synapse-hub 2.6.0 → 2.7.0

package/.agents/skills/qa-aci-interface/SKILL.md

@@ -0,0 +1,67 @@
+---
+name: qa-aci-interface
+description: "Safe Agent-Computer Interface for inspecting code windows (40-50 lines), surgical editing with pre-commit AST checks, and distilled test execution. Use when inspecting, editing, or refactoring code without context blowout."
+---
+
+# QA Agent-Computer Interface (ACI) Skill — Context-Safe Code Editing
+
+> **Paradigm Attribution:** Inspired by **Princeton NLP / Stanford SWE-agent ACI**.  
+> **Core Principle:** Prevent context window blowout and hallucinated edits by enforcing bounded file viewing (40–50 lines), surgical contiguous chunk replacements with AST syntax validation, and log distillation.
+
+---
+
+## 1. The Three ACI Primitives
+
+```mermaid
+flowchart LR
+    View["1. view-window<br/>Read 40-50 lines with line numbers"] --> Edit["2. surgical-edit<br/>Replace exact chunk with AST syntax check"]
+    Edit --> Distill["3. run-distilled<br/>Run test and distill head+tail output"]
+```
+
+1. **Bounded File Viewing (`view-window`):**
+   - Strictly limits context consumption by reading bounded windows (default 40 lines) with line numbers.
+   - Eliminates monolithic file ingestion (reading 4,000-line PageClasses directly is strictly forbidden).
+
+2. **Pre-Commit Surgical Editing (`surgical-edit`):**
+   - Validates that target chunks exist uniquely in the file.
+   - Runs pre-commit AST syntax validation (Python `ast.parse` and bracket balance).
+   - Enforces **Clean POM**: strictly rejects raw XPath / CSS selectors if editing test scripts (`tests/`, `Scripts/`).
+   - Guarantees 100% UTF-8 No BOM across all file writes.
+
+3. **Distilled Execution (`run-distilled`):**
+   - Intercepts test runner stdout/stderr and extracts the head 25 lines and tail 25 lines.
+   - Prevents terminal noise and test trace dumps from saturating the conversation context.
+
+---
+
+## 2. CLI Tool Usage
+
+Autonomous commands via `tools/swe_qa_aci.py`:
+
+```bash
+# 1. View 40 lines starting at line 20
+python tools/swe_qa_aci.py view-window \
+  --file src/pages/LoginPage.ts \
+  --start-line 20 \
+  --window-size 40
+
+# 2. Surgically edit code with AST check & Clean POM guard
+python tools/swe_qa_aci.py surgical-edit \
+  --file src/pages/LoginPage.ts \
+  --target-chunk "await this.page.click('#old-btn');" \
+  --replacement-chunk "await this.clickSafe(this.loginButton);" \
+  --validate-syntax
+
+# 3. Run test command with distilled output
+python tools/swe_qa_aci.py run-distilled \
+  --command "npx playwright test tests/login.spec.ts" \
+  --max-lines 50
+```
+
+---
+
+## 3. Strict Operating Invariants
+
+- **Diff Minimization:** Diff length should not exceed 30 lines per edit.
+- **Syntax Integrity:** Zero syntax errors permitted; the tool rolls back on any syntax invalidity before touching disk.
+- **No BOM Invariant:** Ensures zero `0xEF, 0xBB, 0xBF` bytes in modified files.

package/.agents/skills/qa-aci-interface/examples/surgical_edit_sample.json

@@ -0,0 +1,12 @@
+{
+  "status": "PASS",
+  "file": "src/pages/LoginPage.ts",
+  "lines_replaced": {
+    "start": 25,
+    "end": 25
+  },
+  "ast_validation": "SYNTAX_VALID",
+  "utf8_nobom_verified": true,
+  "clean_pom_verified": true,
+  "diff_summary": "- await this.page.click('#old-btn');\n+ await this.clickSafe(this.loginButton);"
+}

