api-tests-coverage 1.0.20 → 1.0.22

package/dist/src/generation/gap-extractor.js

@@ -1,8 +1,4 @@
 "use strict";
-/**
- * Feature 28 — GapExtractor
- * Reads coverage-summary.json (or coverage reports) and extracts DetectedGap objects.
- */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -37,255 +33,249 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.extractGapsFromReports = extractGapsFromReports;
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-// ─── Priority logic ───────────────────────────────────────────────────────────
-function computePriority(type, authRequired, riskScore) {
-    if (type === 'security' || (type === 'auth' && authRequired))
-        return 'P0';
-    if (type === 'endpoint')
-        return 'P1';
-    if (type === 'error')
-        return 'P2';
-    if (type === 'business')
-        return 'P3';
-    if (type === 'parameter')
-        return 'P4';
-    if (type === 'integration')
-        return 'P5';
-    return 'P3';
-}
-function buildGapId(type, method, apiPath, condition) {
-    return `${type}:${method.toUpperCase()}:${apiPath}:${condition}`;
+exports.buildSampleGaps = buildSampleGaps;
+exports.extractGaps = extractGaps;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+/**
+ * Builds 5 synthetic sample gaps for onboarding / dry-run purposes.
+ * Used when coverage-summary.json has zero gaps or does not exist.
+ */
+function buildSampleGaps() {
+    return [
+        {
+            id: 'sample-gap-001',
+            type: 'endpoint:missing',
+            endpoint: { method: 'GET', path: '/api/v1/users' },
+            riskScore: 80,
+            sourceFile: undefined,
+            existingSimilarTests: [],
+        },
+        {
+            id: 'sample-gap-002',
+            type: 'parameter:missing',
+            endpoint: { method: 'POST', path: '/api/v1/orders' },
+            parameter: { name: 'customerId', in: 'body', required: true },
+            riskScore: 70,
+            sourceFile: undefined,
+            existingSimilarTests: [],
+        },
+        {
+            id: 'sample-gap-003',
+            type: 'business:missing',
+            businessRule: { id: 'BR-001', description: 'Order total must be positive' },
+            riskScore: 60,
+            sourceFile: undefined,
+            existingSimilarTests: [],
+        },
+        {
+            id: 'sample-gap-004',
+            type: 'error:missing-status',
+            endpoint: { method: 'DELETE', path: '/api/v1/items/{id}' },
+            riskScore: 65,
+            sourceFile: undefined,
+            existingSimilarTests: [],
+        },
+        {
+            id: 'sample-gap-005',
+            type: 'security:missing-auth',
+            endpoint: { method: 'PUT', path: '/api/v1/admin/settings' },
+            riskScore: 90,
+            sourceFile: undefined,
+            existingSimilarTests: [],
+        },
+    ];
 }
-// ─── Summary JSON reader ──────────────────────────────────────────────────────
-function readJson(filePath) {
-    if (!fs.existsSync(filePath))
-        return null;
-    try {
-        return JSON.parse(fs.readFileSync(filePath, 'utf8'));
-    }
-    catch {
-        return null;
-    }
+/**
+ * Maps coverage summary type names to corresponding GapType values.
+ */
+function mapTypeToGapType(coverageType, index) {
+    var _a;
+    const mapping = {
+        endpoint: 'endpoint:missing',
+        parameter: 'parameter:missing',
+        business: 'business:missing',
+        integration: 'integration:missing-step',
+        error: 'error:missing-status',
+        security: 'security:missing-auth',
+        performance: 'performance:missing-sla',
+        resilience: 'resilience:missing-retry',
+    };
+    return (_a = mapping[coverageType]) !== null && _a !== void 0 ? _a : 'endpoint:missing';
 }
-// ─── Public API ───────────────────────────────────────────────────────────────
-function extractGapsFromReports(reportsDir) {
-    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _0, _1, _2, _3, _4, _5, _6, _7, _8, _9, _10, _11, _12, _13, _14, _15, _16, _17, _18, _19, _20, _21, _22, _23, _24;
-    const gaps = [];
-    // Try coverage-summary.json first
+/**
+ * Reads reports/coverage-summary.json and extracts uncovered items as DetectedGap[].
+ * When there are zero gaps (perfect coverage), returns buildSampleGaps() instead of [].
