claude-flow-novice 2.10.5 → 2.10.7

package/claude-assets/skills/cfn-hook-pipeline/feedback-resolver.sh

@@ -0,0 +1,452 @@
+#!/bin/bash
+
+# Feedback Resolver - Sprint 2.2
+# Intelligent feedback resolution with auto-fix capabilities
+#
+# Usage:
+#   ./feedback-resolver.sh [--type TYPE] [--auto-resolve] [--resolve-last] [--edit-id ID]
+#
+# Examples:
+#   ./feedback-resolver.sh --resolve-last
+#   ./feedback-resolver.sh --type ROOT_WARNING --auto-resolve
+#   ./feedback-resolver.sh --edit-id "edit-1729123456789-abc123"
+
+set -euo pipefail
+
+# Parse arguments
+FEEDBACK_TYPE=""
+AUTO_RESOLVE=false
+RESOLVE_LAST=false
+EDIT_ID=""
+FEEDBACK_FILE=""
+
+while [[ $# -gt 0 ]]; do
+    case $1 in
+        --type)
+            FEEDBACK_TYPE="$2"
+            shift 2
+            ;;
+        --auto-resolve)
+            AUTO_RESOLVE=true
+            shift
+            ;;
+        --resolve-last)
+            RESOLVE_LAST=true
+            shift
+            ;;
+        --edit-id)
+            EDIT_ID="$2"
+            shift 2
+            ;;
+        *)
+            if [ -z "$FEEDBACK_FILE" ]; then
+                FEEDBACK_FILE="$1"
+            fi
+            shift
+            ;;
+    esac
+done
+
+# Determine feedback file to process
+FEEDBACK_DIR=".artifacts/feedback"
+
+if [ "$RESOLVE_LAST" = true ]; then
+    # Find most recent pending feedback file
+    FEEDBACK_FILE=$(find "$FEEDBACK_DIR" -name "pending-*.json" -type f -printf '%T@ %p\n' 2>/dev/null | sort -rn | head -1 | cut -d' ' -f2-)
+    if [ -z "$FEEDBACK_FILE" ]; then
+        echo "No pending feedback found"
+        exit 0
+    fi
+    echo "Resolving most recent feedback: $FEEDBACK_FILE"
+elif [ -n "$EDIT_ID" ]; then
+    # Search for feedback by edit ID
+    FEEDBACK_FILE=$(grep -l "\"editId\": \"$EDIT_ID\"" "$FEEDBACK_DIR"/pending-*.json 2>/dev/null | head -1)
+    if [ -z "$FEEDBACK_FILE" ]; then
+        echo "No feedback found for edit ID: $EDIT_ID"
+        exit 1
+    fi
+    echo "Resolving feedback for edit ID: $EDIT_ID"
+elif [ -n "$FEEDBACK_TYPE" ]; then
+    # Use type-specific file
+    FEEDBACK_FILE="$FEEDBACK_DIR/pending-${FEEDBACK_TYPE,,}.json"
+    if [ ! -f "$FEEDBACK_FILE" ]; then
+        FEEDBACK_FILE="$FEEDBACK_DIR/pending-$(echo "$FEEDBACK_TYPE" | tr '[:upper:]' '[:lower:]' | tr '_' '-').json"
+    fi
+elif [ -z "$FEEDBACK_FILE" ]; then
+    # Default to root warning
+    FEEDBACK_FILE="$FEEDBACK_DIR/pending-root-warning.json"
+fi
+
+# Validate feedback file exists
+if [ ! -f "$FEEDBACK_FILE" ]; then
+    echo "Feedback file not found: $FEEDBACK_FILE"
+    echo "Available feedback files:"
+    find "$FEEDBACK_DIR" -name "pending-*.json" -type f 2>/dev/null || echo "  (none)"
+    exit 1
+fi
+
+echo "Processing feedback: $FEEDBACK_FILE"
+
+# Extract feedback details
+STATUS=$(jq -r '.status // .type // "UNKNOWN"' "$FEEDBACK_FILE")
+FILE_PATH=$(jq -r '.file // ""' "$FEEDBACK_FILE")
+TIMESTAMP=$(jq -r '.timestamp // ""' "$FEEDBACK_FILE")
+
+echo "Feedback type: $STATUS"
+echo "File: $FILE_PATH"
+echo "Timestamp: $TIMESTAMP"
+echo ""
+
+# Resolution functions
+resolve_root_warning() {
+    local suggestions=$(jq -r '.rootWarning.suggestions // .suggestions // []' "$FEEDBACK_FILE")
+    local suggested_location=$(echo "$suggestions" | jq -r '.[0].location // ""')
+    local reason=$(echo "$suggestions" | jq -r '.[0].reason // ""')
+
+    if [ -z "$suggested_location" ]; then
+        echo "❌ No suggested location found in feedback"
+        return 1
+    fi
+
+    if [ ! -f "$FILE_PATH" ]; then
+        echo "❌ Source file not found: $FILE_PATH"
+        return 1
+    fi
+
+    echo "📦 ROOT_WARNING Auto-Resolution"
+    echo "   Moving: $FILE_PATH"
+    echo "   To: $suggested_location"
+    echo "   Reason: $reason"
+    echo ""
+
+    # Create target directory
+    mkdir -p "$(dirname "$suggested_location")"
+
+    # Move file
+    mv "$FILE_PATH" "$suggested_location"
+    echo "✅ File moved successfully"
+
+    # Re-run hook validation on new location
+    echo ""
+    echo "🔍 Re-validating at new location..."
