@trentapps/manager-protocol 1.1.1

package/dist/rules/storage.js

@@ -0,0 +1,134 @@
+/**
+ * Browser Storage Rules
+ * Governance rules for localStorage, sessionStorage, and IndexedDB
+ */
+export const storageRules = [
+    {
+        id: 'storage-001',
+        name: 'Monitor localStorage Quota Usage',
+        description: 'localStorage usage must be monitored to prevent quota exceeded errors',
+        type: 'operational',
+        enabled: true,
+        priority: 900,
+        conditions: [
+            { field: 'actionCategory', operator: 'equals', value: 'data_modification' },
+            { field: 'storageType', operator: 'equals', value: 'localStorage' },
+            { field: 'estimatedSize', operator: 'greater_than', value: 4000000 }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'localStorage usage >4MB - approaching quota limit (5-10MB)' }
+        ],
+        riskWeight: 30,
+        tags: ['storage', 'localStorage', 'quota', 'browser']
+    },
+    {
+        id: 'storage-002',
+        name: 'Require Auto-Cleanup of Old Data',
+        description: 'localStorage must have cleanup strategy for old data',
+        type: 'architecture',
+        enabled: true,
+        priority: 850,
+        conditions: [
+            { field: 'storageType', operator: 'equals', value: 'localStorage' },
+            { field: 'hasCleanupStrategy', operator: 'not_equals', value: true }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'Implement localStorage cleanup (TTL, LRU, size-based eviction)' }
+        ],
+        riskWeight: 25,
+        tags: ['storage', 'localStorage', 'cleanup', 'maintenance']
+    },
+    {
+        id: 'storage-003',
+        name: 'Prohibit Sensitive Data in localStorage',
+        description: 'Sensitive data must not be stored in localStorage',
+        type: 'security',
+        enabled: true,
+        priority: 960,
+        conditions: [
+            { field: 'storageType', operator: 'in', value: ['localStorage', 'sessionStorage'] },
+            { field: 'dataClassification', operator: 'in', value: ['confidential', 'restricted'] }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'deny', message: 'Sensitive data prohibited in localStorage (use secure HTTP-only cookies or encrypted storage)' }
+        ],
+        riskWeight: 55,
+        tags: ['storage', 'security', 'localStorage', 'sensitive-data']
+    },
+    {
+        id: 'storage-004',
+        name: 'Deny Base64 Image Storage',
+        description: 'Base64 images must not be stored in localStorage due to size',
+        type: 'operational',
+        enabled: true,
+        priority: 920,
+        conditions: [
+            { field: 'storageType', operator: 'equals', value: 'localStorage' },
+            { field: 'dataType', operator: 'equals', value: 'base64_image' }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'deny', message: 'Base64 images prohibited in localStorage (use blob URLs, IndexedDB, or server storage)' }
+        ],
+        riskWeight: 40,
+        tags: ['storage', 'localStorage', 'images', 'quota']
+    },
+    {
+        id: 'storage-005',
+        name: 'Validate localStorage Access Error Handling',
+        description: 'localStorage operations must handle quota exceeded errors',
+        type: 'architecture',
+        enabled: true,
+        priority: 880,
+        conditions: [
+            { field: 'storageType', operator: 'equals', value: 'localStorage' },
+            { field: 'hasErrorHandling', operator: 'not_equals', value: true }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'Wrap localStorage operations in try/catch for quota exceeded errors' }
+        ],
+        riskWeight: 20,
+        tags: ['storage', 'localStorage', 'error-handling']
+    },
+    {
+        id: 'storage-006',
+        name: 'Use IndexedDB for Large Data',
+        description: 'Large datasets should use IndexedDB instead of localStorage',
+        type: 'architecture',
+        enabled: true,
+        priority: 800,
+        conditions: [
+            { field: 'storageType', operator: 'equals', value: 'localStorage' },
+            { field: 'dataSize', operator: 'greater_than', value: 1000000 }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'Large data (>1MB) should use IndexedDB instead of localStorage' }
+        ],
+        riskWeight: 15,
+        tags: ['storage', 'indexeddb', 'performance']
+    },
+    {
+        id: 'storage-007',
+        name: 'No Tokens in localStorage',
+        description: 'Auth tokens and API keys must not be stored in localStorage',
+        type: 'security',
+        enabled: true,
+        priority: 980,
+        conditions: [
+            { field: 'storageType', operator: 'in', value: ['localStorage', 'sessionStorage'] },
+            { field: 'dataType', operator: 'in', value: ['auth_token', 'api_key', 'jwt'] }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'deny', message: 'Auth tokens/API keys prohibited in localStorage (use secure HTTP-only cookies)' }
+        ],
+        riskWeight: 70,
+        tags: ['storage', 'security', 'localStorage', 'tokens', 'authentication']
+    }
+];
+//# sourceMappingURL=storage.js.map

