claude-flow-novice 2.3.5 → 2.3.6

package/dist/scripts/test-cleanup-performance.sh

@@ -1,416 +0,0 @@
-#!/usr/bin/env bash
-#
-# test-cleanup-performance.sh
-# Performance validation script for cleanup-blocking-coordination.sh
-#
-# This script:
-# 1. Populates Redis with 10,000 test coordinators (mix of active and stale)
-# 2. Runs cleanup with timing
-# 3. Verifies 100% stale key removal, 0% active key deletion
-# 4. Reports performance metrics
-#
-# Success criteria:
-# - <5s execution time for 10,000 coordinators
-# - 100% stale key removal (TTL > 10 minutes)
-# - 0% active key deletion (TTL < 10 minutes)
-#
-
-set -euo pipefail
-
-# ===== CONFIGURATION =====
-
-# Redis connection
-REDIS_HOST="${REDIS_HOST:-127.0.0.1}"
-REDIS_PORT="${REDIS_PORT:-6379}"
-REDIS_PASSWORD="${REDIS_PASSWORD:-}"
-REDIS_DB="${REDIS_DB:-0}"
-
-# Test parameters
-TOTAL_COORDINATORS=10000
-STALE_COORDINATOR_COUNT=9900  # 99% stale
-ACTIVE_COORDINATOR_COUNT=100  # 1% active
-STALE_THRESHOLD_SECONDS=600   # 10 minutes
-
-# Script paths
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-CLEANUP_SCRIPT="${SCRIPT_DIR}/cleanup-blocking-coordination.sh"
-
-# ===== HELPER FUNCTIONS =====
-
-# Redis command wrapper
-redis_cmd() {
-  if [ -n "${REDIS_PASSWORD}" ]; then
-    redis-cli -h "${REDIS_HOST}" -p "${REDIS_PORT}" -a "${REDIS_PASSWORD}" -n "${REDIS_DB}" "$@" 2>/dev/null
-  else
-    redis-cli -h "${REDIS_HOST}" -p "${REDIS_PORT}" -n "${REDIS_DB}" "$@" 2>/dev/null
-  fi
-}
-
-# Color output
-GREEN='\033[0;32m'
-RED='\033[0;31m'
-YELLOW='\033[1;33m'
-NC='\033[0m' # No Color
-
-log_success() {
-  echo -e "${GREEN}✓${NC} $*"
-}
-
-log_error() {
-  echo -e "${RED}✗${NC} $*"
-}
-
-log_info() {
-  echo -e "${YELLOW}→${NC} $*"
-}
-
-# Get current timestamp in milliseconds
-current_timestamp_ms() {
-  echo $(($(date +%s) * 1000))
-}
-
-# Count keys matching pattern
-count_keys() {
-  local pattern="$1"
-  local count=0
-  local cursor=0
-
-  while true; do
-    local result
-    result=$(redis_cmd SCAN "${cursor}" MATCH "${pattern}" COUNT 1000)
-    cursor=$(echo "${result}" | head -n 1)
-    local keys
-    keys=$(echo "${result}" | tail -n +2)
-
-    if [ -n "${keys}" ]; then
-      count=$((count + $(echo "${keys}" | wc -l)))
-    fi
-
-    if [ "${cursor}" = "0" ]; then
-      break
-    fi
-  done
-
-  echo "${count}"
-}
-
-# ===== TEST FUNCTIONS =====
-
-# Clean up any existing test data
-cleanup_test_data() {
-  log_info "Cleaning up any existing test data..."
