agentic-qe 1.2.0 → 1.3.0

package/dist/utils/SecureValidation.js

@@ -0,0 +1,265 @@
+"use strict";
+/**
+ * Secure Validation Utility
+ *
+ * Provides safe parameter validation without eval() or code execution.
+ * Replaces string-based validators with type-safe validation functions.
+ *
+ * Security: NO eval(), NO Function(), NO code strings
+ *
+ * @module utils/SecureValidation
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ValidationError = exports.SecureValidation = void 0;
+const Logger_1 = require("./Logger");
+const logger = Logger_1.Logger.getInstance();
+/**
+ * Secure validation utility class
+ *
+ * @example
+ * ```typescript
+ * const config: ValidationConfig = {
+ *   requiredParams: ['name', 'age'],
+ *   typeChecks: { name: 'string', age: 'number' },
+ *   rangeChecks: { age: { min: 0, max: 150 } }
+ * };
+ *
+ * const result = SecureValidation.validate(config, { name: 'John', age: 30 });
+ * // result.valid = true
+ *
+ * const result2 = SecureValidation.validate(config, { name: 'John', age: 200 });
+ * // result2.valid = false
+ * // result2.errors = ['Parameter age (200) exceeds maximum (150)']
+ * ```
+ */
+class SecureValidation {
+    /**
+     * Validate parameters against configuration
+     *
+     * @param config Validation configuration
+     * @param params Parameters to validate
+     * @returns Validation result with errors
+     */
+    static validate(config, params) {
+        const errors = [];
+        try {
+            // 1. Required parameters check
+            if (config.requiredParams) {
+                for (const paramName of config.requiredParams) {
+                    if (params[paramName] === undefined) {
+                        errors.push(`Required parameter '${paramName}' is missing`);
+                    }
+                }
+            }
+            // 2. Type checks
+            if (config.typeChecks) {
+                for (const [paramName, expectedType] of Object.entries(config.typeChecks)) {
+                    if (params[paramName] !== undefined) {
+                        if (!this.validateType(params[paramName], expectedType)) {
+                            errors.push(`Parameter '${paramName}' has invalid type (expected ${expectedType}, got ${typeof params[paramName]})`);
+                        }
+                    }
+                }
+            }
+            // 3. Range checks (for numbers)
+            if (config.rangeChecks) {
+                for (const [paramName, range] of Object.entries(config.rangeChecks)) {
+                    const value = params[paramName];
+                    if (value !== undefined && typeof value === 'number') {
+                        if (range.min !== undefined && value < range.min) {
+                            errors.push(`Parameter '${paramName}' (${value}) is below minimum (${range.min})`);
+                        }
+                        if (range.max !== undefined && value > range.max) {
+                            errors.push(`Parameter '${paramName}' (${value}) exceeds maximum (${range.max})`);
+                        }
+                    }
+                }
+            }
+            // 4. Pattern checks (RegExp)
+            if (config.patternChecks) {
+                for (const [paramName, pattern] of Object.entries(config.patternChecks)) {
+                    const value = params[paramName];
+                    if (value !== undefined && typeof value === 'string') {
+                        if (!pattern.test(value)) {
+                            errors.push(`Parameter '${paramName}' does not match required pattern`);
+                        }
+                    }
+                }
+            }
+            // 5. Length checks (for strings/arrays)
+            if (config.lengthChecks) {
+                for (const [paramName, length] of Object.entries(config.lengthChecks)) {
+                    const value = params[paramName];
+                    if (value !== undefined) {
+                        const len = typeof value === 'string' || Array.isArray(value) ? value.length : -1;
+                        if (len >= 0) {
+                            if (length.min !== undefined && len < length.min) {
+                                errors.push(`Parameter '${paramName}' length (${len}) is below minimum (${length.min})`);
+                            }
+                            if (length.max !== undefined && len > length.max) {
+                                errors.push(`Parameter '${paramName}' length (${len}) exceeds maximum (${length.max})`);
+                            }
+                        }
+                    }
+                }
+            }
+            // 6. Enum checks
+            if (config.enumChecks) {
+                for (const [paramName, allowedValues] of Object.entries(config.enumChecks)) {
+                    const value = params[paramName];
+                    if (value !== undefined) {
+                        if (!allowedValues.includes(value)) {
+                            errors.push(`Parameter '${paramName}' has invalid value (must be one of: ${allowedValues.join(', ')})`);
+                        }
+                    }
+                }
+            }
