged tests'
|
|
42
|
+
: includes.security ? 'security probes'
|
|
43
|
+
: 'deterministic tests';
|
|
44
|
+
|
|
45
|
+
return streamSSE(c, async (stream) => {
|
|
46
|
+
try {
|
|
47
|
+
// Emit start event (pass model as judgeModel when LLM-judge is enabled)
|
|
48
|
+
const judgeModel = (includes.llm || includes.security) ? options.model : undefined;
|
|
49
|
+
const startPayload = sseEvalStart(options.target, options.model, modeLabel, judgeModel);
|
|
50
|
+
await stream.writeSSE({ event: startPayload.event, data: startPayload.data });
|
|
51
|
+
|
|
52
|
+
let healthEmitted = false;
|
|
53
|
+
|
|
54
|
+
const onProgress = async (progress: EvalProgress): Promise<void> => {
|
|
55
|
+
// Emit health check result
|
|
56
|
+
if (progress.phase === 'health' && progress.completed === 1 && !healthEmitted) {
|
|
57
|
+
healthEmitted = true;
|
|
58
|
+
const healthPayload = sseEvalHealth(true);
|
|
59
|
+
await stream.writeSSE({ event: healthPayload.event, data: healthPayload.data });
|
|
60
|
+
}
|
|
61
|
+
|
|
62
|
+
// Emit per-test result
|
|
63
|
+
if (progress.lastResult && progress.completed > 0) {
|
|
64
|
+
const r = progress.lastResult;
|
|
65
|
+
const testPayload = sseEvalTest({
|
|
66
|
+
testId: r.testId,
|
|
67
|
+
name: r.name,
|
|
68
|
+
category: r.category,
|
|
69
|
+
method: r.method,
|
|
70
|
+
verdict: r.verdict,
|
|
71
|
+
score: r.score,
|
|
72
|
+
latencyMs: r.latencyMs,
|
|
73
|
+
phase: progress.phase,
|
|
74
|
+
completed: progress.completed,
|
|
75
|
+
total: progress.total,
|
|
76
|
+
...(r.owaspCategory ? { owaspCategory: r.owaspCategory } : {}),
|
|
77
|
+
...(r.severity ? { severity: r.severity } : {}),
|
|
78
|
+
...(r.probe ? { probe: r.probe } : {}),
|
|
79
|
+
...(r.response ? { response: r.response } : {}),
|
|
80
|
+
...(r.reasoning ? { reasoning: r.reasoning } : {}),
|
|
81
|
+
});
|
|
82
|
+
await stream.writeSSE({ event: testPayload.event, data: testPayload.data });
|
|
83
|
+
}
|
|
84
|
+
};
|
|
85
|
+
|
|
86
|
+
const result = await deps.evalService.runEval(options, onProgress);
|
|
87
|
+
|
|
88
|
+
// Emit final result
|
|
89
|
+
const donePayload = sseEvalDone(result);
|
|
90
|
+
await stream.writeSSE({ event: donePayload.event, data: donePayload.data });
|
|
91
|
+
} catch (err) {
|
|
92
|
+
const errPayload = sseError(err instanceof Error ? err.message : String(err));
|
|
93
|
+
await stream.writeSSE({ event: errPayload.event, data: errPayload.data });
|
|
94
|
+
}
|
|
95
|
+
});
|
|
96
|
+
});
|
|
97
|
+
|
|
98
|
+
// GET /eval/last — get last eval result
|
|
99
|
+
app.get('/eval/last', async (c) => {
|
|
100
|
+
const result = await deps.evalService.getLastResult();
|
|
101
|
+
if (!result) {
|
|
102
|
+
return c.json({ error: 'NOT_FOUND', message: 'No eval results found' }, 404);
|
|
103
|
+
}
|
|
104
|
+
return c.json(result);
|
|
105
|
+
});
|
|
106
|
+
|
|
107
|
+
// GET /eval/list — list eval result files
|
|
108
|
+
app.get('/eval/list', async (c) => {
|
|
109
|
+
const results = await deps.evalService.listResults();
|
|
110
|
+
const judgeConfigured = deps.evalService.isJudgeConfigured();
|
|
111
|
+
return c.json({ results, judgeConfigured });
|
|
112
|
+
});
|
|
113
|
+
|
|
114
|
+
// GET /eval/remediation?testIds=CT-1-003,CT-1-005 — remediation for specific tests (US-REM-07)
|
|
115
|
+
app.get('/eval/remediation', async (c) => {
|
|
116
|
+
const testIdsParam = requireQuery(c, 'testIds');
|
|
117
|
+
|
|
118
|
+
const result = await deps.evalService.getLastResult();
