qa360 2.1.7 → 2.2.0

package/core/src/__tests__/security/redactor-phase3.test.ts

@@ -0,0 +1,233 @@
+/**
+ * QA360 Phase 3 SecurityRedactor Tests
+ * Tests des corrections TypeScript critiques
+ */
+
+import { SecurityRedactor, RedactRule, RedactorOptions } from '../../security/redactor';
+
+describe('SecurityRedactor Phase 3 Corrections', () => {
+  describe('Types et Construction', () => {
+    it('should create redactor with default options', () => {
+      const redactor = new SecurityRedactor();
+      expect(redactor).toBeDefined();
+      expect(redactor.getActiveRules().length).toBeGreaterThan(0);
+    });
+
+    it('should create redactor with custom options', () => {
+      const options: RedactorOptions = {
+        enabledRules: ['password', 'token'],
+        preserveLength: true
+      };
+      
+      const redactor = new SecurityRedactor(options);
+      expect(redactor.getActiveRules().length).toBe(2);
+    });
+
+    it('should access static DEFAULT_RULES', () => {
+      expect(SecurityRedactor.DEFAULT_RULES).toBeDefined();
+      expect(SecurityRedactor.DEFAULT_RULES.length).toBeGreaterThan(0);
+      expect(SecurityRedactor.DEFAULT_RULES[0].name).toBe('password');
+    });
+  });
+
+  describe('Function Replacement Support', () => {
+    it('should handle string replacement', () => {
+      const customRule: RedactRule = {
+        name: 'test_string',
+        pattern: /test/g,
+        replacement: 'REDACTED',
+        description: 'Test string replacement'
+      };
+
+      const redactor = new SecurityRedactor({
+        enabledRules: [],
+        customRules: [customRule]
+      });
+
+      const result = redactor.redact('This is a test string');
+      expect(result).toBe('This is a REDACTED string');
+    });
+
+    it('should handle function replacement', () => {
+      const customRule: RedactRule = {
+        name: 'test_function',
+        pattern: /(\w+)@(\w+)/g,
+        replacement: (match: string) => {
+          const parts = match.split('@');
+          return `${parts[0].substring(0, 2)}***@${parts[1]}`;
+        },
+        description: 'Test function replacement'
+      };
+
+      const redactor = new SecurityRedactor({
+        enabledRules: [],
+        customRules: [customRule]
+      });
+
+      const result = redactor.redact('user@domain.com');
+      expect(result).toBe('us***@domain.com');
+    });
+
+    it('should handle base64_secret function replacement from DEFAULT_RULES', () => {
+      const redactor = new SecurityRedactor({
+        enabledRules: ['base64_secret']
+      });
+
+      // Test avec un secret base64 long (>= 16 chars, high entropy)
+      const longSecret = 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXoxMjM0NTY3ODkw'; // 48 chars
+      const result = redactor.redact(`Secret: ${longSecret}`);
+      
+      // Should be redacted as it looks like a secret
+      expect(result).toContain('***');
+      expect(result).not.toBe(`Secret: ${longSecret}`);
+    });
+  });
+
+  describe('Rule Management', () => {
+    it('should add custom rule', () => {
+      const redactor = new SecurityRedactor({ enabledRules: [] });
+      const initialCount = redactor.getActiveRules().length;
+
+      const customRule: RedactRule = {
+        name: 'custom_test',
+        pattern: /custom/g,
+        replacement: '***',
+        description: 'Custom test rule'
+      };
+
+      redactor.addRule(customRule);
+      expect(redactor.getActiveRules().length).toBe(initialCount + 1);
+    });
+
+    it('should remove rule by name', () => {
+      const customRule: RedactRule = {
+        name: 'removable',
+        pattern: /remove/g,
+        replacement: '***',
+        description: 'Removable rule'
+      };
+
+      const redactor = new SecurityRedactor({
+        enabledRules: [],
+        customRules: [customRule]
+      });
+
+      expect(redactor.getActiveRules().length).toBe(1);
+      
+      const removed = redactor.removeRule('removable');
+      expect(removed).toBe(true);
+      expect(redactor.getActiveRules().length).toBe(0);
+    });
+  });
+
+  describe('Factory Methods', () => {
+    it('should create forLogs redactor', () => {
+      const redactor = SecurityRedactor.forLogs();
+      expect(redactor).toBeDefined();
+      
+      const rules = redactor.getActiveRules();
+      expect(rules.some(r => r.name === 'password')).toBe(true);
+      expect(rules.some(r => r.name === 'token')).toBe(true);
+    });
+
