synapse-hub 2.5.0 → 2.7.0

package/tools/tot_exploratory_tester.py

@@ -0,0 +1,240 @@
+#!/usr/bin/env python3
+# SPDX-FileCopyrightText: Copyright (c) 2026 Thế Vị (@TeeVee998). All rights reserved.
+# SPDX-License-Identifier: MIT
+# Project: Synapse-Hub (https://github.com/TeeVee998/Synapse-Hub)
+
+"""
+Tree/Graph-of-Thoughts Exploratory Testing Engine (Princeton ToT & ETH GoT Pattern)
+----------------------------------------------------------------------------------
+Expands linear user stories into deliberative non-linear exploration trees:
+  1. Multi-Branch Deliberation: Generates Happy Path, Boundary/Race, and Negative/Chaos branches.
+  2. Risk-Scored Beam Search: Evaluates thought states and prunes low-risk tautological paths.
+  3. Clean POM Synthesis: Produces structured test scenarios ready for Clean POM Page Classes.
+  4. Multi-Hypothesis RCA: Diagnoses test failures across competing failure hypotheses (DOM_TIMEOUT, ASYNC_RACE, DB_LOCK, BACKEND_500).
+
+Usage:
+  python tools/tot_exploratory_tester.py expand-story --story-file docs/stories/US_PAYMENT.md --max-depth 3 --beam-width 3
+  python tools/tot_exploratory_tester.py rca-hypotheses --error-log reports/failed.log
+"""
+
+import os
+import sys
+import re
+import json
+import time
+import argparse
+from typing import Dict, Any, List, Optional, Tuple
+
+# Enforce UTF-8 stdout encoding
+if hasattr(sys.stdout, 'reconfigure'):
+    try:
+        sys.stdout.reconfigure(encoding='utf-8')
+        sys.stderr.reconfigure(encoding='utf-8')
+    except Exception:
+        pass
+
+
+class TotExploratoryTester:
+    """Tree-of-Thoughts Engine for Exploratory QA and Root Cause Analysis."""
+
+    def __init__(self, repo_root: Optional[str] = None):
+        self.repo_root = repo_root or os.path.abspath(os.path.join(os.path.dirname(__file__), ".."))
+
+    def expand_story(self, story_content: str, max_depth: int = 3, beam_width: int = 3) -> Dict[str, Any]:
+        """Decomposes story into a 3-branch Tree of Thoughts with risk scores."""
+        # Extract title and criteria
+        lines = [l.strip() for l in story_content.splitlines() if l.strip()]
+        title = lines[0] if lines else "Untitled User Story"
+        if title.startswith("#"):
+            title = title.lstrip("#").strip()
+
+        # Extract keywords
+        keywords = re.findall(r'\b[a-zA-Z]{4,}\b', story_content.lower())
+        is_checkout = any(k in keywords for k in ["cart", "checkout", "pay", "order", "price"])
+        is_auth = any(k in keywords for k in ["login", "auth", "token", "password", "sso"])
+
+        context_domain = "FINANCIAL_CHECKOUT" if is_checkout else ("AUTH_SESSION" if is_auth else "GENERAL_CRUD")
+
+        # 3 Branches:
+        # 1. Happy Path
+        # 2. Boundary / Session Interruption / Race Condition
+        # 3. Negative / Chaos / Backend Fault
+        branches = [
+            {
+                "branch_id": "BRANCH_HAPPY_PATH",
+                "name": "Standard Happy Business Path",
+                "risk_score": 0.25,
+                "thoughts": [
+                    {"step": 1, "thought": "Navigate to initial entity view and ensure clean pre-conditions."},
+                    {"step": 2, "thought": "Populate valid payload attributes and trigger submit action."},
+                    {"step": 3, "thought": "Verify success confirmation modal and assert database record creation."}
+                ]
+            },
+            {
+                "branch_id": "BRANCH_BOUNDARY_RACE",
+                "name": "Boundary, Session Interruption & Concurrency Path",
+                "risk_score": 0.88,
+                "thoughts": [
+                    {"step": 1, "thought": "Simulate session expiration or token invalidation mid-flow."},
+                    {"step": 2, "thought": "Perform rapid double-click on submission action to probe race condition."},
+                    {"step": 3, "thought": "Assert idempotency: strictly 1 transaction created, duplicate blocked gracefully."}
