synapse-hub 0.0.0-stage → 2.0.0

package/.agents/skills/failure-autopsy-and-healing/scripts/triage_failures.sh

@@ -0,0 +1,98 @@
+#!/usr/bin/env bash
+# Triage Failures Script for Enterprise Automation
+# Cross-platform: Compatible with macOS, Linux CI, and Windows Git Bash
+
+WORKSPACE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../../../.." && pwd)"
+SCREENSHOT_DIR="$WORKSPACE_DIR/Screenshots"
+REPORTS_DIR="$WORKSPACE_DIR/Reports"
+
+echo "=========================================================="
+echo "  🔬 ENTERPRISE FAILURE AUTOPSY & TRIAGE SCANNER (CROSS-PLATFORM)"
+echo "  Workspace: $WORKSPACE_DIR"
+echo "=========================================================="
+
+# 1. Quét báo cáo JUnit XML gần nhất
+LATEST_JUNIT=$(find "$REPORTS_DIR" -type f -name "JUnit_Report.xml" 2>/dev/null | sort -r | head -n 1)
+
+if [ -n "$LATEST_JUNIT" ]; then
+    echo "📊 Báo cáo JUnit gần nhất: $(basename "$(dirname "$LATEST_JUNIT")")/JUnit_Report.xml"
+    FAILED_JUNIT_TESTS=$(grep -B 1 '<failure' "$LATEST_JUNIT" 2>/dev/null | grep '<testcase' | sed -n 's/.*name="\([^"]*\)".*/\1/p')
+    if [ -n "$FAILED_JUNIT_TESTS" ]; then
+        echo "🚨 Các Test Cases báo FAILED trong JUnit XML:"
+        echo "$FAILED_JUNIT_TESTS" | while read -r tc; do
+            echo "   ❌ $tc"
+        done
+        echo "----------------------------------------------------------"
+    else
+        echo "✅ Không phát hiện ca thất bại nào trong JUnit XML gần nhất."
+        echo "----------------------------------------------------------"
+    fi
+fi
+
+# 2. Quét ảnh chụp FAILED_*.png
+if [ ! -d "$SCREENSHOT_DIR" ]; then
+    echo "ℹ️  Không tìm thấy thư mục Screenshots. Dự án đang sạch lỗi!"
+    exit 0
+fi
+
+FAILED_COUNT=$(find "$SCREENSHOT_DIR" -maxdepth 1 -name "FAILED_*.png" 2>/dev/null | wc -l | tr -d ' ')
+
+if [ "$FAILED_COUNT" -eq "0" ]; then
+    echo "✅ Tuyệt vời! Không có ảnh lỗi nào trong $SCREENSHOT_DIR."
+    exit 0
+fi
+
+echo "⚠️  Phát hiện $FAILED_COUNT ảnh lỗi kịch bản gần nhất:"
+echo "----------------------------------------------------------"
+
+# Hàm lấy thông tin file đa nền tảng (hỗ trợ Linux GNU stat, macOS BSD stat và fallback ls)
+list_recent_screenshots() {
+    if stat --version 2>&1 | grep -q "GNU"; then
+        # Linux (GNU stat)
+        find "$SCREENSHOT_DIR" -maxdepth 1 -name "FAILED_*.png" -type f -exec stat -c "%Y %y %n" {} + 2>/dev/null | \
+            sort -rn | head -n 10 | awk '{print $1, $2, $3, $NF}'
+    elif stat -f "%m" . >/dev/null 2>&1; then
+        # macOS / BSD stat
+        find "$SCREENSHOT_DIR" -maxdepth 1 -name "FAILED_*.png" -type f -exec stat -f "%m %Sm %N" -t "%Y-%m-%d %H:%M:%S" {} + 2>/dev/null | \
+            sort -rn | head -n 10
+    else
+        # Fallback (POSIX ls)
+        ls -lt "$SCREENSHOT_DIR"/FAILED_*.png 2>/dev/null | head -n 10 | awk '{print "0", $6, $7, $NF}'
+    fi
+}
+
+list_recent_screenshots | while read -r epoch date time filepath; do
+    filename=$(basename "$filepath")
+    
+    # Ánh xạ Page Class gợi ý dựa trên mã Test Case (Dynamic Pattern Matching)
+    suggested_page="BasePage.groovy"
+    if [[ "$filename" =~ TC-([0-9]+) ]]; then
+        tc_num="${BASH_REMATCH[1]}"
+        if [ "$tc_num" -ge 1 ] && [ "$tc_num" -le 7 ]; then
+            suggested_page="TargetPlanPage.groovy"
+        elif [ "$tc_num" -ge 8 ] && [ "$tc_num" -le 12 ]; then
+            suggested_page="LoginPage.groovy"
+        elif [ "$tc_num" -ge 13 ] && [ "$tc_num" -le 16 ]; then
+            suggested_page="UserAdminPage.groovy"
+        elif [ "$tc_num" -ge 17 ] && [ "$tc_num" -le 28 ]; then
+            suggested_page="CommonCategoryPage.groovy"
+        elif [ "$tc_num" -ge 29 ] && [ "$tc_num" -le 92 ]; then
+            suggested_page="IndustryCategoryPage.groovy"
+        elif [ "$tc_num" -ge 93 ] && [ "$tc_num" -le 122 ]; then
