@claude-flow/cli 3.32.9 → 3.32.11

package/.claude/helpers/ddd-tracker.sh

@@ -1,144 +1,144 @@
-#!/bin/bash
-# Claude Flow V3 - DDD Progress Tracker Worker
-# Tracks Domain-Driven Design implementation progress
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
-METRICS_DIR="$PROJECT_ROOT/.claude-flow/metrics"
-DDD_FILE="$METRICS_DIR/ddd-progress.json"
-V3_PROGRESS="$METRICS_DIR/v3-progress.json"
-LAST_RUN_FILE="$METRICS_DIR/.ddd-last-run"
-
-mkdir -p "$METRICS_DIR"
-
-# V3 Target Domains
-DOMAINS=("agent-lifecycle" "task-execution" "memory-management" "coordination" "shared-kernel")
-
-should_run() {
-  if [ ! -f "$LAST_RUN_FILE" ]; then return 0; fi
-  local last_run=$(cat "$LAST_RUN_FILE" 2>/dev/null || echo "0")
-  local now=$(date +%s)
-  [ $((now - last_run)) -ge 600 ]  # 10 minutes
-}
-
-check_domain() {
-  local domain="$1"
-  local domain_path="$PROJECT_ROOT/v3/@claude-flow/$domain"
-  local alt_path="$PROJECT_ROOT/src/domains/$domain"
-
-  local score=0
-  local max_score=100
-
-  # Check if domain directory exists (20 points)
-  if [ -d "$domain_path" ] || [ -d "$alt_path" ]; then
-    score=$((score + 20))
-    local path="${domain_path:-$alt_path}"
-    [ -d "$domain_path" ] && path="$domain_path" || path="$alt_path"
-
-    # Check for domain layer (15 points)
-    [ -d "$path/domain" ] || [ -d "$path/src/domain" ] && score=$((score + 15))
-
-    # Check for application layer (15 points)
-    [ -d "$path/application" ] || [ -d "$path/src/application" ] && score=$((score + 15))
-
-    # Check for infrastructure layer (15 points)
-    [ -d "$path/infrastructure" ] || [ -d "$path/src/infrastructure" ] && score=$((score + 15))
-
-    # Check for API/interface layer (10 points)
-    [ -d "$path/api" ] || [ -d "$path/src/api" ] && score=$((score + 10))
-
-    # Check for tests (15 points)
-    local test_count=$(find "$path" -name "*.test.ts" -o -name "*.spec.ts" 2>/dev/null | wc -l)
-    [ "$test_count" -gt 0 ] && score=$((score + 15))
-
-    # Check for index/exports (10 points)
-    [ -f "$path/index.ts" ] || [ -f "$path/src/index.ts" ] && score=$((score + 10))
-  fi
-
-  echo "$score"
-}
-
-count_entities() {
-  local type="$1"
-  local pattern="$2"
-
-  find "$PROJECT_ROOT/v3" "$PROJECT_ROOT/src" -name "*.ts" 2>/dev/null | \
-    xargs grep -l "$pattern" 2>/dev/null | \
-    grep -v node_modules | grep -v ".test." | wc -l || echo "0"
-}
-
-track_ddd() {
-  echo "[$(date +%H:%M:%S)] Tracking DDD progress..."
