agent-master-devsecops 3.9.0 → 5.1.0

package/scripts/{magic_prompt_generator.js → core/magic_prompt_generator.js}

@@ -1,205 +1,250 @@
-#!/usr/bin/env node
-/**
- * scripts/magic_prompt_generator.js
- * 
- * Magic Prompt Generator & Web Bookmarklet (AGDEV-27 / I-13).
- * Gera prompt autocontido de ativação instantânea (< 900 tokens) e bookmarklet
- * web para injeção em 1 clique no ChatGPT, Claude.ai, Gemini e DeepSeek Web.
- */
-
-const fs = require('node:fs');
-const path = require('node:path');
-
-class MagicPromptGenerator {
-  constructor(baseDir = path.resolve(__dirname, '..')) {
-    this.baseDir = baseDir;
-  }
-
-  generateMagicPrompt(target = 'generic') {
-    const prompt = `=== AGENT ORCHESTRATOR & SUÍTE MULTI-AGENTE (UNIVERSAL INSTANT ACTIVATION) ===
-[DIRECTIVE]: You are now running the canonical Agent Suite (Orchestrator, DevSecOps, QA, Scrum, SRE & UI/UX). Assume 100% adherence to the rules below for all responses:
-
-[THE 14 GOLDEN ENGINEERING RULES & RULE 15 INVIOLABILITY]:
-1. TDD First: Write/verify unit tests BEFORE modifying production code.
-2. Branch by Card & Strict Commit: Dedicated branch <TICKET>. Commit strictly [<TICKET>] - <Ação em português>. Conventional Commits e commits sem ticket banidos.
-3. Formal PR & CI: Every merge requires a formal Pull Request with 100% green CI checks.
-4. Zero Secrets (TruffleHog): Never commit credentials, .env files, private keys or tokens.
-5. DevSecOps OWASP: Strictly prevent CWE-78 (Cmd Injection), CWE-79 (XSS), CWE-89 (SQLi), CWE-116, CWE-1333 (ReDoS).
-6. Native Telemetry: Expose standard Prometheus metrics /metrics (CPU, RSS, Heap, latency).
-7. Dual-Layer Output Protocol: Keep chat output concise, short bullet points separated by a DOUBLE BLANK LINE (\\n\\n) with clickable markdown links. Externalize 15-section dense reports to tickets/ADRs.
-8. Central Knowledge: Record architectural decisions in ADRs. Keep project documentation living and 100% faithful to production.
-9. Issue Tracker: Move card to 'In progress' before starting; close with dense technical summary.
-10. Zero Assumptions: Clarify ambiguities or inspect code before proposing solutions.
-11. Doc Integrity: Preserve existing docstrings, comments and public API contracts.
-12. Operational Safety: Never execute destructive unconfirmed commands (rm -rf, hard reset).
-13. Cold Review (AGENT_QA.md): Independently audit diffs with cold skepticism; provide breaking tests.
-14. Ideation Sanity Filter: Every suggested idea in docs/IDEAS.md must strictly match the project's actual stack, domain, and architecture.
-15. Rule 15 Inviolability: Zero silent failures. Requirements and credentials (GitHub CLI, Jira, Confluence) are mandatory.
-
-[OPERATIONAL MODES]:
-- modo: orchestrator (central coordination, triage and multi-agent dispatch)
-- modo: devsecops (secure, robust code, clean architecture and CI/CD)
-- modo: qa (adversarial cold review, bug hunting and breaking tests)
-- modo: scrum (Kaizen/PDCA continuous improvement without overengineering)
-- modo: sre (SRE, telemetry, incident diagnosis and self-healing)
-- modo: uiux (design system, accessibility WCAG 2.1 AA, UX ergonomics, design tokens)
-- modo: full-dev (autonomous sequential idea implementation loop)
-
-[ACTIVATION ACKNOWLEDGEMENT]:
-Acknowledge activation with a 2-line executive greeting:
-"⚡ Suíte Multi-Agente universalmente ativada e pronta para qualquer demanda.
