claudecode-omc 5.9.1 → 5.12.0

package/bundled/upstream/ecc/skills/quarkus-patterns/SKILL.md

@@ -1,7 +1,8 @@
 ---
 name: quarkus-patterns
 description: Quarkus 3.x LTS architecture patterns with Camel for messaging, RESTful API design, CDI services, data access with Panache, and async processing. Use for Java Quarkus backend work with event-driven architectures.
-origin: ECC
+metadata:
+  origin: ECC
 ---
 
 # Quarkus Development Patterns
@@ -70,7 +71,7 @@ public class OrderProcessingService {
 ```java
 @ApplicationScoped
 public class ProcessingService {
-    
+
     public void processDocument(Document doc) {
         LogContext logContext = CustomLog.getCurrentContext();
         try (SafeAutoCloseable ignored = CustomLog.startScope(logContext)) {
@@ -78,12 +79,12 @@ public class ProcessingService {
             logContext.put("documentId", doc.getId().toString());
             logContext.put("documentType", doc.getType());
             logContext.put("userId", SecurityContext.getUserId());
-            
+
             log.info("Starting document processing");
-            
+
             // All logs within this scope inherit the context
             processInternal(doc);
-            
+
             log.info("Document processing completed");
         } catch (Exception e) {
             log.error("Document processing failed", e);
@@ -103,7 +104,7 @@ public class ProcessingService {
             <includeMdc>true</includeMdc>
         </encoder>
     </appender>
-    
+
     <logger name="com.example" level="INFO"/>
     <root level="WARN">
         <appender-ref ref="CONSOLE"/>
@@ -120,7 +121,7 @@ public class ProcessingService {
 public class EventService {
     private final EventRepository eventRepository;
     private final ObjectMapper objectMapper;
-    
+
     public void createSuccessEvent(Object payload, String eventType) {
         Objects.requireNonNull(payload, "Payload cannot be null");
         Event event = new Event();
@@ -128,11 +129,11 @@ public class EventService {
         event.setStatus(EventStatus.SUCCESS);
         event.setPayload(serializePayload(payload));
         event.setTimestamp(Instant.now());
-        
+
         eventRepository.persist(event);
         log.info("Success event created: {}", eventType);
     }
-    
+
     public void createErrorEvent(Object payload, String eventType, String errorMessage) {
         Objects.requireNonNull(payload, "Payload cannot be null");
         if (errorMessage == null || errorMessage.isBlank()) {
@@ -144,11 +145,11 @@ public class EventService {
         event.setErrorMessage(errorMessage);
         event.setPayload(serializePayload(payload));
         event.setTimestamp(Instant.now());
-        
+
         eventRepository.persist(event);
         log.error("Error event created: {} - {}", eventType, errorMessage);
     }
-    
+
     private String serializePayload(Object payload) {
         try {
             return objectMapper.writeValueAsString(payload);
@@ -167,10 +168,10 @@ public class EventService {
 @RequiredArgsConstructor
 public class BusinessRulesPublisher {
     private final ProducerTemplate producerTemplate;
-    
+
     public void publishSync(BusinessRulesPayload payload) {
         producerTemplate.sendBody(
-            "direct:business-rules-publisher", 
+            "direct:business-rules-publisher",
             payload
         );
     }
@@ -182,23 +183,23 @@ public class BusinessRulesPublisher {
 ```java
 @ApplicationScoped
 public class BusinessRulesRoute extends RouteBuilder {
-    
+
     @ConfigProperty(name = "camel.rabbitmq.queue.business-rules")
     String businessRulesQueue;
-    
+
     @ConfigProperty(name = "rabbitmq.host")
     String rabbitHost;
-    
+
     @ConfigProperty(name = "rabbitmq.port")
     Integer rabbitPort;
-    
+
     @Override
     public void configure() {
         from("direct:business-rules-publisher")
             .routeId("business-rules-publisher")