-
-  local total_score=0
-  local domain_scores=""
-  local completed_domains=0
-
-  for domain in "${DOMAINS[@]}"; do
-    local score=$(check_domain "$domain")
-    total_score=$((total_score + score))
-    domain_scores="$domain_scores\"$domain\": $score, "
-
-    [ "$score" -ge 50 ] && completed_domains=$((completed_domains + 1))
-  done
-
-  # Calculate overall progress
-  local max_total=$((${#DOMAINS[@]} * 100))
-  local progress=$((total_score * 100 / max_total))
-
-  # Count DDD artifacts
-  local entities=$(count_entities "entities" "class.*Entity\|interface.*Entity")
-  local value_objects=$(count_entities "value-objects" "class.*VO\|ValueObject")
-  local aggregates=$(count_entities "aggregates" "class.*Aggregate\|AggregateRoot")
-  local repositories=$(count_entities "repositories" "interface.*Repository\|Repository")
-  local services=$(count_entities "services" "class.*Service\|Service")
-  local events=$(count_entities "events" "class.*Event\|DomainEvent")
-
-  # Write DDD metrics
-  cat > "$DDD_FILE" << EOF
-{
-  "timestamp": "$(date -Iseconds)",
-  "progress": $progress,
-  "domains": {
-    ${domain_scores%,*}
-  },
-  "completed": $completed_domains,
-  "total": ${#DOMAINS[@]},
-  "artifacts": {
-    "entities": $entities,
-    "valueObjects": $value_objects,
-    "aggregates": $aggregates,
-    "repositories": $repositories,
-    "services": $services,
-    "domainEvents": $events
-  }
-}
-EOF
-
-  # Update v3-progress.json
-  if [ -f "$V3_PROGRESS" ] && command -v jq &>/dev/null; then
-    jq --argjson progress "$progress" --argjson completed "$completed_domains" \
-      '.ddd.progress = $progress | .domains.completed = $completed' \
-      "$V3_PROGRESS" > "$V3_PROGRESS.tmp" && mv "$V3_PROGRESS.tmp" "$V3_PROGRESS"
-  fi
-
-  echo "[$(date +%H:%M:%S)] ✓ DDD: ${progress}% | Domains: $completed_domains/${#DOMAINS[@]} | Entities: $entities | Services: $services"
-
-  date +%s > "$LAST_RUN_FILE"
-}
-
-case "${1:-check}" in
-  "run"|"track") track_ddd ;;
-  "check") should_run && track_ddd || echo "[$(date +%H:%M:%S)] Skipping (throttled)" ;;
-  "force") rm -f "$LAST_RUN_FILE"; track_ddd ;;
-  "status")
-    if [ -f "$DDD_FILE" ]; then
-      jq -r '"Progress: \(.progress)% | Domains: \(.completed)/\(.total) | Entities: \(.artifacts.entities) | Services: \(.artifacts.services)"' "$DDD_FILE"
-    else
-      echo "No DDD data available"
-    fi
-    ;;
-  *) echo "Usage: $0 [run|check|force|status]" ;;
-esac
+#!/bin/bash
+# Claude Flow V3 - DDD Progress Tracker Worker
+# Tracks Domain-Driven Design implementation progress
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
+METRICS_DIR="$PROJECT_ROOT/.claude-flow/metrics"
+DDD_FILE="$METRICS_DIR/ddd-progress.json"
+V3_PROGRESS="$METRICS_DIR/v3-progress.json"
+LAST_RUN_FILE="$METRICS_DIR/.ddd-last-run"
+
+mkdir -p "$METRICS_DIR"
+
+# V3 Target Domains
+DOMAINS=("agent-lifecycle" "task-execution" "memory-management" "coordination" "shared-kernel")
+
+should_run() {
+  if [ ! -f "$LAST_RUN_FILE" ]; then return 0; fi
+  local last_run=$(cat "$LAST_RUN_FILE" 2>/dev/null || echo "0")
+  local now=$(date +%s)
+  [ $((now - last_run)) -ge 600 ]  # 10 minutes
+}
+
+check_domain() {
+  local domain="$1"
+  local domain_path="$PROJECT_ROOT/v3/@claude-flow/$domain"
+  local alt_path="$PROJECT_ROOT/src/domains/$domain"
+
+  local score=0
+  local max_score=100
+
+  # Check if domain directory exists (20 points)
+  if [ -d "$domain_path" ] || [ -d "$alt_path" ]; then
+    score=$((score + 20))
+    local path="${domain_path:-$alt_path}"
+    [ -d "$domain_path" ] && path="$domain_path" || path="$alt_path"
+
+    # Check for domain layer (15 points)
+    [ -d "$path/domain" ] || [ -d "$path/src/domain" ] && score=$((score + 15))
+
+    # Check for application layer (15 points)
+    [ -d "$path/application" ] || [ -d "$path/src/application" ] && score=$((score + 15))
+
+    # Check for infrastructure layer (15 points)
+    [ -d "$path/infrastructure" ] || [ -d "$path/src/infrastructure" ] && score=$((score + 15))
+
+    # Check for API/interface layer (10 points)
+    [ -d "$path/api" ] || [ -d "$path/src/api" ] && score=$((score + 10))
+
+    # Check for tests (15 points)
+    local test_count=$(find "$path" -name "*.test.ts" -o -name "*.spec.ts" 2>/dev/null | wc -l)
+    [ "$test_count" -gt 0 ] && score=$((score + 15))
+
+    # Check for index/exports (10 points)
+    [ -f "$path/index.ts" ] || [ -f "$path/src/index.ts" ] && score=$((score + 10))
+  fi
+
+  echo "$score"
+}
+
+count_entities() {
+  local type="$1"
+  local pattern="$2"
+
+  find "$PROJECT_ROOT/v3" "$PROJECT_ROOT/src" -name "*.ts" 2>/dev/null | \
+    xargs grep -l "$pattern" 2>/dev/null | \
+    grep -v node_modules | grep -v ".test." | wc -l || echo "0"
+}
+
+track_ddd() {
+  echo "[$(date +%H:%M:%S)] Tracking DDD progress..."