-Informe a stack e solicite credenciais Atlassian (Jira/Confluence) e GitHub CLI se for nova máquina ou projeto."`;
-
-    return prompt;
-  }
-
-  generateBookmarklet() {
-    const rawPrompt = this.generateMagicPrompt();
-    const encodedPrompt = JSON.stringify(rawPrompt);
-
-    // Bookmarklet inline seguro que detecta o campo de chat e copia para o clipboard
-    const script = `javascript:(function(){
-  var promptText = ${encodedPrompt};
-  
-  if (navigator.clipboard && navigator.clipboard.writeText) {
-    navigator.clipboard.writeText(promptText).then(function() {
-      showToast("⚡ Suíte Multi-Agente copiada! Cole (Ctrl+V) no chat da IA.");
-    }).catch(function() {
-      fallbackPrompt(promptText);
-    });
-  } else {
-    fallbackPrompt(promptText);
-  }
-
-  var inputEl = document.querySelector('#prompt-textarea') || 
-                 document.querySelector('div[contenteditable="true"]') || 
-                 document.querySelector('textarea');
-  if (inputEl) {
-    if (inputEl.tagName === 'TEXTAREA') {
-      inputEl.value = promptText;
-      inputEl.dispatchEvent(new Event('input', { bubbles: true }));
-    } else if (inputEl.isContentEditable) {
-      inputEl.innerText = promptText;
-      inputEl.dispatchEvent(new Event('input', { bubbles: true }));
-    }
-  }
-
-  function showToast(msg) {
-    var toast = document.createElement('div');
-    toast.innerText = msg;
-    toast.style.position = 'fixed';
-    toast.style.top = '20px';
-    toast.style.right = '20px';
-    toast.style.backgroundColor = '#0f172a';
-    toast.style.color = '#38bdf8';
-    toast.style.padding = '14px 20px';
-    toast.style.borderRadius = '8px';
-    toast.style.boxShadow = '0 10px 25px rgba(0,0,0,0.5)';
-    toast.style.zIndex = '999999';
-    toast.style.fontFamily = 'system-ui, sans-serif';
-    toast.style.fontSize = '14px';
-    toast.style.border = '1px solid #38bdf8';
-    document.body.appendChild(toast);
-    setTimeout(function() { toast.remove(); }, 3500);
-  }
-
-  function fallbackPrompt(text) {
-    window.prompt("Copie o Magic Prompt abaixo:", text);
-  }
-})();`.replace(/\n\s*/g, '');
-
-    return script;
-  }
-
-  estimateTokens(text) {
-    // Estimativa canônica de ~4 caracteres por token
-    return Math.ceil(text.length / 4);
-  }
-
-  exportArtifacts(targetDir = path.join(this.baseDir, 'dist', 'magic_prompt'), options = {}) {
-    const dryRun = Boolean(options.dryRun);
-    const magicPrompt = this.generateMagicPrompt();
-    const bookmarklet = this.generateBookmarklet();
-    const tokens = this.estimateTokens(magicPrompt);
-
-    const htmlContent = `<!DOCTYPE html>
-<html lang="pt-BR">
-<head>
-  <meta charset="UTF-8">
-  <title>Suíte Multi-Agente — Magic Prompt & Bookmarklet</title>
-  <style>
-    body { font-family: system-ui, -apple-system, sans-serif; background: #0f172a; color: #f8fafc; padding: 40px; line-height: 1.6; }
-    .card { background: #1e293b; border: 1px solid #334155; border-radius: 12px; padding: 24px; max-width: 800px; margin: 0 auto 30px; box-shadow: 0 10px 25px rgba(0,0,0,0.3); }
-    h1 { color: #38bdf8; margin-top: 0; }
-    pre { background: #090d16; padding: 16px; border-radius: 8px; overflow-x: auto; font-size: 13px; color: #cbd5e1; border: 1px solid #1e293b; }