+ */
+function extractGaps(reportsDir) {
+    var _a, _b;
     const summaryPath = path.join(reportsDir, 'coverage-summary.json');
-    const summary = readJson(summaryPath);
-    if (!summary) {
-        // Return synthetic sample gaps for smoke-test / dry-run mode
+    if (!fs.existsSync(summaryPath)) {
         return buildSampleGaps();
     }
-    // ── Endpoint gaps ─────────────────────────────────────────────────────────
-    const endpointItems = (_c = (_b = (_a = summary.details) === null || _a === void 0 ? void 0 : _a.endpoint) === null || _b === void 0 ? void 0 : _b.items) !== null && _c !== void 0 ? _c : [];
-    for (const item of endpointItems) {
-        if (item.covered)
-            continue;
-        const method = ((_d = item.method) !== null && _d !== void 0 ? _d : 'GET').toUpperCase();
-        const apiPath = (_e = item.path) !== null && _e !== void 0 ? _e : '/unknown';
-        const authRequired = (_f = item.authRequired) !== null && _f !== void 0 ? _f : false;
-        const authOptional = (_g = item.authOptional) !== null && _g !== void 0 ? _g : false;
-        const riskScore = authRequired ? 85 : 60;
-        gaps.push({
-            id: buildGapId('endpoint', method, apiPath, 'uncovered'),
-            type: 'endpoint',
-            priority: computePriority('endpoint', authRequired, riskScore),
-            riskScore,
-            endpoint: {
-                method,
-                path: apiPath,
-                operationId: item.operationId,
-                tags: item.tags,
-                auth: {
-                    required: authRequired,
-                    optional: authOptional,
-                    type: authRequired ? 'jwt' : undefined,
-                    headerName: authRequired ? 'Authorization' : undefined,
-                    scheme: authRequired ? 'Bearer' : undefined,
-                },
-            },
-            responses: [
-                { statusCode: 200, description: 'Success' },
-                ...(authRequired ? [{ statusCode: 401, description: 'Unauthorized' }] : []),
-                { statusCode: 422, description: 'Unprocessable Entity' },
-            ],
-        });
-    }
-    // ── Security gaps ─────────────────────────────────────────────────────────
-    const securityItems = (_k = (_j = (_h = summary.details) === null || _h === void 0 ? void 0 : _h.security) === null || _j === void 0 ? void 0 : _j.items) !== null && _k !== void 0 ? _k : [];
-    for (const item of securityItems) {
-        if (item.covered)
-            continue;
-        const parts = ((_l = item.endpoint) !== null && _l !== void 0 ? _l : 'GET /unknown').split(' ');
-        const method = ((_m = parts[0]) !== null && _m !== void 0 ? _m : 'GET').toUpperCase();
-        const apiPath = (_o = parts[1]) !== null && _o !== void 0 ? _o : '/unknown';
-        gaps.push({
-            id: buildGapId('security', method, apiPath, (_p = item.controlType) !== null && _p !== void 0 ? _p : 'auth-bypass'),
-            type: 'security',
-            priority: 'P0',
-            riskScore: 95,
-            endpoint: {
-                method,
-                path: apiPath,
-                auth: { required: true, optional: false, type: 'jwt', headerName: 'Authorization', scheme: 'Bearer' },
-            },
-            securityControl: {
-                type: (_q = item.controlType) !== null && _q !== void 0 ? _q : 'auth-bypass',
-                description: `Security control not tested for ${item.endpoint}`,
-                attackVector: 'Missing auth validation test',
-                expectedStatusCode: 401,
-            },
-        });
-    }
-    // ── Error gaps ────────────────────────────────────────────────────────────
-    const errorItems = (_t = (_s = (_r = summary.details) === null || _r === void 0 ? void 0 : _r.error) === null || _s === void 0 ? void 0 : _s.items) !== null && _t !== void 0 ? _t : [];
-    for (const item of errorItems) {
-        if (item.covered)
-            continue;
-        const parts = ((_u = item.endpoint) !== null && _u !== void 0 ? _u : 'GET /unknown').split(' ');
-        const method = ((_v = parts[0]) !== null && _v !== void 0 ? _v : 'GET').toUpperCase();
-        const apiPath = (_w = parts[1]) !== null && _w !== void 0 ? _w : '/unknown';
-        const statusCode = (_x = item.statusCode) !== null && _x !== void 0 ? _x : 500;
-        gaps.push({
-            id: buildGapId('error', method, apiPath, String(statusCode)),
-            type: 'error',
-            priority: 'P2',
-            riskScore: 65,
-            endpoint: {
-                method,
-                path: apiPath,
-                auth: { required: false, optional: false },
-            },