package/dist/rules/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/rules/storage.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,kCAAkC;QACxC,WAAW,EAAE,uEAAuE;QACpF,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE;YAC3E,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;YACnE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE;SACrE;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,4DAA4D,EAAE;SACxF;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC;KACtD;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,kCAAkC;QACxC,WAAW,EAAE,sDAAsD;QACnE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;YACnE,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE;SACrE;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gEAAgE,EAAE;SAC5F;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,CAAC;KAC5D;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,yCAAyC;QAC/C,WAAW,EAAE,mDAAmD;QAChE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAC,EAAE;YACnF,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE;SACvF;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,+FAA+F,EAAE;SAC3H;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,CAAC;KAChE;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,8DAA8D;QAC3E,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;YACnE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;SACjE;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,wFAAwF,EAAE;SACpH;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC;KACrD;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,6CAA6C;QACnD,WAAW,EAAE,2DAA2D;QACxE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;YACnE,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE;SACnE;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,qEAAqE,EAAE;SACjG;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,gBAAgB,CAAC;KACpD;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,6DAA6D;QAC1E,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;YACnE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE;SAChE;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gEAAgE,EAAE;SAC5F;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC;KAC9C;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,6DAA6D;QAC1E,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAC,EAAE;YACnF,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;SAC/E;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gFAAgF,EAAE;SAC5G;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,CAAC;KAC1E;CACF,CAAC"}

package/dist/rules/stripe.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Stripe Payment Security Rules
+ * Governance rules for Stripe payment processing
+ */
+import type { BusinessRule } from '../types/index.js';
+export declare const stripeRules: BusinessRule[];
+//# sourceMappingURL=stripe.d.ts.map

package/dist/rules/stripe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.d.ts","sourceRoot":"","sources":["../../src/rules/stripe.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,eAAO,MAAM,WAAW,EAAE,YAAY,EAsIrC,CAAC"}