-    .btn { display: inline-block; background: #0284c7; color: white; padding: 12px 20px; border-radius: 8px; text-decoration: none; font-weight: bold; cursor: grab; }
-    .btn:hover { background: #0369a1; }
-  </style>
-</head>
-<body>
-  <div class="card">
-    <h1>⚡ Suíte Multi-Agente — Ativação Instantânea</h1>
-    <p>Arraste o botão abaixo para a sua <strong>Barra de Favoritos</strong> do navegador. Ao clicar nele em qualquer aba do ChatGPT, Claude, Gemini ou DeepSeek, a suíte de agentes será ativada instantaneamente!</p>
-    <p style="margin: 30px 0;">
-      <a class="btn" href="${bookmarklet}">⚡ Ativar Suíte Multi-Agente</a>
-    </p>
-    <small style="color: #94a3b8;">Dica: você também pode clicar com o botão direito e selecionar "Adicionar aos favoritos".</small>
-  </div>
-
-  <div class="card">
-    <h2>📋 Magic Prompt (Cópia Manual — ~${tokens} tokens)</h2>
-    <pre id="promptText">${magicPrompt.replace(/</g, '&lt;').replace(/>/g, '&gt;')}</pre>
-  </div>
-</body>
-</html>`;
-
-    const mdContent = `# ⚡ Magic Prompt — Ativação Instantânea da Suíte Multi-Agente
-
-Copie o bloco abaixo e cole como primeira mensagem em **qualquer LLM** (ChatGPT, Claude.ai, Gemini, DeepSeek Web, Ollama ou LeChat) para assumir imediatamente 100% das 14 regras de engenharia:
-
-\`\`\`text
-${magicPrompt}
-\`\`\`
-
----
-*Orçamento semântico: ~${tokens} tokens (limite de 1.000 tokens respeitado com 100% de conformidade).*
-`;
-
-    const files = [
-      { path: path.join(targetDir, 'MAGIC_PROMPT.md'), content: mdContent },
-      { path: path.join(targetDir, 'bookmarklet.html'), content: htmlContent }
-    ];
-
-    if (!dryRun) {
-      if (!fs.existsSync(targetDir)) fs.mkdirSync(targetDir, { recursive: true });
-      files.forEach(f => fs.writeFileSync(f.path, f.content, 'utf8'));
-    }
-
-    return {
-      status: 'SUCCESS',
-      targetDir,
-      tokens,
-      dryRun,
-      filesCount: files.length,
-      files: files.map(f => f.path),
-      magicPrompt,
-      bookmarklet
-    };
-  }
-}
-
-if (require.main === module) {
-  const generator = new MagicPromptGenerator();
-  const res = generator.exportArtifacts();
-  console.log('\n============================================================');
-  console.log('⚡ Magic Prompt Generator & Web Bookmarklet (AGDEV-27)');
-  console.log('============================================================\n');
-  console.log(`✅ Arquivos exportados com sucesso em: ${res.targetDir}`);
-  console.log(`📊 Orçamento de Tokens Estimado: ~${res.tokens} tokens (< 1.000 tokens)`);
-  console.log(`📄 Arquivos gerados:`, res.files.join(', '));
-  console.log('\nO bookmarklet HTML e o MAGIC_PROMPT.md estão prontos para uso!\n');
-}
-
-module.exports = {
-  MagicPromptGenerator
-};
+#!/usr/bin/env node
+/**
+ * scripts/core/magic_prompt_generator.js
+ * 
+ * Magic Prompt Generator & Web Bookmarklet (AGDEV-27 / v5.1.0 Enterprise).
+ * Gera prompt autocontido de ativação instantânea (< 900 tokens) e bookmarklet
+ * web para injeção em 1 clique no ChatGPT, Claude.ai, Gemini e DeepSeek Web.
+ * Em conformidade estrita com os 10 Princípios Canônicos de Engenharia e Tríplice Registro.
