agent-master-devsecops 3.9.0 → 5.1.0

package/scripts/{otel_tracer.js → core/otel_tracer.js}

@@ -1,228 +1,335 @@
-#!/usr/bin/env node
-/**
- * scripts/otel_tracer.js
- * 
- * Tracer Distribuído OpenTelemetry Nativo (AGDEV-24 / I-8).
- * Suporte a W3C TraceContext (traceparent), hierarquia de spans (parent-child),
- * exportação OTLP JSON e renderização de flamegraphs para playbooks de SRE.
- */
-
-const crypto = require('crypto');
-
-function generateTraceId() {
-  return crypto.randomBytes(16).toString('hex');
-}
-
-function generateSpanId() {
-  return crypto.randomBytes(8).toString('hex');
-}
-
-function formatTraceparent(traceId, spanId, sampled = true) {
-  const flags = sampled ? '01' : '00';
-  return `00-${traceId}-${spanId}-${flags}`;
-}
-
-function parseTraceparent(traceparent) {
-  if (!traceparent || typeof traceparent !== 'string') return null;
-  const parts = traceparent.split('-');
-  if (parts.length !== 4) return null;
-  return {
-    version: parts[0],
-    traceId: parts[1],
-    spanId: parts[2],
-    flags: parts[3],
-    sampled: parts[3] === '01'
-  };
-}
-
-class Span {
-  constructor(name, tracer, options = {}) {
-    this.name = name;
-    this.tracer = tracer;
-    this.traceId = options.traceId || tracer.traceId;
-    this.spanId = generateSpanId();
-    this.parentSpanId = options.parentSpanId || null;
-    this.startTime = options.startTime || Date.now();
-    this.endTime = null;
-    this.durationMs = 0;
-    this.attributes = Object.assign({}, options.attributes || {});
-    this.events = [];
-    this.status = { code: 'UNSET' };
-  }
-
-  setAttribute(key, value) {
-    this.attributes[key] = value;
-    return this;
-  }
-
-  addEvent(name, attributes = {}) {
-    this.events.push({
-      name,
-      time: Date.now(),
-      attributes
-    });
-    return this;
-  }
-
-  setStatus(code, message = '') {
-    this.status = { code, message };
-    return this;
-  }
-
-  end(endTime = Date.now()) {
-    this.endTime = endTime;
-    this.durationMs = Math.max(0, this.endTime - this.startTime);
-    this.tracer._recordSpan(this);
-    return this;
-  }
-}
-
-class Tracer {
-  constructor(serviceName, options = {}) {
-    this.serviceName = serviceName;
-    this.traceId = options.traceId || generateTraceId();
-    this.spans = [];
-  }
-
-  startSpan(name, options = {}) {
-    return new Span(name, this, options);
-  }
-
-  _recordSpan(span) {
-    this.spans.push(span);
-  }
-
-  getTraceContext(activeSpan = null) {
-    const spanId = activeSpan ? activeSpan.spanId : (this.spans[0] ? this.spans[0].spanId : generateSpanId());
-    return {
-      traceId: this.traceId,
-      spanId,
-      traceparent: formatTraceparent(this.traceId, spanId)
-    };
-  }
-
-  analyzeBottlenecks(thresholdMs = 50) {
-    const bottlenecks = [];
-    const totalDuration = this.spans.reduce((max, s) => Math.max(max, (s.endTime || s.startTime) - this.spans[0].startTime), 0) || 1;
-
-    for (const span of this.spans) {
-      const percentage = Math.round((span.durationMs / totalDuration) * 100);
-      if (span.durationMs >= thresholdMs || percentage >= 40) {
-        bottlenecks.push({
-          name: span.name,
-          durationMs: span.durationMs,
-          percentageTotal: percentage,
-          severity: percentage >= 70 ? 'CRÍTICA' : (percentage >= 40 ? 'ALTA' : 'MÉDIA'),
-          spanId: span.spanId
-        });
-      }
-    }
-
-    return bottlenecks;
-  }
-
-  renderFlamegraphAscii() {
-    if (this.spans.length === 0) return 'Trace vazio.';
