synapse-hub 2.1.1 → 2.2.0

package/skills_manifest.json

@@ -1,9 +1,9 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "name": "Enterprise Agent Skills Hub",
-  "version": "2.1.1",
+  "version": "2.2.0",
   "description": "Unified Catalog of 27 Specialized Skills for Autonomous AI Agents in Enterprise Software Quality Engineering, Performance, and Architecture.",
-  "totalSkills": 27,
+  "totalSkills": 28,
   "categories": {
     "context_and_optimization": [
       "token-and-context-optimizer",
@@ -29,6 +29,7 @@
       "file-and-report-validator",
       "db-state-verifier-and-seeder",
       "security-dast-sentinel",
+      "skillspector-security-guard",
       "flaky-test-sentinel-and-quarantine"
     ],
     "architecture_and_analysis": [
@@ -47,7 +48,7 @@
       "name": "Agent Orchestration Multi-Agent Optimize",
       "category": "context_and_optimization",
       "path": ".agents/skills/agent-orchestration-multi-agent-optimize/SKILL.md",
-      "summary": "Optimize multi-agent systems with coordinated profiling, workload distribution, and cost-aware orchestration.",
+      "summary": "Profile, benchmark, and orchestrate multi-agent test workloads and token throughput.",
       "version": "2.0.0"
     },
     {
@@ -55,7 +56,7 @@
       "name": "Antigravity Test Sentinel",
       "category": "verification_and_resilience",
       "path": ".agents/skills/antigravity-test-sentinel/SKILL.md",
-      "summary": "Verification-first sentinel locking task completion until runner commands return exit code 0.",
+      "summary": "Enforce verification-first discipline: blocks task completion until tests and quality gates pass.",
       "version": "2.0.0"
     },
     {
@@ -63,7 +64,7 @@
       "name": "API Network Mocking & Interception",
       "category": "verification_and_resilience",
       "path": ".agents/skills/api-network-mocking-interception/SKILL.md",
-      "summary": "Intercept, stub, and mock HTTP/GraphQL network traffic, and verify chaos network resilience during E2E test runs.",
+      "summary": "Intercept HTTP/GraphQL traffic, stub routes, and simulate chaos network failures.",
       "version": "2.0.0"
     },
     {
@@ -71,7 +72,7 @@
       "name": "API Spec to E2E Matrix",
       "category": "architecture_and_analysis",
       "path": ".agents/skills/api-spec-to-e2e-matrix/SKILL.md",
-      "summary": "Transforms OpenAPI/Swagger specifications and schemas into positive, boundary, and negative test matrices.",
+      "summary": "Generate automated positive, boundary, and negative test matrices from OpenAPI specifications.",
       "version": "2.0.0"
     },
     {
@@ -79,7 +80,7 @@
       "name": "Architecture Decision Records",
       "category": "architecture_and_analysis",
       "path": ".agents/skills/architecture-decision-records/SKILL.md",
-      "summary": "Write and maintain Architecture Decision Records (ADRs) following engineering standards.",
+      "summary": "Record, structure, and maintain technical Architecture Decision Records (ADRs).",
       "version": "2.0.0"
     },
     {
@@ -87,7 +88,7 @@
       "name": "Auth Session and Cookie Manager",
       "category": "test_automation_and_execution",
       "path": ".agents/skills/auth-session-and-cookie-manager/SKILL.md",
-      "summary": "Manage browser authentication sessions, JWT tokens, and storageState for zero-second logins on-demand.",
+      "summary": "Manage browser authentication sessions, storageState, JWT tokens, and multi-role state.",
       "version": "2.0.0"
     },
     {
@@ -96,14 +97,15 @@
       "description": "Enterprise backend load, stress, and endurance test orchestration using k6 and Locust. Directs AI agents in modeling concurrent Virtual Users (VUs), establishing SLA threshold assertions (P95/P99 latency, throughput/RPS, error rate < 0.1%), executing stress break-point tests, and soak/endurance validation.",
       "category": "test_automation_and_execution",
       "path": ".agents/skills/backend-load-and-stress-patterns/SKILL.md",
-      "version": "1.0.0"
+      "version": "1.0.0",
+      "summary": "Orchestrate k6 and Locust backend load, stress, and SLA endurance test suites."
     },
     {
       "id": "bats-testing-patterns",
       "name": "Bats Testing Patterns",
       "category": "test_automation_and_execution",
       "path": ".agents/skills/bats-testing-patterns/SKILL.md",
-      "summary": "Master Bash Automated Testing System (Bats) for shell scripts and CI/CD pipelines.",
+      "summary": "Test bash/sh scripts, CLI tools, and CI/CD pipelines with Bats.",
       "version": "2.0.0"
     },
     {
@@ -111,7 +113,7 @@
       "name": "Clean POM Crafter",
       "category": "test_automation_and_execution",
       "path": ".agents/skills/clean-pom-crafter/SKILL.md",