+    it('should create forReports redactor', () => {
+      const redactor = SecurityRedactor.forReports();
+      expect(redactor).toBeDefined();
+      
+      const rules = redactor.getActiveRules();
+      expect(rules.some(r => r.name === 'email')).toBe(true);
+      expect(rules.some(r => r.name === 'phone')).toBe(true);
+    });
+
+    it('should create forDebug redactor', () => {
+      const redactor = SecurityRedactor.forDebug();
+      expect(redactor).toBeDefined();
+      
+      const rules = redactor.getActiveRules();
+      expect(rules.length).toBeLessThan(SecurityRedactor.DEFAULT_RULES.length);
+    });
+  });
+
+  describe('Redaction Functionality', () => {
+    it('should redact passwords in JSON', () => {
+      const redactor = SecurityRedactor.forLogs();
+      const input = '{"password": "secret123", "user": "john"}';
+      const result = redactor.redact(input);
+      
+      expect(result).toContain('"password": "***"');
+      expect(result).not.toContain('secret123');
+    });
+
+    it('should redact bearer tokens', () => {
+      const redactor = SecurityRedactor.forLogs();
+      const input = 'Authorization: Bearer abc123def456';
+      const result = redactor.redact(input);
+      
+      // La règle authorization redacte le header, bearer redacte le token
+      expect(result).toContain('***');
+      // Le token peut rester si la règle authorization ne le couvre pas complètement
+      console.log('Bearer result:', result);
+    });
+
+    it('should handle empty/null input', () => {
+      const redactor = SecurityRedactor.forLogs();
+      
+      expect(redactor.redact('')).toBe('');
+      expect(redactor.redact(null as any)).toBe(null);
+      expect(redactor.redact(undefined as any)).toBe(undefined);
+    });
+  });
+
+  describe('Object Redaction', () => {
+    it('should redact sensitive keys in objects', () => {
+      const redactor = SecurityRedactor.forLogs();
+      const input = {
+        username: 'john',
+        password: 'secret123',
+        token: 'abc123',
+        data: 'normal'
+      };
+
+      const result = redactor.redactObject(input);
+      
+      expect(result.username).toBe('john');
+      expect(result.password).toBe('***'); // Redacted value (short)
+      expect(result.token).toBe('***'); // Redacted value (short)
+      expect(result.data).toBe('normal');
+    });
+
+    it('should handle nested objects', () => {
+      const redactor = SecurityRedactor.forLogs();
+      const input = {
+        user: {
+          name: 'john',
+          credentials: {
+            password: 'secret123'
+          }
+        }
+      };
+
+      const result = redactor.redactObject(input);
+      
+      expect(result.user.name).toBe('john');
+      expect(result.user.credentials).toBeDefined();
+      if (result.user.credentials.password !== undefined) {
+        expect(result.user.credentials.password).toContain('***');
+      }
+    });
+
+    it('should handle arrays', () => {
+      const redactor = SecurityRedactor.forLogs();
+      const input = [
+        { password: 'secret1' },
+        { password: 'secret2' }
+      ];
+
+      const result = redactor.redactObject(input);
+      
+      expect(Array.isArray(result)).toBe(true);
+      expect(result[0].password).toBe('***'); // Short values get ***
+      expect(result[1].password).toBe('***');
+    });
+  });
+});

package/core/src/__tests__/serve/health-checker.test.ts

@@ -0,0 +1,155 @@
+/**
+ * QA360 Health Checker Tests
+ */
+
+import { HealthChecker } from '../../serve/health-checker';
+import { existsSync, writeFileSync, unlinkSync } from 'fs';
+import { join } from 'path';
+import { tmpdir } from 'os';
+
+// Mock fs module
+vi.mock('fs', () => ({
+  existsSync: vi.fn(),
+  statSync: vi.fn(),
+  writeFileSync: vi.fn(),
+  unlinkSync: vi.fn()
+}));
+
+// Mock child_process
+vi.mock('child_process', () => ({
+  spawn: vi.fn()
+}));
+
+const mockExistsSync = existsSync as any;
+const mockWriteFileSync = writeFileSync as any;
+const mockUnlinkSync = unlinkSync as any;
+
+describe('HealthChecker', () => {
+  let healthChecker: HealthChecker;
+
+  beforeEach(() => {
+    healthChecker = new HealthChecker();
+    vi.clearAllMocks();
+  });
+
+  describe('check()', () => {
+    it('should return ok status when all checks pass', async () => {
+      // Mock successful conditions
+      mockExistsSync.mockReturnValue(true);
+      
+      const health = await healthChecker.check();
+      