+    if node config/hooks/post-edit-pipeline.js "$suggested_location" >/dev/null 2>&1; then
+        echo "✅ Validation passed"
+        return 0
+    else
+        echo "⚠️  Validation failed - may require additional fixes"
+        return 0  # Still consider ROOT_WARNING resolved
+    fi
+}
+
+handle_tdd_violation() {
+    local has_tests=$(jq -r '.hasTests // false' "$FEEDBACK_FILE")
+    local test_file=$(jq -r '.testFile // ""' "$FEEDBACK_FILE")
+    local recommendations=$(jq -r '.recommendations // []' "$FEEDBACK_FILE")
+
+    echo "🧪 TDD_VIOLATION Semi-Auto Resolution"
+    echo "   Has tests: $has_tests"
+    echo "   Test file: $test_file"
+    echo ""
+
+    if [ "$has_tests" = "false" ] || [ -z "$test_file" ]; then
+        # Generate test file template
+        local ext="${FILE_PATH##*.}"
+        local base_name=$(basename "$FILE_PATH" ".$ext")
+        local dir_name=$(dirname "$FILE_PATH")
+
+        # Determine test file name based on extension
+        case "$ext" in
+            js|jsx)
+                test_file="${dir_name}/${base_name}.test.js"
+                ;;
+            ts|tsx)
+                test_file="${dir_name}/${base_name}.test.ts"
+                ;;
+            py)
+                test_file="${dir_name}/test_${base_name}.py"
+                ;;
+            go)
+                test_file="${dir_name}/${base_name}_test.go"
+                ;;
+            rs)
+                # Rust tests are usually in the same file
+                echo "⚠️  Rust uses inline tests - add #[cfg(test)] module to: $FILE_PATH"
+                return 0
+                ;;
+            *)
+                echo "⚠️  Unknown file type: $ext - manual test creation required"
+                return 1
+                ;;
+        esac
+
+        if [ -f "$test_file" ]; then
+            echo "⚠️  Test file already exists: $test_file"
+            echo "   Manual review required"
+            return 0
+        fi
+
+        echo "📝 Generating test template: $test_file"
+
+        # Generate test template based on language
+        case "$ext" in
+            js|jsx|ts|tsx)
+                cat > "$test_file" <<EOF
+import { describe, it, expect } from 'vitest';
+// TODO: Import functions from $(basename "$FILE_PATH")
+// import { functionName } from './$(basename "$FILE_PATH")';
+
+describe('$(basename "$FILE_PATH" ".$ext")', () => {
+    it('should pass basic test', () => {
+        // TODO: Write test implementation
+        expect(true).toBe(true);
+    });
+
+    // TODO: Add more test cases
+});
+EOF
+                ;;
+            py)
+                cat > "$test_file" <<EOF
+import pytest
+# TODO: Import functions from $(basename "$FILE_PATH")
+# from $(basename "$FILE_PATH" .py) import function_name
+
+def test_basic():
+    """Basic test case"""
+    # TODO: Write test implementation
+    assert True
+
+# TODO: Add more test cases
+EOF
+                ;;
+            go)
+                cat > "$test_file" <<EOF
+package $(basename "$dir_name")
+
+import "testing"
+
+// TODO: Add test cases
+func TestBasic(t *testing.T) {
+    // TODO: Write test implementation
+    if true != true {
+        t.Error("Basic test failed")
+    }
+}
+EOF
+                ;;
+        esac
+
+        echo "✅ Test template created"
+        echo ""
+        echo "⚠️  MANUAL ACTION REQUIRED:"
+        echo "   1. Complete test implementation in: $test_file"
+        echo "   2. Run tests: npm test $test_file"
+        echo "   3. Verify tests pass before continuing"
+
+        return 0
+    else
+        echo "⚠️  Test file exists but may be incomplete"
+        echo "   Review recommendations:"
+        echo "$recommendations" | jq -r '.[] | "   - \(.message // .type)"'
+        return 0
+    fi
+}
+
+resolve_low_coverage() {
+    local current=$(jq -r '.current // 0' "$FEEDBACK_FILE")
+    local required=$(jq -r '.required // 80' "$FEEDBACK_FILE")
+    local uncovered=$(jq -r '.uncovered // []' "$FEEDBACK_FILE")
+
+    echo "📊 LOW_COVERAGE Semi-Auto Resolution"
+    echo "   Current coverage: $current%"
+    echo "   Required coverage: $required%"
+    echo "   Gap: $((required - current))%"
+    echo ""
+
+    echo "🔍 Analyzing uncovered code paths..."
