agentic-qe 1.4.3 → 1.5.0

package/dist/mcp/tools/qe/security/validate-compliance.d.ts

@@ -0,0 +1,299 @@
+/**
+ * Security Compliance Validation Tool
+ *
+ * Validates security compliance against industry standards including
+ * OWASP Top 10, CWE Top 25, and SANS Top 25.
+ *
+ * Features:
+ * - OWASP Top 10 2021 compliance validation
+ * - CWE Top 25 Most Dangerous Software Weaknesses
+ * - SANS Top 25 Most Dangerous Programming Errors
+ * - Compliance gap analysis
+ * - Certification readiness assessment
+ * - Remediation roadmap generation
+ *
+ * @module security/validate-compliance
+ * @version 1.0.0
+ * @author Agentic QE Team - Phase 3
+ * @date 2025-11-09
+ */
+import type { Priority, QEToolResponse, SecurityScanResults } from '../shared/types.js';
+/**
+ * Compliance validation parameters
+ */
+export interface ComplianceValidationParams {
+    /** Target to validate */
+    target: string;
+    /** Standards to validate against */
+    standards: ('OWASP' | 'CWE' | 'SANS')[];
+    /** Include certification assessment */
+    includeCertification: boolean;
+    /** Generate remediation roadmap */
+    generateRoadmap: boolean;
+    /** Validation depth */
+    depth: 'basic' | 'standard' | 'comprehensive';
+    /** Scan results (optional, if already available) */
+    scanResults?: SecurityScanResults;
+}
+/**
+ * Compliance validation result
+ */
+export interface ComplianceValidationResult {
+    /** Overall compliance status */
+    overallStatus: 'compliant' | 'partial' | 'non-compliant';
+    /** Compliance score (0-100) */
+    complianceScore: number;
+    /** Standard-specific results */
+    standards: StandardComplianceResult[];
+    /** Gap analysis */
+    gapAnalysis: ComplianceGap[];
+    /** Certification readiness */
+    certificationReadiness?: CertificationReadiness;
+    /** Remediation roadmap */
+    remediationRoadmap?: RemediationRoadmap;
+    /** Validation metadata */
+    metadata: ValidationMetadata;
+}
+/**
+ * Standard compliance result
+ */
+export interface StandardComplianceResult {
+    /** Standard name */
+    standard: 'OWASP' | 'CWE' | 'SANS';
+    /** Standard version */
+    version: string;
+    /** Compliance status */
+    status: 'compliant' | 'partial' | 'non-compliant';
+    /** Compliance percentage */
+    compliancePercentage: number;
+    /** Controls checked */
+    controlsChecked: number;
+    /** Controls passed */
+    controlsPassed: number;
+    /** Controls failed */
+    controlsFailed: number;
+    /** Control results */
+    controls: ControlResult[];
+    /** Critical findings */
+    criticalFindings: number;
+    /** High findings */
+    highFindings: number;
+    /** Recommendations */
+    recommendations: string[];
+}
+/**
+ * Control result
+ */
+export interface ControlResult {
+    /** Control identifier */
+    controlId: string;
+    /** Control name */
+    name: string;
+    /** Control description */
+    description: string;
+    /** Compliance status */
+    status: 'pass' | 'fail' | 'partial' | 'not-applicable';
+    /** Severity if failed */
+    severity?: Priority;
+    /** Findings count */
+    findingsCount: number;
+    /** Evidence */
+    evidence: string[];
+    /** Remediation */
+    remediation?: string;
+    /** Estimated effort (hours) */
+    estimatedEffort?: number;
+}
+/**
+ * Compliance gap
+ */
+export interface ComplianceGap {
+    /** Gap identifier */
+    gapId: string;
+    /** Standard */
+    standard: 'OWASP' | 'CWE' | 'SANS';
+    /** Control(s) affected */
+    affectedControls: string[];
+    /** Gap description */
+    description: string;
+    /** Severity */
+    severity: Priority;
+    /** Business impact */
+    businessImpact: string;
+    /** Compliance risk */
+    complianceRisk: string;
+    /** Recommended actions */
+    recommendedActions: string[];
+    /** Estimated effort (hours) */
+    estimatedEffort: number;
+    /** Priority */
+    priority: Priority;
+}
+/**
+ * Certification readiness
+ */
+export interface CertificationReadiness {
+    /** Target certifications */
+    certifications: CertificationStatus[];
+    /** Overall readiness score (0-100) */
+    overallReadiness: number;
+    /** Readiness level */
+    readinessLevel: 'not-ready' | 'needs-work' | 'mostly-ready' | 'certification-ready';
+    /** Estimated time to certification (days) */
+    estimatedTimeToReady: number;
+    /** Blocking issues */
+    blockingIssues: string[];
+    /** Next steps */
+    nextSteps: string[];
+}
+/**
+ * Certification status
+ */
+export interface CertificationStatus {