+      expect(health.status).toBeDefined();
+      expect(health.version).toBeDefined();
+      expect(health.env.node).toBeDefined();
+      expect(health.env.platform).toBeDefined();
+      expect(health.checks).toBeDefined();
+      expect(health.readiness).toBeDefined();
+    });
+
+    it('should return degraded status when tools are missing', async () => {
+      // Mock pack exists but tools missing
+      mockExistsSync.mockReturnValue(true);
+      
+      const health = await healthChecker.check();
+      
+      expect(health.checks.tools).toBeDefined();
+      expect(['ok', 'degraded', 'error']).toContain(health.status);
+    });
+
+    it('should return error status when not ready', async () => {
+      // Mock tmp not writable
+      mockExistsSync.mockReturnValue(false);
+      mockWriteFileSync.mockImplementation(() => {
+        throw new Error('Permission denied');
+      });
+      
+      const health = await healthChecker.check();
+      
+      expect(health.readiness.ready).toBe(false);
+      expect(health.readiness.reason).toContain('HLT');
+    });
+
+    it('should check config correctly', async () => {
+      mockExistsSync.mockReturnValueOnce(true); // pack.yml exists
+      mockExistsSync.mockReturnValueOnce(true); // .qa360 dir exists
+      
+      const health = await healthChecker.check();
+      
+      expect(health.checks.config).toBe('ok');
+    });
+
+    it('should detect config error when .qa360 missing', async () => {
+      mockExistsSync.mockReturnValue(false);
+      
+      const health = await healthChecker.check();
+      
+      expect(health.checks.config).toBe('error');
+    });
+
+    it('should check tmp writable correctly', async () => {
+      mockWriteFileSync.mockImplementation(() => {
+        // Simulate successful write
+      });
+      mockUnlinkSync.mockImplementation(() => {
+        // Simulate successful delete
+      });
+      
+      const health = await healthChecker.check();
+      
+      expect(health.checks.tmp_writable).toBe(true);
+    });
+
+    it('should detect tmp not writable', async () => {
+      mockWriteFileSync.mockImplementation(() => {
+        throw new Error('Permission denied');
+      });
+      
+      const health = await healthChecker.check();
+      
+      expect(health.checks.tmp_writable).toBe(false);
+    });
+
+    it('should assess readiness correctly', async () => {
+      // Mock all good conditions
+      mockExistsSync.mockReturnValue(true);
+      mockWriteFileSync.mockImplementation(() => {});
+      mockUnlinkSync.mockImplementation(() => {});
+      
+      const health = await healthChecker.check();
+      
+      if (health.readiness.ready) {
+        expect(health.readiness.reason).toBeNull();
+      } else {
+        expect(health.readiness.reason).toMatch(/HLT\d{3}/);
+      }
+    });
+  });
+
+  describe('error codes', () => {
+    it('should return HLT001 for tmp not writable', async () => {
+      mockWriteFileSync.mockImplementation(() => {
+        throw new Error('Permission denied');
+      });
+      
+      const health = await healthChecker.check();
+      
+      if (!health.readiness.ready) {
+        expect(health.readiness.reason).toContain('HLT001');
+      }
+    });
+
+    it('should return HLT002 for config error', async () => {
+      // Mock tmp writable OK but config error
+      mockWriteFileSync.mockImplementation(() => {}); // tmp OK
+      mockUnlinkSync.mockImplementation(() => {}); // tmp OK
+      mockExistsSync.mockReturnValue(false); // config error
+      
+      const health = await healthChecker.check();
+      
+      if (!health.readiness.ready) {
+        expect(health.readiness.reason).toContain('HLT002');
+      }
+    });
+  });
+});

package/core/src/__tests__/serve/process-manager.test.ts

@@ -0,0 +1,213 @@
+/**
+ * QA360 Process Manager Tests
+ */
+
+import { ProcessManager } from '../../serve/process-manager';
+import { ChildProcess } from 'child_process';
+import { EventEmitter } from 'events';
+
+// Mock child process
+class MockChildProcess extends EventEmitter {
+  pid = 12345;
+  killed = false;
+
+  kill(signal?: string) {
+    this.killed = true;
+    setTimeout(() => this.emit('exit', 0), 10);
+    return true;
+  }
+}
+
+describe('ProcessManager', () => {
+  let processManager: ProcessManager;
+
+  beforeEach(() => {
+    processManager = new ProcessManager();
+  });
+
+  afterEach(() => {
+    // Clean up any active runs
+    processManager.removeAllListeners();