-
-    const sorted = [...this.spans].sort((a, b) => a.startTime - b.startTime);
-    const traceStart = sorted[0].startTime;
-    const traceEnd = Math.max(...sorted.map(s => s.endTime || s.startTime));
-    const totalDuration = Math.max(1, traceEnd - traceStart);
-
-    let ascii = `=== FLAMEGRAPH DISTRIBUÍDO [Trace: ${this.traceId}] (${totalDuration}ms) ===\n`;
-
-    sorted.forEach((span, index) => {
-      const offsetMs = span.startTime - traceStart;
-      const offsetChars = Math.floor((offsetMs / totalDuration) * 30);
-      const barLength = Math.max(1, Math.floor((span.durationMs / totalDuration) * 40));
-      const indent = ' '.repeat(offsetChars);
-      const bar = '█'.repeat(barLength);
-
-      ascii += `[${String(index + 1).padStart(2, '0')}] ${indent}${bar} ${span.name} (${span.durationMs}ms)\n`;
-    });
-
-    return ascii;
-  }
-
-  exportOtlpJson() {
-    return {
-      resourceSpans: [
-        {
-          resource: {
-            attributes: [
-              { key: 'service.name', value: { stringValue: this.serviceName } }
-            ]
-          },
-          scopeSpans: [
-            {
-              scope: { name: 'agent-master-devsecops-tracer', version: '3.2.0' },
-              spans: this.spans.map(s => ({
-                traceId: s.traceId,
-                spanId: s.spanId,
-                parentSpanId: s.parentSpanId,
-                name: s.name,
-                startTimeUnixNano: String(s.startTime * 1000000),
-                endTimeUnixNano: String((s.endTime || s.startTime) * 1000000),
-                attributes: Object.entries(s.attributes).map(([k, v]) => ({
-                  key: k,
-                  value: { stringValue: String(v) }
-                })),
-                status: s.status
-              }))
-            }
-          ]
-        }
-      ]
-    };
-  }
-}
-
-function simulateMultiAgentTrace(serviceName = 'agent-pipeline') {
-  const tracer = new Tracer(serviceName);
-
-  // 1. Root span: Requisição do Usuário
-  const root = tracer.startSpan('user_goal_execution').setAttribute('agent.role', 'Orchestrator');
-  
-  // 2. Sub-span: Arquiteto planeja
-  const planSpan = tracer.startSpan('architect_plan', { parentSpanId: root.spanId })
-    .setAttribute('agent.role', 'Arquiteto')
-    .setAttribute('model', 'Claude 3.5 Sonnet');
-  // Simula 25ms
-  planSpan.end(planSpan.startTime + 25);
-
-  // 3. Sub-span: DevSecOps implementa
-  const devSpan = tracer.startSpan('devsecops_implementation', { parentSpanId: root.spanId })
-    .setAttribute('agent.role', 'DevSecOps Lead');
-  devSpan.end(devSpan.startTime + 60);
-
-  // 4. Sub-span: QA audita
-  const revSpan = tracer.startSpan('qa_audit', { parentSpanId: root.spanId })
-    .setAttribute('agent.role', 'QA Independente');
-  revSpan.end(revSpan.startTime + 15);
-
-  // 5. Finaliza root span
-  root.end(root.startTime + 105);
-
-  return tracer;
-}
-
-async function runCli() {
-  const tracer = simulateMultiAgentTrace();
-  console.log(tracer.renderFlamegraphAscii());
-  console.log('\nGargalos Identificados (Threshold 30ms):');
-  console.log(JSON.stringify(tracer.analyzeBottlenecks(30), null, 2));
-}
-
-if (require.main === module) {
-  runCli().catch(console.error);
-}
-
-module.exports = {
-  generateTraceId,
-  generateSpanId,
-  formatTraceparent,
-  parseTraceparent,
-  Span,
-  Tracer,
-  simulateMultiAgentTrace
-};
+#!/usr/bin/env node
+/**
+ * scripts/otel_tracer.js
+ * 
+ * Tracer Distribuído OpenTelemetry Nativo (AGDEV-24 / I-8).