package/.agents/skills/qa-memory-os/SKILL.md

@@ -0,0 +1,80 @@
+---
+name: qa-memory-os
+description: "Hierarchical 3-tier memory operating system for test automation: Core Memory blocks, Recall step logs, and Archival semantic store with AUT version scoping. Use when managing long-term test session state, auth tokens, and preventing context rot."
+---
+
+# QA Test Memory OS Skill — Hierarchical Persistent Memory
+
+> **Paradigm Attribution:** Inspired by **Letta AI / UC Berkeley SkyLab (MemGPT & MemFS)**.  
+> **Core Principle:** Replace flat SQLite caches with a disciplined 3-tier memory operating system. Eliminate memory rot across application versions by tagging locator mutations and flaky histories with explicit AUT release versions.
+
+---
+
+## 1. The 3-Tier Architecture
+
+```mermaid
+flowchart TD
+    subgraph MemoryOS["Hierarchical QA Test Memory OS (.agent_memory/qa_memory.db)"]
+        Core["Tier 1: Core Memory Block<br/>Fast Key-Value JSON: AUT URL, Token Expiry, Feature Flags"]
+        Recall["Tier 2: Recall Memory Log<br/>Sequential chronological timeline of execution steps"]
+        Archival["Tier 3: Archival Semantic Store<br/>Cross-sprint locator mutations scoped by AUT version (v2.1 vs v2.2)"]
+    end
+    
+    Clean["Hygiene & GC Daemon<br/>Secret scrubbing (zero passwords/tokens) & DB size < 50MB"]
+    Core --> Clean
+    Recall --> Clean
+    Archival --> Clean
+```
+
+1. **Tier 1 — Core Memory (`core_memory`):**
+   - Immediate in-context state: active auth tokens, storage state path, AUT base URL.
+   - Enables **Zero-Second Auth**: reuse active tokens without repeating UI login forms.
+
+2. **Tier 2 — Recall Memory (`recall_memory`):**
+   - Sequential audit log of subagent actions, navigation events, and errors.
+   - Rotates or prunes records older than 30 days to save disk space.
+
+3. **Tier 3 — Archival Memory (`archival_memory`):**
+   - Permanent knowledge base of healed locators and historical flaky failure patterns.
+   - **AUT Version Scoping (`aut_version`):** Queries can filter by release (e.g. `aut_version="v2.1"`). When the web app upgrades to `v2.2`, obsolete `v2.1` mutations are ignored, completely eliminating false cache hits (Memory Rot).
+
+---
+
+## 2. CLI Tool Usage
+
+Autonomous commands via `tools/test_memory_os.py`:
+
+```bash
+# 1. Initialize memory OS database
+python tools/test_memory_os.py init --db-path .agent_memory/qa_memory.db
+
+# 2. Update active session state in Core Memory
+python tools/test_memory_os.py update-core \
+  --block auth_state \
+  --data '{"token_expiry": "2026-11-05T00:00:00Z", "storage_state": "storage_state.json"}'
+
+# 3. Store locator mutation in Archival Memory scoped by version
+python tools/test_memory_os.py archival-insert \
+  --key LOCATOR_MUTATION \
+  --payload '{"page": "CheckoutPage", "old": "#submit-btn", "new": "button[data-testid=submit]"}' \
+  --aut-version "v2.1" \
+  --tags "checkout,submit,button"
+
+# 4. Search archival memory with semantic token matching
+python tools/test_memory_os.py archival-search \
+  --query "Checkout submit button locator history" \
+  --aut-version "v2.1" \
+  --top-k 3 \
+  --json
+
+# 5. Run garbage collection and secret scrubbing
+python tools/test_memory_os.py gc --scrub-secrets --max-age-days 30
+```
+
+---
+
+## 3. Strict Operating Invariants
+
+- **Zero Plaintext Secrets:** Automatic regex masking for passwords, bearer tokens, and private keys (`[MASKED_SECRET]`).
+- **Memory File Ceiling:** DB size strictly maintained under **50MB**.
+- **Version Isolation:** Never apply archival locator patches across different incompatible AUT major versions.

package/.agents/skills/qa-memory-os/examples/archival_memory_sample.json

@@ -0,0 +1,21 @@
+{
+  "status": "PASS",
+  "query": "Checkout submit button locator history",
+  "aut_version": "v2.1",
+  "matches_found": 1,
+  "results": [
+    {
+      "id": "mem_arch_9014",
+      "similarity_score": 0.912,
+      "key": "LOCATOR_MUTATION",
+      "timestamp": "2026-11-04T05:30:00Z",
+      "payload": {
+        "page": "CheckoutPage",
+        "old_selector": "#submit-order",
+        "new_selector": "button[data-testid=submit]",
+        "aut_version": "v2.1",
+        "verified_by_test": "tests/checkout.spec.ts"
+      }
+    }
+  ]
+}

