@dzhechkov/keysarium 1.7.18 → 1.7.20

package/templates/.claude/skills/feature-adr/references/agentic-qe/qe-ref-security-testing/scripts/validate-config.json

@@ -0,0 +1,45 @@
+{
+  "skillName": "security-testing",
+  "skillVersion": "1.0.0",
+  "requiredTools": [
+    "jq"
+  ],
+  "optionalTools": [
+    "npm",
+    "semgrep",
+    "trivy",
+    "ajv",
+    "jsonschema",
+    "python3"
+  ],
+  "schemaPath": "schemas/output.json",
+  "requiredFields": [
+    "skillName",
+    "status",
+    "output",
+    "output.summary",
+    "output.findings",
+    "output.owaspCategories"
+  ],
+  "requiredNonEmptyFields": [
+    "output.summary"
+  ],
+  "mustContainTerms": [
+    "OWASP",
+    "security",
+    "vulnerability"
+  ],
+  "mustNotContainTerms": [
+    "TODO",
+    "placeholder",
+    "FIXME"
+  ],
+  "enumValidations": {
+    ".status": [
+      "success",
+      "partial",
+      "failed",
+      "skipped"
+    ]
+  }
+}

package/templates/.claude/skills/feature-adr/references/agentic-qe/qe-ref-security-testing/templates/security-report.md

@@ -0,0 +1,44 @@
+# Security Assessment Report
+
+**Project**: {{project_name}}
+**Date**: {{date}}
+**Assessed by**: {{assessor}}
+**Scope**: {{scope_description}}
+
+## Executive Summary
+
+| Severity | Count | Fixed | Remaining |
+|----------|-------|-------|-----------|
+| Critical | | | |
+| High | | | |
+| Medium | | | |
+| Low | | | |
+| Info | | | |
+
+**Overall Risk Level**: {{risk_level}}
+**Recommendation**: {{ship/hold/remediate}}
+
+## Findings
+
+### Finding 1: {{title}}
+- **Severity**: {{critical/high/medium/low}}
+- **OWASP Category**: {{A01-A10}}
+- **Location**: {{file:line or endpoint}}
+- **Description**: {{what was found}}
+- **Impact**: {{what an attacker could do}}
+- **Reproduction**:
+  1. {{step 1}}
+  2. {{step 2}}
+- **Remediation**: {{how to fix}}
+- **Status**: {{open/fixed/accepted}}
+
+## Tools Used
+- [ ] npm audit
+- [ ] Semgrep SAST
+- [ ] OWASP ZAP DAST
+- [ ] Manual review
+- [ ] Secrets scanning
+
+## Sign-off
+- [ ] All critical/high findings addressed or accepted with risk justification
+- [ ] Remediation verified with re-test

package/templates/.claude/skills/feature-adr/references/agentic-qe/{tdd-london-chicago.md → qe-ref-tdd-london-chicago/REFERENCE.md}

@@ -15,9 +15,20 @@ trust_tier: 2
 validation:
   schema_path: schemas/output.json
   validator_path: scripts/validate-config.json
-
 ---
 
+<!-- Vendored from https://github.com/proffesor-for-testing/agentic-qe at 0a6de058575cbe292afe220df105cc74120f7674 (MIT, Copyright (c) 2025 Agentic QE Contributors), 2026-10-24. Bundled references do not install aqe, MCP tools, pattern memory, or fleet runtime. See ../LICENSE.agentic-qe and ../README.md. -->
+
+## Keysarium execution adapter
+
+This pinned upstream body is methodology inside the bundled feature-ADR pipeline. In Reference Mode, the feature-ADR module that loaded this file owns orchestration and checkpoints. Use the reasoning and output shape below with the host's available tools. Do not treat upstream `aqe` CLI/MCP calls, named agent roles, browser tools, or example absolute paths as installed capabilities. Name a missing capability or evidence in the checkpoint instead of reporting that an upstream step ran. The schemas and eval files are bundled for explicit validation; bundling them does not run those checks automatically.
+
+Relative paths such as `schemas/output.json`, `evals/...` and `steps/...` resolve from this skill directory under `references/agentic-qe/`. Direct Extended Mode still requires a separately installed `aqe` runtime; verify each required runtime capability before using it.
+
+The upstream `run-history.json` is execution history, not a reference contract, and is intentionally omitted. Do not run an upstream example that reads or writes it unless an installed aqe runtime supplies its own history.
+
+<!-- BEGIN AGENTIC-QE UPSTREAM BODY -->
+
 # Test-Driven Development: London & Chicago Schools
 
 <default_to_action>
@@ -247,3 +258,12 @@ const tddFleet = await FleetManager.coordinate({
 Neither is "right." Choose based on context. Mix as needed. Goal: well-designed, tested code.
 