|
|
119
|
+
if (!result) {
|
|
120
|
+
return c.json({ error: 'NOT_FOUND', message: 'No eval results found. Run complior eval first.' }, 404);
|
|
121
|
+
}
|
|
122
|
+
|
|
123
|
+
const testIds = testIdsParam.split(',').map((s) => s.trim()).filter(Boolean);
|
|
124
|
+
const remediation = await deps.evalService.getRemediationForTests(testIds, result.results);
|
|
125
|
+
return c.json(remediation);
|
|
126
|
+
});
|
|
127
|
+
|
|
128
|
+
// POST /eval/remediation-report — full remediation report (US-REM-08)
|
|
129
|
+
app.post('/eval/remediation-report', async (c) => {
|
|
130
|
+
const result = await deps.evalService.getLastResult();
|
|
131
|
+
if (!result) {
|
|
132
|
+
return c.json({ error: 'NOT_FOUND', message: 'No eval results found. Run complior eval first.' }, 404);
|
|
133
|
+
}
|
|
134
|
+
|
|
135
|
+
const report = await deps.evalService.generateRemediationReport(result);
|
|
136
|
+
|
|
137
|
+
// R4: Render markdown via service (route should not import domain)
|
|
138
|
+
const markdown_report = await deps.evalService.getRemediationReportMarkdown();
|
|
139
|
+
|
|
140
|
+
return c.json({ ...report, markdown_report });
|
|
141
|
+
});
|
|
142
|
+
|
|
143
|
+
// POST /eval/apply-fixes — apply Type B eval fixes, return Type A as manual guidance
|
|
144
|
+
app.post('/eval/apply-fixes', async (c) => {
|
|
145
|
+
const { applied, manual } = await deps.evalService.applyEvalFixes();
|
|
146
|
+
return c.json({ applied, manual, appliedCount: applied.length, manualCount: manual.length });
|
|
147
|
+
});
|
|
148
|
+
|
|
149
|
+
// GET /eval/findings — eval failures as scanner findings (US-REM-09)
|
|
150
|
+
app.get('/eval/findings', async (c) => {
|
|
151
|
+
const result = await deps.evalService.getLastResult();
|
|
152
|
+
if (!result) {
|
|
153
|
+
return c.json({ error: 'NOT_FOUND', message: 'No eval results found. Run complior eval first.' }, 404);
|
|
154
|
+
}
|
|
155
|
+
|
|
156
|
+
const findings = await deps.evalService.getEvalFindings(result);
|
|
157
|
+
return c.json({ findings });
|
|
158
|
+
});
|
|
159
|
+
|
|
160
|
+
return app;
|
|
161
|
+
};
|
|
@@ -0,0 +1,108 @@
|
|
|
1
|
+
import { describe, it, expect, vi } from 'vitest';
|
|
2
|
+
import { createEventsRoute } from './events.route.js';
|
|
3
|
+
import type { EventBusPort, EventMap, EventHandler } from '../../ports/events.port.js';
|
|
4
|
+
|
|
5
|
+
const createMockEventBus = (): EventBusPort & { _handlers: Map<string, Set<EventHandler<never>>> } => {
|
|
6
|
+
const handlers = new Map<string, Set<EventHandler<never>>>();
|
|
7
|
+
return {
|
|
8
|
+
_handlers: handlers,
|
|
9
|
+
on: <K extends keyof EventMap>(event: K, handler: EventHandler<EventMap[K]>) => {
|
|
10
|
+
if (!handlers.has(event)) handlers.set(event, new Set());
|
|
11
|
+
handlers.get(event)!.add(handler as EventHandler<never>);
|
|
12
|
+
},
|
|
13
|
+
off: <K extends keyof EventMap>(event: K, handler: EventHandler<EventMap[K]>) => {
|
|
14
|
+
handlers.get(event)?.delete(handler as EventHandler<never>);
|
|
15
|
+
},
|
|
16
|
+
emit: <K extends keyof EventMap>(event: K, payload: EventMap[K]) => {
|
|
17
|
+
const set = handlers.get(event);
|
|
18
|
+
if (set) for (const h of set) (h as EventHandler<EventMap[K]>)(payload);
|
|
19
|
+
},
|
|
20
|
+
};
|
|
21
|
+
};
|
|
22
|
+
|
|
23
|
+
describe('events route', () => {
|
|
24
|
+
it('responds with text/event-stream content type', async () => {
|
|
25
|
+
const events = createMockEventBus();