package/.agents/skills/review-spec/SKILL.md

@@ -0,0 +1,60 @@
+---
+name: review-spec
+description: "Zero-context stress test and quality review of test specifications, user stories, BDD feature files, and acceptance criteria before code generation begins."
+category: architecture_and_analysis
+version: "1.0.0"
+---
+
+# Review Spec — Zero-Context Specification Stress-Tester
+
+Review test specifications, User Stories, and BDD `.feature` files with stateless, zero-context rigor (Elephant-Goldfish Model) before generating code.
+
+Order of evaluation: **System Boundaries -> Dynamic Data & Teardown -> Assertion Rigor -> Boundary & Negative Cases -> Concrete Implementation Targets**.
+
+---
+
+## 1. When to Use
+
+- Triggered automatically before `pom-crafter` synthesizes Page Classes or test scripts from natural-language specs.
+- Triggered when the user asks to review, audit, or refine requirements, user stories, or acceptance criteria.
+- Integrated CLI invocation:
+  ```bash
+  python tools/goldfish_review.py path/to/spec.md
+  python tools/goldfish_review.py path/to/feature.feature --json
+  # or via CLI shim:
+  agent-qa review-spec path/to/spec.md
+  ```
+
+---
+
+## 2. Five Verification Vectors (Goldfish Protocol)
+
+1. **Comprehension & System Boundaries (20%):**
+   - Explicit Actor/Role definition.
+   - Clear Preconditions and Initial State.
+   - Well-defined Target Scope (no vague "works fine" or "system operates normally").
+
+2. **Dynamic Data & Idempotent Teardown (20%):**
+   - Mandatory dynamic timestamps or random prefixes (`AUTO_`, `uniqueCode`) to eliminate database primary key collisions.
+   - Explicit post-test cleanup or automated Teardown step for every data-creation path.
+
+3. **Assertion Rigor & Truth Anchor (25%):**
+   - Concrete, deterministic expected results instead of tautological assertions.
+   - Zero-Fake-Pass guarantee: explicit UI state changes, status codes, or database assertions.
+
+4. **Boundary & Negative Scenarios (20%):**
+   - Invalid input values, boundary overflows, and unauthorized access attempts.
+   - Explicit error message and validation feedback assertions.
+
+5. **Concrete Implementation Targets (15%):**
+   - Concrete Page Class mappings or API endpoint routes.
+   - Clean POM Flat Architecture compliance (locators belongs in Page Classes, not test scripts).
+
+---
+
+## 3. Autonomous Execution Workflow
+
+1. Ingest specification file (`.md`, `.feature`, or story text).
+2. Run `python tools/goldfish_review.py <spec_file>`.
+3. If review score is `< 80/100` or blocking gaps are found, report specific missing vectors to the user or orchestrator.
+4. Once verified ($\ge 80/100$), proceed with Clean POM test script codification.

package/.agents/skills/review-spec/examples/sample_spec_review.md

@@ -0,0 +1,33 @@
+# Sample Spec Review (Goldfish Protocol)
+
+Representative output of `python tools/goldfish_review.py` evaluating a draft specification for an e-commerce checkout flow.
+
+```markdown
+# 🔍 Goldfish Specification Review Report
+Target Spec: `specs/checkout_flow.md`
+Timestamp: 2026-11-04 15:30:00
+
+## Scorecard: 85/100 (APPROVED)
+
+1. Comprehension & System Boundaries: 20/20
+   - Actor: Authenticated Buyer.
+   - Preconditions: Active cart with >= 1 item, valid shipping address.
+   - Target Scope: Payment step through Order Confirmation modal.
+
+2. Dynamic Data & Idempotent Teardown: 18/20
+   - Dynamic order ID with `AUTO_${Date.now()}`.
+   - Teardown: DB order status updated to `CANCELLED_TEST` via API hook.
+
+3. Assertion Rigor: 22/25
+   - Explicit confirmation message and total amount match.
+   - Anti-Fake Pass check: database order record mutation verified.
+
+4. Boundary & Negative Scenarios: 15/20
+   - Invalid credit card number and expired CVV covered.
+   - Recommendation: Add test case for network timeout during 3D Secure redirect.
+
+5. Implementation Target: 10/15
+   - Target Page: `CheckoutPage.ts`, `OrderConfirmationPage.ts`.
+
+Verdict: PASS (Ready for POM Codification)
+```

package/.agents/skills/synthetic-test-data-generator/SKILL.md

@@ -81,8 +81,8 @@ Transform functional tests into input sanitization and robustness validation by
 
 ```bash
 # Query CLI catalog for specific field vectors
-python3 ~/.zcode/synapse-hub/tools/fuzz_payloads.py --field username --type string
-python3 ~/.zcode/synapse-hub/tools/fuzz_payloads.py --category sqli --json
+python tools/fuzz_payloads.py --field username --type string
+python tools/fuzz_payloads.py --category sqli --json
 ```
 