 **With Agents:** Agents excel at generating tests, validating green phase, and suggesting refactorings. Use agents to maintain TDD discipline while humans focus on design decisions.
+
+## Gotchas
+
+- Agent skips Red phase and writes test + implementation together — enforce "test must fail first" by running test before writing code
+- London school over-mocking creates brittle tests that break on any refactor — mock at architectural boundaries, not every function
+- Chicago school tests become slow as integration scope grows — keep test boundaries tight
+- Agent defaults to jest.mock() for everything — prefer dependency injection for testability
+- Refactor phase is where agent cuts corners most — verify no behavior changes by checking test output is identical
+<!-- END AGENTIC-QE UPSTREAM BODY -->

package/templates/.claude/skills/feature-adr/references/agentic-qe/qe-ref-tdd-london-chicago/schemas/output.json

@@ -0,0 +1,444 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentic-qe.dev/schemas/tdd-london-chicago-output.json",
+  "title": "TDD London & Chicago Schools Skill Output Schema",
+  "description": "Schema for TDD skill output with red-green-refactor cycles, test-first metrics, and approach comparison.",
+  "type": "object",
+  "required": ["skillName", "version", "timestamp", "status", "trustTier", "output"],
+  "properties": {
+    "skillName": {
+      "type": "string",
+      "const": "tdd-london-chicago",
+      "description": "Must be 'tdd-london-chicago'"
+    },
+    "version": {
+      "type": "string",
+      "pattern": "^\\d+\\.\\d+\\.\\d+(-[a-zA-Z0-9]+)?$"
+    },
+    "timestamp": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "status": {
+      "type": "string",
+      "enum": ["success", "partial", "failed", "skipped"]
+    },
+    "trustTier": {
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 3
+    },
+    "output": {
+      "type": "object",
+      "required": ["summary", "tddCycles", "approach"],
+      "properties": {
+        "summary": {
+          "type": "string",
+          "minLength": 50,
+          "maxLength": 2000
+        },
+        "tddCycles": {
+          "$ref": "#/$defs/tddCycles"
+        },
+        "approach": {
+          "$ref": "#/$defs/tddApproach"
+        },
+        "testMetrics": {
+          "$ref": "#/$defs/testMetrics"
+        },
+        "codeQuality": {
+          "$ref": "#/$defs/codeQuality"
+        },
+        "findings": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/finding"
+          },
+          "maxItems": 100
+        },
+        "recommendations": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/recommendation"
+          },
+          "maxItems": 50
+        },
+        "artifacts": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/artifact"
+          }
+        }
+      }
+    },
+    "metadata": {
+      "$ref": "#/$defs/metadata"
+    },
+    "validation": {
+      "$ref": "#/$defs/validationResult"
+    },
+    "learning": {
+      "$ref": "#/$defs/learningData"
+    }
+  },
+  "$defs": {
+    "tddCycles": {
+      "type": "object",
+      "required": ["totalCycles", "completedCycles"],
+      "properties": {
+        "totalCycles": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Total red-green-refactor cycles"
+        },
+        "completedCycles": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Successfully completed cycles"
+        },
+        "redPhases": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Number of red phases (failing tests)"
+        },
+        "greenPhases": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Number of green phases (passing tests)"
+        },
+        "refactorPhases": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Number of refactor phases"
+        },
+        "averageCycleDuration": {
+          "type": "number",
+          "minimum": 0,
+          "description": "Average cycle duration in milliseconds"
+        },
+        "cycleDetails": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "cycleNumber": {
+                "type": "integer",
+                "minimum": 1
+              },
+              "phase": {
+                "type": "string",
+                "enum": ["red", "green", "refactor"]
+              },
+              "duration": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "testsWritten": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "codeChanges": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "status": {
+                "type": "string",
+                "enum": ["completed", "in-progress", "failed", "skipped"]
+              }
+            }
+          }
+        },
+        "testFirstRatio": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100,
+          "description": "Percentage of tests written before implementation"
+        }
+      }
+    },
+    "tddApproach": {
+      "type": "object",
+      "required": ["school", "justification"],
+      "properties": {
+        "school": {
+          "type": "string",
+          "enum": ["london", "chicago", "hybrid"],
+          "description": "TDD school used"
+        },
+        "justification": {
+          "type": "string",
+          "maxLength": 1000,
+          "description": "Why this approach was chosen"
+        },
+        "londonMetrics": {
+          "type": "object",
+          "properties": {
+            "mockCount": {
+              "type": "integer",
+              "minimum": 0
+            },
+            "stubCount": {
+              "type": "integer",
+              "minimum": 0
+            },
+            "isolationLevel": {
+              "type": "string",
+              "enum": ["full", "partial", "minimal"]
+            },
+            "outsideInScore": {
+              "type": "number",
+              "minimum": 0,
+              "maximum": 100
+            }
+          }
+        },
+        "chicagoMetrics": {
+          "type": "object",
+          "properties": {
+            "integrationTests": {
+              "type": "integer",