+    /** Certification name */
+    name: string;
+    /** Readiness percentage */
+    readiness: number;
+    /** Status */
+    status: 'not-ready' | 'in-progress' | 'ready';
+    /** Requirements met */
+    requirementsMet: number;
+    /** Total requirements */
+    totalRequirements: number;
+    /** Gaps */
+    gaps: string[];
+}
+/**
+ * Remediation roadmap
+ */
+export interface RemediationRoadmap {
+    /** Roadmap phases */
+    phases: RoadmapPhase[];
+    /** Total duration (days) */
+    totalDuration: number;
+    /** Total effort (hours) */
+    totalEffort: number;
+    /** Estimated cost */
+    estimatedCost: number;
+    /** Milestones */
+    milestones: Milestone[];
+    /** Success metrics */
+    successMetrics: SuccessMetric[];
+}
+/**
+ * Roadmap phase
+ */
+export interface RoadmapPhase {
+    /** Phase number */
+    phase: number;
+    /** Phase name */
+    name: string;
+    /** Duration (days) */
+    duration: number;
+    /** Effort (hours) */
+    effort: number;
+    /** Tasks */
+    tasks: RoadmapTask[];
+    /** Dependencies */
+    dependencies?: number[];
+    /** Deliverables */
+    deliverables: string[];
+    /** Success criteria */
+    successCriteria: string[];
+}
+/**
+ * Roadmap task
+ */
+export interface RoadmapTask {
+    /** Task ID */
+    taskId: string;
+    /** Task name */
+    name: string;
+    /** Description */
+    description: string;
+    /** Effort (hours) */
+    effort: number;
+    /** Priority */
+    priority: Priority;
+    /** Assigned standard */
+    standard: 'OWASP' | 'CWE' | 'SANS';
+    /** Affected controls */
+    affectedControls: string[];
+    /** Prerequisites */
+    prerequisites?: string[];
+}
+/**
+ * Milestone
+ */
+export interface Milestone {
+    /** Milestone name */
+    name: string;
+    /** Target date (days from start) */
+    targetDay: number;
+    /** Description */
+    description: string;
+    /** Completion criteria */
+    completionCriteria: string[];
+    /** Compliance impact */
+    complianceImpact: string;
+}
+/**
+ * Success metric
+ */
+export interface SuccessMetric {
+    /** Metric name */
+    name: string;
+    /** Current value */
+    currentValue: number;
+    /** Target value */
+    targetValue: number;
+    /** Unit */
+    unit: string;
+    /** Measurement method */
+    measurementMethod: string;
+}
+/**
+ * Validation metadata
+ */
+export interface ValidationMetadata {
+    /** Validation ID */
+    validationId: string;
+    /** Target */
+    target: string;
+    /** Standards validated */
+    standardsValidated: string[];
+    /** Validation date */
+    validationDate: string;
+    /** Validator version */
+    validatorVersion: string;
+    /** Validation duration (ms) */
+    duration: number;
+    /** Controls evaluated */
+    controlsEvaluated: number;
+}
+/**
+ * Validate security compliance
+ *
+ * Validates security compliance against OWASP, CWE, and SANS standards
+ * with gap analysis and remediation roadmap.
+ *
+ * @param params - Compliance validation parameters
+ * @returns Promise resolving to validation results
+ *
+ * @example
+ * ```typescript
+ * const result = await validateCompliance({
+ *   target: '/workspace/my-app',
+ *   standards: ['OWASP', 'CWE', 'SANS'],
+ *   includeCertification: true,
+ *   generateRoadmap: true,
+ *   depth: 'comprehensive'
+ * });
+ *
+ * console.log(`Compliance score: ${result.complianceScore}%`);
+ * console.log(`Overall status: ${result.overallStatus}`);
+ * console.log(`Gaps identified: ${result.gapAnalysis.length}`);
+ * ```
+ */
+export declare function validateCompliance(params: ComplianceValidationParams): Promise<QEToolResponse<ComplianceValidationResult>>;
+//# sourceMappingURL=validate-compliance.d.ts.map

package/dist/mcp/tools/qe/security/validate-compliance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-compliance.d.ts","sourceRoot":"","sources":["../../../../../src/mcp/tools/qe/security/validate-compliance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EACV,QAAQ,EACR,cAAc,EAEd,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAI5B;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IAEf,oCAAoC;IACpC,SAAS,EAAE,CAAC,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC;IAExC,uCAAuC;IACvC,oBAAoB,EAAE,OAAO,CAAC;IAE9B,mCAAmC;IACnC,eAAe,EAAE,OAAO,CAAC;IAEzB,uBAAuB;IACvB,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,eAAe,CAAC;IAE9C,oDAAoD;IACpD,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,gCAAgC;IAChC,aAAa,EAAE,WAAW,GAAG,SAAS,GAAG,eAAe,CAAC;IAEzD,+BAA+B;IAC/B,eAAe,EAAE,MAAM,CAAC