+ * Suporte a W3C TraceContext (traceparent), hierarquia de spans (parent-child),
+ * exportação OTLP JSON e renderização de flamegraphs para playbooks de SRE.
+ */
+
+const crypto = require('crypto');
+const { version: PKG_VERSION } = require('../../package.json');
+const { createSarifReport } = require('./sarif_engine.js');
+
+function getOfficialOtelApi() {
+  try {
+    return require('@opentelemetry/api');
+  } catch (_) {
+    return null;
+  }
+}
+
+function isOfficialOtelApiAvailable() {
+  return getOfficialOtelApi() !== null;
+}
+
+function generateTraceId() {
+  return crypto.randomBytes(16).toString('hex');
+}
+
+function generateSpanId() {
+  return crypto.randomBytes(8).toString('hex');
+}
+
+function formatTraceparent(traceId, spanId, sampled = true) {
+  const flags = sampled ? '01' : '00';
+  return `00-${traceId}-${spanId}-${flags}`;
+}
+
+function parseTraceparent(traceparent) {
+  if (!traceparent || typeof traceparent !== 'string') return null;
+  const parts = traceparent.split('-');
+  if (parts.length !== 4) return null;
+  return {
+    version: parts[0],
+    traceId: parts[1],
+    spanId: parts[2],
+    flags: parts[3],
+    sampled: parts[3] === '01'
+  };
+}
+
+class Span {
+  constructor(name, tracer, options = {}) {
+    this.name = name;
+    this.tracer = tracer;
+    this.traceId = options.traceId || tracer.traceId;
+    this.spanId = generateSpanId();
+    this.parentSpanId = options.parentSpanId || null;
+    this.startTime = options.startTime || Date.now();
+    this.endTime = null;
+    this.durationMs = 0;
+    this.attributes = Object.assign({}, options.attributes || {});
+    this.events = [];
+    this.status = { code: 'UNSET' };
+  }
+
+  setAttribute(key, value) {
+    this.attributes[key] = value;
+    return this;
+  }
+
+  addEvent(name, attributes = {}) {
+    this.events.push({
+      name,
+      time: Date.now(),
+      attributes
+    });
+    return this;
+  }
+
+  setStatus(code, message = '') {
+    this.status = { code, message };
+    return this;
+  }
+
+  end(endTime = Date.now()) {
+    this.endTime = endTime;
+    this.durationMs = Math.max(0, this.endTime - this.startTime);
+    this.tracer._recordSpan(this);
+    return this;
+  }
+}
+
+class Tracer {
+  constructor(serviceName, options = {}) {
+    this.serviceName = serviceName;
+    this.traceId = options.traceId || generateTraceId();
+    this.spans = [];
+  }
+
+  startSpan(name, options = {}) {
+    return new Span(name, this, options);
+  }
+
+  _recordSpan(span) {
+    this.spans.push(span);
+  }
+
+  getTraceContext(activeSpan = null) {
+    const spanId = activeSpan ? activeSpan.spanId : (this.spans[0] ? this.spans[0].spanId : generateSpanId());
+    return {
+      traceId: this.traceId,
+      spanId,
+      traceparent: formatTraceparent(this.traceId, spanId)
+    };
+  }
+
+  analyzeBottlenecks(thresholdMs = 50) {
+    const bottlenecks = [];
+    const totalDuration = this.spans.reduce((max, s) => Math.max(max, (s.endTime || s.startTime) - this.spans[0].startTime), 0) || 1;
+
+    for (const span of this.spans) {
+      const percentage = Math.round((span.durationMs / totalDuration) * 100);
+      if (span.durationMs >= thresholdMs || percentage >= 40) {
+        bottlenecks.push({
+          name: span.name,
+          durationMs: span.durationMs,
+          percentageTotal: percentage,
+          severity: percentage >= 70 ? 'CRÍTICA' : (percentage >= 40 ? 'ALTA' : 'MÉDIA'),
+          spanId: span.spanId
+        });
+      }
+    }
+
+    return bottlenecks;
+  }
+
+  renderFlamegraphAscii() {
+    if (this.spans.length === 0) return 'Trace vazio.';
+
+    const sorted = [...this.spans].sort((a, b) => a.startTime - b.startTime);
+    const traceStart = sorted[0].startTime;
+    const traceEnd = Math.max(...sorted.map(s => s.endTime || s.startTime));
