claude-flow-novice 2.15.2 → 2.15.4

package/claude-assets/skills/cfn-test-runner/detect-regressions.sh.backup-1763392821

@@ -0,0 +1,55 @@
+#!/bin/bash
+# Detect test regressions
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)"
+DB_FILE="$PROJECT_ROOT/.artifacts/test-benchmarks.db"
+
+THRESHOLD=0.10
+
+while [[ $# -gt 0 ]]; do
+  case $1 in
+    --threshold) THRESHOLD="$2"; shift 2 ;;
+    *) shift ;;
+  esac
+done
+
+# Get latest run
+LATEST_RUN=$(sqlite3 "$DB_FILE" "SELECT id FROM test_runs ORDER BY run_timestamp DESC LIMIT 1")
+
+if [ -z "$LATEST_RUN" ]; then
+  echo "No test runs found"
+  exit 0
+fi
+
+# Get baseline (average of last 10 runs excluding latest)
+BASELINE_SUCCESS_RATE=$(sqlite3 "$DB_FILE" "
+  SELECT AVG(success_rate) FROM (
+    SELECT success_rate FROM test_runs 
+    WHERE id != $LATEST_RUN 
+    ORDER BY run_timestamp DESC 
+    LIMIT 10
+  )
+")
+
+LATEST_SUCCESS_RATE=$(sqlite3 "$DB_FILE" "SELECT success_rate FROM test_runs WHERE id = $LATEST_RUN")
+
+# Check for regression
+REGRESSION=$(awk "BEGIN {print ($BASELINE_SUCCESS_RATE - $LATEST_SUCCESS_RATE) > $THRESHOLD}")
+
+if [ "$REGRESSION" = "1" ]; then
+  DIFF=$(awk "BEGIN {printf \"%.1f\", ($BASELINE_SUCCESS_RATE - $LATEST_SUCCESS_RATE) * 100}")
+  
+  sqlite3 "$DB_FILE" << EOFSQL
+INSERT INTO regression_alerts (run_id, alert_type, severity, message)
+VALUES ($LATEST_RUN, 'success_rate_drop', 'warning', 
+        'Success rate dropped ${DIFF}% (baseline: ${BASELINE_SUCCESS_RATE}, current: ${LATEST_SUCCESS_RATE})');
+EOFSQL
+  
+  echo "⚠️  Regression detected: Success rate dropped ${DIFF}%"
+  exit 1
+fi
+
+echo "✅ No regressions detected"
+exit 0

package/claude-assets/skills/cfn-test-runner/store-benchmarks.sh

@@ -1,10 +1,15 @@
 #!/bin/bash
 # Store test benchmarks in SQLite
+# SECURITY: Uses Pattern B parameterized queries to prevent SQL injection
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PROJECT_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)"
-DB_FILE="$PROJECT_ROOT/.artifacts/test-benchmarks.db"
+# Allow DB_FILE override for testing (security: prevents modification of production DB during tests)
+DB_FILE="${DB_FILE:-$PROJECT_ROOT/.artifacts/test-benchmarks.db}"
+
+# Source sqlite parameter binding library
+source "$PROJECT_ROOT/.claude/skills/bootstrap/sqlite-params.sh"
 
 # Parse arguments
 SUITE=""
@@ -32,24 +37,17 @@ done
 
 SUCCESS_RATE=$(awk "BEGIN {printf \"%.4f\", ($PASSED / $TOTAL)}")
 
-# Get or create suite ID
-SUITE_ID=$(sqlite3 "$DB_FILE" "SELECT id FROM test_suites WHERE name='$SUITE'")
+# Get or create suite ID using parameterized query (Pattern B)
+SUITE_ID=$(sqlite_select "$DB_FILE" "SELECT id FROM test_suites WHERE name = ?1" "$SUITE")
 if [ -z "$SUITE_ID" ]; then
-  sqlite3 "$DB_FILE" "INSERT INTO test_suites (name) VALUES ('$SUITE')"
-  SUITE_ID=$(sqlite3 "$DB_FILE" "SELECT last_insert_rowid()")
+  sqlite_insert "$DB_FILE" "INSERT INTO test_suites (name) VALUES (?1)" "$SUITE"
+  SUITE_ID=$(sqlite_select "$DB_FILE" "SELECT last_insert_rowid()")
 fi
 