+                ]
+            },
+            {
+                "branch_id": "BRANCH_NEGATIVE_CHAOS",
+                "name": "Negative Error Handling & Chaos Fault Path",
+                "risk_score": 0.72,
+                "thoughts": [
+                    {"step": 1, "thought": "Inject malformed/boundary input payload exceeding maximum character limits."},
+                    {"step": 2, "thought": "Simulate backend 500 error or database connection timeout via route stub."},
+                    {"step": 3, "thought": "Assert user-friendly error toast, zero data corruption, and retry availability."}
+                ]
+            }
+        ]
+
+        # Beam search selection: sort by risk score descending and take beam_width
+        sorted_branches = sorted(branches, key=lambda b: b["risk_score"], reverse=True)
+        selected_branches = sorted_branches[:beam_width]
+
+        return {
+            "status": "PASS",
+            "story_title": title,
+            "domain": context_domain,
+            "max_depth": max_depth,
+            "beam_width": beam_width,
+            "total_branches_explored": len(branches),
+            "highest_risk_branch": selected_branches[0]["branch_id"],
+            "branches": selected_branches,
+            "clean_pom_recommendations": [
+                f"Implement {context_domain}Page extending BasePage",
+                "Encapsulate double-click debounce in clickSubmitSafe()",
+                "Assert boundary toast in verifyErrorMessageDisplayed()"
+            ]
+        }
+
+    def rca_hypotheses(self, error_log: str, hypotheses: Optional[List[str]] = None) -> Dict[str, Any]:
+        """Performs multi-hypothesis Root Cause Analysis on test failures."""
+        if not hypotheses:
+            hypotheses = ["DOM_TIMEOUT", "ASYNC_RACE", "DB_LOCK", "BACKEND_500", "STALE_SELECTOR"]
+
+        log_lower = error_log.lower()
+        scored_hypotheses = []
+
+        for hyp in hypotheses:
+            score = 0.0
+            evidence = []
+
+            if hyp == "DOM_TIMEOUT":
+                if "timed out" in log_lower or "waitfortimeout" in log_lower or "5000ms" in log_lower:
+                    score += 0.85
+                    evidence.append("Found timeout or waiting duration signature in log")
+                if "element is not visible" in log_lower or "tobevisible" in log_lower:
+                    score += 0.10
+                    evidence.append("Element visibility expectation failed")
+
+            elif hyp == "ASYNC_RACE":
+                if "click intercepted" in log_lower or "animation" in log_lower or "detached" in log_lower:
+                    score += 0.90
+                    evidence.append("Overlay or detachment signature points to async race condition")
+                if "networkidle" in log_lower or "pending" in log_lower:
+                    score += 0.15
+                    evidence.append("Pending network requests active during action")
+
+            elif hyp == "DB_LOCK":
+                if "deadlock" in log_lower or "lock" in log_lower or "sql" in log_lower or "unique constraint" in log_lower:
+                    score += 0.88
+                    evidence.append("Database lock or constraint collision detected in trace")
+
+            elif hyp == "BACKEND_500":
+                if re.search(r'\b500\b', log_lower) and not re.search(r'\b500\d+ms\b', log_lower) and ("http" in log_lower or "status" in log_lower or "server error" in log_lower or "internal" in log_lower):
+                    score += 0.95
+                    evidence.append("HTTP 500 status code explicitly logged")
+                elif "internal server error" in log_lower:
+                    score += 0.95
+                    evidence.append("Internal Server Error explicitly logged")
+
+            elif hyp == "STALE_SELECTOR":
+                if "locator" in log_lower or "selector" in log_lower or "xpath" in log_lower:
+                    score += 0.70
+                    evidence.append("Locator or selector syntax mentioned in failure message")
+
+            # Baseline confidence
+            if not evidence:
+                score = 0.10
+                evidence.append("No direct signature found; baseline background likelihood")
+
+            scored_hypotheses.append({
+                "hypothesis": hyp,
+                "confidence_score": round(min(1.0, score), 3),
+                "evidence": evidence
+            })
+
+        scored_hypotheses.sort(key=lambda h: h["confidence_score"], reverse=True)
+        winner = scored_hypotheses[0]
+
+        recommendations = {
+            "DOM_TIMEOUT": "Replace hardcoded delay with page.waitForLoadState('networkidle') or element.waitFor({state: 'visible'})",
+            "ASYNC_RACE": "Use clickSafe() helper with overlay detachment waiting or dispatchEvent('click')",
+            "DB_LOCK": "Randomize entity code prefix via DataGenerator.uniqueCode('AUTO_') and enforce teardown cleanup",
+            "BACKEND_500": "Inspect backend server logs for uncaught 500 NullPointerException or DB connection pool exhaustion",
+            "STALE_SELECTOR": "Run tools/agentless_patcher.py heal-failure to update stale attribute to ARIA role"
+        }
+
+        return {
+            "status": "PASS",
+            "primary_root_cause": winner["hypothesis"],
+            "confidence": winner["confidence_score"],
+            "recommended_fix": recommendations.get(winner["hypothesis"], "Review stacktrace with team"),
+            "ranked_hypotheses": scored_hypotheses
+        }
+
+
+def main():
+    parser = argparse.ArgumentParser(description="Tree-of-Thoughts Exploratory Testing Engine")
+    subparsers = parser.add_subparsers(dest="subcommand", help="Subcommand to execute")
+
+    # expand-story
+    exp_p = subparsers.add_parser("expand-story", help="Expand User Story into Tree of Thoughts")
+    exp_p.add_argument("--story-file", required=True, help="Path to story markdown file or text string")
+    exp_p.add_argument("--max-depth", type=int, default=3, help="Max thought tree depth")
+    exp_p.add_argument("--beam-width", type=int, default=3, help="Beam search width")
+    exp_p.add_argument("--out-graph", help="Optional path to output graph JSON")
+
+    # rca-hypotheses
+    rca_p = subparsers.add_parser("rca-hypotheses", help="Diagnose failure via multi-hypothesis RCA")
+    rca_p.add_argument("--error-log", required=True, help="Path to error log or log string")
+    rca_p.add_argument("--hypotheses", help="Comma-separated hypotheses list")
+
+    args = parser.parse_args()
+    tester = TotExploratoryTester()
+
+    if args.subcommand == "expand-story":
+        content = args.story_file
+        if os.path.exists(args.story_file):
+            with open(args.story_file, "r", encoding="utf-8", errors="replace") as f:
+                content = f.read()
+        res = tester.expand_story(content, max_depth=args.max_depth, beam_width=args.beam_width)
+        if args.out_graph:
+            os.makedirs(os.path.dirname(os.path.abspath(args.out_graph)), exist_ok=True)
+            with open(args.out_graph, "w", encoding="utf-8") as f:
+                json.dump(res, f, indent=2)
+        print(json.dumps(res, indent=2))
+        sys.exit(0)
+
+    elif args.subcommand == "rca-hypotheses":
+        log_content = args.error_log
+        if os.path.exists(args.error_log):
+            with open(args.error_log, "r", encoding="utf-8", errors="replace") as f:
+                log_content = f.read()
+        hyp_list = [h.strip() for h in args.hypotheses.split(",")] if args.hypotheses else None
+        res = tester.rca_hypotheses(error_log=log_content, hypotheses=hyp_list)
+        print(json.dumps(res, indent=2))
+        sys.exit(0)
+
+    else:
+        parser.print_help()
+        sys.exit(1)
+
+
+if __name__ == "__main__":
+    main()