+    const totalDuration = Math.max(1, traceEnd - traceStart);
+
+    let ascii = `=== FLAMEGRAPH DISTRIBUÍDO [Trace: ${this.traceId}] (${totalDuration}ms) ===\n`;
+
+    sorted.forEach((span, index) => {
+      const offsetMs = span.startTime - traceStart;
+      const offsetChars = Math.floor((offsetMs / totalDuration) * 30);
+      const barLength = Math.max(1, Math.floor((span.durationMs / totalDuration) * 40));
+      const indent = ' '.repeat(offsetChars);
+      const bar = '█'.repeat(barLength);
+
+      ascii += `[${String(index + 1).padStart(2, '0')}] ${indent}${bar} ${span.name} (${span.durationMs}ms)\n`;
+    });
+
+    return ascii;
+  }
+
+  exportOtlpJson() {
+    return {
+      resourceSpans: [
+        {
+          resource: {
+            attributes: [
+              { key: 'service.name', value: { stringValue: this.serviceName } }
+            ]
+          },
+          scopeSpans: [
+            {
+              scope: { name: 'agent-master-devsecops-tracer', version: PKG_VERSION },
+              spans: this.spans.map(s => ({
+                traceId: s.traceId,
+                spanId: s.spanId,
+                parentSpanId: s.parentSpanId,
+                name: s.name,
+                startTimeUnixNano: String(s.startTime * 1000000),
+                endTimeUnixNano: String((s.endTime || s.startTime) * 1000000),
+                attributes: Object.entries(s.attributes).map(([k, v]) => ({
+                  key: k,
+                  value: { stringValue: String(v) }
+                })),
+                status: s.status
+              }))
+            }
+          ]
+        }
+      ]
+    };
+  }
+
+  async sendToOtlpEndpoint(endpointUrl, options = {}) {
+    const payload = JSON.stringify(this.exportOtlpJson());
+    const parsedUrl = new URL(endpointUrl);
+    const transport = parsedUrl.protocol === 'https:' ? require('node:https') : require('node:http');
+    const timeoutMs = options.timeoutMs || 5000;
+    const customHeaders = options.headers || {};
+
+    return new Promise((resolve, reject) => {
+      const req = transport.request(parsedUrl, {
+        method: 'POST',
+        headers: Object.assign({
+          'Content-Type': 'application/json',
+          'Content-Length': Buffer.byteLength(payload),
+          'User-Agent': `agent-master-otel-tracer/${PKG_VERSION}`
+        }, customHeaders),
+        timeout: timeoutMs
+      }, (res) => {
+        let responseBody = '';
+        res.setEncoding('utf8');
+        res.on('data', chunk => { responseBody += chunk; });
+        res.on('end', () => {
+          const success = res.statusCode >= 200 && res.statusCode < 300;
+          resolve({
+            success,
+            statusCode: res.statusCode,
+            statusMessage: res.statusMessage,
+            body: responseBody
+          });
+        });
+      });
+
+      req.on('timeout', () => {
+        req.destroy();
+        reject(new Error(`Timeout ao exportar spans para OTLP endpoint: ${endpointUrl} (${timeoutMs}ms)`));
+      });
+
+      req.on('error', (err) => {
+        reject(new Error(`Falha de conexão ao exportar OTLP para ${endpointUrl}: ${err.message}`));
+      });
+
+      req.write(payload);
+      req.end();
+    });
+  }
+
+  auditToSarif(bottleneckThresholdMs = 50) {
+    const bottlenecks = this.analyzeBottlenecks(bottleneckThresholdMs);
+    const findings = [];
+
+    for (const b of bottlenecks) {
+      findings.push({
+        ruleId: 'RULE-TRACE-001',
+        name: 'DistributedSpanBottleneck',
+        severity: 'WARNING',
+        message: `Span [${b.name}] consumiu ${b.durationMs}ms (${b.pctOfTotalTrace}% do trace total), excedendo o limiar de ${bottleneckThresholdMs}ms.`,
+        remediation: 'Otimize chamadas concorrentes ou adicione cache em operações I/O pesadas.'