+            // 7. Custom validator (predefined only)
+            if (config.customValidatorId) {
+                const customErrors = this.runCustomValidator(config.customValidatorId, params);
+                errors.push(...customErrors);
+            }
+        }
+        catch (error) {
+            logger.error('Validation error:', error);
+            errors.push(`Validation failed: ${error.message}`);
+        }
+        return {
+            valid: errors.length === 0,
+            errors
+        };
+    }
+    /**
+     * Validate type of a value
+     *
+     * @param value Value to check
+     * @param expectedType Expected type
+     * @returns True if type matches
+     */
+    static validateType(value, expectedType) {
+        if (expectedType === 'null') {
+            return value === null;
+        }
+        if (expectedType === 'array') {
+            return Array.isArray(value);
+        }
+        return typeof value === expectedType;
+    }
+    /**
+     * Run predefined custom validator
+     *
+     * Security: Only predefined validators allowed, no dynamic code execution
+     *
+     * @param validatorId Validator identifier
+     * @param params Parameters to validate
+     * @returns Array of error messages
+     */
+    static runCustomValidator(validatorId, params) {
+        const errors = [];
+        // Whitelist of allowed custom validators
+        switch (validatorId) {
+            case 'valid-identifier':
+                // JavaScript identifier validation
+                for (const [key, value] of Object.entries(params)) {
+                    if (typeof value === 'string') {
+                        if (!/^[a-zA-Z_$][a-zA-Z0-9_$]*$/.test(value)) {
+                            errors.push(`Parameter '${key}' is not a valid JavaScript identifier`);
+                        }
+                    }
+                }
+                break;
+            case 'no-prototype-pollution':
+                // Check for prototype pollution attempts
+                const dangerousKeys = ['__proto__', 'constructor', 'prototype'];
+                for (const key of Object.keys(params)) {
+                    if (dangerousKeys.includes(key)) {
+                        errors.push(`Dangerous key '${key}' detected (prototype pollution attempt)`);
+                    }
+                }
+                break;
+            case 'safe-file-path':
+                // Validate file paths don't contain traversal
+                for (const [key, value] of Object.entries(params)) {
+                    if (typeof value === 'string') {
+                        if (value.includes('..') || value.includes('~')) {
+                            errors.push(`Parameter '${key}' contains unsafe path traversal`);
+                        }
+                    }
+                }
+                break;
+            case 'no-shell-metacharacters':
+                // Check for shell metacharacters
+                const shellMetachars = /[;&|`$<>(){}[\]!]/;
+                for (const [key, value] of Object.entries(params)) {
+                    if (typeof value === 'string') {
+                        if (shellMetachars.test(value)) {
+                            errors.push(`Parameter '${key}' contains shell metacharacters`);
+                        }
+                    }
+                }
+                break;
+            default:
+                errors.push(`Unknown custom validator: ${validatorId}`);
+        }
+        return errors;
+    }
+    /**
+     * Create validation config for required parameters
+     *
+     * @param paramNames Required parameter names
+     * @returns Validation configuration
+     */
+    static createRequiredParamsConfig(paramNames) {
+        return {
+            requiredParams: paramNames
+        };
+    }
+    /**
+     * Create validation config for type checking
+     *
+     * @param typeMap Parameter name -> type mapping
+     * @returns Validation configuration
+     */
+    static createTypeCheckConfig(typeMap) {
+        return {
+            typeChecks: typeMap
+        };
+    }
+    /**
+     * Validate without throwing exceptions
+     *
+     * @param config Validation configuration
+     * @param params Parameters to validate
+     * @returns True if valid, false otherwise
+     */
+    static isValid(config, params) {
+        const result = this.validate(config, params);
+        return result.valid;
+    }
+    /**
+     * Validate and throw on error
+     *
+     * @param config Validation configuration
+     * @param params Parameters to validate
+     * @throws ValidationError if validation fails
+     */
+    static validateOrThrow(config, params) {
+        const result = this.validate(config, params);
+        if (!result.valid) {
+            throw new ValidationError('Validation failed', result.errors);
+        }
+    }
+}
+exports.SecureValidation = SecureValidation;
+/**
+ * Validation error class
+ */
+class ValidationError extends Error {
+    constructor(message, errors) {
+        super(`${message}: ${errors.join(', ')}`);
+        this.errors = errors;
+        this.name = 'ValidationError';
+    }
+}
+exports.ValidationError = ValidationError;
+//# sourceMappingURL=SecureValidation.js.map

