icdev 1.2.3__tar.gz → 1.2.4__tar.gz

{icdev-1.2.3 → icdev-1.2.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: icdev
-Version: 1.2.3
+Version: 1.2.4
 Summary: ICDEV™ — Intelligent Certified Development Platform. AI-powered SDLC with NIST 800-53 RMF compliance, multi-agent orchestration, FORGE framework, and ANVIL build workflow.
 Author: Sovanna Chuon
 License-Expression: Apache-2.0

icdev-1.2.4/icdev/agents/04f12fae/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "04f12fae",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/27c72a2b/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "27c72a2b",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/2a6071df/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "2a6071df",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/2e5eb629/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "2e5eb629",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/6017008c/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "6017008c",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/a809099c/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "a809099c",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/bd46513c/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "bd46513c",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/c268a5e1/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "c268a5e1",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/d2aed45f/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "d2aed45f",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/dd4f8038/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "dd4f8038",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/df910525/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "df910525",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/e6919a0d/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "e6919a0d",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/ebf7adbf/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "ebf7adbf",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/f40952a9/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "f40952a9",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

icdev-1.2.4/icdev/agents/f629ed80/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "f629ed80",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

{icdev-1.2.3 → icdev-1.2.4}/icdev.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: icdev
-Version: 1.2.3
+Version: 1.2.4
 Summary: ICDEV™ — Intelligent Certified Development Platform. AI-powered SDLC with NIST 800-53 RMF compliance, multi-agent orchestration, FORGE framework, and ANVIL build workflow.
 Author: Sovanna Chuon
 License-Expression: Apache-2.0

{icdev-1.2.3 → icdev-1.2.4}/icdev.egg-info/SOURCES.txt

@@ -20,6 +20,7 @@ icdev.egg-info/requires.txt
 icdev.egg-info/top_level.txt
 icdev/agents/02318988/icdev_state.json
 icdev/agents/046eb5da/icdev_state.json
+icdev/agents/04f12fae/icdev_state.json
 icdev/agents/05d591b0/icdev_state.json
 icdev/agents/0acd37fb/icdev_state.json
 icdev/agents/0c020e0c/icdev_state.json
@@ -41,12 +42,15 @@ icdev/agents/231b8ba0/icdev_state.json
 icdev/agents/23347801/icdev_state.json
 icdev/agents/27153b56/icdev_state.json
 icdev/agents/279b9d83/icdev_state.json
+icdev/agents/27c72a2b/icdev_state.json
 icdev/agents/2854e9fd/icdev_state.json
 icdev/agents/28a365f0/icdev_state.json
 icdev/agents/29f12334/icdev_state.json
+icdev/agents/2a6071df/icdev_state.json
 icdev/agents/2acb453a/icdev_state.json
 icdev/agents/2bb9a5e8/icdev_state.json
 icdev/agents/2e5a6f1f/icdev_state.json
+icdev/agents/2e5eb629/icdev_state.json
 icdev/agents/2faf9cd2/icdev_state.json
 icdev/agents/3125f333/icdev_state.json
 icdev/agents/32de8da3/icdev_state.json
@@ -73,6 +77,7 @@ icdev/agents/592e21db/icdev_state.json
 icdev/agents/5a4d0d21/icdev_state.json
 icdev/agents/5dfb4615/icdev_state.json
 icdev/agents/5e7217da/icdev_state.json
+icdev/agents/6017008c/icdev_state.json
 icdev/agents/60d13eef/icdev_state.json
 icdev/agents/60f4d80f/icdev_state.json
 icdev/agents/62c363f7/icdev_state.json
@@ -120,6 +125,7 @@ icdev/agents/a5404561/icdev_state.json
 icdev/agents/a5c09a13/icdev_state.json
 icdev/agents/a5f05a92/icdev_state.json
 icdev/agents/a7a5f384/icdev_state.json
+icdev/agents/a809099c/icdev_state.json
 icdev/agents/a81dbc43/icdev_state.json
 icdev/agents/ab69fef1/icdev_state.json
 icdev/agents/ab99467e/icdev_state.json
@@ -136,8 +142,10 @@ icdev/agents/b66298ee/icdev_state.json
 icdev/agents/ba5a3813/icdev_state.json
 icdev/agents/bafcf1eb/icdev_state.json
 icdev/agents/bc9e4dc3/icdev_state.json
+icdev/agents/bd46513c/icdev_state.json
 icdev/agents/be689f8c/icdev_state.json
 icdev/agents/c1222462/icdev_state.json
+icdev/agents/c268a5e1/icdev_state.json
 icdev/agents/c2d8204f/icdev_state.json
 icdev/agents/c30072e1/icdev_state.json
 icdev/agents/c44b4ad0/icdev_state.json
@@ -149,6 +157,7 @@ icdev/agents/ca9363a0/icdev_state.json
 icdev/agents/cf576299/icdev_state.json
 icdev/agents/d15e50fe/icdev_state.json
 icdev/agents/d1a4c17b/icdev_state.json
+icdev/agents/d2aed45f/icdev_state.json
 icdev/agents/d52c2a66/icdev_state.json
 icdev/agents/d943a563/icdev_state.json
 icdev/agents/da1de751/icdev_state.json
@@ -156,18 +165,24 @@ icdev/agents/dbb51732/icdev_state.json
 icdev/agents/dcabf62e/icdev_state.json
 icdev/agents/dcb4cafe/icdev_state.json
 icdev/agents/dd148eb8/icdev_state.json
+icdev/agents/dd4f8038/icdev_state.json
 icdev/agents/de1830d7/icdev_state.json
 icdev/agents/de4fac37/icdev_state.json
 icdev/agents/defb3040/icdev_state.json
+icdev/agents/df910525/icdev_state.json
 icdev/agents/e0bfc5b2/icdev_state.json
 icdev/agents/e1182fa8/icdev_state.json
 icdev/agents/e3c0523b/icdev_state.json
 icdev/agents/e4a278c6/icdev_state.json
+icdev/agents/e6919a0d/icdev_state.json
 icdev/agents/e867501f/icdev_state.json
 icdev/agents/ea0aa1b7/icdev_state.json
+icdev/agents/ebf7adbf/icdev_state.json
 icdev/agents/ec69fbe7/icdev_state.json
 icdev/agents/f1e36aa8/icdev_state.json
+icdev/agents/f40952a9/icdev_state.json
 icdev/agents/f56a7f90/icdev_state.json
+icdev/agents/f629ed80/icdev_state.json
 icdev/agents/f6391bcf/icdev_state.json
 icdev/agents/f64433d4/icdev_state.json
 icdev/agents/f69ae00d/icdev_state.json
@@ -1369,6 +1384,7 @@ tests/test_installer.py
 tests/test_instruction_generator.py
 tests/test_instrumentation.py
 tests/test_intake_api.py
+tests/test_intent_validator.py
 tests/test_ironbank_generator.py
 tests/test_kg_pair_generator.py
 tests/test_knowledge_graph.py