+    if [ "$uncovered" != "[]" ]; then
+        echo "$uncovered" | jq -r '.[] | "   Line \(.line): \(.code)"'
+    else
+        echo "   Run: npm test -- --coverage $FILE_PATH"
+        echo "   to identify uncovered lines"
+    fi
+
+    echo ""
+    echo "⚠️  MANUAL ACTION REQUIRED:"
+    echo "   1. Review uncovered lines above"
+    echo "   2. Add test cases for uncovered code paths"
+    echo "   3. Run: npm test -- --coverage"
+    echo "   4. Verify coverage meets threshold: $required%"
+
+    return 0
+}
+
+auto_rust_quality() {
+    local issues=$(jq -r '.issues // []' "$FEEDBACK_FILE")
+    local issue_count=$(echo "$issues" | jq -r 'length')
+
+    echo "🦀 RUST_QUALITY Auto-Resolution"
+    echo "   Issues found: $issue_count"
+    echo ""
+
+    if [ ! -f "Cargo.toml" ]; then
+        echo "❌ Not a Rust project (Cargo.toml not found)"
+        return 1
+    fi
+
+    echo "🔧 Running cargo fmt..."
+    if cargo fmt 2>&1; then
+        echo "✅ Formatting complete"
+    else
+        echo "⚠️  Formatting failed - manual review required"
+    fi
+
+    echo ""
+    echo "🔍 Running cargo clippy --fix..."
+    if cargo clippy --fix --allow-dirty --allow-staged 2>&1; then
+        echo "✅ Clippy auto-fixes applied"
+    else
+        echo "⚠️  Some clippy issues require manual fixes"
+    fi
+
+    echo ""
+    echo "🔍 Re-validating..."
+    if node config/hooks/post-edit-pipeline.js "$FILE_PATH" >/dev/null 2>&1; then
+        echo "✅ Validation passed"
+        return 0
+    else
+        echo "⚠️  Validation failed - manual review required"
+        return 1
+    fi
+}
+
+resolve_lint_issues() {
+    local linter=$(jq -r '.linter // "unknown"' "$FEEDBACK_FILE")
+    local issues=$(jq -r '.issues // ""' "$FEEDBACK_FILE")
+
+    echo "🔍 LINT_ISSUES Auto-Resolution"
+    echo "   Linter: $linter"
+    echo ""
+
+    local ext="${FILE_PATH##*.}"
+
+    case "$ext" in
+        js|jsx|ts|tsx)
+            echo "🔧 Running eslint --fix..."
+            if npx eslint --fix "$FILE_PATH" 2>&1; then
+                echo "✅ ESLint auto-fixes applied"
+            else
+                echo "⚠️  Some ESLint issues require manual fixes"
+            fi
+
+            echo ""
+            echo "🔧 Running prettier --write..."
+            if npx prettier --write "$FILE_PATH" 2>&1; then
+                echo "✅ Prettier formatting applied"
+            else
+                echo "⚠️  Prettier failed - check configuration"
+            fi
+            ;;
+        py)
+            echo "🔧 Running black..."
+            if python -m black "$FILE_PATH" 2>&1; then
+                echo "✅ Black formatting applied"
+            else
+                echo "⚠️  Black not available - install with: pip install black"
+            fi
+            ;;
+        *)
+            echo "⚠️  No auto-fix available for file type: $ext"
+            return 1
+            ;;
+    esac
+
+    echo ""
+    echo "🔍 Re-validating..."