|
|
26
|
+
const app = createEventsRoute({ events });
|
|
27
|
+
|
|
28
|
+
const res = await app.request('/events');
|
|
29
|
+
expect(res.status).toBe(200);
|
|
30
|
+
expect(res.headers.get('content-type')).toContain('text/event-stream');
|
|
31
|
+
});
|
|
32
|
+
|
|
33
|
+
it('registers handlers for agent events on connect', async () => {
|
|
34
|
+
const events = createMockEventBus();
|
|
35
|
+
const app = createEventsRoute({ events });
|
|
36
|
+
|
|
37
|
+
// Start SSE connection (don't await body — it's streaming)
|
|
38
|
+
const res = await app.request('/events');
|
|
39
|
+
expect(res.status).toBe(200);
|
|
40
|
+
|
|
41
|
+
// Event bus should have handlers registered
|
|
42
|
+
expect(events._handlers.has('agent.scan.completed')).toBe(true);
|
|
43
|
+
expect(events._handlers.has('agent.score.updated')).toBe(true);
|
|
44
|
+
expect(events._handlers.has('scan.completed')).toBe(true);
|
|
45
|
+
});
|
|
46
|
+
});
|
|
47
|
+
|
|
48
|
+
describe('agent events in EventMap', () => {
|
|
49
|
+
it('agent.scan.completed event can be emitted and received', () => {
|
|
50
|
+
const events = createMockEventBus();
|
|
51
|
+
const received: unknown[] = [];
|
|
52
|
+
|
|
53
|
+
events.on('agent.scan.completed', (payload) => {
|
|
54
|
+
received.push(payload);
|
|
55
|
+
});
|
|
56
|
+
|
|
57
|
+
const mockResult = { score: { score: 82 }, findings: [] } as never;
|
|
58
|
+
events.emit('agent.scan.completed', { agentName: 'test-agent', result: mockResult });
|
|
59
|
+
|
|
60
|
+
expect(received).toHaveLength(1);
|
|
61
|
+
expect(received[0]).toMatchObject({ agentName: 'test-agent' });
|
|
62
|
+
});
|
|
63
|
+
|
|
64
|
+
it('agent.score.updated event can be emitted and received', () => {
|
|
65
|
+
const events = createMockEventBus();
|
|
66
|
+
const received: unknown[] = [];
|
|
67
|
+
|
|
68
|
+
events.on('agent.score.updated', (payload) => {
|
|
69
|
+
received.push(payload);
|
|
70
|
+
});
|
|
71
|
+
|
|
72
|
+
events.emit('agent.score.updated', { agentName: 'chat-bot', before: 60, after: 75 });
|
|
73
|
+
|
|
74
|
+
expect(received).toHaveLength(1);
|
|
75
|
+
expect(received[0]).toMatchObject({ agentName: 'chat-bot', before: 60, after: 75 });
|
|
76
|
+
});
|
|
77
|
+
});
|
|
78
|
+
|
|
79
|
+
describe('agent strip data extraction', () => {
|
|
80
|
+
it('extracts name, autonomy_level, and score from passport JSON', () => {
|
|
81
|
+
const passport = {
|
|
82
|
+
name: 'core-engine',
|
|
83
|
+
autonomy_level: 3,
|
|
84
|
+
compliance: { complior_score: 82 },
|
|
85
|
+
};
|
|
86
|
+
|
|
87
|
+
const name = passport.name;
|
|
88
|
+
const autonomy = passport.autonomy_level;
|
|
89
|
+
const score = passport.compliance.complior_score;
|
|
90
|
+
|
|
91
|
+
expect(name).toBe('core-engine');
|
|
92
|
+
expect(autonomy).toBe(3);
|
|
93
|
+
expect(score).toBe(82);
|
|
94
|
+
});
|
|
95
|
+
|
|
96
|
+
it('handles missing fields gracefully', () => {
|
|
97
|
+
const passport: Record<string, unknown> = { name: 'minimal' };
|
|
98
|
+
|
|
99
|
+
const name = (passport['name'] as string) ?? 'unknown';
|
|
100
|
+
const autonomy = (passport['autonomy_level'] as number) ?? 0;
|
|
101
|
+
const compliance = passport['compliance'] as Record<string, unknown> | undefined;
|
|
102
|
+
const score = (compliance?.['complior_score'] as number) ?? 0;
|
|
103
|
+
|
|
104
|
+
expect(name).toBe('minimal');
|
|
105
|
+
expect(autonomy).toBe(0);
|
|
106
|
+
expect(score).toBe(0);
|
|
107
|
+
});
|
|
108
|
+
});
|