 ### Recipe D: Harmless SQLi Polyglot Sanity

package/.agents/skills/tot-exploratory-testing/SKILL.md

@@ -0,0 +1,59 @@
+---
+name: tot-exploratory-testing
+description: "Non-linear Tree/Graph-of-Thoughts exploratory testing engine exploring Happy Path, Boundary/Race, and Negative/Chaos branches with Beam Search risk scoring and multi-hypothesis RCA. Use when decomposing complex user stories into exploratory test trees or triaging complex failures."
+---
+
+# Tree-of-Thoughts Exploratory Testing Skill — Deliberative QA Reasoning
+
+> **Paradigm Attribution:** Inspired by **Princeton NLP Tree-of-Thoughts (ToT) & ETH Zürich Graph-of-Thoughts (GoT)**.  
+> **Core Principle:** Overcome linear single-track test generation. Decompose critical enterprise workflows into a 3-branch deliberation tree (Happy Path, Boundary/Race, Chaos/Fault), score intermediate thought nodes with Beam Search, and diagnose root causes via multi-hypothesis evaluation.
+
+---
+
+## 1. The Deliberative 3-Branch Reasoning Tree
+
+```mermaid
+flowchart TD
+    Story["User Story / Feature Requirement"] --> ToT["Tree-of-Thoughts Deliberation Engine"]
+    ToT --> B1["Branch 1: Happy Path<br/>Risk Score: 0.25 (Standard Business CRUD)"]
+    ToT --> B2["Branch 2: Boundary, Race & Session<br/>Risk Score: 0.88 (Double-Click, Token Expire)"]
+    ToT --> B3["Branch 3: Negative & Chaos Fault<br/>Risk Score: 0.72 (Backend 500, DB Timeout)"]
+    
+    B2 --> Synthesize["Clean POM Synthesis<br/>Generate High-Risk Boundary Test Scenarios"]
+```
+
+1. **Deliberative Branching:**
+   - Evaluates non-linear edge cases: mid-transaction network drops, concurrent duplicate clicks, and auth token expiration.
+   - Assigns quantitative risk scores (0.0 to 1.0) to prioritize high-risk test scripts over repetitive happy paths.
+
+2. **Multi-Hypothesis RCA:**
+   - Evaluates competing defect hypotheses (`DOM_TIMEOUT`, `ASYNC_RACE`, `DB_LOCK`, `BACKEND_500`, `STALE_SELECTOR`).
+   - Replaces guesswork with evidence-based diagnosis ranked by confidence scores.
+
+---
+
+## 2. CLI Tool Usage
+
+Autonomous commands via `tools/tot_exploratory_tester.py`:
+
+```bash
+# 1. Expand User Story into Tree of Thoughts
+python tools/tot_exploratory_tester.py expand-story \
+  --story-file docs/stories/US_PAYMENT_GATEWAY.md \
+  --max-depth 3 \
+  --beam-width 3 \
+  --out-graph reports/tot_payment_graph.json
+
+# 2. Perform multi-hypothesis Root Cause Analysis
+python tools/tot_exploratory_tester.py rca-hypotheses \
+  --error-log reports/failed_run.log \
+  --hypotheses "DOM_TIMEOUT,ASYNC_RACE,DB_LOCK,BACKEND_500"
+```
+
+---
+
+## 3. Strict Operating Invariants
+
+- **Critical Flow Prioritization:** Focus multi-branch deliberation on high-risk domains (Financial Checkout, Authentication, Data Mutation).
+- **Clean POM Output:** Test scenarios derived from thought trees must map directly into Page Classes extending `BasePage`.
+- **Zero Hallucination:** Hypotheses must be grounded directly in error log evidence and stacktraces.

package/.agents/skills/tot-exploratory-testing/examples/tot_graph_sample.json

@@ -0,0 +1,35 @@
+{
+  "status": "PASS",
+  "story_title": "US_PAYMENT_GATEWAY",
+  "domain": "FINANCIAL_CHECKOUT",
+  "max_depth": 3,
+  "beam_width": 3,
+  "total_branches_explored": 3,
+  "highest_risk_branch": "BRANCH_BOUNDARY_RACE",
+  "branches": [
+    {
+      "branch_id": "BRANCH_BOUNDARY_RACE",
+      "name": "Boundary, Session Interruption & Concurrency Path",
+      "risk_score": 0.88,
+      "thoughts": [
+        {
+          "step": 1,
+          "thought": "Simulate session expiration or token invalidation mid-flow."
+        },
+        {
+          "step": 2,
+          "thought": "Perform rapid double-click on submission action to probe race condition."
+        },
+        {
+          "step": 3,
+          "thought": "Assert idempotency: strictly 1 transaction created, duplicate blocked gracefully."
+        }
+      ]
+    }
+  ],
+  "clean_pom_recommendations": [
+    "Implement FINANCIAL_CHECKOUTPage extending BasePage",
+    "Encapsulate double-click debounce in clickSubmitSafe()",
+    "Assert boundary toast in verifyErrorMessageDisplayed()"
+  ]
+}

