ilpanich / axiam / 29646748699

91%

push

github

fix(benchmarks): write resource CSV rows; configure OAuth2/optional secrets; skip OAuth2 when unset

- resource/sampler.sh: fix a pipeline-precedence bug where
  'stats | grep || true | while' parsed as '(stats|grep) || (true|while)',
  so the row-writing loop only ran when grep matched NOTHING — the CSV only
  ever got its header. Group grep with braces so it's one 3-stage pipeline;
  samples are now written every interval.

- bench-up: set the optional subsystem secrets so MFA, GDPR pseudonymization,
  email/GDPR export, the password pepper, and OIDC discovery are functional
  rather than degraded-off — AXIAM__AUTH__MFA_ENCRYPTION_KEY,
  AXIAM__EMAIL_ENCRYPTION_KEY, AXIAM__GDPR_PSEUDONYM_PEPPER (64-hex),
  AXIAM__AUTH__PEPPER (plain), AXIAM__AUTH__OAUTH2_ISSUER_URL (localhost).
  All persisted under docker/.secrets/ for stability; wired into the target
  compose (hex keys fail-closed) and bench-down's teardown placeholders.

- run-benchmark.sh: skip the OAuth2 client-flow scenarios when OAuth2 isn't
  configured (BENCH_SKIP_OAUTH2=1, or no seeded client) so a missing OAuth2
  setup no longer fails the run; jwks_fetch still runs (needs no client).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NEQ27rSiTYmitP6MaVnBTp

1682 of 1859 branches covered (90.48%)

Branch coverage included in aggregate %.

27336 of 33350 relevant lines covered (81.97%)

71.06 hits per line