             .log("Publishing message to RabbitMQ: ${body}")
             .marshal().json(JsonLibrary.Jackson)
-            .toF("spring-rabbitmq:%s?hostname=%s&portNumber=%d", 
+            .toF("spring-rabbitmq:%s?hostname=%s&portNumber=%d",
                 businessRulesQueue, rabbitHost, rabbitPort);
     }
 }
@@ -209,7 +210,7 @@ public class BusinessRulesRoute extends RouteBuilder {
 ```java
 @ApplicationScoped
 public class DocumentProcessingRoute extends RouteBuilder {
-    
+
     @Override
     public void configure() {
         // Error handling
@@ -217,7 +218,7 @@ public class DocumentProcessingRoute extends RouteBuilder {
             .handled(true)
             .to("direct:validation-error-handler")
             .log("Validation error: ${exception.message}");
-        
+
         // Main processing route
         from("direct:process-document")
             .routeId("document-processing")
@@ -232,7 +233,7 @@ public class DocumentProcessingRoute extends RouteBuilder {
                 .otherwise()
                     .to("direct:process-generic")
             .end();
-        
+
         from("direct:validation-error-handler")
             .bean(EventService.class, "createErrorEvent")
             .log("Validation error handled");
@@ -245,24 +246,24 @@ public class DocumentProcessingRoute extends RouteBuilder {
 ```java
 @ApplicationScoped
 public class FileMonitoringRoute extends RouteBuilder {
-    
+
     @ConfigProperty(name = "file.input.directory")
     String inputDirectory;
-    
+
     @ConfigProperty(name = "file.processed.directory")
     String processedDirectory;
-    
+
     @ConfigProperty(name = "file.error.directory")
     String errorDirectory;
-    
+
     @Override
     public void configure() {
-        from("file:" + inputDirectory + "?move=" + processedDirectory + 
+        from("file:" + inputDirectory + "?move=" + processedDirectory +
              "&moveFailed=" + errorDirectory + "&delay=5000")
             .routeId("file-monitor")
             .log("Processing file: ${header.CamelFileName}")
             .to("direct:process-file");
-        
+
         from("direct:process-file")
             .bean(OrderProcessingService.class, "processFile")
             .log("File processing completed");
@@ -275,13 +276,13 @@ public class FileMonitoringRoute extends RouteBuilder {
 ```java
 @ApplicationScoped
 public class InvoiceRoute extends RouteBuilder {
-    
+
     @Override
     public void configure() {
         from("direct:invoice-validation")
             .bean(InvoiceFlowValidator.class, "validateFlowWithConfig")
             .log("Validation result: ${body}");
-        
+
         from("direct:persist-and-publish")
             .bean(DocumentJobService.class, "createDocumentAndJobEntities")
             .bean(BusinessRulesPublisher.class, "publishAsync")
@@ -334,7 +335,7 @@ public class DocumentResource {
 ```java
 @ApplicationScoped
 public class DocumentRepository implements PanacheRepository<Document> {
-  
+
   public List<Document> findByStatus(DocumentStatus status, int page, int size) {
     return find("status = ?1 order by createdAt desc", status)
         .page(page, size)
@@ -344,7 +345,7 @@ public class DocumentRepository implements PanacheRepository<Document> {
   public Optional<Document> findByReferenceNumber(String referenceNumber) {
     return find("referenceNumber", referenceNumber).firstResultOptional();
   }
-  
+
   public long countByStatusAndDate(DocumentStatus status, LocalDate date) {
     return count("status = ?1 and createdAt >= ?2", status, date.atStartOfDay());
   }
@@ -367,11 +368,11 @@ public class DocumentService {
     document.setDescription(request.description());
     document.setStatus(DocumentStatus.PENDING);
     document.setCreatedAt(Instant.now());
-    
+
     repo.persist(document);
-    
+
     eventService.createSuccessEvent(document, "DOCUMENT_CREATED");
-    
+
     return document;
   }
 