+              "minimum": 0
+            },
+            "realCollaborators": {
+              "type": "integer",
+              "minimum": 0
+            },
+            "triangulation": {
+              "type": "boolean"
+            },
+            "insideOutScore": {
+              "type": "number",
+              "minimum": 0,
+              "maximum": 100
+            }
+          }
+        },
+        "comparison": {
+          "type": "object",
+          "properties": {
+            "testMaintainability": {
+              "type": "string",
+              "enum": ["london-better", "chicago-better", "equal"]
+            },
+            "designFeedback": {
+              "type": "string",
+              "enum": ["london-better", "chicago-better", "equal"]
+            },
+            "refactoringEase": {
+              "type": "string",
+              "enum": ["london-better", "chicago-better", "equal"]
+            }
+          }
+        }
+      }
+    },
+    "testMetrics": {
+      "type": "object",
+      "properties": {
+        "totalTests": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "unitTests": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "integrationTests": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "passing": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "failing": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "coverage": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100
+        },
+        "branchCoverage": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100
+        },
+        "mutationScore": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100
+        },
+        "testExecutionTime": {
+          "type": "integer",
+          "minimum": 0
+        }
+      }
+    },
+    "codeQuality": {
+      "type": "object",
+      "properties": {
+        "qualityScore": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100
+        },
+        "cyclomaticComplexity": {
+          "type": "number",
+          "minimum": 0
+        },
+        "linesOfCode": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "testToCodeRatio": {
+          "type": "number",
+          "minimum": 0
+        },
+        "duplications": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 100
+        },
+        "designPatterns": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "required": ["id", "title", "severity", "category"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^TDD-\\d{3,6}$"
+        },
+        "title": {
+          "type": "string",
+          "minLength": 10,
+          "maxLength": 200
+        },
+        "description": {
+          "type": "string",
+          "maxLength": 2000
+        },
+        "severity": {
+          "type": "string",
+          "enum": ["critical", "high", "medium", "low", "info"]
+        },
+        "category": {
+          "type": "string",
+          "enum": ["cycle", "coverage", "design", "mocking", "isolation", "refactoring"]
+        },
+        "phase": {
+          "type": "string",
+          "enum": ["red", "green", "refactor"]
+        },
+        "remediation": {
+          "type": "string"
+        }
+      }
+    },
+    "recommendation": {
+      "type": "object",
+      "required": ["id", "title", "priority"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^REC-\\d{3,6}$"
+        },
+        "title": {
+          "type": "string"
+        },
+        "description": {
+          "type": "string"
+        },
+        "priority": {
+          "type": "string",
+          "enum": ["critical", "high", "medium", "low"]
+        },
+        "effort": {
+          "type": "string",
+          "enum": ["trivial", "low", "medium", "high", "major"]
+        },
+        "school": {
+          "type": "string",
+          "enum": ["london", "chicago", "both"]
+        }
+      }
+    },
+    "artifact": {
+      "type": "object",
+      "required": ["type", "path"],
+      "properties": {
+        "type": {
+          "type": "string",
+          "enum": ["test", "report", "coverage", "code"]
+        },
+        "path": {
+          "type": "string"
+        },
+        "format": {
+          "type": "string"
+        }
+      }
+    },
+    "metadata": {
+      "type": "object",
+      "properties": {
+        "executionTimeMs": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "toolsUsed": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "agentId": {
+          "type": "string"
+        },
+        "testFramework": {
+          "type": "string"
+        }
+      }
+    },
+    "validationResult": {
+      "type": "object",
+      "properties": {
+        "schemaValid": {
+          "type": "boolean"
+        },
+        "contentValid": {
+          "type": "boolean"
+        },
+        "confidence": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 1
+        }
+      }
+    },
+    "learningData": {
+      "type": "object",
+      "properties": {
+        "patternsDetected": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "reward": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 1
+        }
+      }
+    }
+  }
+}

package/templates/.claude/skills/feature-adr/references/agentic-qe/qe-ref-tdd-london-chicago/scripts/validate-config.json

@@ -0,0 +1,43 @@
+{
+  "skillName": "tdd-london-chicago",
+  "skillVersion": "1.0.0",
+  "requiredTools": [
+    "jq"
+  ],
+  "optionalTools": [],
+  "schemaPath": "schemas/output.json",
+  "requiredFields": [
+    "skillName",
+    "status",
+    "output",
+    "output.summary",
+    "output.tddCycles",
+    "output.approach"
+  ],
+  "requiredNonEmptyFields": [],
+  "mustContainTerms": [
+    "tdd",
+    "test",
+    "red",
+    "green",
+    "refactor"
+  ],
+  "mustNotContainTerms": [
+    "TODO",
+    "FIXME",
+    "placeholder"
+  ],
+  "enumValidations": {
+    ".status": [
+      "success",
+      "partial",
+      "failed",
+      "skipped"
+    ],
+    ".output.approach.school": [
+      "london",
+      "chicago",
+      "hybrid"
+    ]
+  }
+}