+            suggested_page="PlanningPage.groovy"
+        elif [ "$tc_num" -ge 123 ] && [ "$tc_num" -le 247 ]; then
+            suggested_page="DataMiningPage.groovy"
+        elif [ "$tc_num" -ge 248 ] && [ "$tc_num" -le 249 ]; then
+            suggested_page="ReportPage.groovy"
+        elif [ "$tc_num" -ge 250 ] && [ "$tc_num" -le 259 ]; then
+            suggested_page="TokenMgmtPage.groovy"
+        fi
+    fi
+
+    echo "📸 [$date $time] $filename"
+    echo "   -> Đường dẫn ảnh : $filepath"
+    echo "   -> Page Class cần vá : Keywords/pages/$suggested_page"
+done
+
+echo "----------------------------------------------------------"
+echo "💡 Gợi ý AI: Dùng tool read_file mở ảnh hoặc dùng Playwright Live giữ nguyên browser để xác thực và vá Page Class."

package/.agents/skills/file-and-report-validator/SKILL.md

@@ -0,0 +1,90 @@
+---
+name: file-and-report-validator
+description: Validate uploaded and downloaded enterprise files (Excel .xlsx/.xls, CSV, PDF) for correct schemas, row counts, tabular data integrity, and PDF text/layout. Use on-demand when testing export/import workflows.
+---
+
+# File & Report Validator Skill
+
+> **Target:** Eliminate superficial testing of file exports and imports by inspecting and asserting exact file contents, schemas, formulas, and values across Excel, CSV, and PDF formats.
+
+---
+
+## 1. Core Principles
+
+1. **Verify Binary Contents, Not Just Download Events:**
+   - Catching the browser `download` event is insufficient. The downloaded file must be opened, parsed, and its tabular records cross-referenced against expected database or UI table states.
+2. **Schema & Header Conformance:**
+   - Assert exact column headers, cell data formats (dates, currencies, numeric precision), and sheet names.
+3. **Idempotent File Lifecycle:**
+   - Store temporary test downloads in a sandboxed scratch folder and purge them during teardown.
+
+---
+
+## 2. Standard Playwright Download Handling
+
+```typescript
+import { test, expect } from '@playwright/test';
+import path from 'path';
+
+test('export and verify financial report', async ({ page }) => {
+  const downloadPromise = page.waitForEvent('download');
+  await page.click('button#export-excel');
+  const download = await downloadPromise;
+
+  const savePath = path.join('temp_downloads', download.suggestedFilename());
+  await download.saveAs(savePath);
+
+  expect(download.suggestedFilename()).toMatch(/^Report_\d{8}\.xlsx$/);
+});
+```
+
+---
+
+## 3. Deep Content Inspection Recipes (Python)
+
+### Pattern A: Excel (.xlsx / .xls) Schema & Data Assertion
+```python
+import pandas as pd
+
+def validate_excel_report(file_path: str, expected_min_rows: int = 1):
+    df = pd.read_excel(file_path)
+    
+    # 1. Assert header schema
+    expected_headers = ["ID", "Customer Name", "Total Amount", "Status"]
+    assert list(df.columns) == expected_headers, f"Header mismatch: {df.columns}"
+    
+    # 2. Assert row counts and non-empty values
+    assert len(df) >= expected_min_rows, f"Expected at least {expected_min_rows} rows, got {len(df)}"
+    assert not df["ID"].isnull().any(), "Found NULL values in ID column"
+    print(f"[PASS] Successfully verified {len(df)} rows in {file_path}")
+```
+
+### Pattern B: CSV Chunk Streaming (For Big Data Exports > 100k Rows)
+```python
+import csv
+
+def validate_large_csv_stream(file_path: str, expected_header: list):
+    row_count = 0
+    with open(file_path, mode='r', encoding='utf-8') as f:
+        reader = csv.reader(f)
+        header = next(reader)
+        assert header == expected_header, f"CSV Header mismatch: {header}"
+        for row in reader:
+            row_count += 1
+            assert len(row) == len(header), f"Malformed row at line {row_count}"
+    print(f"[PASS] Verified {row_count} streamed CSV rows without memory overflow.")