-# Insert test run
-sqlite3 "$DB_FILE" << EOFSQL
-INSERT INTO test_runs (
-  suite_id, git_commit, git_branch, 
-  total_tests, passed, failed, skipped, 
-  duration_seconds, success_rate
-) VALUES (
-  $SUITE_ID, '$COMMIT', '$BRANCH',
-  $TOTAL, $PASSED, $FAILED, $SKIPPED,
-  $DURATION, $SUCCESS_RATE
-);
-EOFSQL
-
-echo "✅ Benchmark stored (run_id: $(sqlite3 "$DB_FILE" "SELECT last_insert_rowid()"))"
+# Insert test run using parameterized query (Pattern B)
+sqlite_insert "$DB_FILE" \
+  "INSERT INTO test_runs (suite_id, git_commit, git_branch, total_tests, passed, failed, skipped, duration_seconds, success_rate) VALUES (?1, ?2, ?3, ?4, ?5, ?6, ?7, ?8, ?9)" \
+  "$SUITE_ID" "$COMMIT" "$BRANCH" "$TOTAL" "$PASSED" "$FAILED" "$SKIPPED" "$DURATION" "$SUCCESS_RATE"
+
+RUN_ID=$(sqlite_select "$DB_FILE" "SELECT last_insert_rowid()")
+echo "✅ Benchmark stored (run_id: $RUN_ID)"

package/claude-assets/skills/cfn-transparency-middleware/middleware-config.sh

@@ -1,29 +1,29 @@
-#!/bin/bash
-
-# Transparency Middleware Configuration
-# Version: 1.0.0
-
-# Redis Configuration
-export REDIS_HOST="${REDIS_HOST:-localhost}"
-export REDIS_PORT="${REDIS_PORT:-6379}"
-
-# Transparency Levels
-TRANSPARENCY_LEVELS=(
-    "minimal"    # Minimal logging, low overhead
-    "detailed"   # Standard operational insights
-    "verbose"    # Comprehensive logging
-    "debug"      # Maximum verbosity and tracing
-)
-
-# Performance Thresholds
-export MAX_OVERHEAD_PERCENTAGE=5
-export MAX_MESSAGE_LATENCY_MS=50
-export MAX_MEMORY_USAGE_MB=10
-
-# Logging Configuration
-export LOG_RETENTION_DAYS=7
-export LOG_MAX_SIZE_MB=100
-
-# Test-specific Configuration
-export TEST_TIMEOUT_SECONDS=30
+#!/bin/bash
+
+# Transparency Middleware Configuration
+# Version: 1.0.0
+
+# Redis Configuration
+export REDIS_HOST="${REDIS_HOST:-localhost}"
+export REDIS_PORT="${REDIS_PORT:-6379}"
+
+# Transparency Levels
+TRANSPARENCY_LEVELS=(
+    "minimal"    # Minimal logging, low overhead
+    "detailed"   # Standard operational insights
+    "verbose"    # Comprehensive logging
+    "debug"      # Maximum verbosity and tracing
+)
+
+# Performance Thresholds
+export MAX_OVERHEAD_PERCENTAGE=5
+export MAX_MESSAGE_LATENCY_MS=50
+export MAX_MEMORY_USAGE_MB=10
+
+# Logging Configuration
+export LOG_RETENTION_DAYS=7
+export LOG_MAX_SIZE_MB=100
+
+# Test-specific Configuration
+export TEST_TIMEOUT_SECONDS=30
 export TEST_MESSAGE_COUNT=1000

package/claude-assets/skills/cfn-transparency-middleware/performance-benchmark.sh