-
-  local patterns=(
-    "blocking:heartbeat:test-coordinator-*"
-    "blocking:ack:test-coordinator-*"
-    "blocking:signal:test-coordinator-*"
-    "blocking:idempotency:*test-coordinator-*"
-    "coordinator:activity:test-coordinator-*"
-  )
-
-  for pattern in "${patterns[@]}"; do
-    local cursor=0
-    while true; do
-      local result
-      result=$(redis_cmd SCAN "${cursor}" MATCH "${pattern}" COUNT 1000)
-      cursor=$(echo "${result}" | head -n 1)
-      local keys
-      keys=$(echo "${result}" | tail -n +2 | tr '\n' ' ')
-
-      if [ -n "${keys}" ]; then
-        redis_cmd DEL ${keys} >/dev/null
-      fi
-
-      if [ "${cursor}" = "0" ]; then
-        break
-      fi
-    done
-  done
-
-  log_success "Test data cleaned up"
-}
-
-# Populate Redis with test coordinators
-populate_test_data() {
-  log_info "Populating Redis with ${TOTAL_COORDINATORS} test coordinators..."
-  log_info "  - ${STALE_COORDINATOR_COUNT} stale coordinators (age > 10 minutes)"
-  log_info "  - ${ACTIVE_COORDINATOR_COUNT} active coordinators (age < 10 minutes)"
-
-  local current_time_ms
-  current_time_ms=$(current_timestamp_ms)
-
-  # Stale threshold timestamp (10 minutes ago)
-  local stale_timestamp_ms=$((current_time_ms - (STALE_THRESHOLD_SECONDS * 1000) - 60000))  # 11 minutes ago
-
-  # Active timestamp (1 minute ago)
-  local active_timestamp_ms=$((current_time_ms - 60000))  # 1 minute ago
-
-  # Use batch pipeline for faster insertion
-  local batch_size=1000
-  local coordinator_id
-  local timestamp_ms
-
-  # Populate stale coordinators
-  for ((i=1; i<=STALE_COORDINATOR_COUNT; i+=batch_size)); do
-    {
-      for ((j=i; j<i+batch_size && j<=STALE_COORDINATOR_COUNT; j++)); do
-        coordinator_id="test-coordinator-stale-${j}"
-        timestamp_ms="${stale_timestamp_ms}"
-
-        # Heartbeat key
-        echo "SET blocking:heartbeat:${coordinator_id} '{\"coordinatorId\":\"${coordinator_id}\",\"timestamp\":${timestamp_ms}}'"
-
-        # ACK keys (2 per coordinator)
-        echo "SET blocking:ack:${coordinator_id}:agent-1 '1'"
-        echo "SET blocking:ack:${coordinator_id}:agent-2 '1'"
-
-        # Signal key
-        echo "SET blocking:signal:${coordinator_id} 'CONTINUE'"
-
-        # Idempotency key
-        echo "SET blocking:idempotency:${coordinator_id}:init '1'"
-
-        # Activity tracking key
-        echo "SET coordinator:activity:${coordinator_id} '${timestamp_ms}'"
-      done
-    } | redis_cmd --pipe >/dev/null
-
-    if ((i % 1000 == 0)); then
-      log_info "  Progress: ${i}/${STALE_COORDINATOR_COUNT} stale coordinators populated"
-    fi
-  done
-
-  # Populate active coordinators
-  for ((i=1; i<=ACTIVE_COORDINATOR_COUNT; i+=batch_size)); do
-    {
-      for ((j=i; j<i+batch_size && j<=ACTIVE_COORDINATOR_COUNT; j++)); do
-        coordinator_id="test-coordinator-active-${j}"
-        timestamp_ms="${active_timestamp_ms}"
-
-        # Heartbeat key
-        echo "SET blocking:heartbeat:${coordinator_id} '{\"coordinatorId\":\"${coordinator_id}\",\"timestamp\":${timestamp_ms}}'"
-
-        # ACK keys (2 per coordinator)
-        echo "SET blocking:ack:${coordinator_id}:agent-1 '1'"
-        echo "SET blocking:ack:${coordinator_id}:agent-2 '1'"
-
-        # Signal key
-        echo "SET blocking:signal:${coordinator_id} 'CONTINUE'"
-
-        # Idempotency key
-        echo "SET blocking:idempotency:${coordinator_id}:init '1'"
-
-        # Activity tracking key
-        echo "SET coordinator:activity:${coordinator_id} '${timestamp_ms}'"
-      done
-    } | redis_cmd --pipe >/dev/null
-  done
-
-  log_success "Test data populated successfully"
-}
-
-# Verify test data population
-verify_test_data() {
-  log_info "Verifying test data..."