+```
+
+### Pattern C: PDF Document Text & Metadata Extraction
+```python
+import pypdf
+
+def assert_pdf_contains_text(pdf_path: str, expected_keywords: list):
+    reader = pypdf.PdfReader(pdf_path)
+    assert len(reader.pages) > 0, "PDF is empty (0 pages)!"
+
+    full_text = "\n".join([page.extract_text() or "" for page in reader.pages])
+    for kw in expected_keywords:
+        assert kw in full_text, f"PDF assertion failed: Keyword '{kw}' missing in {pdf_path}"
+    print(f"[PASS] Verified keywords {expected_keywords} across {len(reader.pages)} PDF pages.")
+```

package/.agents/skills/flaky-test-sentinel-and-quarantine/SKILL.md

@@ -0,0 +1,114 @@
+---
+name: flaky-test-sentinel-and-quarantine
+description: Enterprise flaky test detection, scoring, and automated quarantine governance. Detects non-deterministic test behavior via multi-run repetition (e.g., 5 iterations), computes flakiness index, isolates unstable tests from blocking CI/CD merges via quarantine tagging (@quarantine / @flaky), and tracks MTBF until remediation.
+---
+
+# Flaky Test Sentinel & Quarantine Protocol
+
+> **Purpose:** Master flaky test governance, automated quarantine isolation, and non-deterministic test remediation. Eliminates false-positive CI/CD pipeline blockers by identifying unstable tests through repeated execution ($N=5$), moving them into isolated quarantine suites, and tracking remediation until graduation.
+
+---
+
+## 1. The Flaky Test Dilemma & The 5-Stage Quarantine Lifecycle
+
+In large enterprise test suites (hundreds to thousands of test cases), non-deterministic tests ("flaky tests" that intermittently pass and fail without code changes) erode trust in CI/CD, slow down deployments, and cause developers to ignore test results.
+
+```mermaid
+flowchart TD
+    A["<b>1. Detection Engine</b><br/>Run test N=5 iterations<br/>Identify Pass/Fail flips"] --> B["<b>2. Automated Quarantine</b><br/>Tag test with @quarantine<br/>Isolate from main suite"]
+    B --> C["<b>3. Unblocked PR Pipeline</b><br/>PR merge runs stable tests only<br/>CI/CD remains green"]
+    B --> D["<b>4. Quarantine Lab</b><br/>Runs in parallel/nightly<br/>Logs failure autopsy"]
+    D --> E["<b>5. Graduation DoD Gate</b><br/>Must achieve 10/10 consecutive passes<br/>Graduates back to main"]
+```
+
+---
+
+## 2. Flakiness Scoring Formula & Classification
+
+$$P = \frac{\text{Passed Executions}}{N} \times 100\% \quad \text{where } N \ge 5$$
+
+$$\text{Flip Rate} = \frac{\text{Status Transitions (Pass} \leftrightarrow \text{Fail)}}{N - 1} \times 100\%$$
+
+| Health Tier | Pass Rate ($P$) | Flip Count ($N=5$) | Action Required | Pipeline Impact |
+| :--- | :--- | :--- | :--- | :--- |
+| **STABLE (Green)** | $100\%$ | 0 flips | Kept in standard regression suite | Blocks PR on real bug |
+| **MILD FLAKE** | $80\% \le P < 100\%$ | 1 - 2 flips | Log warning; monitor over 24 hours | Kept in suite with watchpoint |
+| **SEVERE FLAKE** | $P < 80\%$ | $\ge 2$ flips | **Immediate Quarantine Tagging (`@quarantine`)** | Excluded from PR merge blocker |
+| **DEAD TEST / BROKEN**| $0\%$ | 0 flips | File critical AUT/Test bug defect | Regular test failure |
+
+---
+
+## 3. Quarantine Tagging & Execution Strategies
+
+### Playwright / TypeScript Quarantine Tagging
+```typescript
+import { test, expect } from '@playwright/test';
+
+// Before Quarantine: Unstable test intermittently blocking main PRs
+// test('TC-104: Submit monthly reconciliation report', async ({ page }) => { ... });
+
+// After Quarantine: Tagged with @quarantine metadata
+test('TC-104: Submit monthly reconciliation report @quarantine', async ({ page }) => {
+  // Test code remains intact for debugging
+  await page.goto('/reports/reconciliation');
+  // ...