-            responses: [{ statusCode, description: `Error ${statusCode} not tested` }],
-        });
+    let summary;
+    try {
+        summary = JSON.parse(fs.readFileSync(summaryPath, 'utf-8'));
     }
-    // ── Business rule gaps ────────────────────────────────────────────────────
-    const businessItems = (_0 = (_z = (_y = summary.details) === null || _y === void 0 ? void 0 : _y.business) === null || _z === void 0 ? void 0 : _z.items) !== null && _0 !== void 0 ? _0 : [];
-    for (const item of businessItems) {
-        if (item.covered)
-            continue;
-        const parts = ((_1 = item.endpoint) !== null && _1 !== void 0 ? _1 : 'GET /unknown').split(' ');
-        const method = ((_2 = parts[0]) !== null && _2 !== void 0 ? _2 : 'GET').toUpperCase();
-        const apiPath = (_3 = parts[1]) !== null && _3 !== void 0 ? _3 : '/unknown';
-        gaps.push({
-            id: buildGapId('business', method, apiPath, (_4 = item.ruleId) !== null && _4 !== void 0 ? _4 : 'business-rule'),
-            type: 'business',
-            priority: 'P3',
-            riskScore: 55,
-            endpoint: {
-                method,
-                path: apiPath,
-                auth: { required: false, optional: false },
-            },
-            businessRule: {
-                id: (_5 = item.ruleId) !== null && _5 !== void 0 ? _5 : 'rule-1',
-                description: (_6 = item.description) !== null && _6 !== void 0 ? _6 : 'Business rule not covered',
-                condition: 'When condition is met',
-                acceptanceCriteria: ['Expected behavior is verified'],
-            },
-        });
+    catch {
+        return buildSampleGaps();
     }
-    // ── Integration flow gaps ─────────────────────────────────────────────────
-    const integrationItems = (_9 = (_8 = (_7 = summary.details) === null || _7 === void 0 ? void 0 : _7.integration) === null || _8 === void 0 ? void 0 : _8.items) !== null && _9 !== void 0 ? _9 : [];
-    for (const item of integrationItems) {
-        if (item.covered)
+    const entries = (_a = summary.summary) !== null && _a !== void 0 ? _a : [];
+    const gaps = [];
+    let gapIndex = 0;
+    for (const entry of entries) {
+        const uncoveredCount = entry.totalItems - entry.coveredItems;
+        if (uncoveredCount <= 0)
             continue;
-        gaps.push({
-            id: `integration:${(_10 = item.flowId) !== null && _10 !== void 0 ? _10 : 'flow'}:step-${(_11 = item.missingStepIndex) !== null && _11 !== void 0 ? _11 : 0}-missing`,
-            type: 'integration',
-            priority: 'P5',
-            riskScore: 45,
-            endpoint: {
-                method: 'GET',
-                path: '/unknown',
-                auth: { required: false, optional: false },
-            },
-            flow: {
-                id: (_12 = item.flowId) !== null && _12 !== void 0 ? _12 : 'flow-1',
-                name: (_13 = item.name) !== null && _13 !== void 0 ? _13 : 'Integration Flow',
-                steps: (_14 = item.steps) !== null && _14 !== void 0 ? _14 : [],
-                missingStepIndex: (_15 = item.missingStepIndex) !== null && _15 !== void 0 ? _15 : 0,
-            },
-        });
+        const details = (_b = summary.details) === null || _b === void 0 ? void 0 : _b[entry.type];
+        const gapType = mapTypeToGapType(entry.type, gapIndex);
+        // Extract top gaps from details.topGaps if available
+        const topGaps = [];
+        if (details && typeof details === 'object' && 'topGaps' in details) {
+            const raw = details['topGaps'];
+            if (Array.isArray(raw)) {
+                for (const g of raw) {
+                    if (typeof g === 'string')
+                        topGaps.push(g);
+                }
+            }
+        }
+        // Extract uncovered items from details based on type
+        const uncoveredItems = extractUncoveredItems(entry.type, details);
+        if (uncoveredItems.length > 0) {
+            for (const item of uncoveredItems.slice(0, Math.max(uncoveredCount, 1))) {
+                gaps.push(buildGapFromItem(gapType, entry.type, item, gapIndex));
+                gapIndex++;
+            }
+        }
+        else {
+            // Fallback: create a single gap for the type
+            gaps.push({
+                id: `gap-${entry.type}-${gapIndex}`,
+                type: gapType,
+                riskScore: computeRiskScore(entry.coveragePercent),
+                existingSimilarTests: topGaps,
+            });
+            gapIndex++;
+        }
     }
-    // ── Parameter gaps ────────────────────────────────────────────────────────
-    const parameterItems = (_18 = (_17 = (_16 = summary.details) === null || _16 === void 0 ? void 0 : _16.parameter) === null || _17 === void 0 ? void 0 : _17.items) !== null && _18 !== void 0 ? _18 : [];