+ */
+
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+const { createSarifReport } = require('./sarif_engine.js');
+
+class MagicPromptGenerator {
+  constructor(baseDir = path.resolve(__dirname, '../..')) {
+    this.baseDir = baseDir;
+  }
+
+  generateMagicPrompt(target = 'generic') {
+    const prompt = `=== AGENT ORCHESTRATOR & SUÍTE MULTI-AGENTE (UNIVERSAL INSTANT ACTIVATION) ===
+[DIRECTIVE]: You are now running the canonical Agent Suite (Orchestrator, DevSecOps, QA, Scrum, SRE, UI/UX & Infra Engineer). Assume 100% adherence to the 10 Canonical Engineering Principles (v5.1 Enterprise) and rules below:
+
+[THE 14 GOLDEN ENGINEERING RULES & 10 CANONICAL PRINCIPLES]:
+1. Code Quality & Clean Architecture: DRY, defensive programming, explicit contracts and typed interfaces.
+2. DevSecOps Shift-Left: Immune to OWASP Top 10 (CWE-78, CWE-79, CWE-89, CWE-1333 ReDoS); zero secrets in commits.
+3. Triple Ledger Traceability: Dedicated branch per ticket (<TICKET>), formatted commits, Kanban sync and ADRs.
+4. TDD & Strict DoD: Automated tests (unit, integration, regression) written before/alongside implementation.
+5. Exception Handling & Resilience: No empty catches; graceful circuit breaking and resilient fallbacks.
+6. Observabilidade & SRE: Prometheus metrics (/metrics), process telemetry and W3C TraceContext headers.
+7. Value Engineering & Anti-Overengineering: Proportionate solutions without accidental complexity or premature microservices.
+8. Requirements Engineering & Invariant Acceptance Criteria: BDD Given-When-Then criteria remain immutable unless explicitly approved.
+9. Justified Technical Decision (Anti-Hype & ADRs): Formal trade-off evaluation documented in Confluence/Markdown ADRs.
+10. Continuous Kaizen: Root cause analysis on any defect; prevent recurrent regression autonomously.
+
+[OPERATIONAL MODES]:
+- modo: orchestrator (central coordination, triage and multi-agent dispatch)
+- modo: devsecops (secure, robust code, clean architecture and CI/CD)
+- modo: qa (adversarial cold review, bug hunting and breaking tests)
+- modo: scrum (Kaizen/PDCA continuous improvement without overengineering)
+- modo: sre (SRE, telemetry, incident diagnosis and self-healing)
+- modo: uiux (design system, accessibility WCAG 2.1 AA, UX ergonomics, design tokens)
+- modo: infra (real networking, containers, Docker, Cloudflare Tunnel and CI/CD)
+- modo: full-dev (autonomous sequential idea implementation loop)
+
+[ACTIVATION ACKNOWLEDGEMENT]:
+Acknowledge activation with a 2-line executive greeting:
+"⚡ Suíte Multi-Agente universalmente ativada e pronta para qualquer demanda.