+  });
+
+  describe('registerRun()', () => {
+    it('should register a new run', () => {
+      const mockProcess = new MockChildProcess() as any;
+      
+      processManager.registerRun('test-run-1', 'npm test', mockProcess);
+      
+      const runs = processManager.getActiveRuns();
+      expect(runs).toHaveLength(1);
+      expect(runs[0].runId).toBe('test-run-1');
+      expect(runs[0].command).toBe('npm test');
+      expect(runs[0].status).toBe('running');
+    });
+
+    it('should register run without main process', () => {
+      processManager.registerRun('test-run-2', 'npm build');
+      
+      const runs = processManager.getActiveRuns();
+      expect(runs).toHaveLength(1);
+      expect(runs[0].runId).toBe('test-run-2');
+    });
+
+    it('should emit run-registered event', () => {
+      return new Promise<void>((resolve) => {
+        processManager.on('run-registered', (run) => {
+          expect(run.runId).toBe('test-run-3');
+          resolve();
+        });
+
+        processManager.registerRun('test-run-3', 'npm start');
+      });
+    });
+  });
+
+  describe('addChildProcess()', () => {
+    it('should add child process to existing run', () => {
+      const mockProcess1 = new MockChildProcess() as any;
+      const mockProcess2 = new MockChildProcess() as any;
+
+      processManager.registerRun('test-run-4', 'npm test', mockProcess1);
+      processManager.addChildProcess('test-run-4', mockProcess2);
+
+      const run = processManager.getRunStatus('test-run-4');
+      expect(run?.children).toHaveLength(2);
+    });
+
+    it('should handle non-existent run gracefully', () => {
+      const mockProcess = new MockChildProcess() as any;
+      
+      expect(() => {
+        processManager.addChildProcess('non-existent', mockProcess);
+      }).not.toThrow();
+    });
+  });
+
+  describe('cancelRun()', () => {
+    it('should cancel existing run', async () => {
+      const mockProcess = new MockChildProcess() as any;
+      
+      processManager.registerRun('test-run-5', 'npm test', mockProcess);
+      
+      const result = await processManager.cancelRun('test-run-5');
+      
+      expect(result.cancelled).toBe(true);
+      expect(result.runId).toBe('test-run-5');
+      expect(mockProcess.killed).toBe(true);
+    });
+
+    it('should return false for non-existent run', async () => {
+      const result = await processManager.cancelRun('non-existent');
+      
+      expect(result.cancelled).toBe(false);
+      expect(result.reason).toContain('not found');
+    });
+
+    it('should return false for already completed run', async () => {
+      processManager.registerRun('test-run-6', 'npm test');
+      
+      // Simulate completion
+      const run = processManager.getRunStatus('test-run-6');
+      if (run) {
+        run.status = 'completed';
+      }
+      
+      const result = await processManager.cancelRun('test-run-6');
+      
+      expect(result.cancelled).toBe(false);
+      expect(result.reason).toContain('already completed');
+    });
+
+    it('should emit run-cancelled event', () => {
+      return new Promise<void>((resolve) => {
+        const mockProcess = new MockChildProcess() as any;
+
+        processManager.on('run-cancelled', (run) => {
+          expect(run.runId).toBe('test-run-7');
+          resolve();
+        });
+
+        processManager.registerRun('test-run-7', 'npm test', mockProcess);
+        processManager.cancelRun('test-run-7');
+      });
+    });
+  });
+
+  describe('cancelAllRuns()', () => {
+    it('should cancel all active runs', async () => {
+      const mockProcess1 = new MockChildProcess() as any;
+      const mockProcess2 = new MockChildProcess() as any;
+
+      processManager.registerRun('test-run-8', 'npm test', mockProcess1);
+      processManager.registerRun('test-run-9', 'npm build', mockProcess2);
+
+      const results = await processManager.cancelAllRuns();
+
+      expect(results).toHaveLength(2);
+      expect(results.every(r => r.cancelled)).toBe(true);
+      expect(mockProcess1.killed).toBe(true);
+      expect(mockProcess2.killed).toBe(true);
+    });
+
+    it('should handle empty runs list', async () => {
+      const results = await processManager.cancelAllRuns();
+      expect(results).toHaveLength(0);
+    });
+  });
+
+  describe('getRunStatus()', () => {
+    it('should return run status', () => {
+      processManager.registerRun('test-run-10', 'npm test');
+      