;IAExB,gCAAgC;IAChC,SAAS,EAAE,wBAAwB,EAAE,CAAC;IAEtC,mBAAmB;IACnB,WAAW,EAAE,aAAa,EAAE,CAAC;IAE7B,8BAA8B;IAC9B,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IAEhD,0BAA0B;IAC1B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAExC,0BAA0B;IAC1B,QAAQ,EAAE,kBAAkB,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,oBAAoB;IACpB,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IAEnC,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAEhB,wBAAwB;IACxB,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,eAAe,CAAC;IAElD,4BAA4B;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAE7B,uBAAuB;IACvB,eAAe,EAAE,MAAM,CAAC;IAExB,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IAEvB,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IAEvB,sBAAsB;IACtB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAE1B,wBAAwB;IACxB,gBAAgB,EAAE,MAAM,CAAC;IAEzB,oBAAoB;IACpB,YAAY,EAAE,MAAM,CAAC;IAErB,sBAAsB;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAElB,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IAEb,0BAA0B;IAC1B,WAAW,EAAE,MAAM,CAAC;IAEpB,wBAAwB;IACxB,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,gBAAgB,CAAC;IAEvD,yBAAyB;IACzB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAEpB,qBAAqB;IACrB,aAAa,EAAE,MAAM,CAAC;IAEtB,eAAe;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IAEnB,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,+BAA+B;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;IAEd,eAAe;IACf,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IAEnC,0BAA0B;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAE3B,sBAAsB;IACtB,WAAW,EAAE,MAAM,CAAC;IAEpB,eAAe;IACf,QAAQ,EAAE,QAAQ,CAAC;IAEnB,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IAEvB,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IAEvB,0BAA0B;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAE7B,+BAA+B;IAC/B,eAAe,EAAE,MAAM,CAAC;IAExB,eAAe;IACf,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,4BAA4B;IAC5B,cAAc,EAAE,mBAAmB,EAAE,CAAC;IAEtC,sCAAsC;IACtC,gBAAgB,EAAE,MAAM,CAAC;IAEzB,sBAAsB;IACtB,cAAc,EAAE,WAAW,GAAG,YAAY,GAAG,cAAc,GAAG,qBAAqB,CAAC;IAEpF,6CAA6C;IAC7C,oBAAoB,EAAE,MAAM,CAAC;IAE7B,sBAAsB;IACtB,cAAc,EAAE,MAAM,EAAE,CAAC;IAEzB,iBAAiB;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IAEb,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;IAElB,aAAa;IACb,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,OAAO,CAAC;IAE9C,uBAAuB;IACvB,eAAe,EAAE,MAAM,CAAC;IAExB,yBAAyB;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAE1B,WAAW;IACX,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,qBAAqB;IACrB,MAAM,EAAE,YAAY,EAAE,CAAC;IAEvB,4BAA4B;IAC5B,aAAa,EAAE,MAAM,CAAC;IAEtB,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IAEpB,qBAAqB;IACrB,aAAa,EAAE,MAAM,CAAC;IAEtB,iBAAiB;IACjB,UAAU,EAAE,SAAS,EAAE,CAAC;IAExB,sBAAsB;IACtB,cAAc,EAAE,aAAa,EAAE,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IAEd,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IAEb,sBAAsB;IACtB,QAAQ,EAAE,MAAM,CAAC;IAEjB,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IAEf,YAAY;IACZ,KAAK,EAAE,WAAW,EAAE,CAAC;IAErB,mBAAmB;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,mBAAmB;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IAEvB,uBAAuB;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,cAAc;IACd,MAAM,EAAE,MAAM,CAAC;IAEf,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IAEb,kBAAkB;IAClB,WAAW,EAAE,MAAM,CAAC;IAEpB,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IAEf,eAAe;IACf,QAAQ,EAAE,QAAQ,CAAC;IAEnB,wBAAwB;IACxB,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IAEnC,wBAAwB;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAE3B,oBAAoB;IACpB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IAEb,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAElB,kBAAkB;IAClB,WAAW,EAAE,MAAM,CAAC;IAEpB,0BAA0B;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAE7B,wBAAwB;IACxB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,oBAAoB;IACpB,YAAY,EAAE,MAAM,CAAC;IAErB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IAEpB,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IAEb,yBAAyB;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,oBAAoB;IACpB,YAAY,EAAE,MAAM,CAAC;IAErB,aAAa;IACb,MAAM,EAAE,MAAM,CAAC;IAEf,0BAA0B;IAC1B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAE7B,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IAEvB,wBAAwB;IACxB,gBAAgB,EAAE,MAAM,CAAC;IAEzB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IAEjB,yBAAyB;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAybD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,cAAc,CAAC,0BAA0B,CAAC,CAAC,CAsGrD"}