{icdev-1.2.3 → icdev-1.2.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "icdev"
-version = "1.2.3"
+version = "1.2.4"
 description = "ICDEV™ — Intelligent Certified Development Platform. AI-powered SDLC with NIST 800-53 RMF compliance, multi-agent orchestration, FORGE framework, and ANVIL build workflow."
 readme = "README.md"
 requires-python = ">=3.9"

icdev-1.2.4/tests/test_intent_validator.py

@@ -0,0 +1,303 @@
+#!/usr/bin/env python3
+# CUI // SP-CTI
+"""Unit tests for tools.network.intent_validator — Intent-Based Validation Engine."""
+
+import sys
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parent.parent))
+
+from tools.network.intent_validator import (
+    CONSTRAINT_TYPES,
+    validate_intent_policy,
+    _parse_bandwidth_label,
+    _matches_selector,
+    _build_adjacency,
+    _shortest_hop_count,
+    _path_has_firewall,
+)
+
+
+# ── Helper: sample topology ────────────────────────────────────────────────
+def _sample_graph():
+    """Hub-and-spoke topology: core router, 2 switches, 1 firewall, 1 cloud."""
+    return {
+        "nodes": [
+            {"id": "r1", "type": "router", "label": "Core-Router-1"},
+            {"id": "sw1", "type": "switch-l3", "label": "Dist-Switch-1"},
+            {"id": "sw2", "type": "switch-l3", "label": "Dist-Switch-2"},
+            {"id": "fw1", "type": "firewall", "label": "Perimeter-FW"},
+            {"id": "cloud1", "type": "cloud", "label": "AWS-DX-East"},
+        ],
+        "edges": [
+            {"source": "r1", "target": "sw1", "label": "10G"},
+            {"source": "r1", "target": "sw2", "label": "10G"},
+            {"source": "r1", "target": "fw1", "label": "1G"},
+            {"source": "fw1", "target": "cloud1", "label": "1G"},
+        ],
+    }
+
+
+# ── Bandwidth ──────────────────────────────────────────────────────────────
+class TestBandwidthParsing:
+    def test_parse_400g(self):
+        assert _parse_bandwidth_label("400G") == 400_000
+
+    def test_parse_10g(self):
+        assert _parse_bandwidth_label("10G") == 10_000
+
+    def test_parse_100m(self):
+        assert _parse_bandwidth_label("100M") == 100
+
+    def test_parse_unknown(self):
+        assert _parse_bandwidth_label("") == 0
+        assert _parse_bandwidth_label("unknown") == 0
+
+
+class TestBandwidthConstraint:
+    def test_all_links_above_threshold_pass(self):
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "bandwidth", "rule_json": {"min_bandwidth_mbps": 500, "selector": "all"}}],
+        )
+        assert result["status"] == "PASS"
+
+    def test_links_below_threshold_fail(self):
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "bandwidth", "rule_json": {"min_bandwidth_mbps": 5000, "selector": "all"}}],
+        )
+        assert result["status"] == "FAIL"
+        assert result["failed"] == 1
+        # fw1-cloud1 link is 1G = 1000 Mbps < 5000
+        assert any("1000 Mbps" in v["message"] for v in result["violations"])
+
+
+# ── Redundancy ─────────────────────────────────────────────────────────────
+class TestRedundancyConstraint:
+    def test_core_router_passes_min_2(self):
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "redundancy", "rule_json": {"min_links": 2, "selector": "type:router"}}],
+        )
+        # r1 has 3 links
+        assert result["status"] == "PASS"
+
+    def test_cloud_fails_min_2(self):
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "redundancy", "rule_json": {"min_links": 2, "selector": "type:cloud"}}],
+        )
+        assert result["status"] == "FAIL"
+        assert any("aws" in v["affected_entity"].lower() for v in result["violations"])
+
+
+# ── Isolation ──────────────────────────────────────────────────────────────
+class TestIsolationConstraint:
+    def test_cloud_to_switch_via_firewall_pass(self):
+        # cloud1 -> fw1 -> r1 -> sw1: firewall is in path
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "isolation", "rule_json": {
+                "zone_a": "type:cloud", "zone_b": "type:switch-l3", "require_firewall": True,
+            }}],