package/.agents/skills/wcag-audit-patterns/SKILL.md

@@ -70,8 +70,8 @@ Agent can automatically audit accessibility for any HTML file or live page URL v
 
 ```bash
 # Audit a local HTML snapshot
-python3 ~/.zcode/synapse-hub/tools/wcag_audit.py path/to/page.html -o docs/wcag_audit_report.md
+python tools/wcag_audit.py path/to/page.html -o docs/wcag_audit_report.md
 
 # Audit a live application URL directly
-python3 ~/.zcode/synapse-hub/tools/wcag_audit.py https://staging.example.com --url -o docs/wcag_audit_report.md
+python tools/wcag_audit.py https://staging.example.com --url -o docs/wcag_audit_report.md
 ```

package/.agents/skills/web-agent-gym-benchmarking/SKILL.md

@@ -0,0 +1,62 @@
+---
+name: web-agent-gym-benchmarking
+description: "Empirical benchmark harness evaluating web agents and Page Classes against standardized enterprise tasks with headless <200ms latency budgets and ground-truth DB state verification. Use when benchmarking web agents or certifying Page Classes."
+---
+
+# Web Agent Gym Benchmarking Skill — Empirical Interaction & PageClass Certification
+
+> **Paradigm Attribution:** Inspired by **ServiceNow Research BrowserGym & CMU WebArena**.  
+> **Core Principle:** Move beyond static assertions and text-only tool tests. Measure real agent navigation efficiency, enforce < 200ms headless step latency, and confirm that UI actions trigger ground-truth database mutations (eliminating fake passes).
+
+---
+
+## 1. The Benchmark Architecture
+
+```mermaid
+flowchart TD
+    subgraph GymHarness["BrowserGym Evaluation Harness (tools/browsergym_eval.py)"]
+        Tasks["Standardized Tasks<br/>ecommerce_order, crm_lead_create, filter_data_grid"]
+        Execution["Headless Playwright Execution<br/>Sub-200ms latency per action step"]
+        DualVerify["Dual Verification Oracle<br/>1. DOM/AOM state inspection<br/>2. Underlying DB record verification"]
+        Certify["Certification Decision<br/>Success >= 90% & Latency < 200ms -> APPROVED"]
+    end
+```
+
+1. **Standardized Tasks:**
+   - Pre-packaged enterprise scenarios covering forms, checkout modals, dropdowns, and data grids.
+   - Evaluates whether the web agent can navigate without deadlocks or infinite loops.
+
+2. **Ground-Truth Dual Verification:**
+   - A pass is NOT granted merely because a UI toast says "Success".
+   - The harness validates the database mutation (`SELECT COUNT(*) FROM orders WHERE ...`).
+
+3. **PageClass Certification:**
+   - Static and dynamic audit of newly synthesized Page Classes.
+   - Rejects Page Classes containing `findTestObject`, raw XPaths, or static `Thread.sleep` calls.
+
+---
+
+## 2. CLI Tool Usage
+
+Autonomous commands via `tools/browsergym_eval.py`:
+
+```bash
+# 1. Run full benchmark suite in headless mode
+python tools/browsergym_eval.py run-suite \
+  --tasks "ecommerce_order,crm_lead_create,filter_data_grid" \
+  --headless \
+  --timeout-sec 30 \
+  --report-out reports/browsergym_benchmark.json
+
+# 2. Evaluate and certify a Page Class
+python tools/browsergym_eval.py evaluate-pageclass \
+  --page-class src/pages/OrderManagementPage.ts
+```
+
+---
+
+## 3. Strict Operating Invariants
+
+- **Headless Latency Ceiling:** Average action step latency must remain below **200ms**.
+- **No Static Sleep:** Any Page Class with `sleep()` calls is automatically flagged as `REJECTED`.
+- **Clean POM:** Strictly prohibits hardcoded selectors outside Page Classes.

package/.agents/skills/web-agent-gym-benchmarking/examples/benchmark_report_sample.json

@@ -0,0 +1,22 @@
+{
+  "status": "PASS",
+  "suite": "EnterpriseWebBenchmark_v1",
+  "total_tasks": 3,
+  "passed_tasks": 3,
+  "action_success_rate": 1.0,
+  "avg_latency_ms": 131.2,
+  "database_assertion_pass_rate": 1.0,
+  "certification": "APPROVED",
+  "tasks": [
+    {
+      "task": "ecommerce_order",
+      "name": "E-Commerce Checkout & Order Generation",
+      "steps_count": 5,
+      "avg_step_latency_ms": 130.0,
+      "dom_verification": "PASS",
+      "database_assertion": "PASS",
+      "status": "PASS"
+    }
+  ],
+  "elapsed_seconds": 0.45
+}

package/CLAUDE.md

@@ -17,7 +17,7 @@ In accordance with the MIT License, the original copyright notice crediting **Th
 ---
 