+});
+```
+
+### CI/CD Filter Configuration
+```bash
+# 1. Main PR Blocker Suite: Runs ONLY 100% stable tests (Zero Flaky Disruptions)
+npx playwright test --grep-invert "@quarantine"
+
+# 2. Nightly Quarantine Lab: Runs quarantined tests to collect diagnostics & heal
+npx playwright test --grep "@quarantine" --reporter=json
+```
+
+---
+
+## 4. Automated Multi-Run Flakiness Detector Tool
+
+This repository provides an automated flakiness analyzer in `tools/flaky_detector.py`.
+
+### Running 5-Iteration Flakiness Benchmark
+```bash
+# Run a specific test script 5 consecutive times to benchmark stability
+python tools/flaky_detector.py --repeat 5 --cmd "npm test -- tests/e2e/TC-104.spec.ts"
+
+# Or parse existing test execution history
+python tools/flaky_detector.py --reports "reports/**/junit*.xml"
+```
+
+Output Report (`reports/quarantine_board.json`):
+```json
+{
+  "test_id": "TC-104",
+  "iterations": 5,
+  "passes": 3,
+  "failures": 2,
+  "pass_rate": 60.0,
+  "flakiness_status": "SEVERE_FLAKE",
+  "quarantine_recommended": true,
+  "probable_cause": "Angular PrimeNG animation fade-out / missing smart wait"
+}
+```
+
+---
+
+## 5. Root-Cause Remediation Guide (Heal & Graduate)
+
+| Flakiness Root Cause | Anti-Pattern | Mandatory Remediation |
+| :--- | :--- | :--- |
+| **Race Condition** | Static `Thread.sleep(3000)` or blind delays | Replace with Smart Wait: `waitForLoadState('networkidle')` or Angular `zone.isStable()`. |
+| **Database Collision** | Reusing static IDs (`"ORDER_001"`) | Use dynamic identifiers: `BasePage.uniqueCode("AUTO_")` paired with Idempotent Teardown. |
+| **Animation Interference**| Clicking during backdrop fade | Use `BasePage.clickJS()` or await overlay invisibility (`.p-component-overlay`). |
+| **DOM Re-render Drift** | Direct click after async API fetch | Encapsulate 3-attempt retry loop with AOM Role fallback in Page Class. |
+
+---
+
+## 6. Graduation Definition of Done (DoD) Gate
+
+Before removing the `@quarantine` tag and restoring a test to the main PR suite:
+1. **Verification Run:** The healed test must execute **10 consecutive iterations** in headless mode with **100% Pass Rate** (`10/10 PASS`).
+2. **Code Standards:** 100% UTF-8 No BOM, Clean POM flat architecture, zero hardcoded XPaths.
+3. **Artifact Update:** Update `reports/quarantine_board.json` to mark status as `GRADUATED`.

package/.agents/skills/github-actions-templates/SKILL.md

@@ -0,0 +1,334 @@
+---
+name: github-actions-templates
+description: Create production-ready GitHub Actions workflows for automated testing, building, and deploying applications. Use when setting up CI/CD with GitHub Actions, automating development workflows, or creating reusable workflow templates.
+---
+
+# GitHub Actions Templates
+
+Production-ready GitHub Actions workflow patterns for testing, building, and deploying applications.
+
+## Do not use this skill when
+
+- The task is unrelated to github actions templates
+- You need a different domain or tool outside this scope
+
+## Instructions
+
+- Clarify goals, constraints, and required inputs.
+- Apply relevant best practices and validate outcomes.
+- Provide actionable steps and verification.
+
+## Purpose
+
+Create efficient, secure GitHub Actions workflows for continuous integration and deployment across various tech stacks.
+
+## Use this skill when
+
+- Automate testing and deployment
+- Build Docker images and push to registries
+- Deploy to Kubernetes clusters
+- Run security scans
+- Implement matrix builds for multiple environments
+
+## Common Workflow Patterns
+
+### Pattern 1: Test Workflow
+
+```yaml
+name: Test
+
+on:
+  push:
+    branches: [ main, develop ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        node-version: [18.x, 20.x]
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Use Node.js ${{ matrix.node-version }}
+      uses: actions/setup-node@v4
+      with:
+        node-version: ${{ matrix.node-version }}
+        cache: 'npm'
+
+    - name: Install dependencies
+      run: npm ci
+
+    - name: Run linter
+      run: npm run lint
+
+    - name: Run tests
+      run: npm test
+
+    - name: Upload coverage
+      uses: codecov/codecov-action@v3
+      with:
+        files: ./coverage/lcov.info
+```
+
+
+### Pattern 2: Build and Push Docker Image
+
+```yaml
+name: Build and Push
+
+on:
+  push:
+    branches: [ main ]
+    tags: [ 'v*' ]
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Log in to Container Registry
+      uses: docker/login-action@v3
+      with:
+        registry: ${{ env.REGISTRY }}
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Extract metadata
+      id: meta
+      uses: docker/metadata-action@v5
+      with:
+        images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+        tags: |
+          type=ref,event=branch
+          type=ref,event=pr
+          type=semver,pattern={{version}}
+          type=semver,pattern={{major}}.{{minor}}
+
+    - name: Build and push
+      uses: docker/build-push-action@v5
+      with:
+        context: .