package/dist/rules/stripe.js

@@ -0,0 +1,140 @@
+/**
+ * Stripe Payment Security Rules
+ * Governance rules for Stripe payment processing
+ */
+export const stripeRules = [
+    {
+        id: 'stripe-001',
+        name: 'Require Webhook Signature Validation',
+        description: 'Stripe webhooks must validate signatures to prevent replay attacks',
+        type: 'security',
+        enabled: true,
+        priority: 980,
+        conditions: [
+            { field: 'actionName', operator: 'contains', value: 'webhook' },
+            { field: 'provider', operator: 'equals', value: 'stripe' },
+            { field: 'signatureValidated', operator: 'not_equals', value: true }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'deny', message: 'Stripe webhook signature validation is required (use stripe.webhooks.constructEvent)' }
+        ],
+        riskWeight: 65,
+        tags: ['stripe', 'security', 'webhook', 'validation']
+    },
+    {
+        id: 'stripe-002',
+        name: 'Enforce Idempotency Keys',
+        description: 'Payment operations must use idempotency keys',
+        type: 'architecture',
+        enabled: true,
+        priority: 920,
+        conditions: [
+            { field: 'actionCategory', operator: 'equals', value: 'financial' },
+            { field: 'provider', operator: 'equals', value: 'stripe' },
+            { field: 'operation', operator: 'in', value: ['charge', 'payment', 'transfer'] },
+            { field: 'idempotencyKey', operator: 'not_exists', value: null }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'require_approval', message: 'Stripe payment operations should use idempotency keys to prevent duplicate charges' }
+        ],
+        riskWeight: 50,
+        tags: ['stripe', 'idempotency', 'payments', 'reliability']
+    },
+    {
+        id: 'stripe-003',
+        name: 'Minimize Customer Data Storage',
+        description: 'Store minimal customer data, use Stripe Customer objects',
+        type: 'compliance',
+        enabled: true,
+        priority: 900,
+        conditions: [
+            { field: 'actionCategory', operator: 'equals', value: 'data_modification' },
+            { field: 'dataType', operator: 'equals', value: 'payment_method' },
+            { field: 'storedLocally', operator: 'equals', value: true }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'PCI-DSS: Store customer data in Stripe, not locally (use Customer and PaymentMethod objects)' }
+        ],
+        riskWeight: 45,
+        tags: ['stripe', 'pci-dss', 'data-minimization', 'compliance']
+    },
+    {
+        id: 'stripe-004',
+        name: 'Validate Connect Platform Requirements',
+        description: 'Stripe Connect platforms must validate account requirements',
+        type: 'compliance',
+        enabled: true,
+        priority: 880,
+        conditions: [
+            { field: 'actionName', operator: 'contains', value: 'connect' },
+            { field: 'provider', operator: 'equals', value: 'stripe' },
+            { field: 'accountRequirementsValidated', operator: 'not_equals', value: true }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'Stripe Connect: Validate account requirements before accepting payments' }
+        ],
+        riskWeight: 40,
+        tags: ['stripe', 'connect', 'compliance', 'validation']
+    },
+    {
+        id: 'stripe-005',
+        name: 'Require SCA for EU Payments',
+        description: 'EU payments must use Strong Customer Authentication',
+        type: 'compliance',
+        enabled: true,
+        priority: 950,
+        conditions: [
+            { field: 'actionCategory', operator: 'equals', value: 'financial' },
+            { field: 'provider', operator: 'equals', value: 'stripe' },
+            { field: 'customerRegion', operator: 'in', value: ['EU', 'EEA', 'UK'] },
+            { field: 'scaEnabled', operator: 'not_equals', value: true }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'deny', message: 'EU/EEA payments require SCA (use Payment Intents with automatic payment methods)' }
+        ],
+        riskWeight: 55,
+        tags: ['stripe', 'sca', 'psd2', 'compliance', 'eu']
+    },
+    {
+        id: 'stripe-006',
+        name: 'Log All Payment Events',
+        description: 'All payment events must be logged for audit',
+        type: 'compliance',
+        enabled: true,
+        priority: 940,
+        conditions: [
+            { field: 'actionCategory', operator: 'equals', value: 'financial' },
+            { field: 'provider', operator: 'equals', value: 'stripe' }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'log' }
+        ],
+        riskWeight: 10,
+        tags: ['stripe', 'audit', 'logging', 'compliance']
+    },
+    {
+        id: 'stripe-007',
+        name: 'Use Latest API Version',
+        description: 'Use recent Stripe API version for security and features',
+        type: 'security',
+        enabled: true,
+        priority: 800,
+        conditions: [
+            { field: 'provider', operator: 'equals', value: 'stripe' },
+            { field: 'apiVersion', operator: 'less_than', value: '2023-01-01' }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'Stripe API version is outdated - update for security fixes and new features' }
+        ],
+        riskWeight: 25,
+        tags: ['stripe', 'api-version', 'security', 'maintenance']
+    }
+];
+//# sourceMappingURL=stripe.js.map