package/tools/update_sentinel.py

@@ -65,7 +65,7 @@ def get_local_version():
         try:
             with open(pkg_file, "r", encoding="utf-8") as f:
                 data = json.load(f)
-                return data.get("version", "2.5.0")
+                return data.get("version", "2.7.0")
         except (OSError, json.JSONDecodeError):
             data = {}
 
@@ -74,11 +74,11 @@ def get_local_version():
         try:
             with open(manifest_file, "r", encoding="utf-8") as f:
                 data = json.load(f)
-                return data.get("version", "2.5.0")
+                return data.get("version", "2.7.0")
         except (OSError, json.JSONDecodeError):
             data = {}
 
-    return "2.5.0"
+    return "2.7.0"
 
 
 def fetch_remote_version():

package/tools/verify_all.py

@@ -18,6 +18,7 @@ Verifies:
   Gate 6: Credential Security: No plaintext passwords in Profiles/default.glbl or repository.
   Gate 7: Static Defect Sentinel: Meta Infer-style AST scan for fake passes and empty catches.
   Gate 8: Syntactic Micro-Mutation Sentinel: Injects syntactic faults to eliminate tautological tests (Mutation Score >= 80%).
+  Gate 9: Tier-2 Skill Collision Guard: Addy Osmani offline TF-IDF cosine similarity check (similarity < 0.75).
 
 Supports:
   - Hub Mode: Verifies the centralized QA Hub / skills repository integrity.
@@ -194,7 +195,7 @@ MOJIBAKE_INDICATORS = (
 
 def gate_1_bom_check(repo_root, mode="AUTO"):
     print("\n[GATE 1] Scanning UTF-8 No BOM and Encoding Integrity across repository...")
-    ignored_dirs = {".git", ".gradle", "node_modules", "allure-results", "graphify-out", "__pycache__", "build", "dist", "claude-ecosystem-repos"}
+    ignored_dirs = {".git", ".gradle", "node_modules", "allure-results", "graphify-out", "__pycache__", "build", "dist", "claude-ecosystem-repos", "external_repos", "teamwork"}
     ignored_files = {"verify_all.py", "test_tools.py"}
     bom_violations = []
     mojibake_violations = []
@@ -244,7 +245,7 @@ def gate_2_path_portability(repo_root, mode="AUTO"):
     ignored_dirs = {
         ".git", ".gradle", "node_modules", "allure-results", "Screenshots",
         "Reports", "reports", "TestReports", "testreports", "bin", "Libs", ".settings", "graphify-out",
-        "__pycache__", "agent_qa.egg-info", "dist", "build", "claude-ecosystem-repos"
+        "__pycache__", "agent_qa.egg-info", "dist", "build", "claude-ecosystem-repos", "external_repos", "teamwork"
     }
     ignored_files = {
         ".project", ".classpath", ".DS_Store", "memory_cache.db",
@@ -441,7 +442,7 @@ def gate_6_credential_security(repo_root, mode="AUTO"):
     ignored_dirs = {
         ".git", ".gradle", "node_modules", "allure-results", "Screenshots",
         "Reports", "reports", "TestReports", "testreports", "bin", "Libs", ".settings", "graphify-out",
-        "__pycache__", "agent_qa.egg-info", "dist", "build", "claude-ecosystem-repos"
+        "__pycache__", "agent_qa.egg-info", "dist", "build", "claude-ecosystem-repos", "external_repos", "teamwork"
     }
 
     for root, dirs, files in os.walk(repo_root):
@@ -480,7 +481,7 @@ def check_python_ast_integrity(repo_root):
     """
     builtin_names = set(dir(builtins)) | {'__file__', '__name__', '__doc__', '__package__'}
     py_files = []
-    ignored = {'.git', 'node_modules', '__pycache__', '.venv', 'venv', 'claude-ecosystem-repos', 'build', 'dist', '.gradle'}
+    ignored = {'.git', 'node_modules', '__pycache__', '.venv', 'venv', 'claude-ecosystem-repos', 'build', 'dist', '.gradle', 'external_repos', 'teamwork'}
 
     for root, dirs, files in os.walk(repo_root):
         dirs[:] = [d for d in dirs if d not in ignored]
@@ -795,6 +796,35 @@ def gate_8_micro_mutator(repo_root, mode="AUTO", test_cmd=""):
     return True
 