@@ -1,79 +1,79 @@
-#!/bin/bash
-
-# Performance Benchmarking for Transparency Middleware
-# Version: 1.0.0
-# Measures message throughput, overhead, and memory usage
-
-set -euo pipefail
-
-# Source configuration
-source .claude/skills/cfn-transparency-middleware/middleware-config.sh
-
-# Benchmarking results file
-BENCHMARK_RESULTS="/tmp/transparency_benchmark_$(date +%Y%m%d_%H%M%S).json"
-
-# Performance Test Parameters
-TOTAL_MESSAGES=10000
-CONCURRENCY_LEVELS=(1 10 100)
-
-measure_performance() {
-    local concurrency="$1"
-    local start_time=$(date +%s.%N)
-    local peak_memory=0
-    local total_cpu_usage=0
-
-    # Simulate message processing
-    for ((i=0; i<TOTAL_MESSAGES; i++)); do
-        ./invoke-transparency-middleware.sh process \
-            --concurrency "$concurrency" \
-            --message-id "$i" &
-    done
-
-    wait
-
-    local end_time=$(date +%s.%N)
-    local duration=$(echo "$end_time - $start_time" | bc)
-    local messages_per_second=$(echo "$TOTAL_MESSAGES / $duration" | bc)
-
-    # Record performance metrics
-    jq -n \
-        --arg concurrency "$concurrency" \
-        --arg messages_total "$TOTAL_MESSAGES" \
-        --arg duration "$duration" \
-        --arg messages_per_second "$messages_per_second" \
-        '{
-            "concurrency": $concurrency,
-            "total_messages": $messages_total,
-            "duration_seconds": $duration,
-            "messages_per_second": $messages_per_second
-        }' > "$BENCHMARK_RESULTS"
-
-    # Validate performance
-    validate_performance "$messages_per_second"
-}
-
-validate_performance() {
-    local messages_per_second="$1"
-    local max_threshold=5000  # Adjust based on your system capabilities
-
-    if (( $(echo "$messages_per_second < $max_threshold" | bc -l) )); then
-        echo "Performance Test PASSED"
-        redis-cli publish "swarm:sprint-1.2:performance" "benchmark_passed:1.0"
-    else
-        echo "Performance Test FAILED"
-        redis-cli publish "swarm:sprint-1.2:performance" "benchmark_failed:0.0"
-        exit 1
-    fi
-}
-
-main() {
-    echo "Starting Transparency Middleware Performance Benchmarks"
-
-    for concurrency in "${CONCURRENCY_LEVELS[@]}"; do
-        measure_performance "$concurrency"
-    done
-
-    cat "$BENCHMARK_RESULTS"
-}
-
+#!/bin/bash
+
+# Performance Benchmarking for Transparency Middleware
+# Version: 1.0.0
+# Measures message throughput, overhead, and memory usage
+
+set -euo pipefail
+
+# Source configuration
+source .claude/skills/cfn-transparency-middleware/middleware-config.sh
+
+# Benchmarking results file
+BENCHMARK_RESULTS="/tmp/transparency_benchmark_$(date +%Y%m%d_%H%M%S).json"
+
+# Performance Test Parameters
+TOTAL_MESSAGES=10000
+CONCURRENCY_LEVELS=(1 10 100)
+
+measure_performance() {
+    local concurrency="$1"
+    local start_time=$(date +%s.%N)
+    local peak_memory=0
+    local total_cpu_usage=0
+
+    # Simulate message processing
+    for ((i=0; i<TOTAL_MESSAGES; i++)); do
+        ./invoke-transparency-middleware.sh process \
+            --concurrency "$concurrency" \
+            --message-id "$i" &
+    done
+
+    wait
+
+    local end_time=$(date +%s.%N)
+    local duration=$(echo "$end_time - $start_time" | bc)
+    local messages_per_second=$(echo "$TOTAL_MESSAGES / $duration" | bc)
+
+    # Record performance metrics
+    jq -n \
+        --arg concurrency "$concurrency" \
+        --arg messages_total "$TOTAL_MESSAGES" \
+        --arg duration "$duration" \
+        --arg messages_per_second "$messages_per_second" \
+        '{
+            "concurrency": $concurrency,
+            "total_messages": $messages_total,
+            "duration_seconds": $duration,
+            "messages_per_second": $messages_per_second
+        }' > "$BENCHMARK_RESULTS"
+
+    # Validate performance
+    validate_performance "$messages_per_second"
+}
+
+validate_performance() {
+    local messages_per_second="$1"
+    local max_threshold=5000  # Adjust based on your system capabilities
+
+    if (( $(echo "$messages_per_second < $max_threshold" | bc -l) )); then
+        echo "Performance Test PASSED"
+        redis-cli publish "swarm:sprint-1.2:performance" "benchmark_passed:1.0"
+    else
+        echo "Performance Test FAILED"
+        redis-cli publish "swarm:sprint-1.2:performance" "benchmark_failed:0.0"
+        exit 1
+    fi
+}
+
+main() {
+    echo "Starting Transparency Middleware Performance Benchmarks"
+
+    for concurrency in "${CONCURRENCY_LEVELS[@]}"; do
+        measure_performance "$concurrency"
+    done
+
+    cat "$BENCHMARK_RESULTS"
+}
+
 main

package/claude-assets/skills/cfn-transparency-middleware/test-e2e.sh

@@ -4,6 +4,21 @@
 
 set -euo pipefail
 
+# Input validation (SQL injection prevention)
+validate_identifier() {
+    local input="$1"
+    local max_length="${2:-255}"
+    if ! [[ "$input" =~ ^[a-zA-Z0-9_-]+$ ]]; then
+        echo "ERROR: Invalid identifier (alphanumeric + underscore/hyphen only): $input" >&2
+        return 1
+    fi
+    if [ ${#input} -gt $max_length ]; then
+        echo "ERROR: Identifier exceeds max length ($max_length chars)" >&2
+        return 1
+    fi
+    return 0
+}
+
 # Test configuration
 TEST_TASK_ID="e2e-test-$(date +%s)"
 TEST_AGENT_ID="backend-dev-e2e"