-      "summary": "Standardized Clean Page Object Model development and Flat Architecture enforcement.",
+      "summary": "Build and refactor Clean POM Page Classes adhering to Flat Architecture standards.",
       "version": "2.0.0"
     },
     {
@@ -119,7 +121,7 @@
       "name": "Code Refactoring Refactor Clean",
       "category": "architecture_and_analysis",
       "path": ".agents/skills/code-refactoring-refactor-clean/SKILL.md",
-      "summary": "Master code refactoring, SOLID patterns, code smell elimination, and technical debt reduction.",
+      "summary": "Eliminate technical debt and refactor code using SOLID and Clean Code patterns.",
       "version": "2.0.0"
     },
     {
@@ -127,7 +129,7 @@
       "name": "Database State Verifier and Seeder",
       "category": "verification_and_resilience",
       "path": ".agents/skills/db-state-verifier-and-seeder/SKILL.md",
-      "summary": "Verify database records, seed isolated test fixtures, and assert mutations (SQL/NoSQL) on-demand.",
+      "summary": "Seed isolated test fixtures and assert database mutations across SQL and NoSQL.",
       "version": "2.0.0"
     },
     {
@@ -135,7 +137,7 @@
       "name": "E2E Testing Patterns",
       "category": "test_automation_and_execution",
       "path": ".agents/skills/e2e-testing-patterns/SKILL.md",
-      "summary": "Master end-to-end testing with Playwright and Cypress to build fast and reliable test suites.",
+      "summary": "Design robust multi-browser E2E test architectures, parallel sharding, and retry governance.",
       "version": "2.0.0"
     },
     {
@@ -143,7 +145,7 @@
       "name": "Failure Autopsy and Healing",
       "category": "verification_and_resilience",
       "path": ".agents/skills/failure-autopsy-and-healing/SKILL.md",
-      "summary": "Automated failure triage, visual error autopsy from screenshots and Allure reports, and in-place code healing.",
+      "summary": "Triage test failures from JUnit XML/screenshots and heal broken Page Class locators.",
       "version": "2.0.0"
     },
     {
@@ -151,7 +153,7 @@
       "name": "File and Report Validator",
       "category": "verification_and_resilience",
       "path": ".agents/skills/file-and-report-validator/SKILL.md",
-      "summary": "Validate uploaded and exported files (Excel .xlsx, CSV, PDF) for correct schemas and data integrity on-demand.",
+      "summary": "Validate downloaded and uploaded files (Excel, CSV, PDF) schemas and tabular integrity.",
       "version": "2.0.0"
     },
     {
@@ -160,14 +162,15 @@
       "description": "Enterprise flaky test detection, scoring, and automated quarantine governance. Detects non-deterministic test behavior via multi-run repetition (e.g., 5 iterations), computes flakiness index, isolates unstable tests from blocking CI/CD merges via quarantine tagging (@quarantine / @flaky), and tracks MTBF until remediation.",
       "category": "verification_and_resilience",
       "path": ".agents/skills/flaky-test-sentinel-and-quarantine/SKILL.md",
-      "version": "1.0.0"
+      "version": "1.0.0",
+      "summary": "Detect non-deterministic flaky tests, calculate flakiness scores, and manage quarantine."
     },
     {
       "id": "github-actions-templates",
       "name": "GitHub Actions Templates",
       "category": "architecture_and_analysis",
       "path": ".agents/skills/github-actions-templates/SKILL.md",
-      "summary": "Production-ready GitHub Actions workflows for automated testing, building, and deploying.",
+      "summary": "Create production-ready GitHub Actions workflows for automated test suites and CI/CD.",
       "version": "2.0.0"
     },
     {
@@ -175,7 +178,7 @@
       "name": "Graphify Impact Analyzer",
       "category": "architecture_and_analysis",
       "path": ".agents/skills/graphify-impact-analyzer/SKILL.md",
-      "summary": "AST Knowledge Graph exploration, navigation, and zero-waste test impact analysis.",
+      "summary": "Analyze code change blast radius and scope impacted test cases via AST.",
       "version": "2.0.0"
     },
     {
@@ -183,7 +186,7 @@
       "name": "Katalon CLI Runner",
       "category": "test_automation_and_execution",
       "path": ".agents/skills/katalon-cli-runner/SKILL.md",
-      "summary": "Adaptive test execution manager supporting licensed KRE CLI and headless automation runs.",
+      "summary": "Execute headless Katalon and Gradle test runners with automatic driver cleanup.",
       "version": "2.0.0"
     },
     {
@@ -191,7 +194,7 @@
       "name": "LAM Script Generator",
       "category": "test_automation_and_execution",
       "path": ".agents/skills/lam-script-generator/SKILL.md",
-      "summary": "Large Action Model (LAM) script generator transforming user stories into Clean POM scripts.",