+      });
+    }
+
+    return createSarifReport({
+      toolName: 'agent-master-otel-tracer',
+      rules: [
+        {
+          id: 'RULE-TRACE-001',
+          name: 'DistributedSpanBottleneck',
+          description: 'Identifica spans distribuídos que excedem o tempo de resposta aceitável',
+          severity: 'MEDIUM',
+          cwe: 'CWE-400'
+        }
+      ],
+      findings,
+      properties: {
+        serviceName: this.serviceName,
+        totalSpans: this.spans.length,
+        bottlenecksCount: bottlenecks.length
+      }
+    });
+  }
+
+  formatReport() {
+    return [
+      `### Relatório de Rastreabilidade Distribuída (OpenTelemetry)`,
+      `- **Serviço:** \`${this.serviceName}\``,
+      `- **Spans Registrados:** ${this.spans.length}`,
+      '```text',
+      this.renderFlamegraphAscii(),
+      '```'
+    ].join('\n');
+  }
+}
+
+
+function simulateMultiAgentTrace(serviceName = 'agent-pipeline') {
+  const tracer = new Tracer(serviceName);
+
+  // 1. Root span: Requisição do Usuário
+  const root = tracer.startSpan('user_goal_execution').setAttribute('agent.role', 'Orchestrator');
+  
+  // 2. Sub-span: Arquiteto planeja
+  const planSpan = tracer.startSpan('architect_plan', { parentSpanId: root.spanId })
+    .setAttribute('agent.role', 'Arquiteto')
+    .setAttribute('model', 'Claude 3.5 Sonnet');
+  // Simula 25ms
+  planSpan.end(planSpan.startTime + 25);
+
+  // 3. Sub-span: DevSecOps implementa
+  const devSpan = tracer.startSpan('devsecops_implementation', { parentSpanId: root.spanId })
+    .setAttribute('agent.role', 'DevSecOps Lead');
+  devSpan.end(devSpan.startTime + 60);
+
+  // 4. Sub-span: QA audita
+  const revSpan = tracer.startSpan('qa_audit', { parentSpanId: root.spanId })
+    .setAttribute('agent.role', 'QA Independente');
+  revSpan.end(revSpan.startTime + 15);
+
+  // 5. Finaliza root span
+  root.end(root.startTime + 105);
+
+  return tracer;
+}
+
+async function runCli() {
+  const tracer = simulateMultiAgentTrace();
+  console.log(tracer.renderFlamegraphAscii());
+  console.log('\nGargalos Identificados (Threshold 30ms):');
+  console.log(JSON.stringify(tracer.analyzeBottlenecks(30), null, 2));
+}
+
+if (require.main === module) {
+  runCli().catch(console.error);
+}
+
+module.exports = {
+  generateTraceId,
+  generateSpanId,
+  formatTraceparent,
+  parseTraceparent,
+  Span,
+  Tracer,
+  simulateMultiAgentTrace,
+  getOfficialOtelApi,
+  isOfficialOtelApiAvailable
+};