-    for (const item of parameterItems) {
-        const parts = ((_19 = item.endpoint) !== null && _19 !== void 0 ? _19 : 'GET /unknown').split(' ');
-        const method = ((_20 = parts[0]) !== null && _20 !== void 0 ? _20 : 'GET').toUpperCase();
-        const apiPath = (_21 = parts[1]) !== null && _21 !== void 0 ? _21 : '/unknown';
-        const paramName = (_22 = item.parameter) !== null && _22 !== void 0 ? _22 : 'param';
-        const missingCases = ((_23 = item.missingCases) !== null && _23 !== void 0 ? _23 : ['boundary-min']);
-        const condition = (_24 = missingCases[0]) !== null && _24 !== void 0 ? _24 : 'boundary';
-        gaps.push({
-            id: buildGapId('parameter', method, apiPath, `${paramName}:${condition}`),
-            type: 'parameter',
-            priority: 'P4',
-            riskScore: 40,
-            endpoint: {
-                method,
-                path: apiPath,
-                auth: { required: false, optional: false },
-            },
-            parameters: [{
-                    name: paramName,
-                    in: 'query',
-                    required: false,
-                    schema: { type: 'string' },
-                    missingCases,
-                }],
-        });
+    if (gaps.length === 0) {
+        return buildSampleGaps();
     }
     return gaps;
 }
-/** Build a minimal set of synthetic gaps for smoke-test / dry-run mode */
-function buildSampleGaps() {
-    return [
-        {
-            id: 'endpoint:POST:/api/articles:uncovered',
-            type: 'endpoint',
-            priority: 'P1',
-            riskScore: 85,
-            endpoint: {
-                method: 'POST',
-                path: '/api/articles',
-                operationId: 'createArticle',
-                summary: 'Create Article',
-                auth: { required: true, optional: false, type: 'jwt', headerName: 'Authorization', scheme: 'Bearer' },
-            },
-            parameters: [
-                {
-                    name: 'title',
-                    in: 'body',
-                    required: true,
-                    schema: { type: 'string', minLength: 1 },
-                    missingCases: ['missing-required'],
+function computeRiskScore(coveragePercent) {
+    // Lower coverage → higher risk
+    return Math.round(Math.max(0, Math.min(100, 100 - coveragePercent)));
+}
+function extractUncoveredItems(coverageType, details) {
+    var _a, _b, _c, _d, _e;
+    if (!details || typeof details !== 'object')
+        return [];
+    const d = details;
+    switch (coverageType) {
+        case 'endpoint': {
+            const items = (_a = d['endpoints']) !== null && _a !== void 0 ? _a : d['items'];
+            if (Array.isArray(items)) {
+                return items.filter((i) => !i['covered'] && !i['isCovered']);
+            }
+            break;
+        }
+        case 'parameter': {
+            const params = (_b = d['parameters']) !== null && _b !== void 0 ? _b : d['items'];
+            if (Array.isArray(params)) {
+                return params.filter((p) => { var _a; return ((_a = p['ratio']) !== null && _a !== void 0 ? _a : 1) === 0; });
+            }
+            break;
+        }
+        case 'business': {
+            const rules = (_c = d['uncoveredRules']) !== null && _c !== void 0 ? _c : d['items'];
+            if (Array.isArray(rules)) {
+                return rules;
+            }
+            break;
+        }
+        case 'integration': {
+            const items = d['items'];
+            if (Array.isArray(items)) {
+                return items.filter((i) => !i['complete']);
+            }
+            break;
+        }
+        case 'error': {
+            const scenarios = (_d = d['uncoveredScenarios']) !== null && _d !== void 0 ? _d : d['items'];
+            if (Array.isArray(scenarios)) {
+                return scenarios;
+            }
+            break;
+        }
+        case 'security': {
+            const controls = (_e = d['uncoveredControls']) !== null && _e !== void 0 ? _e : d['items'];
+            if (Array.isArray(controls)) {
+                return controls;
+            }
+            break;
+        }
+    }
+    return [];
+}
+function buildGapFromItem(gapType, coverageType, item, index) {
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l;
+    const id = `gap-${coverageType}-${index}`;
+    const riskScore = computeRiskScore(0); // uncovered = high risk
+    switch (coverageType) {
+        case 'endpoint':
+            return {
+                id,
+                type: gapType,
+                endpoint: {