+
+  local total_score=0
+  local domain_scores=""
+  local completed_domains=0
+
+  for domain in "${DOMAINS[@]}"; do
+    local score=$(check_domain "$domain")
+    total_score=$((total_score + score))
+    domain_scores="$domain_scores\"$domain\": $score, "
+
+    [ "$score" -ge 50 ] && completed_domains=$((completed_domains + 1))
+  done
+
+  # Calculate overall progress
+  local max_total=$((${#DOMAINS[@]} * 100))
+  local progress=$((total_score * 100 / max_total))
+
+  # Count DDD artifacts
+  local entities=$(count_entities "entities" "class.*Entity\|interface.*Entity")
+  local value_objects=$(count_entities "value-objects" "class.*VO\|ValueObject")
+  local aggregates=$(count_entities "aggregates" "class.*Aggregate\|AggregateRoot")
+  local repositories=$(count_entities "repositories" "interface.*Repository\|Repository")
+  local services=$(count_entities "services" "class.*Service\|Service")
+  local events=$(count_entities "events" "class.*Event\|DomainEvent")
+
+  # Write DDD metrics
+  cat > "$DDD_FILE" << EOF
+{
+  "timestamp": "$(date -Iseconds)",
+  "progress": $progress,
+  "domains": {
+    ${domain_scores%,*}
+  },
+  "completed": $completed_domains,
+  "total": ${#DOMAINS[@]},
+  "artifacts": {
+    "entities": $entities,
+    "valueObjects": $value_objects,
+    "aggregates": $aggregates,
+    "repositories": $repositories,
+    "services": $services,
+    "domainEvents": $events
+  }
+}
+EOF
+
+  # Update v3-progress.json
+  if [ -f "$V3_PROGRESS" ] && command -v jq &>/dev/null; then
+    jq --argjson progress "$progress" --argjson completed "$completed_domains" \
+      '.ddd.progress = $progress | .domains.completed = $completed' \
+      "$V3_PROGRESS" > "$V3_PROGRESS.tmp" && mv "$V3_PROGRESS.tmp" "$V3_PROGRESS"
+  fi
+
+  echo "[$(date +%H:%M:%S)] ✓ DDD: ${progress}% | Domains: $completed_domains/${#DOMAINS[@]} | Entities: $entities | Services: $services"
+
+  date +%s > "$LAST_RUN_FILE"
+}
+
+case "${1:-check}" in
+  "run"|"track") track_ddd ;;
+  "check") should_run && track_ddd || echo "[$(date +%H:%M:%S)] Skipping (throttled)" ;;
+  "force") rm -f "$LAST_RUN_FILE"; track_ddd ;;
+  "status")
+    if [ -f "$DDD_FILE" ]; then
+      jq -r '"Progress: \(.progress)% | Domains: \(.completed)/\(.total) | Entities: \(.artifacts.entities) | Services: \(.artifacts.services)"' "$DDD_FILE"
+    else
+      echo "No DDD data available"
+    fi
+    ;;
+  *) echo "Usage: $0 [run|check|force|status]" ;;
+esac

package/.claude/helpers/github-safe.js

@@ -1,156 +1,156 @@
-#!/usr/bin/env node
-/**
- * Safe GitHub CLI Helper — v1.0.0
- *
- * Prevents injection issues when using `gh` commands with untrusted content
- * (PR bodies, issue bodies, comment bodies) by routing the body through a
- * temp file and using `--body-file` rather than interpolating into shell args.