 
+def gate_9_skill_collision(repo_root, mode="AUTO"):
+    print("\n[GATE 9] Running Tier-2 Skill Routing & Collision Guard (Addy Osmani Pattern)...")
+    guard_script = os.path.join(SCRIPT_DIR, "skill_collision_guard.py")
+    if not os.path.exists(guard_script):
+        guard_script = os.path.join(repo_root, "tools", "skill_collision_guard.py")
+    if not os.path.exists(guard_script):
+        print("[FAIL] skill_collision_guard.py not found in tools/!")
+        return False
+
+    skills_dir = os.path.join(repo_root, ".agents", "skills")
+    if not os.path.exists(skills_dir):
+        print("[PASS] Target project mode: .agents/skills/ not present (SKIPPED).")
+        return True
+
+    try:
+        res = subprocess.run([sys.executable, guard_script, "--dir", skills_dir, "--threshold", "0.75"],
+                             stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, timeout=60.0)
+    except subprocess.TimeoutExpired:
+        print("[FAIL] skill_collision_guard.py timed out after 60s!")
+        return False
+
+    if res.returncode != 0:
+        print(res.stdout)
+        print(res.stderr)
+        return False
+    print("[PASS] 100% Verified: 0 skill description collisions detected (similarity < 0.75).")
+    return True
+
+
 def load_synapse_config(repo_root=None, config_path=None):
     """Loads configuration from synapse.config.json if present."""
     if config_path and os.path.exists(config_path):
@@ -855,6 +885,7 @@ def run_all_gates(repo_root, mode="AUTO", test_cmd="", output_format="text", con
         ("gate_6_credential_security", "Gate 6: Credential Security", gate_6_credential_security),
         ("gate_7_infer_linter", "Gate 7: Static Defect Sentinel", gate_7_infer_linter),
         ("gate_8_micro_mutator", "Gate 8: Assertion Sensitivity & Syntactic Mutation Sentinel", lambda r, mode: gate_8_micro_mutator(r, mode=mode, test_cmd=test_cmd)),
+        ("gate_9_skill_collision", "Gate 9: Tier-2 Skill Routing & Collision Guard", gate_9_skill_collision),
     ]
 
     all_passed = True

package/tools/watch_mode.py

@@ -46,7 +46,7 @@ IGNORED_DIRS = {
     ".git", ".gradle", "node_modules", "allure-results", "Screenshots",
     "Reports", "reports", "TestReports", "testreports", "bin", "Libs", ".settings",
     "graphify-out", "__pycache__", "agent_qa.egg-info", "dist", "build", ".pytest_cache",
-    "claude-ecosystem-repos"
+    "claude-ecosystem-repos", "external_repos", "teamwork"
 }
 
 IGNORED_FILES = {

package/tools/welcome_page.py

@@ -17,7 +17,7 @@ Features:
   - Interactive tabs covering the 4 Core Pillars of QA Intelligence.
   - Interactive CLI Cheatsheet with 1-click clipboard copy.
   - Comparison matrix vs existing industry tools (ESLint, Stryker, Allure, Healenium).
-  - 6 Subagent Swarm Profiles & 9 Quality Gates DoD showcase.
+  - 6 Subagent Swarm Profiles & 10 Quality Gates DoD showcase.
   - Automatic browser launching on setup, pull, or CLI dispatch.
 """
 
@@ -48,7 +48,7 @@ def get_hub_metadata() -> Dict[str, Any]:
     """Retrieves version and catalog count from skills_manifest.json."""
     manifest_path = os.path.join(HUB_ROOT, "skills_manifest.json")
     meta = {
-        "version": "2.5.0",
+        "version": "2.7.0",
         "totalSkills": 42,
         "author": "Thế Vị (@TeeVee998)",
         "repo": "https://github.com/TeeVee998/Synapse-Hub"