+    if node config/hooks/post-edit-pipeline.js "$FILE_PATH" >/dev/null 2>&1; then
+        echo "✅ Validation passed"
+        return 0
+    else
+        echo "⚠️  Some issues remain - manual review required"
+        return 1
+    fi
+}
+
+# Main resolution logic
+RESOLVED=false
+
+case "$STATUS" in
+    "ROOT_WARNING")
+        if [ "$AUTO_RESOLVE" = true ] || [ "$RESOLVE_LAST" = true ]; then
+            if resolve_root_warning; then
+                RESOLVED=true
+            fi
+        else
+            echo "⚠️  Auto-resolve not enabled"
+            echo "   Run with --auto-resolve to move file automatically"
+            echo "   Suggested location: $(jq -r '.rootWarning.suggestions[0].location // ""' "$FEEDBACK_FILE")"
+        fi
+        ;;
+    "TDD_VIOLATION")
+        if handle_tdd_violation; then
+            RESOLVED=true
+        fi
+        ;;
+    "LOW_COVERAGE")
+        if resolve_low_coverage; then
+            RESOLVED=true
+        fi
+        ;;
+    "RUST_QUALITY")
+        if [ "$AUTO_RESOLVE" = true ] || [ "$RESOLVE_LAST" = true ]; then
+            if auto_rust_quality; then
+                RESOLVED=true
+            fi
+        else
+            echo "⚠️  Auto-resolve not enabled"
+            echo "   Run with --auto-resolve to apply cargo fmt and clippy --fix"
+        fi
+        ;;
+    "LINT_ISSUES")
+        if [ "$AUTO_RESOLVE" = true ] || [ "$RESOLVE_LAST" = true ]; then
+            if resolve_lint_issues; then
+                RESOLVED=true
+            fi
+        else
+            echo "⚠️  Auto-resolve not enabled"
+            echo "   Run with --auto-resolve to apply linter auto-fixes"
+        fi
+        ;;
+    *)
+        echo "❌ Unhandled feedback status: $STATUS"
+        exit 1
+        ;;
+esac
+
+# Cleanup and publish resolution status
+if [ "$RESOLVED" = true ]; then
+    echo ""
+    echo "✅ Feedback resolved successfully"
+
+    # Archive feedback file
+    ARCHIVE_DIR=".artifacts/feedback/archive"
+    mkdir -p "$ARCHIVE_DIR"
+    ARCHIVE_FILE="$ARCHIVE_DIR/$(basename "$FEEDBACK_FILE" .json)-$(date +%s).json"
+    mv "$FEEDBACK_FILE" "$ARCHIVE_FILE"
+    echo "📦 Feedback archived: $ARCHIVE_FILE"
+
+    # Publish resolution to Redis
+    redis-cli lpush "swarm:skills:sprint-2.2:feedback:resolutions" "{
+        \"status\": \"$STATUS\",
+        \"file\": \"$FILE_PATH\",
+        \"resolved\": true,
+        \"timestamp\": $(date +%s),
+        \"archive\": \"$ARCHIVE_FILE\"
+    }" >/dev/null 2>&1 || true
+
+    exit 0
+else
+    echo ""
+    echo "⚠️  Feedback processed but manual action may be required"
+    exit 2
+fi

package/claude-assets/skills/cfn-hook-pipeline/post-edit-handler.sh

@@ -0,0 +1,154 @@
+#!/bin/bash
+
+# Post-Edit Hook Handler - Sprint 2.2
+# Reusable wrapper for post-edit-pipeline.js with automatic feedback capture
+#
+# Usage:
+#   ./post-edit-handler.sh <file_path> [--memory-key <key>] [--agent-id <id>] [--coordinator-id <id>]
+#
+# Examples:
+#   ./post-edit-handler.sh src/example.js --memory-key "swarm/coder-1/step-2"
+#   ./post-edit-handler.sh test.js --agent-id "coder-1" --coordinator-id "coordinator-cfn"
+
+set -euo pipefail
+
+# Parse arguments
+FILE_PATH=""
+MEMORY_KEY=""
+AGENT_ID=""
+COORDINATOR_ID=""
+
+while [[ $# -gt 0 ]]; do
+    case $1 in
+        --memory-key)
+            MEMORY_KEY="$2"
+            shift 2
+            ;;
+        --agent-id)
+            AGENT_ID="$2"
+            shift 2
+            ;;
+        --coordinator-id)
+            COORDINATOR_ID="$2"
+            shift 2
+            ;;
+        *)
+            if [ -z "$FILE_PATH" ]; then
+                FILE_PATH="$1"
+            fi
+            shift
+            ;;
+    esac
+done
+
+# Validate required arguments
+if [ -z "$FILE_PATH" ]; then
+    echo "Error: File path required"
+    echo "Usage: $0 <file_path> [--memory-key <key>] [--agent-id <id>] [--coordinator-id <id>]"
+    exit 1
+fi
+
+# Auto-detect agent context from memory key if not provided
+if [ -z "$AGENT_ID" ] && [ -n "$MEMORY_KEY" ]; then
+    # Extract agent ID from memory key pattern: swarm/{agentId}/...