- *
- * ADR-127 Phase 2 hardening:
- *   - GITHUB_SAFE_VERSION exported for smoke assertions.
- *   - Explicit 256KB body cap: rejects oversized bodies before any temp-file
- *     write, matching the GitHub API `body` field limit.
- *   - Strict error handling: all execSync calls inside try/catch; cleanup in
- *     finally; non-zero exit on any error.
- *   - GITHUB_SAFE_DRY_RUN=1 env-var skips the actual `gh` exec for testing.
- *
- * Usage:
- *   ./github-safe.js issue comment 123 "Message with \`backticks\`"
- *   ./github-safe.js pr create --title "Title" --body "Complex body"
- */
-
-import { execSync, execFileSync } from 'child_process';
-import { writeFileSync, unlinkSync } from 'fs';
-import { tmpdir } from 'os';
-import { join } from 'path';
-import { randomBytes } from 'crypto';
-
-// Version constant — asserted by smoke-github-safe-injection.mjs.
-export const GITHUB_SAFE_VERSION = '1.0.0';
-
-// Maximum body size allowed (bytes).  The GitHub API enforces 65536 chars for
-// issue/PR bodies; the CLI is more lenient but the 256KB limit is a
-// conservative safety cap that prevents accidental oversized writes.
-const MAX_BODY_BYTES = 256 * 1024;
-
-const args = process.argv.slice(2);
-
-if (args.length < 2) {
-  console.log(`
-Safe GitHub CLI Helper v${GITHUB_SAFE_VERSION}
-
-Usage:
-  ./github-safe.js issue comment <number> <body>
-  ./github-safe.js pr comment <number> <body>
-  ./github-safe.js issue create --title <title> --body <body>
-  ./github-safe.js pr create --title <title> --body <body>
-
-This helper prevents injection issues with special characters:
-- Backticks in code examples
-- Command substitution $(...)
-- Semicolons and other shell metacharacters
-- Oversized bodies (> 256 KB rejected)
-`);
-  process.exit(1);
-}
-
-const [command, subcommand, ...restArgs] = args;
-
-// Handle commands that need body content
-if ((command === 'issue' || command === 'pr') &&
-    (subcommand === 'comment' || subcommand === 'create')) {
-
-  let bodyIndex = -1;
-  let body = '';
-
-  if (subcommand === 'comment' && restArgs.length >= 2) {
-    // Simple format: github-safe.js issue comment 123 "body"
-    body = restArgs[1];
-    bodyIndex = 1;
-  } else {
-    // Flag format: --body "content"
-    bodyIndex = restArgs.indexOf('--body');
-    if (bodyIndex !== -1 && bodyIndex < restArgs.length - 1) {
-      body = restArgs[bodyIndex + 1];
-    }
-  }
-
-  if (body) {
-    // Enforce 256KB cap before any file I/O.
-    const bodyBytes = Buffer.byteLength(body, 'utf8');
-    if (bodyBytes > MAX_BODY_BYTES) {
-      console.error(
-        `[ERROR] Body exceeds maximum allowed size (${bodyBytes} bytes > ${MAX_BODY_BYTES} bytes). ` +
-        'GitHub API body fields are capped at 256KB. Truncate the body before passing it to github-safe.js.'
-      );
-      process.exit(1);
-    }
-
-    // Use temporary file for body content — never interpolate into argv.
-    const tmpFile = join(tmpdir(), `gh-body-${randomBytes(8).toString('hex')}.tmp`);
-
-    try {
-      writeFileSync(tmpFile, body, 'utf8');
-
-      // Build new command with --body-file
-      const newArgs = [...restArgs];
-      if (subcommand === 'comment' && bodyIndex === 1) {
-        // Replace positional body arg with --body-file
-        newArgs[1] = '--body-file';
-        newArgs.push(tmpFile);
-      } else if (bodyIndex !== -1) {
-        // Replace --body flag pair with --body-file
-        newArgs[bodyIndex] = '--body-file';
-        newArgs[bodyIndex + 1] = tmpFile;
-      }
-
-      // Skip actual gh exec in dry-run mode (used by smoke tests).