+Informe a stack e solicite credenciais Atlassian (Jira/Confluence) e GitHub CLI se for nova máquina ou projeto."`;
+
+    return prompt;
+  }
+
+  generateBookmarklet() {
+    const rawPrompt = this.generateMagicPrompt();
+    const encodedPrompt = JSON.stringify(rawPrompt);
+
+    // Bookmarklet inline seguro que detecta o campo de chat e copia para o clipboard
+    const script = `javascript:(function(){
+  var promptText = ${encodedPrompt};
+  
+  if (navigator.clipboard && navigator.clipboard.writeText) {
+    navigator.clipboard.writeText(promptText).then(function() {
+      showToast("⚡ Suíte Multi-Agente copiada! Cole (Ctrl+V) no chat da IA.");
+    }).catch(function() {
+      fallbackPrompt(promptText);
+    });
+  } else {
+    fallbackPrompt(promptText);
+  }
+
+  var inputEl = document.querySelector('#prompt-textarea') || 
+                 document.querySelector('div[contenteditable="true"]') || 
+                 document.querySelector('textarea');
+  if (inputEl) {
+    if (inputEl.tagName === 'TEXTAREA') {
+      inputEl.value = promptText;
+      inputEl.dispatchEvent(new Event('input', { bubbles: true }));
+    } else if (inputEl.isContentEditable) {
+      inputEl.innerText = promptText;
+      inputEl.dispatchEvent(new Event('input', { bubbles: true }));
+    }
+  }
+
+  function showToast(msg) {
+    var toast = document.createElement('div');
+    toast.innerText = msg;
+    toast.style.position = 'fixed';
+    toast.style.top = '20px';
+    toast.style.right = '20px';
+    toast.style.backgroundColor = '#0f172a';
+    toast.style.color = '#38bdf8';
+    toast.style.padding = '14px 20px';
+    toast.style.borderRadius = '8px';
+    toast.style.boxShadow = '0 10px 25px rgba(0,0,0,0.5)';
+    toast.style.zIndex = '999999';
+    toast.style.fontFamily = 'system-ui, sans-serif';
+    toast.style.fontSize = '14px';
+    toast.style.border = '1px solid #38bdf8';
+    document.body.appendChild(toast);
+    setTimeout(function() { toast.remove(); }, 3500);
+  }
+
+  function fallbackPrompt(text) {
+    window.prompt("Copie o Magic Prompt abaixo:", text);
+  }
+})();`.replace(/\n\s*/g, '');
+
+    return script;
+  }
+
+  estimateTokens(text = '') {
+    if (!text || typeof text !== 'string') return 0;
+    return Math.ceil(text.length / 4);
+  }
+
+  exportArtifacts(targetDir = path.join(this.baseDir, 'dist', 'magic_prompt'), options = {}) {
+    const dryRun = Boolean(options.dryRun);
+    const magicPrompt = this.generateMagicPrompt();
+    const bookmarklet = this.generateBookmarklet();
+    const tokens = this.estimateTokens(magicPrompt);
+
+    const htmlContent = `<!DOCTYPE html>
+<html lang="pt-BR">
+<head>
+  <meta charset="UTF-8">
+  <title>Suíte Multi-Agente — Magic Prompt & Bookmarklet</title>
+  <style>
+    body { font-family: system-ui, -apple-system, sans-serif; background: #0f172a; color: #f8fafc; padding: 40px; line-height: 1.6; }
+    .card { background: #1e293b; border: 1px solid #334155; border-radius: 12px; padding: 24px; max-width: 800px; margin: 0 auto 30px; box-shadow: 0 10px 25px rgba(0,0,0,0.3); }
+    h1 { color: #38bdf8; margin-top: 0; }
+    pre { background: #090d16; padding: 16px; border-radius: 8px; overflow-x: auto; font-size: 13px; color: #cbd5e1; border: 1px solid #1e293b; }
+    .btn { display: inline-block; background: #0284c7; color: white; padding: 12px 20px; border-radius: 8px; text-decoration: none; font-weight: bold; cursor: grab; }
+    .btn:hover { background: #0369a1; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <h1>⚡ Suíte Multi-Agente — Ativação Instantânea</h1>
+    <p>Arraste o botão abaixo para a sua <strong>Barra de Favoritos</strong> do navegador. Ao clicar nele em qualquer aba do ChatGPT, Claude, Gemini ou DeepSeek, a suíte de agentes será ativada instantaneamente!</p>