 ## ⚡ Quick Commands
-- Verify 9 Quality Gates: `npx synapse-hub verify` (or `python tools/verify_all.py`)
+- Verify 10 Quality Gates: `npx synapse-hub verify` (or `python tools/verify_all.py`)
 - Project Health Audit: `npx synapse-hub analyze` (or `python tools/analyze_project.py`)
 - Code Linter & Fake-Pass Sentinel: `npx synapse-hub lint` (or `python tools/infer_linter.py`)
 - Verify Author Attribution: `python tools/author_integrity.py`

package/README.en.md

@@ -4,9 +4,9 @@
 [🇻🇳 Tiếng Việt](README.md) | [🇬🇧 English Edition](README.en.md)
 
 > **Core Mission:** A standalone, zero-dependency Linter & Guardrail engine (zero external dependencies for core engine & DoD gates) protecting test suite integrity in the era of AI code generation — Catching tautological "fake-pass" tests, eliminating hard sleeps, distilling 95% CI log noise, and enforcing Clean POM architecture. Specialized tools (Excel export, Canvas visual diff) leverage standard optional extras (`openpyxl`, `Pillow`).  
-> **Extended Ecosystem:** Bundled with 42 production QA skills, 6 specialized AI roles, and 10 DoD Quality Gates supporting Playwright, Cypress, Pytest, and Katalon.  
+> **Extended Ecosystem:** Bundled with 51 production QA skills, 6 specialized AI roles, and 10 DoD Quality Gates supporting Playwright, Cypress, Pytest, and Katalon.  
 > **Author:** Thế Vị ([@TeeVee998](https://github.com/TeeVee998))  
-> **Hub Version:** `v2.6.0` | **Scope:** 42 Standardized Skills, 6 Specialized AI Agents, 68 CLI Commands & 68+ Test Engineering Tools, 10 DoD Quality Gates.
+> **Hub Version:** `v2.7.0` | **Scope:** 51 Standardized Skills, 6 Specialized AI Agents, 76 CLI Commands & 76+ Test Engineering Tools, 10 DoD Quality Gates.
 
 [![npm version](https://img.shields.io/npm/v/synapse-hub.svg?style=flat-square&color=blue)](https://www.npmjs.com/package/synapse-hub)
 [![node version](https://img.shields.io/badge/node-%3E%3D18.0.0-brightgreen.svg?style=flat-square)](https://nodejs.org)
@@ -19,7 +19,7 @@
 ### 💡 What is Synapse Hub? (In 30 Seconds)
 
 > 📌 **Hub & Spoke Architecture Notice (Avoid Cloner Confusion):**  
-> • **Synapse-Hub (This Repo):** The **"Central Brain"** hosting 42 skills, linters, and QA tools — **not** your test suite.  
+> • **Synapse-Hub (This Repo):** The **"Central Brain"** hosting 51 skills, linters, and QA tools — **not** your test suite.  
 > • **Target Project (Spoke):** Your actual automation test repository (Playwright, Katalon, Pytest, Cypress, etc.).  
 > 👉 To bootstrap Synapse Hub protection for your test project, open a terminal inside that project and run:  
 > `npx synapse-hub setup` *(or from here with a target flag: `npx synapse-hub setup --target ../your-target-project`)*.
@@ -28,7 +28,7 @@ Think of Synapse Hub as a versatile, dual-mode engine:
 1. 🛠️ **Standalone CLI Tool (Zero AI needed):** Simply run `npx synapse-hub lint` to scan your test suite, distill bloated CI logs, or export test cases to standard Excel spreadsheets without any complex setup.
 2. 🧠 **Guardrail "Brain" for AI Coding Assistants:** When using Google Antigravity, Cursor, or Claude Code, Synapse Hub acts as an automated quality guardrail — preventing AI assistants from generating tautological fake-passes, swallowing exceptions, or inserting flaky hard sleeps.
 
-> 🛡️ **Zero Overhead:** You **never need to memorize** all 42 skills or 60+ tools! The system operates strictly *On-Demand*, activating tools only when a specific situation arises.
+> 🛡️ **Zero Overhead:** You **never need to memorize** all 51 skills or 60+ tools! The system operates strictly *On-Demand*, activating tools only when a specific situation arises.
 