+        )
+        assert result["status"] == "PASS"
+
+    def test_switch_to_switch_no_firewall_fail(self):
+        # sw1 -> r1 -> sw2: no firewall in path
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "isolation", "rule_json": {
+                "zone_a": "label:Dist-Switch-1", "zone_b": "label:Dist-Switch-2",
+                "require_firewall": True,
+            }}],
+        )
+        assert result["status"] == "FAIL"
+
+
+# ── Latency ────────────────────────────────────────────────────────────────
+class TestLatencyConstraint:
+    def test_adjacent_nodes_within_bound(self):
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "latency", "rule_json": {
+                "max_hops": 1, "source_selector": "type:router", "target_selector": "type:switch-l3",
+            }}],
+        )
+        assert result["status"] == "PASS"
+
+    def test_far_nodes_exceed_bound(self):
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "latency", "rule_json": {
+                "max_hops": 1, "source_selector": "type:switch-l3", "target_selector": "type:cloud",
+            }}],
+        )
+        # sw1 -> r1 -> fw1 -> cloud1 = 3 hops > 1
+        assert result["status"] == "FAIL"
+
+
+# ── Encryption ─────────────────────────────────────────────────────────────
+class TestEncryptionConstraint:
+    def test_wan_links_unencrypted_fail(self):
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "encryption", "rule_json": {"selector": "all_wan", "min_level": "any"}}],
+        )
+        # cloud1 is WAN type, link fw1-cloud1 has no encryption
+        assert result["status"] == "FAIL"
+
+    def test_non_wan_selector_pass(self):
+        # No WAN-type nodes match type:switch-l3
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "encryption", "rule_json": {"selector": "type:switch-l3", "min_level": "any"}}],
+        )
+        # sw1 and sw2 links to r1 are not encrypted, but encryptor adjacency check...
+        # Actually these would fail too. Let's use a graph with encryptors.
+        graph = _sample_graph()
+        graph["nodes"].append({"id": "enc1", "type": "fips-140-l2", "label": "FIPS-Encryptor"})
+        graph["edges"].append({"source": "sw1", "target": "enc1", "label": "10G"})
+        result2 = validate_intent_policy(
+            "t1", graph,
+            [{"constraint_type": "encryption", "rule_json": {"selector": "label:Dist-Switch-1", "min_level": "any"}}],
+        )
+        # sw1 has adjacent encryptor
+        assert result2["status"] == "PASS"
+
+
+# ── Custom ─────────────────────────────────────────────────────────────────
+class TestCustomConstraint:
+    def test_no_spof_detects_bridge(self):
+        # r1 is a bridge node (removing it disconnects sw1/sw2 from fw1/cloud1)
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "custom", "rule_json": {
+                "check": "no_single_point_of_failure", "params": {},
+            }}],
+        )
+        assert result["status"] == "FAIL"
+        assert any("single point of failure" in v["message"] for v in result["violations"])
+
+    def test_max_node_count_pass(self):
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "custom", "rule_json": {"check": "max_node_count", "params": {"max": 10}}}],
+        )
+        assert result["status"] == "PASS"
+
+    def test_max_node_count_fail(self):
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "custom", "rule_json": {"check": "max_node_count", "params": {"max": 3}}}],
+        )
+        assert result["status"] == "FAIL"
+
+    def test_required_node_type_pass(self):
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "custom", "rule_json": {
+                "check": "required_node_type", "params": {"type": "firewall", "min_count": 1},
+            }}],
+        )
+        assert result["status"] == "PASS"
+
+    def test_required_node_type_fail(self):
+        result = validate_intent_policy(
+            "t1", _sample_graph(),
+            [{"constraint_type": "custom", "rule_json": {
+                "check": "required_node_type", "params": {"type": "hsm", "min_count": 1},