-
-  local heartbeat_count
-  heartbeat_count=$(count_keys "blocking:heartbeat:test-coordinator-*")
-
-  if [ "${heartbeat_count}" -ne "${TOTAL_COORDINATORS}" ]; then
-    log_error "Expected ${TOTAL_COORDINATORS} heartbeat keys, found ${heartbeat_count}"
-    return 1
-  fi
-
-  log_success "Test data verified: ${heartbeat_count} coordinators"
-}
-
-# Run cleanup and measure performance
-run_cleanup_test() {
-  log_info "Running cleanup script (Lua-based)..."
-
-  local start_time
-  start_time=$(date +%s%3N)
-
-  # Run cleanup script
-  if ! bash "${CLEANUP_SCRIPT}"; then
-    log_error "Cleanup script failed"
-    return 1
-  fi
-
-  local end_time
-  end_time=$(date +%s%3N)
-  local execution_time_ms=$((end_time - start_time))
-
-  log_success "Cleanup completed in ${execution_time_ms}ms"
-
-  # Return execution time
-  echo "${execution_time_ms}"
-}
-
-# Verify cleanup results
-verify_cleanup_results() {
-  log_info "Verifying cleanup results..."
-
-  # Count remaining heartbeat keys
-  local stale_heartbeat_count
-  stale_heartbeat_count=$(count_keys "blocking:heartbeat:test-coordinator-stale-*")
-
-  local active_heartbeat_count
-  active_heartbeat_count=$(count_keys "blocking:heartbeat:test-coordinator-active-*")
-
-  # Verify stale coordinators removed
-  if [ "${stale_heartbeat_count}" -ne 0 ]; then
-    log_error "Stale coordinator removal failed: ${stale_heartbeat_count} stale coordinators remaining (expected 0)"
-    return 1
-  fi
-
-  log_success "100% stale coordinator removal: ${STALE_COORDINATOR_COUNT} removed"
-
-  # Verify active coordinators preserved
-  if [ "${active_heartbeat_count}" -ne "${ACTIVE_COORDINATOR_COUNT}" ]; then
-    log_error "Active coordinator preservation failed: ${active_heartbeat_count} active coordinators remaining (expected ${ACTIVE_COORDINATOR_COUNT})"
-    return 1
-  fi
-
-  log_success "100% active coordinator preservation: ${ACTIVE_COORDINATOR_COUNT} preserved"
-
-  # Verify related keys also removed
-  local stale_ack_count
-  stale_ack_count=$(count_keys "blocking:ack:test-coordinator-stale-*")
-
-  local stale_signal_count
-  stale_signal_count=$(count_keys "blocking:signal:test-coordinator-stale-*")
-
-  if [ "${stale_ack_count}" -ne 0 ] || [ "${stale_signal_count}" -ne 0 ]; then
-    log_error "Related key removal failed: ${stale_ack_count} ACK keys, ${stale_signal_count} signal keys remaining"
-    return 1
-  fi
-
-  log_success "100% related key removal verified"
-}
-
-# Run fallback test for comparison
-run_fallback_test() {
-  log_info "Running fallback test for comparison..."
-
-  # Re-populate test data
-  cleanup_test_data
-  populate_test_data
-
-  log_info "Running cleanup script (bash fallback)..."
-
-  local start_time
-  start_time=$(date +%s%3N)
-
-  # Run cleanup script with fallback flag
-  if ! bash "${CLEANUP_SCRIPT}" --fallback; then
-    log_error "Cleanup script (fallback) failed"
-    return 1
-  fi
-
-  local end_time
-  end_time=$(date +%s%3N)
-  local execution_time_ms=$((end_time - start_time))
-
-  log_success "Cleanup (fallback) completed in ${execution_time_ms}ms"
-
-  # Return execution time
-  echo "${execution_time_ms}"
-}
-
-# ===== MAIN EXECUTION =====
-
-main() {
-  echo "========================================"
-  echo "Cleanup Performance Test"
-  echo "========================================"
-  echo ""
-
-  # Check prerequisites
-  if ! command -v redis-cli >/dev/null 2>&1; then
-    log_error "redis-cli not found, please install Redis"
-    exit 1
-  fi
-
-  if ! redis_cmd PING >/dev/null 2>&1; then
-    log_error "Redis connection failed (host: ${REDIS_HOST}, port: ${REDIS_PORT})"
-    exit 1
-  fi
-
-  if [ ! -f "${CLEANUP_SCRIPT}" ]; then
-    log_error "Cleanup script not found: ${CLEANUP_SCRIPT}"
-    exit 1
-  fi
-
-  log_success "Prerequisites verified"
-  echo ""
-
-  # Phase 1: Test Lua implementation
-  echo "Phase 1: Lua Implementation Test"
-  echo "========================================"
-
-  cleanup_test_data
-  populate_test_data
-  verify_test_data
-
-  echo ""
-  local lua_execution_time_ms
-  lua_execution_time_ms=$(run_cleanup_test)
-
-  echo ""
-  verify_cleanup_results
-
-  echo ""
-  echo "========================================"
-  echo "Lua Implementation Results:"
-  echo "  Execution time: ${lua_execution_time_ms}ms"
-  echo "  Performance: $(awk "BEGIN {printf \"%.2f\", ${TOTAL_COORDINATORS} / (${lua_execution_time_ms} / 1000.0)}")" coordinators/sec
-  echo "  Target: <5000ms (5 seconds)"
-
-  if [ "${lua_execution_time_ms}" -lt 5000 ]; then
-    log_success "Performance target met (${lua_execution_time_ms}ms < 5000ms)"
-  else
-    log_error "Performance target missed (${lua_execution_time_ms}ms >= 5000ms)"
-  fi
-  echo "========================================"
-  echo ""
-
-  # Phase 2: Test bash fallback for comparison
-  echo "Phase 2: Bash Fallback Comparison Test"
-  echo "========================================"
-
-  local fallback_execution_time_ms
-  fallback_execution_time_ms=$(run_fallback_test)
-
-  echo ""
-  echo "========================================"
-  echo "Bash Fallback Results:"
-  echo "  Execution time: ${fallback_execution_time_ms}ms"
-  echo "  Performance: $(awk "BEGIN {printf \"%.2f\", ${TOTAL_COORDINATORS} / (${fallback_execution_time_ms} / 1000.0)}")" coordinators/sec
-  echo "========================================"
-  echo ""
-
-  # Performance comparison
-  echo "Performance Comparison:"
-  echo "========================================"
-  echo "  Lua implementation: ${lua_execution_time_ms}ms"
-  echo "  Bash fallback: ${fallback_execution_time_ms}ms"
-  echo "  Speedup: $(awk "BEGIN {printf \"%.1f\", ${fallback_execution_time_ms} / ${lua_execution_time_ms}}")x faster"
-  echo "========================================"
-  echo ""
-
-  # Final cleanup
-  log_info "Cleaning up test data..."
-  cleanup_test_data
-  log_success "Test completed successfully"
-
-  # Exit with success if performance target met
-  if [ "${lua_execution_time_ms}" -lt 5000 ]; then
-    exit 0
-  else
-    exit 1
-  fi
-}
-
-# Execute main function
-main "$@"

package/dist/scripts/test-dashboard-auth.cjs

@@ -1,203 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Dashboard Authentication Security Validation Test
- * Tests the secure authentication implementation
- */
-
-const AuthenticationService = require('../monitor/dashboard/auth-service.cjs');
-
-async function runAuthenticationTests() {
-    console.log('🔒 Dashboard Authentication Security Validation\n');
-
-    const results = {
-        passed: 0,
-        failed: 0,
-        confidence: 0,
-        tests: []
-    };
-
-    function recordTest(name, passed, details = '') {
-        results.tests.push({ name, passed, details });
-        if (passed) {
-            results.passed++;
-            console.log(`✅ ${name}`);
-        } else {
-            results.failed++;
-            console.log(`❌ ${name}${details ? ': ' + details : ''}`);
-        }
-    }
-
-    // Test 1: Environment variable validation
-    console.log('Test 1: Environment Variable Configuration');
-    const envVarsPresent =
-        process.env.DASHBOARD_ADMIN_USER &&
-        process.env.DASHBOARD_ADMIN_PASS_HASH &&
-        process.env.DASHBOARD_SESSION_SECRET;
-
-    if (!envVarsPresent) {
-        console.log('⚠️  Setting test environment variables...\n');
-
-        // Set test credentials (bcrypt hash of "test123")
-        process.env.DASHBOARD_ADMIN_USER = 'admin';
-        process.env.DASHBOARD_ADMIN_PASS_HASH = '$2b$12$LQv3c1yqBWVHxkd0LHAkCOYz6TtxMQJqhN8/LewY5GyB4YqZ8T0u6';
-        process.env.DASHBOARD_MONITOR_USER = 'monitor';
-        process.env.DASHBOARD_MONITOR_PASS_HASH = '$2b$12$LQv3c1yqBWVHxkd0LHAkCOYz6TtxMQJqhN8/LewY5GyB4YqZ8T0u6';
-        process.env.DASHBOARD_SESSION_SECRET = 'test-session-secret-minimum-32-characters-long-for-security';
-        process.env.DASHBOARD_SESSION_TIMEOUT_HOURS = '1';
-    }
-
-    // Test 2: Service initialization
-    console.log('\nTest 2: Authentication Service Initialization');
-    let authService;
-    try {
-        authService = new AuthenticationService();
-        recordTest('Service initialized successfully', true);
-    } catch (error) {
-        recordTest('Service initialization', false, error.message);
-        return results;
-    }
-
-    // Test 3: Configuration validation
-    console.log('\nTest 3: Configuration Validation');
-    try {
-        authService.validateConfiguration();
-        recordTest('Configuration validation passed', true);
-    } catch (error) {
-        recordTest('Configuration validation', false, error.message);
-    }
-
-    // Test 4: Valid authentication
-    console.log('\nTest 4: Valid Authentication');
-    try {
-        const result = await authService.authenticate('admin', 'test123');
-        recordTest('Valid credentials accepted', result !== null);
-        if (result) {
-            recordTest('Session token generated', !!result.token);
-            recordTest('User role included', !!result.user.role);
-            recordTest('Expiration time set', !!result.expiresAt);
-        }
-    } catch (error) {
-        recordTest('Valid authentication', false, error.message);
-    }
-
-    // Test 5: Invalid authentication
-    console.log('\nTest 5: Invalid Authentication');
-    try {
-        const result = await authService.authenticate('admin', 'wrongpassword');
-        recordTest('Invalid credentials rejected', result === null);
-    } catch (error) {
-        recordTest('Invalid authentication handling', false, error.message);
-    }
-
-    // Test 6: Session validation
-    console.log('\nTest 6: Session Validation');
-    try {
-        const authResult = await authService.authenticate('admin', 'test123');
-        if (authResult) {
-            const session = authService.validateSession(authResult.token);
-            recordTest('Valid session recognized', session !== null);
-            recordTest('Session username correct', session?.username === 'admin');
-            recordTest('Session role correct', session?.role === 'admin');
-        }
-    } catch (error) {
-        recordTest('Session validation', false, error.message);
-    }
-
-    // Test 7: Invalid session
-    console.log('\nTest 7: Invalid Session Handling');
-    const invalidSession = authService.validateSession('invalid-token');
-    recordTest('Invalid token rejected', invalidSession === null);
-
-    // Test 8: Session revocation
-    console.log('\nTest 8: Session Revocation');
-    try {
-        const authResult = await authService.authenticate('monitor', 'test123');
-        if (authResult) {
-            authService.revokeSession(authResult.token);
-            const revokedSession = authService.validateSession(authResult.token);
-            recordTest('Revoked session invalidated', revokedSession === null);
-        }
-    } catch (error) {
-        recordTest('Session revocation', false, error.message);
-    }
-
-    // Test 9: Bcrypt hash validation
-    console.log('\nTest 9: Bcrypt Hash Validation');
-    const validHash = '$2b$12$LQv3c1yqBWVHxkd0LHAkCOYz6TtxMQJqhN8/LewY5GyB4YqZ8T0u6';
-    const invalidHash = 'plaintext-password';
-    recordTest('Valid bcrypt hash recognized', authService.isBcryptHash(validHash));
-    recordTest('Invalid hash rejected', !authService.isBcryptHash(invalidHash));
-
-    // Test 10: Session statistics
-    console.log('\nTest 10: Session Statistics');
-    const stats = authService.getSessionStatistics();
-    recordTest('Statistics returned', !!stats);
-    recordTest('User count correct', stats.users >= 2);
-
-    // Test 11: Password hashing utility
-    console.log('\nTest 11: Password Hashing Utility');
-    try {
-        const hash = await AuthenticationService.hashPassword('testpassword', 12);
-        recordTest('Password hashing works', authService.isBcryptHash(hash));
-    } catch (error) {
-        recordTest('Password hashing', false, error.message);
-    }
-
-    // Test 12: Constant-time comparison (timing attack protection)
-    console.log('\nTest 12: Timing Attack Protection');
-    try {
-        const start1 = Date.now();
-        await authService.authenticate('nonexistent', 'password');
-        const time1 = Date.now() - start1;
-
-        const start2 = Date.now();
-        await authService.authenticate('admin', 'wrongpassword');
-        const time2 = Date.now() - start2;
-
-        // Times should be similar (within 50ms) to prevent timing attacks
-        const timeDiff = Math.abs(time1 - time2);
-        recordTest('Timing attack protection', timeDiff < 50, `Difference: ${timeDiff}ms`);
-    } catch (error) {
-        recordTest('Timing attack protection', false, error.message);
-    }
-
-    // Test 13: No hardcoded credentials
-    console.log('\nTest 13: No Hardcoded Credentials');
-    const fs = require('fs');
-    const serverContent = fs.readFileSync(__dirname + '/../monitor/dashboard/server.js', 'utf8');
-    const hasHardcodedCreds = /password:\s*['"](?!process\.env)/.test(serverContent);
-    recordTest('No hardcoded passwords in server.js', !hasHardcodedCreds);
-
-    // Calculate confidence score
-    const totalTests = results.passed + results.failed;
-    results.confidence = totalTests > 0 ? (results.passed / totalTests) : 0;
-
-    // Summary
-    console.log('\n' + '='.repeat(60));
-    console.log('📊 Test Summary');
-    console.log('='.repeat(60));
-    console.log(`Total Tests: ${totalTests}`);
-    console.log(`Passed: ${results.passed} ✅`);
-    console.log(`Failed: ${results.failed} ❌`);
-    console.log(`Confidence Score: ${(results.confidence * 100).toFixed(2)}%`);
-    console.log('='.repeat(60));
-
-    if (results.confidence >= 0.75) {
-        console.log('\n✅ Authentication security validation PASSED (≥0.75 threshold)');
-    } else {
-        console.log('\n❌ Authentication security validation FAILED (<0.75 threshold)');
-    }
-
-    return results;
-}
-
-// Run tests
-runAuthenticationTests()
-    .then(results => {
-        process.exit(results.confidence >= 0.75 ? 0 : 1);
-    })
-    .catch(error => {
-        console.error('Test execution error:', error);
-        process.exit(1);
-    });