+      "summary": "Transform user stories and acceptance criteria into Clean POM automation scripts.",
       "version": "2.0.0"
     },
     {
@@ -199,7 +202,7 @@
       "name": "Playwright Live Interaction",
       "category": "test_automation_and_execution",
       "path": ".agents/skills/playwright-live-interaction/SKILL.md",
-      "summary": "Fast live web interaction and interactive DOM/AOM probing via Playwright MCP.",
+      "summary": "Probe live web DOM/AOM and verify selectors under 200ms using headless Playwright.",
       "version": "2.0.0"
     },
     {
@@ -208,14 +211,24 @@
       "description": "Dynamic Application Security Testing (DAST) and OWASP Top 10 automated verification for web apps and APIs. Audits security response headers (CSP, HSTS, X-Frame-Options), detects sensitive data leaks (PII, tokens, internal stacktraces), asserts BOLA/IDOR authorization boundaries via role token swapping, and validates CORS configurations.",
       "category": "verification_and_resilience",
       "path": ".agents/skills/security-dast-sentinel/SKILL.md",
-      "version": "1.0.0"
+      "version": "1.0.0",
+      "summary": "Run dynamic security audits: OWASP Top 10, security headers, IDOR, and token leakage."
+    },
+    {
+      "id": "skillspector-security-guard",
+      "name": "SkillSpector Security Guard",
+      "description": "Autonomous security scanner for AI Agent skills, prompt instructions, and MCP tool configs. Detects 71 vulnerability vectors across 17 categories (Prompt Injection, Data Exfiltration, Privilege Escalation, Agent Snooping, Tool Poisoning, Behavioral AST). Powered by NVIDIA SkillSpector heuristics with Prohibition Context Guard.",
+      "category": "verification_and_resilience",
+      "path": ".agents/skills/skillspector-security-guard/SKILL.md",
+      "version": "1.0.0",
+      "summary": "Audit and verify AI agent skills, prompts, and MCP configurations against 71 vulnerability vectors inspired by NVIDIA SkillSpector."
     },
     {
       "id": "self-healing-locator",
       "name": "Self Healing Locator",
       "category": "verification_and_resilience",
       "path": ".agents/skills/self-healing-locator/SKILL.md",
-      "summary": "Token-efficient self-healing locator skill using Accessibility Tree (AOM) and semantic DOM diffing.",
+      "summary": "Heal broken locators using semantic AOM diffing with Role, Label, and TestId hierarchy.",
       "version": "2.0.0"
     },
     {
@@ -223,7 +236,7 @@
       "name": "Synthetic Test Data Generator",
       "category": "verification_and_resilience",
       "path": ".agents/skills/synthetic-test-data-generator/SKILL.md",
-      "summary": "Generate robust, idempotent, and boundary-value synthetic test data for automated test suites.",
+      "summary": "Generate idempotent, boundary-value synthetic test data with unique runtime timestamps.",
       "version": "2.0.0"
     },
     {
@@ -231,7 +244,7 @@
       "name": "Token and Context Optimizer",
       "category": "context_and_optimization",
       "path": ".agents/skills/token-and-context-optimizer/SKILL.md",
-      "summary": "Sparse context retrieval, terminal log distillation, context degradation prevention, and file-backed memory scratchpad.",
+      "summary": "Optimize prompt context, distill verbose logs, and prevent context rot in Antigravity.",
       "version": "2.0.0"
     },
     {
@@ -239,7 +252,7 @@
       "name": "Visual Regression Sentinel",
       "category": "verification_and_resilience",
       "path": ".agents/skills/visual-regression-sentinel/SKILL.md",
-      "summary": "Pixel-level and perceptual visual regression testing with dynamic masking and layout shift detection.",
+      "summary": "Run pixel and layout shift visual regression checks with anti-flake masking.",
       "version": "2.0.0"
     },
     {
@@ -247,7 +260,7 @@
       "name": "WCAG Audit Patterns",
       "category": "architecture_and_analysis",
       "path": ".agents/skills/wcag-audit-patterns/SKILL.md",
-      "summary": "Conduct WCAG 2.2 accessibility audits with automated testing and remediation guidance.",
+      "summary": "Audit WCAG 2.2 accessibility (A/AA), keyboard navigation, and ARIA roles.",
       "version": "2.0.0"
     },
     {
@@ -255,7 +268,7 @@
       "name": "Web Vitals and Performance Profiler",
       "category": "architecture_and_analysis",
       "path": ".agents/skills/web-vitals-and-performance-profiler/SKILL.md",
-      "summary": "Profile Core Web Vitals (LCP, CLS, INP/FID, TTFB) and detect slow APIs via CDP on-demand.",
+      "summary": "Measure Core Web Vitals (LCP, CLS, INP) and network waterfalls via CDP.",
       "version": "2.0.0"
     }
   ]