+    AGENT_ID=$(echo "$MEMORY_KEY" | grep -oP 'swarm/\K[^/]+' || echo "")
+fi
+
+# Set default memory key if not provided
+if [ -z "$MEMORY_KEY" ]; then
+    MEMORY_KEY="swarm/${AGENT_ID:-unknown}/hook-pipeline"
+fi
+
+# Build command arguments
+CMD_ARGS="$FILE_PATH --memory-key $MEMORY_KEY"
+if [ -n "$AGENT_ID" ]; then
+    CMD_ARGS="$CMD_ARGS --agent-id $AGENT_ID"
+fi
+if [ -n "$COORDINATOR_ID" ]; then
+    CMD_ARGS="$CMD_ARGS --coordinator-id $COORDINATOR_ID"
+fi
+
+echo "Executing post-edit pipeline: $FILE_PATH"
+echo "Memory key: $MEMORY_KEY"
+[ -n "$AGENT_ID" ] && echo "Agent ID: $AGENT_ID"
+[ -n "$COORDINATOR_ID" ] && echo "Coordinator ID: $COORDINATOR_ID"
+
+# Execute post-edit pipeline
+set +e  # Temporarily disable exit on error to capture exit code
+node config/hooks/post-edit-pipeline.js $CMD_ARGS
+EXIT_CODE=$?
+set -e  # Re-enable exit on error
+
+# Extract feedback from log
+LOG_FILE=".artifacts/logs/post-edit-pipeline.log"
+if [ ! -f "$LOG_FILE" ]; then
+    echo "Warning: Log file not found: $LOG_FILE"
+    exit $EXIT_CODE
+fi
+
+LAST_LOG_ENTRY=$(tail -n 1 "$LOG_FILE")
+STATUS=$(echo "$LAST_LOG_ENTRY" | jq -r '.status // "NO_STATUS"' 2>/dev/null || echo "NO_STATUS")
+
+echo "Validation status: $STATUS"
+
+# Handle feedback types
+case "$STATUS" in
+    "ROOT_WARNING")
+        echo "⚠️  ROOT_WARNING detected - automatic resolution available"
+        FEEDBACK_DIR=".artifacts/feedback"
+        mkdir -p "$FEEDBACK_DIR"
+        echo "$LAST_LOG_ENTRY" > "$FEEDBACK_DIR/pending-root-warning.json"
+        echo "Feedback saved to: $FEEDBACK_DIR/pending-root-warning.json"
+        echo "Run: ./claude/skills/hook-pipeline/feedback-resolver.sh --type ROOT_WARNING --auto-resolve"
+        exit 2  # Special exit code for ROOT_WARNING
+        ;;
+    "TDD_VIOLATION")
+        echo "⚠️  TDD_VIOLATION detected - test file missing or incomplete"
+        FEEDBACK_DIR=".artifacts/feedback"
+        mkdir -p "$FEEDBACK_DIR"
+        echo "$LAST_LOG_ENTRY" > "$FEEDBACK_DIR/pending-tdd-violation.json"
+        echo "Feedback saved to: $FEEDBACK_DIR/pending-tdd-violation.json"
+        echo "Run: ./claude/skills/hook-pipeline/feedback-resolver.sh --type TDD_VIOLATION"
+        exit 3  # Special exit code for TDD_VIOLATION
+        ;;
+    "LOW_COVERAGE")
+        echo "⚠️  LOW_COVERAGE detected - test coverage below threshold"
+        CURRENT=$(echo "$LAST_LOG_ENTRY" | jq -r '.current // 0')
+        REQUIRED=$(echo "$LAST_LOG_ENTRY" | jq -r '.required // 80')
+        echo "Current coverage: $CURRENT% (required: $REQUIRED%)"
+        FEEDBACK_DIR=".artifacts/feedback"
+        mkdir -p "$FEEDBACK_DIR"
+        echo "$LAST_LOG_ENTRY" > "$FEEDBACK_DIR/pending-low-coverage.json"
+        exit 4  # Special exit code for LOW_COVERAGE
+        ;;
+    "RUST_QUALITY")