package/dist/rules/stripe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.js","sourceRoot":"","sources":["../../src/rules/stripe.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,CAAC,MAAM,WAAW,GAAmB;IACzC;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EAAE,oEAAoE;QACjF,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE;YAC/D,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;YAC1D,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE;SACrE;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,sFAAsF,EAAE;SAClH;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC;KACtD;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,8CAA8C;QAC3D,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE;YACnE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;YAC1D,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE;YAChF,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE;SACjE;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,oFAAoF,EAAE;SAC5H;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,CAAC;KAC3D;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,0DAA0D;QACvE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE;YAC3E,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE;YAClE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;SAC5D;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,8FAA8F,EAAE;SAC1H;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,mBAAmB,EAAE,YAAY,CAAC;KAC/D;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,wCAAwC;QAC9C,WAAW,EAAE,6DAA6D;QAC1E,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE;YAC/D,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;YAC1D,EAAE,KAAK,EAAE,8BAA8B,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE;SAC/E;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,yEAAyE,EAAE;SACrG;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC;KACxD;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,qDAAqD;QAClE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE;YACnE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;YAC1D,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE;YACvE,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE;SAC7D;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kFAAkF,EAAE;SAC9G;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC;KACpD;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE;YACnE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;SAC3D;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,KAAK,EAAE;SAChB;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC;KACnD;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;YAC1D,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE;SACpE;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,6EAA6E,EAAE;SACzG;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,CAAC;KAC3D;CACF,CAAC"}

package/dist/rules/testing.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Testing & Quality Assurance Rules
+ * Governance rules for Playwright and test automation
+ */
+import type { BusinessRule } from '../types/index.js';
+export declare const testingRules: BusinessRule[];
+//# sourceMappingURL=testing.d.ts.map

package/dist/rules/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../../src/rules/testing.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,eAAO,MAAM,YAAY,EAAE,YAAY,EAiItC,CAAC"}

package/dist/rules/testing.js

@@ -0,0 +1,135 @@
+/**
+ * Testing & Quality Assurance Rules
+ * Governance rules for Playwright and test automation
+ */
+export const testingRules = [
+    {
+        id: 'test-001',
+        name: 'Require Test Isolation',
+        description: 'Tests must be isolated with no shared state',
+        type: 'architecture',
+        enabled: true,
+        priority: 900,
+        conditions: [
+            { field: 'actionCategory', operator: 'equals', value: 'code_execution' },
+            { field: 'isTest', operator: 'equals', value: true },
+            { field: 'testIsolation', operator: 'not_equals', value: true }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'Tests should be isolated (independent setup/teardown, no shared state)' }
+        ],
+        riskWeight: 35,
+        tags: ['testing', 'playwright', 'isolation', 'quality']
+    },
+    {
+        id: 'test-002',
+        name: 'Limit Test Execution Time',
+        description: 'Flag slow tests for optimization',
+        type: 'operational',
+        enabled: true,
+        priority: 750,
+        conditions: [
+            { field: 'isTest', operator: 'equals', value: true },
+            { field: 'executionTimeMs', operator: 'greater_than', value: 30000 }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'Test execution >30s - consider optimization or splitting into smaller tests' }
+        ],
+        riskWeight: 20,
+        tags: ['testing', 'performance', 'optimization']
+    },
+    {
+        id: 'test-003',
+        name: 'Require Test Data Cleanup',
+        description: 'Tests must clean up created data/artifacts',
+        type: 'operational',
+        enabled: true,
+        priority: 850,
+        conditions: [
+            { field: 'isTest', operator: 'equals', value: true },
+            { field: 'hasCleanup', operator: 'not_equals', value: true }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'Tests should cleanup data/artifacts in afterEach/afterAll hooks' }
+        ],
+        riskWeight: 25,
+        tags: ['testing', 'cleanup', 'maintenance']
+    },
+    {
+        id: 'test-004',
+        name: 'Enforce Deterministic Test Patterns',
+        description: 'Avoid random waits and non-deterministic patterns',
+        type: 'architecture',
+        enabled: true,
+        priority: 880,
+        conditions: [
+            { field: 'isTest', operator: 'equals', value: true },
+            { field: 'usesRandomWait', operator: 'equals', value: true }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'Avoid random waits in tests - use waitForSelector, waitForLoadState, etc.' }
+        ],
+        riskWeight: 30,
+        tags: ['testing', 'playwright', 'determinism', 'flakiness']
+    },
+    {
+        id: 'test-005',
+        name: 'Screenshot Storage Limits',
+        description: 'Limit screenshot retention to prevent disk usage',
+        type: 'operational',
+        enabled: true,
+        priority: 700,
+        conditions: [
+            { field: 'actionName', operator: 'contains', value: 'screenshot' },
+            { field: 'screenshotRetentionDays', operator: 'greater_than', value: 7 }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'Screenshot retention >7 days may consume excessive storage' }
+        ],
+        riskWeight: 15,
+        tags: ['testing', 'storage', 'cleanup', 'playwright']
+    },
+    {
+        id: 'test-006',
+        name: 'Parallel Test Safety',
+        description: 'Tests run in parallel must not conflict',
+        type: 'architecture',
+        enabled: true,
+        priority: 860,
+        conditions: [
+            { field: 'isTest', operator: 'equals', value: true },
+            { field: 'runsInParallel', operator: 'equals', value: true },
+            { field: 'parallelSafe', operator: 'not_equals', value: true }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'warn', message: 'Parallel tests must not share resources (unique test data, ports, files)' }
+        ],
+        riskWeight: 30,
+        tags: ['testing', 'parallel', 'concurrency', 'playwright']
+    },
+    {
+        id: 'test-007',
+        name: 'E2E Test Environment Isolation',
+        description: 'E2E tests should run against isolated test environment',
+        type: 'operational',
+        enabled: true,
+        priority: 920,
+        conditions: [
+            { field: 'testType', operator: 'equals', value: 'e2e' },
+            { field: 'environment', operator: 'equals', value: 'production' }
+        ],
+        conditionLogic: 'all',
+        actions: [
+            { type: 'deny', message: 'E2E tests must not run against production environment' }
+        ],
+        riskWeight: 50,
+        tags: ['testing', 'e2e', 'environment', 'safety']
+    }
+];
+//# sourceMappingURL=testing.js.map