+        push: true
+        tags: ${{ steps.meta.outputs.tags }}
+        labels: ${{ steps.meta.outputs.labels }}
+        cache-from: type=gha
+        cache-to: type=gha,mode=max
+```
+
+
+### Pattern 3: Deploy to Kubernetes
+
+```yaml
+name: Deploy to Kubernetes
+
+on:
+  push:
+    branches: [ main ]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Configure AWS credentials
+      uses: aws-actions/configure-aws-credentials@v4
+      with:
+        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        aws-region: us-west-2
+
+    - name: Update kubeconfig
+      run: |
+        aws eks update-kubeconfig --name production-cluster --region us-west-2
+
+    - name: Deploy to Kubernetes
+      run: |
+        kubectl apply -f k8s/
+        kubectl rollout status deployment/my-app -n production
+        kubectl get services -n production
+
+    - name: Verify deployment
+      run: |
+        kubectl get pods -n production
+        kubectl describe deployment my-app -n production
+```
+
+### Pattern 4: Matrix Build
+
+```yaml
+name: Matrix Build
+
+on: [push, pull_request]
+
+jobs:
+  build:
+    runs-on: ${{ matrix.os }}
+
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        python-version: ['3.9', '3.10', '3.11', '3.12']
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: ${{ matrix.python-version }}
+
+    - name: Install dependencies
+      run: |
+        python -m pip install --upgrade pip
+        pip install -r requirements.txt
+
+    - name: Run tests
+      run: pytest
+```
+
+
+## Workflow Best Practices
+
+1. **Use specific action versions** (@v4, not @latest)
+2. **Cache dependencies** to speed up builds
+3. **Use secrets** for sensitive data
+4. **Implement status checks** on PRs
+5. **Use matrix builds** for multi-version testing
+6. **Set appropriate permissions**
+7. **Use reusable workflows** for common patterns
+8. **Implement approval gates** for production
+9. **Add notification steps** for failures
+10. **Use self-hosted runners** for sensitive workloads
+
+## Reusable Workflows
+
+```yaml
+# .github/workflows/reusable-test.yml
+name: Reusable Test Workflow
+
+on:
+  workflow_call:
+    inputs:
+      node-version:
+        required: true
+        type: string
+    secrets:
+      NPM_TOKEN:
+        required: true
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: actions/setup-node@v4
+      with:
+        node-version: ${{ inputs.node-version }}
+    - run: npm ci
+    - run: npm test
+```
+
+**Use reusable workflow:**
+```yaml
+jobs:
+  call-test:
+    uses: ./.github/workflows/reusable-test.yml
+    with:
+      node-version: '20.x'
+    secrets:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+```
+
+## Security Scanning
+
+```yaml
+name: Security Scan
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  security:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Run Trivy vulnerability scanner
+      uses: aquasecurity/trivy-action@master
+      with:
+        scan-type: 'fs'
+        scan-ref: '.'
+        format: 'sarif'
+        output: 'trivy-results.sarif'
+
+    - name: Upload Trivy results to GitHub Security
+      uses: github/codeql-action/upload-sarif@v2
+      with:
+        sarif_file: 'trivy-results.sarif'
+
+    - name: Run Snyk Security Scan
+      uses: snyk/actions/node@master
+      env:
+        SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+```
+
+## Deployment with Approvals
+
+```yaml
+name: Deploy to Production
+
+on:
+  push:
+    tags: [ 'v*' ]
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    environment:
+      name: production
+      url: https://app.example.com
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Deploy application
+      run: |
+        echo "Deploying to production..."
+        # Deployment commands here
+
+    - name: Notify Slack
+      if: success()
+      uses: slackapi/slack-github-action@v1
+      with:
+        webhook-url: ${{ secrets.SLACK_WEBHOOK }}
+        payload: |
+          {
+            "text": "Deployment to production completed successfully!"
+          }
+```
+
+## Related Skills
+
+- `gitlab-ci-patterns` - For GitLab CI workflows
+- `deployment-pipeline-design` - For pipeline architecture
+- `secrets-management` - For secrets handling