+        echo "⚠️  RUST_QUALITY issues detected - run cargo clippy and rustfmt"
+        FEEDBACK_DIR=".artifacts/feedback"
+        mkdir -p "$FEEDBACK_DIR"
+        echo "$LAST_LOG_ENTRY" > "$FEEDBACK_DIR/pending-rust-quality.json"
+        echo "Run: ./claude/skills/hook-pipeline/feedback-resolver.sh --type RUST_QUALITY --auto-resolve"
+        exit 5  # Special exit code for RUST_QUALITY
+        ;;
+    "LINT_ISSUES")
+        echo "⚠️  LINT_ISSUES detected - run linter auto-fix"
+        FEEDBACK_DIR=".artifacts/feedback"
+        mkdir -p "$FEEDBACK_DIR"
+        echo "$LAST_LOG_ENTRY" > "$FEEDBACK_DIR/pending-lint-issues.json"
+        echo "Run: ./claude/skills/hook-pipeline/feedback-resolver.sh --type LINT_ISSUES --auto-resolve"
+        exit 6  # Special exit code for LINT_ISSUES
+        ;;
+    "NO_STATUS"|"SUCCESS")
+        echo "✅ Validation passed"
+        ;;
+    *)
+        echo "⚠️  Unknown status: $STATUS"
+        ;;
+esac
+
+# Publish completion to Redis (if agent context available)
+if [ -n "$AGENT_ID" ]; then
+    REDIS_CHANNEL="swarm:skills:sprint-2.2:${AGENT_ID}:hooks"
+    redis-cli lpush "$REDIS_CHANNEL" "{\"file\": \"$FILE_PATH\", \"status\": \"$STATUS\", \"timestamp\": $(date +%s)}" >/dev/null 2>&1 || true
+fi
+
+exit $EXIT_CODE

package/claude-assets/skills/cfn-hook-pipeline/security-scan.json

@@ -0,0 +1,60 @@
+{
+  "version": "1.4.0",
+  "modes": {
+    "basic": {
+      "checks": [
+        "SQL_INJECTION",
+        "XSS_VULNERABILITY",
+        "HARDCODED_SECRETS"
+      ],
+      "confidence_threshold": 70
+    },
+    "advanced": {
+      "checks": [
+        "SQL_INJECTION",
+        "XSS_VULNERABILITY",
+        "HARDCODED_SECRETS",
+        "INSECURE_DEPENDENCIES",
+        "POTENTIAL_RCE"
+      ],
+      "confidence_threshold": 85
+    },
+    "comprehensive": {
+      "checks": [
+        "SQL_INJECTION",
+        "XSS_VULNERABILITY",
+        "HARDCODED_SECRETS",
+        "INSECURE_DEPENDENCIES",
+        "POTENTIAL_RCE",
+        "DEPRECATED_CRYPTO",
+        "BUFFER_OVERFLOW"
+      ],
+      "confidence_threshold": 95
+    }
+  },
+  "patterns": {
+    "SQL_INJECTION": [
+      "(SELECT|INSERT|UPDATE|DELETE).*['\"].*['\" ]UNION|['\"]\\s*(--|#)",
+      "exec\\(.*sqlalchemy.*"
+    ],
+    "XSS_VULNERABILITY": [
+      "innerHTML\\.\\s*=",
+      "document\\.write\\(",
+      "eval\\("
+    ],
+    "HARDCODED_SECRETS": [
+      "password\\s*=\\s*['\"].*['\"]",
+      "secret_key\\s*=\\s*['\"].*['\"]",
+      "api_key\\s*=\\s*['\"].*['\"]{8,}",
+      "token\\s*=\\s*['\"].*['\"]{16,}"
+    ],
+    "INSECURE_DEPENDENCIES": [
+      "\"(version|dependencies)\":\\s*\"(<|>|<=|>=)?([0-9]+\\.){1,2}[0-9]+\""
+    ]
+  },
+  "exclusions": [
+    "/**/*.min.js",
+    "/**/*.test.js",
+    "/**/*.spec.js"
+  ]
+}