package/dist/rules/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../../src/rules/testing.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE;YACxE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;YACpD,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE;SAChE;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,wEAAwE,EAAE;SACpG;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,CAAC;KACxD;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,kCAAkC;QAC/C,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;YACpD,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE;SACrE;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,6EAA6E,EAAE;SACzG;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,cAAc,CAAC;KACjD;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;YACpD,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE;SAC7D;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iEAAiE,EAAE;SAC7F;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC;KAC5C;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EAAE,mDAAmD;QAChE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;YACpD,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;SAC7D;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,2EAA2E,EAAE;SACvG;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,CAAC;KAC5D;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,kDAAkD;QAC/D,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE;YAClE,EAAE,KAAK,EAAE,yBAAyB,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE;SACzE;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,4DAA4D,EAAE;SACxF;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC;KACtD;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,yCAAyC;QACtD,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;YACpD,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;YAC5D,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE;SAC/D;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,0EAA0E,EAAE;SACtG;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,CAAC;KAC3D;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,wDAAwD;QACrE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE;YACvD,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE;SAClE;QACD,cAAc,EAAE,KAAK;QACrB,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,uDAAuD,EAAE;SACnF;QACD,UAAU,EAAE,EAAE;QACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC;KAClD;CACF,CAAC"}

package/dist/rules/ux.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Enterprise Agent Supervisor - UX Rules
+ *
+ * Built-in rules for ensuring good user experience and interaction patterns.
+ */
+import type { BusinessRule } from '../types/index.js';
+export declare const uxRules: BusinessRule[];
+export default uxRules;
+//# sourceMappingURL=ux.d.ts.map

package/dist/rules/ux.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ux.d.ts","sourceRoot":"","sources":["../../src/rules/ux.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,eAAO,MAAM,OAAO,EAAE,YAAY,EAoRjC,CAAC;AAEF,eAAe,OAAO,CAAC"}