 #### ⚖️ Before vs. After Synapse Hub:
 
@@ -173,7 +173,7 @@ repos:
 ```mermaid
 flowchart TD
     subgraph Hub["🧠 Synapse Hub (Core v2.4.0)"]
-        Skills[".agents/skills/ (42 Skills)"]
+        Skills[".agents/skills/ (51 Skills)"]
         Agents[".agents/agents/ (6 Specialized Roles)"]
         Rules[".agents/rules/ (11 Core Rules)"]
         Tools["tools/ (60+ Universal Python Tools)"]

package/README.md

@@ -4,9 +4,9 @@
 [🇻🇳 Tiếng Việt](README.md) | [🇬🇧 English Edition](README.en.md)
 
 > **Định vị cốt lõi:** Bộ Linter & Guardrails độc lập (zero external dependencies cho core engine & DoD gates) bảo vệ độ tin cậy của test suite khi AI viết code — Phát hiện & ngăn chặn test "pass ảo" (0 assert, tautology), loại bỏ hoàn toàn sleep cố định, nén 95% log CI/CD, và chuẩn hóa cấu trúc Clean POM. Các tính năng nâng cao (xuất bảng Excel chuẩn doanh nghiệp, so sánh ảnh Canvas) sử dụng thư viện mở rộng tùy chọn (`openpyxl`, `Pillow`).  
-> **Module mở rộng:** Sẵn sàng kết nối 42 kỹ năng QA chuyên sâu, 6 vai trò AI Swarm và 10 Cổng kiểm định DoD hỗ trợ Playwright, Cypress, Pytest và Katalon.  
+> **Module mở rộng:** Sẵn sàng kết nối 51 kỹ năng QA chuyên sâu, 6 vai trò AI Swarm và 10 Cổng kiểm định DoD hỗ trợ Playwright, Cypress, Pytest và Katalon.  
 > **Tác giả:** Thế Vị ([@TeeVee998](https://github.com/TeeVee998))  
-> **Phiên bản Hub:** `v2.6.0` | **Quy mô:** 42 Kỹ năng chuẩn hóa, 6 Vai trò AI Agent, 68 Lệnh CLI & 68+ Công cụ kiểm thử chuyên sâu, 10 Cổng kiểm định DoD.
+> **Phiên bản Hub:** `v2.7.0` | **Quy mô:** 51 Kỹ năng chuẩn hóa, 6 Vai trò AI Agent, 76 Lệnh CLI & 76+ Công cụ kiểm thử chuyên sâu, 10 Cổng kiểm định DoD.
 
 [![npm version](https://img.shields.io/npm/v/synapse-hub.svg?style=flat-square&color=blue)](https://www.npmjs.com/package/synapse-hub)
 [![node version](https://img.shields.io/badge/node-%3E%3D18.0.0-brightgreen.svg?style=flat-square)](https://nodejs.org)
@@ -173,7 +173,7 @@ repos:
 ```mermaid
 flowchart TD
     subgraph Hub["🧠 Synapse Hub (Core v2.4.0)"]
-        Skills[".agents/skills/ (42 Skills)"]
+        Skills[".agents/skills/ (51 Skills)"]
         Agents[".agents/agents/ (6 Specialized Roles)"]
         Rules[".agents/rules/ (11 Core Rules)"]
         Tools["tools/ (60+ Universal Python Tools)"]

package/docs/ARCHITECTURE.md

@@ -1,7 +1,7 @@
 # Agent-Skills Architecture & Design Principles
 
 > **Scope:** Enterprise Multi-Agent QA Hub  
-> **Version:** `2.6.0` | **Status:** Active / Production Standard
+> **Version:** `2.7.0` | **Status:** Active / Production Standard
 
 ---
 
@@ -12,7 +12,7 @@ The `agent-skills` repository functions as a centralized **Intelligence Core (Hu
 ```mermaid
 flowchart TD
     subgraph Hub["Agent-Skills Hub (Intelligence Core)"]
-        Catalog["42 Standardized Skills (.agents/skills)"]
+        Catalog["51 Standardized Skills (.agents/skills)"]
         Rules["Core Architectural Rules (.agents/rules)"]
         Tools["Zero-Token Python Engine (tools/)"]
         Swarm["6 Specialized Subagents (.agents/agents)"]
@@ -38,7 +38,7 @@ flowchart TD
 
 ## 2. Four-Tier Skill Stratification
 
-The 42 skills in the hub are structured into four progressive operational tiers:
+The 50 skills in the hub are structured into four progressive operational tiers:
 
 ```mermaid
 flowchart LR
@@ -100,12 +100,12 @@ The Hub equips 6 specialized subagents with scoped tool and skill permissions:
 
 | Subagent Role | Primary Focus | Allowed Skills | Execution Tools |
 | :--- | :--- | :--- | :--- |
-| **`orchestrator`** | Task decomposition & governance | `agent-orchestration-multi-agent-optimize`, `graphify-impact-analyzer`, `architecture-decision-records`, `token-and-context-optimizer` | `verify_all.py`, `test_impact.py`, `setup_project.py`, `interview_story.py`, `dspy_qa_signatures.py` |
-| **`pom-crafter`** | Clean POM design & test generation | `clean-pom-crafter`, `lam-script-generator`, `synthetic-test-data-generator`, `api-spec-to-e2e-matrix` | `lookup_xpath.py`, `repo_map.py`, `generate_tc_from_story.py`, `skill_vault.py` |
+| **`orchestrator`** | Task decomposition & governance | `agent-orchestration-multi-agent-optimize`, `graphify-impact-analyzer`, `architecture-decision-records`, `token-and-context-optimizer`, `actor-qa-swarm`, `event-stream-qa-orchestrator`, `qa-memory-os`, `tot-exploratory-testing`, `review-spec` | `verify_all.py`, `test_impact.py`, `setup_project.py`, `interview_story.py`, `dspy_qa_signatures.py`, `autogen_qa_broker.py`, `qa_event_stream.py`, `test_memory_os.py`, `tot_exploratory_tester.py`, `watch_mode.py`, `dashboard_generator.py` |
+| **`pom-crafter`** | Clean POM design & test generation | `clean-pom-crafter`, `lam-script-generator`, `synthetic-test-data-generator`, `api-spec-to-e2e-matrix`, `gherkin-to-suite`, `mipro-prompt-compiler`, `qa-aci-interface` | `lookup_xpath.py`, `repo_map.py`, `generate_tc_from_story.py`, `skill_vault.py`, `gherkin_suite.py`, `swe_qa_aci.py`, `mipro_assertion_tuner.py`, `api_fuzzer.py`, `export_postman_collection.py` |
 | **`live-explorer`** | Live DOM & AOM exploration (<200ms) | `playwright-live-interaction`, `self-healing-locator`, `visual-regression-sentinel`, `api-network-mocking-interception` | `browser_helpers.js`, `e2e_flow_prober.ps1`, `safety_firewall.py` |
-| **`test-runner`** | Headless CLI test execution & CI | `katalon-cli-runner`, `e2e-testing-patterns`, `flaky-test-sentinel-and-quarantine`, `backend-load-and-stress-patterns`, `github-actions-templates` | `matrix_sharder.py`, `distill_log.py`, `pinpoint_failure.py`, `flaky_detector.py`, `reversible_sandbox.py`, `synapse_qa_bench.py` |
-| **`failure-analyst`**| Visual & XML error autopsy | `failure-autopsy-and-healing`, `self-healing-locator`, `file-and-report-validator` | `auto_heal.py`, `heal_pr_automator.py`, `pinpoint_failure.py`, `cache_resolver.py`, `auto_heal_reflexion.py` |
-| **`quality-gatekeeper`**| 10 Gates DoD & Fake-Pass Sentinel | `antigravity-test-sentinel`, `code-refactoring-refactor-clean`, `wcag-audit-patterns`, `web-vitals-and-performance-profiler`, `security-dast-sentinel` | `verify_all.py`, `infer_linter.py`, `micro_mutator.py`, `trace_data_flow.py`, `skill_collision_guard.py`, `textgrad_mutation_optimizer.py` |
+| **`test-runner`** | Headless CLI test execution & CI | `katalon-cli-runner`, `e2e-testing-patterns`, `flaky-test-sentinel-and-quarantine`, `backend-load-and-stress-patterns`, `github-actions-templates` | `matrix_sharder.py`, `distill_log.py`, `pinpoint_failure.py`, `flaky_detector.py`, `reversible_sandbox.py`, `generate_jmx_plan.py`, `jtl_analyzer.py`, `newman_analyzer.py`, `traffic_session_converter.py`, `db_sandbox.py` |
+| **`failure-analyst`**| Visual & XML error autopsy | `failure-autopsy-and-healing`, `self-healing-locator`, `file-and-report-validator`, `systematic-debugging`, `agentless-qa-repair` | `auto_heal.py`, `heal_pr_automator.py`, `pinpoint_failure.py`, `cache_resolver.py`, `auto_heal_reflexion.py`, `agentless_patcher.py`, `heuristic_locator_matcher.py`, `telemetry_correlator.py` |
+| **`quality-gatekeeper`**| 10 Gates DoD & Fake-Pass Sentinel | `antigravity-test-sentinel`, `code-refactoring-refactor-clean`, `wcag-audit-patterns`, `web-vitals-and-performance-profiler`, `security-dast-sentinel`, `lean-impact-scoreboard`, `web-agent-gym-benchmarking` | `verify_all.py`, `infer_linter.py`, `micro_mutator.py`, `trace_data_flow.py`, `skill_collision_guard.py`, `textgrad_mutation_optimizer.py`, `skillspector.py`, `author_integrity.py`, `browsergym_eval.py` |
 
 ---