package/templates/PROJECT_AI_GUIDE_TEMPLATE.md

@@ -51,13 +51,27 @@
   ```bash
   [e.g., npx playwright test tests/e2e/login.spec.ts]
   ```
-- **Execute 7 Quality Gates Verification:**
+- **Execute 8 Quality Gates Verification:**
   ```bash
+  npx synapse-hub verify
+  # or
   python tools/verify_all.py
   ```
 
 ---
 
+## 6. Universal Multi-IDE & Multi-AI Setup
+This repository supports multi-agent and multi-IDE automation natively through Synapse-Hub bridges:
+- **Google Antigravity:** Powered globally via Global Plugin (`~/.gemini/config/plugins/synapse-hub`).
+- **Cursor:** Automated rules at `.cursor/rules/synapse-qa.mdc`.
+- **Claude Code:** Project guide at `CLAUDE.md`.
+- **GitHub Copilot:** Custom system instructions at `.github/copilot-instructions.md`.
+- **Windsurf (Cascade):** Automation invariants at `.windsurfrules`.
+
+All bridges enforce Clean POM, Truth Anchor, and 8 Quality Gates DoD automatically.
+
+---
+
 ## 6. Git Push & SCM Workflow
 - **Clean SCM by Architecture:** Because `agent-skills` is a separate external repository, this target project stays 100% clean of AI skills, rules, and prompts. No dual-remote or smart push script is needed.
 - **Push Command:** Commit verified code and push directly to this project's remote branch:

package/templates/ai_bridges/CLAUDE.md

@@ -0,0 +1,31 @@
+# CLAUDE.md — Synapse-Hub Guidelines for Claude Code
+
+You are an expert QA Automation and Test Architect adhering to enterprise standards governed by Synapse-Hub.
+
+## Quick Commands
+- Verify 8 Quality Gates: `npx synapse-hub verify`
+- Project Health Audit: `npx synapse-hub analyze`
+- Update Synapse Hub: `npx synapse-hub update`
+- Codebase Intelligence: Refer to `PROJECT_AI_GUIDE.md` and `repo_map.txt`
+
+## Core QA Automation Invariants
+1. **Clean Page Object Model (POM):**
+   - Test scripts (`tests/`, `Scripts/`) must contain ONLY business workflow calls on Page Classes.
+   - Strictly forbidden: Raw XPaths, CSS selectors, or `findTestObject` inside test scripts.
+   - All locators and DOM operations must be encapsulated in Page Classes extending `BasePage`.
+
+2. **Truth Anchor (Zero Fake Passes):**
+   - Never write empty assertions or tautological tests (e.g. `assert True`, 0 asserts).
+   - If a test fails due to an AUT (Application Under Test) bug, report the defect honestly. Never soften assertions or skip validation steps to fake a pass.
+
+3. **Dynamic & Idempotent Test Data:**
+   - Always randomize test entity codes with timestamps/prefixes (`AUTO_` + timestamp) to avoid DB unique constraint collisions during parallel runs.
+   - Every creation test case MUST be paired with automated Teardown / Cleanup.
+
+4. **Synchronization & Smart Waits:**
+   - Static sleeps (`Thread.sleep`, `time.sleep`) are strictly prohibited.
+   - Use dynamic smart waits: element visibility, network idle (`networkidle`), or framework readiness.
+
+5. **Definition of Done (DoD):**
+   - Before completing any testing or code refactoring task, run `npx synapse-hub verify`.
+   - All 8 Quality Gates must return `PASS`.

package/templates/ai_bridges/copilot-instructions.md

@@ -0,0 +1,25 @@
+# GitHub Copilot Instructions — Synapse-Hub Enterprise QA
+
+When assisting in this repository, you must adhere strictly to the enterprise testing standards governed by Synapse-Hub:
+
+## 1. Clean Page Object Model (POM)
+- Keep all test scripts (`tests/`, `Scripts/`) decoupled from UI implementation details.
+- Never write raw XPaths, CSS selectors, or direct DOM queries in test scripts.
+- Encapsulate all element locators and page actions within Page Classes extending `BasePage`.
+
+## 2. Truth Anchor (Zero Fake Passes)
+- Every test must contain robust, non-trivial assertions that verify actual system state or business outputs.
+- Never write tests without assertions or catch-all exception swallowers that mask failures.
+- If an application defect is uncovered, report it cleanly; do not modify expected values to force a pass.
+
+## 3. Dynamic & Idempotent Test Data
+- Generate unique identifiers dynamically (e.g. `AUTO_` + timestamp) for all entities created during tests.
+- Always include automated cleanup/teardown logic to prevent test environment pollution.
+
+## 4. Smart Synchronization
+- Never suggest or write static sleep calls (`Thread.sleep`, `time.sleep`).
+- Always use explicit/dynamic waits (visibility, DOM stability, network idle).
+
+## 5. Verification Gate
+- When tests or page objects are added or modified, verify adherence by running `npx synapse-hub verify`.
+- Consult `PROJECT_AI_GUIDE.md` for project-specific setup and architecture patterns.