@@ -398,7 +399,7 @@ public record CreateDocumentRequest(
 
 public record DocumentResponse(Long id, String referenceNumber, DocumentStatus status) {
   public static DocumentResponse from(Document document) {
-    return new DocumentResponse(document.getId(), document.getReferenceNumber(), 
+    return new DocumentResponse(document.getId(), document.getReferenceNumber(),
         document.getStatus());
   }
 }
@@ -414,7 +415,7 @@ public class ValidationExceptionMapper implements ExceptionMapper<ConstraintViol
     String message = exception.getConstraintViolations().stream()
         .map(cv -> cv.getPropertyPath() + ": " + cv.getMessage())
         .collect(Collectors.joining(", "));
-    
+
     return Response.status(Response.Status.BAD_REQUEST)
         .entity(Map.of("error", "validation_error", "message", message))
         .build();
@@ -444,30 +445,30 @@ public class GenericExceptionMapper implements ExceptionMapper<Exception> {
 public class FileStorageService {
     private final S3Client s3Client;
     private final ExecutorService executorService;
-    
+
     @ConfigProperty(name = "storage.bucket-name")
     String bucketName;
-    
+
     public CompletableFuture<StoredDocumentInfo> uploadOriginalFile(
-            InputStream inputStream, 
-            long size, 
+            InputStream inputStream,
+            long size,
             LogContext logContext,
             InvoiceFormat format) {
-        
+
         return CompletableFuture.supplyAsync(() -> {
             try (SafeAutoCloseable ignored = CustomLog.startScope(logContext)) {
                 String path = generateStoragePath(format);
-                
+
                 PutObjectRequest request = PutObjectRequest.builder()
                     .bucket(bucketName)
                     .key(path)
                     .contentLength(size)
                     .build();
-                
+
                 s3Client.putObject(request, RequestBody.fromInputStream(inputStream, size));
-                
+
                 log.info("File uploaded to S3: {}", path);
-                
+
                 return new StoredDocumentInfo(path, size, Instant.now());
             } catch (Exception e) {
                 log.error("Failed to upload file to S3", e);
@@ -513,7 +514,7 @@ public class DocumentCacheService {
     hibernate-orm:
       database:
         generation: drop-and-create
-  
+
   rabbitmq:
     host: localhost
     port: 5672
@@ -539,7 +540,7 @@ public class DocumentCacheService {
     hibernate-orm:
       database:
         generation: validate
-  
+
   rabbitmq:
     host: ${RABBITMQ_HOST}
     port: ${RABBITMQ_PORT}
@@ -632,7 +633,7 @@ public class CamelHealthCheck implements HealthCheck {
         <groupId>io.quarkus</groupId>
         <artifactId>quarkus-config-yaml</artifactId>
     </dependency>
-    
+
     <!-- Camel Extensions -->
     <dependency>
         <groupId>org.apache.camel.quarkus</groupId>
@@ -646,7 +647,7 @@ public class CamelHealthCheck implements HealthCheck {
         <groupId>org.apache.camel.quarkus</groupId>
         <artifactId>camel-quarkus-bean</artifactId>
     </dependency>
-    
+
     <!-- Lombok -->
     <dependency>
         <groupId>org.projectlombok</groupId>
@@ -654,7 +655,7 @@ public class CamelHealthCheck implements HealthCheck {
         <version>${lombok.version}</version>
         <scope>provided</scope>
     </dependency>
-    
+
     <!-- Logging -->
     <dependency>
         <groupId>io.quarkiverse.logging.logback</groupId>

package/bundled/upstream/ecc/skills/quarkus-security/SKILL.md

@@ -1,7 +1,8 @@
 ---
 name: quarkus-security
 description: Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.
-origin: ECC
+metadata:
+  origin: ECC
 ---
 
 # Quarkus Security Review
@@ -28,7 +29,7 @@ Best practices for securing Quarkus applications with authentication, authorizat
 @Path("/api/protected")
 @Authenticated
 public class ProtectedResource {
-  
+
   @Inject
   JsonWebToken jwt;
 
@@ -65,20 +66,20 @@ quarkus.oidc.credentials.secret=${OIDC_SECRET}
 @Provider
 @Priority(Priorities.AUTHENTICATION)
 public class CustomAuthFilter implements ContainerRequestFilter {
-  
+
   @Inject
   SecurityIdentity identity;
 
   @Override
   public void filter(ContainerRequestContext requestContext) {
     String authHeader = requestContext.getHeaderString(HttpHeaders.AUTHORIZATION);
-    
+
     // Reject immediately if header is absent or malformed
     if (authHeader == null || !authHeader.startsWith("Bearer ")) {
       requestContext.abortWith(Response.status(Response.Status.UNAUTHORIZED).build());
       return;
     }
-    
+
     String token = authHeader.substring(7);
     if (!validateToken(token)) {
       requestContext.abortWith(Response.status(Response.Status.UNAUTHORIZED).build());
@@ -100,7 +101,7 @@ public class CustomAuthFilter implements ContainerRequestFilter {
 @Path("/api/admin")
 @RolesAllowed("ADMIN")
 public class AdminResource {
-  
+
   @GET
   @Path("/users")
   public List<UserDto> listUsers() {
@@ -118,7 +119,7 @@ public class AdminResource {
 
 @Path("/api/users")
 public class UserResource {
-  
+
   @Inject
   SecurityIdentity securityIdentity;
 
@@ -127,7 +128,7 @@ public class UserResource {
   @RolesAllowed("USER")
   public Response getUser(@PathParam("id") Long id) {
     // Check ownership
-    if (!securityIdentity.hasRole("ADMIN") && 
+    if (!securityIdentity.hasRole("ADMIN") &&
         !isOwner(id, securityIdentity.getPrincipal().getName())) {
       return Response.status(Response.Status.FORBIDDEN).build();
     }
@@ -145,7 +146,7 @@ public class UserResource {
 ```java
 @ApplicationScoped
 public class SecurityService {
-  
+
   @Inject
   SecurityIdentity securityIdentity;
 
@@ -153,7 +154,7 @@ public class SecurityService {
     if (securityIdentity.isAnonymous()) {
       return false;
     }
-    
+
     if (securityIdentity.hasRole("ADMIN")) {
       return true;
     }
@@ -229,7 +230,7 @@ List<User> users = User.list("email = ?1 and active = ?2", email, true);
 Optional<User> user = User.find("username", username).firstResultOptional();
 
 // GOOD: Named parameters
-List<User> users = User.list("email = :email and age > :minAge", 
+List<User> users = User.list("email = :email and age > :minAge",
     Parameters.with("email", email).and("minAge", 18));
 ```
 
@@ -256,7 +257,7 @@ public class User extends PanacheEntity {
 ```java
 @ApplicationScoped
 public class PasswordService {
-  
+
   public String hash(String plainPassword) {
     return BcryptUtil.bcryptHash(plainPassword);
   }
@@ -324,7 +325,7 @@ quarkus.vault.authentication.kubernetes.role=my-role
 ```java
 @ApplicationScoped
 public class SecretService {
-  
+
   @ConfigProperty(name = "api-key")
   String apiKey; // Fetched from Vault
 
@@ -351,7 +352,7 @@ public class RateLimitFilter implements ContainerRequestFilter {
   @Override
   public void filter(ContainerRequestContext requestContext) {
     String clientId = getClientIdentifier();
-    RateLimiter limiter = limiters.computeIfAbsent(clientId, 
+    RateLimiter limiter = limiters.computeIfAbsent(clientId,
         k -> RateLimiter.create(100.0)); // 100 requests per second
 
     if (!limiter.tryAcquire()) {
@@ -377,25 +378,25 @@ public class RateLimitFilter implements ContainerRequestFilter {
 ```java
 @Provider
 public class SecurityHeadersFilter implements ContainerResponseFilter {
-  
+
   @Override
   public void filter(ContainerRequestContext request, ContainerResponseContext response) {
     MultivaluedMap<String, Object> headers = response.getHeaders();
-    
+
     // Prevent clickjacking
     headers.putSingle("X-Frame-Options", "DENY");
-    
+
     // XSS protection
     headers.putSingle("X-Content-Type-Options", "nosniff");
     headers.putSingle("X-XSS-Protection", "1; mode=block");
-    
+
     // HSTS
     headers.putSingle("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
-    
+
     // CSP — avoid 'unsafe-inline' for script-src as it negates XSS protection;
     // use nonces or hashes instead. 'unsafe-inline' for style-src is acceptable
     // when CSS frameworks require it, but prefer nonces where possible.
-    headers.putSingle("Content-Security-Policy", 
+    headers.putSingle("Content-Security-Policy",
         "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'");
   }
 }
@@ -412,11 +413,11 @@ public class AuditService {
   SecurityIdentity securityIdentity;
 
   public void logAccess(String resource, String action) {
-    String user = securityIdentity.isAnonymous() 
-        ? "anonymous" 
+    String user = securityIdentity.isAnonymous()
+        ? "anonymous"
         : securityIdentity.getPrincipal().getName();
-    
-    LOG.infof("AUDIT: user=%s action=%s resource=%s timestamp=%s", 
+
+    LOG.infof("AUDIT: user=%s action=%s resource=%s timestamp=%s",
         user, action, resource, Instant.now());
   }
 }