-      if (process.env.GITHUB_SAFE_DRY_RUN === '1') {
-        const ghArgs = [command, subcommand, ...newArgs];
-        console.log(`[DRY-RUN] gh ${ghArgs.join(' ')}`);
-        process.exit(0);
-      }
-
-      const ghArgv = [command, subcommand, ...newArgs];
-      console.log(`Executing: gh ${ghArgv.join(' ')}`);
-
-      // Use execFileSync to avoid shell interpolation — args are passed as an
-      // array so shell metacharacters in tmpFile path cannot be exploited.
-      execFileSync('gh', ghArgv, {
-        stdio: 'inherit',
-        timeout: 30000,
-      });
-
-    } catch (error) {
-      console.error('[ERROR]', error.message);
-      process.exit(1);
-    } finally {
-      // Always clean up the temp file.
-      try { unlinkSync(tmpFile); } catch (_) { /* ignore cleanup errors */ }
-    }
-  } else {
-    // No body content — execute normally (no injection risk for args).
-    if (process.env.GITHUB_SAFE_DRY_RUN === '1') {
-      console.log(`[DRY-RUN] gh ${args.join(' ')}`);
-      process.exit(0);
-    }
-    try {
-      execFileSync('gh', args, { stdio: 'inherit' });
-    } catch (error) {
-      console.error('[ERROR]', error.message);
-      process.exit(1);
-    }
-  }
-} else {
-  // Non-body commands — execute normally.
-  if (process.env.GITHUB_SAFE_DRY_RUN === '1') {
-    console.log(`[DRY-RUN] gh ${args.join(' ')}`);
-    process.exit(0);
-  }
-  try {
-    execFileSync('gh', args, { stdio: 'inherit' });
-  } catch (error) {
-    console.error('[ERROR]', error.message);
-    process.exit(1);
-  }
-}
+#!/usr/bin/env node
+/**
+ * Safe GitHub CLI Helper — v1.0.0
+ *
+ * Prevents injection issues when using `gh` commands with untrusted content
+ * (PR bodies, issue bodies, comment bodies) by routing the body through a
+ * temp file and using `--body-file` rather than interpolating into shell args.
+ *
+ * ADR-127 Phase 2 hardening:
+ *   - GITHUB_SAFE_VERSION exported for smoke assertions.
+ *   - Explicit 256KB body cap: rejects oversized bodies before any temp-file
+ *     write, matching the GitHub API `body` field limit.
+ *   - Strict error handling: all execSync calls inside try/catch; cleanup in
+ *     finally; non-zero exit on any error.
+ *   - GITHUB_SAFE_DRY_RUN=1 env-var skips the actual `gh` exec for testing.
+ *
+ * Usage:
+ *   ./github-safe.js issue comment 123 "Message with \`backticks\`"
+ *   ./github-safe.js pr create --title "Title" --body "Complex body"
+ */
+
+import { execSync, execFileSync } from 'child_process';
+import { writeFileSync, unlinkSync } from 'fs';
+import { tmpdir } from 'os';
+import { join } from 'path';
+import { randomBytes } from 'crypto';
+
+// Version constant — asserted by smoke-github-safe-injection.mjs.
+export const GITHUB_SAFE_VERSION = '1.0.0';
+
+// Maximum body size allowed (bytes).  The GitHub API enforces 65536 chars for
+// issue/PR bodies; the CLI is more lenient but the 256KB limit is a
+// conservative safety cap that prevents accidental oversized writes.
+const MAX_BODY_BYTES = 256 * 1024;
+
+const args = process.argv.slice(2);
+
+if (args.length < 2) {
+  console.log(`
+Safe GitHub CLI Helper v${GITHUB_SAFE_VERSION}
+
+Usage:
+  ./github-safe.js issue comment <number> <body>
+  ./github-safe.js pr comment <number> <body>
+  ./github-safe.js issue create --title <title> --body <body>
+  ./github-safe.js pr create --title <title> --body <body>
+
+This helper prevents injection issues with special characters:
+- Backticks in code examples
+- Command substitution $(...)