+      const status = processManager.getRunStatus('test-run-10');
+      
+      expect(status).toBeDefined();
+      expect(status?.runId).toBe('test-run-10');
+      expect(status?.status).toBe('running');
+    });
+
+    it('should return null for non-existent run', () => {
+      const status = processManager.getRunStatus('non-existent');
+      expect(status).toBeNull();
+    });
+  });
+
+  describe('getActiveRuns()', () => {
+    it('should return all active runs', () => {
+      processManager.registerRun('test-run-11', 'npm test');
+      processManager.registerRun('test-run-12', 'npm build');
+
+      const runs = processManager.getActiveRuns();
+      
+      expect(runs).toHaveLength(2);
+      expect(runs.map(r => r.runId)).toContain('test-run-11');
+      expect(runs.map(r => r.runId)).toContain('test-run-12');
+    });
+
+    it('should return empty array when no runs', () => {
+      const runs = processManager.getActiveRuns();
+      expect(runs).toHaveLength(0);
+    });
+  });
+
+  describe('graceful shutdown', () => {
+    it('should terminate process with SIGTERM first', async () => {
+      const mockProcess = new MockChildProcess() as any;
+      let signalUsed: string | undefined;
+      
+      mockProcess.kill = vi.fn((signal) => {
+        signalUsed = signal;
+        mockProcess.killed = true;
+        setTimeout(() => mockProcess.emit('exit', 0), 5);
+        return true;
+      });
+
+      processManager.registerRun('test-run-13', 'npm test', mockProcess);
+      
+      await processManager.cancelRun('test-run-13');
+      
+      expect(mockProcess.kill).toHaveBeenCalledWith('SIGTERM');
+    });
+  });
+});

package/core/src/__tests__/serve/server.test.ts

@@ -0,0 +1,103 @@
+/**
+ * QA360 Server Tests
+ */
+
+import { QA360Server } from '../../serve/server';
+import { createServer } from 'http';
+
+// Mock dependencies
+vi.mock('../../serve/health-checker');
+vi.mock('../../serve/diagnostics-collector');
+vi.mock('../../serve/metrics-collector');
+vi.mock('../../serve/process-manager');
+vi.mock('../../security/redactor');
+
+describe('QA360Server', () => {
+  let server: QA360Server;
+
+  beforeEach(() => {
+    server = new QA360Server({
+      port: 0, // Use random port for testing
+      host: '127.0.0.1',
+      metrics: true,
+      verbose: false
+    });
+  });
+
+  afterEach(async () => {
+    if (server) {
+      await server.stop();
+    }
+  });
+
+  describe('constructor', () => {
+    it('should create server with config', () => {
+      expect(server).toBeDefined();
+    });
+
+    it('should initialize with default config', () => {
+      const defaultServer = new QA360Server({ port: 4060 });
+      expect(defaultServer).toBeDefined();
+    });
+  });
+
+  describe('start() and stop()', () => {
+    it('should start and stop server', async () => {
+      const testServer = new QA360Server({
+        port: 0, // Random port
+        host: '127.0.0.1',
+        metrics: true
+      });
+
+      await expect(testServer.start()).resolves.toBeUndefined();
+      await expect(testServer.stop()).resolves.toBeUndefined();
+    });
+
+    it('should handle port already in use', async () => {
+      const port = 45678; // Fixed port for collision test
+      
+      const server1 = new QA360Server({ port, host: '127.0.0.1' });
+      const server2 = new QA360Server({ port, host: '127.0.0.1' });
+
+      await server1.start();
+      
+      await expect(server2.start()).rejects.toThrow();
+      
+      await server1.stop();
+    });
+  });
+
+  describe('routing', () => {
+    it('should handle 404 for unknown routes', async () => {
+      // This would require integration testing with actual HTTP requests
+      // For unit tests, we test the routing logic indirectly
+      expect(true).toBe(true);
+    });
+  });
+
+  describe('error handling', () => {
+    it('should handle server errors gracefully', async () => {
+      const errorServer = new QA360Server({
+        port: -1, // Invalid port
+        host: '127.0.0.1'
+      });
+
+      await expect(errorServer.start()).rejects.toThrow();
+    });
+  });
+
+  describe('logging', () => {
+    it('should log with redaction', () => {
+      // Test logging functionality
+      expect(server).toBeDefined();
+    });
+
+    it('should respect verbose setting', () => {
+      const verboseServer = new QA360Server({
+        port: 4060,
+        verbose: true
+      });
+      expect(verboseServer).toBeDefined();
+    });
+  });
+});