package/dist/utils/SecureValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecureValidation.js","sourceRoot":"","sources":["../../src/utils/SecureValidation.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,qCAAkC;AAElC,MAAM,MAAM,GAAG,eAAM,CAAC,WAAW,EAAE,CAAC;AA2CpC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAa,gBAAgB;IAC3B;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,CAAC,MAAwB,EAAE,MAA2B;QACnE,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,CAAC;YACH,+BAA+B;YAC/B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC9C,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;wBACpC,MAAM,CAAC,IAAI,CAAC,uBAAuB,SAAS,cAAc,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC;YACH,CAAC;YAED,iBAAiB;YACjB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,KAAK,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC1E,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;wBACpC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;4BACxD,MAAM,CAAC,IAAI,CACT,cAAc,SAAS,gCAAgC,YAAY,SAAS,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CACxG,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,gCAAgC;YAChC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;oBACpE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;oBAChC,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACrD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;4BACjD,MAAM,CAAC,IAAI,CAAC,cAAc,SAAS,MAAM,KAAK,uBAAuB,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;wBACrF,CAAC;wBACD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;4BACjD,MAAM,CAAC,IAAI,CAAC,cAAc,SAAS,MAAM,KAAK,sBAAsB,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;wBACpF,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,6BAA6B;YAC7B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBACzB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;oBACxE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;oBAChC,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACrD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;4BACzB,MAAM,CAAC,IAAI,CAAC,cAAc,SAAS,mCAAmC,CAAC,CAAC;wBAC1E,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,wCAAwC;YACxC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxB,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;oBACtE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;oBAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBACxB,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;wBAClF,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;4BACb,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;gCACjD,MAAM,CAAC,IAAI,CAAC,cAAc,SAAS,aAAa,GAAG,uBAAuB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;4BAC3F,CAAC;4BACD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;gCACjD,MAAM,CAAC,IAAI,CAAC,cAAc,SAAS,aAAa,GAAG,sBAAsB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;4BAC1F,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,iBAAiB;YACjB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,KAAK,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;oBAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBACxB,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;4BACnC,MAAM,CAAC,IAAI,CACT,cAAc,SAAS,wCAAwC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3F,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,wCAAwC;YACxC,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;gBAC/E,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAC/B,CAAC;QAEH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,sBAAuB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAC,YAAY,CAAC,KAAU,EAAE,YAA4B;QAClE,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,KAAK,KAAK,IAAI,CAAC;QACxB,CAAC;QACD,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,OAAO,KAAK,KAAK,YAAY,CAAC;IACvC,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,kBAAkB,CAAC,WAAmB,EAAE,MAA2B;QAChF,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,yCAAyC;QACzC,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,kBAAkB;gBACrB,mCAAmC;gBACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBAC9B,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;4BAC9C,MAAM,CAAC,IAAI,CAAC,cAAc,GAAG,wCAAwC,CAAC,CAAC;wBACzE,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM;YAER,KAAK,wBAAwB;gBAC3B,yCAAyC;gBACzC,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;gBAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtC,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBAChC,MAAM,CAAC,IAAI,CAAC,kBAAkB,GAAG,0CAA0C,CAAC,CAAC;oBAC/E,CAAC;gBACH,CAAC;gBACD,MAAM;YAER,KAAK,gBAAgB;gBACnB,8CAA8C;gBAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;4BAChD,MAAM,CAAC,IAAI,CAAC,cAAc,GAAG,kCAAkC,CAAC,CAAC;wBACnE,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM;YAER,KAAK,yBAAyB;gBAC5B,iCAAiC;gBACjC,MAAM,cAAc,GAAG,mBAAmB,CAAC;gBAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBAC9B,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;4BAC/B,MAAM,CAAC,IAAI,CAAC,cAAc,GAAG,iCAAiC,CAAC,CAAC;wBAClE,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM;YAER;gBACE,MAAM,CAAC,IAAI,CAAC,6BAA6B,WAAW,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,0BAA0B,CAAC,UAAoB;QACpD,OAAO;YACL,cAAc,EAAE,UAAU;SAC3B,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,qBAAqB,CAAC,OAAuC;QAClE,OAAO;YACL,UAAU,EAAE,OAAO;SACpB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,OAAO,CAAC,MAAwB,EAAE,MAA2B;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,eAAe,CAAC,MAAwB,EAAE,MAA2B;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;CACF;AAjPD,4CAiPC;AAED;;GAEG;AACH,MAAa,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe,EAAS,MAAgB;QAClD,KAAK,CAAC,GAAG,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QADR,WAAM,GAAN,MAAM,CAAU;QAElD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AALD,0CAKC"}