+                    method: String((_a = item['method']) !== null && _a !== void 0 ? _a : 'GET').toUpperCase(),
+                    path: String((_b = item['path']) !== null && _b !== void 0 ? _b : '/unknown'),
                 },
-                {
-                    name: 'body',
-                    in: 'body',
-                    required: true,
-                    schema: { type: 'string' },
-                    missingCases: ['missing-required'],
+                riskScore,
+                existingSimilarTests: [],
+            };
+        case 'parameter':
+            return {
+                id,
+                type: gapType,
+                parameter: {
+                    name: String((_c = item['name']) !== null && _c !== void 0 ? _c : 'param'),
+                    in: (_d = item['in']) !== null && _d !== void 0 ? _d : 'query',
+                    required: Boolean((_e = item['required']) !== null && _e !== void 0 ? _e : false),
                 },
-                {
-                    name: 'description',
-                    in: 'body',
-                    required: true,
-                    schema: { type: 'string' },
-                    missingCases: ['missing-required'],
+                riskScore,
+                existingSimilarTests: [],
+            };
+        case 'business':
+            return {
+                id,
+                type: gapType,
+                businessRule: {
+                    id: String((_f = item['id']) !== null && _f !== void 0 ? _f : id),
+                    description: String((_g = item['description']) !== null && _g !== void 0 ? _g : 'Business rule'),
                 },
-            ],
-            responses: [
-                { statusCode: 201, description: 'Created' },
-                { statusCode: 401, description: 'Unauthorized' },
-                { statusCode: 422, description: 'Unprocessable Entity' },
-            ],
-        },
-    ];
+                riskScore,
+                existingSimilarTests: [],
+            };
+        case 'integration':
+            return {
+                id,
+                type: gapType,
+                integrationFlow: {
+                    id: String((_h = item['id']) !== null && _h !== void 0 ? _h : id),
+                    name: String((_j = item['name']) !== null && _j !== void 0 ? _j : 'Flow'),
+                    missingStep: String((_l = (_k = item['uncoveredSteps']) === null || _k === void 0 ? void 0 : _k[0]) !== null && _l !== void 0 ? _l : 'step'),
+                },
+                riskScore,
+                existingSimilarTests: [],
+            };
+        default:
+            return {
+                id,
+                type: gapType,
+                riskScore,
+                existingSimilarTests: [],
+            };
+    }
 }

package/dist/src/generation/template-renderer.d.ts

@@ -1,12 +1,10 @@
-/**
- * Feature 28 — TemplateRenderer
- * Renders test scaffolds from GenerationContext.
- * Uses string-based templates (no external dependency required).
- */
-import type { GenerationContext, TestType } from './types';
-export interface RenderOptions {
-    language: string;
-    testType: TestType;
-}
-export declare function renderTemplate(ctx: GenerationContext, opts: RenderOptions): string;
+import type { DetectedGap, GenerationContext, GapType } from './types';
+/** Common OWASP injection strings for security tests */
+export declare const OWASP_INJECTION_STRINGS: string[];
+/** Standard file header injected into every generated test file */
+export declare function renderFileHeader(gapId: string, gapType: GapType): string;
+/** Render test file content for a given gap and context */
+export declare function renderTemplate(gap: DetectedGap, ctx: GenerationContext): string;
+/** Returns the template name used for a given gap type */
+export declare function getTemplateName(gap: DetectedGap, ctx: GenerationContext): string;
 //# sourceMappingURL=template-renderer.d.ts.map

package/dist/src/generation/template-renderer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"template-renderer.d.ts","sourceRoot":"","sources":["../../../src/generation/template-renderer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAW,QAAQ,EAAE,MAAM,SAAS,CAAC;AAujBpE,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,aAAa,GAAG,MAAM,CA8BlF"}
+{"version":3,"file":"template-renderer.d.ts","sourceRoot":"","sources":["../../../src/generation/template-renderer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvE,wDAAwD;AACxD,eAAO,MAAM,uBAAuB,EAAE,MAAM,EAW3C,CAAC;AAEF,mEAAmE;AACnE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAQxE;AA4eD,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAoC/E;AAED,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAEhF"}