+            }}],
+        )
+        assert result["status"] == "FAIL"
+
+
+# ── Multi-constraint policy ───────────────────────────────────────────────
+class TestMultiConstraintPolicy:
+    def test_mixed_pass_and_fail(self):
+        constraints = [
+            {"constraint_type": "bandwidth", "rule_json": {"min_bandwidth_mbps": 500, "selector": "all"}},
+            {"constraint_type": "redundancy", "rule_json": {"min_links": 5, "selector": "all"}},
+        ]
+        result = validate_intent_policy("t1", _sample_graph(), constraints, "Mixed Policy")
+        assert result["total_constraints"] == 2
+        assert result["passed"] == 1
+        assert result["failed"] == 1
+        assert result["policy_name"] == "Mixed Policy"
+        assert result["score_pct"] == 50.0
+
+    def test_severity_override(self):
+        constraints = [
+            {"constraint_type": "redundancy", "severity": "CAT3",
+             "rule_json": {"min_links": 5, "selector": "all"}},
+        ]
+        result = validate_intent_policy("t1", _sample_graph(), constraints)
+        assert all(v["severity"] == "CAT3" for v in result["violations"])
+
+
+# ── Helpers ────────────────────────────────────────────────────────────────
+class TestHelpers:
+    def test_matches_selector_all(self):
+        node_types = {"r1": "router"}
+        assert _matches_selector({"id": "r1"}, "all", node_types)
+        assert _matches_selector({"id": "r1"}, "", node_types)
+
+    def test_matches_selector_type(self):
+        node_types = {"r1": "router"}
+        assert _matches_selector({"id": "r1"}, "type:router", node_types)
+        assert not _matches_selector({"id": "r1"}, "type:switch", node_types)
+
+    def test_matches_selector_label(self):
+        node_types = {"r1": "router"}
+        assert _matches_selector({"id": "r1", "label": "Core-Router"}, "label:core", node_types)
+
+    def test_matches_selector_all_critical(self):
+        node_types = {"r1": "router", "sw1": "switch-l3", "srv1": "server"}
+        assert _matches_selector({"id": "r1"}, "all_critical", node_types)
+        assert not _matches_selector({"id": "srv1"}, "all_critical", node_types)
+
+    def test_build_adjacency(self):
+        edges = [{"source": "a", "target": "b"}, {"source": "b", "target": "c"}]
+        adj = _build_adjacency(edges)
+        assert "b" in adj["a"]
+        assert "a" in adj["b"]
+        assert "c" in adj["b"]
+
+    def test_shortest_hop_count(self):
+        adj = {"a": {"b"}, "b": {"a", "c"}, "c": {"b"}}
+        assert _shortest_hop_count(adj, "a", "c") == 2
+        assert _shortest_hop_count(adj, "a", "a") == 0
+        assert _shortest_hop_count(adj, "a", "d") == -1
+
+    def test_constraint_types_complete(self):
+        expected = {"bandwidth", "redundancy", "isolation", "latency", "encryption", "custom"}
+        assert set(CONSTRAINT_TYPES.keys()) == expected
+
+
+# ── Empty / edge cases ────────────────────────────────────────────────────
+class TestEdgeCases:
+    def test_empty_graph(self):
+        result = validate_intent_policy("t1", {"nodes": [], "edges": []}, [
+            {"constraint_type": "bandwidth", "rule_json": {"min_bandwidth_mbps": 1000, "selector": "all"}},
+        ])
+        assert result["status"] == "PASS"
+
+    def test_no_constraints(self):
+        result = validate_intent_policy("t1", _sample_graph(), [])
+        assert result["total_constraints"] == 0
+        assert result["status"] == "PASS"
+
+    def test_unknown_constraint_type_skipped(self):
+        result = validate_intent_policy("t1", _sample_graph(), [
+            {"constraint_type": "nonexistent", "rule_json": {}},
+        ])
+        assert result["total_constraints"] == 0
+
+    def test_rule_json_as_string(self):
+        import json
+        result = validate_intent_policy("t1", _sample_graph(), [
+            {"constraint_type": "bandwidth",
+             "rule_json": json.dumps({"min_bandwidth_mbps": 500, "selector": "all"})},
+        ])
+        assert result["status"] == "PASS"