package/dist/utils/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOhD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIjD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOhD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIjD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D"}

package/dist/utils/validation.js

@@ -1,7 +1,4 @@
 "use strict";
-/**
- * Validation Utilities for Chaos Engineering
- */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateUrl = validateUrl;
 exports.generateId = generateId;
@@ -9,6 +6,10 @@ exports.validatePercentage = validatePercentage;
 exports.validateRate = validateRate;
 exports.validatePositive = validatePositive;
 exports.validateHttpStatusCode = validateHttpStatusCode;
+const SecureRandom_js_1 = require("./SecureRandom.js");
+/**
+ * Validation Utilities for Chaos Engineering
+ */
 /**
  * Validate URL format
  */
@@ -26,7 +27,7 @@ function validateUrl(url) {
  */
 function generateId(prefix) {
     const timestamp = Date.now();
-    const random = Math.random().toString(36).substring(2, 15);
+    const random = SecureRandom_js_1.SecureRandom.randomFloat().toString(36).substring(2, 15);
     return `${prefix}-${timestamp}-${random}`;
 }
 /**

package/dist/utils/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAKH,kCAOC;AAKD,gCAIC;AAKD,gDAEC;AAKD,oCAEC;AAKD,4CAEC;AAKD,wDAEC;AA/CD;;GAEG;AACH,SAAgB,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,MAAc;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,GAAG,MAAM,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,OAAO,KAAK,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CAAC,IAAY;IACjD,OAAO,IAAI,IAAI,GAAG,IAAI,IAAI,GAAG,GAAG,CAAC;AACnC,CAAC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":";;AASA,kCAOC;AAKD,gCAIC;AAKD,gDAEC;AAKD,oCAEC;AAKD,4CAEC;AAKD,wDAEC;AArDD,uDAAiD;AAEjD;;GAEG;AAEH;;GAEG;AACH,SAAgB,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,MAAc;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,8BAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxE,OAAO,GAAG,MAAM,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,OAAO,KAAK,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CAAC,IAAY;IACjD,OAAO,IAAI,IAAI,GAAG,IAAI,IAAI,GAAG,GAAG,CAAC;AACnC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-qe",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Agentic Quality Engineering Fleet System - AI-driven quality management platform with learning, pattern reuse, ML-based flaky detection, Multi-Model Router (70-81% cost savings), streaming progress updates, and native TypeScript hooks",
   "main": "dist/cli/index.js",
   "types": "dist/cli/index.d.ts",
@@ -13,7 +13,7 @@
     "dev": "ts-node src/cli/index.ts",
     "start": "node dist/cli/index.js",
     "pretest": "node scripts/check-memory-before-test.js",
-    "test": "ulimit -n 4096 2>/dev/null || true && node --expose-gc --max-old-space-size=1024 --no-compilation-cache node_modules/.bin/jest --maxWorkers=1 --forceExit",
+    "test": "ulimit -n 4096 2>/dev/null || true && node --expose-gc --max-old-space-size=2048 --no-compilation-cache node_modules/.bin/jest --maxWorkers=1 --forceExit",
     "pretest:safe": "node scripts/check-memory-before-test.js",
     "test:safe": "node --expose-gc --max-old-space-size=768 --no-compilation-cache node_modules/.bin/jest --maxWorkers=1 --runInBand --bail --detectLeaks --forceExit --logHeapUsage",
     "pretest:unit-only": "node scripts/check-memory-before-test.js",
@@ -30,7 +30,7 @@
     "test:performance": "node --expose-gc --max-old-space-size=1536 --no-compilation-cache node_modules/.bin/jest tests/performance --runInBand --forceExit",
     "test:watch": "node --expose-gc --max-old-space-size=512 node_modules/.bin/jest --watch --maxWorkers=1",
     "pretest:coverage": "node scripts/check-memory-before-test.js",
-    "test:coverage": "node --expose-gc --max-old-space-size=1536 --no-compilation-cache node_modules/.bin/jest --coverage --maxWorkers=1",
+    "test:coverage": "node --expose-gc --max-old-space-size=3072 --no-compilation-cache node_modules/.bin/jest --coverage --maxWorkers=1",
     "pretest:coverage-safe": "node scripts/check-memory-before-test.js",
     "test:coverage-safe": "node --expose-gc --max-old-space-size=1024 --no-compilation-cache node_modules/.bin/jest --coverage --maxWorkers=1 --bail --forceExit",
     "test:memory-track": "TRACK_MEMORY=true node --expose-gc --max-old-space-size=1024 --no-compilation-cache node_modules/.bin/jest --maxWorkers=1 --runInBand",