+    <p style="margin: 30px 0;">
+      <a class="btn" href="${bookmarklet}">⚡ Ativar Suíte Multi-Agente</a>
+    </p>
+    <small style="color: #94a3b8;">Dica: você também pode clicar com o botão direito e selecionar "Adicionar aos favoritos".</small>
+  </div>
+
+  <div class="card">
+    <h2>📋 Magic Prompt (Cópia Manual — ~${tokens} tokens)</h2>
+    <pre id="promptText">${magicPrompt.replace(/</g, '&lt;').replace(/>/g, '&gt;')}</pre>
+  </div>
+</body>
+</html>`;
+
+    const mdContent = `# ⚡ Magic Prompt — Ativação Instantânea da Suíte Multi-Agente
+
+Copie o bloco abaixo e cole como primeira mensagem em **qualquer LLM** (ChatGPT, Claude.ai, Gemini, DeepSeek Web, Ollama ou LeChat) para assumir imediatamente 100% dos 10 Princípios Canônicos de Engenharia:
+
+\`\`\`text
+${magicPrompt}
+\`\`\`
+
+---
+*Orçamento semântico: ~${tokens} tokens (limite estrito de 1.000 tokens respeitado com 100% de conformidade).*
+`;
+
+    const files = [
+      { path: path.join(targetDir, 'MAGIC_PROMPT.md'), content: mdContent },
+      { path: path.join(targetDir, 'bookmarklet.html'), content: htmlContent }
+    ];
+
+    if (!dryRun) {
+      if (!fs.existsSync(targetDir)) fs.mkdirSync(targetDir, { recursive: true });
+      files.forEach(f => fs.writeFileSync(f.path, f.content, 'utf8'));
+    }
+
+    return {
+      status: 'SUCCESS',
+      targetDir,
+      tokens,
+      dryRun,
+      filesCount: files.length,
+      files: files.map(f => f.path),
+      magicPrompt,
+      bookmarklet
+    };
+  }
+
+  auditToSarif() {
+    const magicPrompt = this.generateMagicPrompt();
+    const tokens = this.estimateTokens(magicPrompt);
+    const findings = [];
+
+    if (tokens > 1000) {
+      findings.push({
+        ruleId: 'RULE-MAGIC-001',
+        name: 'MagicPromptBudgetExceeded',
+        severity: 'WARNING',
+        message: `O Magic Prompt excedeu o teto estrito de 1.000 tokens (atual: ${tokens} tokens).`,
+        remediation: 'Mantenha o prompt enxuto e hiper-focado.'
+      });
+    }
+
+    return createSarifReport({
+      toolName: 'agent-master-magic-prompt-generator',
+      rules: [
+        {
+          id: 'RULE-MAGIC-001',
+          name: 'MagicPromptBudgetExceeded',
+          description: 'Valida se o Magic Prompt cabe no orçamento estrito de < 1.000 tokens',
+          severity: 'MEDIUM',
+          cwe: 'CWE-400'
+        }
+      ],
+      findings,
+      properties: {
+        tokens,
+        underBudget: tokens <= 1000
+      }
+    });
+  }
+
+  formatReport() {
+    const prompt = this.generateMagicPrompt();
+    const tokens = this.estimateTokens(prompt);
+    return [
+      '### Relatório do Gerador de Magic Prompt & Bookmarklet',
+      `- **Tokens:** ~${tokens} tokens (< 1.000 tokens)`,
+      `- **Bookmarklet:** Gerado com injeção automática e fallback`,
+      `- **Conformidade:** 10 Princípios Canônicos Universais (v5.1)`
+    ].join('\n');
+  }
+}
+
+if (require.main === module) {
+  const generator = new MagicPromptGenerator();
+  const res = generator.exportArtifacts();
+  console.log('\n============================================================');
+  console.log('⚡ Magic Prompt Generator & Web Bookmarklet (AGDEV-27)');
+  console.log('============================================================\n');
+  console.log(`✅ Arquivos exportados com sucesso em: ${res.targetDir}`);
+  console.log(`📊 Orçamento de Tokens Estimado: ~${res.tokens} tokens (< 1.000 tokens)`);
+  console.log(`📄 Arquivos gerados:`, res.files.join(', '));
+  console.log('\nO bookmarklet HTML e o MAGIC_PROMPT.md estão prontos para uso!\n');
+}
+
+module.exports = {
+  MagicPromptGenerator
+};