Skip to content

Add deployment scheduling, benchmarking, security testing, and backup/recovery#433

Merged
Nanle-code merged 4 commits into
Nanle-code:masterfrom
devsimze:feat/scheduling-benchmarking-security-backup
Jun 29, 2026
Merged

Add deployment scheduling, benchmarking, security testing, and backup/recovery#433
Nanle-code merged 4 commits into
Nanle-code:masterfrom
devsimze:feat/scheduling-benchmarking-security-backup

Conversation

@devsimze

Copy link
Copy Markdown
Contributor

Summary

Implements four enhancement issues:

  • D-66: Add Contract Deployment Scheduling #414 — Deployment scheduling: time-based scheduling engine with multi-approval workflows, dependency-ordered execution, and a starforge schedule CLI (create/list/show/approve/reject/cancel/run/dashboard).
  • D-68: Add Contract Performance Benchmarking Service #416 — Benchmarking service: scores recorded contract gas usage, execution time, and success rate against built-in industry baselines (token/defi/nft/voting/generic), producing a weighted score, grade, and optimization recommendations via starforge benchmark compare|history|show (existing raw timing benchmark moved to benchmark wasm).
  • D-69: Implement Contract Security Testing Framework #417 — Security testing framework: simulated penetration test battery covering 6 common Soroban attack vectors (missing auth, reentrancy, overflow/underflow, replay, unbounded-loop DoS, panics) plus a remediation tracker (assign/status/notes), via starforge security pentest and starforge security remediation.
  • D-67: Implement Contract Backup and Recovery System #415 — Backup and recovery: zip-based backups of contract code/state with SHA-256 integrity checks, optional AES-GCM encryption, cross-region replication, point-in-time recovery, non-destructive recovery testing, and recurring automation, via starforge backup.

Each feature follows the existing CLI architecture: a clap subcommand in src/commands/, backed by JSON-file-persisted logic in src/utils/, registered in src/main.rs.

Closes #414
Closes #415
Closes #416
Closes #417

Test plan

  • cargo build --bin starforge — clean
  • cargo clippy --bin starforge --lib -- -D warnings — clean
  • cargo test --lib — 213 passed, 0 failed
  • Manual smoke test of all new commands (schedule create/list/run, benchmark compare/history, security pentest/remediation, backup create/verify/restore/replicate/auto-run)

🤖 Generated with Claude Code

devsimze added 4 commits June 29, 2026 15:13
Adds a deployment scheduling engine (src/utils/scheduler.rs) with
time-based scheduling, multi-approval workflows, dependency-ordered
execution, and a `starforge schedule` CLI surface (create, list, show,
approve, reject, cancel, run, dashboard).

Part of Nanle-code#414.
Adds src/utils/benchmarking.rs, which scores a contract's recorded gas
usage, execution time, and success rate against built-in industry
baselines (token, defi, nft, voting, generic), producing a weighted
score/grade and actionable optimization recommendations. Restructures
`starforge benchmark` into a subcommand group: the existing raw WASM
timing benchmark becomes `benchmark wasm`, with new `compare`,
`history`, and `show` subcommands for the comparison reports.

Part of Nanle-code#416.
Adds a simulated penetration testing battery (src/utils/security/pentest.rs)
covering six common Soroban attack vectors (missing auth, reentrancy,
overflow/underflow, replay, unbounded-loop DoS, panics), plus a
remediation tracker (src/utils/security/remediation.rs) for assigning,
updating status, and annotating findings from audits/pentests. Wires
new `starforge security pentest` and `starforge security remediation`
(list/assign/status/note) subcommands, with pentest findings
auto-tracked as remediation items.

Part of Nanle-code#417.
Adds src/utils/backup.rs: zip-based backups of contract code/state with
SHA-256 integrity checksums, optional AES-GCM encryption (reusing the
existing crypto module), cross-region replication, point-in-time
recovery lookup by label/timestamp, non-destructive recovery testing,
and a recurring automation config. New `starforge backup` CLI surface:
create, list, show, verify, restore, restore-point-in-time, replicate,
test-recovery, auto-configure, auto-run.

Also wires the `schedule`, `benchmark`, and `backup` command groups
into the main CLI dispatcher (src/main.rs, src/commands/mod.rs,
src/utils/mod.rs) and fixes the stale completions.rs mirror that
referenced the old benchmark::BenchmarkArgs type.

Part of Nanle-code#415.
@drips-wave

drips-wave Bot commented Jun 29, 2026

Copy link
Copy Markdown

@devsimze Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@Nanle-code Nanle-code merged commit fc37fa4 into Nanle-code:master Jun 29, 2026
1 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

2 participants