+- Semicolons and other shell metacharacters
+- Oversized bodies (> 256 KB rejected)
+`);
+  process.exit(1);
+}
+
+const [command, subcommand, ...restArgs] = args;
+
+// Handle commands that need body content
+if ((command === 'issue' || command === 'pr') &&
+    (subcommand === 'comment' || subcommand === 'create')) {
+
+  let bodyIndex = -1;
+  let body = '';
+
+  if (subcommand === 'comment' && restArgs.length >= 2) {
+    // Simple format: github-safe.js issue comment 123 "body"
+    body = restArgs[1];
+    bodyIndex = 1;
+  } else {
+    // Flag format: --body "content"
+    bodyIndex = restArgs.indexOf('--body');
+    if (bodyIndex !== -1 && bodyIndex < restArgs.length - 1) {
+      body = restArgs[bodyIndex + 1];
+    }
+  }
+
+  if (body) {
+    // Enforce 256KB cap before any file I/O.
+    const bodyBytes = Buffer.byteLength(body, 'utf8');
+    if (bodyBytes > MAX_BODY_BYTES) {
+      console.error(
+        `[ERROR] Body exceeds maximum allowed size (${bodyBytes} bytes > ${MAX_BODY_BYTES} bytes). ` +
+        'GitHub API body fields are capped at 256KB. Truncate the body before passing it to github-safe.js.'
+      );
+      process.exit(1);
+    }
+
+    // Use temporary file for body content — never interpolate into argv.
+    const tmpFile = join(tmpdir(), `gh-body-${randomBytes(8).toString('hex')}.tmp`);
+
+    try {
+      writeFileSync(tmpFile, body, 'utf8');
+
+      // Build new command with --body-file
+      const newArgs = [...restArgs];
+      if (subcommand === 'comment' && bodyIndex === 1) {
+        // Replace positional body arg with --body-file
+        newArgs[1] = '--body-file';
+        newArgs.push(tmpFile);
+      } else if (bodyIndex !== -1) {
+        // Replace --body flag pair with --body-file
+        newArgs[bodyIndex] = '--body-file';
+        newArgs[bodyIndex + 1] = tmpFile;
+      }
+
+      // Skip actual gh exec in dry-run mode (used by smoke tests).
+      if (process.env.GITHUB_SAFE_DRY_RUN === '1') {
+        const ghArgs = [command, subcommand, ...newArgs];
+        console.log(`[DRY-RUN] gh ${ghArgs.join(' ')}`);
+        process.exit(0);
+      }
+
+      const ghArgv = [command, subcommand, ...newArgs];
+      console.log(`Executing: gh ${ghArgv.join(' ')}`);
+
+      // Use execFileSync to avoid shell interpolation — args are passed as an
+      // array so shell metacharacters in tmpFile path cannot be exploited.
+      execFileSync('gh', ghArgv, {
+        stdio: 'inherit',
+        timeout: 30000,
+      });
+
+    } catch (error) {
+      console.error('[ERROR]', error.message);
+      process.exit(1);
+    } finally {
+      // Always clean up the temp file.
+      try { unlinkSync(tmpFile); } catch (_) { /* ignore cleanup errors */ }
+    }
+  } else {
+    // No body content — execute normally (no injection risk for args).
+    if (process.env.GITHUB_SAFE_DRY_RUN === '1') {
+      console.log(`[DRY-RUN] gh ${args.join(' ')}`);
+      process.exit(0);
+    }
+    try {
+      execFileSync('gh', args, { stdio: 'inherit' });
+    } catch (error) {
+      console.error('[ERROR]', error.message);
+      process.exit(1);
+    }
+  }
+} else {
+  // Non-body commands — execute normally.
+  if (process.env.GITHUB_SAFE_DRY_RUN === '1') {
+    console.log(`[DRY-RUN] gh ${args.join(' ')}`);
+    process.exit(0);
+  }
+  try {
+    execFileSync('gh', args, { stdio: 'inherit' });
+  } catch (error) {
+    console.error('[ERROR]', error.message);
+    process.exit(1);
+  }
+}