package/templates/ai_bridges/cursor_synapse_qa.mdc

@@ -0,0 +1,26 @@
+---
+description: Synapse-Hub Enterprise QA Standards, Clean POM, Truth Anchor, and 8 Quality Gates DoD
+globs: **/*
+alwaysApply: true
+---
+
+# Synapse-Hub QA Standards for Cursor AI
+
+You are an expert QA Automation Engineer adhering to enterprise testing discipline governed by Synapse-Hub.
+
+## Mandatory Rules:
+1. **Clean Page Object Model (POM):**
+   - Test scripts (e.g. `tests/`, `Scripts/`) must NEVER contain raw XPaths, CSS selectors, or `findTestObject`.
+   - All locators and DOM interactions must be encapsulated in Page Classes inheriting from `BasePage`.
+2. **Truth Anchor (Zero Fake Passes):**
+   - Never write tautological tests (0 assertions or trivial assertions like `assert True`).
+   - If an application bug occurs, report it honestly. Never soften assertions to manufacture a fake pass.
+3. **Dynamic & Idempotent Test Data:**
+   - Always use randomized unique identifiers (e.g. `AUTO_` + timestamp) to prevent DB collisions.
+   - Always implement automated teardown/cleanup for any created data.
+4. **Synchronization & Smart Waits:**
+   - Static sleeps (`Thread.sleep`, `time.sleep`) are strictly forbidden. Use dynamic network idle or element visibility waits.
+5. **Quality Gate Verification:**
+   - Run `npx synapse-hub verify` before declaring any task complete. All 8 Quality Gates must PASS.
+6. **Project Intelligence:**
+   - Read `PROJECT_AI_GUIDE.md` for project-specific architecture, test credentials, and directory structure.

package/templates/ai_bridges/windsurfrules

@@ -0,0 +1,25 @@
+# Windsurf Cascade Rules — Synapse-Hub Enterprise QA
+
+You are an expert QA Automation Engineer adhering to Synapse-Hub enterprise testing standards.
+
+## Mandatory Invariants:
+1. **Clean POM Architecture:**
+   - Test scripts must only invoke methods from Page Classes.
+   - Strictly forbidden: raw CSS selectors, XPaths, or DOM queries in test scripts.
+   - Encapsulate all UI interaction in Page Classes extending `BasePage`.
+
+2. **Truth Anchor (No Fake Passes):**
+   - No 0-assertion tests or catch-all try/catch blocks that swallow test failures.
+   - Report AUT bugs honestly; never alter test assertions to fake a pass.
+
+3. **Dynamic Test Data & Cleanup:**
+   - Always generate unique test data using timestamps/prefixes (`AUTO_` + timestamp).
+   - Pair all data creation with automated teardown cleanup to prevent DB clutter.
+
+4. **Dynamic Waits Only:**
+   - No static `sleep` calls (`Thread.sleep`, `time.sleep`).
+   - Use dynamic waits: element visibility, clickable states, network idle.
+
+5. **Definition of Done:**
+   - Always run `npx synapse-hub verify` before completing testing tasks.
+   - Read `PROJECT_AI_GUIDE.md` for project architecture and conventions.

package/templates/ci/github-actions-synapse.yml

@@ -0,0 +1,28 @@
+name: Synapse QA Quality Gate
+
+on:
+  push:
+    branches: [ main, develop, master ]
+  pull_request:
+    branches: [ main, develop, master ]
+
+jobs:
+  quality-gate:
+    name: 8 Quality Gates DoD Verification
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Project Source
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js (NPX Runner)
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Setup Python Environment
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Run Synapse-Hub Quality Gates
+        run: npx synapse-hub verify

package/templates/ci/gitlab-ci-synapse.yml

@@ -0,0 +1,16 @@
+# Synapse-Hub Enterprise QA Quality Gate Snippet for GitLab CI
+# Include this job in your target project's .gitlab-ci.yml
+
+stages:
+  - test
+
+synapse-qa-gate:
+  stage: test
+  image: node:20-bookworm
+  before_script:
+    - apt-get update && apt-get install -y python3 python3-pip
+  script:
+    - npx synapse-hub verify
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH